Edit tour

Windows Analysis Report
https://att-mail-987654.weebly.com/

Overview

General Information

Sample URL:	https://att-mail-987654.weebly.com/
Analysis ID:	1533206
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected phishing page (A)

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

Yara detected HtmlPhish20

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1728 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6656 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1920,i,5304051130138597637,11614032298971796059,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://att-mail-987654.weebly.com/" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_266	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security
dropped/chromecache_266	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.1.pages.csv	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security

Suricata Signatures

ET PHISHING Phishing Landing via Weebly.com M1 2016-02-02

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-14T14:19:45.429136+0200	2032366	2	Possible Social Engineering Attempted	74.115.51.9	443	192.168.2.11	49710	TCP

ET PHISHING Phishing Landing via Weebly.com M2 2016-02-02

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-14T14:19:45.429136+0200	2032367	2	Possible Social Engineering Attempted	74.115.51.9	443	192.168.2.11	49710	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://att-mail-987654.weebly.com/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://att-mail-987654.weebly.com/

LLM: Score: 9 Reasons: The brand AT&T is a well-known telecommunications company., The legitimate domain for AT&T is att.com., The URL 'att-mail-987654.weebly.com' does not match the legitimate domain., The use of 'weebly.com' suggests a free website hosting service, which is often used for phishing., The subdomain 'att-mail-987654' is suspicious and not associated with AT&T's official domains., The presence of input fields for 'Email or User ID' is typical for phishing attempts to capture user credentials. DOM: 0.1.pages.csv

AI detected phishing page (A)

Source: https://att-mail-987654.weebly.com/

LLM: Score: 9 Reasons: The brand AT&T is a well-known telecommunications company., The legitimate domain for AT&T is att.com., The URL provided is att-mail-987654.weebly.com, which does not match the legitimate domain., The use of 'weebly.com' indicates a free website hosting service, which is often used for phishing., The presence of 'att-mail' in the subdomain is suspicious and suggests an attempt to mimic AT&T's branding., The URL includes a number sequence '987654', which is unusual and could be an attempt to bypass detection. DOM: 0.1.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: dropped/chromecache_266, type: DROPPED

Yara detected HtmlPhish20

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_266, type: DROPPED

Source: https://att-mail-987654.weebly.com/	HTTP Parser: Number of links: 0
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: Number of links: 0

Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842

HTTP Parser: Base64 decoded: [{"linkLabel":"Legal policy center","linkURL":"https://www.att.com/legal/legal-policy-center.html"}, {"linkLabel":"Privacy policy","linkURL":"https://about.att.com/sites/privacy_policy"}, {"linkLabel":"Terms of use","linkURL":"https://www.att.com/legal/te...

Source: https://att-mail-987654.weebly.com/	HTTP Parser: Title: Login Screen does not match URL
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: Title: Login Screen does not match URL

Source: https://att-mail-987654.weebly.com/

HTTP Parser: Form action: https://att-mail-987654.weebly.com/ajax/apps/formSubmitAjax.php

Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: Iframe src: https://cdn.quantummetric.com/helpers/blank
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: Iframe src: https://cdn.quantummetric.com/helpers/blank

Source: https://att-mail-987654.weebly.com/	HTTP Parser: No favicon
Source: https://att-mail-987654.weebly.com/	HTTP Parser: No favicon

Source: https://att-mail-987654.weebly.com/	HTTP Parser: No <meta name="author".. found
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: No <meta name="author".. found
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: No <meta name="author".. found
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: No <meta name="author".. found
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: No <meta name="author".. found

Source: https://att-mail-987654.weebly.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: No <meta name="copyright".. found
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: No <meta name="copyright".. found
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: No <meta name="copyright".. found
Source: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49784 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.11:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.11:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.11:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.11:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.11:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.11:50067 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: login.yahoo.com to https://att-yahoo.att.net/fim/sps/att-yahoo/saml20/login?samlrequest=jvjbt8iwfp4rs9%2b7gydasbgueelqcqwffdglpbcarz1tt%2bi%2fdzcs4sm06cs5pf1up7p5v545fwgjlixq4priackuf%2ficouoywrdohs8mzbowiivspnihnyuy69qppshdtyrklymirhgiaq6gweb2i6cncv2fffpzxvsgniuxog1n9ackkxpqe9cvyhdybskuwlsy4nmzogvpftnukzep3gsppgptsjpfvipmglmlyfkpzadvfcgry7qzxkbofxtko9fkqjgb3je8pnlad5oays7hnajofdjc1kpgllcwxljpixt64rghpg7gsrcs0k%2bpo5kgb8jz9ulvhexcgxj67iymeuysld6%2b7jmwobic9hm9%2fydj5lxenlgjot530krv14epq6cxlfe8sdfzrve7nrivjx%2fartf7b7ioopg5xjblyakdftt0bmendpqujxdjqvoul5ldsujgncyeno6rxmnf%2fvqy8q8%3d&relaystate=https%3a%2f%2fcurrently.att.yahoo.com%2f&.lts=1728908420&target=https%3a%2f%2fcurrently.att.yahoo.com%2f&forceauthn=true

Source: Network traffic	Suricata IDS: 2032366 - Severity 2 - ET PHISHING Phishing Landing via Weebly.com M1 2016-02-02 : 74.115.51.9:443 -> 192.168.2.11:49710
Source: Network traffic	Suricata IDS: 2032367 - Severity 2 - ET PHISHING Phishing Landing via Weebly.com M2 2016-02-02 : 74.115.51.9:443 -> 192.168.2.11:49710

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49784 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/MutationObserver.js HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1720804667 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /files/templateArtifacts.js?1720804667 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /css/sites.css?buildTime=1720803349 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/old/fancybox.css?1720803349 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/social-icons.css?buildtime=1720803349 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Karla/font.css?2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto_Mono/font.css?2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Oswald/font.css?2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/0/2/150218705/published/at-t-logo-2016-svg.png?1720787646 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/0/2/150218705/published/nc.png?1720787398 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /files/theme/MutationObserver.js HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.8.3.min.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lang/en/stl.js?buildTime=1720803349& HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/site/main.js?buildTime=1720803349 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/0/2/150218705/published/nc.png?1720787398 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/0/2/150218705/published/at-t-logo-2016-svg.png?1720787646 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /js/site/footerSignup.js?buildTime=1728589706 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/templateArtifacts.js?1720804667 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.8.3.min.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/plugins.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/site/footerSignup.js?buildTime=1728589706 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.pxuMenu.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /js/lang/en/stl.js?buildTime=1720803349& HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/site/main.js?buildTime=1720803349 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.trend.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.revealer.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /files/theme/custom-1.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /js/site/main-customer-accounts-site.js?buildTime=1720803349 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/images/arrow-light.svg?1720804667 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://att-mail-987654.weebly.com/files/main_style.css?1720804667Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto_Mono/regular.woff2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://att-mail-987654.weebly.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Karla/bold.woff2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://att-mail-987654.weebly.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn2.editmysite.com/fonts/Karla/font.css?2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/plugins.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.pxuMenu.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /files/theme/images/arrow-light.svg?1720804667 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.trend.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /js/wsnbn/snowday262.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.revealer.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /files/theme/custom-1.js?1720786820 HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
Source: global traffic	HTTP traffic detected: GET /js/site/main-customer-accounts-site.js?buildTime=1720803349 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?_=1728908387555 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /js/wsnbn/snowday262.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q; _snow_ses.30ea=*; _snow_id.30ea=c5c9a589-7ef4-4fa1-97a0-79e59709a466.1728908388.1.1728908388.1728908388.5ab037ce-74d8-42dc-a0e5-63a37bb7ecbb
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?_=1728908387555 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q; _snow_ses.30ea=; _snow_id.30ea=c5c9a589-7ef4-4fa1-97a0-79e59709a466.1728908388.1.1728908388.1728908388.5ab037ce-74d8-42dc-a0e5-63a37bb7ecbb
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=dcb77132-a9e3-4ad8-b9b0-295383eeae3a
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q; _snow_ses.30ea=*; _snow_id.30ea=c5c9a589-7ef4-4fa1-97a0-79e59709a466.1728908388.1.1728908388.1728908388.5ab037ce-74d8-42dc-a0e5-63a37bb7ecbb
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7RCnMFwdRv3hZG9&MD=dvAMlg1G HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: att.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: currently.att.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://currently.att.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-loader-2.7.21-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow.yhome-atomic.c9493b0439b3a8ef64a3f6b7f532117c.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=900%2Cseamless&device=desktop&intl=us&rid=4vh116tjgq33s&site=fp&t=1728908412859 HTTP/1.1Host: currently.att.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
Source: global traffic	HTTP traffic detected: GET /rz/p/att_homepage_en-US_s_f_p_bestfit_homepage.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/header_1x-1479864976616.min.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kr/assets/spritify-sprite-light-fd484ded-e3dce7a4.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /version/6.4.1/cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/NotificationHistory.getHistory;count=5;imageTag=img%3A40x40%7C2%7C80;theme=default;notificationTypes=breakingNews;lastUpdate=1728908413;loadInHpViewer=true;includePersonalized=;partner=att HTTP/1.1Host: currently.att.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
Source: global traffic	HTTP traffic detected: GET /issueIUCookie?signature=gaeDwJGhlY_20JmbE7CMXkH8u4QFHhCZnW9zcs-j7YM=&partner=sbc&ts=1728908413 HTTP/1.1Host: api.login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/cerebro_min.js HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/CwIwq1WdTD1rWMAuQ4Mqwg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/thedailybeast.com/d8a2de6cb16f498e74de09733e4a87d0.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-loader-2.7.21-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/q6GKlQrNWZL2GH0uS9WZAg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_huffington_post_584/22aad6ac37ba7c2ebd256c0508355ff0.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/TXjvVjT6BxITti_rfSctrA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/f6c74ee0-89ce-11ef-9ebb-51a5b22ff008.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/header_1x-1479864976616.min.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/att_homepage_en-US_s_f_p_bestfit_homepage.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/gjr9LW9dHL.LMH20gjRF3g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/4d612b01abae8be4fec5c774c34a1d3f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kr/assets/spritify-sprite-light-fd484ded-e3dce7a4.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/RdGJULZQ_0HBS0fKJ4Kq8g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/e8be05122130d6da406284fc8b35524c.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderEnd&code=pageRender&bucket=900%2Cseamless&device=desktop&intl=us&rid=4vh116tjgq33s&site=fp&t=1728908412863 HTTP/1.1Host: currently.att.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
Source: global traffic	HTTP traffic detected: GET /issueIUCookie?signature=gaeDwJGhlY_20JmbE7CMXkH8u4QFHhCZnW9zcs-j7YM=&partner=sbc&ts=1728908413 HTTP/1.1Host: api.login.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=fPBofgIebZhYWUQINsoAqqmG5meI&v=1
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/7QJM3GN5YBbg7HUo1M3jNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_telegraph_258/767c31696323f68d04b163e892ed999e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/cerebro_min.js HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=fPBofgIebZhYWUQINsoAqqmG5meI&v=1
Source: global traffic	HTTP traffic detected: GET /ok/u/assets/img/spinner-24x24-anim.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/CwIwq1WdTD1rWMAuQ4Mqwg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/thedailybeast.com/d8a2de6cb16f498e74de09733e4a87d0.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.c9493b0439b3a8ef64a3f6b7f532117c.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/analytics-3.54.3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/NotificationHistory.getHistory;count=5;imageTag=img%3A40x40%7C2%7C80;theme=default;notificationTypes=breakingNews;lastUpdate=1728908413;loadInHpViewer=true;includePersonalized=;partner=att HTTP/1.1Host: currently.att.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=fPBofgIebZhYWUQINsoAqqmG5meI&v=1
Source: global traffic	HTTP traffic detected: GET /oa/consent.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/q6GKlQrNWZL2GH0uS9WZAg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_huffington_post_584/22aad6ac37ba7c2ebd256c0508355ff0.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/TXjvVjT6BxITti_rfSctrA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/f6c74ee0-89ce-11ef-9ebb-51a5b22ff008.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/RdGJULZQ_0HBS0fKJ4Kq8g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/e8be05122130d6da406284fc8b35524c.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/gjr9LW9dHL.LMH20gjRF3g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/4d612b01abae8be4fec5c774c34a1d3f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/performance?ybar-init_0=1.6000000000058208&ybar-mod-sidenav_0=0.40000000002328306&ybar-mod-logo_0=0.39999999999417923&ybar-mod-searchbox_0=0.29999999998835847&ybar-mod-assistjs_0=3.2999999999883585&ybar-mod-adaptivenav_0=0.20000000001164153&ybar-account-init_0=0.5999999999767169&ybar-mail-init_0=1.3000000000174623&ybar-mod-navigation_0=13&ybar-mod-notification_0=2.3000000000174623&src=ybar&_rdn=414547&apptype=default&rid=4vh116tjgq33s&bucket=900%2Cseamless&device=desktop&osName=windows%20nt&browserName=chrome&browserVersion=117.0&site=homepage HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=fPBofgIebZhYWUQINsoAqqmG5meI&v=1
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/7QJM3GN5YBbg7HUo1M3jNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_telegraph_258/767c31696323f68d04b163e892ed999e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-core-1.65.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/partner-portals/att/adobe_analytics/1.1.20/s_code_yahoo.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/hp-viewer/desktop_1.11.185.modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uc/sf/0.1.434/js/safe.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__rapid-worker-1.2.js HTTP/1.1Host: currently.att.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1
Source: global traffic	HTTP traffic detected: GET /ok/u/assets/img/spinner-24x24-anim.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/analytics-3.54.3.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oa/consent.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-core-1.65.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1728908416462 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://currently.att.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?.lang=en-US&src=homepage&partner=sbc&.done=https%3A%2F%2Fcurrently.att.yahoo.com%2F&pspid=1197744451&activity=ybar-signin HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CvVersion%7C5.2.0
Source: global traffic	HTTP traffic detected: GET /saml2/atthaloc/request?yid=&src=homepage&done=https%3A%2F%2Fcurrently.att.yahoo.com%2F HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513218%7C6%7CMCAAMB-1729513218%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1728915618s%7CNONE%7CvVersion%7C5.2.0; AS=v=1&s=GHbgQ5Qz
Source: global traffic	HTTP traffic detected: GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-2.1.135.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: att.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=40870874266210334561808127464824079183
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/partner-portals/att/adobe_analytics/1.1.20/s_code_yahoo.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1728908416462 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=40870874266210334561808127464824079183
Source: global traffic	HTTP traffic detected: GET /__rapid-worker-1.2.js HTTP/1.1Host: currently.att.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513218%7C6%7CMCAAMB-1729513218%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1728915618s%7CNONE%7CvVersion%7C5.2.0
Source: global traffic	HTTP traffic detected: GET /uc/sf/0.1.434/js/safe.min.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/nR2a_FaR0oKAtiOqOncykg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/3b7a28d0-89cc-11ef-9e3f-7e6e98da5766.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/f1365fOmnZ.4elatJGgP8Q--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/wpix_new_york_city_ny_articles_672/0499bb6503b1adc9da306296f5b6156a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/IKm1uI6ofoB8D8CcUqetHw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/71168fc52590d31ed26a2a8e925c20f6.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/notifications/js/sh-5.17.91.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/LbcXySL6ihB5eG7HKyPptg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/210837c0-89b4-11ef-bdef-60178d6b3891.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/yahoo-hp-att/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest_partner.json HTTP/1.1Host: currently.att.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/w.MaFC_IqxQcYcfu3SsZzw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-08/c4dda7e0-6c7c-11ef-9ffd-4f64f470813e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/PawwvJdese9nx.y2dRiAjQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-08/2b090f10-59a3-11ef-bfdf-b3e37008c82b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/partner-portals/att/foreseev3/092123/gateway.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /du/ay/wnsrvbjmeprtfrnfx.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/prebid/prebid-2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-2.1.135.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=21
Source: global traffic	HTTP traffic detected: GET /libtrc/tr5?abgroup=trecs-1229-enum-refactor_ctrl&pub=yahoo-hp-att HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=21
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9211132908&aam=40870874266210334561808127464824079183 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://att.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202410080101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://currently.att.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; s_sess=%20SC_LINKS%3Dnet%257Ccurrently%257Cdesktop%255E%255ESign%2520in%255E%255Enet%257Ccurrently%257Cdesktop%2520%257C%2520Sign%2520in%255E%255EHeader%255E%255E%3B; s_pers=%20s_nr%3D1728908421125-New%7C1731500421125%3B%20s_vnum%3D1730433600129%2526vn%253D1%7C1730433600129%3B%20s_invisit%3Dtrue%7C1728910221129%3B%20s_lv%3D1728908421132%7C1823516421132%3B%20s_lv_s%3DFirst%2520Visit%7C1728910221132%3B%20gpv_v17%3Dnet%257Ccurrently%257Cdesktop%7C1728910221136%3B; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513218%7C6%7CMCAAMB-1729513218%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1728915621s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.2.0
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/IKm1uI6ofoB8D8CcUqetHw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/71168fc52590d31ed26a2a8e925c20f6.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://att.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/f1365fOmnZ.4elatJGgP8Q--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/wpix_new_york_city_ny_articles_672/0499bb6503b1adc9da306296f5b6156a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/nR2a_FaR0oKAtiOqOncykg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/3b7a28d0-89cc-11ef-9e3f-7e6e98da5766.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/notifications/js/sh-5.17.91.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/yahoo-hp-att/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=21
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/LbcXySL6ihB5eG7HKyPptg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/210837c0-89b4-11ef-bdef-60178d6b3891.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/tr5?abgroup=trecs-1229-enum-refactor_ctrl&pub=yahoo-hp-att HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=21
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202410080101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/w.MaFC_IqxQcYcfu3SsZzw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-08/c4dda7e0-6c7c-11ef-9ffd-4f64f470813e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/PawwvJdese9nx.y2dRiAjQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-08/2b090f10-59a3-11ef-bfdf-b3e37008c82b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/partner-portals/att/foreseev3/092123/gateway.min.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /du/ay/wnsrvbjmeprtfrnfx.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/prebid/prebid-2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mga/sps/oauth/oauth20/authorize?nonce=32tb0unVqn&SPRelayState=https%253A%252F%252Fcurrently.att.yahoo.com%252F&redirect_uri=https%3A%2F%2Fatt-yahoo.att.net%2Fisam%2Fsps%2Foidc%2Frp%2FATT-HBO-RP%2Fredirect%2FYahoo&response_mode=form_post&scope=openid&response_type=id_token&state=CzVEp5j00E&ForceAuthn=true&client_id=m40842 HTTP/1.1Host: oidc.idp.clogin.att.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://att-yahoo.att.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293
Source: global traffic	HTTP traffic detected: GET /dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842 HTTP/1.1Host: signin.att.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://att-yahoo.att.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/styles.css?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/adobe/detm-container-hdr.js HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/timeout_redirect/timeout.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Rg.woff2 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Bd.woff2 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/runtime-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /scripts/att_common.js HTTP/1.1Host: signin-static-js.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/polyfills-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/timeout_redirect/timeout.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/runtime-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/vendor-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/main-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/adobe/detm-container-hdr.js HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/login-general-login-general-module-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/adobe/detm-container-ftr.js HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=3.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1728908427481 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://signin.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://signin.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=40870874266210334561808127464824079183; dextp=21-1-1728908421364\|358-1-1728908422545
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/polyfills-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; AMCV_55633F7A534535110A490D44%40AdobeOrg=T; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/adobe/detm-container-ftr.js HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; AMCV_55633F7A534535110A490D44%40AdobeOrg=T; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/cms/login/default/i18n/en.json?v=22.2.1 HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/images/logos/att_hz_lg_lkp_rgb_pos.svg HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; AMCV_55633F7A534535110A490D44%40AdobeOrg=T; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/main-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; AMCV_55633F7A534535110A490D44%40AdobeOrg=T; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/login-general-login-general-module-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; AMCV_55633F7A534535110A490D44%40AdobeOrg=T; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; AMCV_55633F7A534535110A490D44%40AdobeOrg=T; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=3.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1728908427481 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=40870874266210334561808127464824079183; dextp=21-1-1728908421364\|358-1-1728908422545
Source: global traffic	HTTP traffic detected: GET /scripts/att_common.js HTTP/1.1Host: signin-static-js.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; AMCV_55633F7A534535110A490D44%40AdobeOrg=T; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/cms/login/default/images/ccpa-icon.svg HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/quantum/loaders/quantum-att-loader.js HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; AMCV_55633F7A534535110A490D44%40AdobeOrg=T; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/halo-c-login/vendor-es2015.js?v=23.2.1 HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/images/logos/att_hz_lg_lkp_rgb_pos.svg HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/cms/login/default/i18n/en.json?v=22.2.1 HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /static/siam/en/halo_c/cms/login/default/images/ccpa-icon.svg HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1728908429563 HTTP/1.1Host: fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/quantum/loaders/quantum-att-loader.js HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/quantum/qscripts/quantum-att.js HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1728908429563 HTTP/1.1Host: fls.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/quantum/qscripts/quantum-att.js HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /static/ciam/en/common/js/keepAlive.js HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /static/ciam/en/common/js/keepAlive.js HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C40967056688482462261834634231440381293; aacState=true; c_d_state=AAAAEBPYeCP6Qt0BOqdNpoTmHthWqsWzVEbs11HRfRFUCgZDcE-T5U8-wbI92TbqflM4GYFDu3-T1yrp_-ZiYVHr01envQtZ03VIUcOl3B8YHAPlyKvO2COkYyRKLJRhQMQQSkFiWcOw6uRF3kwJO-mph7tgvNn8E6qm9JTFDdJ-XpgsQxq4Q2X1VPknALoweAu9Ij1I7ADCOexcpYdczd0alT-wWnWtWIMJTfdukEnUXvz7AYR4dCV0F95_NY7yZbLExLYGS_y_iOqbiRvXWooh7hisK9i26N8kUa-XZsw0dYy-WRGnnDxbJPFF-RheUJIW2uU_shOT7rLHjheV7mGF05Srq1bZSPVQdSQAzBWkUvaYe3xtL8wzxrMBd00pq1UMt0L96vKT6hnvUmvrIYHLP6-KolCVfkX-PHIusXDL6BpqcAAHx9oNjixf4MB3pylBN9SM54KHNEdWKE8YuXpAgtpDc4oF2IlUhR2Ext0GGfJ6X8NLhhiX11jBASV2SMJLAeBx6z6OUuP9ofahuGhp2CQ5_uiSy9YFeZ7Qt1pcPc0y-fHVNpc3_KUT-P5cJprsmb5ixccBgq1eej67KOXBbbVvDf4tD8rAAJbUu1cqa7X0MVSPnW8vJd8C1z7Fc8Gbnoc1hLamrwibKh1qEuXk5RHezBUBrLHY5fZ03jz8rh3aPmbpj49KmzondOSbgnkb7L79B5ffLnC6yg_3ItIU4nd9eGnVivR1hEn-Kev48W5XbxAbiUTf8Nm8mjNanZbfwOvPOdh7KrPGCnje_3f46vGqitNt0wHC-1w; cAuthNState=en; Kd4zPCrb=A1kG-YqSAQAAlvfS8dVzpLugsoQSktLQ8isYUZvHrXrmNcxhacKu18wCrkqNAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|e18862170cbe4d6a5807b153efb5e20108455282; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513228%7C6%7CMCAAMB-1729513228%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1728915628s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908432401&z=1&S=0&N=0&P=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908433159&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&U=0b7c981bb1a198d229cb6717627243d8&z=1&Q=2&S=0&N=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7RCnMFwdRv3hZG9&MD=dvAMlg1G HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908433158&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=1&Y=1&X=10fa3aef504b4b7c07ef39d3db70f1b3 HTTP/1.1Host: att-sync.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908434059&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&S=1766&N=7&P=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /helpers/blank HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://signin.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908437406&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&S=1894&N=10&P=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908438195&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=2&S=735&N=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908445746&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=2&S=888&N=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908446644&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&S=6208&N=16&P=3 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908447447&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=2&S=2610&N=3 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908448281&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&S=9500&N=46&P=4 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908452431&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&S=21036&N=68&P=5 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908453545&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=2&S=2919&N=4 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908460001&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=2&S=2945&N=5 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: att.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: att-mail-987654.weebly.com
Source: global traffic	DNS traffic detected: DNS query: cdn2.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ec.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: att.net
Source: global traffic	DNS traffic detected: DNS query: www.att.net
Source: global traffic	DNS traffic detected: DNS query: start.att.net
Source: global traffic	DNS traffic detected: DNS query: currently.att.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: geo.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: geo.query.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: search.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: consent.cmp.oath.com
Source: global traffic	DNS traffic detected: DNS query: edge-mcdn.secure.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: api.login.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.att.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: udc.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: login.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: att.demdex.net
Source: global traffic	DNS traffic detected: DNS query: smetrics.att.com
Source: global traffic	DNS traffic detected: DNS query: att-yahoo.att.net
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: opus.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: noa.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: oidc.idp.clogin.att.com
Source: global traffic	DNS traffic detected: DNS query: signin.att.com
Source: global traffic	DNS traffic detected: DNS query: signin-static-js.att.com
Source: global traffic	DNS traffic detected: DNS query: fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ingest.quantummetric.com
Source: global traffic	DNS traffic detected: DNS query: att-sync.quantummetric.com
Source: global traffic	DNS traffic detected: DNS query: cdn.quantummetric.com

Source: unknown

HTTP traffic detected: POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: att-mail-987654.weebly.comConnection: keep-aliveContent-Length: 83sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/json; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://att-mail-987654.weebly.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://att-mail-987654.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q

Source: chromecache_331.2.dr, chromecache_246.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_179.2.dr, chromecache_162.2.dr, chromecache_272.2.dr, chromecache_192.2.dr	String found in binary or memory: http://pixelunion.net
Source: chromecache_260.2.dr, chromecache_184.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_154.2.dr, chromecache_318.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_260.2.dr, chromecache_184.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_289.2.dr, chromecache_235.2.dr	String found in binary or memory: http://www.google-analytics.com
Source: chromecache_237.2.dr	String found in binary or memory: http://www.omniture.com
Source: chromecache_168.2.dr, chromecache_204.2.dr	String found in binary or memory: http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt
Source: chromecache_157.2.dr	String found in binary or memory: https://att-mail-987654.weebly.com
Source: chromecache_266.2.dr	String found in binary or memory: https://att-mail-987654.weebly.com/
Source: chromecache_266.2.dr	String found in binary or memory: https://att-mail-987654.weebly.com/uploads/1/5/0/2/150218705/published/at-t-logo-2016-svg.png?172078
Source: chromecache_266.2.dr	String found in binary or memory: https://att-mail-987654.weebly.com/uploads/1/5/0/2/150218705/published/nc.png?1720787398
Source: chromecache_234.2.dr, chromecache_256.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=85161
Source: chromecache_234.2.dr, chromecache_256.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=749920
Source: chromecache_312.2.dr, chromecache_247.2.dr	String found in binary or memory: https://cdn.quantummetric.com/helpers/blank
Source: chromecache_210.2.dr, chromecache_267.2.dr	String found in binary or memory: https://cdn.quantummetric.com/qscripts
Source: chromecache_329.2.dr, chromecache_212.2.dr	String found in binary or memory: https://cdn.taboola.com/libtrc/tr5?abgroup=trecs-1229-enum-refactor_ctrl&pub=yahoo-hp-att
Source: chromecache_209.2.dr, chromecache_241.2.dr	String found in binary or memory: https://cdn2.editmysite.com/js/
Source: chromecache_266.2.dr	String found in binary or memory: https://cdn2.editmysite.com/js/jquery-1.8.3.min.js
Source: chromecache_319.2.dr, chromecache_239.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_319.2.dr, chromecache_239.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_319.2.dr, chromecache_239.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_319.2.dr, chromecache_239.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_319.2.dr, chromecache_239.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_195.2.dr	String found in binary or memory: https://ezgif.com/optimize
Source: chromecache_334.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUje6bg.woff2)
Source: chromecache_334.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUjm6bnEr.woff2
Source: chromecache_334.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUJiZTaR.woff2)
Source: chromecache_334.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2)
Source: chromecache_334.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUhiZTaR.woff2)
Source: chromecache_334.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUliZTaR.woff2)
Source: chromecache_334.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUtiZTaR.woff2)
Source: chromecache_334.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xTDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vrtSM1J-gEPT5Ese6hmH
Source: chromecache_334.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xdDF4xlVMF-BfR8bXMIjhOsXG-q2oeuFoqFrlnAIe2Imhk1T8rbociI
Source: chromecache_234.2.dr, chromecache_256.2.dr	String found in binary or memory: https://gist.github.com/megawac/8201012
Source: chromecache_234.2.dr, chromecache_256.2.dr	String found in binary or memory: https://gist.github.com/megawac/8355978
Source: chromecache_234.2.dr, chromecache_256.2.dr	String found in binary or memory: https://github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp
Source: chromecache_234.2.dr, chromecache_256.2.dr	String found in binary or memory: https://github.com/megawac/MutationObserver.js
Source: chromecache_312.2.dr, chromecache_247.2.dr	String found in binary or memory: https://github.com/nodeca/pako/blob/master/LICENSE
Source: chromecache_211.2.dr, chromecache_155.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_211.2.dr, chromecache_155.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.37.0/LICENSE
Source: chromecache_265.2.dr, chromecache_208.2.dr	String found in binary or memory: https://oidc.idp.clogin.att.com/static/pixel-url.img
Source: chromecache_190.2.dr, chromecache_230.2.dr	String found in binary or memory: https://pbs.yahoo.com/lr_sync
Source: chromecache_239.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_239.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_190.2.dr, chromecache_230.2.dr	String found in binary or memory: https://rtb.openx.net/openrtbb/prebidjs
Source: chromecache_276.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_128.png
Source: chromecache_276.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_144.png
Source: chromecache_276.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_152.png
Source: chromecache_276.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_192.png
Source: chromecache_276.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_384.png
Source: chromecache_276.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png
Source: chromecache_276.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_512.png
Source: chromecache_276.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_72.png
Source: chromecache_276.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_96.png
Source: chromecache_167.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/ae/news/circle_news_purple.png
Source: chromecache_190.2.dr, chromecache_230.2.dr	String found in binary or memory: https://s.yimg.com/eh/prebid-config/bp
Source: chromecache_236.2.dr	String found in binary or memory: https://s.yimg.com/pv/static/img/icon-flame-dark-202303010353.gif
Source: chromecache_236.2.dr	String found in binary or memory: https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif
Source: chromecache_289.2.dr, chromecache_235.2.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: chromecache_289.2.dr, chromecache_235.2.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: chromecache_289.2.dr, chromecache_235.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_239.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_319.2.dr, chromecache_239.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_319.2.dr, chromecache_239.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_319.2.dr, chromecache_239.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_331.2.dr, chromecache_246.2.dr	String found in binary or memory: https://twitter.com/jacobrossi/status/480596438489890816
Source: chromecache_190.2.dr, chromecache_230.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/pd
Source: chromecache_235.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: chromecache_289.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?
Source: chromecache_266.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_159.2.dr, chromecache_319.2.dr, chromecache_239.2.dr, chromecache_163.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_319.2.dr, chromecache_239.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/aR-zv8WjtWx4lAw-tRCA-zca/recaptcha__.
Source: chromecache_159.2.dr, chromecache_163.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/aR-zv8WjtWx4lAw-tRCA-zca/recaptcha__en.js
Source: chromecache_210.2.dr, chromecache_267.2.dr, chromecache_312.2.dr, chromecache_247.2.dr	String found in binary or memory: https://www.quantummetric.com/legal/eula
Source: chromecache_210.2.dr, chromecache_267.2.dr, chromecache_312.2.dr, chromecache_247.2.dr	String found in binary or memory: https://www.quantummetric.com/legal/patents/.
Source: chromecache_266.2.dr	String found in binary or memory: https://www.weebly.com/signup?utm_source=internal&utm_medium=footer

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.11:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.11:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.11:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.11:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.11:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.11:50067 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@23/290@128/39

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1920,i,5304051130138597637,11614032298971796059,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://att-mail-987654.weebly.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1920,i,5304051130138597637,11614032298971796059,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://att-mail-987654.weebly.com/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect?	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=85161	0%	URL Reputation	safe
http://hammerjs.github.io/	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	172.217.16.194	true	false	unknown
oidc.idp.clogin.att.com	144.161.106.164	true	false	unknown
att-mail-987654.weebly.com	74.115.51.9	true	true	unknown
tls13.taboola.map.fastly.net	151.101.129.44	true	false	unknown
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	50.112.173.192	true	false	unknown
clcontent.att.com	144.161.106.163	true	false	unknown
cdn.quantummetric.com	104.18.10.213	true	false	unknown
weebly.map.fastly.net	151.101.1.46	true	false	unknown
ds-global3.l7.search.ystg1.b.yahoo.com	212.82.100.137	true	false	unknown
att-sync.quantummetric.com	34.135.199.11	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ingest.quantummetric.com	34.70.212.173	true	false	unknown
me-ycpi-cf-www.g06.yahoodns.net	87.248.119.252	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	99.81.224.135	true	false	unknown
noa-atsv2.media.g03.yahoodns.net	188.125.72.139	true	false	unknown
consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud	3.161.82.22	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	52.58.104.46	true	false	unknown
ds-ats.member.g02.yahoodns.net	212.82.100.140	true	false	unknown
atsv2-fp-shed.wg1.b.yahoo.com	87.248.100.215	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
geo-atsv2.media.g03.yahoodns.net	188.125.72.139	true	false	unknown
udc-ats.media.g03.yahoodns.net	188.125.72.139	true	false	unknown
att.net	144.160.36.42	true	false	unknown
ib.anycast.adnxs.com	185.89.210.90	true	false	unknown
fls.doubleclick.net	216.58.206.70	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.119.252	true	false	unknown
cs964199420.wpc.mucdn.net	152.199.23.180	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
edge-mcdn.secure.yahoo.com	unknown	unknown	false	unknown
cdn2.editmysite.com	unknown	unknown	false	unknown
geo.query.yahoo.com	unknown	unknown	false	unknown
smetrics.att.com	unknown	unknown	false	unknown
geo.yahoo.com	unknown	unknown	false	unknown
att-yahoo.att.net	unknown	unknown	false	unknown
start.att.net	unknown	unknown	false	unknown
www.att.net	unknown	unknown	false	unknown
noa.yahoo.com	unknown	unknown	false	unknown
search.yahoo.com	unknown	unknown	false	unknown
login.yahoo.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
aa.agkn.com	unknown	unknown	false	unknown
udc.yahoo.com	unknown	unknown	false	unknown
consent.cmp.oath.com	unknown	unknown	false	unknown
api.login.yahoo.com	unknown	unknown	false	unknown
signin-static-js.att.com	unknown	unknown	false	unknown
currently.att.yahoo.com	unknown	unknown	false	unknown
signin.att.com	unknown	unknown	false	unknown
opus.analytics.yahoo.com	unknown	unknown	false	unknown
att.demdex.net	unknown	unknown	false	unknown
s.yimg.com	unknown	unknown	false	unknown
www.yahoo.com	unknown	unknown	false	unknown
ec.editmysite.com	unknown	unknown	false	unknown
cdn.taboola.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
www.att.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908447447&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=2&S=2610&N=3	false	unknown
https://att-mail-987654.weebly.com/	true	unknown
https://aa.agkn.com/adscores/g.pixel?sid=9211132908&aam=40870874266210334561808127464824079183	false	unknown
https://signin.att.com/static/ciam/en/common/js/keepAlive.js	false	unknown
https://s.yimg.com/pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css	false	unknown
https://login.yahoo.com/?.lang=en-US&src=homepage&partner=sbc&.done=https%3A%2F%2Fcurrently.att.yahoo.com%2F&pspid=1197744451&activity=ybar-signin	false	unknown
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908452431&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&S=21036&N=68&P=5	false	unknown
https://udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197744451&yhlCT=2&yhlBTMS=1728908416640&yhlClientVer=3.54.3&yhlRnd=97kYXeU3Y6Eituzw&yhlCompressed=0	false	unknown
https://att-mail-987654.weebly.com/files/theme/jquery.pxuMenu.js?1720786820	true	unknown
https://s.yimg.com/uu/api/res/1.2/q6GKlQrNWZL2GH0uS9WZAg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_huffington_post_584/22aad6ac37ba7c2ebd256c0508355ff0.cf.webp	false	unknown
https://att-mail-987654.weebly.com/uploads/1/5/0/2/150218705/published/at-t-logo-2016-svg.png?1720787646	true	unknown
https://att-sync.quantummetric.com/?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908433158&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=1&Y=1&X=10fa3aef504b4b7c07ef39d3db70f1b3	false	unknown
https://att-mail-987654.weebly.com/files/theme/plugins.js?1720786820	true	unknown
https://s.yimg.com/kr/assets/spritify-sprite-light-fd484ded-e3dce7a4.png	false	unknown
https://s.yimg.com/aaq/benji/benji-2.1.135.js	false	unknown
https://s.yimg.com/uu/api/res/1.2/gjr9LW9dHL.LMH20gjRF3g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/4d612b01abae8be4fec5c774c34a1d3f.cf.webp	false	unknown
https://cdn2.editmysite.com/css/old/fancybox.css?1720803349	false	unknown
https://cdn2.editmysite.com/css/sites.css?buildTime=1720803349	false	unknown
https://cdn2.editmysite.com/js/jquery-1.8.3.min.js	false	unknown
https://dpm.demdex.net/id?d_visid_ver=3.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1728908427481	false	unknown
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908445746&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=2&S=888&N=2	false	unknown
https://cdn2.editmysite.com/css/social-icons.css?buildtime=1720803349	false	unknown
https://currently.att.yahoo.com/tdv2_fp/api/resource/NotificationHistory.getHistory;count=5;imageTag=img%3A40x40%7C2%7C80;theme=default;notificationTypes=breakingNews;lastUpdate=1728908413;loadInHpViewer=true;includePersonalized=;partner=att	false	unknown
https://s.yimg.com/aaq/f10d509c/d1ccw66oyq8ex2.js	false	unknown
https://signin.att.com/dynamic/iamLRR/LrrController?IAM_OP=login&appName=m40842&loginSuccessURL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3D32tb0unVqn%26SPRelayState%3Dhttps%25253A%25252F%25252Fcurrently.att.yahoo.com%25252F%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26scope%3Dopenid%26response_type%3Did_token%26state%3DCzVEp5j00E%26ForceAuthn%3Dtrue%26client_id%3Dm40842	false	unknown
https://s.yimg.com/aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js	false	unknown
https://att-mail-987654.weebly.com/files/theme/jquery.trend.js?1720786820	true	unknown
https://s.yimg.com/ss/analytics-3.54.3.js	false	unknown
https://signin.att.com/static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Bd.woff2	false	unknown
https://signin.att.com/static/siam/en/halo_c/halo-c-login/main-es2015.js?v=23.2.1	false	unknown
https://s.yimg.com/uu/api/res/1.2/IKm1uI6ofoB8D8CcUqetHw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/71168fc52590d31ed26a2a8e925c20f6.cf.webp	false	unknown
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908446644&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&S=6208&N=16&P=3	false	unknown
https://s.yimg.com/aaq/wf/wf-loader-2.7.21-modern.js	false	unknown
https://currently.att.yahoo.com/info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=900%2Cseamless&device=desktop&intl=us&rid=4vh116tjgq33s&site=fp&t=1728908412859	false	unknown
https://signin.att.com/static/thirdparty/quantum/loaders/quantum-att-loader.js	false	unknown
https://cdn2.editmysite.com/fonts/Oswald/font.css?2	false	unknown
https://signin.att.com/static/siam/en/halo_c/halo-c-login/vendor-es2015.js?v=23.2.1	false	unknown
https://att-mail-987654.weebly.com/favicon.ico	true	unknown
https://noa.yahoo.com/p?s=1197744451&t=1728908419948&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=att&lang=en-US&region=US&device=desktop&colo=ir2&bucket=900%2Cseamless&rid=4vh116tjgq33s&limitedAds=false&NPA=false&pd=unknown&pt=home&usercountry=US&benjiVersion=2.1.135&prebidVersion=unknown&yahooPrebidVersion=unknown&type=BENJI_SESSION_START	false	unknown
https://consent.cmp.oath.com/version/6.4.1/cmp.js	false	unknown
https://opus.analytics.yahoo.com/tag/opus.js	false	unknown
http://att.net/	false	unknown
https://edge-mcdn.secure.yahoo.com/ybar/cerebro_min.js	false	unknown
https://cdn2.editmysite.com/fonts/Roboto_Mono/regular.woff2	false	unknown
https://signin.att.com/favicon.ico	false	unknown
https://s.yimg.com/uu/api/res/1.2/7QJM3GN5YBbg7HUo1M3jNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_telegraph_258/767c31696323f68d04b163e892ed999e.cf.webp	false	unknown
https://s.yimg.com/uu/api/res/1.2/PawwvJdese9nx.y2dRiAjQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-08/2b090f10-59a3-11ef-bfdf-b3e37008c82b.cf.webp	false	unknown
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908437406&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&S=1894&N=10&P=2	false	unknown
https://dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1728908416462	false	unknown
https://signin.att.com/static/siam/en/halo_c/cms/login/default/images/ccpa-icon.svg	false	unknown
https://cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png	false	unknown
https://cdn2.editmysite.com/js/site/main.js?buildTime=1720803349	false	unknown
https://s.yimg.com/rz/p/att_homepage_en-US_s_f_p_bestfit_homepage.png	false	unknown
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908453545&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&Q=2&S=2919&N=4	false	unknown
https://cdn2.editmysite.com/fonts/Karla/font.css?2	false	unknown
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908434059&H=920c0d6714d8ea733a084095&s=a77db3de86c61afe89b226c70230696a&z=1&S=1766&N=7&P=1	false	unknown
https://att-mail-987654.weebly.com/files/theme/jquery.revealer.js?1720786820	true	unknown
https://s.yimg.com/oa/consent.js	false	unknown
https://signin.att.com/static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Rg.woff2	false	unknown
https://s.yimg.com/uu/api/res/1.2/TXjvVjT6BxITti_rfSctrA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/f6c74ee0-89ce-11ef-9ebb-51a5b22ff008.cf.webp	false	unknown
https://s.yimg.com/cv/apiv2/partner-portals/att/adobe_analytics/1.1.20/s_code_yahoo.js	false	unknown
https://signin.att.com/static/siam/en/halo_c/cms/login/default/i18n/en.json?v=22.2.1	false	unknown
https://att-mail-987654.weebly.com/files/theme/custom-1.js?1720786820	true	unknown
https://s.yimg.com/uc/sf/0.1.434/js/safe.min.js	false	unknown
https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1728908429563	false	unknown
https://currently.att.yahoo.com/manifest_partner.json	false	unknown
https://att-mail-987654.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]	true	unknown
https://s.yimg.com/pv/static/img/header_1x-1479864976616.min.png	false	unknown
https://signin.att.com/static/siam/en/halo_c/halo-c-login/polyfills-es2015.js?v=23.2.1	false	unknown
https://s.yimg.com/nn/lib/metro/g/myy/advertisement_0.0.19.js	false	unknown
https://att-mail-987654.weebly.com/files/main_style.css?1720804667	true	unknown
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fsignin.att.com%2Fdynamic%2FiamLRR%2FLrrController%3FIAM_OP%3Dlogin%26appName%3Dm40842%26loginSuccessURL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253D32tb0unVqn%2526SPRelayState%253Dhttps%2525253A%2525252F%2525252Fcurrently.att.yahoo.com%2525252F%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DCzVEp5j00E%2526ForceAuthn%253Dtrue%2526client_id%253Dm40842&t=1728908431787&v=1728908432401&z=1&S=0&N=0&P=0	false	unknown
https://cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1720803349	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_319.2.dr, chromecache_239.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js	chromecache_211.2.dr, chromecache_155.2.dr	false		unknown
https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_96.png	chromecache_276.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_319.2.dr, chromecache_239.2.dr	false	URL Reputation: safe	unknown
https://ezgif.com/optimize	chromecache_195.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_239.2.dr	false	URL Reputation: safe	unknown
https://www.weebly.com/signup?utm_source=internal&utm_medium=footer	chromecache_266.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_319.2.dr, chromecache_239.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect?	chromecache_289.2.dr, chromecache_235.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js/blob/v3.37.0/LICENSE	chromecache_211.2.dr, chromecache_155.2.dr	false		unknown
http://www.omniture.com	chromecache_237.2.dr	false		unknown
https://twitter.com/jacobrossi/status/480596438489890816	chromecache_331.2.dr, chromecache_246.2.dr	false		unknown
https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png	chromecache_276.2.dr	false		unknown
https://github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp	chromecache_234.2.dr, chromecache_256.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_319.2.dr, chromecache_239.2.dr	false	URL Reputation: safe	unknown
https://www.google.%/ads/ga-audiences?	chromecache_235.2.dr	false		unknown
https://www.google.com/recaptcha/api.js	chromecache_266.2.dr	false		unknown
https://www.google.com/recaptcha/api2/	chromecache_159.2.dr, chromecache_319.2.dr, chromecache_239.2.dr, chromecache_163.2.dr	false		unknown
https://bugs.webkit.org/show_bug.cgi?id=85161	chromecache_234.2.dr, chromecache_256.2.dr	false	URL Reputation: safe	unknown
http://hammerjs.github.io/	chromecache_331.2.dr, chromecache_246.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_319.2.dr, chromecache_239.2.dr	false	URL Reputation: safe	unknown
https://pbs.yahoo.com/lr_sync	chromecache_190.2.dr, chromecache_230.2.dr	false		unknown
https://oidc.idp.clogin.att.com/static/pixel-url.img	chromecache_265.2.dr, chromecache_208.2.dr	false		unknown
https://s.yimg.com/pv/static/img/icon-flame-dark-202303010353.gif	chromecache_236.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_319.2.dr, chromecache_239.2.dr	false	URL Reputation: safe	unknown
https://gist.github.com/megawac/8355978	chromecache_234.2.dr, chromecache_256.2.dr	false		unknown
https://gist.github.com/megawac/8201012	chromecache_234.2.dr, chromecache_256.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
74.115.51.9	att-mail-987654.weebly.com	United States	27647	WEEBLYUS	true
144.161.106.164	oidc.idp.clogin.att.com	United States	797	AMERITECH-ASUS	false
144.161.106.163	clcontent.att.com	United States	797	AMERITECH-ASUS	false
34.70.212.173	ingest.quantummetric.com	United States	15169	GOOGLEUS	false
34.135.199.11	att-sync.quantummetric.com	United States	2686	ATGS-MMD-ASUS	false
212.82.100.137	ds-global3.l7.search.ystg1.b.yahoo.com	United Kingdom	34010	YAHOO-IRDGB	false
151.101.193.44	unknown	United States	54113	FASTLYUS	false
52.210.96.13	unknown	United States	16509	AMAZON-02US	false
151.101.1.46	weebly.map.fastly.net	United States	54113	FASTLYUS	false
67.195.204.151	unknown	United States	26101	YAHOO-3US	false
52.48.180.95	unknown	United States	16509	AMAZON-02US	false
34.30.67.48	unknown	United States	2686	ATGS-MMD-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.192.6.162	unknown	United States	15169	GOOGLEUS	false
142.250.185.194	unknown	United States	15169	GOOGLEUS	false
144.160.125.207	unknown	United States	797	AMERITECH-ASUS	false
172.217.16.194	securepubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
212.82.100.140	ds-ats.member.g02.yahoodns.net	United Kingdom	34010	YAHOO-IRDGB	false
34.248.235.56	unknown	United States	16509	AMAZON-02US	false
216.58.206.70	fls.doubleclick.net	United States	15169	GOOGLEUS	false
54.201.56.249	unknown	United States	16509	AMAZON-02US	false
87.248.119.252	me-ycpi-cf-www.g06.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
144.160.36.42	att.net	United States	797	AMERITECH-ASUS	false
50.112.173.192	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
99.81.224.135	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.161.82.22	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
104.18.10.213	cdn.quantummetric.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
188.125.72.139	noa-atsv2.media.g03.yahoodns.net	United Kingdom	34010	YAHOO-IRDGB	false
185.89.210.90	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
151.101.129.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
151.101.129.46	unknown	United States	54113	FASTLYUS	false
142.250.186.166	unknown	United States	15169	GOOGLEUS	false
152.199.23.180	cs964199420.wpc.mucdn.net	United States	15133	EDGECASTUS	false
87.248.100.215	atsv2-fp-shed.wg1.b.yahoo.com	United Kingdom	34010	YAHOO-IRDGB	false
52.58.104.46	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.3
192.168.2.11

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1533206
Start date and time:	2024-10-14 14:18:24 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://att-mail-987654.weebly.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@23/290@128/39
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 172.217.16.142, 74.125.133.84, 34.104.35.123, 142.250.181.234, 142.250.185.99, 216.58.206.40, 142.250.186.170, 142.250.185.170, 142.250.186.138, 142.250.186.42, 142.250.186.106, 172.217.23.106, 216.58.206.74, 216.58.206.42, 142.250.186.74, 172.217.18.10, 216.58.212.138, 172.217.16.202, 142.250.184.202, 142.250.74.202, 172.217.16.138, 142.250.185.227, 142.250.186.72, 142.250.186.35, 199.232.214.172, 192.229.221.95, 13.95.31.18, 20.242.39.171, 104.102.22.123, 2.23.197.91, 172.217.18.106, 142.250.184.234, 216.58.212.170, 142.250.186.131, 93.184.221.240
Excluded domains from analysis (whitelisted): e11697.x.akamaiedge.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, e11697.dscx.akamaiedge.net, e2315.dscx.akamaiedge.net, wu.azureedge.net, e2315.x.akamaiedge.net, att-yahoo.att.net.edgekey.net, clients2.google.com, www.att.net.edgekey.net, prod-www.zr-att.com.akadns.net, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, www.gstatic.com, wu-b-net.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, start.att.net.edgekey.net, fe3cr.delivery.mp.microsoft.com, ssl.google-analytics.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, www.att.com.edgekey.net, xandr-g-geo.trafficmana
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://att-mail-987654.weebly.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 11:19:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9758492453763052
Encrypted:	false
SSDEEP:	48:8CLd5oTUKgvVHbidAKZdA1nehwiZUklqehN5y+3:8CHoDQl05y
MD5:	BB63FF68B19097EDC8321483899F9242
SHA1:	BA5C1A92817696822A00CFC2EF203430F4EC5F4F
SHA-256:	38539C66FB8B4086BFC773C03188B5A75A8C77FA6727E1C97A80F41C32DBF5A9
SHA-512:	42E3CAE2DDDFCA838F08CCB803C809764EFFBE0D16A4B22C2D1139188A8E27444CA62782A8563DF056E54CC216388EC2412483512C120AC65A084EEEE970B3CD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....l.Y3.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.INYtb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VNYtb....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VNYtb....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VNYtb..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VNYvb............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 11:19:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9930528412082564
Encrypted:	false
SSDEEP:	48:8BLd5oTUKgvVHbidAKZdA1geh/iZUkAQkqehk5y+2:8BHoDQZ9Q35y
MD5:	58D56E4647B682B5AFDFDB99AC2109AB
SHA1:	0E4FDDF9B2D0C44327F7BCEB3AF020D4FCAD1F93
SHA-256:	8AC0C18E75635C1633E89D292226125565BD18C2280B1761198685B9F0E8FD64
SHA-512:	DB34C23378F68897458A3ABCC728433450AEE43AC08D008E50535306EFD4A159E51CF8A06965B82F1B8F01FB3FFD77D8C5A70FD6A2DF49683B17C98979CAD2A4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...."g.Y3.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.INYtb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VNYtb....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VNYtb....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VNYtb..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VNYvb............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 09:52:18 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.001058111951189
Encrypted:	false
SSDEEP:	48:87Ld5oTUKgvCHbidAKZdA148eh7sFiZUkmgqeh7sW5y+BX:87HoDQ2n45y
MD5:	DD64E89BA489692A2E8B6AD5A7EA7881
SHA1:	F295BB8B682D232ABCBFA5C4EFE0869C371F8793
SHA-256:	0A181BF81B745BB4DF741356E6FB10280C7CEA78F27697508062AB49849A3EF0
SHA-512:	E575C8DE2A63866846A180CCFDB6415EF5EA77F1731811F42FFC8F91C4F41C8D4AB89B317D6A5B5F4BD6EB5E63A1FEFFE69ADDA476A6B95081DC74BC4310D19F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s4..z.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.INYtb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VNYtb....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VNYtb....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VNYtb..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.V............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 11:19:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.989945078815862
Encrypted:	false
SSDEEP:	48:83Ld5oTUKgvVHbidAKZdA1lehDiZUkwqehA5y+R:83HoDQse5y
MD5:	8FECAB1864D9903BD6384DDA4EE99D06
SHA1:	E85F622BB68CDBA4E44D77110D3BE9F6AF463A1C
SHA-256:	2792574E1372CC5F886620AA773F5C88EDC82917A5D680CF6CF6BC8B4858E232
SHA-512:	8C428247E6A0BA2D1F9EF059A055ED160559CC74C5D707521154D761ED2C1A0035E093759DEED3F9F627E33AD49F9AF133A378039C47018BC6C0611EBE4E211E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J:.Y3.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.INYtb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VNYtb....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VNYtb....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VNYtb..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VNYvb............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 11:19:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.979225584569417
Encrypted:	false
SSDEEP:	48:8DLd5oTUKgvVHbidAKZdA17ehBiZUk1W1qeh65y+C:8DHoDQs9a5y
MD5:	094101952F6D7EA77F2C8E041F32B9CB
SHA1:	8230635F08FAF80821C3CAAB299E5B45CDB1CC49
SHA-256:	49C836F24021167F991C679B4D64B73A0387B28C37935201E3E518B76EC709C2
SHA-512:	DD1F6BB4598595063FE4ABE46589C50625EF27A0C675BDBB16F9AE1507FDF3F09928DEE3269D20828E4F99E0DF11ABD8219E3840872FCC36B6D682C04DB10762
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......Y3.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.INYtb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VNYtb....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VNYtb....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VNYtb..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VNYvb............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 11:19:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9907521156692796
Encrypted:	false
SSDEEP:	48:86nLd5oTUKgvVHbidAKZdA1duTiehOuTbbiZUk5OjqehOuTb45y+yT+:8+HoDQETLTbxWOvTb45y7T
MD5:	E3C584031644D1873C0B30CB4C65F289
SHA1:	1488A1F0223EA6ADEA5BDAC9AAE4E28E9538EF7C
SHA-256:	BEFAFF0C73107CB6247F680B553B799430FA38B94C3F248B1EB3EF2AC6A89B0C
SHA-512:	661E06380671CFC017175BA81A786250A57AC21B6757BC845E8BE19479D92B8C9EE26E9AF5BD41C25D273C8A75D2EB3C30C383CB05A3DBFB719DB3680E206D5D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....O..Y3.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.INYtb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VNYtb....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VNYtb....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VNYtb..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VNYvb............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	886
Entropy (8bit):	5.035010292982074
Encrypted:	false
SSDEEP:	12:TMHdt0ubqt7/KYslXXHlPeaxMwm5EIDXqBJVJ/hlIJi2y1dQ9/01klp0u:2dtjbqt7L8FPeaxMwm+ID63zbF+MOf0u
MD5:	552EB2E04260FC0733E5633D15C6AEAA
SHA1:	0A9EFCC3B0EBABB23A49A00061FD8200EDED1613
SHA-256:	705FF3240DE004523FF9D628B28AAD705AD3F0CEB046312495265A4042C67570
SHA-512:	16CD125A26B1604144D6A64F45D1064FF2A71DA412CF61C829914E00C2E4AA275A172D0872A9533F79D5FC2D2BE82A7DFE3FE5F12048C23AF927A7CB35D571CF
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/files/theme/images/arrow-light.svg?1720804667
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="22px" height="11px" viewBox="0 0 22 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 39.1 (31720) - http://www.bohemiancoding.com/sketch -->. <title>Group</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="UI-Kit" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="square">. <g id="Ui-Kit" transform="translate(-61.000000, -697.000000)" stroke="#FFFFFF" stroke-width="1.5">. <g id="Group" transform="translate(62.000000, 698.000000)">. <path d="M0,5 L19,5" id="Line"></path>. <path d="M16,0.5 L20,5.02" id="Line"></path>. <path d="M16,9.02493763 L20,5.02493763" id="Line"></path>. </g>. </g>. </g>.</svg>.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62403)
Category:	downloaded
Size (bytes):	77851
Entropy (8bit):	5.422328020643102
Encrypted:	false
SSDEEP:	1536:sVeGNcrk8ZlWwWJfg8f4NX6ziaubyLszIg:sVei8Zle7f4NqzxubyLszIg
MD5:	60F19CA2F094ACABBA5B7988467387C4
SHA1:	C7EA2FA0D8DA961083A322D72DEE176A45DF9232
SHA-256:	FD9784852FBB3FE6285225683513C82D88F104AF9B05AE0B7C5E973F33A0BBA1
SHA-512:	FD06B5BA1C97017C7833C7011202DC51821705ED85ACBE03F5AC3E4B01AA39F2D1F3F3CDF4EDBF50D48A5788FEB61DF0782181948F44F44614EC2A23327CE0CF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/sf/0.1.434/js/safe.min.js
Preview:	/! SAFEFRAME 0.1.434 . 2024, Yahoo Inc. All rights reserved. /!function(){var t={9466:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l-9.9 9.9-9.898-9.9c-.78-.78-2.048-.78-2.828 0-.78.78-.78 2.047 0 2.828l9.9 9.9-9.9 9.898c-.78.78-.78 2.047 0 2.828.78.78 2.047.78 2.828 0l9.9-9.9 9.898 9.9c.78.78 2.048.78 2.828 0 .782-.78.782-2.047 0-2.827z"},t.exports&&(t.exports=e.close)},4228:function(t){var e;(e=void 0===e?{}:e)["decline-fill"]={name:"decline-fill",height:48,width:48,path:"M24 1C11.3 1 1 11.3 1 24s10.3 23 23 23 23-10.3 23-23S36.7 1 24 1zm9.8 32.8c-.9.9-2.2.9-3.1 0L24 27l-6.8 6.8c-.9.9-2.2.9-3.1 0s-.9-2.2 0-3.1l6.8-6.8-6.7-6.7c-.9-.9-.9-2.2 0-3.1.9-.9 2.2-.9 3.1 0l6.7 6.7 6.7-6.7c.9-.9 2.2-.9 3.1 0 .9.9.9 2.2 0 3.1l-6.7 6.7 6.7 6.8c.9.9.9 2.3 0 3.1z"},t.exports&&(t.exports=e["decline-fill"])},8586:function(t,e,n){"use strict";var r,o=n(7427),i=n(3215),s=n(3945);fun

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 202, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.093256817950547
Encrypted:	false
SSDEEP:	24:XKDGEm5BMPaIUWgF/foxKPUzuEHWK1br4Nr:6DBm5BMF+3mbWKFsNr
MD5:	7F972ABECEED50CA083138400B84D1C0
SHA1:	EA5F2499E4C284A3AEBB3F7D9E2E143D2AA5E374
SHA-256:	426B046038143AD054687058DAB793D909FA3DD666079EBCB36489EC5B8E0F40
SHA-512:	4CED88544DAF852271088520908A9EF7D7E899A21C9D2765F9B1AF3E6B38D64E26262252CD3A0706A934B7B82AC67886472D4A4A424390495D1AC22C7406EEDA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/img/header_1x-1479864976616.min.png
Preview:	.PNG........IHDR..............A......PLTE.............................................HHS..................HHR............IIR..................IIS...............HHR...............HHS......HHS...IIR.........HHS...HHS...IIR.........HHT...KKR......JJS......HHU.........UUU\\\...HHR...........0...MtRNS.......(.........#.{"...........eeI..w/..................rrnfXXDD;775...........IDATX..g[.0...PZd.......{o.....x.!.)y..y?p\...%.8.e...`=Z..]..b.o..&0...Zj.WO...".R}.{V{g..zG..O.....m...._../.:.p.....c.O\.......l~K.5..p._M...C..,......Y..2....}SG.^-Zp.@\|.....md6....C.......o'.<..\..J.&..W.;\|...;d./...a..F,...R.."s).E.....zf..Y..7.&/.Qkj.O..aR..B..90..N' .F..Bb.Tk.6.M.b...l0....#..v.r`.. ,.M..n....f.W$.....V.i.a.....m.....{?}?..>..\|..&...w.T..u....Z..a.......[`....Z.Pki...V......$]..v.p.x.E'.Dy..5.}..O?......\w...&.....p&.m..aA.^/b......`.,<y...^,.?5..Y+.}.......".i......IEND.B`.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (425)
Category:	downloaded
Size (bytes):	448
Entropy (8bit):	5.263858840652888
Encrypted:	false
SSDEEP:	12:hYjx7QqJmwhpyRDRR3Kxi/LcW9PzXe7CW5VE5fc4a:hYj1fRIRR37/LcYkCW5VE504a
MD5:	5545EE9E63C7F9F556EB864A5F80006F
SHA1:	F766F4DC2C5CED645C8E95559055E154390E9515
SHA-256:	5131E30570259DEAFDA55A65A3D84F62FFE0F9E79D7AAE7E179F461E7231AF51
SHA-512:	1712D4CB42DE319257715D9716A784C9C90AD4830F6A03833C6F3AD5BB4C3DC213847847933ACDF1110E8CBA0A57F60FFC25C0E1FCBD71E20A5D632D0305BDBB
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/ajax/apps/formSubmitAjax.php
Preview:	<!DOCTYPE html>.<html>.<head><meta name="format-detection" content="telephone=no"><script type="text/javascript">function ret(){parent.postMessage && parent.postMessage(document.getElementById('response').childNodes[0].nodeValue,'https://att-mail-987654.weebly.com');}</script></head><body onload='ret()'><div id='response'>{"success":true,"action":"redirect","data":{"location":"http:\/\/att.net","ucfid":"353197143831094348"}}</div></body></html>

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5636), with no line terminators
Category:	downloaded
Size (bytes):	5636
Entropy (8bit):	5.265735267819504
Encrypted:	false
SSDEEP:	96:RAnbGg2U2OUK1yZ4YHPEppcIzvxpJ3xIzpNxv+S6hmAPm6UO5OUK3YvE0m6i5xDc:eCgl104YHPEppc+vxpJ3xMpNZgdWGEiv
MD5:	0CCB51BC1DD6980920DA39E008A599E0
SHA1:	929B21AC5A628A05E9F87A8E734954D90F1EE093
SHA-256:	B168BE397AC36DBCA02B07547DAD2A928427E765DF9B49A931F05DB057F3A83C
SHA-512:	665527069009017AB5B2ACAB0EE764052C84672451CCE9189961420E38239C3C63852D60366952BDFF92DECB3610BD8ABE6BDD44A5B8F89CF51CEF04445F2267
Malicious:	false
Reputation:	low
URL:	https://edge-mcdn.secure.yahoo.com/ybar/cerebro_min.js
Preview:	var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeacon=function(){this.runExperiment()},e.prototype._extractResourceTiming=function(n){var t="",t="[";return["startTime","redirectStart","redirectEnd","fetchStart","domainLookupStart","domainLookupEnd","connectStart","secureConnectionStart","connectEnd","requestStart","responseStart","responseEnd"].forEach(function(e){t+=n[e]+","}),t=t.slice(0,-1)+"]"},e.prototype._extractHeader=function(n,e){if(0==e.length)return"{}";var t="{";return e.forEach(function(e){t+='"'+e+'":"'+n.getResponseHeader(e)+'",'}),t=t.slice(0,-1)+"}"},e.prototype._fetchWork=function(){var n=this,r=!1;new Promise(function(n,t){var o=setTimeout(function(){r=!0,t(new Error("Work Order Request Timed Out"))},TIMEOUT);fetch(WORK_SERVER).then(function(e){clearTimeout(o),r\|\|n(e)

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.7650966390195455
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtF17diAsLqoa:VKEctKo7LmvtUjPKtX7v1hiBLrwUnG
MD5:	428199CEE2F0EEB6B22877D19E9A5948
SHA1:	8904CC6022394076F644563F5AADCB999A23B9E5
SHA-256:	9BB78787D230094E7B59FD220AF0A87160630712D25307D3DBEF05FB554A261F
SHA-512:	F8BD0C179D0B811621E30F53C909A70E9E85AABCE6A37E948D427D2C10AEFDBD3D51D9E47D6212FAEA7DFFD4758E39E52D28821BB0A4B571BF1C375DA4A4509C
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	175752
Entropy (8bit):	5.785358029888559
Encrypted:	false
SSDEEP:	3072:T2HdALSWdG78KI4NBT0pfXle5jWlYoRl96678fGr0fqK+hZ:qHdALSAG78KI4NBT0L4jWlYoL9N78fGX
MD5:	E14CEF4ADB91468980F0D54F569117F9
SHA1:	5F858ED434BD69F23EE892980E6FD297B12AA07D
SHA-256:	4E3F6E8C2DCF3D7A2489B6304351291EE831249E1E65C082AE8EEE6BAB6B3856
SHA-512:	1F2EF64D95312064888B166D86DE7D5514B0C675EC4A68E1AAE9BDD446D342A1AFF5E16EB68600F7CEC0F03A075904517633DC39E44FF421ECD36A99DD8633F7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/f10d509c/d1ccw66oyq8ex2.js
Preview:	(new function(){var c=['vvDq','AgfZqMvLBKfJDgL2zq==','Ahr0Cc1LCxvPDG==','DMfSDwu=','CMjVEa==','CgjQCW==','rNvUy3rPB24=','C2HPzNq=','yxeTEwHI','CMvWBgfJzunOAwXKCMvU','C2fMzuzYyw1L','zgLZCgXHEq==','qvvesu8=','y29Uy2f0','vezg','w0vsuL9nx0Lewf0=','qurg','v0felq==','q1jjtG==','B25fDMvUDa==','D2LUzg93lNbHCMvUDfSI','Bg9JywXtDg9YywDL','DhLWzq==','cIaGicbHDcbHyM91DdPZCMnKB2m6','ANn0EM9MzNnLDa==','qMXVy2TLza==','x2uSigv2ywWO','zg9JDw1LBNrfBgvTzw50','Aw1Nw2fSDf0=','y2LVx2jKmG==','q09j','r0fe','CgXHEq==','tKfm','lMrVy3vTzw50la==','sfrntfnJCMLWDevSzw1LBNq=','DgLTzxvWzgf0zq==','C3rHy2S6ia==','BgfUz3vHz2vZ','zMXVB3i=','Dg9Wtg9JyxrPB24=','yxvJDgLVBKvUza==','y29SlxbIyNm=','ywr1CMW9','zxH0lxDHza==','Aw1W','x19JB25ZB2XLlMeK','CMvSB2fK','C3rVCeLTBwvKAwf0zvbYB3bHz2f0Aw9U','qveTwuG=','zNjHBwvZ','Dw5ZAgLMDa==','w0vsuL9exq==','yMvMB3jLqMLKzgvYshr0Ca==','sw50zxjUywXfCNjVCG==','su5qvvq=','zgf0ys1LBMmTC2nYAxb0','Aw1WBgvTzw50yxrPB24=','yxbPu3PTrNjvBNDYCa==','C3jJlMnVBNrLBNq=','zgvZDgLUyxrPB24=','yMLKv29U','ywrT',

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	210892
Entropy (8bit):	5.055260629933718
Encrypted:	false
SSDEEP:	768:tEna6MVmf9++7bqoPtgm0HcBP/ksdB0UB5KUJ0GM5BUUQNE0Lsoptr+pxPcfki2F:tEnMVmfESdPSnHvyptr+pKRG4o6x6
MD5:	025F5BACD3035E5CF943BD87A2FCF845
SHA1:	BC2526C2F2263CE2C3672D99C63E901C0ABF7445
SHA-256:	5ECAB7CE27F2BC2FCDD78CB016D7E8908AF282B3914A1993B26CB7CBC84039B3
SHA-512:	3A5480FBF13149FE7E4D95277FACFF38E9EC8CAFA40EB05A4D2A1A163A4C7680A804D18BA8109D9552CFB16AE52F5507109A34AE41F441876DE48180C167512F
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/css/sites.css?buildTime=1720803349
Preview:	@keyframes spin{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}/! Reflex v1.5.0 - https://github.com/leejordan/reflex /.grid{display:inline-block;display:-ms-flexbox;display:flex;display:inline;zoom:1;-ms-flex-wrap:wrap;flex-wrap:wrap;padding:0;margin:0;position:relative;width:100%;max-width:100%;letter-spacing:-0.31em !important;letter-spacing:normal !important;word-spacing:-0.43em !important;list-style-type:none}.grid:before,.grid:after{letter-spacing:normal;word-spacing:normal;white-space:normal;max-width:100%}.grid :before,.grid :after{letter-spacing:normal;word-spacing:normal;white-space:normal}.grid .grid{-ms-flex:1 1 auto;flex:1 1 auto}.grid {box-sizing:border-box}.grid :before,.grid :after{box-sizing:border-box}[class="grid__col-"]{display:inline-block;display:-ms-flexbox;display:flex;*display:inline;zoom:1;-ms-flex-direction:column;flex-direction:column;letter-spacing:normal;word-spacing:normal;white-space:normal;position:relative;width:100%;vertical-align:

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2828
Entropy (8bit):	4.536070396957773
Encrypted:	false
SSDEEP:	48:PTBE0ZpntMb0/6aYkuvll/JGd6vpYQ6Kq3hUyvKrcJcyd6GR4y0IB7KPa0TTM:77ZpntMgSaYDvll/YAvpYjKq31vKrcBH
MD5:	C22AB67199A33D876512504CDA4FF55B
SHA1:	36E96EAE4644B6028532974FE5186A072792CB37
SHA-256:	C4CD233D3D6B0F184E99D5017E521B4C6F9106D3E546864A8BA516189B934311
SHA-512:	9C11487F2A00B4DCA9C04294F4F422AE0DF00828DE989AD64F506446C72E91E64D0B47EC243AE75B3EB88CA5C882E65C9A8F6D99B0C8BED4541F767A3DC1C31B
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/files/theme/jquery.revealer.js?1720786820
Preview:	/!. Revealer 2.0.0. . Copyright 2015, Pixel Union - http://pixelunion.net. * Released under the MIT license. */.(function($){. // check for trend event (make sure jquery.trend is included). if (typeof $.event.special.trend !== "object") {. console.warn("Please make sure jquery.trend is included! Otherwise revealer won't work.");. }.. // Simple requestAnimationFrame polyfill. var raf = window.requestAnimationFrame \|\|. window.mozRequestAnimationFrame \|\|. window.webkitRequestAnimationFrame \|\|. function(fn) { window.setTimeout(fn, 1000/60); }... // Public API. var methods = {. isVisible: function(el) {. return !!el.data("revealer-visible");. },.. show: function(el, force) {. // Check state. if (methods.isVisible(el)) {. el.removeClass("animating animating-in");. el.off("revealer-animating revealer-show");. return;. }.. // Remove previous event listeners. el.data("revealer-visible", true);. el.off("tre

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.7650966390195455
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtF17diAsLqoa:VKEctKo7LmvtUjPKtX7v1hiBLrwUnG
MD5:	428199CEE2F0EEB6B22877D19E9A5948
SHA1:	8904CC6022394076F644563F5AADCB999A23B9E5
SHA-256:	9BB78787D230094E7B59FD220AF0A87160630712D25307D3DBEF05FB554A261F
SHA-512:	F8BD0C179D0B811621E30F53C909A70E9E85AABCE6A37E948D427D2C10AEFDBD3D51D9E47D6212FAEA7DFFD4758E39E52D28821BB0A4B571BF1C375DA4A4509C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?_=1728908387555
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	21292
Entropy (8bit):	7.968995901601607
Encrypted:	false
SSDEEP:	384:6lpCQ58AKJVEyuNNzn8/jUYp3oBUQfMbQG16ExcQA3Kx8TA0Yfy5:6eQ58AF3NN4oy+UQuQG1xxcv6xb0Y65
MD5:	3867D627CC29739A41B1E925AF5DCD71
SHA1:	34EEFFB5293E07F488B92EF9B0E2FB0E2E598AC5
SHA-256:	71D2A5B97C5585BDCD0CC6D8085BCE1A538C3DB110DB641B4CDD948BA8561382
SHA-512:	058340DC9A82C1F9A52B8ADB875396325F0356C107AAB2352ED7990F866217BBF298DF6F024CEFB1C7A3AA87A3B4D9D579165B001C3B16D454E9A963BB507AD1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/nR2a_FaR0oKAtiOqOncykg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/3b7a28d0-89cc-11ef-9e3f-7e6e98da5766.cf.webp
Preview:	RIFF$S..WEBPVP8X.... .........ICCP0......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .P..0D.......>y6.H....&......M..Q.H....#..b...6....>.....M...].\|........7.....C......zx.........1.. :e\../..`......=..w.o...#..?..B.1.......<3._1.~>..%.U..y}.........~ _...................K....k...@.t.._.0+.%g.xHKK..).I6.e....:...W..0~"..7..[ @^.....O...h.kkm,.(g.@Q2.c..c...A.E....X.8..o.$a..[....6.n.D.P.B.e...H.p....e.e.=[4QG.`.\6..:/.:.;&...w..-.h..Q.../F...._.dQ.....X..H........

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	4.994787172741404
Encrypted:	false
SSDEEP:	3:yLRmcpZ6CdPtpOq94IhXVHws6Tac3mDDpKfFsLGD/DNKv:yL/pZ6CVCq9JVHwJW1iFqt
MD5:	CA243B22264DCA7A4A899C51CC2DC963
SHA1:	CF47310BBB10F981E5735CBCB6196F688782A625
SHA-256:	95FB5A5390AFDA7B7734B303C9F724039FDA305313CE9517AA5F7A544A208AF0
SHA-512:	704E626A74A47B560B3316788B46F7CAF94E1E831B9290551C52DBF4D1E8DD8B72BACBBF6164EAA393BD97DABA0C351881B2F9D83A92F3BAAC49322BF9B5040B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/nn/lib/metro/g/myy/advertisement_0.0.19.js
Preview:	document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4249), with no line terminators
Category:	dropped
Size (bytes):	4249
Entropy (8bit):	5.242820679038457
Encrypted:	false
SSDEEP:	96:a6z95q7wimgV1H1BSaQg77uSy7hG1UrpsUtKkmxMtP7iCs5wqrtgfP7cujy/L4:a6x5Tg/C1cuS3W6kKpMtPeCPqrSfnjyk
MD5:	BCDA778B736C3A054AF62F437B536E78
SHA1:	08E2CDBD2D1CA160834B205D6748DC2CAB5FDD99
SHA-256:	892E2F5E07FEF6DE0428E4DCB284201B3D110C0A6F2D8EF899CD2CD2C61EB546
SHA-512:	A0D6449A03045E723D2F668898541625E36D7394E30327F5E89E1F0640F97A1A0268F500D89E804CD8DC8FBF395DBDFA71B429E89E737E3C2DAC7A2C196EA3A7
Malicious:	false
Reputation:	low
Preview:	"use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_typeof(e)}!function(){var e,n,t,o,r=window,a=r.onerror,i=["apptype","rid","bucketId","bucket","device","osName","browserName","browserVersion"],c=/^resource:\/\//,s=/ActionScript\|Decompress\sfail/,f={beaconPath:"p.gif",site:"fp"},d=0,w=function(){var e=r.navigator&&(navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection)\|\|{};return{downlink:e.downlink\|\|"",downlinkMax:e.downlinkMax\|\|"",effectiveType:e.effectiveType\|\|"",rtt:e.rtt\|\|"",saveData:e.saveData\|\|"",type:e.type\|\|""}},u=function(){var e=r.YAHOO&&r.YAHOO.context\|\|r.Af&&r.Af.context\|\|{},n="";return i.forEach((function(t){"undefined"!==_typeof(e[t])&&(n+="&".concat(encodeURIComponent(t),"=").concat(encodeURIComponent(e[t])))})),n},g=function(e,n,t,o){if(!(d>3\|\|r.naviga

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2077
Entropy (8bit):	5.249542822104645
Encrypted:	false
SSDEEP:	24:YDIu4lmm9Jlhi7uiGJCB0aG3Cy6anMVQL3g60epgOi7uiGJXSX6F1RhNCqVVrd09:YDTwmuwBiRBEQZpAu1SIVpp9vbsgY
MD5:	68DB52EFB90B13CCD8A22BC879BA6FB0
SHA1:	3A6FA5D438F967AB2E823B6BB733B78C6764E879
SHA-256:	9AB99844529CB388DA45C0819879B0EE97A254747914BD19B6F9781517345AF0
SHA-512:	73DDE462E9794C06605542357CF4164974F1D3982DC6A2F78EE693F3823E6D91FB9F26D0182E123364427A879246EBE77B8980837D542F6D8D4CBA090ED503B1
Malicious:	false
Reputation:	low
Preview:	{"html":"<li class=\"yns-container wafer-toggle has-toggle-click\" data-wf-toggle-class=\"click:toggle:profile-open\" data-wf-toggle-target=\"body\"><a class=\"yns-link js-content-viewer wafer-caas\" target=\"_blank\" data-ylk=\"elm:hdln;subsec:notifications-brknews;pos:1;slk:Harris questions Trump's health: The vice president suggested Trump is \"too weak and unstable\" to lead the nation.;elmt:seen;cat:unfresh;g:75ea7ac8-20ae-31ea-817c-3ee6e6cd296d;\" href=\"/news/kamala-harris-hits-trump-1-071352248.html?.tsrc=bell-brknews\" data-wf-caas-uuid=\"75ea7ac8-20ae-31ea-817c-3ee6e6cd296d\" data-wf-caas-prefetch=\"1\"><img class=\"yns-img yns-redImg\" alt=\"\" src=\"https://s.yimg.com/cv/apiv2/ae/news/circle_news_purple.png\" /><div class=\"yns-content\"><span class=\"yns-title\">Harris questions Trump's health: The vice president suggested Trump is \"too weak and unstable\" to lead the nation.</span><span class=\"yns-time\">1h</span><span class=\"yns-ell\"></span></div></a></li>","css":".y

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15264)
Category:	downloaded
Size (bytes):	15697
Entropy (8bit):	5.53729719471769
Encrypted:	false
SSDEEP:	384:uQTCfjv99mW+911+Fl0YD0Dew/X2q5ulRIUeT:uQTCfGZ1+Fj9w/XuuT
MD5:	E2202E6ED6EF52CEC2C4A875C99225BA
SHA1:	FD48D3157CFA6B6E6FEC3E50787E357AA3288C88
SHA-256:	F2CFBD195DFF011843F93E2D32979F6F07926211CBF3EDDDC3B708B0BB04C8A2
SHA-512:	4E2AEFD87D89F4D5C00CFCAC8EE2D7748F84979BE9E66272475A621A19BA8FC884737DF604B3B7344FE4EB0C1154819880BC3769E25798BB4ABDDEF76EDC9B4F
Malicious:	false
Reputation:	low
URL:	https://currently.att.yahoo.com/__rapid-worker-1.2.js
Preview:	/* @preserve. * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $. . Original:. * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt. /./ @preserve. * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp>. * Version: 1.0.1. * LastModified: Dec 25 1999. /./. @preserve This code contains an altered version of the original source and is not meant to misrepresent the original software.. */.function base64(r){if("undefined"!=typeof btoa)return btoa(r);for(var t,e,n,f,o,i,a,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=[],s=0;r.length>s;)t=r.charCodeAt(s++),e=r.charCodeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i=256,a=n.length,l=1;a>l;l++)t=n[l],null!=e[o+t]?o+=t:(f.push(o.length>1?e[o]:o.charCodeAt(0)),e[o+t]=i,i++,o

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:+:+
MD5:	CF1731F1EADF52F064E6059D699E7615
SHA1:	816201B65AF045985CF47B5C7C58089759D00A45
SHA-256:	2E34AF284C28BF285781A36241B6E00EC74C81E6AE6858D52BDEDE5EBF7E37C1
SHA-512:	6C1809CAE27A9024FAE8DF165028316CD65E877E9362F5D132724675F7F9DC14A4A52DA43C0F6BDF7826CC1E6AA4633F79082B6125AD73DBA067C358169B29F8
Malicious:	false
Reputation:	low
Preview:	ll;

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1735
Entropy (8bit):	4.926832349800413
Encrypted:	false
SSDEEP:	48:LOLWVL3L90QZOCCVLcxbZY3QLV4/VLdlL+LIZY3QCyVL0NnB:LOLWVL3ZXOCCVLIYgLV4/VLdlMGYgCyA
MD5:	204D9EE2B1BA92DCE365EBF87BB351BD
SHA1:	AD8B5C3B16AC7193EBC1A549A6E62F07D6A792BC
SHA-256:	DC887B20E92D735DCE5C25A3351EF2B8B6B189E856A3EE64CB0429A3D7F46730
SHA-512:	4EC405CFC62934C6B2BCD594F0ABE08549A10EA1198A2C684703DFFE6116AC813AC2DB8AFD5511BBAA8D07E92B1AA9ABE971780575F861EA5AA68CDE168D4EAA
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2
Preview:	.@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 400;. src: url('./regular.eot'); /* IE9 Compat Modes /. src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./regular.woff2') format('woff2'), / Super Modern Browsers /. url('./regular.woff') format('woff'), / Modern Browsers /. url('./regular.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 700;. src: url('./bold.eot'); / IE9 Compat Modes /. src: url('./bold.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./bold.woff2') format('woff2'), / Super Modern Browsers /. url('./bold.woff') format('woff'), / Modern Browsers /. url('./bold.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Roboto Mono';. font-style: italic;. font-weight: 400;. src: url('./italic.eot'); / IE9 Compat Modes */. src: u

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13172
Entropy (8bit):	7.983345987346853
Encrypted:	false
SSDEEP:	192:aeWEf9MgpV7/t1pFi9Yo+nDBr7BGYa12DBWPgHuddFvUAug3Xub3N+:aeW2PPt1+z+nb7aEczJUxg3Xe9+
MD5:	395F1D8C5332CDA7832A9A3EF44F4624
SHA1:	A4D05F869B9935B910F00EB52367B4015CD85D82
SHA-256:	49EA67121E960A99AD0ACEB43EF2AF6AA97B4E2051846DAC01538D2029D62256
SHA-512:	9B06D32F97EA336A649642F8D92B89491223379D2AE093ACA81C46557DBE4356BA7F30BDDD2814178812889D076220CF523495F3F7D6A156D0D984EAD1A0C1D8
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/gjr9LW9dHL.LMH20gjRF3g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/4d612b01abae8be4fec5c774c34a1d3f.cf.webp
Preview:	RIFFl3..WEBPVP8 `3......d...>y4.G$."!,......@v...."....K.......,......k_....M.......=].y.Y.c.7...o.?.....z......g.../.3.G..W.Wo.......?....?.~.....yG.....{g.?...9+.WRo.~......;......_....^...=../........%.w.?`......z....c...m>........r...W...?..f.y.....^..I}Yh.@.T.%,..$.:.5.\|I+.=..!~=..Yxs..An...7,....s.H..Pf.v#...H..[6..W>..^.l.wnj..J1C.v...b......y...P..`jx....=.bG...Dq.X.57.f\|....b.y- 1..\|..xEf....1.A.hxmx..B....6.../.&............{]...G.]..&.3.h.s._.`x].0wa'..S'j`....KTo3.. ....#.yJ.o..<.R..>...?vZ..^.$..We...'rY..._.ngy..$z...#..C....VUgYi..Li.`@.Tg.@.0_.......B..)..[6~....WAxq..P............2K...).....UZ.....].x.{B...E.......e5.C._...E.\|.d..t..>...h.1.k....W....}..M..t0.........I....F."p0@.....}EWt.gz.6"...y.q!.`G6.:......J.i...u1....R>34....~<.@.[m..wG.o..Z.G;.....pk....A.2.SW.)}..h..}..K........j5..\.O6..L.{T?.....Xe./.e._d.h)..0.`..0.E;h..d..Dd.V.q.h..$Z..`.....pj... ...E..w.e.......H. z..x.e...iG...h..Z}[....^E....*....t#.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 1740, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11967
Entropy (8bit):	7.955972465434936
Encrypted:	false
SSDEEP:	192:C2uHGmnzpARBLwr92XMShDkuDMNbL6qVEqhdtm5a28K6asSRwMJv59GRhk4eBkt8:ZuHGmlSBMrE6GMN0kd+Pc1SSMpGDOBB/
MD5:	C52B9648030733C6235492F484942207
SHA1:	E3DCE7A478C300063CC1A663B5CA52A77636B4C5
SHA-256:	506648DB425E3801B3B45ACA2382EFAED10698E5AF1DCB90FC8CFFB2B090704E
SHA-512:	2D4ABF505EEC04DB73B7C3FE2B23E11C0D415B5419FE1259560C4D908F7BB641CBB28EB33F669486AAED480FF6DEC3DC76954E6A9A0985F0A6E8E9C3F24F86E9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... .........F.d.....gAMA......a.....sRGB.........PLTEGpL.R35.....-..d......H.^.....`..e........d..d..d...!&.4.......]..d..a..d........d..c..d.....g..d..d...f.d.....d...!&d...........`.........T'..Z...c.......!e......#&...`..c.......".-#^.....?.....`..BBIl....!.... %`...............%(`......'#.!&....h...qf...#)..7....!%i......3%3.^.h.../i..`.......I."(ZZ^.i.....'#`..?..`....??...".......4......_...."1.$$.....Z........3.%&.h..........YZ^`..ZW\...`......h..).%@........#.0...#.4...........6.....-...!;...h..a.IY.0....x..Z.g.D}...!`...5.:.......Z..Z?..<..@.....^....ZWo.2.YY]4.^.4.... .....0...J...........3/......2Y../.\|..]..c..,.~-..+.\|..23.^..3d..`......)...6...m....@...c.@.......\...]^....."(...3.^.....!..3.m.......C..e..S..=>.c..r...#).........C...7.'$y7.c...$ !.h.3.....2..%+oB..(5...0.;....}..... &-.=......tRNS.............#..UD.1...&....2.;..G.......c.....Gcz.s...<T..=...3.....n....L....J~.,\|u..C.C^..P#SUf..e....q.o.&..8.f..ZQ.y...u. ........yzy...E.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32029)
Category:	downloaded
Size (bytes):	534233
Entropy (8bit):	5.3426163690118
Encrypted:	false
SSDEEP:	6144:iocZIvNiY/EZ7NQ//HyBGtUD/4K0x65/hSJi/5Tz:Tj/ybiQD5/Ci1
MD5:	5295FC679EEA80780246F38A98DF4119
SHA1:	AB671B1376AE82788886E2E18C4FDB7B7AC6FCC7
SHA-256:	C1CD4E7693F8C40D13259E8AC271CD0B6870875CA6C69B78D50AEDE9EEB63B67
SHA-512:	875BBDBAA20DEDC45DD6658886DF4B2E04EBA47489A2382F809C3F4EE96817B8A1A99863B812E983BC89AA435E3FA72AC4F0BE0E979241A168B1D2D7B0097CD5
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1720803349
Preview:	(function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:false};e[r].call(i.exports,i,i.exports,n);i.loaded=true;return i.exports}n.m=e;n.c=t;n.p="https://cdn2.editmysite.com/js/";n.p="https://"+window.ASSETS_BASE+"/js/"\|\|n.p;return n(0)})([function(e,t,n){e.exports=n(321)},function(e,t,n){var r;!(r=function(){if(window.Weebly!==undefined&&window.Weebly.jQuery!==undefined){return window.Weebly.jQuery}return window.jQuery}.call(t,n,t,e),r!==undefined&&(e.exports=r))},function(e,t,n){var r,i;!(r=[n(1)],i=function(e){window.Weebly=window._W=window._W\|\|{};window._W.utl=window._W.utl\|\|function(e){window._W.failedTls=window._W.failedTls\|\|[];window._W.failedTls.push(e);return e};window._W.ftl=window._W.ftl\|\|function(e){window._W.failedFtls=window._W.failedFtls\|\|[];window._W.failedFtls.push(e);return""};window._W.utl=window._W.utl\|\|function(e){window._W.failedUtls=window._W.failedUtls\|\|[];window._W.failedUtls.push(e);return""};window._W.stl=window._W.s

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	7.312089486802539
Encrypted:	false
SSDEEP:	48:Hy2JSJMlCPAI9eI7N7miqiZov00hnp07om47jSW3lAm0loMX7nR1wKp:Hy2JSqCDsIbTov00hnp07om47jlHevnR
MD5:	953C1AC7E3B4E3D58367E20B064034BB
SHA1:	FE8BE09EEE45EBF11C4C46918879725C85FE41E0
SHA-256:	123988D9B5968899975FF52A55B198E7209D4EC023F3A7462FDA68B52AC2B463
SHA-512:	70CFDA1C11AC079F51B971C9DD0426895990E350C041DDA60E13D86D38B0D043B5D647F750B7F479270BBA439A7375775BFCEAD62BA210F1E0F8FFE52791B420
Malicious:	false
Reputation:	low
Preview:	GIF89a.................................................................................................!..NETSCAPE2.0.....!.......,............%...%eZ..4Z............<.a ..&...x..w..........8qT&...aH0D...P\.....1....~.J...`#..B.5....5..\|%..V@.@....Z@....'....5........)..q)...)....n.....#....n....D...\|......g.?..?.......Z.9......$.."..".......q..0 .,E........@..T.)....:L!..!.......,............%..3.".(s...P<>...Rb.........U9...AL..,/......@.........Vp.O.DB.t.&..A.........M}........u......'tA.....i6..g,...i.~';2..\|h.W......\|.../'..g....W".'zW.....1....#.6....."J.6J'."...0A!.!.......,............%..E.(:........V2.7....A.$..^I.q.....RH.....`...........nDR"@ ...k1..0.E!.....H7......../....q~~...0.l/....KXc%...M".)......S..D......"......c.4.\|#..$.."."..0..#../..Y.4O.=.....B.0!.!.......,............%..u@e."$..B......\.<.(.....\|..A(b.f....{...kJ..D/.H..p\.N(eq0...ds......^..S}.........P...Czy.f.$.......%......).....Z......p;.....e$7"...dQ....3.._.7..r\|..#..E>.1....*.$.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46081), with no line terminators
Category:	dropped
Size (bytes):	46081
Entropy (8bit):	5.249446162819959
Encrypted:	false
SSDEEP:	768:jfIlGyjYNspLOjKUP6NYk4XcaXASnJxmdBko708Mo:jAIq6jKUnK+mY8j
MD5:	54BA1E0D909A710667FCBD763770FD81
SHA1:	E5210DD565FA1FBAFAA16D51308AC2D64ED6CD49
SHA-256:	2C7B25B7B7F049A2F0E062DBD45966239D004103730E120ED93E6FC3BE53AEA7
SHA-512:	282D3F994F77785760CBD864F760994EBB45CEFA2D032BE4935CE3ED4515FA0658556781F8865BE5FF3803632A9594C84FB3614FC8177B76586FAAC67883F917
Malicious:	false
Reputation:	low
Preview:	!function(){var e={vendors:{fs:{selfHosted:!0,codeVer:"19.22.0-fs",siteKey:"new-att-net",gateway:"gateway.foresee.com",configLocation:"gateway.foresee.com/sites/new-att-net",integrityHashLocation:null}}},t={fs:{}};function n(e,n){return t[e]?t[e][n]:void 0}function r(e){return t[e]}function o(e,n,r){t[e]\|\|(t[e]={}),t[e][n]=JSON.parse(JSON.stringify(r))}function i(t){return e.vendors\|\|(e.vendors={}),e.vendors[t]\|\|(e.vendors[t]={}),e.vendors[t]}function s(t,n){e.vendors\|\|(e.vendors={}),e.vendors[t]=JSON.parse(JSON.stringify(n))}var a=window,c=a.document,l=!!a.sessionStorage,f=c.getElementsByTagName("head"),u=a.localStorage,d=a.sessionStorage;f=f&&f.length>0?f[0]:c.body;try{l&&(d.setItem("_",""),d.removeItem("_"))}catch(e){l=!1}var g=Object.prototype.hasOwnProperty,v=function(e,t){return g.call(e,t)},p=function(e,t){var n;for(n in e)if(v(e,n)&&t(e[n],n))break},h=function(e){return null!=e},b=function(e){return"function"==typeof e},m=function(e){return"object"==typeof e},w=function(e){retu

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46081), with no line terminators
Category:	downloaded
Size (bytes):	46081
Entropy (8bit):	5.249446162819959
Encrypted:	false
SSDEEP:	768:jfIlGyjYNspLOjKUP6NYk4XcaXASnJxmdBko708Mo:jAIq6jKUnK+mY8j
MD5:	54BA1E0D909A710667FCBD763770FD81
SHA1:	E5210DD565FA1FBAFAA16D51308AC2D64ED6CD49
SHA-256:	2C7B25B7B7F049A2F0E062DBD45966239D004103730E120ED93E6FC3BE53AEA7
SHA-512:	282D3F994F77785760CBD864F760994EBB45CEFA2D032BE4935CE3ED4515FA0658556781F8865BE5FF3803632A9594C84FB3614FC8177B76586FAAC67883F917
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/partner-portals/att/foreseev3/092123/gateway.min.js
Preview:	!function(){var e={vendors:{fs:{selfHosted:!0,codeVer:"19.22.0-fs",siteKey:"new-att-net",gateway:"gateway.foresee.com",configLocation:"gateway.foresee.com/sites/new-att-net",integrityHashLocation:null}}},t={fs:{}};function n(e,n){return t[e]?t[e][n]:void 0}function r(e){return t[e]}function o(e,n,r){t[e]\|\|(t[e]={}),t[e][n]=JSON.parse(JSON.stringify(r))}function i(t){return e.vendors\|\|(e.vendors={}),e.vendors[t]\|\|(e.vendors[t]={}),e.vendors[t]}function s(t,n){e.vendors\|\|(e.vendors={}),e.vendors[t]=JSON.parse(JSON.stringify(n))}var a=window,c=a.document,l=!!a.sessionStorage,f=c.getElementsByTagName("head"),u=a.localStorage,d=a.sessionStorage;f=f&&f.length>0?f[0]:c.body;try{l&&(d.setItem("_",""),d.removeItem("_"))}catch(e){l=!1}var g=Object.prototype.hasOwnProperty,v=function(e,t){return g.call(e,t)},p=function(e,t){var n;for(n in e)if(v(e,n)&&t(e[n],n))break},h=function(e){return null!=e},b=function(e){return"function"==typeof e},m=function(e){return"object"==typeof e},w=function(e){retu

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	81479
Entropy (8bit):	5.4749171053290855
Encrypted:	false
SSDEEP:	1536:SKdII/jJSREKzk1qJ9BoY1JdnM2Zz9o3MeRJgmHrR0h:SKdII/j0RfCS
MD5:	206D360D5B07C7459E3587534FAE5811
SHA1:	BA7C12742BB2EAB2FF1AB04684E8295180CB3CE8
SHA-256:	31B292D54D231A8557D29E7050EA943553A334B4C9E1FFD47C6027F9D8ADA910
SHA-512:	83DEA25704DFB46D9EB54A394F962FACA901C782794C642ACB3962D9E6D51DD3016FCA2CDE82CB859EA988E20E2460BF8D5A8020F5DADA2524C90F7AFB0D8C15
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[12],{"+fd8":function(e,t,i){"use strict";i.d(t,"a",function(){return g});var n=i("ofXK"),r=i("3Pt+"),s=i("tk/3"),o=i("sYmb"),a=i("e8Ap"),l=i("vxDQ"),d=i("vnFs"),u=i("Cs7S"),c=i("pZae"),h=i("fXoL");let g=(()=>{class e{static forRoot(){return{ngModule:e,providers:[{provide:c.b,useClass:c.a},u.a,l.a,d.a]}}}return e.\u0275fac=function(t){return new(t\|\|e)},e.\u0275mod=h.Lb({type:e}),e.\u0275inj=h.Kb({providers:[],imports:[[n.b,r.h,r.s,s.c,a.b.forRoot(),o.b],n.b,r.h,r.s,s.c,a.b,o.b]}),e})()},"/ksZ":function(e,t,i){"use strict";i.d(t,"a",function(){return s});var n=i("s0Cq"),r=i("cVEU");class s{constructor(e,t,i,n,r,s){this.r_user=e,this.userID=t,this.user_type=i,this.userFriendlyGroups=n,this.index=r,this.active=!1,this.editMode=!1,this.d=s}isKmsiUser(){return this.user_type===n.e.KMSI}isRmiUser(){return this.user_type===n.e.RMI}isSwmUser(){return this.user_type===r.a.SWM}}},0:function(e,t,i){e.exports=i("zUnb")},"1alh":function(e,t,i){"us

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	118
Entropy (8bit):	4.6210204155397765
Encrypted:	false
SSDEEP:	3:YPgbVHJHKQJXZjHvAMJdUC5DA6GKaG2LcW:YobfjPHT5ZaG2AW
MD5:	F6BF880CA34C3E868763365FDC30B392
SHA1:	9B1B41E6AAE16E4FDCC28DBE92679D564352C8C5
SHA-256:	B884D8BFFBC6E1C794D4EAE301A9698B535F857D1837B9B9D60C4651A78A2E1E
SHA-512:	E6B361C088C285DD06A08B7CA42539887FD02B850664E353137A9CCA698560F9DB45B05BFE3F48A1F7EF307F2876005F83ADCD06C10F76CB30111E304D89294E
Malicious:	false
Reputation:	low
Preview:	{"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request","http_response_code":400},"id":null}

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3775
Entropy (8bit):	4.568691852261433
Encrypted:	false
SSDEEP:	96:UgGKAtQ3k/GNXl2a4GzkNGSmT6xJ5orONPv:zGKAtQ3Lh0FGzvTmJv
MD5:	4BECCEBE0A060B2B2C43DE5C2D4512EF
SHA1:	250A779DD017877B9F360B264CF072D9E87974FF
SHA-256:	446F48F512ECC0B771AF3C21A3036DE3A1C5740D1E6BDBB61448834326D0C738
SHA-512:	09CC7F6AC18777399DCFBC22EA9069779C0D8193A269F672B62D738B79B6EF72AE4A30BD85D111D0E03E9FBA29387B9A91AB6D925F0324D764A27C6416FC5288
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/files/theme/jquery.trend.js?1720786820
Preview:	/!. Trend 0.2.0. . Fail-safe TransitionEnd event for jQuery.. . Adds a new "trend" event that can be used in browsers that don't. * support "transitionend".. . NOTE: Only supports being bound with "jQuery.one".. . Copyright 2014, Pixel Union - http://pixelunion.net. * Released under the MIT license. */.;(function($){.. // Prefixed transitionend event names. var transitionEndEvents =. "webkitTransitionEnd " +. "otransitionend " +. "oTransitionEnd " +. "msTransitionEnd " +. "transitionend";.. // Prefixed transition duration property names. var transitionDurationProperties = [. "transition-duration",. "-moz-transition-duration",. "-webkit-transition-duration",. "-ms-transition-duration",. "-o-transition-duration",. "-khtml-transition-duration". ];.. // Prefixed transition delay property names. var transitionDelayProperties = [. "transition-delay",. "-moz-transition-delay",. "-webkit-transition-delay",. "-ms-transition-dela

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	15719
Entropy (8bit):	4.6676143215770685
Encrypted:	false
SSDEEP:	384:W+1SbYbddF3bbO0ELZZRZpq0hPvF6b1yX:W+1SbYbddFLilTZpq0VF6b1M
MD5:	214DDE43CEBF15418CDCC76F9677EE46
SHA1:	6E93ACEBFA271D3FCE9626034D03F942D3B628A8
SHA-256:	CFBF67A85C039719090CFF2C4718DE99203B1CED78CFB8FAE5F7240D2F1570B7
SHA-512:	129ED41723FA08403F686DFCCABCF4F2AAB7DDABD0C1802CE52012EA88BF2CB1BC284019179749597A10ACDB4F02B154E89249A14421329EF28B30506A1A8EE8
Malicious:	false
Reputation:	low
Preview:	jQuery(function($) {.. // Mobile sidebars. $.fn.expandableSidebar = function(expandedClass) {. var $me = this;.. $me.on('click', function() {. if(!$me.hasClass(expandedClass)) {. $me.addClass(expandedClass);. } else {. $me.removeClass(expandedClass);. }. });. }.. // Interval loop. $.fn.intervalLoop = function(condition, action, duration, limit) {. var counter = 0;. var looper = setInterval(function(){. if (counter >= limit \|\| $.fn.checkIfElementExists(condition)) {. clearInterval(looper);. } else {. action();. counter++;. }. }, duration);.. if (!condition) action();. }.. // Check if element exists. $.fn.checkIfElementExists = function(selector) {. return $(selector).length;. }.. $.fn.hideDropdowns = function(dropdownClass) {. this. .removeClass(dropdownClass). .find('.wsite-menu-wrap'). .revealer('hide'). .find('.' + dropdownClass). .removeClass(dropdownClass);

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63152)
Category:	downloaded
Size (bytes):	104925
Entropy (8bit):	5.340648103872101
Encrypted:	false
SSDEEP:	1536:4wQndm/xVe8DyLfcqYN8SFSJ7DAggrOTUEH:4HdGhGLKFGp
MD5:	A8CB76B9B40A981F96A1527DEBA9CF45
SHA1:	DB2374809F81F114AC176CCF1AF7011F3B25BB22
SHA-256:	7B06C19E214F79EB54C7FB94E7346CF0EE385AEEAF5F7CC5B5092D30765D74D8
SHA-512:	574C2E682912087532E0A785B952ADA01E57C75E3656EC32A325F4CCBFA455D6F88CE8636C0D95E486085C0BF67DD019D5CC7B06AF4EFFFB833F245686571ED5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/du/ay/wnsrvbjmeprtfrnfx.js
Preview:	window.assertive = {. entityId: "wnsrvBJmEPrTfrnFX",. analytics: {. sampleRate: 0.05,. integrations: {. ivt: false,. },. logUnfilled: true,. useHistoryChangeTrigger: true,. override: {. normalizeSlotId: function (slotId) {. return slotId.replace(. /-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,. "". );. },. },. },. floor: {. enabled: true,. addToHashKey: false,. currency: "USD",. optimizeThreshold: 'm_0.2',. optimizePrebidThreshold: '1st_1.4',. exploreRate: 0.05,. limit: {. percentage: 0.95,. },. prebid: true,. aps: false,. priceBuckets: [. { min: 0, max: 2, increment: 0.01 },. { min: 2, max: 3, increment: 0.05 },. ],. },.};..(function() {. try {. var domain = window.location.hostname.replace('www.', '');. if (domain === 'engadget.com') {. assertive.analytics.sampleRate = 1;. window.googletag = window.googletag \|\| {};.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	downloaded
Size (bytes):	163178
Entropy (8bit):	5.461347624031963
Encrypted:	false
SSDEEP:	1536:CmzNNlFchunXBo4P5/vurL73G8HbREzC1H9RrMrjbJPySO+/U+wSS60ibrLr2pmX:CmzNNlFchunXBhPh90iWglt
MD5:	5A11626AA615C29D3F3EDA4D04C9586C
SHA1:	D17DE4D021BA9E1ECD815B742E9F3BDDC2A97446
SHA-256:	DC5A9C953B0725CCC0D9C4690C123C099C87B237A1B34F790AEF14D6D0F3C685
SHA-512:	E72F0AA92B0C64891559304C1FCF414739A859B8DC0043CE65629D2018D8A7CEE7869E4EE12D8208966961AAD00B06095DB50208562C56CC0FA50C24BDE02E16
Malicious:	false
Reputation:	low
URL:	https://consent.cmp.oath.com/version/6.4.1/cmp.js
Preview:	/! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],i=window,o=i;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===i.top)break;o=o.parent}e\|\|(function e(){var t=i.document,n=!!i.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),i.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),i=0;i<e;i++)t[i]=arguments[i];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15719
Entropy (8bit):	4.6676143215770685
Encrypted:	false
SSDEEP:	384:W+1SbYbddF3bbO0ELZZRZpq0hPvF6b1yX:W+1SbYbddFLilTZpq0VF6b1M
MD5:	214DDE43CEBF15418CDCC76F9677EE46
SHA1:	6E93ACEBFA271D3FCE9626034D03F942D3B628A8
SHA-256:	CFBF67A85C039719090CFF2C4718DE99203B1CED78CFB8FAE5F7240D2F1570B7
SHA-512:	129ED41723FA08403F686DFCCABCF4F2AAB7DDABD0C1802CE52012EA88BF2CB1BC284019179749597A10ACDB4F02B154E89249A14421329EF28B30506A1A8EE8
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/files/theme/custom-1.js?1720786820
Preview:	jQuery(function($) {.. // Mobile sidebars. $.fn.expandableSidebar = function(expandedClass) {. var $me = this;.. $me.on('click', function() {. if(!$me.hasClass(expandedClass)) {. $me.addClass(expandedClass);. } else {. $me.removeClass(expandedClass);. }. });. }.. // Interval loop. $.fn.intervalLoop = function(condition, action, duration, limit) {. var counter = 0;. var looper = setInterval(function(){. if (counter >= limit \|\| $.fn.checkIfElementExists(condition)) {. clearInterval(looper);. } else {. action();. counter++;. }. }, duration);.. if (!condition) action();. }.. // Check if element exists. $.fn.checkIfElementExists = function(selector) {. return $(selector).length;. }.. $.fn.hideDropdowns = function(dropdownClass) {. this. .removeClass(dropdownClass). .find('.wsite-menu-wrap'). .revealer('hide'). .find('.' + dropdownClass). .removeClass(dropdownClass);

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	downloaded
Size (bytes):	493694
Entropy (8bit):	5.5092994478792505
Encrypted:	false
SSDEEP:	6144:VA6vtFIk/lWcbeC3OzNSMMC7Kr9OW8ezXVPJ5cfeHDH8SF9IQzF71oh3j8SQFTaX:qCuIzn5PDoR8SQFf+n16xAb
MD5:	7AF883FF0F217BB30B186CDBE16A6B9A
SHA1:	FF4484CE5FFBE75672A9D26353111A9F21D7FC55
SHA-256:	2A2473623B8541529D038B10B49F6AC263410A7482C16C7B4CF75049D578B1AE
SHA-512:	94881C47CF43626B2943AB472638BE2F54D296C4333CC4DBF81999FEB8990D67978739DF2564CE19AD3106FB5C2CEA694B79DA4584495FF25B458C1BB9B5859F
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202410080101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ca,ea,ja,xa,za,Ca,Ia,

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3131), with no line terminators
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.169466467718442
Encrypted:	false
SSDEEP:	48:EOefHFlNMlA2EeCMIX4kmZ2KwYd4F5TTPzXWBGqis6uqHwbQyXokp+X6X8cS:EOefH+oXe2KwYMTbGBIRKQX6a
MD5:	F3E6D943C60EFEB6140F0138F7C072FA
SHA1:	695BC28E6F2A988CC81412C98F89E89516A63A8D
SHA-256:	5091AF3DA33110C97EE400E68F2C031D53AD8EEF7CFD8F24E09D616960DA0387
SHA-512:	ABC1B78E3070D8B74096D7A549F6D07A341DBAB1D8DFE8E84F36C3FECA370CC97F2EBB04C051F7DA9A916978D8EAC2CB9906B2915AEF204751BE77DA74E061CC
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/halo-c-login/runtime-es2015.js?v=23.2.1
Preview:	!function(e){function t(t){for(var r,l,a=t[0],u=t[1],s=t[2],p=0,f=[];p<a.length;p++)l=a[p],Object.prototype.hasOwnProperty.call(n,l)&&n[l]&&f.push(n[l][0]),n[l]=0;for(r in u)Object.prototype.hasOwnProperty.call(u,r)&&(e[r]=u[r]);for(c&&c(t);f.length;)f.shift()();return i.push.apply(i,s\|\|[]),o()}function o(){for(var e,t=0;t<i.length;t++){for(var o=i[t],r=!0,a=1;a<o.length;a++)0!==n[o[a]]&&(r=!1);r&&(i.splice(t--,1),e=l(l.s=o[0]))}return e}var r={},n={0:0},i=[];function l(t){if(r[t])return r[t].exports;var o=r[t]={i:t,l:!1,exports:{}};return e[t].call(o.exports,o,o.exports,l),o.l=!0,o.exports}l.e=function(e){var t=[],o=n[e];if(0!==o)if(o)t.push(o[2]);else{var r=new Promise(function(t,r){o=n[e]=[t,r]});t.push(o[2]=r);var i,a=document.createElement("script");a.charset="utf-8",a.timeout=120,l.nc&&a.setAttribute("nonce",l.nc),a.src=function(e){return l.p+""+({1:"generic-error-generic-error-module",2:"interstitials-change-pw-confirm-change-pw-confirm-module",3:"interstitials-collision-collisi

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 131 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3547
Entropy (8bit):	7.901809569390095
Encrypted:	false
SSDEEP:	48:peD2z3kNJZck9w3F8u/9VeuMG1nue49lddxKygAp2RzMsYTLqxpRf8rZDz5v:fkNJS13FD5sroy1p2pM1Twpa1R
MD5:	0A389E6EB13FC2DF8C5DF590992C7E67
SHA1:	583EA3802BF4C15C8FB8371938FE7653E67DBBF0
SHA-256:	54D7A245743195D60C153F18C4ED4FB8D927D7D760EE26F601B4C2DD2FC9C26B
SHA-512:	8A783CB30E75E6565D4E7A190B5EADCE8B806CC22F7C5F3D17B6CC1EE369DE9E4F94DDF5BDFF74410D192FEC2E12E920BD4BDB689B852486C1506AD820B5EBEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6...........IDATx..y.....{z.P..l...BpA..."....=.}..B...A..M..I$`T.@.!$0,.`"DP....(..A...A.P..+...3.\|.TWw....z..NuW..~S.....uO,.2.#%....HP......SP...T.5`......r.$...F...5........v.....T?+...)..yZ....V...$..z..R..'....g...<...-.......v......u.zd...vM....7..!..K..j.xBhax./...8..v..~9.S......./.............i.. .zP........6F.h4!.........>......!c..(....i[w0.....H..........u1..9 ..5.$x....#.e.J...p..<.F..wh.1....~..'..w.w.W.g...\|.....<...A.>.?ru"14`..:...i.+.6aEA....:f..bv.E....'}.x.L...Q.B.E3..."...M.5}.8.C....}.....gb.B.+.2..K.(.../x]..g....'w....J.2{..4......X...1X.......\."PL...././I....{...h.?.(>.e..`..&...?U.B...I...L..w...>b8..4.L...8$......2..?...G.....-..n...>..."..&.R.6..>.B..[..%...X..#O.)`..H.......4..p.8....p0....P..`...?h~"@.).L..=....s>....\9....b.F...K......F.A..a. ..@..+In7b........j........:...`.....r..h/O..`....I.u.Z'...?.....s.5..7.CB3.....x.....*..V..%.Ddj;G.xd7.N..?g...F.a.....>.q1.B...L..(+......^dK.v8c?.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32147)
Category:	downloaded
Size (bytes):	480909
Entropy (8bit):	5.418878253776284
Encrypted:	false
SSDEEP:	6144:TW8OfwjsL0W6FYEeiFzRNIHftOma4kbEamIia49AnbViWMXb9exQ:Sfwja+yU49An5iWOqQ
MD5:	016FFAE66513FCAE583BCC64A0B66869
SHA1:	CD2CCF7CC47BD6ADBC1FB46F8A88D610824F7037
SHA-256:	55F966D09AFC4A653A1F26B57E57412D5C42191D5692157D94110B23CA74C9D2
SHA-512:	0BEE2BCC0C4DED18A2DEB9B811234C555FA4D2F5D061A853C1443B6AFCA7AF813E396668AA7543586ECB9EFB8DA901CF3FAC33E396EB85D48B84D5F2CB8B963A
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/site/main.js?buildTime=1720803349
Preview:	(function(e){var t=window["publishedWBJP"];window["publishedWBJP"]=function o(s,a){var l,u,c=0,d=[];for(;c<s.length;c++){u=s[c];if(n[u])d.push.apply(d,n[u]);n[u]=0}for(l in a){if(Object.prototype.hasOwnProperty.call(a,l)){e[l]=a[l]}}if(t)t(s,a);while(d.length)d.shift().call(null,r);if(a[0]){i[0]=0;return r(0)}};var i={};var n={2:0};function r(t){if(i[t])return i[t].exports;var n=i[t]={exports:{},id:t,loaded:false};e[t].call(n.exports,n,n.exports,r);n.loaded=true;return n.exports}r.e=function e(t,i){if(n[t]===0)return i.call(null,r);if(n[t]!==undefined){n[t].push(i)}else{n[t]=[i];var o=document.getElementsByTagName("head")[0];var s=document.createElement("script");s.type="text/javascript";s.charset="utf-8";s.async=true;s.src=r.p+""+{11:"5ab2b9565867ea666fb8",12:"616c4dd0568c07183a5d",13:"392868449bcd750dc40a",14:"959616cc5e24d1c02d25",15:"b6353cc0e423d7a50e8c",16:"054f225d281471b09455",17:"2e90ceda1aa59119b0b5",18:"afaef63f10fcebc93d78"}[t]+".js";o.appendChild(s)}};r.m=e;r.c=i;r.p="http

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57977)
Category:	downloaded
Size (bytes):	130681
Entropy (8bit):	5.15538391001049
Encrypted:	false
SSDEEP:	1536:w0HuJvLCcEl1lG55di445Cq2QogC6+owvpVg3idNl2QgL+gv5VE3yd+82igi+WvZ:ZHuD9N0
MD5:	E6FAA29ABDA062B2AF50D006AFDD03DE
SHA1:	2F33D699D48C0F9CEE4BB531F10E86B6A72CC8EB
SHA-256:	E9D64DDC98959FB478CC1E10B665C237608386CE7820CBFA5B4C502567642D22
SHA-512:	01F6009B45471C5E69B0B1352EADA26F1EB62A3ACBF9F367214AD6C2E6FBBA3438C72E8BE8EF2E75BDB52D4E6A746E0E7EE77B61F88368C20F2F5DB3DB442910
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/halo-c-login/styles.css?v=23.2.1
Preview:	.font-regular{font-family:font-regular,sans-serif}.font-medium,.font-regular{font-weight:400;font-stretch:normal;font-style:normal;letter-spacing:normal;color:#1d2329}.font-medium{font-family:font-medium,sans-serif;font-weight:500}.font-bold{font-family:font-bold,sans-serif;font-weight:400;font-stretch:normal;font-style:normal;letter-spacing:normal;color:#1d2329;text-indent:-.05em}.line-height-normal{line-height:normal}.flex-container{display:flex;align-items:center;flex-direction:column}@media (max-width:767px){.login-card{min-height:384px}.sgw-t-pad{padding-top:165px}}@media (min-width:768px){.wide-card{width:600px}.interstitial-card{width:556px}.login-card{width:456px;min-height:520px}.login-card-no-height{width:456px}.qr-learn-more{max-width:1072px}.sgw-t-pad{padding-top:182px}}.fade:not(.show){opacity:0;transition:opacity .3s linear 0s}.duc-modal-content{max-width:560px;border-radius:16px}.duc-modal-content-small{max-width:400px}.duc-modal-content-standard{max-height:90vh;overflow

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65483)
Category:	dropped
Size (bytes):	93636
Entropy (8bit):	5.292860855150671
Encrypted:	false
SSDEEP:	1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ
MD5:	3576A6E73C9DCCDBBC4A2CF8FF544AD7
SHA1:	06E872300088B9BA8A08427D28ED0EFCDF9C6FF5
SHA-256:	61C6CAEBD23921741FB5FFE6603F16634FCA9840C2BF56AC8201E9264D6DACCF
SHA-512:	27D41F6CFB8596A183D8261509AEB39FCFFB3C48199C6A4CE6AB45381660C2E8E30E71B9C39163C78E98CEABC887F391B2D723EE5B92B6FBC81E48AC422E522B
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /.(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t,

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58453)
Category:	downloaded
Size (bytes):	480231
Entropy (8bit):	5.420644885310271
Encrypted:	false
SSDEEP:	6144:V9iviwh+gUW1T3gv69owLgI9pNThOyk9BsHgv5LsUh3:3ZwYgUkTwv69o0z9pNTf08gvxh3
MD5:	C37A1910680F317861AA498CA50792EF
SHA1:	5CBA6D1C1A9CE168ADF4B150676CDC6C5EB74402
SHA-256:	C4ACE0B2EBDB364DE05AB1E835D08BB84BE0342A2906D2625D5D79AD5655724D
SHA-512:	E2095C1BFCB0DEADF7BAB56810905DFE8309CBB66A5568286A8B1A09B3686EA99E70FA794C254C44541CEEDA977B169371C6675703FB7D9628111CDD427FC62E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/prebid/prebid-2.0.js
Preview:	/* prebid.js v8.51.0.Updated: 2024-10-04.Build: 2.0.33.Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, liveIntentIdSystem, medianetBidAdapter, openxBidAdapter, prebidServerBidAdapter, priceFloors, pubmaticBidAdapter, rtdModule, rubiconBidAdapter, taboolaBidAdapter, tripleliftBidAdapter, ttdBidAdapter, userId, yahooAnalyticsAdapter, yahooPrebidServer, yahooRtdProvider, yahoosspBidAdapter, yieldmoBidAdapter, identityLinkIdSystem, pairIdSystem /.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.(()=>{var r,t={5649:(r,t,e)=>{function n(r,t,e,n,o){for(t=t.split?t.split("."):t,n=0;n<t.length;n++)r=r?r[t[n]]:o;return r===o?e:r}e.d(t,{A:()=>n})},5920:r=>{./.* @license MIT.* Fun Hoo

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13915
Entropy (8bit):	4.98821873269165
Encrypted:	false
SSDEEP:	192:q15xu+ZpvFjTEopZr76iB6ONjMHwcW5NsgEldpA1YAqNyMPcDxza2wHhPxbtR:q15xuOp9jjB76yvlMXA2xA3+yMP4azX
MD5:	61D02606CA446279B7144C73B31440FF
SHA1:	E228B1182232CEBBC89B132029586463D7F5F4C2
SHA-256:	1AA5AF21F967D4390F8473EEAA87654726EC48F77D9D610271EE3E7A74D035C6
SHA-512:	83BF39266B7A550A7354D68F10F94A8E9ABF905F6E1D7CE90599F1322C5A84E9B5BC1DA95AACF288D0A954F2AB99B6B9C7CDFE845646BE501547E8350266971F
Malicious:	false
Reputation:	low
Preview:	{"common":{"opensInNewWindow":" (Opens in new window)","fullPageLoading":"Just a moment.<br>We're almost there..."},"header":{"signIn":"Sign in","to":"to {{HEADER_VALUE}}","splitPwHeader":"Welcome","multiSaveHeader":"Select user ID","signInWithMyAttHeader":"Sign in with myAT&T app"},"error":{"careCode":"Care code: "},"genericError":{"header":"We want to keep your info safe","button":"OK"},"fastpayButton":{"orSeparator":"OR"},"inputs":{"showPassword":"Show","hidePassword":"Hide"},"manualLogin":{"userLabel":"User ID","passwordLabel":"Password","forgotUserId":"Forgot user ID?","forgotPassword":"Forgot password?","keepMeIn":"Keep me signed in","saveUserId":"Save user ID","continueButton":"Continue","signInButton":"Sign in","cancelSignInBtn":"Cancel","dontHaveId":"Don't have a user ID?","createUserNow":"Create one now","eRepairSignInWithPhoneNumber":"Sign in with phone number"},"multiSavedLogin":{"doneEditingUsers":"Done","kmsiUserLabel":"Signed in","addUserId":"Add user ID","removeUserId":

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3775
Entropy (8bit):	4.568691852261433
Encrypted:	false
SSDEEP:	96:UgGKAtQ3k/GNXl2a4GzkNGSmT6xJ5orONPv:zGKAtQ3Lh0FGzvTmJv
MD5:	4BECCEBE0A060B2B2C43DE5C2D4512EF
SHA1:	250A779DD017877B9F360B264CF072D9E87974FF
SHA-256:	446F48F512ECC0B771AF3C21A3036DE3A1C5740D1E6BDBB61448834326D0C738
SHA-512:	09CC7F6AC18777399DCFBC22EA9069779C0D8193A269F672B62D738B79B6EF72AE4A30BD85D111D0E03E9FBA29387B9A91AB6D925F0324D764A27C6416FC5288
Malicious:	false
Reputation:	low
Preview:	/!. Trend 0.2.0. . Fail-safe TransitionEnd event for jQuery.. . Adds a new "trend" event that can be used in browsers that don't. * support "transitionend".. . NOTE: Only supports being bound with "jQuery.one".. . Copyright 2014, Pixel Union - http://pixelunion.net. * Released under the MIT license. */.;(function($){.. // Prefixed transitionend event names. var transitionEndEvents =. "webkitTransitionEnd " +. "otransitionend " +. "oTransitionEnd " +. "msTransitionEnd " +. "transitionend";.. // Prefixed transition duration property names. var transitionDurationProperties = [. "transition-duration",. "-moz-transition-duration",. "-webkit-transition-duration",. "-ms-transition-duration",. "-o-transition-duration",. "-khtml-transition-duration". ];.. // Prefixed transition delay property names. var transitionDelayProperties = [. "transition-delay",. "-moz-transition-delay",. "-webkit-transition-delay",. "-ms-transition-dela

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	45877
Entropy (8bit):	4.956959793270908
Encrypted:	false
SSDEEP:	768:lCBaz8/sEgxyG5abm0m1uxz6VEagZ1JezVXCQgAGCiTPFE/2:lCBaz8/svhEm0TxMEagZ1J0CQgAGCiT3
MD5:	8A88F53D6A1C86A5FE0D5EA04231945C
SHA1:	FAB86BBA285FF1F65EBBD2DDC1F52C7B94C38960
SHA-256:	D9992CF52941785E09B972A18984C9E55456735BDC7F4E7D5DE43C9B60058689
SHA-512:	9559909C1B47C5B606DBA99A20629D7F101B99FCE971B115BF8849975A10BFA2E889DFD44AF754BB638DA3961477EB1E5727D4E0BD62C218B380DA006C0C72C4
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/files/main_style.css?1720804667
Preview:	ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, div.paragraph, blockquote, fieldset, input { margin: 0; padding: 0; }.ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, p, blockquote, fieldset, input { margin: 0; padding: 0; }. input[type="text"], input[type="email"], textarea { -webkit-box-shadow: none; -moz-box-shadow: none; box-shadow: none; -webkit-appearance: none; -moz-appearance: none; appearance: none; text-shadow: none; }. input[type="text"]:focus, input[type="email"]:focus, textarea:focus { border: 1px solid #777777; }. textarea { resize: none; }. select { -webkit-appearance: none; -moz-appearance: none; appearance: none; text-indent: 0.01px; text-overflow: ''; }. .wsite-form-field input[type="radio"], .wsite-form-field input[type="checkbox"], .wsite-form-field #wsite-search-sidebar .wsite-search-facet-availability input[type=checkbox], .wsite-form-field #wsite-search-sidebar .wsite-search-facet-checkbox input[type=checkbox], .wsite-com-product-option-group

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	77108
Entropy (8bit):	5.45223432694666
Encrypted:	false
SSDEEP:	1536:xOCNAknkq4SkPt/t9k0kUwTX686VkqkWGxg0scktlLaU:4xsrI3h0/U
MD5:	26154102C9EBBC53AB371CF876E451B7
SHA1:	C6452FAF23907015333696F08201508A0C6FE3B7
SHA-256:	953C41A4056A677A02B52E0C6019FF87CD4A86A06681364FDEF3DC02DB822DD3
SHA-512:	137B676D6CBCC7C0EA0CD7D57143E9CF73B60C986A8EBDA66860F7633EA95CE2C468FBB04067713296736D189370AC8645392CC568ED26E63CD2DD3F872EE5A4
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{CG0s:function(t,e,i){"use strict";i.d(e,"a",function(){return R});var s=i("vxDQ"),r=i("Ji9S"),n=i("LVBD"),o=i("Cs7S"),a=i("s0Cq"),c=i("cVEU"),l=i("fXoL"),u=i("jhN1"),d=i("ofXK"),h=i("e8Ap"),p=i("F93+"),b=i("3Pt+"),m=i("sYmb");let g=(()=>{class t{constructor(t,e){this.jspVar=t,this.adTag=e,this.CONFIRM_PROFILE_POLICY_URL=this.jspVar.getVar(p.a.CONFIRM_PROFILE_POLICY_URL),this.trID=this.jspVar.getVar(a.d.trID),this.opType=this.jspVar.getVar(a.d.opType),this.APPNAME=this.jspVar.getVar(a.d.APPNAME),this.userID=this.jspVar.getVar(a.d.userID),this.targetURL=this.jspVar.getVar(a.d.targetURL)}takeToMyAccount(t,e){this.adTag.sendLinkEventToDDO(this.adTag.getLinkDataFromElement(t,this.CONFIRM_PROFILE_POLICY_URL)),e.submit()}}return t.\u0275fac=function(e){return new(e\|\|t)(l.Nb(s.a),l.Nb(r.a))},t.\u0275cmp=l.Hb({type:t,selectors:[["app-error917dot33"]],decls:14,vars:12,consts:[["id","gotoaccForm","method","post",1,"inline-flex",3,"action"]

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 260 x 340
Category:	downloaded
Size (bytes):	539840
Entropy (8bit):	7.950660003114956
Encrypted:	false
SSDEEP:	12288:OqzGmFxefUFk3+6w/AuS4Hf0FzU/VF4HxHi1u2k0SwU1TKd5I/Z+aC10n/:OqzGmfeMFF6buloUNGicgd8+J0n/
MD5:	2FB9D43C74752389405ABC1A5814B44A
SHA1:	BD551A3693F34693083D37EEE3113D667CE4F3C4
SHA-256:	7A18441E184306E7F51C5493C0C17F676C73E12F518DC468DCB565B25D90FC41
SHA-512:	D0CED802BD8B03554E538D1316CC37EEFA4E0CBA33E54242BA36F4C1A3D1B991135208B54064499E571A21562AEFC67DBBE691B38E333148CCAB2518B229AA80
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif
Preview:	GIF89a..T.......................................................................U..R..Q..O........K..M..N..N..O..P..Q..Q..S..U..N................^<.mC.N..O..L".Q..S..[..M.....d.d?...pA.iM.h/.i........f...........................................................................................................w..o.rW.S..U..O..Q..S..^$.`0.M..N..O.....................}.hN.X5.X..o>.U..S..P..R..N...n.M..Q.............M%.W..r5..W..P..e..d.Y4.._&.Z$......v._=.^,.pR.Y#.kB.f5.}.O....R..S..S..}D............`@.hC.`3.....^5.U$.X..M"....M..U%.U!.a4.M..Q..M .N..N..Q..O..O..Q..P..U..U.........hD.w\...^<.uR.`1.z.]2.Z+.~.X).vQ.W..k...U..P...b.P...v.t.W..v..V.].pP...P..X"....X.{U........X,.f.v`.....^..vQ.L..L.....N).jN.\|].N..{N.qO.................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......T....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........*:JZjz

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/g/images/spaceball.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32147)
Category:	dropped
Size (bytes):	480909
Entropy (8bit):	5.418878253776284
Encrypted:	false
SSDEEP:	6144:TW8OfwjsL0W6FYEeiFzRNIHftOma4kbEamIia49AnbViWMXb9exQ:Sfwja+yU49An5iWOqQ
MD5:	016FFAE66513FCAE583BCC64A0B66869
SHA1:	CD2CCF7CC47BD6ADBC1FB46F8A88D610824F7037
SHA-256:	55F966D09AFC4A653A1F26B57E57412D5C42191D5692157D94110B23CA74C9D2
SHA-512:	0BEE2BCC0C4DED18A2DEB9B811234C555FA4D2F5D061A853C1443B6AFCA7AF813E396668AA7543586ECB9EFB8DA901CF3FAC33E396EB85D48B84D5F2CB8B963A
Malicious:	false
Reputation:	low
Preview:	(function(e){var t=window["publishedWBJP"];window["publishedWBJP"]=function o(s,a){var l,u,c=0,d=[];for(;c<s.length;c++){u=s[c];if(n[u])d.push.apply(d,n[u]);n[u]=0}for(l in a){if(Object.prototype.hasOwnProperty.call(a,l)){e[l]=a[l]}}if(t)t(s,a);while(d.length)d.shift().call(null,r);if(a[0]){i[0]=0;return r(0)}};var i={};var n={2:0};function r(t){if(i[t])return i[t].exports;var n=i[t]={exports:{},id:t,loaded:false};e[t].call(n.exports,n,n.exports,r);n.loaded=true;return n.exports}r.e=function e(t,i){if(n[t]===0)return i.call(null,r);if(n[t]!==undefined){n[t].push(i)}else{n[t]=[i];var o=document.getElementsByTagName("head")[0];var s=document.createElement("script");s.type="text/javascript";s.charset="utf-8";s.async=true;s.src=r.p+""+{11:"5ab2b9565867ea666fb8",12:"616c4dd0568c07183a5d",13:"392868449bcd750dc40a",14:"959616cc5e24d1c02d25",15:"b6353cc0e423d7a50e8c",16:"054f225d281471b09455",17:"2e90ceda1aa59119b0b5",18:"afaef63f10fcebc93d78"}[t]+".js";o.appendChild(s)}};r.m=e;r.c=i;r.p="http

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	20440
Entropy (8bit):	7.990346787951631
Encrypted:	true
SSDEEP:	384:BaWuWq71DamR9OFcm8m8yN72N7lruBnxdWA7MWb93IXK+P09SDknQYAGNXa:Bimcm8mJxmrCnxhY1R8SDkQsNq
MD5:	F635DA6DCE787C8447E043CF0819517B
SHA1:	4C7D1A18816C5D1C5793F8ED397705408433B4FA
SHA-256:	BDAA329A2996D1E659E954FFBF7B5FB03F250484EA9FA16073C60051BA909DC6
SHA-512:	1C49C20DF7EE17A6EE2EECD681544F5BC02E45EB1B6A994ABA09C6792362CFF78910C79216BBEE44E31D01032B292C3738770EBE2BD758DE033C55ACEBF6957B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/f1365fOmnZ.4elatJGgP8Q--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/wpix_new_york_city_ny_articles_672/0499bb6503b1adc9da306296f5b6156a.cf.webp
Preview:	RIFF.O..WEBPVP8 .O...k.......>y8.H$.....k....g..O..E...}%.~.}......m...\|;.]..q....2..0~u.5...;............Y~..J.'...........Nn.....1.k..-W...D.qi..\|..4.g'........z....=...iq..e......g.!......._.+.z.j ......R...U...Y.v... "..\|m.iQ.@'.WW..M."..@.....H..5..G"2...m....xh:]..-...FF.6...}..)... ..m0.....v..(}}.D3..a.dD.#.cN.g>._.P...7....'\2.....=.......M0.&../G+....9\E^...o.\|f... ......U...,wr..T...:....1;.-Q>..r`.= ...n...M.R.=....v.R.F-A..v..tP.W...6..x._..E=....V^....h..............K...un5.ht.....a.8..[9..F.#.@p..DB..+..e<.~KQ..}8..1 ....9D3F\|URJ..-..o....\|..G_k ,....=.Z....._{..~..;.X...G.23.~...X.)]..;....x..]..........K'..&2..,.$+.......U..CBa.f..3..L....C.r6................+b..0m2....O....^.d....d...S.Tw.T.U.G..V.&..A..E...2XaD...V..,~8..+U^...b.'.N.b'.....{8$_...}BW.?..?H..;....$Aj}u<M=.~}L8`...x.....&A...Q.ts..s1a.d!.Z%`dX.. ..B....k.&..._..'..u.F...4}.S?..P....eFCO..~...19..s.E.5.e,(.o.a5M...O.o..h..a"..z...k._l._.O.....B.oy8....W.G.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	21990
Entropy (8bit):	7.9405779152018745
Encrypted:	false
SSDEEP:	384:BYNg7zNoeT7MJ/CVFrbrEc0OjFCaoW4aGZ4qhwkRNniaSR7ZfYaUolqTW:BYy3SeTYCPEcF9omGLwkRFidBpITW
MD5:	DF793C45770FDABBE85F3F1B8958DDB7
SHA1:	F8881833700EEE94D9E54330616D46A39E8F57C4
SHA-256:	BC453A3393413C8473754FF98ACB24B58921665FD5CE09ED0E4C42336501ADC6
SHA-512:	1B9DE16DCEED36D9BCC8E1FCD56CB2ED989C5B4437BE2A2D033137309CD3F45D355D36996CF51EB6FFF7CDD10601E4A00F492CBF1EC94D635DDB437916451D29
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/LbcXySL6ihB5eG7HKyPptg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/210837c0-89b4-11ef-bdef-60178d6b3891.cf.webp
Preview:	RIFF.U..WEBPVP8X.... .........ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3697
Entropy (8bit):	4.707743528907903
Encrypted:	false
SSDEEP:	96:r4QJODZATiN1C81vwuMymZgpqVf9oF2VdP5k6ya/e3Hgqj9DdZda1SO:XJ6ZATiq81vDtNh8dP5k6yAeXgqj9B7Y
MD5:	AC373D716AFE4270DF40F60417B0F418
SHA1:	ABA148148C771BB66B0B4AEAB6EAC8EB40352745
SHA-256:	F75570C56743E8C705CB06F5F1F9B1F8F2CC13119F5E2ACDA2F3BB8D987DE94A
SHA-512:	3FAF2FE9C98144F41A3AB614E23E1D488AAEB2C944A3C736C196C69175C96E4D78D2FD69C0B05A5DDCAAB819C0FCA2BE40DC2C178257E2D0AFA2523072CDA985
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/files/theme/jquery.pxuMenu.js?1720786820
Preview:	/===================================================.= Weebly Horizontal Site Menu =.===================================================/..(function($) {.. /*. . * Generate a flexible responsive menu from the default navigation templates. . Groups overflowing nav items into a "more" menu item. . /.. var Menu = function(menu, settings) {. this.$menu = $(menu);. this.settings = settings;. this.$more = $('\. <li class="menu-more has-submenu ' + settings.parentClass + '"> \. <a href="#" class="more-link ' + settings.parentLinkClass + '">' + settings.moreLinkHtml + '</a> \. <div class="' + settings.containerClass + '" style="display:none"> \. <ul class="' + settings.listClass + '" data-menu-more /> \. </div> \. </li>');.. this.init();. };.. /*. . * Initialize the menu on load and on resize. . /.. Menu.prototype.init = function() {. var self = this;.. $('body').addClass("mor

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3910)
Category:	downloaded
Size (bytes):	3911
Entropy (8bit):	5.0666543016860475
Encrypted:	false
SSDEEP:	48:MV4jWxgDa+AZ5TvUSoekrDSiqfcoj8cqL54QgP2nuwvn:AeLAjYS9sDCkoj8cq9Xn
MD5:	1DCEBBB5A1EB8B028310CEEB72A339B3
SHA1:	E254B7A35AC189FD1CE9CF8BD78593BEBFE27D7D
SHA-256:	865CB87DE9FC4D6530EDCE21F0103107ABAE6ABE45CABDFF2AD9AF067B3D8E0A
SHA-512:	1FE84409EC4FEAF49C31208668D29F215EA8136EA49134171F4A930963745031520068C0E17783EE557FAE24590B4079E8ECEEB010766466D7C8097AE97F1E53
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/css/old/fancybox.css?1720803349
Preview:	/! fancyBox v2.1.0 fancyapps.com \| fancyapps.com/fancybox/#license /.fancybox-wrap,.fancybox-skin,.fancybox-outer,.fancybox-inner,.fancybox-image,.fancybox-wrap iframe,.fancybox-wrap object,.fancybox-nav,.fancybox-nav span,.fancybox-tmp{padding:0;margin:0;border:0;outline:none;vertical-align:top}.fancybox-wrap{position:absolute;top:0;left:0;z-index:8020}.fancybox-skin{position:relative;background:#f9f9f9;color:#444;text-shadow:none;border-radius:4px}.fancybox-opened{z-index:8030}.fancybox-opened .fancybox-skin{box-shadow:0 10px 25px rgba(0,0,0,0.5)}.fancybox-outer,.fancybox-inner{position:relative}.fancybox-inner{overflow:hidden}.fancybox-type-iframe .fancybox-inner{-webkit-overflow-scrolling:touch}.fancybox-error{color:#444;font:14px/20px "Helvetica Neue",Helvetica,Arial,sans-serif;margin:0;padding:15px;white-space:nowrap}.fancybox-image,.fancybox-iframe{display:block;width:100%;height:100%}.fancybox-image{max-width:100%;max-height:100%}#fancybox-loading,.fancybox-close,.fancybox-pr

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	38429
Entropy (8bit):	7.967445486012494
Encrypted:	false
SSDEEP:	768:KcgL37t8ZbZsUAZ3zw3v3Gl0EmDK4/Gqjz2VmgSY7AywRVp:KD7tof0D4v3GlWeOz2IgSZ5RH
MD5:	135B11FA0A94C543AC7554D4548AD219
SHA1:	77F262200CF2A50A2D9B1C7B0C6FC4886CFD63DD
SHA-256:	B7C191433406BACECDBC74E50E8A012D1F0B0668689A9E8AE41E9DC621AD6883
SHA-512:	0390CF9A576C652B51F8BC4CB94ADCB96402912CB72825D95855D8254BACD38C79926CC85C66BBBA7E5834750EBF593CC09C8AC3FD12CF6332E11E1760F4168D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C......................................................................................................................E.........................!.1.AQ.."aq.2..#BR...3br...$....4CS..ct..%................................3........................!1..A."Q.#.23Ba$q..4CR...............?..P.C..!.d2...C..2...C..2...C..2...C..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11384, version 1.0
Category:	downloaded
Size (bytes):	11384
Entropy (8bit):	7.977909649541678
Encrypted:	false
SSDEEP:	192:Y5WtCjP0dAaDu7V+6+/ERqOUI6ZQBnNaXD4gpKL6jvTDyZwFxgIuB72gzOe6GV:Y5o8P0CaD6VjpkQBnNaXDLKov6ZwFCBf
MD5:	FEB6C980C7D633C192A19B13047270B8
SHA1:	9CA9A681147D49AD3BA857E740D2A335E6F61812
SHA-256:	8749B48067AF37C72625416CC5DA9FDDE06DF26BFF1F471461DEC1BBDAF43F78
SHA-512:	F13823E60143881A234B228D8B524407611410755FFF8D5FB38277F21D3489F60FADE65E30115A32A7ADB460EE2D96B1BEB8E3D66CEAB67CE6C3C8CE2F82D04D
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Karla/bold.woff2
Preview:	wOF2......,x......V...,...........................R.....J.`?STATL........D.i.....6.$..X. .... ...YH..n.^1(..I3./.8."`.:...".....M..........@....A.....{t...(("....E...:Bc....n.... ..!A< ..!.<.i]..."....X.`G.bi`...>..[,.....,........zI..,.+"T.....G:...o...4....e...>+u3......(A...HL@{nf.s...E...z.[.d......\|b..C]z.......D...... .\|.w..{....&S....g6'f.xE'.M....T.].......K.. ...k.=._6.L..w...fQk.u...w9u.t.....5.G`.Zc..JK...kP/..#.P.Y.._.c.LX.9v. q9...3.YJf..w..Ra.#.,2.\....o^.:.+.X..Vl.!Hnw...i'.....o3..g.....>.W`.t.@.x.). ...hY..E.R...; ..4...o?.Y3.c..NA....07.y...[7.g...C.....1....!t.6>.s.M....lJE.:n....5........I...@.\W(.....E.C.Yl....k....Z......G?.C...(..3."1.cE...8...~...`a...".gM.....0.:......MA.'..%>k...4..=.BN..q.D..r.......oq...FP........c.=H.F5.7....a...a..r.N!...wo.fOpA.nyqJT..;.....4..m.....$jF.$....;.4..MQ..5..e...H`....M...Q..{oC.5\.[.V.S^.7..'.:.o....h.w'...9..f~P.[.6\:.L.2`.$..*.R.... L."0...e\....?z...:K.L(8..u.z...tx".......q..

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15264)
Category:	dropped
Size (bytes):	15697
Entropy (8bit):	5.53729719471769
Encrypted:	false
SSDEEP:	384:uQTCfjv99mW+911+Fl0YD0Dew/X2q5ulRIUeT:uQTCfGZ1+Fj9w/XuuT
MD5:	E2202E6ED6EF52CEC2C4A875C99225BA
SHA1:	FD48D3157CFA6B6E6FEC3E50787E357AA3288C88
SHA-256:	F2CFBD195DFF011843F93E2D32979F6F07926211CBF3EDDDC3B708B0BB04C8A2
SHA-512:	4E2AEFD87D89F4D5C00CFCAC8EE2D7748F84979BE9E66272475A621A19BA8FC884737DF604B3B7344FE4EB0C1154819880BC3769E25798BB4ABDDEF76EDC9B4F
Malicious:	false
Reputation:	low
Preview:	/* @preserve. * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $. . Original:. * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt. /./ @preserve. * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp>. * Version: 1.0.1. * LastModified: Dec 25 1999. /./. @preserve This code contains an altered version of the original source and is not meant to misrepresent the original software.. */.function base64(r){if("undefined"!=typeof btoa)return btoa(r);for(var t,e,n,f,o,i,a,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=[],s=0;r.length>s;)t=r.charCodeAt(s++),e=r.charCodeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i=256,a=n.length,l=1;a>l;l++)t=n[l],null!=e[o+t]?o+=t:(f.push(o.length>1?e[o]:o.charCodeAt(0)),e[o+t]=i,i++,o

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	136069
Entropy (8bit):	5.38571390285843
Encrypted:	false
SSDEEP:	1536:+vh357wo17UbuubwOc7dZo+VIlSMmnLZOtwTMQNrBUv5kIdkIdIZSUJy6oAcRaI1:+j7wo170uihjy6xb
MD5:	019508B4A5DA022114A78E5AC39B6108
SHA1:	3ADA331EFE7E4E94588CF5F469BD1697652282BD
SHA-256:	39D91FF83D808EE3A5DCD12C1586C17E14A1FF8D9422333D5883AB5884EFCDA4
SHA-512:	213D9119A850328DC52634D7CBDAF4A7E18A45FE6330D3D1A47BC8B965A66248645CFE440A5DD4D53A1C82D9146655FA4C662D1C8B42F21DA1CC4AFE543A57B4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/oa/consent.js
Preview:	/! For license information please see consent.js.LICENSE.txt /.!function(){var e={6848:function(e,n,t){var o,i,a;!function(s){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=s();else if(null!=t.amdO)i=[],void 0===(a="function"==typeof(o=s)?o.apply(n,i):o)\|\|(e.exports=a);else{var r=s(),c="undefined"!=typeof self?self:$.global;"function"!=typeof c.btoa&&(c.btoa=r.btoa),"function"!=typeof c.atob&&(c.atob=r.atob)}}((function(){"use strict";var e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";function n(e){this.message=e}return n.prototype=new Error,n.prototype.name="InvalidCharacterError",{btoa:function(t){for(var o,i,a=String(t),s=0,r=e,c="";a.charAt(0\|s)\|\|(r="=",s%1);c+=r.charAt(63&o>>8-s%1*8)){if((i=a.charCodeAt(s+=3/4))>255)throw new n("'btoa' failed: The string to be encoded contains characters outside of the Latin1 range.");o=o<<8\|i}return c},atob:function(t){var o=String(t).replace(/[=]+$/,"");if(o.length%4==1)throw new n("'atob' failed: The str

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1072
Entropy (8bit):	4.47138018366519
Encrypted:	false
SSDEEP:	24:x9knPl91ba+fH4fzVaesDs0/+tcSqgH9VW6Y1:x9knxb9fH4fMesDN/0YgH66Y1
MD5:	624057D51E1C5083E7159D7D7F0E9B26
SHA1:	E976D18E3EB1BD0875EE85F98CC94081F3455094
SHA-256:	83F5ED17F46CD4448A02C705214A95E869ECB411C8EA95E1256593C75E178E56
SHA-512:	55DBA55EF244ECE090D9CBC6D0AE9057E5D87FB67CA32D76AF6A815A1F30CDBB31A9BFD345569947E0188A1EE0F8379EDC917EC5E87692A2FBAE643EDC0250AA
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/timeout_redirect/timeout.js?v=23.2.1
Preview:	;(function ( HaloCTimeout, undefined ) {.. var timeoutMs = 600000;. var redirectUrl = '';.. function getTimeoutParams() {. try {. var timeoutMsFromPage = timeoutJspVars.timeoutMs;. if (timeoutMsFromPage) {. timeoutMs = timeoutMsFromPage;. }. } catch (e) {. // Do nothing. }.. try {. var redirectUrlFromPage = timeoutJspVars.redirectUrl;. if (redirectUrlFromPage) {. redirectUrl = redirectUrlFromPage;. }. } catch (e) {. // Do nothing. }. }.. function startTimeoutCounter() {. if (timeoutMs <= 0) {. navigateToTimeoutPage();. } else {. setTimeout(function() {. navigateToTimeoutPage();. }, timeoutMs);. }. }.. function navigateToTimeoutPage() {. window.location.href = redirectUrl;. }.. (function(){. try {. getTimeoutParams();. if (redirectUrl != null && redirectUrl !== '') {. startTimeoutCounter();. }. } catch (e) {. console.error('Timeout Error', e

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2512)
Category:	downloaded
Size (bytes):	75006
Entropy (8bit):	5.625174285042866
Encrypted:	false
SSDEEP:	768:YdDFSZ8JdMS1xGPlopXbk+KQZPKOf/py7pFw7N5o9qmse9fLrJIWzAfap34VEzH0:6FSZYdMS1xGNopX5LP16FuvqT7bmVF
MD5:	99BBE560926E583B8E99036251DEB783
SHA1:	8D81B73AE06F664F9D9E53DD5829A799BF434491
SHA-256:	648E766BF519673F9A90CC336CBECEDE80DCBE3419B43D36ECBB25D88F5584A3
SHA-512:	EE24915AA5C1C7C1DD571C07EFE46DFC173CB69D2DADC4C32891CE320EEF4FE1CFB614D9C212F16BFE2C83B29C6EEAB6C5A43F8E32D475DA8081B1E2D33869B4
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/wsnbn/snowday262.js
Preview:	(function e(b,g,d){function c(n,j){if(!g[n]){if(!b[n]){var i=typeof require=="function"&&require;if(!j&&i){return i(n,!0)}if(a){return a(n,!0)}var m=new Error("Cannot find module '"+n+"'");throw m.code="MODULE_NOT_FOUND",m}var h=g[n]={exports:{}};b[n][0].call(h.exports,function(l){var o=b[n][1][l];return c(o?o:l)},h,h.exports,e,b,g,d)}return g[n].exports}var a=typeof require=="function"&&require;for(var f=0;f<d.length;f++){c(d[f])}return c})({1:[function(require,module,exports){var JSON;if(!JSON){JSON={}}(function(){var global=Function("return this")(),JSON=global.JSON;if(!JSON){JSON={}}function f(n){return n<10?"0"+n:n}if(typeof Date.prototype.toJSON!=="function"){Date.prototype.toJSON=function(key){return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+f(this.getUTCMonth()+1)+"-"+f(this.getUTCDate())+"T"+f(this.getUTCHours())+":"+f(this.getUTCMinutes())+":"+f(this.getUTCSeconds())+"Z":null.};String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(key){ret

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1137
Entropy (8bit):	4.856994345754096
Encrypted:	false
SSDEEP:	24:IfJMIAnqsgAm0Lbia8lRWUXQHpeq0AGQwk7KFGRRKD/aJuPwPf9s1NduF8AfbM:IXsgALbMwU/FAGQjecCijqduFRjM
MD5:	E42E50EA3F07E4266E944FAF1DEE6D3C
SHA1:	EBD45EE0DE211F9E6AEE5DC4FB51CCC14FA081AE
SHA-256:	33A050282E9356BE2F2D8538F376FCBC4C7BBC778C4517375B44DAD46D48389E
SHA-512:	614EA3BADF8DBCF042E540DCA49F097D5EAC214AC0241B295E81FA65AFBCFFF6B1746D7BC4AA427A4DB96A19D27B54C0AB32CB46BE13C46F54C708AE3209BD17
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/ciam/en/common/js/keepAlive.js
Preview:	/. 1) This JavaScript is provided by AT&T CSO-Tguard Group.. 2) Import this JavaScript files into the pages where needed.. 3) This JavaScript will refresh the session when the user goes to a different page which is not behind our webseal. 4) Call the function refreshTGuardSession() using onload in each web page.. /.function refreshTGuardSession() {. addPixelImage();.}.function addPixelImage() {. var _body = document.getElementsByTagName("body")[0];. var _date = new Date().getTime();. var _qVer = "?v=";. var _imgSrcs = ["https://oidc.idp.clogin.att.com/static/pixel-url.img"];. var i;. for (i = 0; i < _imgSrcs.length; i++) {. var _rmImg = document.getElementById('haloAMImg'+i);. if(_rmImg){. _body.removeChild(_rmImg);. }. var _img = document.createElement("IMG");. _img.id = "haloAMImg"+i;. _img.src = _imgSrcs[i]+_qVer+_date;. _img.style.display = 'none';. _img.width = 0;. _img.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3600), with no line terminators
Category:	downloaded
Size (bytes):	3600
Entropy (8bit):	5.0991703557984245
Encrypted:	false
SSDEEP:	48:kAvNhI9OKn/hQVBVan40yt00nzt/VRgj9o91PYczAz9AfK9TPBlVnIkKYeE5W:kAvOpZ+B8R0FVRjrTEzmfgmzPr
MD5:	40B81B2D52BA9D2E2C64C31FF6A24CD7
SHA1:	6B5689250661646ECBB841F2475F1556A113373C
SHA-256:	E06BACA13F25DF9C7D684FC1B1FDFBBBB95070A1D5A9CD648632DA7BCCC90B96
SHA-512:	5657EE166A1EFF5DEEA7A0125EDD6178541396DCCB035785F5790BC1C57DEE6B0E1C9D063D00333E95667F699D99172796CE301EDD1DF2C4BFF02D25536F0D0C
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1728589706
Preview:	(function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={exports:{},id:n,loaded:false};t[n].call(i.exports,i,i.exports,r);i.loaded=true;return i.exports}r.m=t;r.c=e;r.p="https://cdn2.editmysite.com/js/";r.p="https://"+window.ASSETS_BASE+"/js/"\|\|r.p;return r(0)})({0:function(t,e,r){t.exports=r(610)},610:function(t,e){(function(t,e){var r={height:62,mobileHeight:124,getHeight:function(){if(u()){return r.mobileHeight}return r.height}};function n(e,n){var u=t("#weebly-footer-signup-container-v3");if(!u.length){return}i(e,n);r.element=u;r.iframe=t("#weebly-footer-signup-iframe");if(!o()){r.element.remove();return}a();s();l();t(window).on({resize:p(l,500),scroll:p(l,500)})}function i(e,r){var n='<link href="//'+e+"/css/free-footer-v3.css?buildtime="+r+'" rel="stylesheet">';t(n).appendTo("head")}function o(){var e=t("body");var r=!!document.getElementById("kb-container");var n=e.hasClass("splash-page");return!(r\|\|n)}function a(){var e=t("body");e.css({minHeight:"100%",posit

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596)
Category:	dropped
Size (bytes):	2116
Entropy (8bit):	5.310836992971446
Encrypted:	false
SSDEEP:	48:YgJxU6hIAeCt2Zmd8080MkJXOpr0vDGUzO:FJxDhIxCt2MdbIktOl0rGN
MD5:	7535500B7F02D5FA99E9FD796AEA78BF
SHA1:	969A737F0537486C4210CCC0A50FED651374422B
SHA-256:	2257C8CE8C1D27EA0CA336F65A4FB1C1FECA0DBBA41CB78D7D90BEBDF988B881
SHA-512:	3C378692B723F1EA11F5FBF34C4398B35DEB9EFCB3FB8014B304F00BDCEAFD66670AC115BE0453BE89A4561AC77FC164629F4C74FB93CF68715379C66D916D5C
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula v e5182acbbd5271e17d27fb6767b506295fc4bd21 */.function l(a){var d=0;return function(){return d<a.length?{done:!1,value:a[d++]}:{done:!0}}}.(function(){function a(g){var b=document.createElement("script");b.type="text/javascript";b.async=1;b.src=(window.quantumMetricAssetLocation\|\|"https://cdn.quantummetric.com/qscripts")+"/quantum-"+g+".js";document.head.appendChild(b)}var d={m31872:"attbusinesspremier",m33195:"attbusinesscenter",m47591:"attfemto",m47594:"attfemto",m47592:"attfemto",m47607:"attfemto",m47610:"attfemto",m47608:"attfemto",m40095:"attsapmp",m19442:"attsapmp",m40101:"attsapmp",m40094:"attsapmp",m18347:"attsapmp",m40098:"attsapmp",.m45917:"dtv",m45143:"dtv",m14186:"att",m14185:"attstaging"},k=function(g){var b=null;if(window.location&&"string"==typeof window.location.search){var e=window.locati

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62403)
Category:	dropped
Size (bytes):	77851
Entropy (8bit):	5.422328020643102
Encrypted:	false
SSDEEP:	1536:sVeGNcrk8ZlWwWJfg8f4NX6ziaubyLszIg:sVei8Zle7f4NqzxubyLszIg
MD5:	60F19CA2F094ACABBA5B7988467387C4
SHA1:	C7EA2FA0D8DA961083A322D72DEE176A45DF9232
SHA-256:	FD9784852FBB3FE6285225683513C82D88F104AF9B05AE0B7C5E973F33A0BBA1
SHA-512:	FD06B5BA1C97017C7833C7011202DC51821705ED85ACBE03F5AC3E4B01AA39F2D1F3F3CDF4EDBF50D48A5788FEB61DF0782181948F44F44614EC2A23327CE0CF
Malicious:	false
Reputation:	low
Preview:	/! SAFEFRAME 0.1.434 . 2024, Yahoo Inc. All rights reserved. /!function(){var t={9466:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l-9.9 9.9-9.898-9.9c-.78-.78-2.048-.78-2.828 0-.78.78-.78 2.047 0 2.828l9.9 9.9-9.9 9.898c-.78.78-.78 2.047 0 2.828.78.78 2.047.78 2.828 0l9.9-9.9 9.898 9.9c.78.78 2.048.78 2.828 0 .782-.78.782-2.047 0-2.827z"},t.exports&&(t.exports=e.close)},4228:function(t){var e;(e=void 0===e?{}:e)["decline-fill"]={name:"decline-fill",height:48,width:48,path:"M24 1C11.3 1 1 11.3 1 24s10.3 23 23 23 23-10.3 23-23S36.7 1 24 1zm9.8 32.8c-.9.9-2.2.9-3.1 0L24 27l-6.8 6.8c-.9.9-2.2.9-3.1 0s-.9-2.2 0-3.1l6.8-6.8-6.7-6.7c-.9-.9-.9-2.2 0-3.1.9-.9 2.2-.9 3.1 0l6.7 6.7 6.7-6.7c.9-.9 2.2-.9 3.1 0 .9.9.9 2.2 0 3.1l-6.7 6.7 6.7 6.8c.9.9.9 2.3 0 3.1z"},t.exports&&(t.exports=e["decline-fill"])},8586:function(t,e,n){"use strict";var r,o=n(7427),i=n(3215),s=n(3945);fun

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64855)
Category:	downloaded
Size (bytes):	943089
Entropy (8bit):	5.381924919282892
Encrypted:	false
SSDEEP:	6144:ItqOtAwKSJ5Df+AHK84JcfkqNJIzi1U1PJ3BeFnLSWGwMPSaOmIa9RQUOFVdFTJu:ItqyJ5ZHVycaPVIWDPIx69ZImmC
MD5:	C5834E79EE5811372BE376241D95E134
SHA1:	31F3093868F2B282D22CF8DEA4E873ED143C38CC
SHA-256:	AD5BB76ECF6D4D8423C14055014FA1444F6EB3EB0A5AB36D4769152892A2A34B
SHA-512:	BFF75C0DF080C3AA1C410648C4B833E81E0931FC59591E9BCE4E8137B7BDC8F233896B79E46B692C6DBA1A7C5651EFE824E58C70B41BCD00667F14F2A9B74BD9
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/yahoo-hp-att/loader.js
Preview:	//AB_TEMPLATE.//ab -> 21......var _taboola = _taboola \|\| [];var TRC = TRC \|\| {};.TRC.perfConfOverride = {'logTimer': 50000, 'logLength' : 5, 'traffic' : 50, 'measureEnable' : true, 'measureTimeToSend' : 10000, 'measureInterval' : 10000, 'disableRawDataSend': true};.................................window.TRC = window.TRC \|\| {};.window.TRC.version = "20241013-15-RELEASE";.._taboola.push({overrideConfig:{global: {"exclude-ms3":["explore-more-render"],"is-ms3":"true"},systemFlags:{loaderType:"trecs-1229-enum-refactor_ctrl", experimentID: 20640 }}});.try {(new Image()).src = "https://cdn.taboola.com/libtrc/tr5?abgroup=trecs-1229-enum-refactor_ctrl&pub=yahoo-hp-att"} catch(e){}.(function(){var __webpack_modules__={8867:function(e,t,n){"use strict";n.d(t,{Jh:function(){return s},ZT:function(){return i},ev:function(){return c},gn:function(){return a},mG:function(){return l},pi:function(){return o}});var r=function(e,t){return r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	22951
Entropy (8bit):	7.941514794371044
Encrypted:	false
SSDEEP:	384:Lw2Ma/IBu5w+VprQNMQtQuew8ib+N4L/tkACDDDqY/wdtWQOWb:cGIMhVyNMQtQueb0+N4zkP9QO0
MD5:	0427F6513B4C05FBD098F660883F330C
SHA1:	3250C913C21857D4ABC4AAC491B5C82183A90499
SHA-256:	8C0C2F5D06BE1E0030B9122691E3F558C509CAC76B9773924A082B2895922DEA
SHA-512:	E5273556E393871B736D2BD6B49CC32A496A6117EB690749FBAC994165253A43983209365434ACF5F7BCB4084B792BD210EA2CE93E5A7A977B5B900FF88A35D8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C....................................................................C.........................................................................d............................................K..........................!1..AQa."2q...B..#R...34b..$Cr..%Sc........Dd.................................../........................!1...A."Q.#2R3a$B.4.C............?.......l .....N.L...U:e...).).,l$..p..C".Z...Y5..#2.G..(k.8Y.h(...I6...n2..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.115834092163221
Encrypted:	false
SSDEEP:	3:Kpra/J:KFsJ
MD5:	D3C2A591900E64D260F13AE5EE229C68
SHA1:	8020918AB86109B17CC1B56D8A005767679A1C57
SHA-256:	21EB273EF68C50BC871CB1B80331BF441E9349D2ED73846431A57ECC6485383A
SHA-512:	01E854A9090495F812E5D0F4C02B967B89EC395BEC5D5A986729214219CF156D753251146C6CFD89D0A69EE71347958E8F465A4FBD1A24AF8D45B2D25D04514C
Malicious:	false
Reputation:	low
Preview:	END POINT NOT FOUND

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 269 x 85, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10617
Entropy (8bit):	7.970857157057675
Encrypted:	false
SSDEEP:	192:fmohGM8j40pd8Mj+o4+OB849yMTir8iBx3EeM9/Xm0ERGMhRZ+9f+ll:eRPsn84rBnUbr8uEB/WVRdefs
MD5:	9D30862F22BAEB52324F0B7015D5FBBA
SHA1:	A2DAB48CB5269DF475D793D91B9B0C1E83205348
SHA-256:	1E390418FDDDA8AED19B96C4F5FC78DF4FBF953906EF376C8A7208D8A260E969
SHA-512:	918A90B5A810A1DC5B059CFA056878A067C0EF4BC16D305A4696CC39DC0A3E996B6501E22E4AEDC66554094487790AB0447438D0C86342ACD7C8E9EC83D6DFF3
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/uploads/1/5/0/2/150218705/published/nc.png?1720787398
Preview:	.PNG........IHDR.......U.....S..&..)@IDATx..{p......V.k...L.p.ng..N...+...Z.AT..,.,..j.GU..X..-P.Q.U..In..A^@.....B.$..Wn...^.'.wo(.Zf............9..9...9.. ..HC.... .".A.D.. .4.A.i.. .4.A.i.. ...A.!..HC.... ..HC.... ...4....Y.....P.lG..K..9.]...g....U$QJ.t^x2.......h..8.P.W.si.bH..,.]..p.HC..&5G....$o....2w...!..;(.u......P..."..d\|2.K..3.^..9....X..y(>...t...Y.:.m8....N..=C..d.d>E....K.. .].(.C-a...... ..OAm.C....8..~....j.....ky.2...{i....(...^(...%..`L..+..">9.Rg..~...Q./+.Mj.sE..Y..A..$Q.W.9\........:.....^[..cL.....1we!.=.\2x.&l.R.z.w....n.....c<.Z..L..7...($ekK\....9..Z.....vp.S.....f..}.ZT....<.K......m.k:$.m.^...p.EO.....qL....yb.N...i{-..T..t'..L...}d\|.....<[...."....I...^.>.Ky...lN..-......`.....G..-.....2..JGF.6a..Q.+f...:_R..,^.%q[...z..(.....{.W1..}...o.K...cAa'.e.R}.3..k5<.F5...1...#.(G.7..V..z....}\.R2.G9..1)+=..;..Jfnh`Wk/....KVUq.zJjZ.....i..L0;..XW.MOW....gmF=.....W.5@~A..,..M...A#..&....?..br..O..;O.q.s.,...q.8.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	3697
Entropy (8bit):	4.707743528907903
Encrypted:	false
SSDEEP:	96:r4QJODZATiN1C81vwuMymZgpqVf9oF2VdP5k6ya/e3Hgqj9DdZda1SO:XJ6ZATiq81vDtNh8dP5k6yAeXgqj9B7Y
MD5:	AC373D716AFE4270DF40F60417B0F418
SHA1:	ABA148148C771BB66B0B4AEAB6EAC8EB40352745
SHA-256:	F75570C56743E8C705CB06F5F1F9B1F8F2CC13119F5E2ACDA2F3BB8D987DE94A
SHA-512:	3FAF2FE9C98144F41A3AB614E23E1D488AAEB2C944A3C736C196C69175C96E4D78D2FD69C0B05A5DDCAAB819C0FCA2BE40DC2C178257E2D0AFA2523072CDA985
Malicious:	false
Reputation:	low
Preview:	/===================================================.= Weebly Horizontal Site Menu =.===================================================/..(function($) {.. /*. . * Generate a flexible responsive menu from the default navigation templates. . Groups overflowing nav items into a "more" menu item. . /.. var Menu = function(menu, settings) {. this.$menu = $(menu);. this.settings = settings;. this.$more = $('\. <li class="menu-more has-submenu ' + settings.parentClass + '"> \. <a href="#" class="more-link ' + settings.parentLinkClass + '">' + settings.moreLinkHtml + '</a> \. <div class="' + settings.containerClass + '" style="display:none"> \. <ul class="' + settings.listClass + '" data-menu-more /> \. </div> \. </li>');.. this.init();. };.. /*. . * Initialize the menu on load and on resize. . /.. Menu.prototype.init = function() {. var self = this;.. $('body').addClass("mor

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 269 x 85, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10617
Entropy (8bit):	7.970857157057675
Encrypted:	false
SSDEEP:	192:fmohGM8j40pd8Mj+o4+OB849yMTir8iBx3EeM9/Xm0ERGMhRZ+9f+ll:eRPsn84rBnUbr8uEB/WVRdefs
MD5:	9D30862F22BAEB52324F0B7015D5FBBA
SHA1:	A2DAB48CB5269DF475D793D91B9B0C1E83205348
SHA-256:	1E390418FDDDA8AED19B96C4F5FC78DF4FBF953906EF376C8A7208D8A260E969
SHA-512:	918A90B5A810A1DC5B059CFA056878A067C0EF4BC16D305A4696CC39DC0A3E996B6501E22E4AEDC66554094487790AB0447438D0C86342ACD7C8E9EC83D6DFF3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......U.....S..&..)@IDATx..{p......V.k...L.p.ng..N...+...Z.AT..,.,..j.GU..X..-P.Q.U..In..A^@.....B.$..Wn...^.'.wo(.Zf............9..9...9.. ..HC.... .".A.D.. .4.A.i.. .4.A.i.. ...A.!..HC.... ..HC.... ...4....Y.....P.lG..K..9.]...g....U$QJ.t^x2.......h..8.P.W.si.bH..,.]..p.HC..&5G....$o....2w...!..;(.u......P..."..d\|2.K..3.^..9....X..y(>...t...Y.:.m8....N..=C..d.d>E....K.. .].(.C-a...... ..OAm.C....8..~....j.....ky.2...{i....(...^(...%..`L..+..">9.Rg..~...Q./+.Mj.sE..Y..A..$Q.W.9\........:.....^[..cL.....1we!.=.\2x.&l.R.z.w....n.....c<.Z..L..7...($ekK\....9..Z.....vp.S.....f..}.ZT....<.K......m.k:$.m.^...p.EO.....qL....yb.N...i{-..T..t'..L...}d\|.....<[...."....I...^.>.Ky...lN..-......`.....G..-.....2..JGF.6a..Q.+f...:_R..,^.%q[...z..(.....{.W1..}...o.K...cAa'.e.R}.3..k5<.F5...1...#.(G.7..V..z....}\.R2.G9..1)+=..;..Jfnh`Wk/....KVUq.zJjZ.....i..L0;..XW.MOW....gmF=.....W.5@~A..,..M...A#..&....?..br..O..;O.q.s.,...q.8.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	410840
Entropy (8bit):	5.240861861756721
Encrypted:	false
SSDEEP:	6144:VUcPJDnjk1ru0nbxjrk9zHOJCCBrh8+q9SkDuli6+YfbXTN9PY8d8:WcBMrrnbxmzHO40rSSkHYfri
MD5:	2F9C5AE5B48D2A4A6DF8BF0F5654AB22
SHA1:	CA7A1AC4B9B0270AF87BF5FFB4FB8424D9608CBD
SHA-256:	AEDC0EE41803F174949D21E459F9CFAE5F12AFF07C5AD86E46FBA0635BA38721
SHA-512:	F6DD580B0A7C81D51320B391848DABB30588B581E1BA3634275443EE3A68E36E110FFA6CF39BB97E6F49055AC6A2EAD027F38324378701ACD8FD6B77C2CE6E07
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/halo-c-login/vendor-es2015.js?v=23.2.1
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+6XX":function(t,e,n){var r=n("y1pI");t.exports=function(t){return r(this.__data__,t)>-1}},"+K+b":function(t,e,n){var r=n("JHRd");t.exports=function(t){var e=new t.constructor(t.byteLength);return new r(e).set(new r(t)),e}},"+c4W":function(t,e,n){var r=n("711d"),s=n("4/ic"),i=n("9ggG"),o=n("9Nap");t.exports=function(t){return i(t)?r(o(t)):s(t)}},"+iFO":function(t,e,n){var r=n("dTAl"),s=n("LcsW"),i=n("6sVZ");t.exports=function(t){return"function"!=typeof t.constructor\|\|i(t)?{}:r(s(t))}},"/9aa":function(t,e,n){var r=n("NykK"),s=n("ExA7");t.exports=function(t){return"symbol"==typeof t\|\|s(t)&&"[object Symbol]"==r(t)}},"/w9J":function(t,e,n){var r=n("dt0z"),s=n("zhW5"),i=/&(?:amp\|lt\|gt\|quot\|#39);/g,o=RegExp(i.source);t.exports=function(t){return(t=r(t))&&o.test(t)?t.replace(i,s):t}},"03A+":function(t,e,n){var r=n("JTzB"),s=n("ExA7"),i=Object.prototype,o=i.hasOwnProperty,a=i.propertyIsEnumerable,u=r(function(){return arguments}())?r:

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	4.191445610755576
Encrypted:	false
SSDEEP:	48:9DoH8yAXQ8K5UvCUbpXtlhMVDBilhB7IODnNcynEJPMHErU8ACbtRKO7nhe+:9DlyAXQ8yUdduBiloycKeRg8xbtsO7
MD5:	4D27526198AC873CCEC96935198E0FB9
SHA1:	B98D8B73AD6A0F7477C3397561B4AAB37BF262AA
SHA-256:	40A2146151863BCF46C786D596E81A308D1B0D26D74635BE441E92656F29B1B4
SHA-512:	1EE4B73F4DA9C2B237CD0B820FFAD8E192D9125CE7D75D8A45A8B9642CE5FE85736646CAF12D246A77364C576751C47919997D066587F17575442A9B9F7CC97F
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/favicon.ico
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................................................................................................................................D;3.C;4.D;3.D<3.D<3.D<6.A2".Pc..........M>5.....E;4.D;3.D;3.D<3.F<5.E<4.................................................F?4.ID5.D<37C;3.C;2.C;2.C;2.C;3.D<3LE=3.E=2.D<3.D=3.C<2QC;2.C;2.C;2.C;2.D;3.D;46JB;.G>6.....................................E;4.H<5.D;3]C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2.G<3.G<4.D<3.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3[C=7.C<4.............................H<7.B;1.D<3CC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2nD<3sC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3@B:3.HA2.........................D<3.E<4.C;2.C;2.C;2.C;2.D<2.C;2bD<3pC<2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3lD<3^D;2.C;2.C;2.C;2.C;2.E<3.D<3.........................C;2.D<3FC;2.C;2.C;2.D;2.F=3.E=

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	158
Entropy (8bit):	4.994787172741404
Encrypted:	false
SSDEEP:	3:yLRmcpZ6CdPtpOq94IhXVHws6Tac3mDDpKfFsLGD/DNKv:yL/pZ6CVCq9JVHwJW1iFqt
MD5:	CA243B22264DCA7A4A899C51CC2DC963
SHA1:	CF47310BBB10F981E5735CBCB6196F688782A625
SHA-256:	95FB5A5390AFDA7B7734B303C9F724039FDA305313CE9517AA5F7A544A208AF0
SHA-512:	704E626A74A47B560B3316788B46F7CAF94E1E831B9290551C52DBF4D1E8DD8B72BACBBF6164EAA393BD97DABA0C351881B2F9D83A92F3BAAC49322BF9B5040B
Malicious:	false
Reputation:	low
Preview:	document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	14430
Entropy (8bit):	7.959577406072148
Encrypted:	false
SSDEEP:	384:UMZwpXcL1k7FEkfzcsAWsBkXF29WKdfEXadKj2Y:UFpkrk4sAXkVFKd0aA5
MD5:	336AA05EE0DB8671CF4CF7D4FB11700B
SHA1:	F69F49AE58865E630AAA327570872D2414B81526
SHA-256:	4D021EFAEA1B1922385D738EF363F83C5A38268E6F76CCB7C18B88AD326B8748
SHA-512:	19DDEE14C73EA5EB76845F37F9AA826C3D75FC71A72A44A4F558F3C4CA475D498DD52F52336DE2856F84B3C7EF169B9956026D67E83F1829BB2A3FBBE4EDED13
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d.............................................H...........................!1.AQa."2q....#BR.......$34br.....C5D.Tc....................................1........................!1...A.".#2Qqa....3R$BC............?..n..]..F..BJ....:....7[i.....F1.`.T.V+H.2..k.p.]...F..V.i....=k0.v.9i[J)QW/w...W........;P....9.F-<.yN.n[.c.K..w.M/g.....n..R...G.z....W.....jZ...V7.IdQdxRgX8=.m.......t...6..46..pm.s.......:..\|..'.B.[v....D....=...<UI.M.\?.d."..{....q.$.3.B..:....~..........-....OdHQ<....2g..;5.V...z..........\.....s....Gp.z......Z.S........p.`.N...}Rz.+.n..R.\..v...9.~..Kmk.-.j.......I....%.S....Q....:g.4...-.ZQ%.).-...+....<.....7Q..pNy..@@....._i...J._0h.&prli1.C..I..S.n4.Sej.sT$..k.J...........'.&.[=.........>.M........:.......V...Y..$d.M*E.....%\|q.d..!>..VA.L......x.c.Z.m....=...q@.R?.=

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:+:+
MD5:	CF1731F1EADF52F064E6059D699E7615
SHA1:	816201B65AF045985CF47B5C7C58089759D00A45
SHA-256:	2E34AF284C28BF285781A36241B6E00EC74C81E6AE6858D52BDEDE5EBF7E37C1
SHA-512:	6C1809CAE27A9024FAE8DF165028316CD65E877E9362F5D132724675F7F9DC14A4A52DA43C0F6BDF7826CC1E6AA4633F79082B6125AD73DBA067C358169B29F8
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/tr5?abgroup=trecs-1229-enum-refactor_ctrl&pub=yahoo-hp-att
Preview:	ll;

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51598)
Category:	downloaded
Size (bytes):	57158
Entropy (8bit):	5.417802428777297
Encrypted:	false
SSDEEP:	768:iVKsnHVmjHQkKgksWpRzoT7APx6GSHZsqwcuziSmHSE5lvzqmnhXiuy6KeMLyZOM:iVKsnHUJRkqT01S/bHSE5NzI+ZO0fX
MD5:	67E79F8387CBD66C34276733D689EDEF
SHA1:	F93815009E1CFAB2B246B59A14177B8552052D18
SHA-256:	54A61821C10286617E637CCC4D20EA9A41C88E5DAEFEAF073059BF733EF680FE
SHA-512:	481D7F65945AC8BD84E13ADD5B5CCF63B41AFB4BB676A653519F768CAAF53F4489DFAF5BD7AF31FA834F5A4901AAAEF33BB15A765CF626301FB4075AE4757C97
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/thirdparty/adobe/detm-container-hdr.js
Preview:	/* detm-container-hdr 32 prod /.detmScriptLoader.component={UNKNOWN:{ordinal:0},UC:{ordinal:1},QUANTUM:{ordinal:2}},detmScriptLoader.getHaloMID=function(){for(var ca=document.cookie.split(";"),i=0;i<ca.length;i++){for(var c=ca[i];" "==c.charAt(0);)c=c.substring(1,c.length);if(0===c.indexOf("mid="))return c.substring("mid=".length,c.length)}return null};var hcc=detmScriptLoader.getHaloMID()\|\|"",mid=window.location.href.match("[&\|?]mid=([^&])")\|\|"",adobe_mc=window.location.href.match("[&\|?]adobe_mc=([^&]*)")\|\|"",ts=Math.round((new Date).getTime()/1e3),href=document.location.href,hcc_check=sessionStorage.getItem("hcc_check");if(""!==mid&&""==adobe_mc){var analytics_app_visitor_id=mid[1];if(history.pushState){if(href.indexOf("?")>-1)var newurl=window.location.href+"&adobe_mc=MCMID="+analytics_app_visitor_id+"\|MCORGID=55633F7A534535110A490D44@AdobeOrg\|TS="+ts;else var newurl=window.location.href+"?adobe_mc=MCMID="+analytics_app_visitor_id+"\|MCORGID=55633F7A534535110A490D44@AdobeOrg\|TS="+t

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	88659
Entropy (8bit):	5.376922064828674
Encrypted:	false
SSDEEP:	1536:/OOLe6LIozqg76MmhSDTHUgO/fNl03RElUWw+/bfKDEMI:06pzZ6MQcilCRElUy/bfKDEr
MD5:	0B40B3E560ACDD82E1FAF314CBCE5299
SHA1:	5415B6A1C90CB28445E1D2F2DE544C6ED34F7C5C
SHA-256:	5655963DC698F96119AF2468D7F8C3B23D2872837D28DC80493BA4E1712707FB
SHA-512:	4D57AA485D423B47A2137CFC6D4A0E917C9EE93D0637941EF741138E95850C129839873DAE322F7246E778A0A766C027D72C69ED34E6DDFA9FD94256C1210121
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{assertive:{},benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({reason:e,status:"rejected"})))))));const t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),n=["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\."))),i=new RegExp(`^https?://(${t.concat(n).join("\|")})(:\\d+)?$`);const s="initialize",o="initialize_ack",r="initialize_i13n",a="intersect",c="render",d="resize_ad",l="start_ads",h="tab_focus",u="block",g="index",p=!0,f="DOMContentLoaded",m="0",b="testid",y="ncid",_="fr",E="pg_name",v="type",I="benji-premium-ad",S="auto",A="VERSION",C={ATS_DIRECT:"_lr_atsDirect"};var T,w;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct So

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65024)
Category:	dropped
Size (bytes):	188909
Entropy (8bit):	5.041200648730947
Encrypted:	false
SSDEEP:	3072:TvVWO97/ZoIdrvrgc5/f2XP4mTieamfKqz0/pvlU+571iiNbAylRXrhYNrNu35AJ:08AvMpU
MD5:	F35D83B5554D4B4098D115F8C6FA4190
SHA1:	C3A3718A2BCC97956A6FC19341F5CA45883D9C8F
SHA-256:	0F86EAECBB74174EBB700CC768966211E698A7E6BF6B19227CD0B89DB43E14A0
SHA-512:	24F02BC7CAF38B48D5B1017903DC2BAE866CE738AF4F56D398E4F14A42D4B58364224860A29CB6B16E1C8A709CEF13EFB07F584DA1B2DA75BFBCDDA359EF0DDE
Malicious:	false
Reputation:	low
Preview:	.window._W = window.Weebly = window.Weebly \|\| {};._W.getSiteLanguageURL = function(lang){..return '//assets-staging.weebly.net/js/lang/%lang%/stl.js?buildTime=1234&'.replace('%lang%', lang);.}._W.tli=function(s){return s;}._W.siteLang = 'en';._W.ftl=_W.stl=(function() {..var f = function(s) {...var t = tls[s] \|\| s;...var a = Array.prototype.slice.call(arguments, 1);...for (var i = 0; i < a.length; i++) {....t = t.split('{{'+i+'}}').join(a[i]);...}......return t ? t.replace(/^\\s(.+?)\\s$/, '$1') : s;..},..tls = JSON.parse('{\"authorize_net.errors.E_WC_04\":\"Please provide mandatory field.\",\"authorize_net.errors.E_WC_05\":\"Please provide valid credit card number.\",\"authorize_net.errors.E_WC_06\":\"Please provide valid expiration month.\",\"authorize_net.errors.E_WC_07\":\"Please provide valid expiration year.\",\"authorize_net.errors.E_WC_08\":\"Expiration date must be in the future.\",\"authorize_net.errors.E_WC_15\":\"Please provide valid CVV.\",\"authorize_net.errors.E_WC_16\

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8884
Entropy (8bit):	7.895200813077294
Encrypted:	false
SSDEEP:	192:0wqIZ+pGwDq5e4aofPTKXAuFg5MLXjrzihElfb9DOdjXPS:HqIkpTD0e4aWTcAL5MLzrzRpDO9Xq
MD5:	65317ABCFD7FF2EF5CC648A20189BCFB
SHA1:	718902681983AD32E732932AFD9C4B3748C24265
SHA-256:	CFC6FA01240DF4EC1FA074D30D32D9D326BC9F6EF15DE1CD560C3A323D5DCE2F
SHA-512:	2FDBE6B5A53D45547F5A6539EBA3524E68014AF000C46889D7D56FF3BA4E7BEFA113328171806836C79F9CF097489E1689DAF512898902C335779183435849DA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/RdGJULZQ_0HBS0fKJ4Kq8g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/e8be05122130d6da406284fc8b35524c.cf.webp
Preview:	RIFF."..WEBPVP8X.... ...c.....ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..VP8 z .......d...>y6.H$..)..k.0..cm...`{....>..g.\|..>.@..^...s.n....3......'...;[...^.P.p..}..'.G..........:..&.}......S........Q.G...........q.c8.....}....._.u."...........~.q..N_.T!..i>..(~.......L\'\|..fW&v9c....3.6..:...HQYS.{......1....Hs...L..l.5....QUs+6.f....bSV.....cx..=O"..n.:^N..\..\.."`...p.#..Uue..K..#X.)VgZ....`...)..}.b..~../J.U..{.U..%..mT....#.:..fx.ND..N.....h..f....6....Zn.a...S.1.(.>.vH5........9

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.7464393446710154
Encrypted:	false
SSDEEP:	3:7tqi3Pm:pqi3Pm
MD5:	A22C82AD84D78D09AFD2A05C93FA524C
SHA1:	6A2B16709AD44C23C79C10834E5E81CC35FFBC5D
SHA-256:	CFDCD8C870AAFF1E4E4395E05C4DA87F1725C8E3418005C3BEB49A68567AB298
SHA-512:	F0C15C4345F3E3A0B570FC3EDAD2D8FC1BE2E9BDDDBC03EB21D7E5941967F41B5A378977D891351F89F5F40923C459F02407658569247F803D46697249AE1676
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAm3tACqeylajBIFDdjAfEw=?alt=proto
Preview:	Cg0KCw3YwHxMGgQIZBgC

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	48620
Entropy (8bit):	7.966524709427925
Encrypted:	false
SSDEEP:	768:m22dErGCgRgzVuydZvmtV8sN+c0YIe5y1qORlj/uIMQL2U9T+CfFYvmHlEboyp+1:mlcggdZvmosN+npegUOnDdMe9T+svbyu
MD5:	774354CD170C4CAE5EBE32293B736284
SHA1:	B399DE081393DA21C269FCB7267F8462967A4372
SHA-256:	EDD41E5ECB4E2A3A5E4FBC39951FBD0DFA95FBCE6FBBBFAF54AB0E7BA5F47809
SHA-512:	14D56719C7D044795D4E984959103D66C78B4E4270E6C9AFCD89D888DD599CF25A729486811A051AC80EB3CA6B23DEDCAD7DF48488C3D97FAF5159EA1D1592FF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................................................................H..........................!1A.."Qa..#2Bq....$R..3b...r...%4Cc....5ES..................................0......................!.1...A."2Qaq#3BRb$CSs..............?.....s.&.q.%$-$r:S..\|..D..........(..'<...x.\|....?m.>...>..B.....I.0..\~T.m.s~.....l......N9.&.7;U.R.uX$b..@.Vr1U/g&....J...\|...!......=:Q\....5.....R.{.....+.qP..3.V9uNe..O!.!....[...9l....?@5F...D.T....z7...zW.7c..w.FI.z..Da...'z$.p........D..Z..,..../..@8N...8.S..V;.!....v..@z....wg$.pu..0.-.b}.<...9J.P..rG8..zs....t+....d....,.'.9Z..F8...(.Zx..!.2..RX....ex....r~.2.....:r5..wY.}.=.>d6.N"1y..e...p..,.NO..)..k&...8.O.+.xBYq..\|.<...\|u.....i..\|.Jm.3..l..^..u.6....kO..>s..H....:\|.7Y+....8......=.+.!S..P.sR.K%-M..r:S.X.Er.s.c..:..K....Y.m G&1.@.....j^.:.u.(TQ..&..PS..W.........#&..:.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23479), with no line terminators
Category:	dropped
Size (bytes):	23479
Entropy (8bit):	5.181521598468942
Encrypted:	false
SSDEEP:	384:rFfj/6GpZNfFQi4mvfm0N+Dzao0QMyb0+qB9M:5L/vLNQi4m3m02zMQMyb05s
MD5:	E6A743E22F5B7027F77359F0A549572B
SHA1:	3EE7D7C1F50B654AFF770E4EED916502D7D62B7B
SHA-256:	E6C22E612E82D6AF3F495357F5EF64A81467312A4A817F3625B15490629257EA
SHA-512:	6A440F8772A29CF710417746BBF0AF9994C6C609BAD6B313DAB3FFC8F73BB4947E7AF8D52D3DEEBC78B4863BC961F5501A03768C78AD2BECC490CBB0838819FB
Malicious:	false
Reputation:	low
Preview:	!function(){var r="BrowserSubscriptionHelper",i=["chrome","chrome mobile"],p="error",f="info",n="pushNotifications",o="undefined",t="Unsupported Browser.",u="granted",a="denied",c="subscriptions",s="type",d="push",e="display-push-promos",l="js-push-subscribe",h="rapidnofollow",b="subscriptionFail",m="Permission denied by user";function g(e,n,i){this.init(e,n,i)}if(g.prototype={init:function(e,n,i){var r=this;r.beaconer=n,r.tracker=i,r.config={appServerPubKey:e.appServerPubKey,bucket:e.bucket,confirmationNotification:e.confirmationNotification\|\|{},enableIndexedDbDurationBeacon:e.enableIndexedDbDurationBeacon\|\|!1,enablePermissionChangeBeacon:e.enablePermissionChangeBeacon\|\|!1,overlay:e.overlay\|\|{},resubscribeOnChurn:e.resubscribeOnChurn\|\|!1,serviceWorkerScope:e.serviceWorkerScope\|\|"/",serviceWorkerUrl:e.serviceWorkerUrl,spaceId:e.spaceId,subscriptionService:e.subscriptionService\|\|{},supportedBrowsers:e.supportedBrowsers\|\|{},userAgent:e.userAgent\|\|{}},r.appServerPubKeyArr=r.urlB64ToUint8A

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58453)
Category:	dropped
Size (bytes):	480231
Entropy (8bit):	5.420644885310271
Encrypted:	false
SSDEEP:	6144:V9iviwh+gUW1T3gv69owLgI9pNThOyk9BsHgv5LsUh3:3ZwYgUkTwv69o0z9pNTf08gvxh3
MD5:	C37A1910680F317861AA498CA50792EF
SHA1:	5CBA6D1C1A9CE168ADF4B150676CDC6C5EB74402
SHA-256:	C4ACE0B2EBDB364DE05AB1E835D08BB84BE0342A2906D2625D5D79AD5655724D
SHA-512:	E2095C1BFCB0DEADF7BAB56810905DFE8309CBB66A5568286A8B1A09B3686EA99E70FA794C254C44541CEEDA977B169371C6675703FB7D9628111CDD427FC62E
Malicious:	false
Reputation:	low
Preview:	/* prebid.js v8.51.0.Updated: 2024-10-04.Build: 2.0.33.Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, liveIntentIdSystem, medianetBidAdapter, openxBidAdapter, prebidServerBidAdapter, priceFloors, pubmaticBidAdapter, rtdModule, rubiconBidAdapter, taboolaBidAdapter, tripleliftBidAdapter, ttdBidAdapter, userId, yahooAnalyticsAdapter, yahooPrebidServer, yahooRtdProvider, yahoosspBidAdapter, yieldmoBidAdapter, identityLinkIdSystem, pairIdSystem /.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.(()=>{var r,t={5649:(r,t,e)=>{function n(r,t,e,n,o){for(t=t.split?t.split("."):t,n=0;n<t.length;n++)r=r?r[t[n]]:o;return r===o?e:r}e.d(t,{A:()=>n})},5920:r=>{./.* @license MIT.* Fun Hoo

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	51086
Entropy (8bit):	5.36333089170413
Encrypted:	false
SSDEEP:	768:EoXRVtdFtXGtpfM5kT2xNGYUJmmp09VFUVdUv2dnEAxPPLaz7O3OFDN:FztNGtFMHr3wp09DOu2dnEANPLyP
MD5:	AF551B67310E4C8FC63E60101C77C97F
SHA1:	B21E368A4F6155D50B56E0C3C0499D5D48CB4840
SHA-256:	F9C06AD28C759B0F000F55C83EB682C66755C308EEA80E2650906A308F9F9220
SHA-512:	47A91E029F4EA36D1F4B277833F425ECA70C894A2187DF82F05805F73E9B16D359F4F23E21EBD7D9B342373F2F75326396B14BEF0ED08E0337197707373C9A2D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/analytics-3.54.3.js
Preview:	!function(){function fe(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},m={},e=(this.getCookieByName=function(e){return m[e]},this.setRxx=function(e){var s=-2,t=(document.domain\|\|"").split("."),l=t.length;function c(e){return"."+t.slice(e).join(".")}function u(){var e=c(s),t="rxx",n=m[t],i=(n\|\|(i=(new Date).getTime()-14383872e5,n=parseInt(Math.random().toString().substring(2)).toString(36)+"."+i.toString(36)

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 560x272, components 3
Category:	dropped
Size (bytes):	44438
Entropy (8bit):	7.93798519234458
Encrypted:	false
SSDEEP:	768:rYyRecsfZ4UGj9i8KljlGz7hmaCRnh+GANRHGlKnOT4HwoakCXVCavX/aA5FRIm:rFjsZGKUz9AnKGlKnOEHwoak6VCCDIm
MD5:	1022CC3BFD08FBD66C22055D8F1AF4DE
SHA1:	526EFD998ECCC3D9DAA4E5C579B852875D69E381
SHA-256:	7936D749032E8C91402E3DB35577E58C37964CB4931E740E9D396C2209F4EFD9
SHA-512:	2A223B1CF5F8770762E28709598DE7DEC4244B0171664DD745B5FEEB81A09CAB7342E170B23FCD15DBFAFBFFAF59C80A1817B3B45E38DBE4FAF46188C7B36786
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl................................................desc...P...bdscm........cprt.......#wtpt........rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt...<...0ndin...l...>mmod.......(vcgp.......8bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc.......&....hrHR........koKR........nbNO........id..........huHU........csCZ........daDK........nlNL........fiFI........itIT........esES........roRO........frCA........ar..........ukUA........heIL........zhTW........viVN........skSK........zhCN........ruRU........enGB........frFR........ms..........hiIN........thTH........caES........enAU........esXL........deDE........enUS........ptBR........plPL........elGR........svSE........trTR........ptPT........jaJP.........C.3.4.J.7.9.x..text....Copyright Apple Inc., 2024..XY

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31539)
Category:	dropped
Size (bytes):	106775
Entropy (8bit):	5.585977284012065
Encrypted:	false
SSDEEP:	1536:AACpZQz4LMIc9GDrsRLT3SSwJPZOaWxLLCdh8tuJTaeQl5Rz:cZQkLMb6lBO4Jw5Rz
MD5:	8003B0950C8C8F5F20030D222AE3E6FF
SHA1:	EACDDE00BD481FD6F92A1227868197F648EC2B62
SHA-256:	7B9714654F72864B31C644F28E117B33AB4D74506500CF412CC5B19A1D6ACF3E
SHA-512:	EA406813722A8E83F46004633CDC00009E79E4B3E888F979E3136B85ABC4A4ADBC5CAA4FD2895A68036627FD0930B19EB4E7AE494B9E79BF94C9D41BEAC97CA7
Malicious:	false
Reputation:	low
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	24573
Entropy (8bit):	4.180357727668446
Encrypted:	false
SSDEEP:	384:BRS9Bqoq/onyBpIeggNSNreqfBWddUJtTfw:BRS9BqoTnkSNakIAtTfw
MD5:	E52201E96AF18DD02C85EB627C843491
SHA1:	5BCDD1480B9BEBCDDB0D82083BDF03A7435D59A1
SHA-256:	397452D9F6A2EA6A2135B45C9E40139C68AC6661F3BAB4413E7299586CCB408A
SHA-512:	2DDEA7E1C2127A0B7A2F19764A1AC1CFD26E2D3C3189647FA3BB987FFD1107F30A9BF219D24726047FE84EE72802B515F6290CEFBA02DF1D854C70F0D3A37D8C
Malicious:	false
Reputation:	low
Preview:	/!. Shim for MutationObserver interface. * Author: Graeme Yeates (github.com/megawac). * Repository: https://github.com/megawac/MutationObserver.js. * License: WTFPL V2, 2004 (wtfpl.net).. * Though credit and staring the repo will make me feel pretty, you can modify and redistribute as you please.. * Attempts to follow spec (http:// www.w3.org/TR/dom/#mutation-observers) as closely as possible for native javascript. * See https://github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp for current webkit source c++ implementation. /../. prefix bugs:. - https://bugs.webkit.org/show_bug.cgi?id=85161. - https://bugzilla.mozilla.org/show_bug.cgi?id=749920. * Don't use WebKitMutationObserver as Safari (6.0.5-6.1) use a buggy implementation./.window.MutationObserver = window.MutationObserver \|\| (function(undefined) {. "use strict";. /. @param {function(Array.<MutationRecord>, MutationObserver)} listener. * @constructor. */. function

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	downloaded
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
URL:	https://ssl.google-analytics.com/ga.js
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1610), with no line terminators
Category:	downloaded
Size (bytes):	1610
Entropy (8bit):	5.317017318435937
Encrypted:	false
SSDEEP:	24:zBBh9ozqdwZCBBR9opFo0Z1lAl+9opFo0Zi9ozqdwZCHHbT:jn4EXkaSyikaSO4YHP
MD5:	DA05F5D596C887A6A5221011FA70D158
SHA1:	76923BCDC453F807CF78D55E338B78ED8194D0CA
SHA-256:	1D8F5B2BBB996A8F30C64630E9D1EA256B4FCA3F5C937F0856DEF478848DB025
SHA-512:	509024EAEBF85380CB6BD1D4A32728DD69A9B8865657259535754BBD89CBEBAA4608BDBD49631F880051F8A712CB416AFFD35D067D9ADD5B09D18CBF9FAE7036
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css
Preview:	:root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled][data-color-scheme=light]{--srch-tn-flame-color:linear-gradient(-63.94deg, #1D2228 0%, #1D2228 16.1%, #B23909 16.1%, #B23909 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D2228 48.2%, #1D2228 67.8%, #B23909 67.8%, #B23909 83.9%, #FF520D 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif')}html[data-color-theme-enabled][data-color-scheme=dark]{--srch-tn-flame-color:linear-gradient(-63.94deg, #FFFFFF 0%, #FFFFFF 16.1%, #A34810 16.1%, #A34810 32.2%, #FD6100 32.2%, #FD6100 48.2%, #FFFFFF 48.2%, #FFFFFF 67.8%, #A34810 67.8%, #A34810 83.9%, #FD6100 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-dark-202303010353.gif')}@media (prefers-color-scheme:dark){html[data-color-theme-enabled]{--srch-tn-flame-color:linear-gradient(-63.94deg, #FFFFFF 0%, #FFFFFF 16.1%, #A34810 16.1%, #A34810 32.2%, #FD6100 32.2%, #FD6100 48.2%, #FFFFFF 48.2%, #FFF

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32089)
Category:	dropped
Size (bytes):	119177
Entropy (8bit):	5.496245206592672
Encrypted:	false
SSDEEP:	1536:W9A5zCrOgD8VVw2QZ9LoJjFiCzNB8/W/6GGb7/uoIMDx0uBtd8PdiMi5:pzCrOgD8kdvoRlWbFIM3td8PC
MD5:	76E810DD9DCFAC158AF86FC92F9F05D2
SHA1:	97FAEEE079829F5C4BCAFD89BC4DE1677993FAA4
SHA-256:	0953A763A283CBF0E8758DBC9804C674B53E1CC2CCFD72928BBEF6FA3311CE5A
SHA-512:	54AC6A6A744BCCD88785B20ACCE65AE1FBC7038E2CB4D4558ACBF08E912B8C366A40DE47BCD26B2D0C69C72FB7ED3FC41868206D4013BA49CD248BF8805AAD70
Malicious:	false
Reputation:	low
Preview:	./. ============== DO NOT ALTER ANYTHING BELOW THIS LINE ! ============.. Adobe Visitor API for JavaScript version: 1.1. Copyright 1996-2014 Adobe, Inc. All Rights Reserved. More info available at http://www.omniture.com. Last Updated: 02-01-2016././*. @license. * Adobe Visitor API for JavaScript version: 5.2.0. * Copyright 2021 Adobe, Inc. All Rights Reserved. * More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/. */. var e=function(){"use strict";function e(t){"@babel/helpers - typeof";return(e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(t)}function t(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function n(){return{callbacks:{},add:function(e,t){this.callbacks[e]=this.callbacks[e]\|\|[];var n=this.callbacks[e].push(t)-1,i=this;return f

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31539)
Category:	downloaded
Size (bytes):	107349
Entropy (8bit):	5.589426074379613
Encrypted:	false
SSDEEP:	1536:AACpZQz4LMIc9GDrsRLT3SSwJPZOaWxLLCdh8tuJTaeQl5Ry:cZQkLMb6lBO4Jw5Ry
MD5:	43A14FE3E9D07C0A36528A9F6E447CAB
SHA1:	BA5EBF587F83A307862E53475C0063F97C4AFEDC
SHA-256:	29DEE67AEB92B8C6431FC1D166B256AC13AAFE3731B9310E974B11A29B61286A
SHA-512:	6BC6CB756B4B2AC5C2615D7B79C7BC91C52131F0118C41A14ECFA9C49CB4076C81F608AB4EE1A404720B3759A7EF966812D458F07354DF30A8EA1C84E479E1F0
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (617)
Category:	dropped
Size (bytes):	559447
Entropy (8bit):	5.6838609237395215
Encrypted:	false
SSDEEP:	6144:APPp3i5djotqHRUANEU0p6VfJyrmaU2xUEV/ZQbZFPyIbAnPT0J7106znOyGVnTL:A5y5djoWNYYdJsgFPyIbCTI0y7ACVLC
MD5:	99210E7C2195DE81C0EEDF98787A69B3
SHA1:	7B26C66058385B60109AA6129C2161A399A6034D
SHA-256:	5F75BFBFBF0C7CAC2C87D6CA5DE0661AEDC188B0900B6CEF5EFBAEA134B53302
SHA-512:	C3198D7943B3311679D77BCFFEA75D7043801277BF03AC10CA20BBE424E9AE896C060C7E0EF4143E23C2A41E367917A258404FBA428099316705B7252AEA8A6B
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var E=function(){return[function(K,v,L,Q,d,x,r,w,f){return(K-(((K&55)==((w=[2,6,"P"],(K&60)==K)&&(L=LO.get(),f=a[27](33,v,L)),K)&&c.call(this,v),(K\|w[0])>=29)&&(K<<1&8)<w[1]&&(r=a[0](72,v,L),Q.I=d\|\|0,Q.u=Q.I,Q[w[2]]=r.UA,Q.Z=r.buffer,Q.H=x!==void 0?Q.I+x:Q.Z.length),w[0])&16)<8&&(K-3&15)>=10&&(N[w[1]](63,"INPUT")\|\|(C[w[0]](w[0],this.u,this.V(),"click",this.N),this.vL=null),this.xV=!1,V[20](12,"INPUT",this)),f},function(K,v,L,Q,d){return(K\|((Q=[9,895,11],(K-6&7)>=3)&&K>>2<Q[2]&&CO.call(this,Q[1],14),.Q[0]))&2\|\|(L="",L=h[5](37,v.Cr,"imageselect")?L+'Select each image that contains the object described in the text or

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12312, version 1.0
Category:	downloaded
Size (bytes):	12312
Entropy (8bit):	7.9814318047061645
Encrypted:	false
SSDEEP:	192:U+hJ110ca/vfBKWejY7gYiqRnAPxzoZHR8Kgj9NdV8WeIBt5VeQDB/MDHqCjOQJq:UOJ1OtojYBnAPVobNUdV8Wn9b+btE
MD5:	15D3370712CC87AEE4D35BA16E639E42
SHA1:	2FD44D7078073A47D4AB29418E1909B306367033
SHA-256:	7295944E0067D71C5D5276D397DC0299AFB519F277BA644AEC0B96343E4185D1
SHA-512:	89AC5D1E432AE59B42C809043249627B28CDC3A5CCED20181F7305144BD7D5E102A1A9FC5A9758A75A17D0B3921481420A50F4D3E66CF8652D98FBA624011F94
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Roboto_Mono/regular.woff2
Preview:	wOF2......0.......W.../..........................6.`?STATH..6.....`....B..6.$..B. .... ....D.".8....-.r...C.<C.../p.[.L.....8...K.+...1......+.\$...R...O:Z.\.V...Or..a..t..R...r. A".HM....W_...?z7.Y....@...<.T..T..I.K.NE(5..mv8..,..A...iE.....1sF..9.n.til.....".c.....s....Y.B...}3...-$.e..+W..$ob@...a.K....m.Q.I..I...Z.?...u~.!.-..-.......Z.........9...Y.3....A{.........$....Q..F{.....e.K.c..q_&.....E.......I............A.:.m2fr..}..S...j.:."Y..\+r.^=\.V.u.....!.j"...a0...Q...Y[^...rC.@.......}`..-.M....b. 7f.@...~.......?...G..r..c.c.......i#... ... .i.S...m..V:k.r+!...........(.A. ..;..1.N...>K..e....2...B:...D../.F.&......bw......1..Bx"\|.H....`"..J..?$...._....[.`."&.TZ...U\|g.&....."!.c..@..dz$.n..>........../>..8.q.c.c.c.c...6.......!.yT.Ba.............V....YU..MiNMk.oTw....h~/o..}...OLX.u........+.ryg.ug\.......k.m...l...862.yx\|...;.......1..;.G........6.E.....S'.N.r...F..Aff........{..)..`.A.n..cv...XZ^:..s..f...V..... ...06..E.KvV.4.&.y.l/...!..H.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3600), with no line terminators
Category:	dropped
Size (bytes):	3600
Entropy (8bit):	5.0991703557984245
Encrypted:	false
SSDEEP:	48:kAvNhI9OKn/hQVBVan40yt00nzt/VRgj9o91PYczAz9AfK9TPBlVnIkKYeE5W:kAvOpZ+B8R0FVRjrTEzmfgmzPr
MD5:	40B81B2D52BA9D2E2C64C31FF6A24CD7
SHA1:	6B5689250661646ECBB841F2475F1556A113373C
SHA-256:	E06BACA13F25DF9C7D684FC1B1FDFBBBB95070A1D5A9CD648632DA7BCCC90B96
SHA-512:	5657EE166A1EFF5DEEA7A0125EDD6178541396DCCB035785F5790BC1C57DEE6B0E1C9D063D00333E95667F699D99172796CE301EDD1DF2C4BFF02D25536F0D0C
Malicious:	false
Reputation:	low
Preview:	(function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={exports:{},id:n,loaded:false};t[n].call(i.exports,i,i.exports,r);i.loaded=true;return i.exports}r.m=t;r.c=e;r.p="https://cdn2.editmysite.com/js/";r.p="https://"+window.ASSETS_BASE+"/js/"\|\|r.p;return r(0)})({0:function(t,e,r){t.exports=r(610)},610:function(t,e){(function(t,e){var r={height:62,mobileHeight:124,getHeight:function(){if(u()){return r.mobileHeight}return r.height}};function n(e,n){var u=t("#weebly-footer-signup-container-v3");if(!u.length){return}i(e,n);r.element=u;r.iframe=t("#weebly-footer-signup-iframe");if(!o()){r.element.remove();return}a();s();l();t(window).on({resize:p(l,500),scroll:p(l,500)})}function i(e,r){var n='<link href="//'+e+"/css/free-footer-v3.css?buildtime="+r+'" rel="stylesheet">';t(n).appendTo("head")}function o(){var e=t("body");var r=!!document.getElementById("kb-container");var n=e.hasClass("splash-page");return!(r\|\|n)}function a(){var e=t("body");e.css({minHeight:"100%",posit

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (1630)
Category:	downloaded
Size (bytes):	7160
Entropy (8bit):	4.819263409497788
Encrypted:	false
SSDEEP:	192:tUpqUXGMhJpJuMEpVyfWsgBm6zCg/8LWLEBOqpJ:tUpqUXGMbpJudWgBrb/8LWIJ
MD5:	AE81AB7069097A055829FB9919258138
SHA1:	7DC529F16FB595BBBFC5937ADFE1D0A5CF563F8A
SHA-256:	5A630B41E7C3D34392BCB150A5731B6261BC6314D71D5DB8407A646AF15BF8AF
SHA-512:	923F0E92ED682F638ECA768065630AD26195F03CFD54BA235531C50D587321E45D0E0000E811F943557BA08D9C8A21A3F4B430433370C28C456ACD6B094C63DE
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/files/templateArtifacts.js?1720804667
Preview:	// Gets converted to _W.Weebly = window.Weebly \|\| {};.Weebly.templates = {...'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul class=\"wsite-search-facet-entries clearfix\">\n\t\t\t{{#facet_entries}}\n\t\t\t\t<li>\n\t\t\t\t\t<label title=\"{{name}}\" style=\"background-color:{{display_value}};\" {{#active}}class=\"active\"{{\/active}}>\n\t\t\t\t\t\t<input type=\"checkbox\" class=\"w-input-offscreen\" name=\"{{filter_text}}\" value=\"1\" tabindex=\"-1\" \/>\n\t\t\t\t\t<\/label>\n\t\t\t\t<\/li>\n\t\t\t{{\/facet_entries}}\n\t\t<\/ul>\n\t<\/form>\n<\/li>\n",...'search/filter/search-facet-checkbox': "<li class=\"wsite-search-facet wsite-search-facet-checkbox\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t{{#facet_entries}}\n\t\t\t\t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{f

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	136069
Entropy (8bit):	5.38571390285843
Encrypted:	false
SSDEEP:	1536:+vh357wo17UbuubwOc7dZo+VIlSMmnLZOtwTMQNrBUv5kIdkIdIZSUJy6oAcRaI1:+j7wo170uihjy6xb
MD5:	019508B4A5DA022114A78E5AC39B6108
SHA1:	3ADA331EFE7E4E94588CF5F469BD1697652282BD
SHA-256:	39D91FF83D808EE3A5DCD12C1586C17E14A1FF8D9422333D5883AB5884EFCDA4
SHA-512:	213D9119A850328DC52634D7CBDAF4A7E18A45FE6330D3D1A47BC8B965A66248645CFE440A5DD4D53A1C82D9146655FA4C662D1C8B42F21DA1CC4AFE543A57B4
Malicious:	false
Reputation:	low
Preview:	/! For license information please see consent.js.LICENSE.txt /.!function(){var e={6848:function(e,n,t){var o,i,a;!function(s){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=s();else if(null!=t.amdO)i=[],void 0===(a="function"==typeof(o=s)?o.apply(n,i):o)\|\|(e.exports=a);else{var r=s(),c="undefined"!=typeof self?self:$.global;"function"!=typeof c.btoa&&(c.btoa=r.btoa),"function"!=typeof c.atob&&(c.atob=r.atob)}}((function(){"use strict";var e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";function n(e){this.message=e}return n.prototype=new Error,n.prototype.name="InvalidCharacterError",{btoa:function(t){for(var o,i,a=String(t),s=0,r=e,c="";a.charAt(0\|s)\|\|(r="=",s%1);c+=r.charAt(63&o>>8-s%1*8)){if((i=a.charCodeAt(s+=3/4))>255)throw new n("'btoa' failed: The string to be encoded contains characters outside of the Latin1 range.");o=o<<8\|i}return c},atob:function(t){var o=String(t).replace(/[=]+$/,"");if(o.length%4==1)throw new n("'atob' failed: The str

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	4.926152207436919
Encrypted:	false
SSDEEP:	3:PouVWJhquHbs0sJYXEFNjJXUIk+OCiFwsAAbHblu+FYBzO907ZWAEBbZ6iF4:h4hqIY0gYXk3bVfAbpli7ZWAEB965
MD5:	7CE3863722ADABD7C5828E94D43241F4
SHA1:	D99E5DABE9AD4FD46FC2AFF599065DEA88A49F4D
SHA-256:	07E2A6FB0D22CDBDE787EC2941EB285C222861DDC3CBC8903315B6E5942BE8CB
SHA-512:	8CB65C0295D55C3F0AA03F17E6949F2EF52157FE6D45A09D61BEB06DB0DE08C934BA2FA96EF22E12F3B27BB87ECA2AEFBB2A34F490C6CBC4BC3FD80754AA4038
Malicious:	false
Reputation:	low
URL:	https://cdn.quantummetric.com/helpers/blank
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0"></head><body></body></html>

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3131), with no line terminators
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.169466467718442
Encrypted:	false
SSDEEP:	48:EOefHFlNMlA2EeCMIX4kmZ2KwYd4F5TTPzXWBGqis6uqHwbQyXokp+X6X8cS:EOefH+oXe2KwYMTbGBIRKQX6a
MD5:	F3E6D943C60EFEB6140F0138F7C072FA
SHA1:	695BC28E6F2A988CC81412C98F89E89516A63A8D
SHA-256:	5091AF3DA33110C97EE400E68F2C031D53AD8EEF7CFD8F24E09D616960DA0387
SHA-512:	ABC1B78E3070D8B74096D7A549F6D07A341DBAB1D8DFE8E84F36C3FECA370CC97F2EBB04C051F7DA9A916978D8EAC2CB9906B2915AEF204751BE77DA74E061CC
Malicious:	false
Reputation:	low
Preview:	!function(e){function t(t){for(var r,l,a=t[0],u=t[1],s=t[2],p=0,f=[];p<a.length;p++)l=a[p],Object.prototype.hasOwnProperty.call(n,l)&&n[l]&&f.push(n[l][0]),n[l]=0;for(r in u)Object.prototype.hasOwnProperty.call(u,r)&&(e[r]=u[r]);for(c&&c(t);f.length;)f.shift()();return i.push.apply(i,s\|\|[]),o()}function o(){for(var e,t=0;t<i.length;t++){for(var o=i[t],r=!0,a=1;a<o.length;a++)0!==n[o[a]]&&(r=!1);r&&(i.splice(t--,1),e=l(l.s=o[0]))}return e}var r={},n={0:0},i=[];function l(t){if(r[t])return r[t].exports;var o=r[t]={i:t,l:!1,exports:{}};return e[t].call(o.exports,o,o.exports,l),o.l=!0,o.exports}l.e=function(e){var t=[],o=n[e];if(0!==o)if(o)t.push(o[2]);else{var r=new Promise(function(t,r){o=n[e]=[t,r]});t.push(o[2]=r);var i,a=document.createElement("script");a.charset="utf-8",a.timeout=120,l.nc&&a.setAttribute("nonce",l.nc),a.src=function(e){return l.p+""+({1:"generic-error-generic-error-module",2:"interstitials-change-pw-confirm-change-pw-confirm-module",3:"interstitials-collision-collisi

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	67465
Entropy (8bit):	4.809594108927749
Encrypted:	false
SSDEEP:	1536:59rPpU1wHKYTpQ73CHJHDuYL/OHHeZF+YwLMC0ht/uJFO0815wZDk5/2M:59rPpl1NQ73CHJHDuYL/OHHeZF+pLM75
MD5:	2B8D85F1EA01D2C3E8B962EAC8D76A5C
SHA1:	936987A7E08DAA4A916C77D86937EDEE42D657DA
SHA-256:	B6353CA52760ABA4E7547AE9861DB68158DC2AF0F4FEBECE55E5C775EE4449F5
SHA-512:	F64D0E9FC7ED02F4C7B3CF7FD680DF3A6F8F4CEFADEEA63553D0F0A4BB5472ABF5EE754C0E056CD91272F0108910347BA6F3CF23C825FD89260CF0545DD0702A
Malicious:	false
Reputation:	low
Preview:	./! Hammer.JS - v2.0.4 - 2014-09-28. http://hammerjs.github.io/. . Copyright (c) 2014 Jorik Tangelder;. * Licensed under the MIT license /.(function(window, document, exportName, undefined) {. 'use strict';..var VENDOR_PREFIXES = ['', 'webkit', 'moz', 'MS', 'ms', 'o'];.var TEST_ELEMENT = document.createElement('div');..var TYPE_FUNCTION = 'function';..var round = Math.round;.var abs = Math.abs;.var now = Date.now;../. set a timeout with a given scope. * @param {Function} fn. * @param {Number} timeout. * @param {Object} context. * @returns {number}. /.function setTimeoutContext(fn, timeout, context) {. return setTimeout(bindFn(fn, context), timeout);.}../. if the argument is an array, we want to execute the fn on each entry. * if it aint an array we don't want to do a thing.. * this is used by all the methods that accept a single and array argument.. * @param {\|Array} arg. @param {String} fn. * @param {Object} [context]. * @returns {Boolean}. */.function invokeArr

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3066)
Category:	downloaded
Size (bytes):	798979
Entropy (8bit):	5.51070155275105
Encrypted:	false
SSDEEP:	24576:HuzXG+H3d207kLQ1KkafvYVQKKh3GN5RVBo6:HqXG+H3d207kLQ1KkaHYVQKKhS
MD5:	2C86E85F3491192DF25DBB91DABCAD36
SHA1:	48C826E36FFA69AC3456AAB7F16AB33D08078706
SHA-256:	CC642C1CA589546ED1A296EFDE2C0E4DD0440540A80A04246D35E4F58D7A8EFB
SHA-512:	456AE741DE27883579D2A6CCA98CFEBCE922FD3A28EF4D9885133C926CFF4575284E3F8E5CEC7D9F71A8C1960B05B445721262C8B364E91327A34B813539405F
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/thirdparty/quantum/qscripts/quantum-att.js
Preview:	/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula att df85e50d5ce082da388f295c6c221844566fe002 /./ Copyright Pako by Vitaly Puzrin and Andrei Tuputcyn https://github.com/nodeca/pako/blob/master/LICENSE */.(function() {.var setInterval = window['__zone_symbol__setInterval'] \|\| window.setInterval;.var clearInterval = window['__zone_symbol__clearInterval'] \|\| window.clearInterval;.var setTimeout = window['__zone_symbol__setTimeout'] \|\| window.setTimeout;.var console = window['console'];.var clearTimeout = window['__zone_symbol__clearTimeout'] \|\| window.clearTimeout;.var MutationObserver = window['__zone_symbol__MutationObserver'] \|\| window.MutationObserver;.var queueMicrotask = window['__zone_symbol__queueMicrotask'] \|\| window.queueMicrotask;.var Promise = window['__zone_symbol__Promise'] \|\| window.Promise; 'use strict';function aa(a){var b=0;return funct

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1421
Entropy (8bit):	4.32976103690064
Encrypted:	false
SSDEEP:	24:tYU/duflUHc9MMXy/83oCWKjIVJ5PTSTqXcP2dUTm5hZtmtJw7/AY:n/TEYCR0VXSuXW2a6vPx7f
MD5:	3FE68FDB37BDC4AC3520527E8F69DC61
SHA1:	A0DCC41EEEB599C078596A1239B66D04EB940EC8
SHA-256:	123AA59BE7147BD7F9AD1FE3B6384FB5569BEE4BBDEE39A7E9915D684C977BF7
SHA-512:	76035D402CC3546870886C4CFE46B6428A3A1F0869C5E022EDBDF36EC2CED177F06AC9D9A74AA9366BBE11BF5D0BC1474C1640A2CB136E82BBA9E7646D3E69E6
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="1" y="6.07595" width="22" height="11.1392" rx="5.56962" fill="white"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.4304 6.07595C20.5064 6.07595 23 8.56955 23 11.6456C23 14.7216 20.5064 17.2152 17.4304 17.2152H6.56962C3.49361 17.2152 1 14.7216 1 11.6456C1 8.56955 3.49361 6.07595 6.56962 6.07595H17.4304ZM13.2679 6.91818H6.56962C3.95876 6.91818 1.84223 9.03471 1.84223 11.6456C1.84223 14.2564 3.95876 16.373 6.56962 16.373H10.7321L13.2679 6.91818ZM10.3553 9.41582C10.5301 9.55752 10.557 9.81415 10.4153 9.98902L7.41378 13.6942C7.16006 14.0074 6.69106 14.0319 6.4061 13.7468L4.65019 11.9904C4.49109 11.8312 4.49109 11.5732 4.65019 11.414C4.80929 11.2549 5.06725 11.2549 5.22635 11.414L6.87565 13.0638L9.78224 9.47587C9.92389 9.301 10.1804 9.27411 10.3553 9.41582ZM15.1023 9.24971C14.9477 9.08617 14.6899 9.07896 14.5264 9.2336C14.3629 9.38824 14.3557 9.64617 14.5103 9.80971L16.2013 11.59

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 1740, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11967
Entropy (8bit):	7.955972465434936
Encrypted:	false
SSDEEP:	192:C2uHGmnzpARBLwr92XMShDkuDMNbL6qVEqhdtm5a28K6asSRwMJv59GRhk4eBkt8:ZuHGmlSBMrE6GMN0kd+Pc1SSMpGDOBB/
MD5:	C52B9648030733C6235492F484942207
SHA1:	E3DCE7A478C300063CC1A663B5CA52A77636B4C5
SHA-256:	506648DB425E3801B3B45ACA2382EFAED10698E5AF1DCB90FC8CFFB2B090704E
SHA-512:	2D4ABF505EEC04DB73B7C3FE2B23E11C0D415B5419FE1259560C4D908F7BB641CBB28EB33F669486AAED480FF6DEC3DC76954E6A9A0985F0A6E8E9C3F24F86E9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/kr/assets/spritify-sprite-light-fd484ded-e3dce7a4.png
Preview:	.PNG........IHDR... .........F.d.....gAMA......a.....sRGB.........PLTEGpL.R35.....-..d......H.^.....`..e........d..d..d...!&.4.......]..d..a..d........d..c..d.....g..d..d...f.d.....d...!&d...........`.........T'..Z...c.......!e......#&...`..c.......".-#^.....?.....`..BBIl....!.... %`...............%(`......'#.!&....h...qf...#)..7....!%i......3%3.^.h.../i..`.......I."(ZZ^.i.....'#`..?..`....??...".......4......_...."1.$$.....Z........3.%&.h..........YZ^`..ZW\...`......h..).%@........#.0...#.4...........6.....-...!;...h..a.IY.0....x..Z.g.D}...!`...5.:.......Z..Z?..<..@.....^....ZWo.2.YY]4.^.4.... .....0...J...........3/......2Y../.\|..]..c..,.~-..+.\|..23.^..3d..`......)...6...m....@...c.@.......\...]^....."(...3.^.....!..3.m.......C..e..S..=>.c..r...#).........C...7.'$y7.c...$ !.h.3.....2..%+oB..(5...0.;....}..... &-.=......tRNS.............#..UD.1...&....2.;..G.......c.....Gcz.s...<T..=...3.....n....L....J~.,\|u..C.C^..P#SUf..e....q.o.&..8.f..ZQ.y...u. ........yzy...E.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11680
Entropy (8bit):	7.9837809328604115
Encrypted:	false
SSDEEP:	192:o4FIo75bfGajQcaiy8IaUXCSPNSWcC9QUw/L3RFhZ0lVgAb3zQe0o5bIRuIYS:tIsbfGZcJy8IaUXbAbsQUa3lZ0lVgs3y
MD5:	485DFA2E93A1F97E6D69839F9F875AD0
SHA1:	BA86C5BC8AA979DE1421983E81E9D7280C451C1D
SHA-256:	7C13DBFC706372FCF8246ACA1082D6E9DEF2B6C0919F64A64A8B162B380D727C
SHA-512:	ED63816AA73895ACE5B82B71CD2027D0A8F4ED1A5E2E44DB9EBC5765AB069CC77AED07CD5934C3649D27AB0D23D5CA5936004B2574124BECBDF1AE545786344B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/7QJM3GN5YBbg7HUo1M3jNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_telegraph_258/767c31696323f68d04b163e892ed999e.cf.webp
Preview:	RIFF.-..WEBPVP8 .-..0....d...>y8.I$."!&.[....cawX4.gO.r.]..U.........o....i=^...v......#......{.W..g.H.K......'.e....\|......woN....3{.o.G./..D.h.."..x.D;.........x.4..E......Z..t.J..........X1L.J$.p...ubc.,.~...._...}+Av:/..y~.V......{.......#.......7).&b.L......Aq.\<....8.F5<.sWOP.R..........F..'..!.Po...../.b.uUaZC=...f..y.i:M..v.n...!U.x...L9.t..q..3.5.VGd.'.t.}../...=..Z..........?0(]..+.....@..=W.JE5...&m.d#.Db.IS. .x.'........ .$c.2.R...a]4.....qfZp....Wn......^....w...V.H.......+...k..9.(....~;.5..P........ .K...^.......r.6R..$....wRr(...l.1j<.9k{.D~c..~K6Ds.w..&:...#..I...b........Cr*dde:}...o.9S..?.......&...).=.M[{..H.<..F.U5. >..>U\|...V3.F.._.~'....n.O.c.......nC.@.8.&i$.P.P..B......h...gd......Hl..YGkQ..q.ih\|...j..g.t.<..&1..[v.....>..w=zTZ"5?........Xq.......9.....1..7..GX......v..>"....."J......l....P^Z.g.....a...Qe.yf.>...B.YO`.W..F..R.jz>#!..&6@W..;'(K.~?-.....aR..........7Y.{.r..y..A......C..Qe@..OS5..e.....{n}.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 299 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8999
Entropy (8bit):	7.967513844085707
Encrypted:	false
SSDEEP:	192:bff5YUBX2Dzu5Dcbr3T1ncPFs6fzgLpJgT:DfqUBG3E6v6L8m
MD5:	16766A70949DCDCDF1EA0B15299B6B26
SHA1:	6E0CB661B500725DAC78A480D8CC595294EEBB91
SHA-256:	6B1B0B1EDD357F932F97931D09421189D924EB40129469A92AC474F88C1383EA
SHA-512:	E86BD1E9F6BFD7B240CB3D339743D76CC9A63BF8DA0D1A95A0537F40A8B02CE501FD250AE0996D05DCFAEC165FC8A99031A631FFE9C92673C48F669F99411275
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...+...0.....I.\X....sRGB........DeXIfMM........i.......................................+...........0......W...".IDATx..].\|...?.{..7<......`...Z...lk..&..$ V[....V......n. ..J..~ZM.K.V....7..y%$....\|...w..7.B.e..9s...3g..%.C..a..-..@..a..-..@..a..-...........V.-PTY.P..LL.B.F.....?..o(+..{O'u].+..)k.X'....m...D.x.v&q>Avox.o..g.#."2....+.e.).Pz...$].I.F..f"e.1..].c=].V.G..:p......~....CH.....~.cs......[h...e.if....5..QR.Hk...R.@...Db.C...N.v.....O../.8..^.../.A.b.q.....1...qG..<.R.h70.R....C`........?.._.......b.R.........f...MA%.t.{C..%..l....93..an...3D....>}d.R..ei>c.i..{.y!0l.C...s.s..@..f.o..b..5...69....f..a.......%...C....Dc\|L.H+...J...-......ah.....v..5.J.?N......9.....R.....e..6`.(.....&....z'.xk."x.f.......f......Q:`..F.rV.....e...w..Z.....N:.._.......e.w..../...&.........N.f%m..x([`b\|......<.6....6.D.^.G..t..)...-X...b.!..@......PyAv.xu.PJ".......m.Xm\...yy5.,6.3.b.....r4..K6..Q.h........._....R.'....z..v.i. .=!F..S...W..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 260 x 340
Category:	dropped
Size (bytes):	539840
Entropy (8bit):	7.950660003114956
Encrypted:	false
SSDEEP:	12288:OqzGmFxefUFk3+6w/AuS4Hf0FzU/VF4HxHi1u2k0SwU1TKd5I/Z+aC10n/:OqzGmfeMFF6buloUNGicgd8+J0n/
MD5:	2FB9D43C74752389405ABC1A5814B44A
SHA1:	BD551A3693F34693083D37EEE3113D667CE4F3C4
SHA-256:	7A18441E184306E7F51C5493C0C17F676C73E12F518DC468DCB565B25D90FC41
SHA-512:	D0CED802BD8B03554E538D1316CC37EEFA4E0CBA33E54242BA36F4C1A3D1B991135208B54064499E571A21562AEFC67DBBE691B38E333148CCAB2518B229AA80
Malicious:	false
Reputation:	low
Preview:	GIF89a..T.......................................................................U..R..Q..O........K..M..N..N..O..P..Q..Q..S..U..N................^<.mC.N..O..L".Q..S..[..M.....d.d?...pA.iM.h/.i........f...........................................................................................................w..o.rW.S..U..O..Q..S..^$.`0.M..N..O.....................}.hN.X5.X..o>.U..S..P..R..N...n.M..Q.............M%.W..r5..W..P..e..d.Y4.._&.Z$......v._=.^,.pR.Y#.kB.f5.}.O....R..S..S..}D............`@.hC.`3.....^5.U$.X..M"....M..U%.U!.a4.M..Q..M .N..N..Q..O..O..Q..P..U..U.........hD.w\...^<.uR.`1.z.]2.Z+.~.X).vQ.W..k...U..P...b.P...v.t.W..v..V.].pP...P..X"....X.{U........X,.f.v`.....^..vQ.L..L.....N).jN.\|].N..{N.qO.................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......T....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........*:JZjz

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4966
Entropy (8bit):	7.9657379063130405
Encrypted:	false
SSDEEP:	96:PaAi5eXKWE8k7WRvfHhb6DrzTjdKNX2oFxUCQ/nZEXp:iAi5Bz8kkvfHhczTjdKvxUnup
MD5:	1930BDDDFE5C445F9D43D8FB33CC1981
SHA1:	29041D5B4DE4B2364D8895814EDF7190772A8735
SHA-256:	53901FA7B2C8E3FB61D6DF107E08532A3E88EC6C65E94521FDE3C77BEE1A5BBC
SHA-512:	EE9E3CE55051B2C239950F748DC7694BF774951629AA3EC2058E49CDCCD33F7C72837E7F725D6FB5A772DCAF5A1AD7D86537E274DD41035EADF64F16040656E5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/TXjvVjT6BxITti_rfSctrA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/f6c74ee0-89ce-11ef-9ebb-51a5b22ff008.cf.webp
Preview:	RIFF^...WEBPVP8 R....s...d...>y6.I..."$Q[....gn.\.f.\}@...........3n.::{.[.....3S;A<g.Z.p'q..........1(.+...'..dJ.@.r]..".5... wpH..'..EdTr!.&.9...t..v.^.X.*L"V.LZ..^....l!:.....l.}.`....aB/...I..=..k3..]..oQ.i...)..jjQ .........~..N.u@.Z..^.G...._./.....J..h...."9@.\|...(.J..9q.I.1zj.....\|.vyQO....T..`.R.....U...#...XR....,..+^i.._..}:...j.. .V......5hq^g8....2.}..;.A.mJ...E0.Db.....R...P0D.7..\|....]>.....2._..W..o.....v.N[.6]c....q5W...4gl3.'"..S.A.=.!..ok..F...EZ.5...rLONj. ..C../?.,...r8.KI\+...Z._.p.k...%..!~2......K..S..3.9./...=A.5$.^......g..[.m..YL.8&.....(......#.o(......,A...q..X6.e\|.8..)....Q.t(...].[......[0.@?..N.G..$7.w.......Z.........?.......'...G...X...dSx{<z..4..2..A..,).`7.....OZ. .tkX..UC.q..3eU..a.e3..b.;.d.g.&+.......?k...3.....P..b........3.C....}Dr .x/d.1o.{.z.d....2..2.4....$.q...U..l...`..d.o0Xu.J.e.:A.X..9..].~V.E..vR-=.G.~PE....7JJ..FObQ`\.W..b...l...U.}....K...6X......1).a..X..>...).P...e^..N......m^hrY#..h

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	29385
Entropy (8bit):	7.9718386386231606
Encrypted:	false
SSDEEP:	768:fXlVcrmSM6fRMwT7ejXr1gbKHvlh+ATW8A+AT+yzHgX84Va6og:fTcrXRkjXr1MAR7AFu84D
MD5:	BAC66E198770BABAB0214193C0B5D87A
SHA1:	ECC0D851E8ED37F228CDA981EBBF6C874BF2B22A
SHA-256:	EBDC01EA6EFA218DF801078C339D34CFD13926626CEED8434AE4F3657FCA79C5
SHA-512:	4E6AC73D2B0023AE7A402B4383B0133DC95A1122056183EC87FA95FD5F263E947806FBCCF16A78D34A698D6F770B24D198F9E5FCC75FFA81B5EE968D0DAA4BB1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d............................................L...........................!.1"AQa..2.#q...BR.3b...$r......%6CD....45s......................................:........................!...1."A.#2Qa.$3Bq..4b..CR.Sr...............?..c...@`.....X..X...U.L...)...&N.."....Gv....}..6...m..........o....\|.zt.....l...`...>.`.....d./1..n...}.`tX6....d...03 ....`[.....o.....Q.<:;.0l..0........(.........7..Gv....\....~.2'2;..6...s`.o..D.Gv....r....r;...&Ak....o....&F.c.)3a..;.>..R...`...S.G,...&NmO..y....d... ...;.@`.`.`.`.......7..@...a....l...P.l.p.L.t=.2...J./....m{.1.kZ.=...y.dt....k..).Ewc.../...HH,.N.+.A..x......,puw>..W.K!.Jq.dGR\|.p7..v....k.,...u.O......-!.z2....t.hQ.2..32....>:_......;......?q.J:..o.h...P......'.......%.._.......E.c\'...A......Z.........-. ....[.@...p..... d..L.g..\...`.`.`.`.`.`.`.`.`

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	51821
Entropy (8bit):	7.953313477459053
Encrypted:	false
SSDEEP:	1536:K7Kts+cngTpNz1o5eTmUp0cLLjyFvDXLsoFlI/o:K7Kts+n3JMeT7mFvD733oo
MD5:	1B1D9F1E3BC96366A5E2417BEB128DA4
SHA1:	34C93D35686267AB1AF450BD019C03C4907DCCDB
SHA-256:	EF7BD7857838D7BEB04D73EC13F10A1B39821DA55133A0456A39CAFCDB30922F
SHA-512:	6CD664B378EBA2D062CF5AD7647AECF7EF2610A308F106F290A61D19E3DB79C4C4C96D341EAC5985E26DAA921EBDE4D72D7EA20AE7FC94CC4ACCF8F4C1951CFF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	24573
Entropy (8bit):	4.180357727668446
Encrypted:	false
SSDEEP:	384:BRS9Bqoq/onyBpIeggNSNreqfBWddUJtTfw:BRS9BqoTnkSNakIAtTfw
MD5:	E52201E96AF18DD02C85EB627C843491
SHA1:	5BCDD1480B9BEBCDDB0D82083BDF03A7435D59A1
SHA-256:	397452D9F6A2EA6A2135B45C9E40139C68AC6661F3BAB4413E7299586CCB408A
SHA-512:	2DDEA7E1C2127A0B7A2F19764A1AC1CFD26E2D3C3189647FA3BB987FFD1107F30A9BF219D24726047FE84EE72802B515F6290CEFBA02DF1D854C70F0D3A37D8C
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/files/theme/MutationObserver.js
Preview:	/!. Shim for MutationObserver interface. * Author: Graeme Yeates (github.com/megawac). * Repository: https://github.com/megawac/MutationObserver.js. * License: WTFPL V2, 2004 (wtfpl.net).. * Though credit and staring the repo will make me feel pretty, you can modify and redistribute as you please.. * Attempts to follow spec (http:// www.w3.org/TR/dom/#mutation-observers) as closely as possible for native javascript. * See https://github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp for current webkit source c++ implementation. /../. prefix bugs:. - https://bugs.webkit.org/show_bug.cgi?id=85161. - https://bugzilla.mozilla.org/show_bug.cgi?id=749920. * Don't use WebKitMutationObserver as Safari (6.0.5-6.1) use a buggy implementation./.window.MutationObserver = window.MutationObserver \|\| (function(undefined) {. "use strict";. /. @param {function(Array.<MutationRecord>, MutationObserver)} listener. * @constructor. */. function

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11901), with no line terminators
Category:	downloaded
Size (bytes):	11901
Entropy (8bit):	5.106396238513521
Encrypted:	false
SSDEEP:	192:ggHWnmGW7GECHay2/WINSyAWRvrhAo1ti:ggHWnmGW7GECHaXN9AWR8
MD5:	59AE89307F6BE51355E07ACF3994F79B
SHA1:	A9C5474C652DBC6B60B97C6E723E03A399ACA92D
SHA-256:	F54AFF9F498AEFB3479AF7D4F67B5ECE9465B24DB28293A1EE7F32A2230E162F
SHA-512:	ED56A2963D8ACCC7E316F10138566AA2BA715384418B106997C6525D016BE61C6B7583227DBDFC28704A71248DC8E21CC0E19E8D77D46FF84A3D143FE471FD63
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-loader-2.7.21-modern.js
Preview:	!function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|{},a.wafer.wafers["wafer-loader"]=e())}("undefined"!=typeof self?self:this,function(){return function(a){function e(w){if(r[w])return r[w].exports;var f=r[w]={i:w,l:!1,exports:{}};return a[w].call(f.exports,f,f.exports,e),f.l=!0,f.exports}var r={};return e.m=a,e.c=r,e.d=function(a,r,w){e.o(a,r)\|\|Object.defineProperty(a,r,{configurable:!1,enumerable:!0,get:w})},e.n=function(a){var r=a&&a.__esModule?function(){return a.default}:function(){return a};return e.d(r,"a",r),r},e.o=function(a,e){return Object.prototype.hasOwnProperty.call(a,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"../../manifest.json":function(a,e){a.exports={"wafer-account-switch":{meta:{version:"1.1.7"},modern:{min:"/aaq/wf/wf-account-switch-1.1.7-moder

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32029)
Category:	dropped
Size (bytes):	534233
Entropy (8bit):	5.3426163690118
Encrypted:	false
SSDEEP:	6144:iocZIvNiY/EZ7NQ//HyBGtUD/4K0x65/hSJi/5Tz:Tj/ybiQD5/Ci1
MD5:	5295FC679EEA80780246F38A98DF4119
SHA1:	AB671B1376AE82788886E2E18C4FDB7B7AC6FCC7
SHA-256:	C1CD4E7693F8C40D13259E8AC271CD0B6870875CA6C69B78D50AEDE9EEB63B67
SHA-512:	875BBDBAA20DEDC45DD6658886DF4B2E04EBA47489A2382F809C3F4EE96817B8A1A99863B812E983BC89AA435E3FA72AC4F0BE0E979241A168B1D2D7B0097CD5
Malicious:	false
Reputation:	low
Preview:	(function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:false};e[r].call(i.exports,i,i.exports,n);i.loaded=true;return i.exports}n.m=e;n.c=t;n.p="https://cdn2.editmysite.com/js/";n.p="https://"+window.ASSETS_BASE+"/js/"\|\|n.p;return n(0)})([function(e,t,n){e.exports=n(321)},function(e,t,n){var r;!(r=function(){if(window.Weebly!==undefined&&window.Weebly.jQuery!==undefined){return window.Weebly.jQuery}return window.jQuery}.call(t,n,t,e),r!==undefined&&(e.exports=r))},function(e,t,n){var r,i;!(r=[n(1)],i=function(e){window.Weebly=window._W=window._W\|\|{};window._W.utl=window._W.utl\|\|function(e){window._W.failedTls=window._W.failedTls\|\|[];window._W.failedTls.push(e);return e};window._W.ftl=window._W.ftl\|\|function(e){window._W.failedFtls=window._W.failedFtls\|\|[];window._W.failedFtls.push(e);return""};window._W.utl=window._W.utl\|\|function(e){window._W.failedUtls=window._W.failedUtls\|\|[];window._W.failedUtls.push(e);return""};window._W.stl=window._W.s

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1264
Entropy (8bit):	4.938365243435912
Encrypted:	false
SSDEEP:	24:R3OYNC+QWWCIVLqiMlMfP3OYsweQWWhVL3L90QP3OYN7AQWW2VLcxbp:hOWC8IVLqiMlMfPOLWVL3L90QPOCCVLs
MD5:	775B24A6BF448EF1741A248F4D0D1798
SHA1:	C744599BC3828D7CF61211F932A658893EB0ED19
SHA-256:	3579BAD82B0DBE568857F5550630F16E8B3CC434C0E4D3D04549033B7B8EB814
SHA-512:	A62A5F40F91669AEFFE51D424BA9BE6B21CA1F496A1048665D25EA8552CF45DE4A5CE2C339CCC4EC866EB0725EF1E6645D1D92A3161AA149FE938C16BFA44D15
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Oswald/font.css?2
Preview:	.@font-face {. font-family: 'Oswald';. font-style: normal;. font-weight: 300;. src: url('./light.eot'); /* IE9 Compat Modes /. src: url('./light.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./light.woff2') format('woff2'), / Super Modern Browsers /. url('./light.woff') format('woff'), / Modern Browsers /. url('./light.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Oswald';. font-style: normal;. font-weight: 400;. src: url('./regular.eot'); / IE9 Compat Modes /. src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./regular.woff2') format('woff2'), / Super Modern Browsers /. url('./regular.woff') format('woff'), / Modern Browsers /. url('./regular.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Oswald';. font-style: normal;. font-weight: 700;. src: url('./bold.eot'); / IE9 Compat Modes */. src: url('./bold.e

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	dropped
Size (bytes):	493694
Entropy (8bit):	5.5092994478792505
Encrypted:	false
SSDEEP:	6144:VA6vtFIk/lWcbeC3OzNSMMC7Kr9OW8ezXVPJ5cfeHDH8SF9IQzF71oh3j8SQFTaX:qCuIzn5PDoR8SQFf+n16xAb
MD5:	7AF883FF0F217BB30B186CDBE16A6B9A
SHA1:	FF4484CE5FFBE75672A9D26353111A9F21D7FC55
SHA-256:	2A2473623B8541529D038B10B49F6AC263410A7482C16C7B4CF75049D578B1AE
SHA-512:	94881C47CF43626B2943AB472638BE2F54D296C4333CC4DBF81999FEB8990D67978739DF2564CE19AD3106FB5C2CEA694B79DA4584495FF25B458C1BB9B5859F
Malicious:	false
Reputation:	low
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ca,ea,ja,xa,za,Ca,Ia,

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23479), with no line terminators
Category:	downloaded
Size (bytes):	23479
Entropy (8bit):	5.181521598468942
Encrypted:	false
SSDEEP:	384:rFfj/6GpZNfFQi4mvfm0N+Dzao0QMyb0+qB9M:5L/vLNQi4m3m02zMQMyb05s
MD5:	E6A743E22F5B7027F77359F0A549572B
SHA1:	3EE7D7C1F50B654AFF770E4EED916502D7D62B7B
SHA-256:	E6C22E612E82D6AF3F495357F5EF64A81467312A4A817F3625B15490629257EA
SHA-512:	6A440F8772A29CF710417746BBF0AF9994C6C609BAD6B313DAB3FFC8F73BB4947E7AF8D52D3DEEBC78B4863BC961F5501A03768C78AD2BECC490CBB0838819FB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/notifications/js/sh-5.17.91.js
Preview:	!function(){var r="BrowserSubscriptionHelper",i=["chrome","chrome mobile"],p="error",f="info",n="pushNotifications",o="undefined",t="Unsupported Browser.",u="granted",a="denied",c="subscriptions",s="type",d="push",e="display-push-promos",l="js-push-subscribe",h="rapidnofollow",b="subscriptionFail",m="Permission denied by user";function g(e,n,i){this.init(e,n,i)}if(g.prototype={init:function(e,n,i){var r=this;r.beaconer=n,r.tracker=i,r.config={appServerPubKey:e.appServerPubKey,bucket:e.bucket,confirmationNotification:e.confirmationNotification\|\|{},enableIndexedDbDurationBeacon:e.enableIndexedDbDurationBeacon\|\|!1,enablePermissionChangeBeacon:e.enablePermissionChangeBeacon\|\|!1,overlay:e.overlay\|\|{},resubscribeOnChurn:e.resubscribeOnChurn\|\|!1,serviceWorkerScope:e.serviceWorkerScope\|\|"/",serviceWorkerUrl:e.serviceWorkerUrl,spaceId:e.spaceId,subscriptionService:e.subscriptionService\|\|{},supportedBrowsers:e.supportedBrowsers\|\|{},userAgent:e.userAgent\|\|{}},r.appServerPubKeyArr=r.urlB64ToUint8A

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4672
Entropy (8bit):	3.9609065395562255
Encrypted:	false
SSDEEP:	96:qAH+zrUoTF7AfbNM8As09218iqUacnSZ8uySM0nKh4SEUnNx0jgvp:qAe8m2b6a4ENqNcnSZfySMQxUNFR
MD5:	70A42235B3F29DBD76832BC938709175
SHA1:	B3D9A34C74BDECAACEC751A8122C441D8F2538B4
SHA-256:	ECC6E5C037A4E54C1ED4052C9880D55C27187BF709FB82FAE2709C92D3A3A563
SHA-512:	6D1C600A322865E33182260507C0A812282A416EED95237EF6C598CF78BC16C001AE0527D420A3EE2E73C21419027033E181745C474441D7B10913F2B0215D33
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/images/logos/att_hz_lg_lkp_rgb_pos.svg
Preview:	<svg width="441" height="144" viewBox="0 0 441 144" fill="none" xmlns="http://www.w3.org/2000/svg">. <path fill-rule="evenodd" clip-rule="evenodd" d="M276.836 115.27C278.236 115.27 279.21 114.298 279.21 112.897V43.356H302.819C304.22 43.356 305.19 42.387 305.19 40.984V31.393C305.19 29.989 304.22 29.018 302.819 29.018H239.961C238.559 29.018 237.591 29.989 237.591 31.393V40.984C237.591 42.387 238.559 43.356 239.961 43.356H263.572V112.897C263.572 114.298 264.545 115.27 265.942 115.27H276.836ZM384.427 112.252C385.83 113.762 384.968 115.27 383.238 115.27H369.549C367.716 115.27 366.743 114.839 365.557 113.435L357.366 104.383C351.87 111.714 344.209 117.211 331.49 117.211C315.749 117.211 303.35 107.725 303.35 91.445C303.35 78.936 310.035 72.252 320.169 66.646C315.211 60.93 312.946 54.894 312.946 49.613C312.946 36.24 322.326 27.077 336.448 27.077C350.897 27.077 359.736 35.598 359.736 48.211C359.736 58.989 351.975 65.025 343.779 69.557L355.855 82.605L362.648 70.741C363.51 69.341 364.481 68.8 3

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 202, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	910
Entropy (8bit):	7.093256817950547
Encrypted:	false
SSDEEP:	24:XKDGEm5BMPaIUWgF/foxKPUzuEHWK1br4Nr:6DBm5BMF+3mbWKFsNr
MD5:	7F972ABECEED50CA083138400B84D1C0
SHA1:	EA5F2499E4C284A3AEBB3F7D9E2E143D2AA5E374
SHA-256:	426B046038143AD054687058DAB793D909FA3DD666079EBCB36489EC5B8E0F40
SHA-512:	4CED88544DAF852271088520908A9EF7D7E899A21C9D2765F9B1AF3E6B38D64E26262252CD3A0706A934B7B82AC67886472D4A4A424390495D1AC22C7406EEDA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............A......PLTE.............................................HHS..................HHR............IIR..................IIS...............HHR...............HHS......HHS...IIR.........HHS...HHS...IIR.........HHT...KKR......JJS......HHU.........UUU\\\...HHR...........0...MtRNS.......(.........#.{"...........eeI..w/..................rrnfXXDD;775...........IDATX..g[.0...PZd.......{o.....x.!.)y..y?p\...%.8.e...`=Z..]..b.o..&0...Zj.WO...".R}.{V{g..zG..O.....m...._../.:.p.....c.O\.......l~K.5..p._M...C..,......Y..2....}SG.^-Zp.@\|.....md6....C.......o'.<..\..J.&..W.;\|...;d./...a..F,...R.."s).E.....zf..Y..7.&/.Qkj.O..aR..B..90..N' .F..Bb.Tk.6.M.b...l0....#..v.r`.. ,.M..n....f.W$.....V.i.a.....m.....{?}?..>..\|..&...w.T..u....Z..a.......[`....Z.Pki...V......$]..v.p.x.E'.Dy..5.}..O?......\w...&.....p&.m..aA.^/b......`.,<y...^,.?5..Y+.}.......".i......IEND.B`.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65478)
Category:	downloaded
Size (bytes):	127493
Entropy (8bit):	5.291967271973065
Encrypted:	false
SSDEEP:	1536:9vRm81iXXxV7eWIHczxswQI4h2KE+ixXwRk2sxHXZFR7ZRtHT7ClVzFht5RHZrHJ:10RRoe2s1sojnznmR
MD5:	E6FC79D1F88F6D0059D51CC425ADBEC9
SHA1:	15965DC63E6AB28BAA4D583571666E75B1B66528
SHA-256:	6DA7F2FFC30130D27CCEFB7A88B7457ECD4483193D367368584F41E4CE838B0C
SHA-512:	0ADCE6A8D38CB2CE3A410C813356C22E2E154BEC6596B296D95BE142C6F855AD064F05501F5926F1568A7870BEF2C1310A3499A4D68F8B570AC089499CDDF712
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js
Preview:	/** [Universal Client] 03/21/2024 - Version: 1.0.240 */ . !function(e){var t={};function a(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,a),o.l=!0,o.exports}a.m=e,a.c=t,a.d=function(e,t,n){a.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,t){if(1&t&&(e=a(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)a.d(n,o,function(t){return e[t]}.bind(null,o));return n},a.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(t,"a",t),t},a.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},a.p="",a(a.s=32)}([function(e,t,a){"use strict"

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1137
Entropy (8bit):	4.856994345754096
Encrypted:	false
SSDEEP:	24:IfJMIAnqsgAm0Lbia8lRWUXQHpeq0AGQwk7KFGRRKD/aJuPwPf9s1NduF8AfbM:IXsgALbMwU/FAGQjecCijqduFRjM
MD5:	E42E50EA3F07E4266E944FAF1DEE6D3C
SHA1:	EBD45EE0DE211F9E6AEE5DC4FB51CCC14FA081AE
SHA-256:	33A050282E9356BE2F2D8538F376FCBC4C7BBC778C4517375B44DAD46D48389E
SHA-512:	614EA3BADF8DBCF042E540DCA49F097D5EAC214AC0241B295E81FA65AFBCFFF6B1746D7BC4AA427A4DB96A19D27B54C0AB32CB46BE13C46F54C708AE3209BD17
Malicious:	false
Reputation:	low
Preview:	/. 1) This JavaScript is provided by AT&T CSO-Tguard Group.. 2) Import this JavaScript files into the pages where needed.. 3) This JavaScript will refresh the session when the user goes to a different page which is not behind our webseal. 4) Call the function refreshTGuardSession() using onload in each web page.. /.function refreshTGuardSession() {. addPixelImage();.}.function addPixelImage() {. var _body = document.getElementsByTagName("body")[0];. var _date = new Date().getTime();. var _qVer = "?v=";. var _imgSrcs = ["https://oidc.idp.clogin.att.com/static/pixel-url.img"];. var i;. for (i = 0; i < _imgSrcs.length; i++) {. var _rmImg = document.getElementById('haloAMImg'+i);. if(_rmImg){. _body.removeChild(_rmImg);. }. var _img = document.createElement("IMG");. _img.id = "haloAMImg"+i;. _img.src = _imgSrcs[i]+_qVer+_date;. _img.style.display = 'none';. _img.width = 0;. _img.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2437), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	31776
Entropy (8bit):	5.3802277934652585
Encrypted:	false
SSDEEP:	768:FIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7Su1qd:FIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqU
MD5:	997A564C66E4B7A0A812DE39C3A844C9
SHA1:	587B329EC89D43D7739339479A96C94702C1C0A3
SHA-256:	0651CF04263DA70C12057BDC8D26A7AE977DDAA1AE30D916B3C7BB9290402E05
SHA-512:	CE98841A48262DF6575A97A4E8C8C4BBD7F1DE63B672FB2FEF92E7544B00A7953EEFD143DA29C2A65DACF82E021F5CABA3709C69F1DFC88ED5475A93B99D0C64
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/
Preview:	<!DOCTYPE html>.<html lang="en">..<head>...<title>Login Screen</title><meta property="og:site_name" content="" />.<meta property="og:title" content="My Site" />.<meta property="og:description" content="" />.<meta property="og:image" content="https://att-mail-987654.weebly.com/uploads/1/5/0/2/150218705/published/at-t-logo-2016-svg.png?1720787646" />.<meta property="og:image" content="https://att-mail-987654.weebly.com/uploads/1/5/0/2/150218705/published/nc.png?1720787398" />.<meta property="og:url" content="https://att-mail-987654.weebly.com/" />....<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1.0"/>.. <link href="//fonts.googleapis.com/css?family=Karla:400,700\|Oswald:700\|Roboto+Mono:400,400i,700,700i" rel="stylesheet">. <script src="/files/theme/MutationObserver.js"></script>. <style>. .navbar__logo .icon,. .navbar__center .navbar__logo:after {. color: #2990ea !important;. }..

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596)
Category:	downloaded
Size (bytes):	2116
Entropy (8bit):	5.310836992971446
Encrypted:	false
SSDEEP:	48:YgJxU6hIAeCt2Zmd8080MkJXOpr0vDGUzO:FJxDhIxCt2MdbIktOl0rGN
MD5:	7535500B7F02D5FA99E9FD796AEA78BF
SHA1:	969A737F0537486C4210CCC0A50FED651374422B
SHA-256:	2257C8CE8C1D27EA0CA336F65A4FB1C1FECA0DBBA41CB78D7D90BEBDF988B881
SHA-512:	3C378692B723F1EA11F5FBF34C4398B35DEB9EFCB3FB8014B304F00BDCEAFD66670AC115BE0453BE89A4561AC77FC164629F4C74FB93CF68715379C66D916D5C
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/thirdparty/quantum/loaders/quantum-att-loader.js
Preview:	/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula v e5182acbbd5271e17d27fb6767b506295fc4bd21 */.function l(a){var d=0;return function(){return d<a.length?{done:!1,value:a[d++]}:{done:!0}}}.(function(){function a(g){var b=document.createElement("script");b.type="text/javascript";b.async=1;b.src=(window.quantumMetricAssetLocation\|\|"https://cdn.quantummetric.com/qscripts")+"/quantum-"+g+".js";document.head.appendChild(b)}var d={m31872:"attbusinesspremier",m33195:"attbusinesscenter",m47591:"attfemto",m47594:"attfemto",m47592:"attfemto",m47607:"attfemto",m47610:"attfemto",m47608:"attfemto",m40095:"attsapmp",m19442:"attsapmp",m40101:"attsapmp",m40094:"attsapmp",m18347:"attsapmp",m40098:"attsapmp",.m45917:"dtv",m45143:"dtv",m14186:"att",m14185:"attstaging"},k=function(g){var b=null;if(window.location&&"string"==typeof window.location.search){var e=window.locati

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4672
Entropy (8bit):	3.9609065395562255
Encrypted:	false
SSDEEP:	96:qAH+zrUoTF7AfbNM8As09218iqUacnSZ8uySM0nKh4SEUnNx0jgvp:qAe8m2b6a4ENqNcnSZfySMQxUNFR
MD5:	70A42235B3F29DBD76832BC938709175
SHA1:	B3D9A34C74BDECAACEC751A8122C441D8F2538B4
SHA-256:	ECC6E5C037A4E54C1ED4052C9880D55C27187BF709FB82FAE2709C92D3A3A563
SHA-512:	6D1C600A322865E33182260507C0A812282A416EED95237EF6C598CF78BC16C001AE0527D420A3EE2E73C21419027033E181745C474441D7B10913F2B0215D33
Malicious:	false
Reputation:	low
Preview:	<svg width="441" height="144" viewBox="0 0 441 144" fill="none" xmlns="http://www.w3.org/2000/svg">. <path fill-rule="evenodd" clip-rule="evenodd" d="M276.836 115.27C278.236 115.27 279.21 114.298 279.21 112.897V43.356H302.819C304.22 43.356 305.19 42.387 305.19 40.984V31.393C305.19 29.989 304.22 29.018 302.819 29.018H239.961C238.559 29.018 237.591 29.989 237.591 31.393V40.984C237.591 42.387 238.559 43.356 239.961 43.356H263.572V112.897C263.572 114.298 264.545 115.27 265.942 115.27H276.836ZM384.427 112.252C385.83 113.762 384.968 115.27 383.238 115.27H369.549C367.716 115.27 366.743 114.839 365.557 113.435L357.366 104.383C351.87 111.714 344.209 117.211 331.49 117.211C315.749 117.211 303.35 107.725 303.35 91.445C303.35 78.936 310.035 72.252 320.169 66.646C315.211 60.93 312.946 54.894 312.946 49.613C312.946 36.24 322.326 27.077 336.448 27.077C350.897 27.077 359.736 35.598 359.736 48.211C359.736 58.989 351.975 65.025 343.779 69.557L355.855 82.605L362.648 70.741C363.51 69.341 364.481 68.8 3

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60378), with no line terminators
Category:	downloaded
Size (bytes):	60378
Entropy (8bit):	5.226751934675976
Encrypted:	false
SSDEEP:	1536:DwUHzI01OwxqmIGAKoMuXpTteneKJ4jf0V:DHXm50j
MD5:	C1FBB54C4F22838F40CE99E7418FCD97
SHA1:	62D8945137AE75C185903E0552C920E03E5577E5
SHA-256:	C17C2FCA2732465B44F96FE2E566A4E016E4A56D7C40169E5E84F501BA750E5D
SHA-512:	C5178DF676E1BD912502AC86DE7E270B76FD321B229E320754E455AD6620FCEDCFED5515AA9192ECA09074E892916978E0A3F412C6C8757AEC88900566C56B48
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-core-1.65.1-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functi

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.262814895472355
Encrypted:	false
SSDEEP:	3:qy6sJMVn:qy6sJMVn
MD5:	EEB676C401A115F03D55DA75FBAED82E
SHA1:	1B74F55E4D819239ADF562291436F6B9470F62C6
SHA-256:	E32A6AE5E43F7F652674E0F03DC23F86839F839B29EE4E63C01C93DA180BB0D0
SHA-512:	3A5357E187B2CBCBAC3B3606E86053CB3381BF02A2BD3A74338BF48F7F6D864EDADF59D25E407BF16FBE321A2FB7481126B89ED6B0AA4622F4BA2D6EC04C37DF
Malicious:	false
Reputation:	low
URL:	https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1728908429563
Preview:	var s_3_Integrate_DFA_get_0={"ec":"nc"};

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	51086
Entropy (8bit):	5.36333089170413
Encrypted:	false
SSDEEP:	768:EoXRVtdFtXGtpfM5kT2xNGYUJmmp09VFUVdUv2dnEAxPPLaz7O3OFDN:FztNGtFMHr3wp09DOu2dnEANPLyP
MD5:	AF551B67310E4C8FC63E60101C77C97F
SHA1:	B21E368A4F6155D50B56E0C3C0499D5D48CB4840
SHA-256:	F9C06AD28C759B0F000F55C83EB682C66755C308EEA80E2650906A308F9F9220
SHA-512:	47A91E029F4EA36D1F4B277833F425ECA70C894A2187DF82F05805F73E9B16D359F4F23E21EBD7D9B342373F2F75326396B14BEF0ED08E0337197707373C9A2D
Malicious:	false
Reputation:	low
Preview:	!function(){function fe(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},m={},e=(this.getCookieByName=function(e){return m[e]},this.setRxx=function(e){var s=-2,t=(document.domain\|\|"").split("."),l=t.length;function c(e){return"."+t.slice(e).join(".")}function u(){var e=c(s),t="rxx",n=m[t],i=(n\|\|(i=(new Date).getTime()-14383872e5,n=parseInt(Math.random().toString().substring(2)).toString(36)+"."+i.toString(36)

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2828
Entropy (8bit):	4.536070396957773
Encrypted:	false
SSDEEP:	48:PTBE0ZpntMb0/6aYkuvll/JGd6vpYQ6Kq3hUyvKrcJcyd6GR4y0IB7KPa0TTM:77ZpntMgSaYDvll/YAvpYjKq31vKrcBH
MD5:	C22AB67199A33D876512504CDA4FF55B
SHA1:	36E96EAE4644B6028532974FE5186A072792CB37
SHA-256:	C4CD233D3D6B0F184E99D5017E521B4C6F9106D3E546864A8BA516189B934311
SHA-512:	9C11487F2A00B4DCA9C04294F4F422AE0DF00828DE989AD64F506446C72E91E64D0B47EC243AE75B3EB88CA5C882E65C9A8F6D99B0C8BED4541F767A3DC1C31B
Malicious:	false
Reputation:	low
Preview:	/!. Revealer 2.0.0. . Copyright 2015, Pixel Union - http://pixelunion.net. * Released under the MIT license. */.(function($){. // check for trend event (make sure jquery.trend is included). if (typeof $.event.special.trend !== "object") {. console.warn("Please make sure jquery.trend is included! Otherwise revealer won't work.");. }.. // Simple requestAnimationFrame polyfill. var raf = window.requestAnimationFrame \|\|. window.mozRequestAnimationFrame \|\|. window.webkitRequestAnimationFrame \|\|. function(fn) { window.setTimeout(fn, 1000/60); }... // Public API. var methods = {. isVisible: function(el) {. return !!el.data("revealer-visible");. },.. show: function(el, force) {. // Check state. if (methods.isVisible(el)) {. el.removeClass("animating animating-in");. el.off("revealer-animating revealer-show");. return;. }.. // Remove previous event listeners. el.data("revealer-visible", true);. el.off("tre

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1710
Entropy (8bit):	4.9314724103036545
Encrypted:	false
SSDEEP:	48:8OLWVL3L90QKOCCVLcxbKY3QLV4/VLdlL+LIKY3QCyVL0Nnp:8OLWVL3ZwOCCVLfYgLV4/VLdlMFYgCyO
MD5:	922930888BC544E58FC2692226682CF3
SHA1:	A913741C42EA82DC87D8C873CA28C638FFBE7FD7
SHA-256:	25CE2816A5A963942B0334337F6B6C931EE73CF0FCC1C976355353659C89C75B
SHA-512:	BC77409A2086CDBA174433D08848176BC54C4956DFCE629BCA27EC2EE8E679F445908B057EC9E1042F77C82B113B18F783A5F879200FD706F8471177EDE0A4CA
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Karla/font.css?2
Preview:	.@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 400;. src: url('./regular.eot'); /* IE9 Compat Modes /. src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./regular.woff2') format('woff2'), / Super Modern Browsers /. url('./regular.woff') format('woff'), / Modern Browsers /. url('./regular.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 700;. src: url('./bold.eot'); / IE9 Compat Modes /. src: url('./bold.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./bold.woff2') format('woff2'), / Super Modern Browsers /. url('./bold.woff') format('woff'), / Modern Browsers /. url('./bold.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Karla';. font-style: italic;. font-weight: 400;. src: url('./italic.eot'); / IE9 Compat Modes */. src: url('./italic.eot?#

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	29838
Entropy (8bit):	7.943146559319752
Encrypted:	false
SSDEEP:	768:lYyiMHHB6wYQ8HfHScRJCAL3OriaFWEO0VXF:lYwYXH/TJCmmicWE5
MD5:	263D44E87C0740A4900D74EC0303BAB0
SHA1:	A204D201BC81B768EDAE5D37A96135DB454D4006
SHA-256:	416B70976C1142F28E0C533159B89E8D894E4BD152A1BE3F0BF793BCB1939727
SHA-512:	669AC0933C6AF25D9D7995D5E76E1818240A3A16D29064943053EAE0F719EEA316E4DD6627937C45D8CB7E13B8BD47B552ED8B3B6AABC1902F86860EC95992D5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/CwIwq1WdTD1rWMAuQ4Mqwg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/thedailybeast.com/d8a2de6cb16f498e74de09733e4a87d0.cf.webp
Preview:	RIFF.t..WEBPVP8X.... .../.....ICCP........appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl................................................desc...P...bdscm........cprt.......#wtpt........rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt...<...0ndin...l...>mmod.......(vcgp.......8bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc.......&....hrHR........koKR........nbNO........id..........huHU........csCZ........daDK........nlNL........fiFI........itIT........esES........roRO........frCA........ar..........ukUA........heIL........zhTW........viVN........skSK........zhCN........ruRU........enGB........frFR........ms..........hiIN........thTH........caES........enAU........esXL........deDE........enUS........ptBR........plPL........elGR........svSE........trTR........ptPT........jaJP.........C.3.4.J.7.9.x..text....Copyright Apple Inc., 2024..XY

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (444)
Category:	downloaded
Size (bytes):	477
Entropy (8bit):	4.8870748750488024
Encrypted:	false
SSDEEP:	12:j5IxOpl57q3cm+gVXAZCuBXbPSfxx7oxJBVxG:Tpl57q3ItZCKWP4Y
MD5:	910BFBF47BD8C01C23E38569D2240B0B
SHA1:	AE3B7A5A1DE338742DD5F69621C70250B19D701C
SHA-256:	E51C2C4C727A0BD32285E9037271671ED5F033C03FFD5E5063FA1AB8D7540E11
SHA-512:	32569FE3D09AF276D6E0058339ABECF4CCDE0FBF1A028C86A25AE458BB5A4A177E315A9F910A4AA541F67556F189678EF1038ACB2BF006A2B141265F9FD6C9FD
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/thirdparty/adobe/detm-container-ftr.js
Preview:	// detm-container-ftr.js 32 prod.var detmExecuteFooter=function(instance){("undefined"!=typeof ddo\|\|"undefined"!=typeof jQuery&&!jQuery.isEmptyObject(ddo))&&ddo.pageLastLine(),void 0!==document.dispatchEvent&&document.dispatchEvent(new CustomEvent("detmScriptsReady",{detail:{loader:instance}}))};"undefined"==typeof detmLoader\|\|0==detmLoader.finished?document.addEventListener("detmExecuteFooter",function(e){detmExecuteFooter(e.detail.loader)}):detmExecuteFooter(detmLoader);

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1855
Entropy (8bit):	4.360546370866115
Encrypted:	false
SSDEEP:	48:/HiG/ue3I/yNy/QO/wZo/K3y/VS/hKP/4S/9ClRNe:/HFYbrHeywcH8s
MD5:	EA42E573726B80C5C11295D397658462
SHA1:	E9417B9AC30BB4AAC5BE4BEB47DA2B7C706C0C6D
SHA-256:	C1EB84BE7DC753B6709523A2987E0C7E6C67329B746548DA8E16130A0236BF28
SHA-512:	70C237F756D4C532F72A0CBC27F1F009717E087EEB3337766DE7516E967C9E8AEA4D8FB898581FB28C022A8AE7CBCA84C0536D98DFE959CA9910AE2D5B2E58CC
Malicious:	false
Reputation:	low
URL:	https://currently.att.yahoo.com/manifest_partner.json
Preview:	{. "background_color": "#ffffff",. "display": "standalone",. "gcm_sender_id": "972471620958",. "gcm_user_visible_only": true,. "icons": [. {. "sizes": "48x48",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png",. "type": "image/png". },. {. "sizes": "72x72",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_72.png",. "type": "image/png". },. {. "sizes": "96x96",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_96.png",. "type": "image/png". },. {. "sizes": "128x128",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_128.png",. "type": "image/png". },. {. "sizes": "144x144",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_144.png",. "type": "ima

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	410840
Entropy (8bit):	5.240861861756721
Encrypted:	false
SSDEEP:	6144:VUcPJDnjk1ru0nbxjrk9zHOJCCBrh8+q9SkDuli6+YfbXTN9PY8d8:WcBMrrnbxmzHO40rSSkHYfri
MD5:	2F9C5AE5B48D2A4A6DF8BF0F5654AB22
SHA1:	CA7A1AC4B9B0270AF87BF5FFB4FB8424D9608CBD
SHA-256:	AEDC0EE41803F174949D21E459F9CFAE5F12AFF07C5AD86E46FBA0635BA38721
SHA-512:	F6DD580B0A7C81D51320B391848DABB30588B581E1BA3634275443EE3A68E36E110FFA6CF39BB97E6F49055AC6A2EAD027F38324378701ACD8FD6B77C2CE6E07
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+6XX":function(t,e,n){var r=n("y1pI");t.exports=function(t){return r(this.__data__,t)>-1}},"+K+b":function(t,e,n){var r=n("JHRd");t.exports=function(t){var e=new t.constructor(t.byteLength);return new r(e).set(new r(t)),e}},"+c4W":function(t,e,n){var r=n("711d"),s=n("4/ic"),i=n("9ggG"),o=n("9Nap");t.exports=function(t){return i(t)?r(o(t)):s(t)}},"+iFO":function(t,e,n){var r=n("dTAl"),s=n("LcsW"),i=n("6sVZ");t.exports=function(t){return"function"!=typeof t.constructor\|\|i(t)?{}:r(s(t))}},"/9aa":function(t,e,n){var r=n("NykK"),s=n("ExA7");t.exports=function(t){return"symbol"==typeof t\|\|s(t)&&"[object Symbol]"==r(t)}},"/w9J":function(t,e,n){var r=n("dt0z"),s=n("zhW5"),i=/&(?:amp\|lt\|gt\|quot\|#39);/g,o=RegExp(i.source);t.exports=function(t){return(t=r(t))&&o.test(t)?t.replace(i,s):t}},"03A+":function(t,e,n){var r=n("JTzB"),s=n("ExA7"),i=Object.prototype,o=i.hasOwnProperty,a=i.propertyIsEnumerable,u=r(function(){return arguments}())?r:

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63152)
Category:	dropped
Size (bytes):	104925
Entropy (8bit):	5.340648103872101
Encrypted:	false
SSDEEP:	1536:4wQndm/xVe8DyLfcqYN8SFSJ7DAggrOTUEH:4HdGhGLKFGp
MD5:	A8CB76B9B40A981F96A1527DEBA9CF45
SHA1:	DB2374809F81F114AC176CCF1AF7011F3B25BB22
SHA-256:	7B06C19E214F79EB54C7FB94E7346CF0EE385AEEAF5F7CC5B5092D30765D74D8
SHA-512:	574C2E682912087532E0A785B952ADA01E57C75E3656EC32A325F4CCBFA455D6F88CE8636C0D95E486085C0BF67DD019D5CC7B06AF4EFFFB833F245686571ED5
Malicious:	false
Reputation:	low
Preview:	window.assertive = {. entityId: "wnsrvBJmEPrTfrnFX",. analytics: {. sampleRate: 0.05,. integrations: {. ivt: false,. },. logUnfilled: true,. useHistoryChangeTrigger: true,. override: {. normalizeSlotId: function (slotId) {. return slotId.replace(. /-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,. "". );. },. },. },. floor: {. enabled: true,. addToHashKey: false,. currency: "USD",. optimizeThreshold: 'm_0.2',. optimizePrebidThreshold: '1st_1.4',. exploreRate: 0.05,. limit: {. percentage: 0.95,. },. prebid: true,. aps: false,. priceBuckets: [. { min: 0, max: 2, increment: 0.01 },. { min: 2, max: 3, increment: 0.05 },. ],. },.};..(function() {. try {. var domain = window.location.hostname.replace('www.', '');. if (domain === 'engadget.com') {. assertive.analytics.sampleRate = 1;. window.googletag = window.googletag \|\| {};.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9985), with no line terminators
Category:	downloaded
Size (bytes):	9985
Entropy (8bit):	5.39424531478431
Encrypted:	false
SSDEEP:	192:eluv6qz171WxJIvNzJYhltvvZcvfe2U1RJAZ4UDTxZFY:PvaxJIvNzO4/FbPxZFY
MD5:	E1026852C4E85D7DF641ED51990B2993
SHA1:	41616AB4D20413CF3CE54A66A0CC9044E41E25A3
SHA-256:	872722495556413DF2909833C48A7A9A8183F041700B150F222402B65E5F0307
SHA-512:	47B4DED13C609E4ED227EED179FEDB2FDBF4CB91321AF0C47352FED8B8DA38282F44EA5423B778F5B90B48FDEFF3CA41083C8564B4D3114350DC1173B4A34721
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.c9493b0439b3a8ef64a3f6b7f532117c.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$\$srchFujiDirtySeagull${border-color:#e0e4e9;border-color:var(--dirty-seagull,#e0e4e9)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdendc$\#0057b8$\:\:b::before{border-right-color:#0057b8}#atomic .Bdendc$\$srchFujiHulkPants$\:\:b::before{border-right-color:#7e1fff;border-right-color:var(--hulk-pants,#7e1fff)}#atomic .Bdbc$\#5015b0${border-bottom-color:#5015b0}.srchTGBlackFri .srchTGBlackFri_Bdbc$\#000000${border-bottom-color:#000!important}.srchTGCyberMon .srchTGCyberMon_Bdbc$\#00873c${border-bottom-color:#00873c!important}#atomic .Bdstartc$\#7e1fff${border-left-color:#7e1fff}.srchTGBlackFri .srchTGBlackFri_Bdstartc$\#2c363f${border-left-color:#2c363f!important}.srchTGCyberMon .srchTGCyberMon_Bdstartc$\#009c94${border-left-color:#009c94!important}#atomic .Bds$s${border-style:solid}#atomic .Bdends$s$\:\:b::before{border-right-style:solid}#atomic .Bdw$1px${border-width:1

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18648, version 1.0
Category:	downloaded
Size (bytes):	18648
Entropy (8bit):	7.9875716664872085
Encrypted:	false
SSDEEP:	384:/0DW/LIHS+OYvV8fSUHHc0CTP8y62zZQ84vm:S2IyNpncxPjhVX
MD5:	A2D24DEEB37E8B4A64B5536ECB11897A
SHA1:	AFCAABA991FF5BFFCEDA661DFA5E8E8F1E2D11AE
SHA-256:	37A1212CC1AB5C935D9A3FEE05C98C940EAA895A23510E5F83D550DFBB0D763F
SHA-512:	1FF4A0AB5B9EF504F562168124984D74DD600A9B99522A5C6C08B252B4032F3A3EC395917875167C30170D1F35FD5EFF223FDE46FCA60363867A4ADA27AF3FD7
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Bd.woff2
Preview:	wOF2......H...........Hs..........................n..0....`..f..4..W.....l..I.6.$..@..b.. .... .......I.[U. .\|...q..6....../..?).1...P.YZ&.......^.j.{=.2jVA..3!z{...$../..i..A.e"..i F.3.;ij.....>Z.......\l7.\dg?........F.r...P....9.9N._.h.)hOIDs..;..r..-.$"..... .....4...6.'.y......{....n.rc.....p~...s.+.-.L...X`.pn...E...t..]..H...R.....y.#..}.?..`..X^.Qx.Fjf',.\|.......;.KTT.2......E.G..z..VF..m.\$kr..X$l......D...!w........^..^5..?.{.n..J....w...R........_.l~........nA.D+.%.DA..s.....5..9...H6P..uL...k.A..5..A.......7J....]...........g.XR.k......C...M........+S..G.....]........->.<..Ty.d...u4.?...D.J..$.h...I...?.x.....Q....@.4.w.KO-K..%A...H<w.......\.t..hx.....{.q...Z.f...vK..X......2..........A \|.6n....l.`0....5 .W..3.lw.....:..).K=....\....]`wf.D$.........t............\Q.....>.:.=(\..L.rLE.uQ..\.).n...K.\|S..2'@K..NQ......t..2.2h..=X.H.....^...T.... .+.K'.?.Z,...5......q@...\|uf...S.....#..'.x..F.....p,.....7......(.,......;..E.A4.<.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	53870
Entropy (8bit):	7.973040464015109
Encrypted:	false
SSDEEP:	1536:2wLvT9iriXVMu6exHgVSMEKBdHgyVSncEaPK:2liXWu6EHgoeIndaC
MD5:	B4A1AA2CD5845D51265FB1A5F4E6F12C
SHA1:	22F1FF8322463EF25884FBE57A0F436792D6A851
SHA-256:	7A7958359C28AA99CD8C5A3F3A913D48687F9C5C2F2979675FEF8F862AA54584
SHA-512:	61FC04C1598B89BDD93BAD48F4BCB51B51559AA7FB1FA4B1E4F68C58CCA57D1E25E5C352ED16395E49629D688764E9DFCC583C8C4EA263838A1351D676ED090D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................................................................a...........................!1.."AQ.aq.2......#3BR..$br...CS.....%&4Ds.....56Tcd......'E.FGWt....................................5.......................!..1..A"Q..#2R3Ba...$CSq..4b............?..Xij .......#.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	12416
Entropy (8bit):	7.984588164122853
Encrypted:	false
SSDEEP:	384:RSs2F/zCynnMzyWioF5UQOjlqYPiDuXwKFRQTLd1h:RkF/+yncWoF5UQOjlpPiDlKeLd1h
MD5:	5ED94EFDD76B2E4626285E3F5836C11D
SHA1:	083DEECBBB65AD24ADB14BF388E0B1502CFDB81A
SHA-256:	988067F783163746F04E46D8886F7A833D96A72F386523E6A8379BCEE5EE8645
SHA-512:	B1533EE0A2EE25EDEF4B41DD268D15889FD48346A5CB74E8B9EA1B86E72F9324E8E834BFCB15734F3281AD88EC3B447621439E35AEA9460D4E2BF318A4F6F584
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/w.MaFC_IqxQcYcfu3SsZzw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-08/c4dda7e0-6c7c-11ef-9ffd-4f64f470813e.cf.webp
Preview:	RIFFx0..WEBPVP8 l0...!.......>y8.H..'.%t.x...cm..].q..+....W?...`.....l. .R.T..45B....e\|....?]........g.^s.=>...?.#...)..o....g...mZ8.X?._6.w..x...GEw...7..5..?..6..!..'IXF>y...I....&(.3...B.U1 .. ..2..E.{.o....X......`...8q.].T.C..FhIO.^.7.15m.....U.......C....'N.u%....t.....UB...P..J..$G.....-....Y!..A5...F.....:....g.Eu.......Z.\|.b...m..q>HO....>..O..j...-......}J...E&.F..LQp{.....6.....P...Y..z.Dvb..{IO..I~.Z..>........K.[.a...(4...f.d.kK)b.....).j....9o.}.;.).^Y. ...f...z.Z...../_'92.4:.U#....W.._.?....[..s5..>.......Oj.....&[.QN.3.97.0_..X.Zf......!).Qv..S .NtLEiQ.9D.2.D..K.5...ug.......B.<-.E.\HW.Hs..=...#.......?..U.%..c.$9...lCx."...@.!bb..9.Z.NX.1.\...6..,..1b..V.#T..7{...6.X.`....9.w.U_U.x.r.p.....$......lM..}.5.1........eY.........#U.n..3..a.].+:..o->..p....3D3.....#.fBq.H.......b8.Z..nd.....+.TU./.hN(.c.J.52k.HEjC.E?....V.Gb...l\|...I...Bo...{..u.c..zwB.o.1...&.~E....N.19.......4.yF......F..#.SkV...1..M..........oJ..

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 299 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8999
Entropy (8bit):	7.967513844085707
Encrypted:	false
SSDEEP:	192:bff5YUBX2Dzu5Dcbr3T1ncPFs6fzgLpJgT:DfqUBG3E6v6L8m
MD5:	16766A70949DCDCDF1EA0B15299B6B26
SHA1:	6E0CB661B500725DAC78A480D8CC595294EEBB91
SHA-256:	6B1B0B1EDD357F932F97931D09421189D924EB40129469A92AC474F88C1383EA
SHA-512:	E86BD1E9F6BFD7B240CB3D339743D76CC9A63BF8DA0D1A95A0537F40A8B02CE501FD250AE0996D05DCFAEC165FC8A99031A631FFE9C92673C48F669F99411275
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/att_homepage_en-US_s_f_p_bestfit_homepage.png
Preview:	.PNG........IHDR...+...0.....I.\X....sRGB........DeXIfMM........i.......................................+...........0......W...".IDATx..].\|...?.{..7<......`...Z...lk..&..$ V[....V......n. ..J..~ZM.K.V....7..y%$....\|...w..7.B.e..9s...3g..%.C..a..-..@..a..-..@..a..-...........V.-PTY.P..LL.B.F.....?..o(+..{O'u].+..)k.X'....m...D.x.v&q>Avox.o..g.#."2....+.e.).Pz...$].I.F..f"e.1..].c=].V.G..:p......~....CH.....~.cs......[h...e.if....5..QR.Hk...R.@...Db.C...N.v.....O../.8..^.../.A.b.q.....1...qG..<.R.h70.R....C`........?.._.......b.R.........f...MA%.t.{C..%..l....93..an...3D....>}d.R..ei>c.i..{.y!0l.C...s.s..@..f.o..b..5...69....f..a.......%...C....Dc\|L.H+...J...-......ah.....v..5.J.?N......9.....R.....e..6`.(.....&....z'.xk."x.f.......f......Q:`..F.rV.....e...w..Z.....N:.._.......e.w..../...&.........N.f%m..x([`b\|......<.6....6.D.^.G..t..)...-X...b.!..@......PyAv.xu.PJ".......m.Xm\...yy5.,6.3.b.....r4..K6..Q.h........._....R.'....z..v.i. .=!F..S...W..

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	43315
Entropy (8bit):	7.984633494090194
Encrypted:	false
SSDEEP:	768:fpF+UWxmgr51a0caD9G7EWADix1sdOVmFyZ+9rE1ATwwgzlL1o5enIicxp:fpFix/kPADy1sEIL9rAwgBa5enIiY
MD5:	868B959FC01D37736D2D433437D5F100
SHA1:	69446F32F3DD432D93E8C353BD66C75F18B6415D
SHA-256:	551D288DC8CEE5A2FC1325F52E0BD9CA9C36FE6A3E0BF76F30F314EFCD4A2680
SHA-512:	BF2DE25E9D0369303F5C4B50943B108D0BDC64B9BA7CBBDA873E2FD300CFAF62AD8EE8968E3E1468C36146E61FD4448C4D45FCEBC0B20F52C0E0B5540DADBE8D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................O..........................!.1AQ."2aq..#B.....$3R.4Cbs...%&56Scr...dt..T....D................................./.......................!.1."#23.A.4BCQ.$a.Rq.............?...,.PRo.........i.+.]..@..&..D:..0z....hf.&...Yt....KI.M.7...X=jm.s=........LQ.l.rWNJL...S6.J.l..:/^.:}..< ..'.....r_.....a..".A..H..........>C....#c.tX.P..5..l..zc.:W....:.d.o.3.u$..n.9.......C.F.S...5.+..kN...x...O'.O........s.jw.>..._..s5..B)..&.A.W>..?V.....=.&..l...,X.N..=..%....8.5.Bm.l..e_.i.'.../.a...H...e..i..........[b_..F.......`...H.....G[....Z0M.X)S..(..DS..;%].o../..\|...<..Z.=...........#<..K...Y9..qc...x.Y..S..Z.o:g.V..yB.G.!`..E..".d..O]....VYd......Y...\.&..z&0..#..Z.k#.....@.n.+.a2.K&.@..7...s F..jC&.~.K...\|...3.C..h2.C....z....C#.......d..m..4[.`...ke..w.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13052
Entropy (8bit):	7.934868676734226
Encrypted:	false
SSDEEP:	384:OQficEKMDBIZ29WZeGZwO6G/VcsAyvNEEs:OwJEKMFvWeGh6gvNEP
MD5:	59B4FD7CBFA57DC473574BF7686C4F23
SHA1:	567106AF6D16ECF71789D0C0498ACDD840E5E99E
SHA-256:	1FBBE9C3A31F9E5968D8A70EAC46724A2D920CFA9167B3775CB4B8FC40447377
SHA-512:	44E144CE8E9A781BD85241C7F191EF9CABB50C51BEEFAAFE3D2D15446CF60A4EF8998E132AE1E859121DF1B9CC6C15BF2C2F1E37CC81EDC8BCE9CC179263130D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/PawwvJdese9nx.y2dRiAjQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-08/2b090f10-59a3-11ef-bfdf-b3e37008c82b.cf.webp
Preview:	RIFF.2..WEBPVP8X.... .........ICCP0......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .0.......*....>y:.H....&.q@..ene.......T.].a.<.:.....o4.68..7..25..t.m.....F./8.m>.....oY.u...f..1'.].n.....ZE.......~;.[.o8......U./S!......%.H[xq...q...K....%..l.>....4..n....cs..H.R,.S.?tK. +\|]...0\|$.%.a......1....w.F^.1.f..L,..0byi......Q.K.kQ....df...........K...9.@...W..{.mlD..m_..%...A.Y.3...V,..{..'4.,.\....~j.........O~.....ef. Cg..Qt.....1ax....x.....q.=.Q....,.....l.)Y).'..

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1421
Entropy (8bit):	4.32976103690064
Encrypted:	false
SSDEEP:	24:tYU/duflUHc9MMXy/83oCWKjIVJ5PTSTqXcP2dUTm5hZtmtJw7/AY:n/TEYCR0VXSuXW2a6vPx7f
MD5:	3FE68FDB37BDC4AC3520527E8F69DC61
SHA1:	A0DCC41EEEB599C078596A1239B66D04EB940EC8
SHA-256:	123AA59BE7147BD7F9AD1FE3B6384FB5569BEE4BBDEE39A7E9915D684C977BF7
SHA-512:	76035D402CC3546870886C4CFE46B6428A3A1F0869C5E022EDBDF36EC2CED177F06AC9D9A74AA9366BBE11BF5D0BC1474C1640A2CB136E82BBA9E7646D3E69E6
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/cms/login/default/images/ccpa-icon.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="1" y="6.07595" width="22" height="11.1392" rx="5.56962" fill="white"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.4304 6.07595C20.5064 6.07595 23 8.56955 23 11.6456C23 14.7216 20.5064 17.2152 17.4304 17.2152H6.56962C3.49361 17.2152 1 14.7216 1 11.6456C1 8.56955 3.49361 6.07595 6.56962 6.07595H17.4304ZM13.2679 6.91818H6.56962C3.95876 6.91818 1.84223 9.03471 1.84223 11.6456C1.84223 14.2564 3.95876 16.373 6.56962 16.373H10.7321L13.2679 6.91818ZM10.3553 9.41582C10.5301 9.55752 10.557 9.81415 10.4153 9.98902L7.41378 13.6942C7.16006 14.0074 6.69106 14.0319 6.4061 13.7468L4.65019 11.9904C4.49109 11.8312 4.49109 11.5732 4.65019 11.414C4.80929 11.2549 5.06725 11.2549 5.22635 11.414L6.87565 13.0638L9.78224 9.47587C9.92389 9.301 10.1804 9.27411 10.3553 9.41582ZM15.1023 9.24971C14.9477 9.08617 14.6899 9.07896 14.5264 9.2336C14.3629 9.38824 14.3557 9.64617 14.5103 9.80971L16.2013 11.59

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	4.989766174423453
Encrypted:	false
SSDEEP:	24:uhyhzk2/OVsaJ4zQe3QxYaaa/vdKVDaaaaal3Ldaaaagaat3KUg+sa/:DVk2RaKmOaaa/vdKVDaaaaaddaaaaga8
MD5:	8CC5501351F013DE0CE76FA0A2C59D50
SHA1:	CCC13EA6E1BF7CA9FE31B0DD997981FA8EC6A2E1
SHA-256:	42938B72E2EC54515EB9C49145F42B8728CFC0B70170F80AEF58CE93032B1C1D
SHA-512:	BB41B6338F83027723F628D0724EB533A2BCA18956776C985BF2D6E03267D1E3C6E1C45F0A8A1316726F847DCDD16C1570AB0E8BAFFFA03D5DD663B0FAD385CA
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@.....................................................................................................\|...z...~...w...p...o...y..................................\|...E......)........"...P...............................................................3...^...............r.........^.. .................*...l...z...{...............5...Q........................G............k..........7..............................................$.......................B........................4......k.................K.........................Q............F.....................................................$......................./.......................'......X............_..O..(.........................W.............a..............I..............d...S...]...v..........D...>...............................................................................k...-..............

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	4.989766174423453
Encrypted:	false
SSDEEP:	24:uhyhzk2/OVsaJ4zQe3QxYaaa/vdKVDaaaaal3Ldaaaagaat3KUg+sa/:DVk2RaKmOaaa/vdKVDaaaaaddaaaaga8
MD5:	8CC5501351F013DE0CE76FA0A2C59D50
SHA1:	CCC13EA6E1BF7CA9FE31B0DD997981FA8EC6A2E1
SHA-256:	42938B72E2EC54515EB9C49145F42B8728CFC0B70170F80AEF58CE93032B1C1D
SHA-512:	BB41B6338F83027723F628D0724EB533A2BCA18956776C985BF2D6E03267D1E3C6E1C45F0A8A1316726F847DCDD16C1570AB0E8BAFFFA03D5DD663B0FAD385CA
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/favicon.ico
Preview:	............ .h.......(....... ..... .....@.....................................................................................................\|...z...~...w...p...o...y..................................\|...E......)........"...P...............................................................3...^...............r.........^.. .................*...l...z...{...............5...Q........................G............k..........7..............................................$.......................B........................4......k.................K.........................Q............F.....................................................$......................./.......................'......X............_..O..(.........................W.............a..............I..............d...S...]...v..........D...>...............................................................................k...-..............

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	dropped
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51598)
Category:	dropped
Size (bytes):	57158
Entropy (8bit):	5.417802428777297
Encrypted:	false
SSDEEP:	768:iVKsnHVmjHQkKgksWpRzoT7APx6GSHZsqwcuziSmHSE5lvzqmnhXiuy6KeMLyZOM:iVKsnHUJRkqT01S/bHSE5NzI+ZO0fX
MD5:	67E79F8387CBD66C34276733D689EDEF
SHA1:	F93815009E1CFAB2B246B59A14177B8552052D18
SHA-256:	54A61821C10286617E637CCC4D20EA9A41C88E5DAEFEAF073059BF733EF680FE
SHA-512:	481D7F65945AC8BD84E13ADD5B5CCF63B41AFB4BB676A653519F768CAAF53F4489DFAF5BD7AF31FA834F5A4901AAAEF33BB15A765CF626301FB4075AE4757C97
Malicious:	false
Reputation:	low
Preview:	/* detm-container-hdr 32 prod /.detmScriptLoader.component={UNKNOWN:{ordinal:0},UC:{ordinal:1},QUANTUM:{ordinal:2}},detmScriptLoader.getHaloMID=function(){for(var ca=document.cookie.split(";"),i=0;i<ca.length;i++){for(var c=ca[i];" "==c.charAt(0);)c=c.substring(1,c.length);if(0===c.indexOf("mid="))return c.substring("mid=".length,c.length)}return null};var hcc=detmScriptLoader.getHaloMID()\|\|"",mid=window.location.href.match("[&\|?]mid=([^&])")\|\|"",adobe_mc=window.location.href.match("[&\|?]adobe_mc=([^&]*)")\|\|"",ts=Math.round((new Date).getTime()/1e3),href=document.location.href,hcc_check=sessionStorage.getItem("hcc_check");if(""!==mid&&""==adobe_mc){var analytics_app_visitor_id=mid[1];if(history.pushState){if(href.indexOf("?")>-1)var newurl=window.location.href+"&adobe_mc=MCMID="+analytics_app_visitor_id+"\|MCORGID=55633F7A534535110A490D44@AdobeOrg\|TS="+ts;else var newurl=window.location.href+"?adobe_mc=MCMID="+analytics_app_visitor_id+"\|MCORGID=55633F7A534535110A490D44@AdobeOrg\|TS="+t

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65176, version 1.0
Category:	downloaded
Size (bytes):	65176
Entropy (8bit):	7.996782865840981
Encrypted:	true
SSDEEP:	1536:dJDFHWg/7CxUjbXmJ9U10h5An23d5X0LcpSOwHfvMQv:dJT/7CxUvmKgAakLcpSpHfU0
MD5:	B4DF4FCE99E5A3C3D1493112A0159071
SHA1:	D6CE384A32EC1D859406D6E4EBE3FE547DB3B82A
SHA-256:	C77AC0AA1AA3C9715CACB1FC76FEAF226E30927A9636E5C75C4DFEB75C0F8F98
SHA-512:	AF1F4EFF0DEB18BA2628D82BB6CA16D6340DC797A438B13F29929DB1548155F82FD1840D18C275438F5EC251A6E82670E2FF89477F1334E1CD45422E02E8EEDC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2
Preview:	wOF2..............^............................../......z?HVAR.w.`?STAT..../d......O..6.0..F.6.$..f. ..\|..9[.G....h,j+n..mD.gn.V....<..c1=..2..~.....v.^........%..[3.......f..f..?.aD.......y..T..;O.s~.......r~{.?..t.v. .D.K_...tV...7.J..-2.:F.DDD....;.j.....uRh.e<.(..JD..g.SE..6<...4..{Q....4a!..D...)`..B5..%.9..%a.....ga..2z.l....J......l....y"[.W ..,# .gL.3~..Y.S.sx..7.b....TAT..!..~6<..`....\|E...S.W.\|7..^.a....%2.KJ.Iu;...Z3".\|.!..D..!,.S.."W]z..O.>..`r...PJ,.9)D..k<n.@.%..^N...b...`.E..w.#........SE.'..M.vG.e'.2.._......m....w494.._........~.}N...^h...QmF.;.~U...q.........u.Q....p.5.l.(...U.~.....5c.3q:..[S..s.y..(J...V.....bc.haTY.Qg..W.V\xQi......g.....'\.o.".....=..BI..A.d\|....7'&.!...o..5D;K..W<tJ j..Cs+..%.&.0.........>N.1...).aP..G.co..6...s.c.....?6..&Q...`lx_.)....0u.....}.1...6..&mv...D&....M.. .L..aXDd.D.)Md...I.AL.I....5}.-./n3.tS..5.q..%.~.r^h.e.n./..CJ69... .......T..g.....}.3.z....%.7.":%......'Z4\.....0....M?.NE.8)ZjHVr.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1072
Entropy (8bit):	4.47138018366519
Encrypted:	false
SSDEEP:	24:x9knPl91ba+fH4fzVaesDs0/+tcSqgH9VW6Y1:x9knxb9fH4fMesDN/0YgH66Y1
MD5:	624057D51E1C5083E7159D7D7F0E9B26
SHA1:	E976D18E3EB1BD0875EE85F98CC94081F3455094
SHA-256:	83F5ED17F46CD4448A02C705214A95E869ECB411C8EA95E1256593C75E178E56
SHA-512:	55DBA55EF244ECE090D9CBC6D0AE9057E5D87FB67CA32D76AF6A815A1F30CDBB31A9BFD345569947E0188A1EE0F8379EDC917EC5E87692A2FBAE643EDC0250AA
Malicious:	false
Reputation:	low
Preview:	;(function ( HaloCTimeout, undefined ) {.. var timeoutMs = 600000;. var redirectUrl = '';.. function getTimeoutParams() {. try {. var timeoutMsFromPage = timeoutJspVars.timeoutMs;. if (timeoutMsFromPage) {. timeoutMs = timeoutMsFromPage;. }. } catch (e) {. // Do nothing. }.. try {. var redirectUrlFromPage = timeoutJspVars.redirectUrl;. if (redirectUrlFromPage) {. redirectUrl = redirectUrlFromPage;. }. } catch (e) {. // Do nothing. }. }.. function startTimeoutCounter() {. if (timeoutMs <= 0) {. navigateToTimeoutPage();. } else {. setTimeout(function() {. navigateToTimeoutPage();. }, timeoutMs);. }. }.. function navigateToTimeoutPage() {. window.location.href = redirectUrl;. }.. (function(){. try {. getTimeoutParams();. if (redirectUrl != null && redirectUrl !== '') {. startTimeoutCounter();. }. } catch (e) {. console.error('Timeout Error', e

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65478)
Category:	dropped
Size (bytes):	127493
Entropy (8bit):	5.291967271973065
Encrypted:	false
SSDEEP:	1536:9vRm81iXXxV7eWIHczxswQI4h2KE+ixXwRk2sxHXZFR7ZRtHT7ClVzFht5RHZrHJ:10RRoe2s1sojnznmR
MD5:	E6FC79D1F88F6D0059D51CC425ADBEC9
SHA1:	15965DC63E6AB28BAA4D583571666E75B1B66528
SHA-256:	6DA7F2FFC30130D27CCEFB7A88B7457ECD4483193D367368584F41E4CE838B0C
SHA-512:	0ADCE6A8D38CB2CE3A410C813356C22E2E154BEC6596B296D95BE142C6F855AD064F05501F5926F1568A7870BEF2C1310A3499A4D68F8B570AC089499CDDF712
Malicious:	false
Reputation:	low
Preview:	/** [Universal Client] 03/21/2024 - Version: 1.0.240 */ . !function(e){var t={};function a(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,a),o.l=!0,o.exports}a.m=e,a.c=t,a.d=function(e,t,n){a.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,t){if(1&t&&(e=a(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)a.d(n,o,function(t){return e[t]}.bind(null,o));return n},a.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(t,"a",t),t},a.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},a.p="",a(a.s=32)}([function(e,t,a){"use strict"

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.312814895472355
Encrypted:	false
SSDEEP:	3:qy6sJMIzn:qy6sJME
MD5:	187C5FCDD5C7D82A7C12A869A50FDEB7
SHA1:	932D4842D1D53B22B7E2FD46D6C00B8BE6D774AD
SHA-256:	121D7327471295D2AA1878EF94C8AB756375856D08AE24D3DF11FA549E241633
SHA-512:	175341CB356A4F299D1BBBE524AC8A888AED04CE92EC84A8A767CFDB247E310DD4E25F81205108829B1714CFEA392B862BA9207871D4C54D7D0274425D3FC254
Malicious:	false
Reputation:	low
Preview:	var s_3_Integrate_DFA_get_0={"ec":"nh"};

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	88659
Entropy (8bit):	5.376922064828674
Encrypted:	false
SSDEEP:	1536:/OOLe6LIozqg76MmhSDTHUgO/fNl03RElUWw+/bfKDEMI:06pzZ6MQcilCRElUy/bfKDEr
MD5:	0B40B3E560ACDD82E1FAF314CBCE5299
SHA1:	5415B6A1C90CB28445E1D2F2DE544C6ED34F7C5C
SHA-256:	5655963DC698F96119AF2468D7F8C3B23D2872837D28DC80493BA4E1712707FB
SHA-512:	4D57AA485D423B47A2137CFC6D4A0E917C9EE93D0637941EF741138E95850C129839873DAE322F7246E778A0A766C027D72C69ED34E6DDFA9FD94256C1210121
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/benji/benji-2.1.135.js
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{assertive:{},benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({reason:e,status:"rejected"})))))));const t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),n=["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\."))),i=new RegExp(`^https?://(${t.concat(n).join("\|")})(:\\d+)?$`);const s="initialize",o="initialize_ack",r="initialize_i13n",a="intersect",c="render",d="resize_ad",l="start_ads",h="tab_focus",u="block",g="index",p=!0,f="DOMContentLoaded",m="0",b="testid",y="ncid",_="fr",E="pg_name",v="type",I="benji-premium-ad",S="auto",A="VERSION",C={ATS_DIRECT:"_lr_atsDirect"};var T,w;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct So

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65024)
Category:	downloaded
Size (bytes):	188909
Entropy (8bit):	5.041200648730947
Encrypted:	false
SSDEEP:	3072:TvVWO97/ZoIdrvrgc5/f2XP4mTieamfKqz0/pvlU+571iiNbAylRXrhYNrNu35AJ:08AvMpU
MD5:	F35D83B5554D4B4098D115F8C6FA4190
SHA1:	C3A3718A2BCC97956A6FC19341F5CA45883D9C8F
SHA-256:	0F86EAECBB74174EBB700CC768966211E698A7E6BF6B19227CD0B89DB43E14A0
SHA-512:	24F02BC7CAF38B48D5B1017903DC2BAE866CE738AF4F56D398E4F14A42D4B58364224860A29CB6B16E1C8A709CEF13EFB07F584DA1B2DA75BFBCDDA359EF0DDE
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1720803349&
Preview:	.window._W = window.Weebly = window.Weebly \|\| {};._W.getSiteLanguageURL = function(lang){..return '//assets-staging.weebly.net/js/lang/%lang%/stl.js?buildTime=1234&'.replace('%lang%', lang);.}._W.tli=function(s){return s;}._W.siteLang = 'en';._W.ftl=_W.stl=(function() {..var f = function(s) {...var t = tls[s] \|\| s;...var a = Array.prototype.slice.call(arguments, 1);...for (var i = 0; i < a.length; i++) {....t = t.split('{{'+i+'}}').join(a[i]);...}......return t ? t.replace(/^\\s(.+?)\\s$/, '$1') : s;..},..tls = JSON.parse('{\"authorize_net.errors.E_WC_04\":\"Please provide mandatory field.\",\"authorize_net.errors.E_WC_05\":\"Please provide valid credit card number.\",\"authorize_net.errors.E_WC_06\":\"Please provide valid expiration month.\",\"authorize_net.errors.E_WC_07\":\"Please provide valid expiration year.\",\"authorize_net.errors.E_WC_08\":\"Expiration date must be in the future.\",\"authorize_net.errors.E_WC_15\":\"Please provide valid CVV.\",\"authorize_net.errors.E_WC_16\

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.039148671903071
Encrypted:	false
SSDEEP:	3:CXSz:ESz
MD5:	91925657F43A74207C77ECA288AA8E03
SHA1:	DB35586F9994CA7BA1C2F8CE6AE7A046AB5E2FFF
SHA-256:	415824BC19BB0EC4C6538BEFCA2334CA97AA586341292E6034860E3EE19A2F6B
SHA-512:	37483DA665F7836EA0F3F8974E7E0561E4D31BC869C0213C576CBC73FC17A7EC1A304585E0169E60D6E921269AAAF420D65E3710FA1D54973DFAE79F11A78B28
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwm_cAsQPVnLpxIFDV8p9_4SBQ1vQpiE?alt=proto
Preview:	ChIKBw1fKff+GgAKBw1vQpiEGgA=

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 199 x 97, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9677
Entropy (8bit):	7.970815897911816
Encrypted:	false
SSDEEP:	192:GVd97ZFfQoDBbxIkFUD/QCEVlcTE85PlcBz6nH89KCCotHkXKp67mkz:KH7ZZDBbKYFHQcFca+x7Pz
MD5:	6E0F7AD31BF187E0D88FC5787573BA71
SHA1:	14E8B85CC32A01C8901E4AC0160582D29A45E9E6
SHA-256:	580EF6409E067A4EC4A427400C7D6216184869E2DA53343DF20753CC1F8A46CD
SHA-512:	A7078CAC9A5319904CB47E01A426EAE30A26D4AF5094438F41360396C280473B9C69748B7E7A603232DA9B6D0F7297FEFB04C434EB8098CC6F89F7183C44AB52
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....U.E.....PLTE................................."""..................$$$...&&&.......................................(((.....................................................................999...........}}}......222///......EEE.....Z6)...ooo.................ZZZ..........{.y[**......R<....................................mU3&....................IJIK+............sF3....Q0#............xrqr.o}M8........ttt^;.............tV.jLBBB.Z@,,,.~`OOO==<mB0..........s.}s666e=-B%....mN.fJxJ6..h..d.pd.qUSST..~aA4444......z.gX.VB.............xogffbbdXWWzcV??>............u^^^.......tfs\PrVG.aEkNA&..........U<K5+8..0.............~.k];;;.......lll.mX........{k_.^LS=3HI1!.(..........yxx][:D-$..............miA...xjrcZeI;5:......:( ~vL.......i.sh..].......j.........".IDATx..ml.q..uw......\......N...,-....(..[_0}AR...1..QZ.m:...TB......!C:.)...../....v5.o}.._....?....k'..?....s..e...&'.....(..#.$....(..x.i.X!..g....5<D\.lp..0.a.5...z.....t.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2512)
Category:	dropped
Size (bytes):	75006
Entropy (8bit):	5.625174285042866
Encrypted:	false
SSDEEP:	768:YdDFSZ8JdMS1xGPlopXbk+KQZPKOf/py7pFw7N5o9qmse9fLrJIWzAfap34VEzH0:6FSZYdMS1xGNopX5LP16FuvqT7bmVF
MD5:	99BBE560926E583B8E99036251DEB783
SHA1:	8D81B73AE06F664F9D9E53DD5829A799BF434491
SHA-256:	648E766BF519673F9A90CC336CBECEDE80DCBE3419B43D36ECBB25D88F5584A3
SHA-512:	EE24915AA5C1C7C1DD571C07EFE46DFC173CB69D2DADC4C32891CE320EEF4FE1CFB614D9C212F16BFE2C83B29C6EEAB6C5A43F8E32D475DA8081B1E2D33869B4
Malicious:	false
Reputation:	low
Preview:	(function e(b,g,d){function c(n,j){if(!g[n]){if(!b[n]){var i=typeof require=="function"&&require;if(!j&&i){return i(n,!0)}if(a){return a(n,!0)}var m=new Error("Cannot find module '"+n+"'");throw m.code="MODULE_NOT_FOUND",m}var h=g[n]={exports:{}};b[n][0].call(h.exports,function(l){var o=b[n][1][l];return c(o?o:l)},h,h.exports,e,b,g,d)}return g[n].exports}var a=typeof require=="function"&&require;for(var f=0;f<d.length;f++){c(d[f])}return c})({1:[function(require,module,exports){var JSON;if(!JSON){JSON={}}(function(){var global=Function("return this")(),JSON=global.JSON;if(!JSON){JSON={}}function f(n){return n<10?"0"+n:n}if(typeof Date.prototype.toJSON!=="function"){Date.prototype.toJSON=function(key){return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+f(this.getUTCMonth()+1)+"-"+f(this.getUTCDate())+"T"+f(this.getUTCHours())+":"+f(this.getUTCMinutes())+":"+f(this.getUTCSeconds())+"Z":null.};String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(key){ret

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60378), with no line terminators
Category:	dropped
Size (bytes):	60378
Entropy (8bit):	5.226751934675976
Encrypted:	false
SSDEEP:	1536:DwUHzI01OwxqmIGAKoMuXpTteneKJ4jf0V:DHXm50j
MD5:	C1FBB54C4F22838F40CE99E7418FCD97
SHA1:	62D8945137AE75C185903E0552C920E03E5577E5
SHA-256:	C17C2FCA2732465B44F96FE2E566A4E016E4A56D7C40169E5E84F501BA750E5D
SHA-512:	C5178DF676E1BD912502AC86DE7E270B76FD321B229E320754E455AD6620FCEDCFED5515AA9192ECA09074E892916978E0A3F412C6C8757AEC88900566C56B48
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functi

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (1630)
Category:	dropped
Size (bytes):	7160
Entropy (8bit):	4.819263409497788
Encrypted:	false
SSDEEP:	192:tUpqUXGMhJpJuMEpVyfWsgBm6zCg/8LWLEBOqpJ:tUpqUXGMbpJudWgBrb/8LWIJ
MD5:	AE81AB7069097A055829FB9919258138
SHA1:	7DC529F16FB595BBBFC5937ADFE1D0A5CF563F8A
SHA-256:	5A630B41E7C3D34392BCB150A5731B6261BC6314D71D5DB8407A646AF15BF8AF
SHA-512:	923F0E92ED682F638ECA768065630AD26195F03CFD54BA235531C50D587321E45D0E0000E811F943557BA08D9C8A21A3F4B430433370C28C456ACD6B094C63DE
Malicious:	false
Reputation:	low
Preview:	// Gets converted to _W.Weebly = window.Weebly \|\| {};.Weebly.templates = {...'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul class=\"wsite-search-facet-entries clearfix\">\n\t\t\t{{#facet_entries}}\n\t\t\t\t<li>\n\t\t\t\t\t<label title=\"{{name}}\" style=\"background-color:{{display_value}};\" {{#active}}class=\"active\"{{\/active}}>\n\t\t\t\t\t\t<input type=\"checkbox\" class=\"w-input-offscreen\" name=\"{{filter_text}}\" value=\"1\" tabindex=\"-1\" \/>\n\t\t\t\t\t<\/label>\n\t\t\t\t<\/li>\n\t\t\t{{\/facet_entries}}\n\t\t<\/ul>\n\t<\/form>\n<\/li>\n",...'search/filter/search-facet-checkbox': "<li class=\"wsite-search-facet wsite-search-facet-checkbox\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t{{#facet_entries}}\n\t\t\t\t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{f

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13080)
Category:	downloaded
Size (bytes):	13081
Entropy (8bit):	4.75107830047369
Encrypted:	false
SSDEEP:	192:vo5q1fSRWcfub2DJmUDmDrW4xH3gSJJbfebOQzamKy:p3gSJJbfebOQzamKy
MD5:	C75C4EDE9C34B4F952A5ECFF05021911
SHA1:	7CBD6F1CB2DB107659E957491242F36BA40D7773
SHA-256:	6967E2030101EA9773BF196EB65F8D7661B49BC62EC884C9A7F010289ACA596A
SHA-512:	F2F7D634B7C1DD45B635F7DF2B9A51691B7EAD3F4432285933FF9B8E19F110E21A177D85935F36EFA395E9A76D38C08B336CF41BA87ECFDF6A79C42410D868D8
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/css/social-icons.css?buildtime=1720803349
Preview:	@font-face{font-family:"wsocial";src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1727728713963);src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1727728713963#iefix) format("embedded-opentype"),url(//cdn2.editmysite.com/fonts/wSocial/wsocial.woff?ts=1727728713963) format("woff"),url(//cdn2.editmysite.com/fonts/wSocial/wsocial.ttf?ts=1727728713963) format("truetype"),url(//cdn2.editmysite.com/fonts/wSocial/wsocial.svg?ts=1727728713963#wsocial) format("svg");font-weight:normal;font-style:normal}.wsite-social-dribbble:before{content:"\e60c"}.wsite-com-product-social-dribbble:before{content:"\e60c"}.wsite-social-color .wsite-social-dribbble:before{content:"\e60c";color:#f077a0}.wsite-social-square .wsite-social-dribbble,.wsite-social-square.wsite-social-dribbble{background-color:#f077a0}.wsite-social-square .wsite-social-dribbble:after,.wsite-social-square.wsite-social-dribbble:after{content:"\e60c";color:#ffffff}.wsite-social-mail:before{content:"\e603"}.wsite-com-pro

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	51791
Entropy (8bit):	7.961598928710551
Encrypted:	false
SSDEEP:	768:P3bjvF8xacNnCnqlvYUDQUg2RLF82E0ih7RX5Cf8uP85MUoYn2M8/kbQn01Zwb:P3XCaGgqVzQQLjE37CUuP85fVn29b01K
MD5:	A1DAFC83EA03DEBDDEA711EA0E1630E2
SHA1:	058A62DF64195835EA3EE9EC969ADE2F69DBA2A5
SHA-256:	A7E51D77633E59A4AE0AF437AAD00EC97A594E607B95996CEACF62A7720291F7
SHA-512:	2D626834F08A1C6482FCB2A8FDF67C94D9789FDE55008461D2E691527141B6BFF299F79D719F6DC95D28EE312810361E98C743AFB62C5148BF0275CF29FDF05B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................................................................W...........................!1.."AQa.2q....#B..R.$3br....CS.......%c..s....&5EGTVt.....................................8.......................!..1..A"#2.Q.3Ba.$R..bq.4Cr................?..9.....+H"....D....

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	4.191445610755576
Encrypted:	false
SSDEEP:	48:9DoH8yAXQ8K5UvCUbpXtlhMVDBilhB7IODnNcynEJPMHErU8ACbtRKO7nhe+:9DlyAXQ8yUdduBiloycKeRg8xbtsO7
MD5:	4D27526198AC873CCEC96935198E0FB9
SHA1:	B98D8B73AD6A0F7477C3397561B4AAB37BF262AA
SHA-256:	40A2146151863BCF46C786D596E81A308D1B0D26D74635BE441E92656F29B1B4
SHA-512:	1EE4B73F4DA9C2B237CD0B820FFAD8E192D9125CE7D75D8A45A8B9642CE5FE85736646CAF12D246A77364C576751C47919997D066587F17575442A9B9F7CC97F
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................................................................................................................................D;3.C;4.D;3.D<3.D<3.D<6.A2".Pc..........M>5.....E;4.D;3.D;3.D<3.F<5.E<4.................................................F?4.ID5.D<37C;3.C;2.C;2.C;2.C;3.D<3LE=3.E=2.D<3.D=3.C<2QC;2.C;2.C;2.C;2.D;3.D;46JB;.G>6.....................................E;4.H<5.D;3]C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2.G<3.G<4.D<3.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3[C=7.C<4.............................H<7.B;1.D<3CC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2nD<3sC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3@B:3.HA2.........................D<3.E<4.C;2.C;2.C;2.C;2.D<2.C;2bD<3pC<2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3lD<3^D;2.C;2.C;2.C;2.C;2.E<3.D<3.........................C;2.D<3FC;2.C;2.C;2.D;2.F=3.E=

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33733), with no line terminators
Category:	downloaded
Size (bytes):	33733
Entropy (8bit):	5.275101985335948
Encrypted:	false
SSDEEP:	768:gnZu4DGq9yo7AdwidY5WQHqq2jffKCgQNOe1NLq0GtcKT0+ONxvJgTXxEdMrJi2T:ayo7Khn3SIfitOTv4
MD5:	F30390EE48474434549E8D2D619BE9A5
SHA1:	37C159D152B6C445F530CBD30234D87DB0C3705A
SHA-256:	E39A418B3EABF74ABADFB9C7DA227A9A465386494CEB9BF7A81AA1C29CC1B09D
SHA-512:	E6B0A3D1E7E3A6288BDCA915AB15471868D7A6662C2BDE6CDE9A46AA8B751243448E1BDAAE7C516BB6DD59EC0DF64CA0D1ABC14B56CF1ECEC0E8653A94B5DA2C
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/halo-c-login/polyfills-es2015.js?v=23.2.1
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{2:function(e,t,n){e.exports=n("hN/g")},"hN/g":function(e,t,n){"use strict";n.r(t),n("pDpN")},pDpN:function(e,t,n){"use strict";!function(e){const t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function o(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");const r=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function s(e){return r+e}const i=!0===e[s("forceDuplicateZoneCheck")];if(e.Zone){if(i\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}class a{constructor(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}static assertZonePatched(){if(e.Promise!==C.ZoneAwarePromise)throw new Error("Zone.js has detected that ZoneAwarePromise `(window\|global).Promise` has been overwritten.\nMost likely cause is that a Promise polyfill has been loaded after Zone.js (Polyfilling Promise api i

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10980
Entropy (8bit):	7.983944130115184
Encrypted:	false
SSDEEP:	192:spBJ0A/zoC209eOgpd5F8yfMBQNOP9EIx4Sb8q5h7midmCblMq:ifzcagpd5FBMBQNOVEA35h7m5CGq
MD5:	62D65B9223A65FC493A3025D154C391D
SHA1:	9E34D3E5A4FDA4F73A57731003AC83E342A28560
SHA-256:	49E3259CBD5EFCB36BB514EB32763B6455757D841B116F13E2214E84B620C1B1
SHA-512:	BBB06F263F315B7123AEAF7DED061AB63A7DAD51A01CDC243E2ED92D2B9AB6866EA23CFB9C3EE4667F955B20E3D14B21B3C63C0348B30C78B4DFC7B3EC4DED35
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/q6GKlQrNWZL2GH0uS9WZAg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_huffington_post_584/22aad6ac37ba7c2ebd256c0508355ff0.cf.webp
Preview:	RIFF...WEBPVP8 ........*d...>y4.H$..+..ip..@'yS<dp-.N....\|..}...\|.Q..<....y..............o....Q./..ib...,.........&...<..i.'....T.....3.O..J..e.....vF.a..."...~.11d.<,.. ..+.N.......9!b.g..LM............X'8. ..J<.....c#...R[..4...D.X...+.z'..o.l....1.=.....\.}b +....7..<....<}........SOwhY......wjc.1.!........P...H.L!T.3.-....yWE.b....`..@J....T......;8z...QI.\........gD.s..x....`.....................+......#..K...c...u4.....6...E..jmi.Q...q.<....s.......6......(o.OQ...F...............1......c..>.!.. l).V...6...v..F..f....Q..#F.X.W...t...<...T.....Dl..Q4G...1.....OxXY...x....g..n.Byzo#....-.h...$..L..< ..S..GJs..:\|.....a`{.G.C..2..B$)..k.....m.c..IU........q.~.......x.G.,.f....T..'.L.m;....H./....{.)J...sE.,...;....V.Q3Z.H.....U..;/.....3.E.K.f....rB9[t.Q....e[...d~.Y..1.M..j.@o-...%4.Tr...p..s.....&.........d.u.p1.B.O..j..... .f....u..1h.lV.@Zu..(.S\|{....}..{... .P.Z.Xd..2..r9.#B.i{....../ #,....f.g.r..M(.?..8%..i..p...g....Z....

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	20728
Entropy (8bit):	7.968642420712165
Encrypted:	false
SSDEEP:	384:E6t6h2VS9LtkW7cewg4CjxZDgsNf2Gor24QK+f0n1CNR00XonIoHRdKssxftqBzr:EM6A4mgcelZDZNf2HC4QK+f0400Xq3NH
MD5:	FFD20BA807556587D642D14F5F18E8B6
SHA1:	57F4D20B719681A4C17E3C9CE0C9AC0CDB782EF8
SHA-256:	5648CA7C797685EF7594C89905B15F32D6909D655ED98F1C90B64CA02E1F39FF
SHA-512:	9383B103D9E9B0694493B1C58D6717D5EAEF8FB1998D546CD68FA3DABB647E291CBB4831121C1A23CBD46FF53696FAC1D96153AFB5B10995F7F5F5E9E10734C2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/IKm1uI6ofoB8D8CcUqetHw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/71168fc52590d31ed26a2a8e925c20f6.cf.webp
Preview:	RIFF.P..WEBPVP8X.... .........ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .N..p_.......>y4.H....&2}j0..em......h$;m.k.~.....z.S....}.P?.7....^...U......S...................n.....O.........mD}.....3........~_..j.......}.[.O....n.........G...P.`{.t..z7.5.5..R...C3.~..>.YH...'.-}..........3.....d..*.. .h..c.....#.,\.t..../..T....6b......S.Q..Y...%Zx..}\|....Y.2I...zU....Jk...\C;/.,..].)?.....{.w......c>..w.B.xMr..\..Rf.....G.\F.........%..=3-..:%..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65483)
Category:	downloaded
Size (bytes):	93636
Entropy (8bit):	5.292860855150671
Encrypted:	false
SSDEEP:	1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ
MD5:	3576A6E73C9DCCDBBC4A2CF8FF544AD7
SHA1:	06E872300088B9BA8A08427D28ED0EFCDF9C6FF5
SHA-256:	61C6CAEBD23921741FB5FFE6603F16634FCA9840C2BF56AC8201E9264D6DACCF
SHA-512:	27D41F6CFB8596A183D8261509AEB39FCFFB3C48199C6A4CE6AB45381660C2E8E30E71B9C39163C78E98CEABC887F391B2D723EE5B92B6FBC81E48AC422E522B
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/jquery-1.8.3.min.js
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /.(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t,

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33733), with no line terminators
Category:	dropped
Size (bytes):	33733
Entropy (8bit):	5.275101985335948
Encrypted:	false
SSDEEP:	768:gnZu4DGq9yo7AdwidY5WQHqq2jffKCgQNOe1NLq0GtcKT0+ONxvJgTXxEdMrJi2T:ayo7Khn3SIfitOTv4
MD5:	F30390EE48474434549E8D2D619BE9A5
SHA1:	37C159D152B6C445F530CBD30234D87DB0C3705A
SHA-256:	E39A418B3EABF74ABADFB9C7DA227A9A465386494CEB9BF7A81AA1C29CC1B09D
SHA-512:	E6B0A3D1E7E3A6288BDCA915AB15471868D7A6662C2BDE6CDE9A46AA8B751243448E1BDAAE7C516BB6DD59EC0DF64CA0D1ABC14B56CF1ECEC0E8653A94B5DA2C
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{2:function(e,t,n){e.exports=n("hN/g")},"hN/g":function(e,t,n){"use strict";n.r(t),n("pDpN")},pDpN:function(e,t,n){"use strict";!function(e){const t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function o(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");const r=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function s(e){return r+e}const i=!0===e[s("forceDuplicateZoneCheck")];if(e.Zone){if(i\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}class a{constructor(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}static assertZonePatched(){if(e.Promise!==C.ZoneAwarePromise)throw new Error("Zone.js has detected that ZoneAwarePromise `(window\|global).Promise` has been overwritten.\nMost likely cause is that a Promise polyfill has been loaded after Zone.js (Polyfilling Promise api i

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (444)
Category:	dropped
Size (bytes):	477
Entropy (8bit):	4.8870748750488024
Encrypted:	false
SSDEEP:	12:j5IxOpl57q3cm+gVXAZCuBXbPSfxx7oxJBVxG:Tpl57q3ItZCKWP4Y
MD5:	910BFBF47BD8C01C23E38569D2240B0B
SHA1:	AE3B7A5A1DE338742DD5F69621C70250B19D701C
SHA-256:	E51C2C4C727A0BD32285E9037271671ED5F033C03FFD5E5063FA1AB8D7540E11
SHA-512:	32569FE3D09AF276D6E0058339ABECF4CCDE0FBF1A028C86A25AE458BB5A4A177E315A9F910A4AA541F67556F189678EF1038ACB2BF006A2B141265F9FD6C9FD
Malicious:	false
Reputation:	low
Preview:	// detm-container-ftr.js 32 prod.var detmExecuteFooter=function(instance){("undefined"!=typeof ddo\|\|"undefined"!=typeof jQuery&&!jQuery.isEmptyObject(ddo))&&ddo.pageLastLine(),void 0!==document.dispatchEvent&&document.dispatchEvent(new CustomEvent("detmScriptsReady",{detail:{loader:instance}}))};"undefined"==typeof detmLoader\|\|0==detmLoader.finished?document.addEventListener("detmExecuteFooter",function(e){detmExecuteFooter(e.detail.loader)}):detmExecuteFooter(detmLoader);

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13915
Entropy (8bit):	4.98821873269165
Encrypted:	false
SSDEEP:	192:q15xu+ZpvFjTEopZr76iB6ONjMHwcW5NsgEldpA1YAqNyMPcDxza2wHhPxbtR:q15xuOp9jjB76yvlMXA2xA3+yMP4azX
MD5:	61D02606CA446279B7144C73B31440FF
SHA1:	E228B1182232CEBBC89B132029586463D7F5F4C2
SHA-256:	1AA5AF21F967D4390F8473EEAA87654726EC48F77D9D610271EE3E7A74D035C6
SHA-512:	83BF39266B7A550A7354D68F10F94A8E9ABF905F6E1D7CE90599F1322C5A84E9B5BC1DA95AACF288D0A954F2AB99B6B9C7CDFE845646BE501547E8350266971F
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/cms/login/default/i18n/en.json?v=22.2.1
Preview:	{"common":{"opensInNewWindow":" (Opens in new window)","fullPageLoading":"Just a moment.<br>We're almost there..."},"header":{"signIn":"Sign in","to":"to {{HEADER_VALUE}}","splitPwHeader":"Welcome","multiSaveHeader":"Select user ID","signInWithMyAttHeader":"Sign in with myAT&T app"},"error":{"careCode":"Care code: "},"genericError":{"header":"We want to keep your info safe","button":"OK"},"fastpayButton":{"orSeparator":"OR"},"inputs":{"showPassword":"Show","hidePassword":"Hide"},"manualLogin":{"userLabel":"User ID","passwordLabel":"Password","forgotUserId":"Forgot user ID?","forgotPassword":"Forgot password?","keepMeIn":"Keep me signed in","saveUserId":"Save user ID","continueButton":"Continue","signInButton":"Sign in","cancelSignInBtn":"Cancel","dontHaveId":"Don't have a user ID?","createUserNow":"Create one now","eRepairSignInWithPhoneNumber":"Sign in with phone number"},"multiSavedLogin":{"doneEditingUsers":"Done","kmsiUserLabel":"Signed in","addUserId":"Add user ID","removeUserId":

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3066)
Category:	dropped
Size (bytes):	798979
Entropy (8bit):	5.51070155275105
Encrypted:	false
SSDEEP:	24576:HuzXG+H3d207kLQ1KkafvYVQKKh3GN5RVBo6:HqXG+H3d207kLQ1KkaHYVQKKhS
MD5:	2C86E85F3491192DF25DBB91DABCAD36
SHA1:	48C826E36FFA69AC3456AAB7F16AB33D08078706
SHA-256:	CC642C1CA589546ED1A296EFDE2C0E4DD0440540A80A04246D35E4F58D7A8EFB
SHA-512:	456AE741DE27883579D2A6CCA98CFEBCE922FD3A28EF4D9885133C926CFF4575284E3F8E5CEC7D9F71A8C1960B05B445721262C8B364E91327A34B813539405F
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula att df85e50d5ce082da388f295c6c221844566fe002 /./ Copyright Pako by Vitaly Puzrin and Andrei Tuputcyn https://github.com/nodeca/pako/blob/master/LICENSE */.(function() {.var setInterval = window['__zone_symbol__setInterval'] \|\| window.setInterval;.var clearInterval = window['__zone_symbol__clearInterval'] \|\| window.clearInterval;.var setTimeout = window['__zone_symbol__setTimeout'] \|\| window.setTimeout;.var console = window['console'];.var clearTimeout = window['__zone_symbol__clearTimeout'] \|\| window.clearTimeout;.var MutationObserver = window['__zone_symbol__MutationObserver'] \|\| window.MutationObserver;.var queueMicrotask = window['__zone_symbol__queueMicrotask'] \|\| window.queueMicrotask;.var Promise = window['__zone_symbol__Promise'] \|\| window.Promise; 'use strict';function aa(a){var b=0;return funct

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	175752
Entropy (8bit):	5.785358029888559
Encrypted:	false
SSDEEP:	3072:T2HdALSWdG78KI4NBT0pfXle5jWlYoRl96678fGr0fqK+hZ:qHdALSAG78KI4NBT0L4jWlYoL9N78fGX
MD5:	E14CEF4ADB91468980F0D54F569117F9
SHA1:	5F858ED434BD69F23EE892980E6FD297B12AA07D
SHA-256:	4E3F6E8C2DCF3D7A2489B6304351291EE831249E1E65C082AE8EEE6BAB6B3856
SHA-512:	1F2EF64D95312064888B166D86DE7D5514B0C675EC4A68E1AAE9BDD446D342A1AFF5E16EB68600F7CEC0F03A075904517633DC39E44FF421ECD36A99DD8633F7
Malicious:	false
Reputation:	low
Preview:	(new function(){var c=['vvDq','AgfZqMvLBKfJDgL2zq==','Ahr0Cc1LCxvPDG==','DMfSDwu=','CMjVEa==','CgjQCW==','rNvUy3rPB24=','C2HPzNq=','yxeTEwHI','CMvWBgfJzunOAwXKCMvU','C2fMzuzYyw1L','zgLZCgXHEq==','qvvesu8=','y29Uy2f0','vezg','w0vsuL9nx0Lewf0=','qurg','v0felq==','q1jjtG==','B25fDMvUDa==','D2LUzg93lNbHCMvUDfSI','Bg9JywXtDg9YywDL','DhLWzq==','cIaGicbHDcbHyM91DdPZCMnKB2m6','ANn0EM9MzNnLDa==','qMXVy2TLza==','x2uSigv2ywWO','zg9JDw1LBNrfBgvTzw50','Aw1Nw2fSDf0=','y2LVx2jKmG==','q09j','r0fe','CgXHEq==','tKfm','lMrVy3vTzw50la==','sfrntfnJCMLWDevSzw1LBNq=','DgLTzxvWzgf0zq==','C3rHy2S6ia==','BgfUz3vHz2vZ','zMXVB3i=','Dg9Wtg9JyxrPB24=','yxvJDgLVBKvUza==','y29SlxbIyNm=','ywr1CMW9','zxH0lxDHza==','Aw1W','x19JB25ZB2XLlMeK','CMvSB2fK','C3rVCeLTBwvKAwf0zvbYB3bHz2f0Aw9U','qveTwuG=','zNjHBwvZ','Dw5ZAgLMDa==','w0vsuL9exq==','yMvMB3jLqMLKzgvYshr0Ca==','sw50zxjUywXfCNjVCG==','su5qvvq=','zgf0ys1LBMmTC2nYAxb0','Aw1WBgvTzw50yxrPB24=','yxbPu3PTrNjvBNDYCa==','C3jJlMnVBNrLBNq=','zgvZDgLUyxrPB24=','yMLKv29U','ywrT',

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1097
Entropy (8bit):	5.129381940693449
Encrypted:	false
SSDEEP:	24:YDIH1RhNCqVVrd0G92FIy1HGsYHbQNIzImbIk:YD2Vpp9vbsgv
MD5:	FA46F5F895FFC878F76C96AD4A51230A
SHA1:	728388AE9BCD0B4DB65C3B83D1C6CF72CFB16BE5
SHA-256:	887EAD626583EAB20E1A3FE76D37C5E07356ADAFA5722FB5236FE3D33C36F164
SHA-512:	571D9E76D47A21E0325294FCE67E6E0FFC193C7BF90692B9F753264B4E1CC951307B208897483FD0CF8BF4BE662F5693FC82C395AB01503C02E5008AD64D7470
Malicious:	false
Reputation:	low
URL:	https://currently.att.yahoo.com/tdv2_fp/api/resource/NotificationHistory.getHistory;count=5;imageTag=img%3A40x40%7C2%7C80;theme=default;notificationTypes=breakingNews;lastUpdate=1728908413;loadInHpViewer=true;includePersonalized=;partner=att
Preview:	{"html":"","css":".yns-notifications{list-style-type:none;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif}.yns-container{word-wrap:break-word}.yns-container:hover{background-color:var(--peeps,#7dcbff)}.yns-img{border-radius:45%;float:left;width:40px;height:40px}.yns-dot{color:var(--dory,#0f69ff);padding-left:6px;position:absolute;top:0;left:0;font-size:30px;line-height:20px}.yns-title{line-height:1.5}.yns-content{font-size:14px;height:42px;overflow:hidden;color:var(--batcave,#232a31);padding-left:24px;padding-right:44px;position:relative}.yns-ell{position:absolute;bottom:0;right:42px;background:linear-gradient(to right,rgba(var(--rgb-white),.1),rgb(var(--rgb-white)));width:90px;height:1.4em}.yns-container:hover .yns-ell{background:linear-gradient(to right,rgba(125,203,255,.1),#7dcbff)}.yns-link,.yns-link:hover{padding:15px 16px;display:block;text-decoration:none}.yns-breaking{color:var(--solo-cup,#eb0f29)}.yns-time{position:absolute;right:0;top:0;font-size:12px;line-height:1.67

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (609)
Category:	downloaded
Size (bytes):	2075
Entropy (8bit):	5.022571620741154
Encrypted:	false
SSDEEP:	24:QNu0eg5cFTVGzYO7AvkA3RGfN2L7JuQ8mmSSfQQJyaKqAuKyGgQKDunoKUNd4g6v:QA0KTVvO7AvkA3RbVknryFAwE4dv
MD5:	8084DA3C9E7258595971AEFA1864CEE1
SHA1:	02F1E2F249863AE2F0F6296AED46DC96FA42EC16
SHA-256:	B3F0A51197E77B186F31DE4B16A5281246CC58F540F510B3329BC236508A531E
SHA-512:	22A34E410FB834A01D58809AFB43A00C563DB961DA8A8E0BF8799DDF0D6490F337FC118E9B0C00870B0E78A9096034ED49969739BA07105592A24C3123C7DA6F
Malicious:	false
Reputation:	low
URL:	https://att-yahoo.att.net/iD67NgWFgJ64/gC/ZUPQz84MX9/S83zYc/dlJyBQEB/PG85b10/UQBxY
Preview:	.sec-container{padding-top:30px;margin:0 auto;width:1140px}#sec-overlay{display:none;position:fixed;top:0;left:0;right:0;bottom:0;z-index:2147483647;background-color:rgba(0,0,0,0.5)}#sec-container{position:absolute;top:50%;left:50%;transform:translate(-50%,-50%);-ms-transform:translate(-50%,-50%);background-color:#fff;border-radius:5px;box-shadow:0 0 10px gray;min-width:500px;z-index:2147483647}#sec-container .closebtn{position:absolute;top:10px;right:25px;font-size:20px}#sec-if-container{font-family:arial;color:#515151;text-align:center;width:-webkit-fill-available;padding-bottom:20px;overflow:hidden}.#sec-if-container .behavioral{height:148px;width:655px}#sec-if-container .adaptive{height:154px;width:655px}#sec-if-container iframe{border:0;border-style:none}#sec-if-container iframe.funcaptcha{width:308px;height:300px}#sec-if-container iframe.whiteshadow{width:250px;height:75px}#sec-text-if{display:block;margin:0 auto;width:700px;border:0}#sec-text-container{overflow:auto;-webkit-over

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4249), with no line terminators
Category:	downloaded
Size (bytes):	4249
Entropy (8bit):	5.242820679038457
Encrypted:	false
SSDEEP:	96:a6z95q7wimgV1H1BSaQg77uSy7hG1UrpsUtKkmxMtP7iCs5wqrtgfP7cujy/L4:a6x5Tg/C1cuS3W6kKpMtPeCPqrSfnjyk
MD5:	BCDA778B736C3A054AF62F437B536E78
SHA1:	08E2CDBD2D1CA160834B205D6748DC2CAB5FDD99
SHA-256:	892E2F5E07FEF6DE0428E4DCB284201B3D110C0A6F2D8EF899CD2CD2C61EB546
SHA-512:	A0D6449A03045E723D2F668898541625E36D7394E30327F5E89E1F0640F97A1A0268F500D89E804CD8DC8FBF395DBDFA71B429E89E737E3C2DAC7A2C196EA3A7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js
Preview:	"use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_typeof(e)}!function(){var e,n,t,o,r=window,a=r.onerror,i=["apptype","rid","bucketId","bucket","device","osName","browserName","browserVersion"],c=/^resource:\/\//,s=/ActionScript\|Decompress\sfail/,f={beaconPath:"p.gif",site:"fp"},d=0,w=function(){var e=r.navigator&&(navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection)\|\|{};return{downlink:e.downlink\|\|"",downlinkMax:e.downlinkMax\|\|"",effectiveType:e.effectiveType\|\|"",rtt:e.rtt\|\|"",saveData:e.saveData\|\|"",type:e.type\|\|""}},u=function(){var e=r.YAHOO&&r.YAHOO.context\|\|r.Af&&r.Af.context\|\|{},n="";return i.forEach((function(t){"undefined"!==_typeof(e[t])&&(n+="&".concat(encodeURIComponent(t),"=").concat(encodeURIComponent(e[t])))})),n},g=function(e,n,t,o){if(!(d>3\|\|r.naviga

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	886
Entropy (8bit):	5.035010292982074
Encrypted:	false
SSDEEP:	12:TMHdt0ubqt7/KYslXXHlPeaxMwm5EIDXqBJVJ/hlIJi2y1dQ9/01klp0u:2dtjbqt7L8FPeaxMwm+ID63zbF+MOf0u
MD5:	552EB2E04260FC0733E5633D15C6AEAA
SHA1:	0A9EFCC3B0EBABB23A49A00061FD8200EDED1613
SHA-256:	705FF3240DE004523FF9D628B28AAD705AD3F0CEB046312495265A4042C67570
SHA-512:	16CD125A26B1604144D6A64F45D1064FF2A71DA412CF61C829914E00C2E4AA275A172D0872A9533F79D5FC2D2BE82A7DFE3FE5F12048C23AF927A7CB35D571CF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="22px" height="11px" viewBox="0 0 22 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 39.1 (31720) - http://www.bohemiancoding.com/sketch -->. <title>Group</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="UI-Kit" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="square">. <g id="Ui-Kit" transform="translate(-61.000000, -697.000000)" stroke="#FFFFFF" stroke-width="1.5">. <g id="Group" transform="translate(62.000000, 698.000000)">. <path d="M0,5 L19,5" id="Line"></path>. <path d="M16,0.5 L20,5.02" id="Line"></path>. <path d="M16,9.02493763 L20,5.02493763" id="Line"></path>. </g>. </g>. </g>.</svg>.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (617)
Category:	downloaded
Size (bytes):	559447
Entropy (8bit):	5.6838609237395215
Encrypted:	false
SSDEEP:	6144:APPp3i5djotqHRUANEU0p6VfJyrmaU2xUEV/ZQbZFPyIbAnPT0J7106znOyGVnTL:A5y5djoWNYYdJsgFPyIbCTI0y7ACVLC
MD5:	99210E7C2195DE81C0EEDF98787A69B3
SHA1:	7B26C66058385B60109AA6129C2161A399A6034D
SHA-256:	5F75BFBFBF0C7CAC2C87D6CA5DE0661AEDC188B0900B6CEF5EFBAEA134B53302
SHA-512:	C3198D7943B3311679D77BCFFEA75D7043801277BF03AC10CA20BBE424E9AE896C060C7E0EF4143E23C2A41E367917A258404FBA428099316705B7252AEA8A6B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/aR-zv8WjtWx4lAw-tRCA-zca/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var E=function(){return[function(K,v,L,Q,d,x,r,w,f){return(K-(((K&55)==((w=[2,6,"P"],(K&60)==K)&&(L=LO.get(),f=a[27](33,v,L)),K)&&c.call(this,v),(K\|w[0])>=29)&&(K<<1&8)<w[1]&&(r=a[0](72,v,L),Q.I=d\|\|0,Q.u=Q.I,Q[w[2]]=r.UA,Q.Z=r.buffer,Q.H=x!==void 0?Q.I+x:Q.Z.length),w[0])&16)<8&&(K-3&15)>=10&&(N[w[1]](63,"INPUT")\|\|(C[w[0]](w[0],this.u,this.V(),"click",this.N),this.vL=null),this.xV=!1,V[20](12,"INPUT",this)),f},function(K,v,L,Q,d){return(K\|((Q=[9,895,11],(K-6&7)>=3)&&K>>2<Q[2]&&CO.call(this,Q[1],14),.Q[0]))&2\|\|(L="",L=h[5](37,v.Cr,"imageselect")?L+'Select each image that contains the object described in the text or

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	26824
Entropy (8bit):	7.973085179888392
Encrypted:	false
SSDEEP:	384:T51GKtyJ8yvfmPAOa65TxFqCKduGWFIe7R6tGfVVMev1jkLzLs0xx5B694tjqjLe:TyKta8yvOVVh2buIBtqjkLXfxxi2OPhQ
MD5:	661CA356CAB2E4D475CB1136414ADDE9
SHA1:	C09E4F9560493728B6BE80D696D502058855B12F
SHA-256:	7D53994D25637113501DBBAF9BD19C4C0CCE908576894BE708EB92D2FA5D2C54
SHA-512:	EF8E5C333B1518E36F99CCCF26A4197EADD492E5B6DD1F9B9D682AFDFB45AAE1FB5D2B05D72C15EC12C5AE0B6E4E589D0C03D07FF1EBD6F9F5AFA3D1B82B8213
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d.............................................M...........................!1.AQ.."aq.2...#BR......$3Cbr..c...%4S....Vde....................................4.......................!..1..A."Q#23.Ba...CRq...$.............?...9btl...............:.E.`L.cV.y>Z.X:..O..]..L!\|.8........].q.(.=W....#..u...>.r.M/<.1._..AK..,....c_%.$...t..p.io...<Q...$fc......yl,qv.v.\|u...L.c../MQ.2..........`..0;../"=...:....H.....\|..9..tU....^._..>....8.....w....-..+.....W2.z!..P..,}1..\|.z.r1.^#........../.....\|./..=.Z..f.G...E....a.H.M.J.v..7..Tx..a.>d........lm.[.6F.X.F.:...J.#.D....c[........[..GO...jx.....eN...d.W.WD#....V.hj..r..:...d..+."(.8..T.......3....X..k..?s.....K{.Rl+}..E<.M.M....X...'.y....m.E?.}.CM.Y...W...W.>..G..WR.k}.&5..O.OK..3..I...9.Mai.lm.g.a....q._._....m...kv.W:k...i....S,.G*.g.\I.O

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32089)
Category:	downloaded
Size (bytes):	119177
Entropy (8bit):	5.496245206592672
Encrypted:	false
SSDEEP:	1536:W9A5zCrOgD8VVw2QZ9LoJjFiCzNB8/W/6GGb7/uoIMDx0uBtd8PdiMi5:pzCrOgD8kdvoRlWbFIM3td8PC
MD5:	76E810DD9DCFAC158AF86FC92F9F05D2
SHA1:	97FAEEE079829F5C4BCAFD89BC4DE1677993FAA4
SHA-256:	0953A763A283CBF0E8758DBC9804C674B53E1CC2CCFD72928BBEF6FA3311CE5A
SHA-512:	54AC6A6A744BCCD88785B20ACCE65AE1FBC7038E2CB4D4558ACBF08E912B8C366A40DE47BCD26B2D0C69C72FB7ED3FC41868206D4013BA49CD248BF8805AAD70
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/partner-portals/att/adobe_analytics/1.1.20/s_code_yahoo.js
Preview:	./. ============== DO NOT ALTER ANYTHING BELOW THIS LINE ! ============.. Adobe Visitor API for JavaScript version: 1.1. Copyright 1996-2014 Adobe, Inc. All Rights Reserved. More info available at http://www.omniture.com. Last Updated: 02-01-2016././*. @license. * Adobe Visitor API for JavaScript version: 5.2.0. * Copyright 2021 Adobe, Inc. All Rights Reserved. * More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/. */. var e=function(){"use strict";function e(t){"@babel/helpers - typeof";return(e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(t)}function t(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function n(){return{callbacks:{},add:function(e,t){this.callbacks[e]=this.callbacks[e]\|\|[];var n=this.callbacks[e].push(t)-1,i=this;return f

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5636), with no line terminators
Category:	dropped
Size (bytes):	5636
Entropy (8bit):	5.265735267819504
Encrypted:	false
SSDEEP:	96:RAnbGg2U2OUK1yZ4YHPEppcIzvxpJ3xIzpNxv+S6hmAPm6UO5OUK3YvE0m6i5xDc:eCgl104YHPEppc+vxpJ3xMpNZgdWGEiv
MD5:	0CCB51BC1DD6980920DA39E008A599E0
SHA1:	929B21AC5A628A05E9F87A8E734954D90F1EE093
SHA-256:	B168BE397AC36DBCA02B07547DAD2A928427E765DF9B49A931F05DB057F3A83C
SHA-512:	665527069009017AB5B2ACAB0EE764052C84672451CCE9189961420E38239C3C63852D60366952BDFF92DECB3610BD8ABE6BDD44A5B8F89CF51CEF04445F2267
Malicious:	false
Reputation:	low
Preview:	var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeacon=function(){this.runExperiment()},e.prototype._extractResourceTiming=function(n){var t="",t="[";return["startTime","redirectStart","redirectEnd","fetchStart","domainLookupStart","domainLookupEnd","connectStart","secureConnectionStart","connectEnd","requestStart","responseStart","responseEnd"].forEach(function(e){t+=n[e]+","}),t=t.slice(0,-1)+"]"},e.prototype._extractHeader=function(n,e){if(0==e.length)return"{}";var t="{";return e.forEach(function(e){t+='"'+e+'":"'+n.getResponseHeader(e)+'",'}),t=t.slice(0,-1)+"}"},e.prototype._fetchWork=function(){var n=this,r=!1;new Promise(function(n,t){var o=setTimeout(function(){r=!0,t(new Error("Work Order Request Timed Out"))},TIMEOUT);fetch(WORK_SERVER).then(function(e){clearTimeout(o),r\|\|n(e)

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 199 x 97, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9677
Entropy (8bit):	7.970815897911816
Encrypted:	false
SSDEEP:	192:GVd97ZFfQoDBbxIkFUD/QCEVlcTE85PlcBz6nH89KCCotHkXKp67mkz:KH7ZZDBbKYFHQcFca+x7Pz
MD5:	6E0F7AD31BF187E0D88FC5787573BA71
SHA1:	14E8B85CC32A01C8901E4AC0160582D29A45E9E6
SHA-256:	580EF6409E067A4EC4A427400C7D6216184869E2DA53343DF20753CC1F8A46CD
SHA-512:	A7078CAC9A5319904CB47E01A426EAE30A26D4AF5094438F41360396C280473B9C69748B7E7A603232DA9B6D0F7297FEFB04C434EB8098CC6F89F7183C44AB52
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
Preview:	.PNG........IHDR.......a.....U.E.....PLTE................................."""..................$$$...&&&.......................................(((.....................................................................999...........}}}......222///......EEE.....Z6)...ooo.................ZZZ..........{.y[**......R<....................................mU3&....................IJIK+............sF3....Q0#............xrqr.o}M8........ttt^;.............tV.jLBBB.Z@,,,.~`OOO==<mB0..........s.}s666e=-B%....mN.fJxJ6..h..d.pd.qUSST..~aA4444......z.gX.VB.............xogffbbdXWWzcV??>............u^^^.......tfs\PrVG.aEkNA&..........U<K5+8..0.............~.k];;;.......lll.mX........{k_.^LS=3HI1!.(..........yxx][:D-$..............miA...xjrcZeI;5:......:( ~vL.......i.sh..].......j.........".IDATx..ml.q..uw......\......N...,-....(..[_0}AR...1..QZ.m:...TB......!C:.)...../....v5.o}.._....?....k'..?....s..e...&'.....(..#.$....(..x.i.X!..g....5<D\.lp..0.a.5...z.....t.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11901), with no line terminators
Category:	dropped
Size (bytes):	11901
Entropy (8bit):	5.106396238513521
Encrypted:	false
SSDEEP:	192:ggHWnmGW7GECHay2/WINSyAWRvrhAo1ti:ggHWnmGW7GECHaXN9AWR8
MD5:	59AE89307F6BE51355E07ACF3994F79B
SHA1:	A9C5474C652DBC6B60B97C6E723E03A399ACA92D
SHA-256:	F54AFF9F498AEFB3479AF7D4F67B5ECE9465B24DB28293A1EE7F32A2230E162F
SHA-512:	ED56A2963D8ACCC7E316F10138566AA2BA715384418B106997C6525D016BE61C6B7583227DBDFC28704A71248DC8E21CC0E19E8D77D46FF84A3D143FE471FD63
Malicious:	false
Reputation:	low
Preview:	!function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|{},a.wafer.wafers["wafer-loader"]=e())}("undefined"!=typeof self?self:this,function(){return function(a){function e(w){if(r[w])return r[w].exports;var f=r[w]={i:w,l:!1,exports:{}};return a[w].call(f.exports,f,f.exports,e),f.l=!0,f.exports}var r={};return e.m=a,e.c=r,e.d=function(a,r,w){e.o(a,r)\|\|Object.defineProperty(a,r,{configurable:!1,enumerable:!0,get:w})},e.n=function(a){var r=a&&a.__esModule?function(){return a.default}:function(){return a};return e.d(r,"a",r),r},e.o=function(a,e){return Object.prototype.hasOwnProperty.call(a,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"../../manifest.json":function(a,e){a.exports={"wafer-account-switch":{meta:{version:"1.1.7"},modern:{min:"/aaq/wf/wf-account-switch-1.1.7-moder

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 131 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3547
Entropy (8bit):	7.901809569390095
Encrypted:	false
SSDEEP:	48:peD2z3kNJZck9w3F8u/9VeuMG1nue49lddxKygAp2RzMsYTLqxpRf8rZDz5v:fkNJS13FD5sroy1p2pM1Twpa1R
MD5:	0A389E6EB13FC2DF8C5DF590992C7E67
SHA1:	583EA3802BF4C15C8FB8371938FE7653E67DBBF0
SHA-256:	54D7A245743195D60C153F18C4ED4FB8D927D7D760EE26F601B4C2DD2FC9C26B
SHA-512:	8A783CB30E75E6565D4E7A190B5EADCE8B806CC22F7C5F3D17B6CC1EE369DE9E4F94DDF5BDFF74410D192FEC2E12E920BD4BDB689B852486C1506AD820B5EBEB
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/uploads/1/5/0/2/150218705/published/at-t-logo-2016-svg.png?1720787646
Preview:	.PNG........IHDR.......6...........IDATx..y.....{z.P..l...BpA..."....=.}..B...A..M..I$`T.@.!$0,.`"DP....(..A...A.P..+...3.\|.TWw....z..NuW..~S.....uO,.2.#%....HP......SP...T.5`......r.$...F...5........v.....T?+...)..yZ....V...$..z..R..'....g...<...-.......v......u.zd...vM....7..!..K..j.xBhax./...8..v..~9.S......./.............i.. .zP........6F.h4!.........>......!c..(....i[w0.....H..........u1..9 ..5.$x....#.e.J...p..<.F..wh.1....~..'..w.w.W.g...\|.....<...A.>.?ru"14`..:...i.+.6aEA....:f..bv.E....'}.x.L...Q.B.E3..."...M.5}.8.C....}.....gb.B.+.2..K.(.../x]..g....'w....J.2{..4......X...1X.......\."PL...././I....{...h.?.(>.e..`..&...?U.B...I...L..w...>b8..4.L...8$......2..?...G.....-..n...>..."..&.R.6..>.B..[..%...X..#O.)`..H.......4..p.8....p0....P..`...?h~"@.).L..=....s>....\9....b.F...K......F.A..a. ..@..+In7b........j........:...`.....r..h/O..`....I.u.Z'...?.....s.5..7.CB3.....x.....*..V..%.Ddj;G.xd7.N..?g...F.a.....>.q1.B...L..(+......^dK.v8c?.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	81479
Entropy (8bit):	5.4749171053290855
Encrypted:	false
SSDEEP:	1536:SKdII/jJSREKzk1qJ9BoY1JdnM2Zz9o3MeRJgmHrR0h:SKdII/j0RfCS
MD5:	206D360D5B07C7459E3587534FAE5811
SHA1:	BA7C12742BB2EAB2FF1AB04684E8295180CB3CE8
SHA-256:	31B292D54D231A8557D29E7050EA943553A334B4C9E1FFD47C6027F9D8ADA910
SHA-512:	83DEA25704DFB46D9EB54A394F962FACA901C782794C642ACB3962D9E6D51DD3016FCA2CDE82CB859EA988E20E2460BF8D5A8020F5DADA2524C90F7AFB0D8C15
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/halo-c-login/main-es2015.js?v=23.2.1
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[12],{"+fd8":function(e,t,i){"use strict";i.d(t,"a",function(){return g});var n=i("ofXK"),r=i("3Pt+"),s=i("tk/3"),o=i("sYmb"),a=i("e8Ap"),l=i("vxDQ"),d=i("vnFs"),u=i("Cs7S"),c=i("pZae"),h=i("fXoL");let g=(()=>{class e{static forRoot(){return{ngModule:e,providers:[{provide:c.b,useClass:c.a},u.a,l.a,d.a]}}}return e.\u0275fac=function(t){return new(t\|\|e)},e.\u0275mod=h.Lb({type:e}),e.\u0275inj=h.Kb({providers:[],imports:[[n.b,r.h,r.s,s.c,a.b.forRoot(),o.b],n.b,r.h,r.s,s.c,a.b,o.b]}),e})()},"/ksZ":function(e,t,i){"use strict";i.d(t,"a",function(){return s});var n=i("s0Cq"),r=i("cVEU");class s{constructor(e,t,i,n,r,s){this.r_user=e,this.userID=t,this.user_type=i,this.userFriendlyGroups=n,this.index=r,this.active=!1,this.editMode=!1,this.d=s}isKmsiUser(){return this.user_type===n.e.KMSI}isRmiUser(){return this.user_type===n.e.RMI}isSwmUser(){return this.user_type===r.a.SWM}}},0:function(e,t,i){e.exports=i("zUnb")},"1alh":function(e,t,i){"us

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	50184
Entropy (8bit):	5.9249373679037864
Encrypted:	false
SSDEEP:	1536:aWuROMMmG1JZC/MTiJfAOLL+CxxLtjNSHSBNrcX5:DuR7O7A5J4OX/xxSHSBNrcJ
MD5:	1FA93850401AAD854EEDDB9B52D1BE9C
SHA1:	3AAFE8A4B47A31A4C647FB9961150EFB066464D0
SHA-256:	85BE7BFDD75B3B8830B41F5181FF8B306660210A9E64917AF182B15EA96C8F2C
SHA-512:	1D256A03CBD2BE54260B23C1AB0DBB75A7441CF34D3BBBB2621CCABDBFDC6E27DCC0BFC721AE5CA9154B7A6A18C7A983062D2D04D55A7A6CFF399D709CD930DF
Malicious:	false
Reputation:	low
URL:	https://att-yahoo.att.net/iD67NgWFgJ64/gC/ZUPQz84MX9/S83zYc/dlJyBQEB/L2ZnZ1Q/9HUko
Preview:	(function GWKEpDKmlC(){function rN(UT,tT){var AT=tT;var jT=0xcc9e2d51;var vT=0x1b873593;var zT=0;for(var wT=0;wT<gT(UT);++wT){var IT=WT(UT,wT);if(IT===10\|\|IT===13\|\|IT===32)continue;IT=(IT&0xffff)jT+(((IT>>>16)jT&0xffff)<<16)&0xffffffff;IT=IT<<15\|IT>>>17;IT=(IT&0xffff)vT+(((IT>>>16)vT&0xffff)<<16)&0xffffffff;AT^=IT;AT=AT<<13\|AT>>>19;var MT=(AT&0xffff)5+(((AT>>>16)5&0xffff)<<16)&0xffffffff;AT=(MT&0xffff)+0x6b64+(((MT>>>16)+0xe654&0xffff)<<16);++zT;}AT^=zT;AT^=AT>>>16;AT=(AT&0xffff)0x85ebca6b+(((AT>>>16)0x85ebca6b&0xffff)<<16)&0xffffffff;AT^=AT>>>13;AT=(AT&0xffff)0xc2b2ae35+(((AT>>>16)0xc2b2ae35&0xffff)<<16)&0xffffffff;AT^=AT>>>16;return AT>>>0;}A();ON();XN();var v6=function(z6,w6){return z6\|w6;};var I6=function(M6,h6){return M6&h6;};var E6=function(W6,g6){return W6>=g6;};var V6=function(){return S6.apply(this,[fU,arguments]);};var G6=function(){return S6.apply(this,[cU,arguments]);};var F6=function C6(N6,T6){var K6=C6;while(N6!=ZU){switch(N6){case LU:{var J6=T6[WU];f6.push(c6);

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	26302
Entropy (8bit):	7.976041033551085
Encrypted:	false
SSDEEP:	768:Q/3XmxrileeNqbbh3qO01zc7JtutUQibRS:E3+i8eNGV3qOiSXD3RS
MD5:	E28AB8AB4CA9319D19616A791C522481
SHA1:	00C8F592048AA26E3C30CC2C537D9DF1FC02C0AF
SHA-256:	37B60E8C4DD6295D8DDBCEF171C70A7744CE862237C98A8DB935A17EEB415DF3
SHA-512:	AAD9B04BD3684B1D0C75481667C3E33A730DD49BE8B29765049F190996C132390A9BF2CDE810462D057D202F8A53FCC4DECD4CD659CCF65C78C228376E2C9DA1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d...........................................E.........................!..1A"Qa..2q..#B....$3R.....br...%4CSt...................................6.......................!..1..A."23Q...#Baq...C$.D...............?...J..!M,.`.U..O.....R.T..E..$=.........:......I9f.Y.....X.....7.Fe.R..hB.}.p@.....HF..T...E.g.~...8t.vc..0Vf6.....p.1..G...jKx..?...6...1.P.<'s..(....c?.Vs..2.../.I.......p..J...qHY.#cg.."...;..x...1.g..j.....o..f"d....n.........Ji.<s0R.]n..1..'N.U.{....4........3.b#b.n.z..._.....t..K......\|.....U.U3Da}.N.{...........ZJ..WUB[Q;......%..).&J....!....G.m.. ......fQ..........}q.<A.......P....w..=..#.. i...gW.M........}.T{.Djs.J..........#.9se.`..[..7h.u.#..,.W.ZY.6.e.E.F+.Ok.....f.5P..]O<".............o....A.G..W...Q.UA]K45Qt!d....E.=..=...37.J..Leg.{+.....rp..'.W.g.x...\...{...;b.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64855)
Category:	dropped
Size (bytes):	943089
Entropy (8bit):	5.381924919282892
Encrypted:	false
SSDEEP:	6144:ItqOtAwKSJ5Df+AHK84JcfkqNJIzi1U1PJ3BeFnLSWGwMPSaOmIa9RQUOFVdFTJu:ItqyJ5ZHVycaPVIWDPIx69ZImmC
MD5:	C5834E79EE5811372BE376241D95E134
SHA1:	31F3093868F2B282D22CF8DEA4E873ED143C38CC
SHA-256:	AD5BB76ECF6D4D8423C14055014FA1444F6EB3EB0A5AB36D4769152892A2A34B
SHA-512:	BFF75C0DF080C3AA1C410648C4B833E81E0931FC59591E9BCE4E8137B7BDC8F233896B79E46B692C6DBA1A7C5651EFE824E58C70B41BCD00667F14F2A9B74BD9
Malicious:	false
Reputation:	low
Preview:	//AB_TEMPLATE.//ab -> 21......var _taboola = _taboola \|\| [];var TRC = TRC \|\| {};.TRC.perfConfOverride = {'logTimer': 50000, 'logLength' : 5, 'traffic' : 50, 'measureEnable' : true, 'measureTimeToSend' : 10000, 'measureInterval' : 10000, 'disableRawDataSend': true};.................................window.TRC = window.TRC \|\| {};.window.TRC.version = "20241013-15-RELEASE";.._taboola.push({overrideConfig:{global: {"exclude-ms3":["explore-more-render"],"is-ms3":"true"},systemFlags:{loaderType:"trecs-1229-enum-refactor_ctrl", experimentID: 20640 }}});.try {(new Image()).src = "https://cdn.taboola.com/libtrc/tr5?abgroup=trecs-1229-enum-refactor_ctrl&pub=yahoo-hp-att"} catch(e){}.(function(){var __webpack_modules__={8867:function(e,t,n){"use strict";n.d(t,{Jh:function(){return s},ZT:function(){return i},ev:function(){return c},gn:function(){return a},mG:function(){return l},pi:function(){return o}});var r=function(e,t){return r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	77108
Entropy (8bit):	5.45223432694666
Encrypted:	false
SSDEEP:	1536:xOCNAknkq4SkPt/t9k0kUwTX686VkqkWGxg0scktlLaU:4xsrI3h0/U
MD5:	26154102C9EBBC53AB371CF876E451B7
SHA1:	C6452FAF23907015333696F08201508A0C6FE3B7
SHA-256:	953C41A4056A677A02B52E0C6019FF87CD4A86A06681364FDEF3DC02DB822DD3
SHA-512:	137B676D6CBCC7C0EA0CD7D57143E9CF73B60C986A8EBDA66860F7633EA95CE2C468FBB04067713296736D189370AC8645392CC568ED26E63CD2DD3F872EE5A4
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/halo-c-login/login-general-login-general-module-es2015.js?v=23.2.1
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{CG0s:function(t,e,i){"use strict";i.d(e,"a",function(){return R});var s=i("vxDQ"),r=i("Ji9S"),n=i("LVBD"),o=i("Cs7S"),a=i("s0Cq"),c=i("cVEU"),l=i("fXoL"),u=i("jhN1"),d=i("ofXK"),h=i("e8Ap"),p=i("F93+"),b=i("3Pt+"),m=i("sYmb");let g=(()=>{class t{constructor(t,e){this.jspVar=t,this.adTag=e,this.CONFIRM_PROFILE_POLICY_URL=this.jspVar.getVar(p.a.CONFIRM_PROFILE_POLICY_URL),this.trID=this.jspVar.getVar(a.d.trID),this.opType=this.jspVar.getVar(a.d.opType),this.APPNAME=this.jspVar.getVar(a.d.APPNAME),this.userID=this.jspVar.getVar(a.d.userID),this.targetURL=this.jspVar.getVar(a.d.targetURL)}takeToMyAccount(t,e){this.adTag.sendLinkEventToDDO(this.adTag.getLinkDataFromElement(t,this.CONFIRM_PROFILE_POLICY_URL)),e.submit()}}return t.\u0275fac=function(e){return new(e\|\|t)(l.Nb(s.a),l.Nb(r.a))},t.\u0275cmp=l.Hb({type:t,selectors:[["app-error917dot33"]],decls:14,vars:12,consts:[["id","gotoaccForm","method","post",1,"inline-flex",3,"action"]

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	67465
Entropy (8bit):	4.809594108927749
Encrypted:	false
SSDEEP:	1536:59rPpU1wHKYTpQ73CHJHDuYL/OHHeZF+YwLMC0ht/uJFO0815wZDk5/2M:59rPpl1NQ73CHJHDuYL/OHHeZF+pLM75
MD5:	2B8D85F1EA01D2C3E8B962EAC8D76A5C
SHA1:	936987A7E08DAA4A916C77D86937EDEE42D657DA
SHA-256:	B6353CA52760ABA4E7547AE9861DB68158DC2AF0F4FEBECE55E5C775EE4449F5
SHA-512:	F64D0E9FC7ED02F4C7B3CF7FD680DF3A6F8F4CEFADEEA63553D0F0A4BB5472ABF5EE754C0E056CD91272F0108910347BA6F3CF23C825FD89260CF0545DD0702A
Malicious:	false
Reputation:	low
URL:	https://att-mail-987654.weebly.com/files/theme/plugins.js?1720786820
Preview:	./! Hammer.JS - v2.0.4 - 2014-09-28. http://hammerjs.github.io/. . Copyright (c) 2014 Jorik Tangelder;. * Licensed under the MIT license /.(function(window, document, exportName, undefined) {. 'use strict';..var VENDOR_PREFIXES = ['', 'webkit', 'moz', 'MS', 'ms', 'o'];.var TEST_ELEMENT = document.createElement('div');..var TYPE_FUNCTION = 'function';..var round = Math.round;.var abs = Math.abs;.var now = Date.now;../. set a timeout with a given scope. * @param {Function} fn. * @param {Number} timeout. * @param {Object} context. * @returns {number}. /.function setTimeoutContext(fn, timeout, context) {. return setTimeout(bindFn(fn, context), timeout);.}../. if the argument is an array, we want to execute the fn on each entry. * if it aint an array we don't want to do a thing.. * this is used by all the methods that accept a single and array argument.. * @param {\|Array} arg. @param {String} fn. * @param {Object} [context]. * @returns {Boolean}. */.function invokeArr

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	50184
Entropy (8bit):	5.9249373679037864
Encrypted:	false
SSDEEP:	1536:aWuROMMmG1JZC/MTiJfAOLL+CxxLtjNSHSBNrcX5:DuR7O7A5J4OX/xxSHSBNrcJ
MD5:	1FA93850401AAD854EEDDB9B52D1BE9C
SHA1:	3AAFE8A4B47A31A4C647FB9961150EFB066464D0
SHA-256:	85BE7BFDD75B3B8830B41F5181FF8B306660210A9E64917AF182B15EA96C8F2C
SHA-512:	1D256A03CBD2BE54260B23C1AB0DBB75A7441CF34D3BBBB2621CCABDBFDC6E27DCC0BFC721AE5CA9154B7A6A18C7A983062D2D04D55A7A6CFF399D709CD930DF
Malicious:	false
Reputation:	low
Preview:	(function GWKEpDKmlC(){function rN(UT,tT){var AT=tT;var jT=0xcc9e2d51;var vT=0x1b873593;var zT=0;for(var wT=0;wT<gT(UT);++wT){var IT=WT(UT,wT);if(IT===10\|\|IT===13\|\|IT===32)continue;IT=(IT&0xffff)jT+(((IT>>>16)jT&0xffff)<<16)&0xffffffff;IT=IT<<15\|IT>>>17;IT=(IT&0xffff)vT+(((IT>>>16)vT&0xffff)<<16)&0xffffffff;AT^=IT;AT=AT<<13\|AT>>>19;var MT=(AT&0xffff)5+(((AT>>>16)5&0xffff)<<16)&0xffffffff;AT=(MT&0xffff)+0x6b64+(((MT>>>16)+0xe654&0xffff)<<16);++zT;}AT^=zT;AT^=AT>>>16;AT=(AT&0xffff)0x85ebca6b+(((AT>>>16)0x85ebca6b&0xffff)<<16)&0xffffffff;AT^=AT>>>13;AT=(AT&0xffff)0xc2b2ae35+(((AT>>>16)0xc2b2ae35&0xffff)<<16)&0xffffffff;AT^=AT>>>16;return AT>>>0;}A();ON();XN();var v6=function(z6,w6){return z6\|w6;};var I6=function(M6,h6){return M6&h6;};var E6=function(W6,g6){return W6>=g6;};var V6=function(){return S6.apply(this,[fU,arguments]);};var G6=function(){return S6.apply(this,[cU,arguments]);};var F6=function C6(N6,T6){var K6=C6;while(N6!=ZU){switch(N6){case LU:{var J6=T6[WU];f6.push(c6);

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18480, version 1.0
Category:	downloaded
Size (bytes):	18480
Entropy (8bit):	7.9883935603264415
Encrypted:	false
SSDEEP:	384:7D4KwqZYhcok8+w/5nW0Rp4bJcLHwrQIk3CRc4BfO/QM:/4KBYhcoyuR4bJUaTumfOV
MD5:	15D443231FF3A13B0DCAB5A9B8FD7276
SHA1:	8833865F3777104A8D58943779C3C47CD9B0BA09
SHA-256:	E2740C7B209E33ACA7176250D80F94B4924E5E5D18076EE3B95F32A0E20D1F58
SHA-512:	B475833F63AC87A71263D06698F8D8D97C5EBF06869E2D7A8D4719D4A85D886817FE7E9C602F4DCEB93C130946F319A3C468040AF2DA08EC1F6BF339BD74794F
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Rg.woff2
Preview:	wOF2......H0..........G...........................n..P....`..f..@..W.....@....6.$..@..b.. .... .. ..5l..=...n....F.q.&.O...6.@..X.........s.e..!.....6.c&..Z..\.UQ++....zOLA........F2l..........O..bKT.Da.)......PHM.fw\|8....gYX...^B+,&.... ..a)........N.3..V.IQ.i={."..K.CR...#)$..P........G).....m....6Fo..t.....\.n...1~.?.[s.L.@9.px.;..0p..Q<...hP...9...rq\|u...Z..h..4.c.~..... ....z...'. ...Q...........k....0..j.ZS.Y....B.I.HQ.M X.....iCh.).t..[N....'.e.e.I.TR......./4.;n...e{..Q......v.S..S.=.sw..P.....M5.Z.....w..M`.>2fV..'@.M.43.._...P.O...?.e.ml ....j("(.TL....m.n?.a..D."J.;.....#.N.E........c...}..l?..v.`M$.P.......#..3.A.:D.v.R.i..4 p%@}...3...1.X..<...K.7Uk......u...^$L.."yEE.R,..R...b..?... . @...p.....)...<.....)W1..l.N.....!V./.....2W)......\|g....D...B.O/F}.o.nsY.V...^O.....Fa.....gP.X.X..8.......`.....\|.I'..6.a}d3.1....V...YAl.n$.....L..i.....D4DJ%dJ..m.....tcZ....\|..F.y.4.f..m+..X.....dz..r...x..........oz...T.H:}..........C....oWGo.~.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12308
Entropy (8bit):	5.5695960719060755
Encrypted:	false
SSDEEP:	384:B3jiHt1iHtiH5OiHPiH3iHsvHt1vHtvH5OvHPvH3vHs3trH3j3i63R3Z3w3tra3R:YHmHMHzHqHSHCHjHVH2HXHfHs3tb3j31
MD5:	E775CFB630A9627C6BED2EC0366DF412
SHA1:	9376AE7BC98F8E3776FD29EE862E71FC0430092D
SHA-256:	DDE5F59DB8A5FCD0C7ABAFBED618A64E1DB4726DD0C90579C58137D42BBD3F20
SHA-512:	5B4DBCF46DCB75AB475D877F026F9E28EF5010EFAA1416487E50DED6068ABD926D6F6B73AABB91BC25B866E104D4F0337B7B5D4F54AC1E0676DAE658DD8226C4
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Karla:400,700\|Oswald:700\|Roboto+Mono:400,400i,700,700i"
Preview:	/* latin-ext /.@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUjm6bnEr.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUje6bg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUjm6bnEr.woff2)

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2684
Entropy (8bit):	7.312089486802539
Encrypted:	false
SSDEEP:	48:Hy2JSJMlCPAI9eI7N7miqiZov00hnp07om47jSW3lAm0loMX7nR1wKp:Hy2JSqCDsIbTov00hnp07om47jlHevnR
MD5:	953C1AC7E3B4E3D58367E20B064034BB
SHA1:	FE8BE09EEE45EBF11C4C46918879725C85FE41E0
SHA-256:	123988D9B5968899975FF52A55B198E7209D4EC023F3A7462FDA68B52AC2B463
SHA-512:	70CFDA1C11AC079F51B971C9DD0426895990E350C041DDA60E13D86D38B0D043B5D647F750B7F479270BBA439A7375775BFCEAD62BA210F1E0F8FFE52791B420
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ok/u/assets/img/spinner-24x24-anim.gif
Preview:	GIF89a.................................................................................................!..NETSCAPE2.0.....!.......,............%...%eZ..4Z............<.a ..&...x..w..........8qT&...aH0D...P\.....1....~.J...`#..B.5....5..\|%..V@.@....Z@....'....5........)..q)...)....n.....#....n....D...\|......g.?..?.......Z.9......$.."..".......q..0 .,E........@..T.)....:L!..!.......,............%..3.".(s...P<>...Rb.........U9...AL..,/......@.........Vp.O.DB.t.&..A.........M}........u......'tA.....i6..g,...i.~';2..\|h.W......\|.../'..g....W".'zW.....1....#.6....."J.6J'."...0A!.!.......,............%..E.(:........V2.7....A.$..^I.q.....RH.....`...........nDR"@ ...k1..0.E!.....H7......../....q~~...0.l/....KXc%...M".)......S..D......"......c.4.\|#..$.."."..0..#../..Y.4O.=.....B.0!.!.......,............%..u@e."$..B......\.<.(.....\|..A(b.f....{...kJ..D/.H..p\.N(eq0...ds......^..S}.........P...Czy.f.$.......%......).....Z......p;.....e$7"...dQ....3.._.7..r\|..#..E>.1....*.$.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 14, 2024 14:19:44.320544958 CEST	192.168.2.11	1.1.1.1	0x8989	Standard query (0)	att-mail-987654.weebly.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:44.320709944 CEST	192.168.2.11	1.1.1.1	0x17be	Standard query (0)	att-mail-987654.weebly.com	65	IN (0x0001)	false
Oct 14, 2024 14:19:45.373724937 CEST	192.168.2.11	1.1.1.1	0xae3e	Standard query (0)	cdn2.editmysite.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:45.373982906 CEST	192.168.2.11	1.1.1.1	0xfd52	Standard query (0)	cdn2.editmysite.com	65	IN (0x0001)	false
Oct 14, 2024 14:19:45.699650049 CEST	192.168.2.11	1.1.1.1	0x626e	Standard query (0)	att-mail-987654.weebly.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:45.699935913 CEST	192.168.2.11	1.1.1.1	0xd05	Standard query (0)	att-mail-987654.weebly.com	65	IN (0x0001)	false
Oct 14, 2024 14:19:46.597491026 CEST	192.168.2.11	1.1.1.1	0x88cc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:46.597943068 CEST	192.168.2.11	1.1.1.1	0xc99	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 14, 2024 14:19:46.791213989 CEST	192.168.2.11	1.1.1.1	0xc14a	Standard query (0)	cdn2.editmysite.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:46.791369915 CEST	192.168.2.11	1.1.1.1	0x4686	Standard query (0)	cdn2.editmysite.com	65	IN (0x0001)	false
Oct 14, 2024 14:19:48.775013924 CEST	192.168.2.11	1.1.1.1	0xcdc5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:48.775275946 CEST	192.168.2.11	1.1.1.1	0x416e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 14, 2024 14:19:49.567214966 CEST	192.168.2.11	1.1.1.1	0xa0bb	Standard query (0)	ec.editmysite.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:49.567495108 CEST	192.168.2.11	1.1.1.1	0x6317	Standard query (0)	ec.editmysite.com	65	IN (0x0001)	false
Oct 14, 2024 14:19:49.878139019 CEST	192.168.2.11	1.1.1.1	0xf023	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:49.879503012 CEST	192.168.2.11	1.1.1.1	0x6fea	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 14, 2024 14:19:52.351078033 CEST	192.168.2.11	1.1.1.1	0x4d9b	Standard query (0)	ec.editmysite.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:52.351221085 CEST	192.168.2.11	1.1.1.1	0xf80c	Standard query (0)	ec.editmysite.com	65	IN (0x0001)	false
Oct 14, 2024 14:19:53.362008095 CEST	192.168.2.11	1.1.1.1	0x4a13	Standard query (0)	ec.editmysite.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:53.362283945 CEST	192.168.2.11	1.1.1.1	0x6417	Standard query (0)	ec.editmysite.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:05.794034004 CEST	192.168.2.11	1.1.1.1	0xd013	Standard query (0)	att.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:05.794517040 CEST	192.168.2.11	1.1.1.1	0xb10f	Standard query (0)	att.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:05.800870895 CEST	192.168.2.11	1.1.1.1	0x3c66	Standard query (0)	att.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:05.801057100 CEST	192.168.2.11	1.1.1.1	0xa75f	Standard query (0)	att.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:07.558280945 CEST	192.168.2.11	1.1.1.1	0xdab	Standard query (0)	www.att.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:07.558700085 CEST	192.168.2.11	1.1.1.1	0x890c	Standard query (0)	www.att.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:10.253336906 CEST	192.168.2.11	1.1.1.1	0x9282	Standard query (0)	start.att.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:10.253689051 CEST	192.168.2.11	1.1.1.1	0xa2ec	Standard query (0)	start.att.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:11.752690077 CEST	192.168.2.11	1.1.1.1	0xe791	Standard query (0)	currently.att.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:11.753205061 CEST	192.168.2.11	1.1.1.1	0xdc02	Standard query (0)	currently.att.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:13.036741018 CEST	192.168.2.11	1.1.1.1	0x20df	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.037168026 CEST	192.168.2.11	1.1.1.1	0xa30f	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:13.042207956 CEST	192.168.2.11	1.1.1.1	0x6c5a	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.042860031 CEST	192.168.2.11	1.1.1.1	0xe243	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:13.043139935 CEST	192.168.2.11	1.1.1.1	0xda8a	Standard query (0)	geo.query.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.043262005 CEST	192.168.2.11	1.1.1.1	0xf6e0	Standard query (0)	geo.query.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:13.054099083 CEST	192.168.2.11	1.1.1.1	0xea2b	Standard query (0)	search.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.054315090 CEST	192.168.2.11	1.1.1.1	0xba4e	Standard query (0)	search.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:13.607991934 CEST	192.168.2.11	1.1.1.1	0x4b1a	Standard query (0)	consent.cmp.oath.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.608628988 CEST	192.168.2.11	1.1.1.1	0x46b8	Standard query (0)	consent.cmp.oath.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:14.232302904 CEST	192.168.2.11	1.1.1.1	0x9093	Standard query (0)	edge-mcdn.secure.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:14.232436895 CEST	192.168.2.11	1.1.1.1	0xe2cb	Standard query (0)	edge-mcdn.secure.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:14.238971949 CEST	192.168.2.11	1.1.1.1	0xf3fe	Standard query (0)	api.login.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:14.239142895 CEST	192.168.2.11	1.1.1.1	0x8138	Standard query (0)	api.login.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:14.424124002 CEST	192.168.2.11	1.1.1.1	0xf915	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:14.425714970 CEST	192.168.2.11	1.1.1.1	0x920a	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:15.226932049 CEST	192.168.2.11	1.1.1.1	0x2a8d	Standard query (0)	api.login.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.227152109 CEST	192.168.2.11	1.1.1.1	0xb82a	Standard query (0)	api.login.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:15.262229919 CEST	192.168.2.11	1.1.1.1	0xcd5d	Standard query (0)	currently.att.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.262358904 CEST	192.168.2.11	1.1.1.1	0x4ddf	Standard query (0)	currently.att.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:15.281817913 CEST	192.168.2.11	1.1.1.1	0x81d8	Standard query (0)	edge-mcdn.secure.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.281977892 CEST	192.168.2.11	1.1.1.1	0x4495	Standard query (0)	edge-mcdn.secure.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:15.760826111 CEST	192.168.2.11	1.1.1.1	0x7867	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.761096001 CEST	192.168.2.11	1.1.1.1	0xa7e8	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:17.653228045 CEST	192.168.2.11	1.1.1.1	0x89e7	Standard query (0)	www.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.654294968 CEST	192.168.2.11	1.1.1.1	0xdb2a	Standard query (0)	www.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:17.675170898 CEST	192.168.2.11	1.1.1.1	0x7e58	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.675431967 CEST	192.168.2.11	1.1.1.1	0xfa46	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:17.760390043 CEST	192.168.2.11	1.1.1.1	0x1b85	Standard query (0)	udc.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.760788918 CEST	192.168.2.11	1.1.1.1	0xca5b	Standard query (0)	udc.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:17.918855906 CEST	192.168.2.11	1.1.1.1	0xa105	Standard query (0)	login.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.919007063 CEST	192.168.2.11	1.1.1.1	0x7bc9	Standard query (0)	login.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:18.782763958 CEST	192.168.2.11	1.1.1.1	0xb619	Standard query (0)	udc.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:18.783193111 CEST	192.168.2.11	1.1.1.1	0x88ea	Standard query (0)	udc.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:18.939891100 CEST	192.168.2.11	1.1.1.1	0x2523	Standard query (0)	login.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:18.940161943 CEST	192.168.2.11	1.1.1.1	0xaba0	Standard query (0)	login.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:20.318272114 CEST	192.168.2.11	1.1.1.1	0x8030	Standard query (0)	att.demdex.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.318706989 CEST	192.168.2.11	1.1.1.1	0xdf61	Standard query (0)	att.demdex.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:20.319497108 CEST	192.168.2.11	1.1.1.1	0xa3da	Standard query (0)	smetrics.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.320076942 CEST	192.168.2.11	1.1.1.1	0x25dc	Standard query (0)	smetrics.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:20.514694929 CEST	192.168.2.11	1.1.1.1	0x503f	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.519165993 CEST	192.168.2.11	1.1.1.1	0x63b7	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:20.638716936 CEST	192.168.2.11	1.1.1.1	0x607b	Standard query (0)	att-yahoo.att.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.639286995 CEST	192.168.2.11	1.1.1.1	0x994e	Standard query (0)	att-yahoo.att.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:21.418137074 CEST	192.168.2.11	1.1.1.1	0x6920	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:21.418477058 CEST	192.168.2.11	1.1.1.1	0x5d2	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:21.418885946 CEST	192.168.2.11	1.1.1.1	0x5d3b	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:21.419019938 CEST	192.168.2.11	1.1.1.1	0x8ca6	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:22.588145971 CEST	192.168.2.11	1.1.1.1	0xd3ba	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:22.588706017 CEST	192.168.2.11	1.1.1.1	0x34f1	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:23.554783106 CEST	192.168.2.11	1.1.1.1	0xcaf6	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:23.555064917 CEST	192.168.2.11	1.1.1.1	0x3b63	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:23.555629969 CEST	192.168.2.11	1.1.1.1	0xb79c	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:23.555772066 CEST	192.168.2.11	1.1.1.1	0xa9fb	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:23.820972919 CEST	192.168.2.11	1.1.1.1	0x54d1	Standard query (0)	noa.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:23.821180105 CEST	192.168.2.11	1.1.1.1	0x490d	Standard query (0)	noa.yahoo.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:24.122881889 CEST	192.168.2.11	1.1.1.1	0xbfc8	Standard query (0)	smetrics.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.123275042 CEST	192.168.2.11	1.1.1.1	0xf5c9	Standard query (0)	smetrics.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:24.140836000 CEST	192.168.2.11	1.1.1.1	0x3d84	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.142374039 CEST	192.168.2.11	1.1.1.1	0xbdd7	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:24.240156889 CEST	192.168.2.11	1.1.1.1	0x75c1	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.240593910 CEST	192.168.2.11	1.1.1.1	0x2766	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:24.273530960 CEST	192.168.2.11	1.1.1.1	0xebd	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.274174929 CEST	192.168.2.11	1.1.1.1	0xa78d	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:25.622164011 CEST	192.168.2.11	1.1.1.1	0x4da5	Standard query (0)	oidc.idp.clogin.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:25.622711897 CEST	192.168.2.11	1.1.1.1	0x537c	Standard query (0)	oidc.idp.clogin.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:25.750281096 CEST	192.168.2.11	1.1.1.1	0xf398	Standard query (0)	att-yahoo.att.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:25.751024008 CEST	192.168.2.11	1.1.1.1	0x16b0	Standard query (0)	att-yahoo.att.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:26.741892099 CEST	192.168.2.11	1.1.1.1	0x6887	Standard query (0)	signin.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:26.742116928 CEST	192.168.2.11	1.1.1.1	0x419a	Standard query (0)	signin.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:27.869808912 CEST	192.168.2.11	1.1.1.1	0xd65f	Standard query (0)	signin-static-js.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:27.869975090 CEST	192.168.2.11	1.1.1.1	0x53ba	Standard query (0)	signin-static-js.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:28.506143093 CEST	192.168.2.11	1.1.1.1	0xe1cc	Standard query (0)	signin.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.506315947 CEST	192.168.2.11	1.1.1.1	0xfda7	Standard query (0)	signin.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:28.693964958 CEST	192.168.2.11	1.1.1.1	0x3048	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.694423914 CEST	192.168.2.11	1.1.1.1	0xbbd9	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:29.357779026 CEST	192.168.2.11	1.1.1.1	0x8101	Standard query (0)	signin-static-js.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:29.358293056 CEST	192.168.2.11	1.1.1.1	0x4dc6	Standard query (0)	signin-static-js.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:29.604625940 CEST	192.168.2.11	1.1.1.1	0x755	Standard query (0)	smetrics.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:29.604962111 CEST	192.168.2.11	1.1.1.1	0x8bb5	Standard query (0)	smetrics.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:30.775300026 CEST	192.168.2.11	1.1.1.1	0x7b81	Standard query (0)	fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:30.775554895 CEST	192.168.2.11	1.1.1.1	0x83af	Standard query (0)	fls.doubleclick.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:31.754904985 CEST	192.168.2.11	1.1.1.1	0xfb1f	Standard query (0)	fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:31.754966021 CEST	192.168.2.11	1.1.1.1	0x95fb	Standard query (0)	fls.doubleclick.net	65	IN (0x0001)	false
Oct 14, 2024 14:20:32.886473894 CEST	192.168.2.11	1.1.1.1	0x258	Standard query (0)	www.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:32.886549950 CEST	192.168.2.11	1.1.1.1	0xbe0	Standard query (0)	www.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:33.652658939 CEST	192.168.2.11	1.1.1.1	0xcd5e	Standard query (0)	ingest.quantummetric.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:33.652798891 CEST	192.168.2.11	1.1.1.1	0x7ab2	Standard query (0)	ingest.quantummetric.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:34.379998922 CEST	192.168.2.11	1.1.1.1	0x7124	Standard query (0)	att-sync.quantummetric.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.380315065 CEST	192.168.2.11	1.1.1.1	0xbc79	Standard query (0)	att-sync.quantummetric.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:34.401320934 CEST	192.168.2.11	1.1.1.1	0x63d1	Standard query (0)	ingest.quantummetric.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.401505947 CEST	192.168.2.11	1.1.1.1	0x1298	Standard query (0)	ingest.quantummetric.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:35.447650909 CEST	192.168.2.11	1.1.1.1	0xf089	Standard query (0)	att-sync.quantummetric.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:35.448159933 CEST	192.168.2.11	1.1.1.1	0xdbcd	Standard query (0)	att-sync.quantummetric.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:35.508836031 CEST	192.168.2.11	1.1.1.1	0xf190	Standard query (0)	www.att.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:35.509138107 CEST	192.168.2.11	1.1.1.1	0x615b	Standard query (0)	www.att.com	65	IN (0x0001)	false
Oct 14, 2024 14:20:36.751914024 CEST	192.168.2.11	1.1.1.1	0xddf8	Standard query (0)	cdn.quantummetric.com	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:36.752418041 CEST	192.168.2.11	1.1.1.1	0x92d9	Standard query (0)	cdn.quantummetric.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 14, 2024 14:19:44.338623047 CEST	1.1.1.1	192.168.2.11	0x8989	No error (0)	att-mail-987654.weebly.com		74.115.51.9	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:44.338623047 CEST	1.1.1.1	192.168.2.11	0x8989	No error (0)	att-mail-987654.weebly.com		74.115.51.8	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:45.382572889 CEST	1.1.1.1	192.168.2.11	0xae3e	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:45.382572889 CEST	1.1.1.1	192.168.2.11	0xae3e	No error (0)	weebly.map.fastly.net		151.101.1.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:45.382572889 CEST	1.1.1.1	192.168.2.11	0xae3e	No error (0)	weebly.map.fastly.net		151.101.65.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:45.382572889 CEST	1.1.1.1	192.168.2.11	0xae3e	No error (0)	weebly.map.fastly.net		151.101.129.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:45.382572889 CEST	1.1.1.1	192.168.2.11	0xae3e	No error (0)	weebly.map.fastly.net		151.101.193.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:45.382782936 CEST	1.1.1.1	192.168.2.11	0xfd52	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:45.713941097 CEST	1.1.1.1	192.168.2.11	0x626e	No error (0)	att-mail-987654.weebly.com		74.115.51.9	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:45.713941097 CEST	1.1.1.1	192.168.2.11	0x626e	No error (0)	att-mail-987654.weebly.com		74.115.51.8	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:46.604181051 CEST	1.1.1.1	192.168.2.11	0x88cc	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:46.604644060 CEST	1.1.1.1	192.168.2.11	0xc99	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 14, 2024 14:19:46.799784899 CEST	1.1.1.1	192.168.2.11	0xc14a	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:46.799784899 CEST	1.1.1.1	192.168.2.11	0xc14a	No error (0)	weebly.map.fastly.net		151.101.129.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:46.799784899 CEST	1.1.1.1	192.168.2.11	0xc14a	No error (0)	weebly.map.fastly.net		151.101.193.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:46.799784899 CEST	1.1.1.1	192.168.2.11	0xc14a	No error (0)	weebly.map.fastly.net		151.101.65.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:46.799784899 CEST	1.1.1.1	192.168.2.11	0xc14a	No error (0)	weebly.map.fastly.net		151.101.1.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:46.800447941 CEST	1.1.1.1	192.168.2.11	0x4686	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:48.781796932 CEST	1.1.1.1	192.168.2.11	0xcdc5	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:48.782613039 CEST	1.1.1.1	192.168.2.11	0x416e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 14, 2024 14:19:49.575474024 CEST	1.1.1.1	192.168.2.11	0xa0bb	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:49.575474024 CEST	1.1.1.1	192.168.2.11	0xa0bb	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		50.112.173.192	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:49.575474024 CEST	1.1.1.1	192.168.2.11	0xa0bb	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		54.201.56.249	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:49.588373899 CEST	1.1.1.1	192.168.2.11	0x6317	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:49.885032892 CEST	1.1.1.1	192.168.2.11	0xf023	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:49.886584997 CEST	1.1.1.1	192.168.2.11	0x6fea	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 14, 2024 14:19:53.369863033 CEST	1.1.1.1	192.168.2.11	0x4d9b	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:53.369863033 CEST	1.1.1.1	192.168.2.11	0x4d9b	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		54.201.56.249	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:53.369863033 CEST	1.1.1.1	192.168.2.11	0x4d9b	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		50.112.173.192	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:53.379239082 CEST	1.1.1.1	192.168.2.11	0xf80c	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:53.384684086 CEST	1.1.1.1	192.168.2.11	0x4a13	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:53.384684086 CEST	1.1.1.1	192.168.2.11	0x4a13	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		50.112.173.192	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:53.384684086 CEST	1.1.1.1	192.168.2.11	0x4a13	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		54.201.56.249	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:53.384691954 CEST	1.1.1.1	192.168.2.11	0x6417	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:56.699466944 CEST	1.1.1.1	192.168.2.11	0x3183	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:56.699466944 CEST	1.1.1.1	192.168.2.11	0x3183	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:19:57.008186102 CEST	1.1.1.1	192.168.2.11	0x61ff	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:19:57.008186102 CEST	1.1.1.1	192.168.2.11	0x61ff	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:05.801784039 CEST	1.1.1.1	192.168.2.11	0xd013	No error (0)	att.net		144.160.36.42	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:05.801784039 CEST	1.1.1.1	192.168.2.11	0xd013	No error (0)	att.net		144.160.155.43	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:05.807977915 CEST	1.1.1.1	192.168.2.11	0x3c66	No error (0)	att.net		144.160.36.42	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:05.807977915 CEST	1.1.1.1	192.168.2.11	0x3c66	No error (0)	att.net		144.160.155.43	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:07.684623003 CEST	1.1.1.1	192.168.2.11	0x890c	No error (0)	www.att.net	www.att.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:07.686762094 CEST	1.1.1.1	192.168.2.11	0xdab	No error (0)	www.att.net	www.att.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:10.367278099 CEST	1.1.1.1	192.168.2.11	0x9282	No error (0)	start.att.net	start.att.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:10.392231941 CEST	1.1.1.1	192.168.2.11	0xa2ec	No error (0)	start.att.net	start.att.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:10.515350103 CEST	1.1.1.1	192.168.2.11	0xc1ec	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:10.515350103 CEST	1.1.1.1	192.168.2.11	0xc1ec	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:11.777992964 CEST	1.1.1.1	192.168.2.11	0xe791	No error (0)	currently.att.yahoo.com	atsv2-fp-shed.wg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:11.777992964 CEST	1.1.1.1	192.168.2.11	0xe791	No error (0)	atsv2-fp-shed.wg1.b.yahoo.com		87.248.100.215	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:11.777992964 CEST	1.1.1.1	192.168.2.11	0xe791	No error (0)	atsv2-fp-shed.wg1.b.yahoo.com		87.248.100.216	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:11.809334040 CEST	1.1.1.1	192.168.2.11	0xdc02	No error (0)	currently.att.yahoo.com	atsv2-fp-shed.wg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.044073105 CEST	1.1.1.1	192.168.2.11	0xa30f	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.044297934 CEST	1.1.1.1	192.168.2.11	0x20df	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.044297934 CEST	1.1.1.1	192.168.2.11	0x20df	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.044297934 CEST	1.1.1.1	192.168.2.11	0x20df	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.049227953 CEST	1.1.1.1	192.168.2.11	0x6c5a	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.049227953 CEST	1.1.1.1	192.168.2.11	0x6c5a	No error (0)	geo-atsv2.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.050123930 CEST	1.1.1.1	192.168.2.11	0xda8a	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.050123930 CEST	1.1.1.1	192.168.2.11	0xda8a	No error (0)	udc-ats.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.050673008 CEST	1.1.1.1	192.168.2.11	0xe243	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.051224947 CEST	1.1.1.1	192.168.2.11	0xf6e0	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.061012030 CEST	1.1.1.1	192.168.2.11	0xea2b	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.061012030 CEST	1.1.1.1	192.168.2.11	0xea2b	No error (0)	ds-global3.l7.search.ystg1.b.yahoo.com		212.82.100.137	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.063553095 CEST	1.1.1.1	192.168.2.11	0xba4e	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.615420103 CEST	1.1.1.1	192.168.2.11	0x4b1a	No error (0)	consent.cmp.oath.com	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:13.615420103 CEST	1.1.1.1	192.168.2.11	0x4b1a	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.22	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.615420103 CEST	1.1.1.1	192.168.2.11	0x4b1a	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.31	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.615420103 CEST	1.1.1.1	192.168.2.11	0x4b1a	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.108	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.615420103 CEST	1.1.1.1	192.168.2.11	0x4b1a	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.9	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:13.616482019 CEST	1.1.1.1	192.168.2.11	0x46b8	No error (0)	consent.cmp.oath.com	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:14.246217012 CEST	1.1.1.1	192.168.2.11	0x9093	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:14.246217012 CEST	1.1.1.1	192.168.2.11	0x9093	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:14.246217012 CEST	1.1.1.1	192.168.2.11	0x9093	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:14.246228933 CEST	1.1.1.1	192.168.2.11	0xe2cb	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:14.246433973 CEST	1.1.1.1	192.168.2.11	0x8138	No error (0)	api.login.yahoo.com	login.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:14.246433973 CEST	1.1.1.1	192.168.2.11	0x8138	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:14.250849962 CEST	1.1.1.1	192.168.2.11	0xf3fe	No error (0)	api.login.yahoo.com	login.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:14.250849962 CEST	1.1.1.1	192.168.2.11	0xf3fe	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:14.250849962 CEST	1.1.1.1	192.168.2.11	0xf3fe	No error (0)	ds-ats.member.g02.yahoodns.net		212.82.100.140	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:14.430809975 CEST	1.1.1.1	192.168.2.11	0xf915	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:14.430809975 CEST	1.1.1.1	192.168.2.11	0xf915	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:14.430809975 CEST	1.1.1.1	192.168.2.11	0xf915	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:14.432987928 CEST	1.1.1.1	192.168.2.11	0x920a	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.234441042 CEST	1.1.1.1	192.168.2.11	0x2a8d	No error (0)	api.login.yahoo.com	login.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.234441042 CEST	1.1.1.1	192.168.2.11	0x2a8d	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.234441042 CEST	1.1.1.1	192.168.2.11	0x2a8d	No error (0)	ds-ats.member.g02.yahoodns.net		212.82.100.140	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.235346079 CEST	1.1.1.1	192.168.2.11	0xb82a	No error (0)	api.login.yahoo.com	login.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.235346079 CEST	1.1.1.1	192.168.2.11	0xb82a	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.289727926 CEST	1.1.1.1	192.168.2.11	0x4495	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.289761066 CEST	1.1.1.1	192.168.2.11	0x81d8	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.289761066 CEST	1.1.1.1	192.168.2.11	0x81d8	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.289761066 CEST	1.1.1.1	192.168.2.11	0x81d8	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.425298929 CEST	1.1.1.1	192.168.2.11	0x4ddf	No error (0)	currently.att.yahoo.com	atsv2-fp-shed.wg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.501048088 CEST	1.1.1.1	192.168.2.11	0xcd5d	No error (0)	currently.att.yahoo.com	atsv2-fp-shed.wg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.501048088 CEST	1.1.1.1	192.168.2.11	0xcd5d	No error (0)	atsv2-fp-shed.wg1.b.yahoo.com		87.248.100.215	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.501048088 CEST	1.1.1.1	192.168.2.11	0xcd5d	No error (0)	atsv2-fp-shed.wg1.b.yahoo.com		87.248.100.216	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.768044949 CEST	1.1.1.1	192.168.2.11	0x7867	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:15.768044949 CEST	1.1.1.1	192.168.2.11	0x7867	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.768044949 CEST	1.1.1.1	192.168.2.11	0x7867	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:15.768748999 CEST	1.1.1.1	192.168.2.11	0xa7e8	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:17.673188925 CEST	1.1.1.1	192.168.2.11	0x89e7	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:17.676673889 CEST	1.1.1.1	192.168.2.11	0xdb2a	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.224.135	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.73.195.97	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.54.253	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.31.75	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.4.19	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.49.75	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.127.197	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682030916 CEST	1.1.1.1	192.168.2.11	0x7e58	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.48.180.95	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682467937 CEST	1.1.1.1	192.168.2.11	0xfa46	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682467937 CEST	1.1.1.1	192.168.2.11	0xfa46	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:17.682467937 CEST	1.1.1.1	192.168.2.11	0xfa46	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:19.829286098 CEST	1.1.1.1	192.168.2.11	0xca5b	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:19.829322100 CEST	1.1.1.1	192.168.2.11	0xa105	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:19.829322100 CEST	1.1.1.1	192.168.2.11	0xa105	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:19.829336882 CEST	1.1.1.1	192.168.2.11	0x1b85	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:19.829336882 CEST	1.1.1.1	192.168.2.11	0x1b85	No error (0)	udc-ats.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:19.829353094 CEST	1.1.1.1	192.168.2.11	0x7bc9	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:19.847640991 CEST	1.1.1.1	192.168.2.11	0xb619	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:19.847640991 CEST	1.1.1.1	192.168.2.11	0xb619	No error (0)	udc-ats.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:19.848308086 CEST	1.1.1.1	192.168.2.11	0x2523	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:19.848308086 CEST	1.1.1.1	192.168.2.11	0x2523	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:19.848548889 CEST	1.1.1.1	192.168.2.11	0x88ea	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:19.849149942 CEST	1.1.1.1	192.168.2.11	0xaba0	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.340817928 CEST	1.1.1.1	192.168.2.11	0xa3da	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.341140985 CEST	1.1.1.1	192.168.2.11	0xdf61	No error (0)	att.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.341140985 CEST	1.1.1.1	192.168.2.11	0xdf61	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.341140985 CEST	1.1.1.1	192.168.2.11	0xdf61	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.346715927 CEST	1.1.1.1	192.168.2.11	0x25dc	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	att.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.235.56	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.183.110	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.31.75	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.150.189	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.54.253	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.73.195.97	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.196.164	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.366082907 CEST	1.1.1.1	192.168.2.11	0x8030	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.4.19	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.96.13	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.31.75	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.196.164	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.224.135	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.4.19	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.235.56	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.198.130	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.523958921 CEST	1.1.1.1	192.168.2.11	0x503f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.49.75	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:20.528707027 CEST	1.1.1.1	192.168.2.11	0x63b7	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.528707027 CEST	1.1.1.1	192.168.2.11	0x63b7	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.528707027 CEST	1.1.1.1	192.168.2.11	0x63b7	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.764117002 CEST	1.1.1.1	192.168.2.11	0x994e	No error (0)	att-yahoo.att.net	att-yahoo.att.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:20.772660971 CEST	1.1.1.1	192.168.2.11	0x607b	No error (0)	att-yahoo.att.net	att-yahoo.att.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:21.425292015 CEST	1.1.1.1	192.168.2.11	0x6920	No error (0)	securepubads.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:21.425704002 CEST	1.1.1.1	192.168.2.11	0x5d2	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Oct 14, 2024 14:20:21.426301003 CEST	1.1.1.1	192.168.2.11	0x5d3b	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:21.426301003 CEST	1.1.1.1	192.168.2.11	0x5d3b	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:21.426301003 CEST	1.1.1.1	192.168.2.11	0x5d3b	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:21.426301003 CEST	1.1.1.1	192.168.2.11	0x5d3b	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:21.426301003 CEST	1.1.1.1	192.168.2.11	0x5d3b	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:21.426657915 CEST	1.1.1.1	192.168.2.11	0x8ca6	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:22.596003056 CEST	1.1.1.1	192.168.2.11	0x34f1	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:22.596139908 CEST	1.1.1.1	192.168.2.11	0xd3ba	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:22.596139908 CEST	1.1.1.1	192.168.2.11	0xd3ba	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		52.58.104.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:22.596139908 CEST	1.1.1.1	192.168.2.11	0xd3ba	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.197.252.142	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:23.561881065 CEST	1.1.1.1	192.168.2.11	0xcaf6	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:23.561881065 CEST	1.1.1.1	192.168.2.11	0xcaf6	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:23.561881065 CEST	1.1.1.1	192.168.2.11	0xcaf6	No error (0)	cs964199420.wpc.mucdn.net		152.199.23.180	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:23.562733889 CEST	1.1.1.1	192.168.2.11	0xb79c	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:23.562733889 CEST	1.1.1.1	192.168.2.11	0xb79c	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:23.562733889 CEST	1.1.1.1	192.168.2.11	0xb79c	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:23.562733889 CEST	1.1.1.1	192.168.2.11	0xb79c	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:23.562733889 CEST	1.1.1.1	192.168.2.11	0xb79c	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:23.563081980 CEST	1.1.1.1	192.168.2.11	0xa9fb	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:23.565968990 CEST	1.1.1.1	192.168.2.11	0x3b63	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:23.565968990 CEST	1.1.1.1	192.168.2.11	0x3b63	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:23.829181910 CEST	1.1.1.1	192.168.2.11	0x490d	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:23.829345942 CEST	1.1.1.1	192.168.2.11	0x54d1	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:23.829345942 CEST	1.1.1.1	192.168.2.11	0x54d1	No error (0)	noa-atsv2.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.143416882 CEST	1.1.1.1	192.168.2.11	0xbfc8	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:24.146666050 CEST	1.1.1.1	192.168.2.11	0xf5c9	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.148396969 CEST	1.1.1.1	192.168.2.11	0x3d84	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.247389078 CEST	1.1.1.1	192.168.2.11	0x75c1	No error (0)	securepubads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.247617006 CEST	1.1.1.1	192.168.2.11	0x2766	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Oct 14, 2024 14:20:24.281527042 CEST	1.1.1.1	192.168.2.11	0xebd	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:24.281527042 CEST	1.1.1.1	192.168.2.11	0xebd	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.281527042 CEST	1.1.1.1	192.168.2.11	0xebd	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.281527042 CEST	1.1.1.1	192.168.2.11	0xebd	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.281527042 CEST	1.1.1.1	192.168.2.11	0xebd	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:24.283943892 CEST	1.1.1.1	192.168.2.11	0xa78d	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:25.745614052 CEST	1.1.1.1	192.168.2.11	0x4da5	No error (0)	oidc.idp.clogin.att.com		144.161.106.164	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:25.879216909 CEST	1.1.1.1	192.168.2.11	0x16b0	No error (0)	att-yahoo.att.net	att-yahoo.att.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:25.896740913 CEST	1.1.1.1	192.168.2.11	0xf398	No error (0)	att-yahoo.att.net	att-yahoo.att.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:26.869275093 CEST	1.1.1.1	192.168.2.11	0x6887	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:26.869275093 CEST	1.1.1.1	192.168.2.11	0x6887	No error (0)	clcontent.att.com		144.161.106.163	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:26.880178928 CEST	1.1.1.1	192.168.2.11	0x419a	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:27.993165970 CEST	1.1.1.1	192.168.2.11	0xd65f	No error (0)	signin-static-js.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:27.993165970 CEST	1.1.1.1	192.168.2.11	0xd65f	No error (0)	clcontent.att.com		144.161.106.163	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.007658958 CEST	1.1.1.1	192.168.2.11	0x53ba	No error (0)	signin-static-js.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:28.514508963 CEST	1.1.1.1	192.168.2.11	0xe1cc	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:28.514508963 CEST	1.1.1.1	192.168.2.11	0xe1cc	No error (0)	clcontent.att.com		144.161.106.163	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.620512009 CEST	1.1.1.1	192.168.2.11	0xfda7	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.48.180.95	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.31.75	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.235.56	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.196.164	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.150.189	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.49.75	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.172.183	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701037884 CEST	1.1.1.1	192.168.2.11	0x3048	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.183.110	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701479912 CEST	1.1.1.1	192.168.2.11	0xbbd9	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701479912 CEST	1.1.1.1	192.168.2.11	0xbbd9	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:28.701479912 CEST	1.1.1.1	192.168.2.11	0xbbd9	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:29.480417967 CEST	1.1.1.1	192.168.2.11	0x8101	No error (0)	signin-static-js.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:29.480417967 CEST	1.1.1.1	192.168.2.11	0x8101	No error (0)	clcontent.att.com		144.160.125.207	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:29.485713959 CEST	1.1.1.1	192.168.2.11	0x4dc6	No error (0)	signin-static-js.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:29.613682032 CEST	1.1.1.1	192.168.2.11	0x755	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:29.623987913 CEST	1.1.1.1	192.168.2.11	0x8bb5	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:30.782931089 CEST	1.1.1.1	192.168.2.11	0x7b81	No error (0)	fls.doubleclick.net		216.58.206.70	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:31.762417078 CEST	1.1.1.1	192.168.2.11	0xfb1f	No error (0)	fls.doubleclick.net		142.250.186.166	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:32.895009995 CEST	1.1.1.1	192.168.2.11	0xbe0	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:32.928622007 CEST	1.1.1.1	192.168.2.11	0x258	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:33.660847902 CEST	1.1.1.1	192.168.2.11	0xcd5e	No error (0)	ingest.quantummetric.com		34.70.212.173	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:33.660847902 CEST	1.1.1.1	192.168.2.11	0xcd5e	No error (0)	ingest.quantummetric.com		104.198.247.169	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:33.660847902 CEST	1.1.1.1	192.168.2.11	0xcd5e	No error (0)	ingest.quantummetric.com		34.30.67.48	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:33.660847902 CEST	1.1.1.1	192.168.2.11	0xcd5e	No error (0)	ingest.quantummetric.com		35.193.17.96	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:33.660847902 CEST	1.1.1.1	192.168.2.11	0xcd5e	No error (0)	ingest.quantummetric.com		23.251.152.185	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:33.660847902 CEST	1.1.1.1	192.168.2.11	0xcd5e	No error (0)	ingest.quantummetric.com		34.70.83.251	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:33.660847902 CEST	1.1.1.1	192.168.2.11	0xcd5e	No error (0)	ingest.quantummetric.com		34.136.205.139	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:33.660847902 CEST	1.1.1.1	192.168.2.11	0xcd5e	No error (0)	ingest.quantummetric.com		34.122.199.206	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.389720917 CEST	1.1.1.1	192.168.2.11	0x7124	No error (0)	att-sync.quantummetric.com		34.135.199.11	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.389720917 CEST	1.1.1.1	192.168.2.11	0x7124	No error (0)	att-sync.quantummetric.com		34.170.150.109	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.389720917 CEST	1.1.1.1	192.168.2.11	0x7124	No error (0)	att-sync.quantummetric.com		35.188.81.186	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.389720917 CEST	1.1.1.1	192.168.2.11	0x7124	No error (0)	att-sync.quantummetric.com		35.192.6.162	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.389720917 CEST	1.1.1.1	192.168.2.11	0x7124	No error (0)	att-sync.quantummetric.com		104.197.213.79	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.409502983 CEST	1.1.1.1	192.168.2.11	0x63d1	No error (0)	ingest.quantummetric.com		34.30.67.48	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.409502983 CEST	1.1.1.1	192.168.2.11	0x63d1	No error (0)	ingest.quantummetric.com		34.70.83.251	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.409502983 CEST	1.1.1.1	192.168.2.11	0x63d1	No error (0)	ingest.quantummetric.com		34.70.212.173	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.409502983 CEST	1.1.1.1	192.168.2.11	0x63d1	No error (0)	ingest.quantummetric.com		34.136.205.139	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.409502983 CEST	1.1.1.1	192.168.2.11	0x63d1	No error (0)	ingest.quantummetric.com		23.251.152.185	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.409502983 CEST	1.1.1.1	192.168.2.11	0x63d1	No error (0)	ingest.quantummetric.com		35.193.17.96	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.409502983 CEST	1.1.1.1	192.168.2.11	0x63d1	No error (0)	ingest.quantummetric.com		104.198.247.169	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:34.409502983 CEST	1.1.1.1	192.168.2.11	0x63d1	No error (0)	ingest.quantummetric.com		34.122.199.206	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:35.458240986 CEST	1.1.1.1	192.168.2.11	0xf089	No error (0)	att-sync.quantummetric.com		35.192.6.162	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:35.458240986 CEST	1.1.1.1	192.168.2.11	0xf089	No error (0)	att-sync.quantummetric.com		35.188.81.186	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:35.458240986 CEST	1.1.1.1	192.168.2.11	0xf089	No error (0)	att-sync.quantummetric.com		34.170.150.109	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:35.458240986 CEST	1.1.1.1	192.168.2.11	0xf089	No error (0)	att-sync.quantummetric.com		104.197.213.79	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:35.458240986 CEST	1.1.1.1	192.168.2.11	0xf089	No error (0)	att-sync.quantummetric.com		34.135.199.11	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:35.525477886 CEST	1.1.1.1	192.168.2.11	0x615b	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:35.526523113 CEST	1.1.1.1	192.168.2.11	0xf190	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:36.758727074 CEST	1.1.1.1	192.168.2.11	0xddf8	No error (0)	cdn.quantummetric.com		104.18.10.213	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:36.758727074 CEST	1.1.1.1	192.168.2.11	0xddf8	No error (0)	cdn.quantummetric.com		104.18.11.213	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:36.760929108 CEST	1.1.1.1	192.168.2.11	0x92d9	No error (0)	cdn.quantummetric.com			65	IN (0x0001)	false
Oct 14, 2024 14:20:39.138472080 CEST	1.1.1.1	192.168.2.11	0x7d8b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:39.138472080 CEST	1.1.1.1	192.168.2.11	0x7d8b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 14, 2024 14:20:54.124063969 CEST	1.1.1.1	192.168.2.11	0xff1a	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 14, 2024 14:20:54.124063969 CEST	1.1.1.1	192.168.2.11	0xff1a	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49787	144.160.36.42	80	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 14:20:08.828188896 CEST	422	OUT	GET / HTTP/1.1 Host: att.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 14, 2024 14:20:08.941772938 CEST	124	IN	HTTP/1.0 301 Moved Permanently Location: https://www.att.net/ Server: BigIP Connection: Keep-Alive Content-Length: 0
Oct 14, 2024 14:20:09.170985937 CEST	124	IN	HTTP/1.0 301 Moved Permanently Location: https://www.att.net/ Server: BigIP Connection: Keep-Alive Content-Length: 0
Oct 14, 2024 14:20:53.953078032 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49786	144.160.36.42	80	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 14:20:50.828639030 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49710	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:44 UTC	669	OUT	GET / HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:45 UTC	785	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8d2784fd9d637d0b-EWR CF-Cache-Status: DYNAMIC Cache-Control: private Set-Cookie: is_mobile=0; path=/; domain=att-mail-987654.weebly.com Vary: X-W-SSL,Accept-Encoding,User-Agent X-Host: blu158.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Set-Cookie: language=en; expires=Mon, 28-Oct-2024 12:19:45 GMT; Max-Age=1209600; path=/ Set-Cookie: __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q; path=/; expires=Mon, 14-Oct-24 12:49:45 GMT; domain=.weebly.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 37 63 32 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 20 53 63 72 65 65 6e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 79 20 53 69 74 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f Data Ascii: 7c20<!DOCTYPE html><html lang="en"><head><title>Login Screen</title><meta property="og:site_name" content="" /><meta property="og:title" content="My Site" /><meta property="og:description" content="" /><meta property="og:image" content="https:/
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 65 6e 74 42 79 49 64 28 22 77 65 65 62 6c 79 2d 66 6f 6f 74 65 72 2d 73 69 67 6e 75 70 2d 63 6f 6e 74 61 69 6e 65 72 2d 76 33 22 29 3b 0a 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 6c 65 6d 65 6e 74 29 3b 0a 7d 2c 20 66 61 6c 73 65 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 6c 69 6e 6b 20 69 64 3d 22 77 73 69 74 65 2d 62 61 73 65 2d 73 74 79 6c 65 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 63 73 73 2f 73 69 74 65 73 2e 63 73 73 3f 62 75 69 6c 64 54 69 6d 65 3d 31 37 32 30 38 30 33 33 34 39 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 Data Ascii: entById("weebly-footer-signup-container-v3");element.parentNode.removeChild(element);}, false);</script><link id="wsite-base-style" rel="stylesheet" type="text/css" href="//cdn2.editmysite.com/css/sites.css?buildTime=1720803349" /><link rel="styles
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 70 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 64 69 76 2e 70 61 72 61 67 72 61 70 Data Ascii: form-field label, #wsite-content div.paragraph, #wsite-content p, #wsite-content .product-block .product-title, #wsite-content .product-description, #wsite-content .wsite-form-field label, #wsite-content .wsite-form-field label, .blog-sidebar div.paragrap
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 74 2d 6c 6f 6e 67 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 6c 61 72 67 65 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 73 6d 61 6c 6c 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 68 32 20 7b 7d 0a 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 68 32 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 6c 6f 6e 67 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 6c 61 72 67 65 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e Data Ascii: t-long .product-title, #wsite-content .product-large .product-title, #wsite-content .product-small .product-title, .blog-sidebar h2 {}#wsite-content h2, #wsite-content .product-long .product-title, #wsite-content .product-large .product-title, #wsite-con
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 70 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 20 2e 70 72 6f 64 75 Data Ascii: wsite-elements.wsite-not-footer:not(.wsite-header-elements) .wsite-form-field label, .wsite-elements.wsite-not-footer:not(.wsite-header-elements) .wsite-form-field label, #wsite-content div.paragraph, #wsite-content p, #wsite-content .product-block .produ
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 72 67 65 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 70 72 6f 64 75 63 74 2d 73 6d 61 6c 6c 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 68 32 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 6c 6f 6e 67 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 6c 61 72 67 65 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 73 6d 61 6c 6c 20 2e 70 72 Data Ascii: rge .product-title, .wsite-elements.wsite-not-footer:not(.wsite-header-elements) .product-small .product-title, #wsite-content h2, #wsite-content .product-long .product-title, #wsite-content .product-large .product-title, #wsite-content .product-small .pr
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 6a 71 75 65 72 79 2d 31 2e 38 2e 33 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 6c 61 6e 67 2f 65 6e 2f 73 74 6c 2e 6a 73 3f 62 75 69 6c 64 54 69 6d 65 3d 31 37 32 30 38 30 33 33 34 39 26 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 73 69 74 65 2f 6d 61 69 6e 2e 6a 73 3f 62 75 69 6c 64 54 69 6d 65 Data Ascii: </script><script src='https://cdn2.editmysite.com/js/jquery-1.8.3.min.js'></script><script type="text/javascript" src="//cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1720803349&"></script><script src="//cdn2.editmysite.com/js/site/main.js?buildTime
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 62 6f 6f 74 73 74 72 61 70 5f 6e 61 6d 65 73 70 61 63 65 22 3a 22 5f 57 2e 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 2e 42 61 63 6b 62 6f 6e 65 42 6f 6f 74 73 74 72 61 70 22 2c 22 6d 6f 64 65 6c 73 22 3a 7b 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 22 3a 7b 22 5f 63 6c 61 73 73 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 2e 4d 6f 64 65 6c 2e 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 22 2c 22 64 65 66 61 75 6c 74 73 22 3a 6e 75 6c 6c 2c 22 76 61 6c 69 64 61 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 73 22 3a 6e 75 6c 6c 2c 22 69 64 41 74 74 72 69 62 75 74 65 22 3a 6e 75 6c 6c 2c 22 6b 65 79 64 65 66 73 22 3a 6e 75 6c 6c 7d 7d 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 22 3a 7b 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e Data Ascii: bootstrap_namespace":"_W.CustomerAccounts.BackboneBootstrap","models":{"CustomerAccounts":{"_class":"CustomerAccounts.Model.CustomerAccounts","defaults":null,"validation":null,"types":null,"idAttribute":null,"keydefs":null}},"collections":{"CustomerAccoun
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 5f 57 2e 72 65 63 61 70 74 63 68 61 55 72 6c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 22 3b 20 3c 2f 73 63 72 69 70 74 3e 0a 09 09 0a 09 09 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 70 61 67 65 20 20 77 73 69 74 65 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 20 77 73 69 74 65 2d 70 61 67 65 2d 69 6e 64 65 78 20 68 65 61 64 65 72 2d 73 74 69 63 6b 79 20 62 61 6e 6e 65 72 2d 6f 76 65 72 6c 61 79 2d 6f 6e 20 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 64 69 73 6f 6e 2d Data Ascii: pt type="text/javascript"> _W.recaptchaUrl = "https://www.google.com/recaptcha/api.js"; </script></head><body class="header-page wsite-theme-light wsite-page-index header-sticky banner-overlay-on "><div class="wrapper"> <div class="edison-
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 69 73 5f 63 75 73 74 6f 6d 69 7a 65 64 3a 20 31 3b 22 20 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 69 74 65 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 65 6e 74 22 3e 0a 09 09 09 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 69 74 65 2d 73 65 63 74 69 6f 6e 2d 65 6c 65 6d 65 6e 74 73 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 69 64 3d 22 32 36 37 36 33 39 33 37 34 38 39 32 35 35 34 37 35 31 22 3e 3c 64 69 76 3e 3c 73 74 79 6c 65 20 74 79 70 65 Data Ascii: nd-color: #fff;background-image: none;is_customized: 1;" ><div class="wsite-section-content"> <div class="container"> <div class="banner"><div class="wsite-section-elements"><div id="267639374892554751"><div><style type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49711	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:45 UTC	761	OUT	GET /files/theme/MutationObserver.js HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:45 UTC	927	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:45 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d278500ebb70f89-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"e52201e96af18dd02c85eb627c843491" Last-Modified: Thu, 04 Apr 2024 10:23:36 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: u7nsBhOvuCMLPWMc0rZQ3D0Xz0921jE3G2zCJODRF3nWfNaw+1taZPXF0IOc7CQUroMtyWsRhyw= x-amz-meta-btime: 2023-09-25T13:28:31.439Z x-amz-meta-mtime: 1695648511.439 x-amz-replication-status: COMPLETED x-amz-request-id: 2Z7A4DN2569D80HY x-amz-server-side-encryption: AES256 x-amz-version-id: P7GX41cAL89NqMhfWn_.HhJNYx8OtSku X-Storage-Bucket: z3974 X-Storage-Object: 397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a Server: cloudflare
2024-10-14 12:19:45 UTC	442	IN	Data Raw: 32 37 32 0d 0a 2f 2a 21 0a 20 2a 20 53 68 69 6d 20 66 6f 72 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 69 6e 74 65 72 66 61 63 65 0a 20 2a 20 41 75 74 68 6f 72 3a 20 47 72 61 65 6d 65 20 59 65 61 74 65 73 20 28 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 65 67 61 77 61 63 29 0a 20 2a 20 52 65 70 6f 73 69 74 6f 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 65 67 61 77 61 63 2f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 6a 73 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 57 54 46 50 4c 20 56 32 2c 20 32 30 30 34 20 28 77 74 66 70 6c 2e 6e 65 74 29 2e 0a 20 2a 20 54 68 6f 75 67 68 20 63 72 65 64 69 74 20 61 6e 64 20 73 74 61 72 69 6e 67 20 74 68 65 20 72 65 70 6f 20 77 69 6c 6c 20 6d 61 6b 65 20 6d 65 20 66 65 65 6c 20 70 72 65 Data Ascii: 272/! Shim for MutationObserver interface * Author: Graeme Yeates (github.com/megawac) * Repository: https://github.com/megawac/MutationObserver.js * License: WTFPL V2, 2004 (wtfpl.net). * Though credit and staring the repo will make me feel pre
2024-10-14 12:19:45 UTC	191	IN	Data Raw: 67 69 74 68 75 62 2e 63 6f 6d 2f 57 65 62 4b 69 74 2f 77 65 62 6b 69 74 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 53 6f 75 72 63 65 2f 57 65 62 43 6f 72 65 2f 64 6f 6d 2f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 63 70 70 20 66 6f 72 20 63 75 72 72 65 6e 74 20 77 65 62 6b 69 74 20 73 6f 75 72 63 65 20 63 2b 2b 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 70 72 65 66 69 78 20 62 75 67 73 3a 0a 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 77 65 62 6b 69 74 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 0d 0a Data Ascii: github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp for current webkit source c++ implementation //* * prefix bugs: - https://bugs.webkit.org/show_bug.cgi
2024-10-14 12:19:45 UTC	71	IN	Data Raw: 34 31 0d 0a 3f 69 64 3d 38 35 31 36 31 0a 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 62 75 67 7a 69 6c 6c 61 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 37 34 39 39 0d 0a Data Ascii: 41?id=85161 - https://bugzilla.mozilla.org/show_bug.cgi?id=7499
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 33 36 66 61 0d 0a 32 30 0a 20 2a 20 44 6f 6e 27 74 20 75 73 65 20 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 61 73 20 53 61 66 61 72 69 20 28 36 2e 30 2e 35 2d 36 2e 31 29 20 75 73 65 20 61 20 62 75 67 67 79 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 2a 2f 0a 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 3d 20 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 28 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 66 75 6e 63 74 69 6f 6e 28 41 72 72 61 79 2e 3c 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 3e 2c 20 4d 75 74 61 74 69 6f 6e Data Ascii: 36fa20 * Don't use WebKitMutationObserver as Safari (6.0.5-6.1) use a buggy implementation/window.MutationObserver = window.MutationObserver \|\| (function(undefined) { "use strict"; /* * @param {function(Array.<MutationRecord>, Mutation
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 40 66 69 6e 61 6c 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 73 65 65 20 68 74 74 70 3a 2f 2f 20 64 6f 6d 2e 73 70 65 63 2e 77 68 61 74 77 67 2e 6f 72 67 2f 23 64 6f 6d 2d 6d 75 74 61 74 69 6f 6e 6f 62 73 65 72 76 65 72 2d 6f 62 73 65 72 76 65 0a 20 20 20 20 20 20 20 20 20 2a 20 6e 6f 74 20 67 6f 69 6e 67 20 74 6f 20 74 68 72 6f 77 20 68 65 72 65 20 62 75 74 20 67 6f 69 6e 67 20 74 6f 20 66 6f 6c 6c 6f 77 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 70 65 63 20 63 6f 6e 66 69 67 20 73 65 74 73 0a 20 20 20 20 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4e 6f 64 65 7c 6e 75 6c 6c 7d 20 24 74 61 72 67 65 Data Ascii: @final / MutationObserver.prototype = { /* * see http:// dom.spec.whatwg.org/#dom-mutationobserver-observe * not going to throw here but going to follow the current spec config sets * @param {Node\|null} $targe
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 2e 61 74 74 72 69 62 75 74 65 46 69 6c 74 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 63 6f 6e 76 65 72 74 73 20 74 6f 20 61 20 7b 6b 65 79 3a 20 74 72 75 65 7d 20 64 69 63 74 20 66 6f 72 20 66 61 73 74 65 72 20 6c 6f 6f 6b 75 70 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 40 74 79 70 65 20 7b 4f 62 6a 65 63 74 2e 3c 53 74 72 69 6e 67 2c 42 6f 6f 6c 65 61 6e 3e 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 74 69 6e 67 73 2e 61 66 69 6c 74 65 72 20 3d 20 72 65 64 75 63 65 28 63 6f 6e 66 69 67 2e 61 74 74 72 69 62 75 74 65 46 69 6c 74 65 72 2c 20 66 75 6e 63 Data Ascii: config.attributeFilter) { /** * converts to a {key: true} dict for faster lookup * @type {Object.<String,Boolean>} */ settings.afilter = reduce(config.attributeFilter, func
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 20 20 2f 2a 2a 20 40 70 72 69 76 61 74 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 53 69 6d 70 6c 65 20 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 20 70 73 65 75 64 6f 63 6c 61 73 73 2e 20 4e 6f 20 6c 6f 6e 67 65 72 20 65 78 70 6f 73 69 6e 67 20 61 73 20 69 74 73 20 6e 6f 74 20 66 75 6c 6c 79 20 63 6f 6d 70 6c 69 61 6e 74 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 64 61 74 61 0a 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 4f 62 6a 65 63 74 7d 20 61 20 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e Data Ascii: /** @private / this._timeout = null; } }; /* * Simple MutationRecord pseudoclass. No longer exposing as its not fully compliant * @param {Object} data * @return {Object} a MutationRecord */ function
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 76 61 72 20 6f 6c 65 6e 20 3d 20 6d 75 74 61 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 2c 20 64 69 72 74 79 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 6c 72 69 67 68 74 20 77 65 20 63 68 65 63 6b 20 62 61 73 65 20 6c 65 76 65 6c 20 63 68 61 6e 67 65 73 20 69 6e 20 61 74 74 72 69 62 75 74 65 73 2e 2e 2e 20 65 61 73 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 66 69 67 2e 61 74 74 72 20 26 26 20 24 6f 6c 64 73 74 61 74 65 2e 61 74 74 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6e 64 41 74 74 72 69 62 75 74 65 4d 75 74 61 74 69 6f 6e 73 28 6d 75 74 61 74 69 6f 6e 73 2c 20 24 74 61 72 67 65 74 2c 20 24 6f 6c 64 73 74 61 74 65 2e 61 74 74 72 2c 20 63 6f 6e 66 69 67 2e 61 66 69 6c 74 65 72 Data Ascii: var olen = mutations.length, dirty; // Alright we check base level changes in attributes... easy if (config.attr && $oldstate.attr) { findAttributeMutations(mutations, $target, $oldstate.attr, config.afilter
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 6f 6d 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 49 45 3c 39 20 77 69 74 68 20 61 20 63 75 73 74 6f 6d 20 2e 74 6f 53 74 72 69 6e 67 28 29 20 6d 65 74 68 6f 64 2e 20 54 68 69 73 20 69 73 0a 20 20 20 20 20 20 20 20 2f 2f 20 6a 75 73 74 20 61 20 77 61 72 6e 69 6e 67 20 61 6e 64 20 64 6f 65 73 6e 27 74 20 61 66 66 65 63 74 20 65 78 65 63 75 74 69 6f 6e 20 28 73 65 65 20 23 32 31 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 74 74 72 2e 76 61 6c 75 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 47 65 74 73 20 61 6e 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 20 77 69 74 68 20 73 70 65 63 69 61 6c 20 68 61 63 6b 20 66 6f 72 20 73 74 79 6c 65 20 61 74 74 72 69 62 75 74 65 20 28 73 65 65 20 23 34 29 0a 20 20 20 20 20 2a 0a Data Ascii: om attribute in IE<9 with a custom .toString() method. This is // just a warning and doesn't affect execution (see #21) return attr.value; } /** * Gets an attribute value with special hack for style attribute (see #4) *
2024-10-14 12:19:45 UTC	1369	IN	Data Raw: 65 72 2c 20 6e 61 6d 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 28 24 74 61 72 67 65 74 2c 20 61 74 74 72 29 20 21 3d 3d 20 24 6f 6c 64 73 74 61 74 65 5b 6e 61 6d 65 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 65 20 70 75 73 68 69 6e 67 20 69 73 20 72 65 64 75 6e 64 61 6e 74 20 62 75 74 20 67 7a 69 70 73 20 76 65 72 79 20 6e 69 63 65 6c 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 75 74 61 74 69 6f 6e 73 2e 70 75 73 68 28 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 22 61 74 74 72 69 62 75 74 65 73 22 2c 0a Data Ascii: er, name)) { if (getAttributeValue($target, attr) !== $oldstate[name]) { // The pushing is redundant but gzips very nicely mutations.push(MutationRecord({ type: "attributes",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	49715	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:45 UTC	775	OUT	GET /files/main_style.css?1720804667 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:46 UTC	421	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:46 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close CF-Ray: 8d27850409e27cb4-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: grn62.sf2p.intern.weebly.net Server: cloudflare
2024-10-14 12:19:46 UTC	948	IN	Data Raw: 34 39 63 64 0d 0a 75 6c 2c 20 6f 6c 2c 20 6c 69 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 66 6f 72 6d 2c 20 62 6f 64 79 2c 20 68 74 6d 6c 2c 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 66 69 65 6c 64 73 65 74 2c 20 69 6e 70 75 74 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 75 6c 2c 20 6f 6c 2c 20 6c 69 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 66 6f 72 6d 2c 20 62 6f 64 79 2c 20 68 74 6d 6c 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 66 69 65 6c 64 73 65 74 2c 20 69 6e 70 75 74 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 20 69 6e Data Ascii: 49cdul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, div.paragraph, blockquote, fieldset, input { margin: 0; padding: 0; }ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, p, blockquote, fieldset, input { margin: 0; padding: 0; } in
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 23 77 73 69 74 65 2d 73 65 61 72 63 68 2d 73 69 64 65 62 61 72 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 20 2e 77 73 69 74 65 2d Data Ascii: kbox input[type=checkbox], .wsite-com-product-option-groups input[type="radio"], .wsite-com-product-option-groups input[type="checkbox"], .wsite-com-product-option-groups #wsite-search-sidebar .wsite-search-facet-availability input[type=checkbox], .wsite-
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 74 6f 70 3a 20 31 70 78 3b 20 6c 65 66 74 3a 20 34 70 78 3b 20 77 69 64 74 68 3a 20 35 70 78 3b 20 68 65 69 67 68 74 3a 20 39 70 78 3b 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 23 33 33 37 65 66 39 3b 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 32 70 78 20 32 70 78 20 30 3b 20 7d 0a 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 3a 63 68 65 63 6b 65 64 3a 61 66 Data Ascii: -ms-transform: rotate(45deg); -o-transform: rotate(45deg); transform: rotate(45deg); position: relative; top: 1px; left: 4px; width: 5px; height: 9px; border: solid #337ef9; border-width: 0 2px 2px 0; } .wsite-form-field input[type="checkbox"]:checked:af
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 20 65 61 73 65 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 63 6f 6c 6f 72 20 33 30 30 6d 73 20 65 61 73 65 3b 20 7d 0a 20 61 3a 68 6f 76 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 33 33 37 65 66 39 3b 20 7d 0a 20 61 20 69 6d 67 20 7b 20 62 6f 72 64 65 72 3a 20 30 3b 20 7d 0a 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4b 61 72 6c 61 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 33 66 33 66 33 66 3b 20 7d 0a 20 68 32 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 20 7d 0a 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 2e 70 61 72 61 67 72 61 70 68 20 7b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e Data Ascii: ease; transition: color 300ms ease; } a:hover { color: #337ef9; } a img { border: 0; } h1, h2, h3, h4, h5, h6 { font-family: 'Karla', sans-serif; font-weight: 700; color: #3f3f3f; } h2 { font-size: 20px; } div.paragraph, .paragraph { line-height: 1.
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 61 70 20 61 3a 68 6f 76 65 72 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 35 3b 20 7d 0a 20 2e 66 6f 6f 74 65 72 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 6c 61 62 65 6c 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 7d 0a 20 2e 66 6f 6f 74 65 72 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 69 74 65 6d 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 7d 0a 20 62 6f 64 79 2e 68 65 61 64 65 72 2d 73 74 69 63 6b 79 2c 20 62 6f 64 79 2e 68 65 61 64 65 72 2d 73 74 69 63 6b 79 2d 75 70 20 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 30 70 78 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 70 61 Data Ascii: ap a:hover { opacity: 0.75; } .footer-wrap .wsite-form-label { color: #ffffff; } .footer-wrap .wsite-social .wsite-social-item { color: #ffffff; } body.header-sticky, body.header-sticky-up { padding-top: 50px; } .edison-header { -webkit-transition: pa
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 2d 69 6e 6e 65 72 2d 77 72 61 70 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 20 30 2e 33 73 3b 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 20 30 2e 33 73 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 20 30 2e 33 73 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 7d 0a 20 Data Ascii: e !important; } .edison-header .container { height: 100%; } .edison-header .header-inner-wrap { -webkit-transition: opacity 0.6s ease-in 0.3s; -o-transition: opacity 0.6s ease-in 0.3s; transition: opacity 0.6s ease-in 0.3s; height: 100%; opacity: 0; }
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 77 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 34 36 70 78 3b 20 7d 0a 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 2c 28 68 6f 76 65 72 3a 20 6e 6f 6e 65 29 20 7b 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 77 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 20 7b 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 3b 20 7d 0a 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 77 73 69 74 65 Data Ascii: lay: none; } .edison-header .wsite-logo img { display: block; overflow: hidden; max-width: 100%; max-height: 46px; } @media only screen and (max-width: 1024px),(hover: none) { .edison-header .wsite-logo img { padding: 5px 0; } } .edison-header .wsite
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 7d 0a 20 2e 6e 61 76 2d 6f 70 65 6e 20 2e 68 61 6d 62 75 72 67 65 72 20 69 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0a 20 2e 68 61 6d 62 75 72 67 65 72 20 69 3a 3a 62 65 66 6f 72 65 2c 20 2e 68 61 6d 62 75 72 67 65 72 20 69 3a 3a 61 66 74 65 72 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b Data Ascii: ransition: background-color 0.2s ease-out; -o-transition: background-color 0.2s ease-out; transition: background-color 0.2s ease-out; } .nav-open .hamburger i { background-color: transparent; } .hamburger i::before, .hamburger i::after { display: block;
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 36 70 78 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 2e 68 61 73 2d 73 69 74 65 2d 73 65 61 72 63 68 20 2e 73 65 61 72 63 68 2d 74 6f 67 67 6c 65 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 23 77 73 69 74 65 2d 73 65 61 72 63 68 2d 73 69 64 65 62 61 72 20 2e 63 6c 6f 73 65 2d 62 74 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 77 72 61 70 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 2e 77 Data Ascii: 6px; text-decoration: none; text-align: center; } .has-site-search .search-toggle { display: inline-block; } #wsite-search-sidebar .close-btn { display: none; } .wsite-search-wrap { text-align: center; } @media only screen and (min-width: 768px) { .w
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 73 65 61 72 63 68 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 66 6f 63 75 73 20 7b 20 62 6f 72 64 65 72 3a 20 30 3b 20 7d 0a 20 7d 0a 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 62 6f 64 79 2e 77 73 69 74 65 2d 65 64 69 74 6f 72 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 20 7b 20 77 69 64 74 68 3a 20 37 35 70 78 3b 20 7d 0a 20 62 6f 64 79 2e 77 73 69 74 65 2d 65 64 69 74 6f 72 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 20 6f 70 61 63 69 74 79 3a Data Ascii: search-wrap .wsite-search-input:focus { border: 0; } } .wsite-search-wrap .wsite-search-button { display: none; } body.wsite-editor .wsite-search-input { width: 75px; } body.wsite-editor .wsite-search-input::-moz-placeholder { color: #666666; opacity:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	49714	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:45 UTC	767	OUT	GET /files/templateArtifacts.js?1720804667 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:46 UTC	438	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:46 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d2785040d55c33a-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: blu147.sf2p.intern.weebly.net Server: cloudflare
2024-10-14 12:19:46 UTC	931	IN	Data Raw: 31 62 66 38 0d 0a 2f 2f 20 47 65 74 73 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 5f 57 0a 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 57 65 65 62 6c 79 2e 74 65 6d 70 6c 61 74 65 73 20 3d 20 7b 0a 09 09 27 73 65 61 72 63 68 2f 66 69 6c 74 65 72 2f 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 20 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 66 61 63 65 74 5f 6e 61 6d 65 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 7b 7b 63 6f 6c 75 6d 6e 5f 6e 61 6d 65 7d 7d 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 Data Ascii: 1bf8// Gets converted to _WWeebly = window.Weebly \|\| {};Weebly.templates = {'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul clas
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 6e 61 6d 65 3d 5c 22 7b 7b 66 69 6c 74 65 72 5f 74 65 78 74 7d 7d 5c 22 20 76 61 6c 75 65 3d 5c 22 31 5c 22 20 5c 2f 3e 3c 21 2d 2d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 7b 7b 21 20 43 6f 6d 6d 65 6e 74 69 6e 67 20 27 68 61 63 6b 27 20 74 6f 20 72 65 6d 6f 76 65 20 73 70 61 63 65 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 2d 2d 3e 3c 61 3e 20 7b 7b 21 20 54 68 65 73 65 20 61 72 65 6e 27 74 20 72 65 61 6c 20 6c 69 6e 6b 73 2c 20 75 73 65 64 20 74 6f 20 75 73 65 20 74 68 65 6d 65 20 63 6f 6c 6f 72 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 Data Ascii: t\t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{filter_text}}\" value=\"1\" \/>...\n\t\t\t\t\t\t{{! Commenting 'hack' to remove spaces }}\n\t\t\t\t\t\t--><a> {{! These aren't real links, used to use theme colors }}\n\t\t\t\t\t\t
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 63 6f 72 65 2e 73 65 61 72 63 68 2e 66 69 6c 74 65 72 2e 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 61 63 65 74 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 65 6e 74 72 69 65 73 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 Data Ascii: et-availability\">\n\t<h3>{{#stl}}templates.platform.theme.core.search.filter.search-facet-availability_1{{\/stl}}<\/h3>\n\t<form name=\"availability-facet\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t<li>\n\t\t\t\t<label>\n\t\t\t\t\t<input ty
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 70 72 6f 64 75 63 74 2d 67 72 6f 75 70 7d 7d 5c 6e 7b 7b 5c 2f 68 61 73 5f 70 72 6f 64 75 63 74 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 6e 6f 72 6d 61 6c 7d 7d 5c 6e 7b 7b 5c 2f 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 6d 70 74 79 7d 7d 5c 6e 7b 7b 5c 2f 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 65 72 72 6f 72 5f 72 65 73 75 6c 74 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 72 72 6f 72 7d 7d 5c 6e 7b Data Ascii: rch\/results\/product-group}}\n{{\/has_product_results}}\n\n{{#page_results}}\n\t{{> search\/results\/normal}}\n{{\/page_results}}\n\n{{#no_results}}\n\t{{> search\/results\/empty}}\n{{\/no_results}}\n\n{{#error_result}}\n\t{{> search\/results\/error}}\n{
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 5c 22 3e 5c 6e 5c 74 5c 74 7b 7b 23 68 69 67 68 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 6c 6f 77 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 79 5f 68 74 6d 6c 7d 7d 7d 7b 7b 6c 6f 77 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 5c 2f 73 70 61 6e 3e 5c 6e 5c 74 5c 74 5c 74 20 2d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 68 69 67 68 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e Data Ascii: earch-product-price\">\n\t\t{{#high_price_number}}\n\t\t\t<span class=\"wsite-search-product-price-low\">\n\t\t\t\t{{{currency_html}}}{{low_price_number}}\n\t\t\t<\/span>\n\t\t\t -\n\t\t\t<span class=\"wsite-search-product-price-high\">\n\t\t\t\t{{{curren
2024-10-14 12:19:46 UTC	761	IN	Data Raw: 72 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 6e 6f 2d 72 65 73 75 6c 74 73 5c 22 3e 5c 6e 5c 74 3c 70 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 62 61 73 65 2e 73 65 61 72 63 68 2e 72 65 73 75 6c 74 73 2e 65 72 72 6f 72 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 70 3e 5c 6e 3c 5c 2f 6c 69 3e 5c 6e 22 2c 0a 09 09 27 73 65 61 72 63 68 2f 63 6f 72 65 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 73 74 27 3a 20 22 3c 6f 6c 20 69 64 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 61 67 65 6e 61 76 5c 22 3e 5c 6e 5c 74 7b 7b 23 70 61 67 69 6e 61 74 69 6f 6e 5f 69 74 65 6d 73 7d 7d 5c 6e 5c 74 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 70 61 67 69 6e 61 74 69 6f 6e 2d 69 74 65 6d 7d 7d 5c 6e 5c Data Ascii: ror': "<li class=\"no-results\">\n\t<p>{{#stl}}templates.platform.theme.base.search.results.error_1{{\/stl}}<\/p>\n<\/li>\n",'search/core-pagination-list': "<ol id=\"wsite-search-pagenav\">\n\t{{#pagination_items}}\n\t\t{{> search\/pagination-item}}\n\
2024-10-14 12:19:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.11	49722	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:45 UTC	577	OUT	GET /css/sites.css?buildTime=1720803349 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:46 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 210892 Server: nginx Content-Type: text/css Last-Modified: Mon, 07 Oct 2024 20:09:20 GMT ETag: "67043ff0-337cc" Expires: Tue, 22 Oct 2024 10:41:54 GMT Cache-Control: max-age=1209600 X-Host: blu11.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 524271 Date: Mon, 14 Oct 2024 12:19:45 GMT X-Served-By: cache-sjc1000143-SJC, cache-ewr-kewr1740067-EWR X-Cache: HIT, MISS X-Cache-Hits: 10, 0 X-Timer: S1728908386.927819,VS0,VE72 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 2f 2a 21 20 52 65 66 6c 65 78 20 76 31 2e 35 2e 30 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 65 65 6a 6f 72 64 61 6e 2f 72 65 66 6c 65 78 20 2a 2f 2e 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7a 6f 6f 6d 3a 31 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 70 61 64 64 69 6e 67 Data Ascii: @keyframes spin{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}/! Reflex v1.5.0 - https://github.com/leejordan/reflex /.grid{display:inline-block;display:-ms-flexbox;display:flex;*display:inline;zoom:1;-ms-flex-wrap:wrap;flex-wrap:wrap;padding
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 35 38 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 36 7b 77 69 64 74 68 3a 35 30 25 3b 2a 77 69 64 74 68 3a 34 39 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 34 31 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 33 33 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 33 7b 77 69 64 74 68 3a 32 35 25 3b 2a 77 69 64 74 68 3a 32 34 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 31 36 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 31 7b Data Ascii: idth:58.33333%;width:58.23333%}.grid__col-6{width:50%;width:49.9%}.grid__col-5{width:41.66667%;width:41.56667%}.grid__col-4{width:33.33333%;width:33.23333%}.grid__col-3{width:25%;width:24.9%}.grid__col-2{width:16.66667%;width:16.56667%}.grid__col-1{
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 74 68 3a 31 36 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 73 6d 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 38 2e 32 33 33 33 33 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 65 6d 29 7b 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 2a 77 69 64 74 68 3a 39 39 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 39 31 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 38 33 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 39 7b 77 69 64 74 68 3a 37 35 25 3b 2a 77 Data Ascii: th:16.56667%}.grid__col-sm-1{width:8.33333%;width:8.23333%}}@media (min-width: 64em){.grid__col-md-12{width:100%;width:99.9%}.grid__col-md-11{width:91.66667%;width:91.56667%}.grid__col-md-10{width:83.33333%;width:83.23333%}.grid__col-md-9{width:75%;*w
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 39 7b 77 69 64 74 68 3a 37 35 25 3b 2a 77 69 64 74 68 3a 37 34 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 36 36 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 35 38 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 36 7b 77 69 64 74 68 3a 35 30 25 3b 2a 77 69 64 74 68 3a 34 39 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 34 31 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 34 7b 77 69 64 Data Ascii: 333%}.grid__col-xlg-9{width:75%;width:74.9%}.grid__col-xlg-8{width:66.66667%;width:66.56667%}.grid__col-xlg-7{width:58.33333%;width:58.23333%}.grid__col-xlg-6{width:50%;width:49.9%}.grid__col-xlg-5{width:41.66667%;*width:41.56667%}.grid__col-xlg-4{wid
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 35 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 65 72 3a 35 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d Data Ascii: 5{-ms-flex-order:5;order:5}.grid--order-4{-ms-flex-order:4;order:4}.grid--order-3{-ms-flex-order:3;order:3}.grid--order-2{-ms-flex-order:2;order:2}.grid--order-1{-ms-flex-order:1;order:1}.grid--order-0{-ms-flex-order:0;order:0}@media only screen and (min-
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 30 2d 73 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 65 6d 29 7b 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 32 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 32 3b 6f 72 64 65 72 3a 31 32 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 31 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 31 3b 6f 72 64 65 72 3a 31 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 30 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 30 3b 6f 72 64 65 72 3a 31 30 7d 2e 67 72 69 64 2d Data Ascii: {-ms-flex-order:1;order:1}.grid--order-0-sm{-ms-flex-order:0;order:0}}@media only screen and (min-width: 64em){.grid--order-12-md{-ms-flex-order:12;order:12}.grid--order-11-md{-ms-flex-order:11;order:11}.grid--order-10-md{-ms-flex-order:10;order:10}.grid-
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 31 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 31 3b 6f 72 64 65 72 3a 31 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 30 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 30 3b 6f 72 64 65 72 3a 31 30 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 39 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 39 3b 6f 72 64 65 72 3a 39 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 38 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 38 3b 6f 72 64 65 72 3a 38 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 37 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 36 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d Data Ascii: }.grid--order-11-xlg{-ms-flex-order:11;order:11}.grid--order-10-xlg{-ms-flex-order:10;order:10}.grid--order-9-xlg{-ms-flex-order:9;order:9}.grid--order-8-xlg{-ms-flex-order:8;order:8}.grid--order-7-xlg{-ms-flex-order:7;order:7}.grid--order-6-xlg{-ms-flex-
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 64 2d 2d 61 6c 69 67 6e 2d 62 61 73 65 6c 69 6e 65 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 62 61 73 65 6c 69 6e 65 7d 2e 67 72 69 64 2d 2d 61 6c 69 67 6e 2d 62 61 73 65 6c 69 6e 65 20 5b 63 6c 61 73 73 2a 3d 22 67 72 69 64 5f 5f 63 6f 6c 2d 22 5d 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 2e 67 72 69 64 2d 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 67 72 69 64 2d 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 65 6e 64 Data Ascii: d--align-baseline{-ms-flex-align:baseline;align-items:baseline}.grid--align-baseline [class*="grid__col-"]{vertical-align:baseline}.grid--align-content-start{-ms-flex-line-pack:start;align-content:flex-start}.grid--align-content-end{-ms-flex-line-pack:end
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 69 74 69 61 6c 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 6c 65 66 74 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 73 74 61 72 74 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 69 6e 69 74 69 61 6c 7d 2e 67 72 69 64 2d 2d 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 67 72 69 64 2d 2d 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 2e 67 72 69 64 5f 5f 63 65 6c 6c 2c 2e 67 72 69 64 2d 2d 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 5b 63 6c 61 Data Ascii: t;text-align:initial;text-align-last:left;text-align-last:start;text-align-last:initial}.grid--justify-center{text-align:center;text-align-last:center;-ms-flex-pack:center;justify-content:center}.grid--justify-center .grid__cell,.grid--justify-center [cla
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 65 6d 7d 2e 67 72 69 64 5f 5f 63 65 6c 6c 2d 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 69 64 5f 5f 63 65 6c 6c 2d 66 6f 6f 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7a Data Ascii: em}.grid__cell-img{display:block;display:-ms-flexbox;display:flex;-ms-flex:0 0 auto;flex:0 0 auto;margin-left:0;margin-right:0;max-width:100%;width:100%;height:auto}.grid__cell-footer{display:inline-block;display:-ms-flexbox;display:flex;*display:inline;z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.11	49718	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:45 UTC	574	OUT	GET /css/old/fancybox.css?1720803349 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:46 UTC	649	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3911 Server: nginx Content-Type: text/css Last-Modified: Thu, 10 Oct 2024 19:21:52 GMT ETag: "67082950-f47" Expires: Fri, 25 Oct 2024 00:57:01 GMT Cache-Control: max-age=1209600 X-Host: grn141.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 300164 Date: Mon, 14 Oct 2024 12:19:45 GMT X-Served-By: cache-sjc1000144-SJC, cache-ewr-kewr1740044-EWR X-Cache: HIT, MISS X-Cache-Hits: 4, 0 X-Timer: S1728908386.927878,VS0,VE69 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 2f 2a 21 20 66 61 6e 63 79 42 6f 78 20 76 32 2e 31 2e 30 20 66 61 6e 63 79 61 70 70 73 2e 63 6f 6d 20 7c 20 66 61 6e 63 79 61 70 70 73 2e 63 6f 6d 2f 66 61 6e 63 79 62 6f 78 2f 23 6c 69 63 65 6e 73 65 20 2a 2f 2e 66 61 6e 63 79 62 6f 78 2d 77 72 61 70 2c 2e 66 61 6e 63 79 62 6f 78 2d 73 6b 69 6e 2c 2e 66 61 6e 63 79 62 6f 78 2d 6f 75 74 65 72 2c 2e 66 61 6e 63 79 62 6f 78 2d 69 6e 6e 65 72 2c 2e 66 61 6e 63 79 62 6f 78 2d 69 6d 61 67 65 2c 2e 66 61 6e 63 79 62 6f 78 2d 77 72 61 70 20 69 66 72 61 6d 65 2c 2e 66 61 6e 63 79 62 6f 78 2d 77 72 61 70 20 6f 62 6a 65 63 74 2c 2e 66 61 6e 63 79 62 6f 78 2d 6e 61 76 2c 2e 66 61 6e 63 79 62 6f 78 2d 6e 61 76 20 73 70 61 6e 2c 2e 66 61 6e 63 79 62 6f 78 2d 74 6d 70 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e Data Ascii: /! fancyBox v2.1.0 fancyapps.com \| fancyapps.com/fancybox/#license /.fancybox-wrap,.fancybox-skin,.fancybox-outer,.fancybox-inner,.fancybox-image,.fancybox-wrap iframe,.fancybox-wrap object,.fancybox-nav,.fancybox-nav span,.fancybox-tmp{padding:0;margin
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 61 6e 63 79 62 6f 78 2d 63 6c 6f 73 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 2d 31 38 70 78 3b 74 6f 70 3a 2d 31 38 70 78 3b 77 69 64 74 68 3a 33 36 70 78 3b 7a 2d 69 6e 64 65 78 3a 38 30 34 30 7d 2e 66 61 6e 63 79 62 6f 78 2d 6e 61 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 34 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 Data Ascii: ancybox-close{background-color:transparent !important;cursor:pointer;height:36px;position:absolute;right:-18px;top:-18px;width:36px;z-index:8040}.fancybox-nav{position:absolute;top:0;width:40%;height:100%;cursor:pointer;text-decoration:none;background:tra
2024-10-14 12:19:46 UTC	1155	IN	Data Raw: 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 38 30 35 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 6e 63 79 62 6f 78 2d 74 69 74 6c 65 2d 66 6c 6f 61 74 2d 77 72 61 70 20 2e 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 23 32 32 32 3b 63 Data Ascii: tom:0;right:50%;margin-bottom:-35px;z-index:8050;text-align:center}.fancybox-title-float-wrap .child{display:inline-block;margin-right:-100%;padding:2px 20px;background:transparent;background:rgba(0,0,0,0.8);border-radius:15px;text-shadow:0 1px 2px #222;c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.11	49717	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:45 UTC	584	OUT	GET /css/social-icons.css?buildtime=1720803349 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:46 UTC	649	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13081 Server: nginx Content-Type: text/css Last-Modified: Mon, 30 Sep 2024 20:38:33 GMT ETag: "66fb0c49-3319" Expires: Tue, 15 Oct 2024 12:29:44 GMT Cache-Control: max-age=1209600 X-Host: grn94.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1122601 Date: Mon, 14 Oct 2024 12:19:46 GMT X-Served-By: cache-sjc10071-SJC, cache-ewr-kewr1740037-EWR X-Cache: HIT, MISS X-Cache-Hits: 8, 0 X-Timer: S1728908386.927887,VS0,VE73 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 77 73 6f 63 69 61 6c 22 3b 73 72 63 3a 75 72 6c 28 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 77 53 6f 63 69 61 6c 2f 77 73 6f 63 69 61 6c 2e 65 6f 74 3f 74 73 3d 31 37 32 37 37 32 38 37 31 33 39 36 33 29 3b 73 72 63 3a 75 72 6c 28 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 77 53 6f 63 69 61 6c 2f 77 73 6f 63 69 61 6c 2e 65 6f 74 3f 74 73 3d 31 37 32 37 37 32 38 37 31 33 39 36 33 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 77 53 6f 63 69 61 6c 2f Data Ascii: @font-face{font-family:"wsocial";src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1727728713963);src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1727728713963#iefix) format("embedded-opentype"),url(//cdn2.editmysite.com/fonts/wSocial/
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 3a 22 5c 65 36 30 30 22 7d 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 30 22 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 30 22 3b 63 6f 6c 6f 72 3a 23 33 62 35 39 39 38 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 62 35 Data Ascii: :"\e600"}.wsite-com-product-social-facebook:before{content:"\e600"}.wsite-social-color .wsite-social-facebook:before{content:"\e600";color:#3b5998}.wsite-social-square .wsite-social-facebook,.wsite-social-square.wsite-social-facebook{background-color:#3b5
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 3a 22 5c 65 36 30 38 22 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 38 22 3b 63 6f 6c 6f 72 3a 23 30 30 36 33 64 63 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 33 64 63 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 3a 61 66 74 65 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 Data Ascii: :"\e608"}.wsite-social-color .wsite-social-flickr:before{content:"\e608";color:#0063dc}.wsite-social-square .wsite-social-flickr,.wsite-social-square.wsite-social-flickr{background-color:#0063dc}.wsite-social-square .wsite-social-flickr:after,.wsite-socia
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 65 64 69 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 38 38 61 62 65 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 65 64 69 6e 3a 61 66 74 65 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 65 64 69 6e 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 32 22 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 70 69 6e 74 65 72 65 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 39 22 7d 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 Data Ascii: wsite-social-square.wsite-social-linkedin{background-color:#388abe}.wsite-social-square .wsite-social-linkedin:after,.wsite-social-square.wsite-social-linkedin:after{content:"\e602";color:#ffffff}.wsite-social-pinterest:before{content:"\e609"}.wsite-com-p
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 2d 73 6f 63 69 61 6c 2d 74 75 6d 62 6c 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 30 22 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 7d 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 3b 63 6f 6c 6f 72 3a 23 30 30 61 63 65 64 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 Data Ascii: -social-tumblr:after{content:"\e610";color:#ffffff}.wsite-social-twitter:before{content:"\e601"}.wsite-com-product-social-twitter:before{content:"\e601"}.wsite-social-color .wsite-social-twitter:before{content:"\e601";color:#00aced}.wsite-social-square .w
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 36 22 3b 63 6f 6c 6f 72 3a 23 62 33 31 32 31 37 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 33 31 32 31 37 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 3a 61 66 74 65 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 Data Ascii: }.wsite-social-color .wsite-social-youtube:before{content:"\e606";color:#b31217}.wsite-social-square .wsite-social-youtube,.wsite-social-square.wsite-social-youtube{background-color:#b31217}.wsite-social-square .wsite-social-youtube:after,.wsite-social-sq
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 61 66 74 65 72 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f Data Ascii: social-sharing .wsite-com-product-social-facebook:before,#wsite-com-product-social-sharing .wsite-com-product-social-facebook:after,#wsite-com-product-social-sharing .wsite-com-product-social-twitter:before,#wsite-com-product-social-sharing .wsite-com-pro
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 Data Ascii: display:inline-block;text-indent:-9999px;position:relative;width:24px;height:24px}#wsite-com-product-social-sharing .wsite-com-product-social-facebook:before,#wsite-com-product-social-sharing .wsite-com-product-social-twitter:before,#wsite-com-product-soc
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 70 6c 75 73 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 34 22 7d 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 70 6c 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 69 6e 73 74 61 67 72 61 6d 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 69 6e 73 74 61 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 37 22 7d Data Ascii: e:none}.social-plus .social-label:before,.social-dropdown-item.social-plus:before{content:"\e604"}.social-dropdown-item.social-plus{background-image:none}.social-instagram .social-label:before,.social-dropdown-item.social-instagram:before{content:"\e607"}
2024-10-14 12:19:46 UTC	679	IN	Data Raw: 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 36 22 7d 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 62 61 64 67 65 2d 69 74 65 6d 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 62 61 64 67 65 2d 69 74 65 6d 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c Data Ascii: -image:none}.social-youtube .social-label:before,.social-dropdown-item.social-youtube:before{content:"\e606"}.social-dropdown-item.social-youtube{background-image:none}.social-badge-item .social-label{background-image:none}.social-badge-item .social-label

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.11	49721	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:45 UTC	565	OUT	GET /fonts/Karla/font.css?2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:45 UTC	645	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1710 Server: nginx Content-Type: text/css Last-Modified: Fri, 27 Sep 2024 14:31:36 GMT ETag: "66f6c1c8-6ae" Expires: Mon, 14 Oct 2024 16:41:48 GMT Cache-Control: max-age=1209600 X-Host: grn58.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1193877 Date: Mon, 14 Oct 2024 12:19:45 GMT X-Served-By: cache-sjc10062-SJC, cache-ewr-kewr1740046-EWR X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1728908386.928071,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:45 UTC	1378	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4b 61 72 6c 61 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: @font-face { font-family: 'Karla'; font-style: normal; font-weight: 400; src: url('./regular.eot'); /* IE9 Compat Modes / src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 */ url('./regular.woff2') format('woff2')
2024-10-14 12:19:45 UTC	332	IN	Data Raw: 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 2f 2a 20 53 75 70 65 72 20 4d 6f 64 65 72 6e 20 42 72 6f 77 73 65 72 73 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 2f 2a 20 4d 6f 64 65 72 6e 20 42 72 6f 77 73 65 72 73 20 2a 2f 0a 20 20 Data Ascii: /* IE9 Compat Modes / src: url('./bolditalic.eot?#iefix') format('embedded-opentype'), / IE6-IE8 / url('./bolditalic.woff2') format('woff2'), / Super Modern Browsers / url('./bolditalic.woff') format('woff'), / Modern Browsers */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.11	49720	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:45 UTC	571	OUT	GET /fonts/Roboto_Mono/font.css?2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:45 UTC	646	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1735 Server: nginx Content-Type: text/css Last-Modified: Tue, 01 Oct 2024 14:31:41 GMT ETag: "66fc07cd-6c7" Expires: Tue, 15 Oct 2024 16:23:51 GMT Cache-Control: max-age=1209600 X-Host: grn61.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1108554 Date: Mon, 14 Oct 2024 12:19:45 GMT X-Served-By: cache-sjc10030-SJC, cache-ewr-kewr1740021-EWR X-Cache: HIT, HIT X-Cache-Hits: 10, 0 X-Timer: S1728908386.928130,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:45 UTC	1378	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 20 4d 6f 6e 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 Data Ascii: @font-face { font-family: 'Roboto Mono'; font-style: normal; font-weight: 400; src: url('./regular.eot'); /* IE9 Compat Modes / src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 */ url('./regular.woff2') format('w
2024-10-14 12:19:45 UTC	357	IN	Data Raw: 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 2f 2a 20 53 75 70 65 72 20 4d 6f 64 65 72 6e 20 42 72 6f 77 73 65 72 73 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 Data Ascii: url('./bolditalic.eot'); /* IE9 Compat Modes / src: url('./bolditalic.eot?#iefix') format('embedded-opentype'), / IE6-IE8 / url('./bolditalic.woff2') format('woff2'), / Super Modern Browsers */ url('./bolditalic.woff') format('woff'),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.11	49719	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:45 UTC	566	OUT	GET /fonts/Oswald/font.css?2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:45 UTC	648	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1264 Server: nginx Content-Type: text/css Last-Modified: Mon, 30 Sep 2024 17:03:50 GMT ETag: "66fad9f6-4f0" Expires: Tue, 15 Oct 2024 13:55:49 GMT Cache-Control: max-age=1209600 X-Host: blu186.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1117436 Date: Mon, 14 Oct 2024 12:19:45 GMT X-Served-By: cache-sjc1000114-SJC, cache-nyc-kteb1890065-NYC X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1728908386.928552,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:45 UTC	1264	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 73 77 61 6c 64 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 6c 69 67 68 74 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 6c 69 67 68 74 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 6c 69 67 68 74 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 2f 2a 20 Data Ascii: @font-face { font-family: 'Oswald'; font-style: normal; font-weight: 300; src: url('./light.eot'); /* IE9 Compat Modes / src: url('./light.eot?#iefix') format('embedded-opentype'), / IE6-IE8 / url('./light.woff2') format('woff2'), /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.11	49723	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	859	OUT	GET /uploads/1/5/0/2/150218705/published/at-t-logo-2016-svg.png?1720787646 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:46 UTC	979	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:46 GMT Content-Type: image/png Content-Length: 3547 Connection: close CF-Ray: 8d278504e9f54286-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "0a389e6eb13fc2df8c5df590992c7e67" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 08 Apr 2024 23:06:54 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: ylaS3ewsbKDscdxGHfRNoVZM5QvSgGrQSSxmfMsbLU/XuVHO0IRnrB9mTPW+RtHXXlmdKYvTRYI= x-amz-meta-btime: 2021-10-26T10:56:25.688Z x-amz-meta-mtime: 1635245785.688 x-amz-replication-status: COMPLETED x-amz-request-id: 17QDZAYMDP8JGBKY x-amz-server-side-encryption: AES256 x-amz-version-id: qhXAKFxMy7Sl0ji5VPHOAVR2XKI4i3tm X-Storage-Bucket: z54d7 X-Storage-Object: 54d7a245743195d60c153f18c4ed4fb8d927d7d760ee26f601b4c2dd2fc9c26b Server: cloudflare
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 83 00 00 00 36 08 06 00 00 00 e4 9a 2a a0 00 00 0d a2 49 44 41 54 78 da ed 9d 79 94 14 d5 15 c6 bb 7b 7a 16 50 14 a2 6c 81 83 82 42 70 41 e4 04 a2 22 e0 08 c1 0d 3d c1 7d c1 18 42 c0 88 80 41 e3 16 4d e2 12 49 24 60 54 d4 93 40 12 21 24 30 2c 2e 60 22 44 50 02 e2 02 82 28 01 01 41 c4 01 c4 41 13 50 81 d9 bb 2b df 1f df 33 f7 7c e7 54 57 77 d7 0c 90 9c 7a e7 fc 4e 75 57 bd aa 7e 53 f7 ab fb ee bb ef 75 4f 2c eb 32 eb 23 25 0e 92 b2 ef 48 50 0a ee 05 cf 82 b5 e0 53 50 0d d2 a4 0a 54 80 35 60 16 b8 1d f4 06 c5 72 ad 24 88 eb e7 46 e5 10 17 35 88 88 a0 00 0c 02 d3 c1 76 e0 e5 c9 07 e0 b7 a0 54 3f 2b 12 c4 e1 29 84 84 79 5a 9b 82 db c0 56 e0 09 f5 24 05 d2 7a 9c fb 52 a6 9e 27 ac 05 c3 cc 67 15 98 d7 a0 Data Ascii: PNGIHDR6*IDATxy{zPlBpA"=}BAMI$`T@!$0,.`"DP(AAP+3\|TWwzNuW~SuO,2#%HPSPT5`r$F5vT?+)yZV$zR'g
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 71 c1 5d a7 b7 88 61 be cf 39 09 63 d4 0d c6 d8 ef 99 ee 28 a9 5d 81 8a 41 db 61 ce b9 5e c4 30 c1 88 5e ce c1 bc 80 11 42 ad 49 30 9d 00 68 00 63 f0 39 62 ac 39 5b 25 69 45 81 00 c9 54 06 c2 fa c5 9a 92 a6 28 07 81 79 1a 9f 68 02 8a 7f 43 47 27 06 b4 37 b7 2e 82 ee d8 f4 af 9d c0 19 7c 5d c3 ed 33 46 40 7e a2 3a 4b c5 e0 77 8e 11 c4 cb f2 d9 7d 4d 9d d1 22 c8 c9 01 79 87 20 31 24 fd 86 96 23 8d bb ad 31 4f dc 43 2e ff 40 21 58 61 24 72 30 74 9c a8 60 0a 49 d2 27 23 59 0a 1e 93 7c 87 7a 03 15 c6 3a b9 4e 2e 5d c4 d1 e0 33 e0 91 d5 e6 29 da 6a f6 ef 03 6d e4 dc 30 62 48 fa 18 7c 13 38 0e 3c 6a fb 7d d2 4d ae e7 77 cd 21 59 8b c1 b8 e7 7b 7c 12 4c 9f 83 27 40 af 58 99 af 1b 4f 06 12 dc 9d 14 d1 bd 0f 07 65 be 19 49 7a 00 c5 88 78 b8 0c 8d 73 f1 0a da bf de Data Ascii: q]a9c(]Aa^0^BI0hc9b9[%iET(yhCG'7.\|]3F@~:Kw}M"y 1$#1OC.@!Xa$r0t`I'#Y\|z:N.]3)jm0bH\|8<j}Mw!Y{\|L'@XOeIzxs
2024-10-14 12:19:46 UTC	809	IN	Data Raw: d9 4c 31 af 03 cf 81 c2 1c 56 47 b7 e0 30 70 2d cf 7f 41 6e 70 27 b0 9a 6c 01 f7 65 31 ed dd 8d 1e e4 4b e0 09 1f 82 9f 68 4c c0 64 d3 46 b0 0a bc 6b c5 c2 d2 c7 ac 80 da 22 8b 7a a5 98 27 d5 0a 82 74 06 93 c1 01 9d 2a 0e 8b 1a 3f 60 46 32 9d e1 eb fa 7d d8 d6 bb 29 ca b0 df bb 8c 87 af a3 c7 83 8b 08 a9 15 e8 c7 49 a9 41 a0 bb 1c 4f 84 fc 5b e2 41 df b1 6c 69 be c4 9a 94 5c 43 5b e6 04 de f1 99 3a ae e2 b6 4e 16 be a6 34 ad 2c 86 07 c6 e0 d9 a5 a1 6b 18 1b 5c 6c da 37 01 6c 0c b1 8e c1 04 5e 39 89 26 21 ef e5 38 c8 4d 20 89 a0 2e 4a af 13 50 5f da 21 6d d2 22 f3 12 57 80 51 b2 c6 40 53 d2 3d b8 ac 7e a9 8c f5 95 74 d0 92 f9 1c e6 2a 3e 05 2f b2 6d 27 9a b6 b4 06 f3 59 a7 54 d7 31 fc 2f 16 49 5e 11 0a b5 91 8b 66 17 dd 88 e2 f7 36 8e 70 f8 64 01 fb 33 ab Data Ascii: L1VG0p-Anp'le1KhLdFk"z't?`F2})IAO[Ali\C[:N4,k\l7l^9&!8M .JP_!m"WQ@S=~t>/m'YT1/I^f6pd3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.11	49724	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	843	OUT	GET /uploads/1/5/0/2/150218705/published/nc.png?1720787398 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:46 UTC	902	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:46 GMT Content-Type: image/png Content-Length: 10617 Connection: close CF-Ray: 8d278504eed47c84-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "9d30862f22baeb52324f0b7015d5fbba" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 12 Jul 2024 12:29:59 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: bQR0QuNuxsrdrMOdL3EMOM05/DgZLm4uubbCgtT/A8nlDd5St9QwL2JK1PHhn5fPzXVgLBkxCmI= x-amz-replication-status: COMPLETED x-amz-request-id: FHEGZH77GZYCC2X9 x-amz-server-side-encryption: AES256 x-amz-version-id: pLUzeeT5_J2GV5s8m7Zy6PWGO7HHJC1i X-Storage-Bucket: z1e39 X-Storage-Object: 1e390418fddda8aed19b96c4f5fc78df4fbf953906ef376c8a7208d8a260e969 Server: cloudflare
2024-10-14 12:19:46 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0d 00 00 00 55 08 06 00 00 00 53 b8 b1 26 00 00 29 40 49 44 41 54 78 da ec 9d 7b 70 d5 d5 9d c0 7f a2 b6 56 bb 6b 9d ba ed 4c ff 70 d7 6e 67 9c b5 4e ed ac b6 bb ad 2b b6 82 f2 90 5a 15 41 54 c0 ba 2c a0 2c a2 d8 6a c0 47 55 90 b7 58 11 ad 2d 50 f0 51 d7 55 1e 09 49 6e c8 fb 41 5e 40 02 01 12 92 00 42 1e 24 81 dc 57 6e 9e f7 fe 5e e7 b3 27 f7 77 6f 28 08 5a 66 ba bb b0 fb fd cc fc e6 de 9c f7 fd dd 39 9f df 39 e7 f7 bb 39 06 82 20 08 e7 80 48 43 10 04 91 86 20 08 22 0d 41 10 44 1a 82 20 88 34 04 41 10 69 08 82 20 88 34 04 41 10 69 08 82 20 d2 10 04 41 a4 21 08 82 48 43 10 04 91 86 20 08 82 48 43 10 04 91 86 20 08 17 8c 34 14 96 a3 88 59 ee a9 87 ed e2 2a fe d7 50 0a 6c 47 e1 2a ce 4b 9c c4 39 b3 5d Data Ascii: PNGIHDRUS&)@IDATx{pVkLpngN+ZAT,,jGUX-PQUInA^@B$Wn^'wo(Zf999 HC "AD 4Ai 4Ai A!HC HC 4YPlGK9]
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: e3 5e 28 c2 b8 db c7 25 0f e5 60 4c ca c6 b8 2b 03 e3 a1 22 3e 39 dc 8f 52 67 ba b2 7e f1 d5 d1 51 9f 2f 2b e5 9e a9 4d 6a a8 73 45 8e f9 59 fc de 41 2a 8e 9b 24 51 9f 57 e6 39 5c c1 95 f2 e2 ce f5 8a ef 3a 2e 96 02 9c 1e 5e 5b be 1d 63 4c 16 d3 b6 fb c1 8a 31 77 65 21 c6 3d d9 5c 32 78 fe 26 6c e3 52 fd 7a cb af 77 b2 ae b2 93 6e 07 c0 e1 e0 81 63 3c f5 5a 19 d7 4c ce c2 b8 37 8b af cf 28 24 65 6b 4b 5c ce 00 ae 0c 39 84 f3 5a 1a 8e c2 01 08 76 70 e7 53 83 a2 c8 e2 87 af ec 66 f2 ea 7d 8c 5a 54 cd fd ab ea a8 3c 1e 4b a6 a6 a7 cf c2 df 6d d2 6b 3a 24 b1 6d 97 5e 1d 1e 1e 70 00 45 4f af a9 df db 98 2e 71 4c d3 c6 1f d1 79 62 8e 4e eb 10 d1 69 7b 2d 17 a5 54 b2 11 74 27 ca ed b3 bc 4c 8e 0b d8 7d 64 7c b2 03 e3 c6 cd 3c 5b 1c a4 bd db 22 1a 9f ff e3 49 cc Data Ascii: ^(%`L+">9Rg~Q/+MjsEYA*$QW9\:.^[cL1we!=\2x&lRzwnc<ZL7($ekK\9ZvpSf}ZT<Kmk:$m^pEO.qLybNi{-Tt'L}d\|<["I
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 96 ea b0 09 79 ac ac 0f 51 93 b7 87 61 b7 a5 31 7b eb 71 7a 14 71 ea 6a 8f 70 dd 7d 9b b9 f9 85 3a ba b1 f9 60 ed 76 8c 9f fa 58 bd 3b 42 12 15 97 86 9b 90 c6 71 26 3c ee e3 ab 8f 97 e3 0b d9 c4 a2 26 6f fd b1 82 8b 7e 9a ce 8b f9 41 1c b4 e0 d6 ee e0 af ee 4e 63 d8 94 5c 6e 98 5f c9 6b 05 1d 38 96 c5 9b ab 8b 75 fb b2 b8 e6 c9 52 be 97 52 c9 f7 9f d6 75 dd b6 89 4b 9e ad a2 3c 10 a1 e0 c3 9d f1 f5 8a b9 25 fe d3 ce d9 67 a5 31 b5 c8 93 c6 ec c5 5a 1a a3 7c ac 28 eb 8a af db 0c 38 80 dd c5 dc 57 b5 fc ee da c6 73 79 27 00 08 87 23 ac 5e b3 97 59 5a ba 9d 03 2e 49 5c 04 e1 42 58 d3 00 88 f8 19 f9 d4 36 8c 47 b6 b3 be 3a 42 df 80 45 53 97 85 6d 5b d4 57 d4 72 e9 c8 34 fe 79 75 23 bd 78 1c ae 3d cc 77 ee 4a e5 47 af ee a3 f1 84 9f 14 2d 9c 2f 4f 29 a1 e0 b8 Data Ascii: yQa1{qzqjp}:`vX;Bq&<&o~ANc\n_k8uRRuK<%g1Z\|(8Wsy'#^YZ.I\BX6G:BESm[Wr4yu#x=wJG-/O)
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 98 96 cb 80 3e 9c b3 f4 10 db 76 89 5a 0e 03 a6 43 6c 30 9d ab 86 a4 62 59 8e 8e 73 13 b7 24 95 57 46 5f 98 c7 07 1f 5c ba f5 13 8c e1 a9 18 23 d3 b8 fe 99 4a 36 ec 0d 03 78 69 07 f3 0e 96 6b 9e 56 6e 12 c5 29 f1 96 a3 ce 38 5a 32 93 ed d2 69 ed 44 7a 2d 86 78 9c 3d 94 df 6b a3 2e e3 14 e9 58 a7 c5 eb 7c 89 8e ee ea 30 17 1d 74 36 e2 65 f7 9b 8e 27 84 c4 df ba 9c a1 23 6a ba f1 36 39 4a 91 e0 f4 73 26 53 12 41 fe 9f c6 49 5c fa 42 11 2a 6b 4e f0 6e 71 3b 69 7b fc f1 47 c5 01 f9 29 b8 20 88 34 fe 3c 94 92 bb 04 82 20 d2 f8 02 49 b8 ae c2 49 1c 4a 89 2e 04 41 a4 f1 67 8e 2e c4 17 82 20 d2 10 04 41 a4 21 08 82 48 43 10 04 41 a4 21 08 82 48 43 10 04 91 86 20 08 22 0d 41 10 44 1a 82 20 88 34 04 41 10 44 1a 82 20 88 34 04 41 10 69 08 82 20 d2 10 04 41 a4 21 08 Data Ascii: >vZCl0bYs$WF_\#J6xikVn)8Z2iDz-x=k.X\|0t6e'#j69Js&SAI\B*kNnq;i{G) 4< IIJ.Ag. A!HCA!HC "AD 4AD 4Ai A!
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 98 9d 8a 57 ed b1 6f a1 37 ea cd 14 34 e9 69 d7 39 d4 85 62 77 50 dd 61 a0 b8 d3 84 de e6 43 5f 07 ad 1d 22 af c8 dc d4 6f f6 64 1d e1 e3 9b 19 cd 80 2a 4f 97 de ee 8b 5a 9c 56 bb 8c d7 d3 3d ec 04 87 8d 96 2e 23 6d 32 07 30 0a 1a 0d 85 f5 02 fc c1 9c f7 44 b1 07 34 aa 53 aa b8 ea e1 10 7e fc 58 3a 6b bf 6c 60 df b7 b5 cc 79 26 85 a0 69 c1 4c dd 99 4f f9 90 03 53 6b 1b bf df 14 cf 1d fb 4b f8 9b 54 99 1b 0f 64 13 f4 a7 23 5c f3 7c 29 9d 8a 6a 08 bb aa 2a dd d5 2d dc b5 5c 12 cb 8c 08 ee 7c 59 c6 87 b7 b0 ed fd 12 e6 bd 56 c8 27 85 5a c0 45 75 b3 9e 46 f1 3f 38 69 ec 34 d0 a0 b1 e1 18 d5 cb 48 71 b3 81 4e 9d 7d 1c a8 2a e8 86 86 a9 6a 13 3b 49 bc e8 ad 4e 00 cf bc 15 55 dd cc de 16 21 71 98 48 64 9d 8e ba 7e 0b 3a 8b 73 d4 56 5a f1 49 a1 f0 ec d0 d9 38 1e Data Ascii: Wo74i9bwPaC_"odOZV=.#m20D4S~X:kl`y&iLOSkKTd#\\|)j-\\|YV'ZEuF?8i4HqN}*j;INU!qHd~:sVZI8
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: bb f7 64 71 ce bc 70 4e 5f 9f 41 9e d6 8d ad b1 85 73 e7 84 78 5a 8c 4b 1e 4b e2 8a ed 39 7c 5c a8 f5 96 f2 ee 31 ed c9 a5 7f 55 db 93 c6 cc 5a a6 3e 14 c2 2f f7 95 51 24 7f c0 0d e0 a4 26 a7 8e 53 1f 0e e5 62 09 46 8d b7 8c b0 18 0c bc f7 61 3e e7 cc 12 1b ec 2e 20 be 79 18 c0 53 05 81 5b c0 af 93 1b 56 48 4b b2 2a 9d 44 f1 1f 80 d1 ec c4 2c f7 ab 85 81 42 6f 5b 1b 37 ce 0d 15 ff 44 71 f9 86 44 2e d8 90 41 68 9d 81 cc b4 1a ae 9d 1f ca c9 4b 93 45 af 6c ce 9b 2f 95 c3 1a e1 d3 e7 04 b7 99 6d 7b 93 b9 4a 16 e3 cd 7b f2 f8 cd fa 38 0f a0 cd fa b0 81 86 8e 7e e6 fc 25 81 d3 67 c7 72 da b2 04 ae 5a 9f cc d4 27 f3 29 d6 da a8 16 3b 5e f3 a8 cc b5 38 99 e9 b2 50 cf 5b 10 c9 a9 6b d2 08 6f b1 e0 6f a5 01 cc b2 d0 b2 39 7d c6 51 e1 91 c4 cd 12 43 67 08 90 06 cd Data Ascii: dqpN_AsxZKK9\|\1UZ>/Q$&SbFa>. yS[VHK*D,Bo[7DqD.AhKEl/m{J{8~%grZ');^8P[koo9}QCg
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 32 c5 0f 1a 93 8f 03 1a bf 16 d0 28 1f 05 0d 07 c5 d2 42 9d 22 41 3f 75 6f 39 83 de 0d c7 9c 82 36 76 7c d3 40 56 bb 19 40 3d 50 27 bc e5 1f 20 73 68 7a b8 6d 75 94 d8 2b 85 90 a6 61 df fc 63 36 83 fb 3a 3a b8 75 71 38 e7 ca 9e 4a f3 b0 53 f5 61 5d 07 d3 1f 17 bd e6 89 5e db 33 99 ba 59 b2 ef 4a b1 b3 e8 75 f3 c7 8d 12 7f 4e 92 63 aa f8 e3 e3 c9 4c 59 ad da f6 e4 99 11 5c b9 3d 97 94 41 d0 f5 e9 f8 e3 ea 30 26 6f ca a1 da ab 83 a5 a3 9d 07 36 c5 7b 32 f8 d4 1d 99 5c 29 3c cf 59 25 20 32 27 96 e9 87 6a 71 00 3e b4 cf 8e ab e0 82 07 a5 6a f8 57 0b 5a 54 ea e9 1a 60 e6 fa 48 d9 eb c9 a5 c5 e8 e2 ad 8f 32 a5 72 8c e6 40 ea 20 00 ed c5 ad dc b6 3c 82 db 5f a9 a2 b6 6d 90 59 db 45 ef 05 89 5c bd 4d 2a 03 a9 36 a7 ae 4f f6 6c 18 3f fa 45 13 6d 62 03 7c ed 89 c4 Data Ascii: 2(B"A?uo96v\|@V@=P' shzmu+ac6::uq8JSa]^3YJuNcLY\=A0&o6{2\)<Y% 2'jq>jWZT`H2r@ <_mYE\M*6Ol?Emb\|
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 83 cd 37 4a db 2c 55 c3 86 68 b9 3f 94 ab b7 67 b1 e8 bd 2a 66 ee cd e4 7f b6 a4 b1 37 a5 1f ab a1 8f 5f 49 db 73 fa d6 7c 6a 0c 2e 54 72 f1 99 b4 23 53 04 bc 2e dc 92 2d 7a d5 78 f4 fa fd 0b b9 24 89 5e e6 a6 46 4e 7b 38 04 69 13 85 5f 25 0b 5e cd 91 98 08 66 aa c4 94 ac 61 4c 5a 23 b3 b6 46 78 5a e0 3f bc 58 c0 9d 07 4a 29 ec 35 49 3b 55 ca 25 52 45 fd 64 7d 26 1b bf a8 65 f1 6b 85 4c ff 5b 2e df 79 93 9e e2 f2 9e 3c b6 eb 79 62 5f 8a 47 e7 6b 65 13 75 e9 5b c5 5c bb 2c 52 f8 45 b3 35 61 00 70 f3 d2 5b a9 04 fd 29 92 bd 71 fd 00 b4 48 a5 71 eb 7c d9 0b 7a be 02 03 6e b2 22 8a a4 12 09 e1 42 89 93 b5 1f d7 b0 ea f5 02 d9 43 cb 27 ba 56 0f 80 d5 a6 a8 a0 d9 2d 49 4b 40 f3 54 01 80 f4 5e 27 00 1f 06 17 08 ef 10 b6 05 f7 01 0a ff fe 28 5b 7e 97 58 dc 9e cd Data Ascii: 7J,Uh?g*f7_Is\|j.Tr#S.-zx$^FN{8i_%^faLZ#FxZ?XJ)5I;U%REd}&ekL[.y<yb_Gkeu[\,RE5ap[)qHq\|zn"BC'V-IK@T^'([~X
2024-10-14 12:19:46 UTC	567	IN	Data Raw: b1 86 a2 76 13 16 c5 67 35 37 ed dd 3a a2 cb 06 69 1e 72 a8 f2 98 ac e4 d7 6a c8 6a 31 61 55 fc 7e a9 6d 12 f9 8b 64 ae 72 91 5f 74 b6 ba fc be 07 70 88 6f 2b 6b 65 0d 89 af f5 5e 1f f5 0d 18 3d eb aa ba df 8a 0b 7f cc 95 37 8c ac 33 f1 67 93 01 a3 73 8c 23 19 36 98 c9 16 5f e7 0a 28 a9 b9 5a a1 4d 64 8c 2a d7 d2 27 ba bb 41 fd f9 df f9 ec 89 ff e4 1c 4c fc 9c 82 a2 4c f4 77 fc 34 3e 10 dd f2 4f f9 8f 1f c8 1a 3f ef 89 e5 77 4f c4 c3 7f ff 89 e7 3d c1 f5 13 8e 3d 31 7f 65 c2 4d ad ff 37 0f f3 b9 c6 1c ff ff 7e 9b 01 63 8e 92 ff a7 32 fa 4f 5e fe e7 b6 55 dc 13 c9 ff 7f cd 73 42 99 9d 6e 70 9f 20 c6 00 94 ef 93 df ff e1 c4 ba b9 27 7e 38 53 6c 34 d1 3d 13 cf f9 c3 82 86 7a 74 5b 36 29 c7 fc d8 d5 23 c4 c7 1c 5b 76 38 c7 8e 19 ff 6c 87 da 6b fb 9d 2b e3 8e Data Ascii: vg57:irjj1aU~mdr_tpo+ke^=73gs#6_(ZMd*'ALLw4>O?wO==1eM7~c2O^UsBnp '~8Sl4=zt[6)#[v8lk+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.11	49725	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	574	OUT	GET /files/theme/MutationObserver.js HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:46 UTC	927	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:46 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d2785066e3f7298-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"e52201e96af18dd02c85eb627c843491" Last-Modified: Thu, 04 Apr 2024 10:23:36 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: qf/tibO07OlDRECLRS/4b5aVtqvWEnYVR4uyryhaY9LvZeKcJEQm+Bj21Mh0xioXp6QjwfrH8Gc= x-amz-meta-btime: 2023-09-25T13:28:31.439Z x-amz-meta-mtime: 1695648511.439 x-amz-replication-status: COMPLETED x-amz-request-id: JAGF7E5DQQ0M1NK8 x-amz-server-side-encryption: AES256 x-amz-version-id: P7GX41cAL89NqMhfWn_.HhJNYx8OtSku X-Storage-Bucket: z3974 X-Storage-Object: 397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a Server: cloudflare
2024-10-14 12:19:46 UTC	442	IN	Data Raw: 32 37 32 0d 0a 2f 2a 21 0a 20 2a 20 53 68 69 6d 20 66 6f 72 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 69 6e 74 65 72 66 61 63 65 0a 20 2a 20 41 75 74 68 6f 72 3a 20 47 72 61 65 6d 65 20 59 65 61 74 65 73 20 28 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 65 67 61 77 61 63 29 0a 20 2a 20 52 65 70 6f 73 69 74 6f 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 65 67 61 77 61 63 2f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 6a 73 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 57 54 46 50 4c 20 56 32 2c 20 32 30 30 34 20 28 77 74 66 70 6c 2e 6e 65 74 29 2e 0a 20 2a 20 54 68 6f 75 67 68 20 63 72 65 64 69 74 20 61 6e 64 20 73 74 61 72 69 6e 67 20 74 68 65 20 72 65 70 6f 20 77 69 6c 6c 20 6d 61 6b 65 20 6d 65 20 66 65 65 6c 20 70 72 65 Data Ascii: 272/! Shim for MutationObserver interface * Author: Graeme Yeates (github.com/megawac) * Repository: https://github.com/megawac/MutationObserver.js * License: WTFPL V2, 2004 (wtfpl.net). * Though credit and staring the repo will make me feel pre
2024-10-14 12:19:46 UTC	191	IN	Data Raw: 67 69 74 68 75 62 2e 63 6f 6d 2f 57 65 62 4b 69 74 2f 77 65 62 6b 69 74 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 53 6f 75 72 63 65 2f 57 65 62 43 6f 72 65 2f 64 6f 6d 2f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 63 70 70 20 66 6f 72 20 63 75 72 72 65 6e 74 20 77 65 62 6b 69 74 20 73 6f 75 72 63 65 20 63 2b 2b 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 70 72 65 66 69 78 20 62 75 67 73 3a 0a 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 77 65 62 6b 69 74 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 0d 0a Data Ascii: github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp for current webkit source c++ implementation //* * prefix bugs: - https://bugs.webkit.org/show_bug.cgi
2024-10-14 12:19:46 UTC	71	IN	Data Raw: 34 31 0d 0a 3f 69 64 3d 38 35 31 36 31 0a 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 62 75 67 7a 69 6c 6c 61 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 37 34 39 39 0d 0a Data Ascii: 41?id=85161 - https://bugzilla.mozilla.org/show_bug.cgi?id=7499
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 33 36 66 61 0d 0a 32 30 0a 20 2a 20 44 6f 6e 27 74 20 75 73 65 20 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 61 73 20 53 61 66 61 72 69 20 28 36 2e 30 2e 35 2d 36 2e 31 29 20 75 73 65 20 61 20 62 75 67 67 79 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 2a 2f 0a 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 3d 20 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 28 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 66 75 6e 63 74 69 6f 6e 28 41 72 72 61 79 2e 3c 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 3e 2c 20 4d 75 74 61 74 69 6f 6e Data Ascii: 36fa20 * Don't use WebKitMutationObserver as Safari (6.0.5-6.1) use a buggy implementation/window.MutationObserver = window.MutationObserver \|\| (function(undefined) { "use strict"; /* * @param {function(Array.<MutationRecord>, Mutation
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 40 66 69 6e 61 6c 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 73 65 65 20 68 74 74 70 3a 2f 2f 20 64 6f 6d 2e 73 70 65 63 2e 77 68 61 74 77 67 2e 6f 72 67 2f 23 64 6f 6d 2d 6d 75 74 61 74 69 6f 6e 6f 62 73 65 72 76 65 72 2d 6f 62 73 65 72 76 65 0a 20 20 20 20 20 20 20 20 20 2a 20 6e 6f 74 20 67 6f 69 6e 67 20 74 6f 20 74 68 72 6f 77 20 68 65 72 65 20 62 75 74 20 67 6f 69 6e 67 20 74 6f 20 66 6f 6c 6c 6f 77 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 70 65 63 20 63 6f 6e 66 69 67 20 73 65 74 73 0a 20 20 20 20 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4e 6f 64 65 7c 6e 75 6c 6c 7d 20 24 74 61 72 67 65 Data Ascii: @final / MutationObserver.prototype = { /* * see http:// dom.spec.whatwg.org/#dom-mutationobserver-observe * not going to throw here but going to follow the current spec config sets * @param {Node\|null} $targe
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 2e 61 74 74 72 69 62 75 74 65 46 69 6c 74 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 63 6f 6e 76 65 72 74 73 20 74 6f 20 61 20 7b 6b 65 79 3a 20 74 72 75 65 7d 20 64 69 63 74 20 66 6f 72 20 66 61 73 74 65 72 20 6c 6f 6f 6b 75 70 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 40 74 79 70 65 20 7b 4f 62 6a 65 63 74 2e 3c 53 74 72 69 6e 67 2c 42 6f 6f 6c 65 61 6e 3e 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 74 69 6e 67 73 2e 61 66 69 6c 74 65 72 20 3d 20 72 65 64 75 63 65 28 63 6f 6e 66 69 67 2e 61 74 74 72 69 62 75 74 65 46 69 6c 74 65 72 2c 20 66 75 6e 63 Data Ascii: config.attributeFilter) { /** * converts to a {key: true} dict for faster lookup * @type {Object.<String,Boolean>} */ settings.afilter = reduce(config.attributeFilter, func
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 20 20 2f 2a 2a 20 40 70 72 69 76 61 74 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 53 69 6d 70 6c 65 20 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 20 70 73 65 75 64 6f 63 6c 61 73 73 2e 20 4e 6f 20 6c 6f 6e 67 65 72 20 65 78 70 6f 73 69 6e 67 20 61 73 20 69 74 73 20 6e 6f 74 20 66 75 6c 6c 79 20 63 6f 6d 70 6c 69 61 6e 74 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 64 61 74 61 0a 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 4f 62 6a 65 63 74 7d 20 61 20 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e Data Ascii: /** @private / this._timeout = null; } }; /* * Simple MutationRecord pseudoclass. No longer exposing as its not fully compliant * @param {Object} data * @return {Object} a MutationRecord */ function
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 76 61 72 20 6f 6c 65 6e 20 3d 20 6d 75 74 61 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 2c 20 64 69 72 74 79 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 6c 72 69 67 68 74 20 77 65 20 63 68 65 63 6b 20 62 61 73 65 20 6c 65 76 65 6c 20 63 68 61 6e 67 65 73 20 69 6e 20 61 74 74 72 69 62 75 74 65 73 2e 2e 2e 20 65 61 73 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 66 69 67 2e 61 74 74 72 20 26 26 20 24 6f 6c 64 73 74 61 74 65 2e 61 74 74 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6e 64 41 74 74 72 69 62 75 74 65 4d 75 74 61 74 69 6f 6e 73 28 6d 75 74 61 74 69 6f 6e 73 2c 20 24 74 61 72 67 65 74 2c 20 24 6f 6c 64 73 74 61 74 65 2e 61 74 74 72 2c 20 63 6f 6e 66 69 67 2e 61 66 69 6c 74 65 72 Data Ascii: var olen = mutations.length, dirty; // Alright we check base level changes in attributes... easy if (config.attr && $oldstate.attr) { findAttributeMutations(mutations, $target, $oldstate.attr, config.afilter
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 6f 6d 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 49 45 3c 39 20 77 69 74 68 20 61 20 63 75 73 74 6f 6d 20 2e 74 6f 53 74 72 69 6e 67 28 29 20 6d 65 74 68 6f 64 2e 20 54 68 69 73 20 69 73 0a 20 20 20 20 20 20 20 20 2f 2f 20 6a 75 73 74 20 61 20 77 61 72 6e 69 6e 67 20 61 6e 64 20 64 6f 65 73 6e 27 74 20 61 66 66 65 63 74 20 65 78 65 63 75 74 69 6f 6e 20 28 73 65 65 20 23 32 31 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 74 74 72 2e 76 61 6c 75 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 47 65 74 73 20 61 6e 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 20 77 69 74 68 20 73 70 65 63 69 61 6c 20 68 61 63 6b 20 66 6f 72 20 73 74 79 6c 65 20 61 74 74 72 69 62 75 74 65 20 28 73 65 65 20 23 34 29 0a 20 20 20 20 20 2a 0a Data Ascii: om attribute in IE<9 with a custom .toString() method. This is // just a warning and doesn't affect execution (see #21) return attr.value; } /** * Gets an attribute value with special hack for style attribute (see #4) *
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 65 72 2c 20 6e 61 6d 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 28 24 74 61 72 67 65 74 2c 20 61 74 74 72 29 20 21 3d 3d 20 24 6f 6c 64 73 74 61 74 65 5b 6e 61 6d 65 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 65 20 70 75 73 68 69 6e 67 20 69 73 20 72 65 64 75 6e 64 61 6e 74 20 62 75 74 20 67 7a 69 70 73 20 76 65 72 79 20 6e 69 63 65 6c 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 75 74 61 74 69 6f 6e 73 2e 70 75 73 68 28 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 22 61 74 74 72 69 62 75 74 65 73 22 2c 0a Data Ascii: er, name)) { if (getAttributeValue($target, attr) !== $oldstate[name]) { // The pushing is redundant but gzips very nicely mutations.push(MutationRecord({ type: "attributes",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.11	49726	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	551	OUT	GET /js/jquery-1.8.3.min.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:46 UTC	664	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93636 Server: nginx Content-Type: application/javascript Last-Modified: Mon, 30 Sep 2024 20:38:26 GMT ETag: "66fb0c42-16dc4" Expires: Tue, 15 Oct 2024 08:25:47 GMT Cache-Control: max-age=1209600 X-Host: blu142.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:46 GMT Age: 1137239 X-Served-By: cache-sjc10032-SJC, cache-ewr-kewr1740077-EWR X-Cache: HIT, HIT X-Cache-Hits: 16, 1 X-Timer: S1728908387.534970,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:46 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: /! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(
2024-10-14 12:19:46 UTC	16384	IN	Data Raw: 65 6e 74 4c 6f 61 64 65 64 22 2c 41 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 76 2e 72 65 61 64 79 2c 21 31 29 3b 65 6c 73 65 7b 69 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 41 29 2c 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 76 2e 72 65 61 64 79 29 3b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 6e 3d 65 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 3d 6e 75 6c 6c 26 26 69 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 73 29 7b 7d 6e 26 26 6e 2e 64 6f 53 63 72 6f 6c 6c 26 26 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 21 76 2e 69 73 52 65 61 64 79 29 7b 74 72 79 7b 6e 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c Data Ascii: entLoaded",A,!1),e.addEventListener("load",v.ready,!1);else{i.attachEvent("onreadystatechange",A),e.attachEvent("onload",v.ready);var n=!1;try{n=e.frameElement==null&&i.documentElement}catch(s){}n&&n.doScroll&&function o(){if(!v.isReady){try{n.doScroll("l
2024-10-14 12:19:46 UTC	16384	IN	Data Raw: 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 74 2b 22 22 7d 7d 29 2c 76 2e 73 75 70 70 6f 72 74 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 76 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 76 2e 65 78 74 65 6e 64 28 76 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 2c 6e 75 6c 6c 7d 7d 29 29 2c 76 2e 73 75 70 70 6f 72 74 2e 65 6e 63 74 79 70 65 Data Ascii: set:function(e,t){return e.style.cssText=t+""}}),v.support.optSelected\|\|(v.propHooks.selected=v.extend(v.propHooks.selected,{get:function(e){var t=e.parentNode;return t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex),null}})),v.support.enctype
2024-10-14 12:19:46 UTC	16384	IN	Data Raw: 75 65 53 6f 72 74 28 6c 29 7d 72 65 74 75 72 6e 20 54 26 26 28 62 3d 6b 2c 63 3d 4e 29 2c 78 7d 3b 72 65 74 75 72 6e 20 6f 2e 65 6c 3d 30 2c 72 3f 4e 28 6f 29 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 72 3c 69 3b 72 2b 2b 29 6e 74 28 65 2c 74 5b 72 5d 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 2c 74 2c 6e 2c 72 2c 73 29 7b 76 61 72 20 6f 2c 75 2c 66 2c 6c 2c 63 2c 68 3d 75 74 28 65 29 2c 70 3d 68 2e 6c 65 6e 67 74 68 3b 69 66 28 21 72 26 26 68 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 75 3d 68 5b 30 5d 3d 68 5b 30 5d 2e 73 6c 69 63 65 28 30 29 3b 69 66 28 75 2e 6c 65 6e 67 74 68 3e 32 26 26 28 66 3d 75 5b 30 5d 29 2e 74 79 70 65 Data Ascii: ueSort(l)}return T&&(b=k,c=N),x};return o.el=0,r?N(o):o}function dt(e,t,n){var r=0,i=t.length;for(;r<i;r++)nt(e,t[r],n);return n}function vt(e,t,n,r,s){var o,u,f,l,c,h=ut(e),p=h.length;if(!r&&h.length===1){u=h[0]=h[0].slice(0);if(u.length>2&&(f=u[0]).type
2024-10-14 12:19:46 UTC	16384	IN	Data Raw: 74 65 6e 64 28 7b 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 2e 61 63 63 65 73 73 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 3f 76 2e 74 65 78 74 28 74 68 69 73 29 3a 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 28 74 68 69 73 5b 30 5d 26 26 74 68 69 73 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 69 29 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 65 29 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 77 72 61 70 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 28 74 Data Ascii: tend({text:function(e){return v.access(this,function(e){return e===t?v.text(this):this.empty().append((this[0]&&this[0].ownerDocument\|\|i).createTextNode(e))},null,e,arguments.length)},wrapAll:function(e){if(v.isFunction(e))return this.each(function(t){v(t
2024-10-14 12:19:46 UTC	11716	IN	Data Raw: 29 2c 74 68 69 73 7d 7d 3b 64 2e 70 72 6f 6d 69 73 65 28 78 29 2c 78 2e 73 75 63 63 65 73 73 3d 78 2e 64 6f 6e 65 2c 78 2e 65 72 72 6f 72 3d 78 2e 66 61 69 6c 2c 78 2e 63 6f 6d 70 6c 65 74 65 3d 6d 2e 61 64 64 2c 78 2e 73 74 61 74 75 73 43 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3b 69 66 28 45 3c 32 29 66 6f 72 28 74 20 69 6e 20 65 29 67 5b 74 5d 3d 5b 67 5b 74 5d 2c 65 5b 74 5d 5d 3b 65 6c 73 65 20 74 3d 65 5b 78 2e 73 74 61 74 75 73 5d 2c 78 2e 61 6c 77 61 79 73 28 74 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 2e 75 72 6c 3d 28 28 65 7c 7c 63 2e 75 72 6c 29 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 68 6e 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 6d 6e 2c 6c 6e 5b 31 5d 2b 22 2f 2f 22 29 2c 63 2e 64 61 74 61 54 79 Data Ascii: ),this}};d.promise(x),x.success=x.done,x.error=x.fail,x.complete=m.add,x.statusCode=function(e){if(e){var t;if(E<2)for(t in e)g[t]=[g[t],e[t]];else t=e[x.status],x.always(t)}return this},c.url=((e\|\|c.url)+"").replace(hn,"").replace(mn,ln[1]+"//"),c.dataTy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.11	49727	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	568	OUT	GET /js/lang/en/stl.js?buildTime=1720803349& HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:46 UTC	669	IN	HTTP/1.1 200 OK Connection: close Content-Length: 188909 Server: nginx Content-Type: application/javascript Last-Modified: Tue, 01 Oct 2024 14:33:54 GMT ETag: "66fc0852-2e1ed" Expires: Tue, 15 Oct 2024 16:24:23 GMT Cache-Control: max-age=1209600 X-Host: grn187.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1108523 Date: Mon, 14 Oct 2024 12:19:46 GMT X-Served-By: cache-sjc1000096-SJC, cache-ewr-kewr1740035-EWR X-Cache: HIT, MISS X-Cache-Hits: 33, 0 X-Timer: S1728908387.535032,VS0,VE70 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 0a 77 69 6e 64 6f 77 2e 5f 57 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 5f 57 2e 67 65 74 53 69 74 65 4c 61 6e 67 75 61 67 65 55 52 4c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6c 61 6e 67 29 7b 0a 09 72 65 74 75 72 6e 20 27 2f 2f 61 73 73 65 74 73 2d 73 74 61 67 69 6e 67 2e 77 65 65 62 6c 79 2e 6e 65 74 2f 6a 73 2f 6c 61 6e 67 2f 25 6c 61 6e 67 25 2f 73 74 6c 2e 6a 73 3f 62 75 69 6c 64 54 69 6d 65 3d 31 32 33 34 26 27 2e 72 65 70 6c 61 63 65 28 27 25 6c 61 6e 67 25 27 2c 20 6c 61 6e 67 29 3b 0a 7d 0a 5f 57 2e 74 6c 69 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 73 3b 7d 0a 5f 57 2e 73 69 74 65 4c 61 6e 67 20 3d 20 27 65 6e 27 3b 0a 5f 57 2e 66 74 6c 3d 5f 57 2e 73 74 Data Ascii: window._W = window.Weebly = window.Weebly \|\| {};_W.getSiteLanguageURL = function(lang){return '//assets-staging.weebly.net/js/lang/%lang%/stl.js?buildTime=1234&'.replace('%lang%', lang);}_W.tli=function(s){return s;}_W.siteLang = 'en';_W.ftl=_W.st
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 5c 22 42 61 64 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 33 5f 73 74 61 72 5c 22 3a 5c 22 4d 65 64 69 6f 63 72 65 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 34 5f 73 74 61 72 5c 22 3a 5c 22 47 6f 6f 64 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 35 5f 73 74 61 72 5c 22 3a 5c 22 45 78 63 65 6c 6c 65 6e 74 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 6e 6f 5f 72 61 74 69 6e 67 5f 6c 61 62 65 6c 5c 22 3a 5c 22 4e 6f 20 72 61 74 69 6e 67 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 Data Ascii: \"Bad\",\"components.star_input_component.3_star\":\"Mediocre\",\"components.star_input_component.4_star\":\"Good\",\"components.star_input_component.5_star\":\"Excellent\",\"components.star_input_component.no_rating_label\":\"No rating\",\"components.sta
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 65 61 74 65 20 41 63 63 6f 75 6e 74 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 64 6f 6e 65 5c 22 3a 5c 22 44 6f 6e 65 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 6d 61 69 6c 5f 61 64 64 72 65 73 73 5c 22 3a 5c 22 45 6d 61 69 6c 20 41 64 64 72 65 73 73 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 73 2e 62 61 64 5f 65 6d 61 69 6c 5c 22 3a 5c 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 73 2e 65 6d 61 69 6c 5f 72 65 71 75 69 72 65 64 5c 22 Data Ascii: eate Account\",\"customer_accounts.common.done\":\"Done\",\"customer_accounts.common.email_address\":\"Email Address\",\"customer_accounts.common.errors.bad_email\":\"Please enter a valid email address.\",\"customer_accounts.common.errors.email_required\"
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 6f 72 64 65 72 5f 6e 75 6d 62 65 72 5c 22 3a 5c 22 4f 72 64 65 72 20 23 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 73 74 61 74 75 73 5c 22 3a 5c 22 53 74 61 74 75 73 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 74 6f 74 61 6c 5c 22 3a 5c 22 54 6f 74 61 6c 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 64 65 66 61 75 6c 74 5f 74 Data Ascii: \"customer_accounts.order_history.column_heading_order_number\":\"Order #\",\"customer_accounts.order_history.column_heading_status\":\"Status\",\"customer_accounts.order_history.column_heading_total\":\"Total\",\"customer_accounts.order_history.default_t
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 72 65 64 65 65 6d 65 64 5c 22 3a 5c 22 52 65 64 65 65 6d 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 72 65 66 75 6e 64 65 64 5c 22 3a 5c 22 52 65 66 75 6e 64 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 73 65 6e 74 5c 22 3a 5c 22 53 65 6e 74 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 73 68 69 70 70 65 64 5c 22 3a 5c 22 53 68 69 70 70 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f Data Ascii: omer_accounts.order_history.status_redeemed\":\"Redeemed\",\"customer_accounts.order_history.status_refunded\":\"Refunded\",\"customer_accounts.order_history.status_sent\":\"Sent\",\"customer_accounts.order_history.status_shipped\":\"Shipped\",\"customer_
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 72 64 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 72 65 73 65 74 5f 70 61 73 73 77 6f 72 64 2e 72 65 73 65 74 5f 62 75 74 74 6f 6e 5c 22 3a 5c 22 52 65 73 65 74 20 50 61 73 73 77 6f 72 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 65 5f 70 61 73 73 77 6f 72 64 2e 68 65 61 64 65 72 5f 74 65 78 74 5c 22 3a 5c 22 55 70 64 61 74 65 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 65 5f 70 61 73 73 77 6f 72 64 2e 69 6e 73 74 72 75 63 74 69 6f 6e 5c 22 3a 5c 22 45 6e 74 65 72 20 79 6f 75 72 20 6e 65 77 20 70 61 73 73 77 6f 72 64 20 62 65 6c 6f 77 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 Data Ascii: rd.\",\"customer_accounts.reset_password.reset_button\":\"Reset Password\",\"customer_accounts.update_password.header_text\":\"Update password\",\"customer_accounts.update_password.instruction\":\"Enter your new password below.\",\"customer_accounts.updat
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 73 61 6e 74 20 64 6f 6c 6f 72 65 6d 71 75 65 20 6c 61 75 64 61 6e 74 69 75 6d 2c 20 74 6f 74 61 6d 20 72 65 6d 2e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 31 37 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 5c 5c 5c 22 3e 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 35 5c 5c 5c 22 3e 53 6b 69 6c 6c 20 54 77 6f 3c 5c 5c 2f 66 6f 6e 74 3e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 31 38 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 5c 5c 5c 22 3e 53 65 64 20 75 74 20 70 65 72 73 70 69 63 69 61 74 69 73 20 75 6e 64 65 20 6f Data Ascii: sant doloremque laudantium, totam rem.<\\/span>\",\"db.PageLayoutElements.1517\":\"<span style=\\\"font-weight: normal;\\\"><font size=\\\"5\\\">Skill Two<\\/font><\\/span>\",\"db.PageLayoutElements.1518\":\"<span style=\\\"\\\">Sed ut perspiciatis unde o
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 6e 6f 72 6d 61 6c 3b 5c 5c 5c 22 3e 52 65 73 70 6f 6e 73 69 76 65 20 26 61 6d 70 3b 20 49 6e 74 65 72 61 63 74 69 76 65 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 33 34 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 5c 5c 5c 22 3e 4c 6f 72 65 6d 20 69 70 73 75 6d 20 64 6f 6c 6f 72 20 73 69 74 20 61 6d 65 74 2c 20 63 6f 6e 73 65 63 74 65 74 75 72 20 61 64 69 70 69 73 63 69 6e 67 20 65 6c 69 74 2c 20 73 65 64 20 64 6f 20 65 69 75 73 6d 6f 64 20 74 65 6d 70 6f 72 20 69 6e 63 69 64 69 64 75 6e 74 20 75 74 20 6c 61 62 6f 72 65 20 65 74 20 64 6f 6c 6f 72 65 20 6d 61 67 6e 61 20 61 6c 69 71 75 61 2e 20 55 74 20 65 6e 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 Data Ascii: normal;\\\">Responsive & Interactive<\\/font>\",\"db.PageLayoutElements.1534\":\"<span style=\\\"\\\">Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam,
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 71 75 69 73 20 6e 6f 73 74 72 75 64 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 75 6c 6c 61 6d 63 6f 20 6c 61 62 6f 72 69 73 20 6e 69 73 69 2e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 35 30 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 53 65 65 20 53 6f 6d 65 20 45 78 61 6d 70 6c 65 73 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 35 37 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 53 65 72 76 69 63 65 73 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d Data Ascii: im ad minim veniam, quis nostrud exercitation ullamco laboris nisi.<\\/span>\",\"db.PageLayoutElements.1550\":\"<font size=\\\"6\\\">See Some Examples<\\/font>\",\"db.PageLayoutElements.1557\":\"<font size=\\\"6\\\">Services<\\/font>\",\"db.PageLayoutElem
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 75 72 20 61 64 69 70 69 73 69 63 69 6e 67 20 65 6c 69 74 2c 20 73 65 64 20 64 6f 20 65 69 75 73 6d 6f 64 20 74 65 6d 70 6f 72 20 69 6e 63 69 64 69 64 75 6e 74 20 75 74 20 6c 61 62 6f 72 65 20 65 74 20 64 6f 6c 6f 72 65 20 6d 61 67 6e 61 20 61 6c 69 71 75 61 2e 20 55 74 20 65 6e 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 71 75 69 73 20 6e 6f 73 74 72 75 64 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 75 6c 6c 61 6d 63 6f 20 6c 61 62 6f 72 69 73 20 6e 69 73 69 2e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 37 37 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 45 76 65 6e 74 20 48 65 61 64 6c 69 6e 65 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 Data Ascii: ur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi.\",\"db.PageLayoutElements.1577\":\"<font size=\\\"6\\\">Event Headline<\\/font>\",\"db.PageLay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.11	49728	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	565	OUT	GET /js/site/main.js?buildTime=1720803349 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:46 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 480909 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 03 Oct 2024 22:10:27 GMT ETag: "66ff1653-7568d" Expires: Fri, 18 Oct 2024 13:05:22 GMT Cache-Control: max-age=1209600 X-Host: grn33.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 861264 Date: Mon, 14 Oct 2024 12:19:46 GMT X-Served-By: cache-sjc10073-SJC, cache-ewr-kewr1740025-EWR X-Cache: HIT, MISS X-Cache-Hits: 24, 0 X-Timer: S1728908387.559782,VS0,VE78 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 5b 22 70 75 62 6c 69 73 68 65 64 57 42 4a 50 22 5d 3b 77 69 6e 64 6f 77 5b 22 70 75 62 6c 69 73 68 65 64 57 42 4a 50 22 5d 3d 66 75 6e 63 74 69 6f 6e 20 6f 28 73 2c 61 29 7b 76 61 72 20 6c 2c 75 2c 63 3d 30 2c 64 3d 5b 5d 3b 66 6f 72 28 3b 63 3c 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 75 3d 73 5b 63 5d 3b 69 66 28 6e 5b 75 5d 29 64 2e 70 75 73 68 2e 61 70 70 6c 79 28 64 2c 6e 5b 75 5d 29 3b 6e 5b 75 5d 3d 30 7d 66 6f 72 28 6c 20 69 6e 20 61 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6c 29 29 7b 65 5b 6c 5d 3d 61 5b 6c 5d 7d 7d 69 66 28 74 29 74 28 73 2c 61 29 3b 77 68 69 6c 65 28 64 2e 6c 65 Data Ascii: (function(e){var t=window["publishedWBJP"];window["publishedWBJP"]=function o(s,a){var l,u,c=0,d=[];for(;c<s.length;c++){u=s[c];if(n[u])d.push.apply(d,n[u]);n[u]=0}for(l in a){if(Object.prototype.hasOwnProperty.call(a,l)){e[l]=a[l]}}if(t)t(s,a);while(d.le
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 64 6f 77 2e 57 65 65 62 6c 79 3d 77 69 6e 64 6f 77 2e 5f 57 3d 77 69 6e 64 6f 77 2e 5f 57 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 75 74 6c 3d 77 69 6e 64 6f 77 2e 5f 57 2e 75 74 6c 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 66 74 6c 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 74 6c 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 46 74 6c 73 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 46 74 6c 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 57 2e Data Ascii: dow.Weebly=window._W=window._W\|\|{};window._W.utl=window._W.utl\|\|function(e){window._W.failedTls=window._W.failedTls\|\|[];window._W.failedTls.push(e);return e};window._W.ftl=window._W.ftl\|\|function(e){window._W.failedFtls=window._W.failedFtls\|\|[];window._W.
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 2c 72 3b 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 29 7b 69 66 28 74 72 75 65 29 7b 21 28 6e 3d 5b 69 28 33 29 2c 69 28 31 29 2c 74 5d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6f 2e 42 61 63 6b 62 6f 6e 65 3d 73 28 6f 2c 69 2c 65 2c 74 29 7d 2e 61 70 70 6c 79 28 74 2c 6e 29 2c 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 65 2e 65 78 70 6f 72 74 73 3d 72 29 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 76 61 72 20 61 3d 72 65 71 75 69 72 65 28 22 75 6e 64 65 72 73 63 6f 72 65 22 29 3b 73 28 6f 2c 74 2c 61 29 7d 65 6c 73 65 7b 6f 2e 42 61 63 6b 62 6f 6e 65 3d 73 28 6f 2c 7b 7d 2c 6f 2e 5f 2c 6f 2e 6a 51 75 65 72 79 7c 7c Data Ascii: :function(e,t,i){var n,r;(function(o,s){if(true){!(n=[i(3),i(1),t],r=function(e,t,i){o.Backbone=s(o,i,e,t)}.apply(t,n),r!==undefined&&(e.exports=r))}else if(typeof t!=="undefined"){var a=require("underscore");s(o,t,a)}else{o.Backbone=s(o,{},o._,o.jQuery\|\|
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 65 72 22 2c 65 2c 74 29 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 61 6c 6c 3b 69 66 28 69 29 66 28 69 2c 74 29 3b 69 66 28 6e 29 66 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 73 74 6f 70 4c 69 73 74 65 6e 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 69 6e 67 54 6f 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 6f 3d 21 74 26 26 21 6e 3b 69 66 28 21 6e 26 26 74 79 70 65 6f 66 20 74 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 6e 3d 74 68 69 73 3b 69 66 28 65 29 28 72 3d 7b 7d 29 5b 65 2e 5f 6c 69 73 74 65 6e 49 64 5d 3d Data Ascii: er",e,t))return this;var i=this._events[e];var n=this._events.all;if(i)f(i,t);if(n)f(n,arguments);return this},stopListening:function(e,t,n){var r=this._listeningTo;if(!r)return this;var o=!t&&!n;if(!n&&typeof t==="object")n=this;if(e)(r={})[e._listenId]=
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 61 74 74 72 69 62 75 74 65 73 3d 7b 7d 3b 69 66 28 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 3d 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 3b 69 66 28 74 2e 70 61 72 73 65 29 6e 3d 74 68 69 73 2e 70 61 72 73 65 28 6e 2c 74 29 7c 7c 7b 7d 3b 6e 3d 69 2e 64 65 66 61 75 6c 74 73 28 7b 7d 2c 6e 2c 69 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 64 65 66 61 75 6c 74 73 22 29 29 3b 74 68 69 73 2e 73 65 74 28 6e 2c 74 29 3b 74 68 69 73 2e 63 68 61 6e 67 65 64 3d 7b 7d 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 69 2e 65 78 74 65 6e 64 28 70 2e 70 72 6f 74 6f 74 79 70 65 2c 75 2c 7b 63 68 61 6e 67 65 64 3a 6e 75 6c 6c 2c 76 61 6c 69 64 61 74 69 6f 6e 45 72 Data Ascii: attributes={};if(t.collection)this.collection=t.collection;if(t.parse)n=this.parse(n,t)\|\|{};n=i.defaults({},n,i.result(this,"defaults"));this.set(n,t);this.changed={};this.initialize.apply(this,arguments)};i.extend(p.prototype,u,{changed:null,validationEr
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 65 2c 76 6f 69 64 20 30 2c 69 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 2c 7b 75 6e 73 65 74 3a 74 72 75 65 7d 29 29 7d 2c 63 6c 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 29 74 5b 6e 5d 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 74 2c 69 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2c 7b 75 6e 73 65 74 3a 74 72 75 65 7d 29 29 7d 2c 68 61 73 43 68 61 6e 67 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 69 2e 69 73 45 6d 70 74 79 28 74 68 69 73 2e 63 68 61 6e 67 65 64 29 3b 72 65 74 75 72 6e 20 69 2e 68 61 73 28 74 68 69 73 2e 63 68 61 Data Ascii: turn this.set(e,void 0,i.extend({},t,{unset:true}))},clear:function(e){var t={};for(var n in this.attributes)t[n]=void 0;return this.set(t,i.extend({},e,{unset:true}))},hasChanged:function(e){if(e==null)return!i.isEmpty(this.changed);return i.has(this.cha
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 72 6e 20 66 61 6c 73 65 7d 69 66 28 75 29 75 28 6c 2c 65 2c 6e 29 3b 6c 2e 74 72 69 67 67 65 72 28 22 73 79 6e 63 22 2c 6c 2c 65 2c 6e 29 7d 3b 4f 28 74 68 69 73 2c 6e 29 3b 6f 3d 74 68 69 73 2e 69 73 4e 65 77 28 29 3f 22 63 72 65 61 74 65 22 3a 6e 2e 70 61 74 63 68 3f 22 70 61 74 63 68 22 3a 22 75 70 64 61 74 65 22 3b 69 66 28 6f 3d 3d 3d 22 70 61 74 63 68 22 29 6e 2e 61 74 74 72 73 3d 72 3b 73 3d 74 68 69 73 2e 73 79 6e 63 28 6f 2c 74 68 69 73 2c 6e 29 3b 69 66 28 72 26 26 6e 2e 77 61 69 74 29 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 3d 61 3b 72 65 74 75 72 6e 20 73 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 3f 69 2e 63 6c 6f 6e 65 28 65 29 3a 7b 7d 3b 76 61 72 20 74 3d 74 68 69 73 3b 76 61 72 20 6e 3d 65 2e 73 75 63 Data Ascii: rn false}if(u)u(l,e,n);l.trigger("sync",l,e,n)};O(this,n);o=this.isNew()?"create":n.patch?"patch":"update";if(o==="patch")n.attrs=r;s=this.sync(o,this,n);if(r&&n.wait)this.attributes=a;return s},destroy:function(e){e=e?i.clone(e):{};var t=this;var n=e.suc
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 28 65 2c 74 29 7b 74 7c 7c 28 74 3d 7b 7d 29 3b 69 66 28 74 2e 6d 6f 64 65 6c 29 74 68 69 73 2e 6d 6f 64 65 6c 3d 74 2e 6d 6f 64 65 6c 3b 69 66 28 74 2e 63 6f 6d 70 61 72 61 74 6f 72 21 3d 3d 76 6f 69 64 20 30 29 74 68 69 73 2e 63 6f 6d 70 61 72 61 74 6f 72 3d 74 2e 63 6f 6d 70 61 72 61 74 6f 72 3b 74 68 69 73 2e 5f 72 65 73 65 74 28 29 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 65 29 74 68 69 73 2e 72 65 73 65 74 28 65 2c 69 2e 65 78 74 65 6e 64 28 7b 73 69 6c 65 6e 74 3a 74 72 75 65 7d 2c 74 29 29 7d 3b 76 61 72 20 67 3d 7b 61 64 64 3a 74 72 75 65 2c 72 65 6d 6f 76 65 3a 74 72 75 65 2c 6d 65 72 67 65 3a 74 72 75 65 7d 3b 76 61 72 20 79 3d 7b 61 64 64 3a 74 72 75 65 2c 72 Data Ascii: (e,t){t\|\|(t={});if(t.model)this.model=t.model;if(t.comparator!==void 0)this.comparator=t.comparator;this._reset();this.initialize.apply(this,arguments);if(e)this.reset(e,i.extend({silent:true},t))};var g={add:true,remove:true,merge:true};var y={add:true,r
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 6c 3d 75 2e 70 61 72 73 65 28 6c 2c 74 29 3b 75 2e 73 65 74 28 6c 2c 74 29 3b 69 66 28 68 26 26 21 63 26 26 75 2e 68 61 73 43 68 61 6e 67 65 64 28 6d 29 29 63 3d 74 72 75 65 7d 65 5b 72 5d 3d 75 7d 65 6c 73 65 20 69 66 28 77 29 7b 61 3d 65 5b 72 5d 3d 74 68 69 73 2e 5f 70 72 65 70 61 72 65 4d 6f 64 65 6c 28 6c 2c 74 29 3b 69 66 28 21 61 29 63 6f 6e 74 69 6e 75 65 3b 76 2e 70 75 73 68 28 61 29 3b 74 68 69 73 2e 5f 61 64 64 52 65 66 65 72 65 6e 63 65 28 61 2c 74 29 7d 61 3d 75 7c 7c 61 3b 69 66 28 5f 26 26 28 61 2e 69 73 4e 65 77 28 29 7c 7c 21 62 5b 61 2e 69 64 5d 29 29 5f 2e 70 75 73 68 28 61 29 3b 62 5b 61 2e 69 64 5d 3d 74 72 75 65 7d 69 66 28 53 29 7b 66 6f 72 28 72 3d 30 2c 6f 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 2b 2b 72 29 7b 69 66 28 Data Ascii: l=u.parse(l,t);u.set(l,t);if(h&&!c&&u.hasChanged(m))c=true}e[r]=u}else if(w){a=e[r]=this._prepareModel(l,t);if(!a)continue;v.push(a);this._addReference(a,t)}a=u\|\|a;if(_&&(a.isNew()\|\|!b[a.id]))_.push(a);b[a.id]=true}if(S){for(r=0,o=this.length;r<o;++r){if(
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 64 5d 7d 2c 61 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 65 6c 73 5b 65 5d 7d 2c 77 68 65 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 69 2e 69 73 45 6d 70 74 79 28 65 29 29 72 65 74 75 72 6e 20 74 3f 76 6f 69 64 20 30 3a 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 74 3f 22 66 69 6e 64 22 3a 22 66 69 6c 74 65 72 22 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 7b 69 66 28 65 5b 69 5d 21 3d 3d 74 2e 67 65 74 28 69 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 74 72 75 65 7d 29 7d 2c 66 69 6e 64 57 68 65 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 68 65 72 65 28 65 2c 74 72 75 65 29 7d 2c 73 6f 72 Data Ascii: d]},at:function(e){return this.models[e]},where:function(e,t){if(i.isEmpty(e))return t?void 0:[];return this[t?"find":"filter"](function(t){for(var i in e){if(e[i]!==t.get(i))return false}return true})},findWhere:function(e){return this.where(e,true)},sor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.11	49730	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	642	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:46 UTC	959	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9677 X-GUploader-UploadID: ADPycdsatP3uOBH43PNMvxZOtintvSa5H1z49qk4vtDn6ukdJUU1Lr2JWaiuap_Ux-L3uoLIVD-6IIvnMtfUhStGT7M2PA Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Sat, 26 Aug 2023 06:41:03 GMT Last-Modified: Tue, 12 Feb 2019 18:19:08 GMT ETag: "6e0f7ad31bf187e0d88fc5787573ba71" x-goog-generation: 1549995548326466 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 9677 Content-Type: image/png x-goog-hash: crc32c=QhrKCw== x-goog-hash: md5=bg960xvxh+DYj8V4dXO6cQ== x-goog-storage-class: STANDARD Server: UploadServer Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:46 GMT Via: 1.1 varnish Age: 186531 X-Served-By: cache-nyc-kteb1890073-NYC X-Cache: HIT X-Cache-Hits: 578 X-Timer: S1728908387.763646,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c7 00 00 00 61 08 03 00 00 00 55 9e 45 07 00 00 02 fd 50 4c 54 45 ff ff ff 1b 1b 1b 17 17 17 e8 e8 e9 df df df 1f 1f 1f e4 e4 e5 15 15 15 e1 e1 e1 e3 e3 e3 e5 e5 e6 22 22 22 fd fd fd 12 12 12 e7 e7 e7 f9 f9 fa ea ea ea ef e6 df 24 24 24 ee ee ee 26 26 26 fb fb fb f5 f5 f8 f1 e7 e1 ec ec ed ea eb f0 0e 0e 0e e7 e8 ee ed ed f2 da d9 e1 e0 e0 e7 dd dd e4 d7 d7 de f2 e8 e2 28 28 28 e2 e2 e9 de dd dd eb e4 dc f1 f2 f6 d1 d0 d8 e6 e6 ec f7 f7 f9 eb eb ec e9 e9 ef fb f8 f6 ed e5 dd db da da ec ec f2 d5 d4 dc e4 e4 eb f2 f3 f7 ee ee f4 d3 d2 da cf ce d5 dc db e3 dd dc dc f0 f0 f0 cc cb d3 39 39 39 9c 90 8e df df e6 d5 d4 ce bb b7 bd 7d 7d 7d ef f0 f5 d8 d8 d8 32 32 32 2f 2f 2f be bb c0 b3 ae b2 45 45 45 e6 Data Ascii: PNGIHDRaUEPLTE"""$$$&&&(((999}}}222///EEE
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: a6 98 47 f1 38 24 0f ec 71 6f af 2d 9b b5 dd 89 87 ae 5c e9 8c 05 9b e3 cb 34 e0 31 ba 3c 8a 78 10 98 96 81 f2 95 21 6a f1 ab 8b f7 a1 61 17 97 57 2e 12 4f 80 d4 81 0f 5e e0 f1 65 81 ab 5b 6f 2a ee 51 58 1d f9 1e cc bb b3 bd e9 4c 26 7b 6a f5 d3 91 91 f8 53 67 b3 f3 07 96 5b 16 88 a2 79 00 5c 1e 2c cb 40 2f e2 c0 98 7c 19 48 46 50 11 e3 11 45 c0 43 17 e0 3c 0c 64 7e bf 1a b6 96 37 5e b4 96 56 8c e1 21 09 71 e5 2b d6 07 86 bd eb ed 4d 64 6e 0d 79 eb 13 e9 74 e2 a4 d3 19 bc 8f f1 1a 63 e7 81 02 a1 18 2d ab 67 39 11 4c 0a 86 01 47 c9 43 70 e1 11 8a 44 87 1b 5d 66 12 e5 42 e5 e7 a1 52 5c 56 1d 56 8d ee 57 6c f1 56 45 89 7d 17 dd ef e3 e7 44 53 3a a3 1a 1a 1a ca 64 cf 35 07 a3 75 af f3 3d c4 0d 27 f2 3d 60 b2 04 ef c1 a0 4c e8 80 03 63 08 8f dd 13 30 bb ba 86 Data Ascii: G8$qo-\41<x!jaW.O^e[o*QXL&{jSg[y\,@/\|HFPEC<d~7^V!q+Mdnytc-g9LGCpD]fBR\VVWlVE}DS:d5u='=`Lc0
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 5c c2 a8 af 76 88 70 ad 07 10 8d c0 01 c3 47 3d 60 d4 72 5c 7f dd f5 a5 0d c7 39 1c 15 39 94 b1 85 05 e0 70 d2 16 2f 66 25 5d c9 4c 72 c9 40 eb 28 0a b0 18 6a f0 8f df 9e 7e e6 4e 18 6b 5f 7f eb 2b 05 cb da 8c ac df 4f f0 0a e1 a7 11 cc df f3 15 ba 94 70 ea c0 5c 08 b9 55 d4 54 ed 81 05 8e 54 4a d0 a1 c6 14 7f 71 08 bf 2d 80 38 da db 81 e3 62 71 5e f1 2a f9 7b e3 ab 3d 3a 87 41 97 a0 08 c6 e5 48 64 96 32 06 07 80 78 5d 3a ab 19 e3 eb e4 37 bf f6 ed b7 df 3c 7e 93 4d 0b c6 12 66 82 20 78 65 d9 af 84 bb c2 81 a4 80 11 4a 02 82 e4 66 81 43 a6 7e 42 81 64 a8 8e b6 f5 a9 14 2a b8 95 bb 5c 86 d6 67 f4 7a 38 bc f0 94 0b 28 01 a3 bd fe 62 1c 37 54 27 a6 d7 3a c7 77 27 5d 16 ca 91 d5 11 3a da e9 76 bb 0d 16 5a a7 73 81 6b 51 5e 2b 86 c1 c1 ed 7e 9b 60 ac 1d e3 31 Data Ascii: \vpG=`r\99p/f%]Lr@(j~Nk_+Op\UTTJq-8bq^{=:AHd2x]:7<~Mf xeJfC~Bd\gz8(b7T':w']:vZskQ^+~`1
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 96 38 8d 11 8c 97 33 73 10 14 36 7f 3a ac 75 84 c1 b3 6c 7e 9b d1 d8 01 35 a4 1a e7 6d 15 3d e6 d6 fa 35 22 f5 0f f5 25 10 f9 67 22 e0 90 aa 34 21 0d d2 43 a3 59 9b d8 1a 96 0c 6e cb 5a 5a c0 dd 20 87 85 76 a2 d1 a3 c5 d9 89 cd 14 24 ab 7f cc 51 8a ee 70 aa 7b 64 c4 27 39 9f 43 f9 c5 50 77 e7 41 71 f9 9a ef 72 67 f2 f2 d4 d4 f8 42 24 9c 01 0e 97 81 34 5b ad bc 93 b7 b9 b2 09 10 c6 12 37 60 7e 2b 70 e0 50 d2 b5 6c 6a 98 75 f8 bc 34 94 44 10 64 00 0a 41 c5 af aa 3b d0 f6 b9 c5 bc aa cc 01 8f 61 0f 70 80 1c cd b3 9b 8b aa 66 88 f6 e6 e0 dc dc c6 a9 5a 0d 18 aa 50 f0 89 cf b6 43 9e d9 e8 ec 4e 74 65 7b e3 51 19 bc da 52 c3 31 d0 58 27 bf a1 ae a1 ed 86 f3 39 4c 9f 5e ca 46 8a 63 c5 e5 a1 62 31 72 79 ea f6 d5 ce 21 5f c2 0d 05 04 fc 88 b3 62 4e 8c a5 23 69 97 Data Ascii: 83s6:ul~5m=5"%g"4!CYnZZ v$Qp{d'9CPwAqrgB$4[7`~+pPlju4DdA;apfZPCNte{QR1X'9L^Fcb1ry!_bN#i
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 48 3f a2 89 e3 c3 e5 ef df 1e 72 15 d9 70 15 30 e8 8d c5 a0 96 13 13 99 41 e2 31 38 11 21 50 82 5a 6f e7 38 a2 05 8f 77 ef 58 5f 5e 5e 5f 3f a7 ff d7 8f 7b ec b5 ce 2a 6b ae 4c a5 30 ba ca 5a 52 92 75 12 bd 48 53 63 de 52 66 52 ba 92 e5 58 d5 c2 c5 88 42 25 d4 69 a5 1a a3 a5 24 3f 33 17 41 97 81 23 72 14 07 30 50 b3 33 df 7f 81 38 a8 c9 54 55 ec 82 35 04 18 96 00 3b 7e 0c 9e 24 8a ee 34 e0 e7 c6 c4 81 5b 99 db e0 47 4e 6b eb fc fe 43 e0 70 3a 6d d6 3c 59 62 9a a6 ad c4 9c 1f af d3 8b 45 69 6e 73 65 4b b1 31 4f ad d7 b8 32 35 8a 78 99 4c 24 14 eb 53 34 65 96 d2 4c 63 6a aa 51 2e 15 8a 02 38 ae e6 30 c6 dd 31 63 c3 f4 e9 b7 11 07 7e f1 a8 78 6a 36 8b e1 bb 0d c2 d1 70 69 81 10 76 9f 28 3b 41 8f 1f 14 10 c1 ce 6d e7 ea cb eb 9b 9b e7 f7 1d da 01 0e bb cd da Data Ascii: H?rp0A18!PZo8wX_^^_?{*kL0ZRuHScRfRXB%i$?3A#r0P38TU5;~$4[GNkCp:m<YbEinseK1O25xL$S4eLcjQ.801c~xj6piv(;Am
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 28 2c 69 fa 16 b7 c3 ab d2 09 75 52 39 71 88 25 d7 47 76 11 07 6e 1a 12 c7 c5 cf 7c 75 25 5c 82 36 fb 39 6e 9e 39 73 fa dd 01 1c c0 00 40 6c 6c 1c ad f0 b2 2d 67 86 ee 40 82 28 9e 23 f8 ba 8a c6 a2 f8 b6 72 74 57 75 75 d5 f3 57 f6 7f b7 bb db 6e ab a8 b2 d7 e4 63 11 54 9c 68 c8 36 57 5a 68 c5 50 6d aa ac b1 78 0d e0 c8 90 a4 6a 14 e2 64 89 f4 fa ae 6f ea 76 35 16 30 7e b4 c3 8f 40 0e 7f ce 3f 7f 6f e6 6c 70 f0 a7 c2 43 80 81 75 51 2c c2 11 06 c5 9d 7b 27 24 0e 04 5c c4 11 1e 1b 34 07 33 db ad cf 59 df 8c d1 bc 79 4e df 21 3f 47 a6 49 a5 97 62 2d ba 66 9d d5 a0 47 61 c9 dc 5b bc 96 4c 91 50 a7 16 cb 0d a9 5a a9 5e 2f b9 0b 1c e8 af 28 1f ed c8 c7 67 57 b3 1c 0b fd 73 59 f2 e3 bd 99 d3 47 d5 15 9a 19 0b 8c d8 38 6a 31 c7 c1 1b 12 45 22 a4 70 e2 08 1b 03 47 Data Ascii: (,iuR9q%Gvn\|u%\69n9s@ll-g@(#rtWuuWncTh6WZhPmxjdov50~@?olpCuQ,{'$\43YyN!?GIb-fGa[LPZ^/(gWsYG8j1E"pG
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 08 de 8f c8 e3 e7 e6 60 fc 68 47 8d 6f 9f ff e3 1d 5d dd 83 83 67 aa aa 6a 6b 9d 9e 92 36 83 5c 25 4e 16 ab 0c 96 b2 16 6b b1 44 24 4c 8a 57 68 5c a5 99 94 15 2c a1 3c 77 6c da 37 98 cd b4 d6 15 a2 cb 6a 3f 1d 0d 71 1c 68 2c 71 f8 fa ab 65 2f 52 5d 71 1c a4 b0 b8 38 a4 81 f3 83 de 68 fe 4b 6e 90 c8 14 f6 de c1 35 21 70 6d 61 b0 1c 3b d7 cf 99 4f 1c ab 97 ae ca f9 f0 b3 d3 83 0c 87 b3 d6 ee 29 cb 37 a8 54 da 64 a9 24 35 b3 04 6b 3e 0a 3c 7d 91 2c 37 b6 39 32 95 e0 d0 e9 92 14 e3 ba be 29 04 47 07 e6 26 4b d7 1c 8f 1e d9 ef 86 40 d4 f4 97 51 57 b7 c3 8f 11 1c 93 29 d6 40 e0 38 98 8a 02 0b c4 72 e0 34 71 84 8d 81 23 c2 c3 70 ac c1 9f 76 34 d6 7f 3a fe f8 60 e7 e0 d6 aa 0a 8f d3 e9 ac 49 4f 91 cb b5 52 75 bc bc d8 5b d6 52 aa 11 e3 9a 56 a5 cc 4d cf 54 66 24 Data Ascii: `hGo]gjk6\%NkD$LWh\,<wl7j?qh,qe/R]q8hKn5!pma;O)7Td$5k><},792)G&K@QW)@8r4q#pv4:`IORu[RVMTf$
2024-10-14 12:19:46 UTC	31	IN	Data Raw: 6f 20 26 61 22 3a ee 89 0c c7 3f 55 ac 27 d4 6f 18 be 59 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: o &a":?U'oYIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.11	49731	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	596	OUT	GET /uploads/1/5/0/2/150218705/published/nc.png?1720787398 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:46 UTC	902	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:46 GMT Content-Type: image/png Content-Length: 10617 Connection: close CF-Ray: 8d2785098f015e79-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "9d30862f22baeb52324f0b7015d5fbba" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 12 Jul 2024 12:29:59 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: cRqNcd9O08zFLPvtMIzSK8Fqql4Enb9BdUghkuZpjqPISL6RW9qyk4Rwy5SWF4oBaSXIFv+83XA= x-amz-replication-status: COMPLETED x-amz-request-id: T8XEXYYM000PCYMG x-amz-server-side-encryption: AES256 x-amz-version-id: pLUzeeT5_J2GV5s8m7Zy6PWGO7HHJC1i X-Storage-Bucket: z1e39 X-Storage-Object: 1e390418fddda8aed19b96c4f5fc78df4fbf953906ef376c8a7208d8a260e969 Server: cloudflare
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0d 00 00 00 55 08 06 00 00 00 53 b8 b1 26 00 00 29 40 49 44 41 54 78 da ec 9d 7b 70 d5 d5 9d c0 7f a2 b6 56 bb 6b 9d ba ed 4c ff 70 d7 6e 67 9c b5 4e ed ac b6 bb ad 2b b6 82 f2 90 5a 15 41 54 c0 ba 2c a0 2c a2 d8 6a c0 47 55 90 b7 58 11 ad 2d 50 f0 51 d7 55 1e 09 49 6e c8 fb 41 5e 40 02 01 12 92 00 42 1e 24 81 dc 57 6e 9e f7 fe 5e e7 b3 27 f7 77 6f 28 08 5a 66 ba bb b0 fb fd cc fc e6 de 9c f7 fd dd 39 9f df 39 e7 f7 bb 39 06 82 20 08 e7 80 48 43 10 04 91 86 20 08 22 0d 41 10 44 1a 82 20 88 34 04 41 10 69 08 82 20 88 34 04 41 10 69 08 82 20 d2 10 04 41 a4 21 08 82 48 43 10 04 91 86 20 08 82 48 43 10 04 91 86 20 08 17 8c 34 14 96 a3 88 59 ee a9 87 ed e2 2a fe d7 50 0a 6c 47 e1 2a ce 4b 9c c4 39 b3 5d Data Ascii: PNGIHDRUS&)@IDATx{pVkLpngN+ZAT,,jGUX-PQUInA^@B$Wn^'wo(Zf999 HC "AD 4Ai 4Ai A!HC HC 4YPlGK9]
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: b8 62 6a 1e 97 e9 38 63 7c 0e 8b ca 43 40 8c b5 6f 97 62 fc 28 95 2b ff 2d 87 cb 26 f8 b8 76 d1 5e 8e 25 a6 10 a6 e3 49 63 d9 92 62 8c 91 99 3c 52 ec 49 e3 89 41 69 8c f6 f1 9b ca 6e 2c 85 47 34 c4 cc 17 f3 30 c6 65 b3 40 a7 8b a3 5c 06 82 41 9e 59 be 5d d7 9f ce 88 37 1b 68 e9 b6 01 70 64 7a 22 9c ef d2 48 ae 69 dc 31 2f 1f 63 4c 06 5f 9b 92 c7 5f 8f dd ca 57 1f ce 67 76 45 27 4e 7b 1b d7 fe 3c 95 8b 66 94 b2 b1 a1 47 e7 19 e0 b7 1b 76 60 dc ba 85 09 eb 3f 25 18 0e 32 f7 c9 6d 5a 28 79 ac 28 3d 41 7b 38 86 89 62 8b 1e 29 5c 79 67 2a 3f 5c b8 97 ea 80 45 67 53 27 d3 e6 ea 74 f7 e7 b3 b4 31 42 ec 50 13 57 8d 4d e5 8a 27 2a c8 3a d2 0b 66 2f cb 56 97 61 fc 24 95 49 ef 36 61 db 51 16 2e 2f d0 82 ca e2 e5 c2 4e da bb bc 29 8e a3 c0 4a 48 23 f0 69 07 f7 cf cc Data Ascii: bj8c\|C@ob(+-&v^%Icb<RIAin,G40e@\AY]7hpdz"Hi1/cL__WgvE'N{<fGv`?%2mZ(y(=A{8b)\yg?\EgS't1BPWM':f/Va$I6aQ./N)JH#i
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: 17 1d e0 ba 87 06 f3 fb f8 bb b9 c5 4c 58 50 ca e5 a3 d2 79 b9 34 4c 47 53 1b 0f a7 e8 fc 63 d2 31 26 64 73 f9 c3 b9 3c b0 ba 96 ea 2e 1b b0 d8 9c b1 9f 5b 66 66 7b e5 8f f7 31 6c 52 36 2f 16 74 02 36 ef ff ae 34 2e a3 d9 89 29 05 4a 9d 79 7a 32 22 93 a9 c5 de 2d d7 39 cb f2 d1 b7 ad 75 59 89 43 7f ae 6f 3f 56 4c 8a 96 52 4b bf 4d 92 13 1d 1d fc 60 d2 46 86 3d 58 c4 ce 40 52 1a 32 3d 11 2e 00 69 28 a5 70 01 62 fd 7c 54 dc c4 f2 ec 36 0e 07 ad e4 13 99 43 1d c5 f3 4a 90 8f f3 9b 59 92 7a 94 b4 fd 41 a2 89 b8 de ae 7e 72 8a 9b 59 9e d3 46 6b 9f 73 ea 1d 00 bb 8f ea fd 1d f1 e1 7f c5 be 66 1e 9f 9f 17 9f 9e bc 79 a0 87 24 9d c7 02 7c 90 d3 c4 52 dd b1 b2 ea c3 38 78 78 af 2e cd 8d 1d bc 95 71 94 55 59 2d d4 b6 f5 e3 a8 44 7c f2 8d 1d 65 e7 ae 16 56 a4 37 93 Data Ascii: LXPy4LGSc1&ds<.[ff{1lR6/t64.)Jyz2"-9uYCo?VLRKM`F=X@R2=.i(pb\|T6CJYzA~rYFksfy$\|R8xx.qUY-D\|eV7
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: d9 51 04 cd 8d e2 fa 5d d9 bc 98 d0 85 d9 ed 57 4a 1c 7a dc 6a 44 71 9f 20 0b 3a cc 7c f4 49 2e 41 73 a2 d9 91 a3 05 00 fd 00 5b 5f 29 e2 93 32 1d 7e c3 fb e7 18 ec ef e7 cf 2b 43 08 7a 30 81 84 1e e5 98 4c 38 01 1d 6f 41 ab 59 f5 78 65 af 9b 63 f8 ca 42 39 71 26 f7 bf 93 76 e2 31 2a 28 1f cb ff 7b 02 db 75 22 79 c6 4f 31 7a 8f 42 63 71 03 93 1e 09 e1 92 dd a5 68 ed 50 99 5c c5 f5 8b c5 97 7f 8e 26 68 41 2c 41 b3 a2 38 73 51 1c 33 5f 2d 23 b4 de 08 c0 70 77 1f 5b 5e cb e2 d2 65 32 e6 91 28 19 13 cd 35 bb f3 f8 a0 68 d0 b7 a0 d4 f9 e5 07 9c e4 17 34 b3 f6 b9 54 ce 7e 74 24 46 62 64 7c 04 97 6d 4b e7 fd bc c1 09 df a2 ef 9e d8 ce 13 da 56 16 93 6f 24 69 d1 55 ac 7c b7 0e 0b 27 b6 d5 b1 e1 39 02 b2 32 d7 f1 6c fd fd ef 14 1e b3 98 9d ca f7 cf e5 76 7f 7f bc Data Ascii: Q]WJzjDq :\|I.As[_)2~+Cz0L8oAYxecB9q&v1*({u"yO1zBcqhP\&hA,A8sQ3_-#pw[^e2(5h4T~t$Fbd\|mKVo$iU\|'92lv
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: a6 73 d9 ba 54 ee 7d b9 88 2f f2 35 0c 2b 00 2e de fb bc 80 5b 5e c8 e7 c0 e1 2a 36 1f cc e5 72 f1 df d2 0f 6a 28 ea b5 78 bb 37 2b a9 19 f5 2c 7c 26 9d 4b d7 a6 30 e3 e5 62 22 6b 74 b8 bc ba fb f2 e6 60 9f 86 9d cf 66 71 ff ab e5 bc 1b 52 c1 0c 99 ef ba ad 19 ec 8b ef a2 d7 e2 42 35 a3 99 a4 54 e1 b5 47 78 6d 48 e5 f6 e7 f2 79 23 a5 c7 93 58 db aa 5a b9 6b 73 22 33 df ae a7 17 18 ea d3 b2 61 6f 2a 7f d8 53 4a a9 11 c0 ca a1 f7 f2 b9 62 6b 96 c4 b4 1e 7f a5 f9 df ad 34 54 d0 d0 0b 68 6c 8b 16 e7 a4 f2 45 a9 5e bd 06 e8 8d 83 cc 91 bf 9f 34 3f 99 d0 76 3b f4 f7 f0 f0 66 19 37 23 9c 2b b6 64 70 dd ba 04 82 a6 07 73 c5 33 c5 c8 65 01 8d 0e ae 9d 1d 26 ed 44 04 17 6d 4e e5 57 3b 52 39 73 fa 11 4e 5a 99 49 70 83 8e a2 82 46 6e 7a 36 9f cc 2e 2b b1 91 25 5c b5 Data Ascii: sT}/5+.[^6rj(x7+,\|&K0b"kt`fqRB5TGxmHy#XZks"3aoSJbk4ThlE^4?v;f7#+dps3e&DmNW;R9sNZIpFnz6.+%\
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: b5 5b 6a 7c 85 24 8b 30 7e 2a a0 e9 54 14 de f9 24 9b 93 25 2e 36 07 77 01 d0 58 d8 c0 54 59 ec 7f 7c ad 86 6e bd 91 9d cf c4 70 f2 ec 24 de 2d 1c c4 86 8b 60 89 41 91 9f 35 22 bf 03 70 79 93 8b b6 af 9f 25 eb 62 24 41 a4 11 dc 64 01 dc bc ff 45 ae f8 3b 8c 67 25 e6 6c 26 2d 4b 36 46 4a 3c a7 f0 55 9d 11 80 e6 f2 06 ae 9e 23 89 76 4b 21 dd 16 0b 6f 7f 20 ed a1 c4 fb 9b f9 3d 14 65 54 0b c0 84 31 45 aa db 45 5f b5 32 d4 dc c1 a5 92 94 a7 c9 fa eb b4 b8 7d eb e5 bf bd 11 3a 31 68 00 68 34 fd dc bb 3e 52 16 56 3a a9 ad 43 bc f2 6a 9a 28 94 c0 db a5 43 a8 e4 24 23 5e b2 b5 2c e2 69 df b4 82 ae 97 db 16 86 4b 4f 5d 44 79 bf ea a0 b7 3e cf f3 6c aa ae 0d ef 06 c0 6a f7 ed 05 28 44 1f 29 e4 b4 07 22 d8 28 a0 a1 f7 ed 0e 2b ea ce b3 af 3d 59 ba 3d 9a 93 97 65 90 Data Ascii: [j\|$0~*T$%.6wXTY\|np$-`A5"py%b$AdE;g%l&-K6FJ<U#vK!o =eT1EE_2}:1hh4>RV:Cj(C$#^,iKO]Dy>lj(D)"(+=Y=e
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: d3 9b e4 3e 0b 2d f4 80 c6 f3 09 1a 4c da 7e 66 ae 0a e7 27 ab b3 48 ea 55 e5 b4 75 b5 f3 fb 65 92 bc 56 67 90 df ef 00 a9 d6 1e 7c 3a 59 00 30 8a 1b 77 65 b1 27 b6 8b ba a2 7a ce 5a 18 c3 0d db e3 39 63 53 16 59 3d 5e 1d 3d c0 fe 03 7e 7b 72 df 8e 38 c9 9e 31 dc ba b7 84 15 ef 96 33 e3 e9 34 31 64 88 64 96 64 3e 2b d7 01 d0 55 de c8 cf a5 74 0c 7a 24 8e 7b fe 5e ca 9c 17 b3 64 4c b0 94 4f 39 14 eb 15 2c 43 dd fc 72 6e 08 67 6c c9 23 cf 5b 69 bc f1 51 8e b4 27 11 ac 09 eb 02 c0 ea 50 70 79 a3 31 3b a1 84 53 65 8e b3 a5 6f bf 63 6f 1e 7f 0d 6d a3 51 82 0d b7 7f 23 74 f1 e6 28 26 2f 90 1e ae 43 75 78 5c 74 09 67 4a bf b9 23 a2 83 ae 8e 4e 1e 59 3c 22 4f 22 f3 de ab 64 c9 81 5c 2e 98 27 0e 58 96 c2 b7 75 06 00 ec 9d dd 2c 7f 6e e4 1b 83 a3 4c dd 94 e6 d9 98 Data Ascii: >-L~f'HUueVg\|:Y0we'zZ9cSY=^=~{r81341ddd>+Utz${^dLO9,Crngl#[iQ'Ppy1;SeocomQ#t(&/Cux\tgJ#NY<"O"d\.'Xu,nL
2024-10-14 12:19:46 UTC	1034	IN	Data Raw: 00 0c 6b 74 bc fb 65 11 d7 af 19 f1 4b 0c 53 d6 a6 f0 e4 e1 66 ba 0d 0e 91 17 00 52 13 ab b8 48 c0 fe fa bd 15 74 b8 c1 2a f3 3f b1 3f 49 92 7a 1c af 64 0e 7a d6 a3 8a eb 3f 00 68 f8 9c 8a dd 4e 69 f3 10 71 e5 83 24 55 0c 12 5d 32 40 5a cd 10 9d 7a db 71 0e 47 29 f4 f7 e9 49 2a 1d 20 ae 42 4b db 90 cd 7f 88 c6 66 a3 a8 5a 43 66 a3 71 f4 2c 45 57 af 81 c4 ca 41 6a 07 6d fe 72 d7 af 2b 46 ad 89 dc 6a 99 b3 54 23 a5 a5 05 bb a2 8e f1 55 03 d5 8d 83 24 56 eb d0 da bc 2d 8b 8c 8f ab d4 50 ec 2d d1 9c 56 2b 79 95 03 c4 88 ec 0d fd 66 7a 65 be 38 91 dd f7 15 17 e0 39 03 90 5a ae a1 a0 d3 e2 d5 c5 df 87 63 b7 c9 1c 5a a2 0a fb 49 10 dd 1b fb 2d d8 46 4f 31 32 4a c3 5a 23 19 e5 aa ce bd 3a 0b b5 52 62 e7 36 1a 64 71 ba c7 d9 07 ac c6 61 f2 aa 34 24 54 89 dc 46 2b Data Ascii: kteKSfRHt??Izdz?hNiq$U]2@ZzqG)I BKfZCfq,EWAjmr+FjT#U$V-P-V+yfze89ZcZI-FO12JZ#:Rb6dqa4$TF+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.11	49732	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	612	OUT	GET /uploads/1/5/0/2/150218705/published/at-t-logo-2016-svg.png?1720787646 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:46 UTC	991	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:46 GMT Content-Type: image/png Content-Length: 3547 Connection: close CF-Ray: 8d2785096ba242c8-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "0a389e6eb13fc2df8c5df590992c7e67" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 08 Apr 2024 23:06:54 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: ACJ5eoZiRjkg5wZZrjFPPSr3QYZSoz9fLyGC1fG3+Fa+PkPdyXBcDE0/i4WiIdakzSynsmpHRO2MyP4ChGVRQw== x-amz-meta-btime: 2021-10-26T10:56:25.688Z x-amz-meta-mtime: 1635245785.688 x-amz-replication-status: COMPLETED x-amz-request-id: WWSVDGRJ0YT3H77V x-amz-server-side-encryption: AES256 x-amz-version-id: qhXAKFxMy7Sl0ji5VPHOAVR2XKI4i3tm X-Storage-Bucket: z54d7 X-Storage-Object: 54d7a245743195d60c153f18c4ed4fb8d927d7d760ee26f601b4c2dd2fc9c26b Server: cloudflare
2024-10-14 12:19:46 UTC	378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 83 00 00 00 36 08 06 00 00 00 e4 9a 2a a0 00 00 0d a2 49 44 41 54 78 da ed 9d 79 94 14 d5 15 c6 bb 7b 7a 16 50 14 a2 6c 81 83 82 42 70 41 e4 04 a2 22 e0 08 c1 0d 3d c1 7d c1 18 42 c0 88 80 41 e3 16 4d e2 12 49 24 60 54 d4 93 40 12 21 24 30 2c 2e 60 22 44 50 02 e2 02 82 28 01 01 41 c4 01 c4 41 13 50 81 d9 bb 2b df 1f df 33 f7 7c e7 54 57 77 d7 0c 90 9c 7a e7 fc 4e 75 57 bd aa 7e 53 f7 ab fb ee bb ef 75 4f 2c eb 32 eb 23 25 0e 92 b2 ef 48 50 0a ee 05 cf 82 b5 e0 53 50 0d d2 a4 0a 54 80 35 60 16 b8 1d f4 06 c5 72 ad 24 88 eb e7 46 e5 10 17 35 88 88 a0 00 0c 02 d3 c1 76 e0 e5 c9 07 e0 b7 a0 54 3f 2b 12 c4 e1 29 84 84 79 5a 9b 82 db c0 56 e0 09 f5 24 05 d2 7a 9c fb 52 a6 9e 27 ac 05 c3 cc 67 15 98 d7 a0 Data Ascii: PNGIHDR6*IDATxy{zPlBpA"=}BAMI$`T@!$0,.`"DP(AAP+3\|TWwzNuW~SuO,2#%HPSPT5`r$F5vT?+)yZV$zR'g
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: f4 0a 1e a9 03 f5 21 63 05 0d 28 eb e4 d8 eb a0 83 69 5b 77 30 de b4 0f f0 d8 ec 48 10 0d e9 15 f4 06 bf 04 a6 f0 75 31 b7 c7 83 39 20 a5 06 35 c6 24 78 0f 14 ad e3 23 8e 65 e0 4a 10 13 8f 70 1b eb 3c e8 46 1a 91 77 68 04 31 c8 cd 9d c0 9b 7e 0b df 27 e5 c6 77 06 77 82 57 c0 67 0d 10 1b 7c 04 e6 f1 f3 ba da 3c 03 89 81 41 ae 3e b7 3f 72 75 22 31 34 60 91 9b 3a d4 18 ea 69 ee 2b e4 36 61 45 41 9a 83 9e e0 3a 66 1f 9f 62 76 f1 45 b0 04 bc ca 27 7d 11 78 1e 4c 05 0f 83 51 e0 42 d0 45 33 90 fc bc 22 f3 fe c7 ae 4d d2 35 7d db 89 38 12 43 c3 14 1b 8c 7d 0d ec 01 1e d9 67 62 86 42 89 2b 92 32 e2 08 4b 11 28 91 c0 b0 2f 78 5d bc 88 67 ba 97 0d b1 27 77 fe b7 8b 8b 4a 88 32 7b 1b 00 34 2a dd 7f 9a b8 1b be 58 9e d8 02 31 58 9c fb 92 86 02 92 10 5c bd 22 50 4c 0a Data Ascii: !c(i[w0Hu19 5$x#eJp<Fwh1~'wwWg\|<A>?ru"14`:i+6aEA:fbvE'}xLQBE3"M5}8C}gbB+2K(/x]g'wJ2{4*X1X\"PL
2024-10-14 12:19:46 UTC	1369	IN	Data Raw: fc 20 17 9b fc 00 7c 17 dc 00 46 30 55 3d 8e 75 16 80 b5 01 8b 61 24 23 99 75 36 72 ae f1 06 a3 40 8b a0 11 85 18 b3 1d a8 04 1e 59 0a 74 9e e0 3d 1e 4b 8b 58 12 21 c4 60 db 37 16 ec 07 69 f5 0c dc 9e ec 3c 08 b7 17 81 b5 cc 64 6e 32 de aa 20 5f 31 9c e4 93 4b e8 0e a6 8b 77 48 9b 8c a3 17 02 4d 50 d5 e7 90 8e d6 6c e4 3e 30 c6 b4 7b 30 d8 62 02 dd 78 96 5d c4 cd 72 d3 46 ba e3 a6 ce 83 c0 33 a2 b9 db d5 09 21 06 0a 89 71 81 20 9e 61 25 68 02 62 dc ee 94 7a 3d dd 35 f3 15 c3 53 d2 c7 aa 28 da 33 c3 b7 02 a4 7c 5c 74 95 4d 4b 93 ba 7c 53 d1 ba 40 96 e8 39 15 5c 2d d5 d6 b4 b5 94 c7 fe 99 45 e2 49 8d b1 5c 02 c4 76 ee b8 31 e0 69 d2 7f af 91 a7 3b 5b 31 a8 10 bf 27 a3 15 27 c6 73 40 5a 8e 2d e7 39 3f 77 6d e5 f6 61 b9 66 5e 62 f8 1c 0c d0 54 b4 8a 82 74 01 Data Ascii: \|F0U=ua$#u6r@Yt=KX!`7i<dn2 _1KwHMPl>0{0bx]rF3!q a%hbz=5S(3\|\tMK\|S@9\-EI\v1i;[1''s@Z-9?wmaf^bTt
2024-10-14 12:19:46 UTC	431	IN	Data Raw: 21 12 42 83 88 61 9b df 57 f3 2f 30 2e 7f 15 dd 76 c7 80 49 ac 42 50 44 8a 49 89 50 cc e3 05 19 96 c5 f5 e7 50 74 2d f0 14 c6 10 4d a2 df 75 3a b8 bf 0f 5d c2 d9 41 1d d2 fd 8a 5d c0 89 a0 24 84 17 38 16 9c ce e4 d3 78 9f df 88 aa 35 41 e6 97 2e c8 8d 84 d0 88 45 d6 31 68 40 d6 8e c6 d2 ec 64 0d d8 0a 96 81 19 74 e7 f7 72 6a fa 26 f6 f1 a3 19 64 de cf 00 75 26 83 c4 8d 60 af df 6a 67 c9 2b ec a7 00 5b 3a 4f 14 fd 52 4b 63 97 92 a6 41 ff 4a e0 08 06 7f cf 88 30 c2 50 67 7f 25 46 58 03 46 80 62 06 98 ad a2 5f 88 3d 84 41 25 b7 6d 40 2f a0 43 cb 8b c0 43 60 21 f8 10 54 86 fc 71 d0 72 30 9f 5d c1 d7 4d 3e e1 56 30 30 36 6c 7b 2c fa ed e8 c3 43 10 dd b8 c4 6d 24 68 ed 33 ac ec 02 06 82 61 e0 a7 e0 31 f0 27 30 17 fc 95 a2 59 c0 29 f2 69 8c 47 46 73 0e a3 bd 5c Data Ascii: !BaW/0.vIBPDIPPt-Mu:]A]$8x5A.E1h@dtrj&du&`jg+[:ORKcAJ0Pg%FXFb_=A%m@/CC`!Tqr0]M>V006l{,Cm$h3a1'0Y)iGFs\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.11	49729	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	573	OUT	GET /js/site/footerSignup.js?buildTime=1728589706 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:46 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3600 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 10 Oct 2024 19:22:18 GMT ETag: "6708296a-e10" Expires: Thu, 24 Oct 2024 19:49:49 GMT Cache-Control: max-age=1209600 X-Host: grn140.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:46 GMT Age: 318598 X-Served-By: cache-sjc1000129-SJC, cache-ewr-kewr1740070-EWR X-Cache: HIT, HIT X-Cache-Hits: 28, 1 X-Timer: S1728908387.771853,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 66 61 6c 73 65 7d 3b 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 3b 69 2e 6c 6f 61 64 65 64 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 3b 72 2e 63 3d 65 3b 72 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 22 3b 72 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 77 69 6e 64 6f 77 2e 41 53 53 45 54 53 5f 42 41 53 45 Data Ascii: (function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={exports:{},id:n,loaded:false};t[n].call(i.exports,i,i.exports,r);i.loaded=true;return i.exports}r.m=t;r.c=e;r.p="https://cdn2.editmysite.com/js/";r.p="https://"+window.ASSETS_BASE
2024-10-14 12:19:46 UTC	1378	IN	Data Raw: 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 6e 75 6c 6c 3b 69 66 28 21 72 29 74 2e 61 70 70 6c 79 28 69 2c 6f 29 7d 3b 76 61 72 20 73 3d 72 26 26 21 6e 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 3b 6e 3d 73 65 74 54 69 6d 65 6f 75 74 28 61 2c 65 29 3b 69 66 28 73 29 74 2e 61 70 70 6c 79 28 69 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 65 3d 72 2e 65 6c 65 6d 65 6e 74 5b 30 5d 3b 66 28 65 29 3b 79 28 29 3b 76 61 72 20 6e 3d 74 28 22 23 77 73 69 74 65 2d 6d 69 6e 69 2d 63 61 72 74 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 29 7b 69 66 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 Data Ascii: n;return function(){var i=this;var o=arguments;var a=function(){n=null;if(!r)t.apply(i,o)};var s=r&&!n;clearTimeout(n);n=setTimeout(a,e);if(s)t.apply(i,o)}}function l(){var e=r.element[0];f(e);y();var n=t("#wsite-mini-cart");if(n.length){if(window.innerHe
2024-10-14 12:19:46 UTC	844	IN	Data Raw: 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 77 69 64 74 68 22 2c 22 31 30 30 25 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 68 65 69 67 68 74 22 2c 22 34 35 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 6c 65 66 74 22 2c 22 30 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 7a 2d 69 6e 64 65 78 22 2c 22 35 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 74 28 22 69 6d 67 2e 66 6f 6f 74 65 72 2d 61 62 2d 70 75 62 6c 69 73 68 65 64 2d 74 6f 61 73 74 2d 69 6d 61 67 65 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 2c 22 69 6d 70 6f 72 74 61 Data Ascii: le.setProperty("width","100%","important");e.style.setProperty("height","45px","important");e.style.setProperty("left","0px","important");e.style.setProperty("z-index","5","important");t("img.footer-ab-published-toast-image").css("display","none","importa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.11	49733	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:46 UTC	580	OUT	GET /files/templateArtifacts.js?1720804667 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:47 UTC	437	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:46 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d27850a1dd30f8f-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: grn72.sf2p.intern.weebly.net Server: cloudflare
2024-10-14 12:19:47 UTC	932	IN	Data Raw: 31 62 66 38 0d 0a 2f 2f 20 47 65 74 73 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 5f 57 0a 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 57 65 65 62 6c 79 2e 74 65 6d 70 6c 61 74 65 73 20 3d 20 7b 0a 09 09 27 73 65 61 72 63 68 2f 66 69 6c 74 65 72 2f 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 20 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 66 61 63 65 74 5f 6e 61 6d 65 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 7b 7b 63 6f 6c 75 6d 6e 5f 6e 61 6d 65 7d 7d 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 Data Ascii: 1bf8// Gets converted to _WWeebly = window.Weebly \|\| {};Weebly.templates = {'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul clas
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 6e 61 6d 65 3d 5c 22 7b 7b 66 69 6c 74 65 72 5f 74 65 78 74 7d 7d 5c 22 20 76 61 6c 75 65 3d 5c 22 31 5c 22 20 5c 2f 3e 3c 21 2d 2d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 7b 7b 21 20 43 6f 6d 6d 65 6e 74 69 6e 67 20 27 68 61 63 6b 27 20 74 6f 20 72 65 6d 6f 76 65 20 73 70 61 63 65 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 2d 2d 3e 3c 61 3e 20 7b 7b 21 20 54 68 65 73 65 20 61 72 65 6e 27 74 20 72 65 61 6c 20 6c 69 6e 6b 73 2c 20 75 73 65 64 20 74 6f 20 75 73 65 20 74 68 65 6d 65 20 63 6f 6c 6f 72 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 5c Data Ascii: \t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{filter_text}}\" value=\"1\" \/>...\n\t\t\t\t\t\t{{! Commenting 'hack' to remove spaces }}\n\t\t\t\t\t\t--><a> {{! These aren't real links, used to use theme colors }}\n\t\t\t\t\t\t\
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 63 6f 72 65 2e 73 65 61 72 63 68 2e 66 69 6c 74 65 72 2e 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 61 63 65 74 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 65 6e 74 72 69 65 73 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 Data Ascii: t-availability\">\n\t<h3>{{#stl}}templates.platform.theme.core.search.filter.search-facet-availability_1{{\/stl}}<\/h3>\n\t<form name=\"availability-facet\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t<li>\n\t\t\t\t<label>\n\t\t\t\t\t<input typ
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 70 72 6f 64 75 63 74 2d 67 72 6f 75 70 7d 7d 5c 6e 7b 7b 5c 2f 68 61 73 5f 70 72 6f 64 75 63 74 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 6e 6f 72 6d 61 6c 7d 7d 5c 6e 7b 7b 5c 2f 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 6d 70 74 79 7d 7d 5c 6e 7b 7b 5c 2f 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 65 72 72 6f 72 5f 72 65 73 75 6c 74 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 72 72 6f 72 7d 7d 5c 6e 7b 7b Data Ascii: ch\/results\/product-group}}\n{{\/has_product_results}}\n\n{{#page_results}}\n\t{{> search\/results\/normal}}\n{{\/page_results}}\n\n{{#no_results}}\n\t{{> search\/results\/empty}}\n{{\/no_results}}\n\n{{#error_result}}\n\t{{> search\/results\/error}}\n{{
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 5c 22 3e 5c 6e 5c 74 5c 74 7b 7b 23 68 69 67 68 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 6c 6f 77 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 79 5f 68 74 6d 6c 7d 7d 7d 7b 7b 6c 6f 77 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 5c 2f 73 70 61 6e 3e 5c 6e 5c 74 5c 74 5c 74 20 2d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 68 69 67 68 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 Data Ascii: arch-product-price\">\n\t\t{{#high_price_number}}\n\t\t\t<span class=\"wsite-search-product-price-low\">\n\t\t\t\t{{{currency_html}}}{{low_price_number}}\n\t\t\t<\/span>\n\t\t\t -\n\t\t\t<span class=\"wsite-search-product-price-high\">\n\t\t\t\t{{{currenc
2024-10-14 12:19:47 UTC	760	IN	Data Raw: 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 6e 6f 2d 72 65 73 75 6c 74 73 5c 22 3e 5c 6e 5c 74 3c 70 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 62 61 73 65 2e 73 65 61 72 63 68 2e 72 65 73 75 6c 74 73 2e 65 72 72 6f 72 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 70 3e 5c 6e 3c 5c 2f 6c 69 3e 5c 6e 22 2c 0a 09 09 27 73 65 61 72 63 68 2f 63 6f 72 65 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 73 74 27 3a 20 22 3c 6f 6c 20 69 64 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 61 67 65 6e 61 76 5c 22 3e 5c 6e 5c 74 7b 7b 23 70 61 67 69 6e 61 74 69 6f 6e 5f 69 74 65 6d 73 7d 7d 5c 6e 5c 74 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 70 61 67 69 6e 61 74 69 6f 6e 2d 69 74 65 6d 7d 7d 5c 6e 5c 74 Data Ascii: or': "<li class=\"no-results\">\n\t<p>{{#stl}}templates.platform.theme.base.search.results.error_1{{\/stl}}<\/p>\n<\/li>\n",'search/core-pagination-list': "<ol id=\"wsite-search-pagenav\">\n\t{{#pagination_items}}\n\t\t{{> search\/pagination-item}}\n\t
2024-10-14 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.11	49736	151.101.129.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	365	OUT	GET /js/jquery-1.8.3.min.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:47 UTC	664	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93636 Server: nginx Content-Type: application/javascript Last-Modified: Mon, 30 Sep 2024 20:38:26 GMT ETag: "66fb0c42-16dc4" Expires: Tue, 15 Oct 2024 08:25:47 GMT Cache-Control: max-age=1209600 X-Host: blu142.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:47 GMT Age: 1137240 X-Served-By: cache-sjc10032-SJC, cache-ewr-kewr1740043-EWR X-Cache: HIT, HIT X-Cache-Hits: 16, 1 X-Timer: S1728908387.331770,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:47 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: /! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(
2024-10-14 12:19:47 UTC	16384	IN	Data Raw: 65 6e 74 4c 6f 61 64 65 64 22 2c 41 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 76 2e 72 65 61 64 79 2c 21 31 29 3b 65 6c 73 65 7b 69 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 41 29 2c 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 76 2e 72 65 61 64 79 29 3b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 6e 3d 65 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 3d 6e 75 6c 6c 26 26 69 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 73 29 7b 7d 6e 26 26 6e 2e 64 6f 53 63 72 6f 6c 6c 26 26 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 21 76 2e 69 73 52 65 61 64 79 29 7b 74 72 79 7b 6e 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c Data Ascii: entLoaded",A,!1),e.addEventListener("load",v.ready,!1);else{i.attachEvent("onreadystatechange",A),e.attachEvent("onload",v.ready);var n=!1;try{n=e.frameElement==null&&i.documentElement}catch(s){}n&&n.doScroll&&function o(){if(!v.isReady){try{n.doScroll("l
2024-10-14 12:19:47 UTC	16384	IN	Data Raw: 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 74 2b 22 22 7d 7d 29 2c 76 2e 73 75 70 70 6f 72 74 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 76 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 76 2e 65 78 74 65 6e 64 28 76 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 2c 6e 75 6c 6c 7d 7d 29 29 2c 76 2e 73 75 70 70 6f 72 74 2e 65 6e 63 74 79 70 65 Data Ascii: set:function(e,t){return e.style.cssText=t+""}}),v.support.optSelected\|\|(v.propHooks.selected=v.extend(v.propHooks.selected,{get:function(e){var t=e.parentNode;return t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex),null}})),v.support.enctype
2024-10-14 12:19:47 UTC	16384	IN	Data Raw: 75 65 53 6f 72 74 28 6c 29 7d 72 65 74 75 72 6e 20 54 26 26 28 62 3d 6b 2c 63 3d 4e 29 2c 78 7d 3b 72 65 74 75 72 6e 20 6f 2e 65 6c 3d 30 2c 72 3f 4e 28 6f 29 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 72 3c 69 3b 72 2b 2b 29 6e 74 28 65 2c 74 5b 72 5d 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 2c 74 2c 6e 2c 72 2c 73 29 7b 76 61 72 20 6f 2c 75 2c 66 2c 6c 2c 63 2c 68 3d 75 74 28 65 29 2c 70 3d 68 2e 6c 65 6e 67 74 68 3b 69 66 28 21 72 26 26 68 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 75 3d 68 5b 30 5d 3d 68 5b 30 5d 2e 73 6c 69 63 65 28 30 29 3b 69 66 28 75 2e 6c 65 6e 67 74 68 3e 32 26 26 28 66 3d 75 5b 30 5d 29 2e 74 79 70 65 Data Ascii: ueSort(l)}return T&&(b=k,c=N),x};return o.el=0,r?N(o):o}function dt(e,t,n){var r=0,i=t.length;for(;r<i;r++)nt(e,t[r],n);return n}function vt(e,t,n,r,s){var o,u,f,l,c,h=ut(e),p=h.length;if(!r&&h.length===1){u=h[0]=h[0].slice(0);if(u.length>2&&(f=u[0]).type
2024-10-14 12:19:47 UTC	16384	IN	Data Raw: 74 65 6e 64 28 7b 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 2e 61 63 63 65 73 73 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 3f 76 2e 74 65 78 74 28 74 68 69 73 29 3a 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 28 74 68 69 73 5b 30 5d 26 26 74 68 69 73 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 69 29 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 65 29 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 77 72 61 70 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 28 74 Data Ascii: tend({text:function(e){return v.access(this,function(e){return e===t?v.text(this):this.empty().append((this[0]&&this[0].ownerDocument\|\|i).createTextNode(e))},null,e,arguments.length)},wrapAll:function(e){if(v.isFunction(e))return this.each(function(t){v(t
2024-10-14 12:19:47 UTC	11716	IN	Data Raw: 29 2c 74 68 69 73 7d 7d 3b 64 2e 70 72 6f 6d 69 73 65 28 78 29 2c 78 2e 73 75 63 63 65 73 73 3d 78 2e 64 6f 6e 65 2c 78 2e 65 72 72 6f 72 3d 78 2e 66 61 69 6c 2c 78 2e 63 6f 6d 70 6c 65 74 65 3d 6d 2e 61 64 64 2c 78 2e 73 74 61 74 75 73 43 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3b 69 66 28 45 3c 32 29 66 6f 72 28 74 20 69 6e 20 65 29 67 5b 74 5d 3d 5b 67 5b 74 5d 2c 65 5b 74 5d 5d 3b 65 6c 73 65 20 74 3d 65 5b 78 2e 73 74 61 74 75 73 5d 2c 78 2e 61 6c 77 61 79 73 28 74 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 2e 75 72 6c 3d 28 28 65 7c 7c 63 2e 75 72 6c 29 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 68 6e 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 6d 6e 2c 6c 6e 5b 31 5d 2b 22 2f 2f 22 29 2c 63 2e 64 61 74 61 54 79 Data Ascii: ),this}};d.promise(x),x.success=x.done,x.error=x.fail,x.complete=m.add,x.statusCode=function(e){if(e){var t;if(E<2)for(t in e)g[t]=[g[t],e[t]];else t=e[x.status],x.always(t)}return this},c.url=((e\|\|c.url)+"").replace(hn,"").replace(mn,ln[1]+"//"),c.dataTy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.11	49737	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	763	OUT	GET /files/theme/plugins.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:47 UTC	849	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:47 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d27850d18817c99-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c" Last-Modified: Mon, 29 Apr 2024 13:02:46 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: nPGdoskgCsxpJStTPYFXtlQsNFakCpUgJVVQI7M2H4op1W5A21h9uScbCHW0m7OaaV/Kya4GQSs= x-amz-replication-status: COMPLETED x-amz-request-id: 4HKN80SFVE40J8Z9 x-amz-server-side-encryption: AES256 x-amz-version-id: sTNQn2rzaHgQudj7CuT9D50TBpz30e4M X-Storage-Bucket: zb635 X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5 Server: cloudflare
2024-10-14 12:19:47 UTC	520	IN	Data Raw: 32 32 64 63 0d 0a 0a 2f 2a 21 20 48 61 6d 6d 65 72 2e 4a 53 20 2d 20 76 32 2e 30 2e 34 20 2d 20 32 30 31 34 2d 30 39 2d 32 38 0a 20 2a 20 68 74 74 70 3a 2f 2f 68 61 6d 6d 65 72 6a 73 2e 67 69 74 68 75 62 2e 69 6f 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4a 6f 72 69 6b 20 54 61 6e 67 65 6c 64 65 72 3b 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 65 78 70 6f 72 74 4e 61 6d 65 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 76 61 72 20 56 45 4e 44 4f 52 5f 50 52 45 46 49 58 45 53 20 3d 20 5b 27 27 2c 20 27 77 65 62 6b 69 Data Ascii: 22dc/! Hammer.JS - v2.0.4 - 2014-09-28 http://hammerjs.github.io/ * * Copyright (c) 2014 Jorik Tangelder; * Licensed under the MIT license */(function(window, document, exportName, undefined) { 'use strict';var VENDOR_PREFIXES = ['', 'webki
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 6f 75 74 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 63 6f 6e 74 65 78 74 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 6e 75 6d 62 65 72 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 69 6d 65 6f 75 74 43 6f 6e 74 65 78 74 28 66 6e 2c 20 74 69 6d 65 6f 75 74 2c 20 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 62 69 6e 64 46 6e 28 66 6e 2c 20 63 6f 6e 74 65 78 74 29 2c 20 74 69 6d 65 6f 75 74 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 69 66 20 74 68 65 20 61 72 67 75 6d 65 6e 74 20 69 73 20 61 6e 20 61 72 72 61 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 65 78 65 63 75 74 65 20 74 68 65 20 66 6e 20 6f 6e 20 65 61 63 68 20 65 6e 74 72 79 0a 20 2a 20 69 66 20 69 74 20 61 69 6e 74 20 61 6e Data Ascii: out * @param {Object} context * @returns {number} /function setTimeoutContext(fn, timeout, context) { return setTimeout(bindFn(fn, context), timeout);}/* * if the argument is an array, we want to execute the fn on each entry * if it aint an
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 72 67 65 5d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 4f 62 6a 65 63 74 7d 20 64 65 73 74 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 65 73 74 2c 20 73 72 63 2c 20 6d 65 72 67 65 29 20 7b 0a 20 20 20 20 76 61 72 20 6b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 72 63 29 3b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 30 3b 0a 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6b 65 79 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6d 65 72 67 65 20 7c 7c 20 28 6d 65 72 67 65 20 26 26 20 64 65 73 74 5b 6b 65 79 73 5b 69 5d 5d 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 74 5b 6b 65 79 73 5b 69 5d 5d 20 3d 20 73 72 63 5b 6b 65 79 73 5b 69 5d 5d 3b 0a Data Ascii: rge] * @returns {Object} dest */function extend(dest, src, merge) { var keys = Object.keys(src); var i = 0; while (i < keys.length) { if (!merge \|\| (merge && dest[keys[i]] === undefined)) { dest[keys[i]] = src[keys[i]];
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 67 73 5d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 42 6f 6f 6c 65 61 6e 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 62 6f 6f 6c 4f 72 46 6e 28 76 61 6c 2c 20 61 72 67 73 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 76 61 6c 20 3d 3d 20 54 59 50 45 5f 46 55 4e 43 54 49 4f 4e 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 2e 61 70 70 6c 79 28 61 72 67 73 20 3f 20 61 72 67 73 5b 30 5d 20 7c 7c 20 75 6e 64 65 66 69 6e 65 64 20 3a 20 75 6e 64 65 66 69 6e 65 64 2c 20 61 72 67 73 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 75 73 65 20 74 68 65 20 76 61 6c 32 20 77 68 65 6e 20 76 61 6c 31 20 69 73 20 75 6e 64 65 66 69 6e 65 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7d 20 Data Ascii: gs] * @returns {Boolean} /function boolOrFn(val, args) { if (typeof val == TYPE_FUNCTION) { return val.apply(args ? args[0] \|\| undefined : undefined, args); } return val;}/* * use the val2 when val1 is undefined * @param {*}
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 73 74 72 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 66 69 6e 64 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 42 6f 6f 6c 65 61 6e 7d 20 66 6f 75 6e 64 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 53 74 72 28 73 74 72 2c 20 66 69 6e 64 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 74 72 2e 69 6e 64 65 78 4f 66 28 66 69 6e 64 29 20 3e 20 2d 31 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 73 70 6c 69 74 20 73 74 72 69 6e 67 20 6f 6e 20 77 68 69 74 65 73 70 61 63 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 73 74 72 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 41 72 72 61 79 7d 20 77 6f 72 64 73 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 70 6c 69 74 53 74 72 28 73 74 72 29 20 7b 0a 20 20 Data Ascii: param {String} str * @param {String} find * @returns {Boolean} found /function inStr(str, find) { return str.indexOf(find) > -1;}/* * split string on whitespace * @param {String} str * @returns {Array} words */function splitStr(str) {
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 20 76 61 72 20 69 20 3d 20 30 3b 0a 0a 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 73 72 63 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 6b 65 79 20 3f 20 73 72 63 5b 69 5d 5b 6b 65 79 5d 20 3a 20 73 72 63 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 41 72 72 61 79 28 76 61 6c 75 65 73 2c 20 76 61 6c 29 20 3c 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 73 72 63 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 5b 69 5d 20 3d 20 76 61 6c 3b 0a 20 20 20 20 20 20 20 20 69 2b 2b 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 73 6f 72 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6b 65 79 29 20 7b 0a 20 20 Data Ascii: var i = 0; while (i < src.length) { var val = key ? src[i][key] : src[i]; if (inArray(values, val) < 0) { results.push(src[i]); } values[i] = val; i++; } if (sort) { if (!key) {
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 2f 6d 6f 62 69 6c 65 7c 74 61 62 6c 65 74 7c 69 70 28 61 64 7c 68 6f 6e 65 7c 6f 64 29 7c 61 6e 64 72 6f 69 64 2f 69 3b 0a 0a 76 61 72 20 53 55 50 50 4f 52 54 5f 54 4f 55 43 48 20 3d 20 28 27 6f 6e 74 6f 75 63 68 73 74 61 72 74 27 20 69 6e 20 77 69 6e 64 6f 77 29 3b 0a 76 61 72 20 53 55 50 50 4f 52 54 5f 50 4f 49 4e 54 45 52 5f 45 56 45 4e 54 53 20 3d 20 70 72 65 66 69 78 65 64 28 77 69 6e 64 6f 77 2c 20 27 50 6f 69 6e 74 65 72 45 76 65 6e 74 27 29 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 76 61 72 20 53 55 50 50 4f 52 54 5f 4f 4e 4c 59 5f 54 4f 55 43 48 20 3d 20 53 55 50 50 4f 52 54 5f 54 4f 55 43 48 20 26 26 20 4d 4f 42 49 4c 45 5f 52 45 47 45 58 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3b 0a 0a 76 61 72 20 49 Data Ascii: /mobile\|tablet\|ip(ad\|hone\|od)\|android/i;var SUPPORT_TOUCH = ('ontouchstart' in window);var SUPPORT_POINTER_EVENTS = prefixed(window, 'PointerEvent') !== undefined;var SUPPORT_ONLY_TOUCH = SUPPORT_TOUCH && MOBILE_REGEX.test(navigator.userAgent);var I
2024-10-14 12:19:47 UTC	198	IN	Data Raw: 6f 6d 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 62 6f 6f 6c 4f 72 46 6e 28 6d 61 6e 61 67 65 72 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 2c 20 5b 6d 61 6e 61 67 65 72 5d 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 68 61 6e 64 6c 65 72 28 65 76 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 74 68 69 73 2e 69 6e 69 74 28 29 3b 0a 0a 7d 0a 0a 49 6e 70 75 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 73 68 6f 75 6c 64 0d 0a Data Ascii: omHandler = function(ev) { if (boolOrFn(manager.options.enable, [manager])) { self.handler(ev); } }; this.init();}Input.prototype = { /** * should
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 20 68 61 6e 64 6c 65 20 74 68 65 20 69 6e 70 75 74 45 76 65 6e 74 20 64 61 74 61 20 61 6e 64 20 74 72 69 67 67 65 72 20 74 68 65 20 63 61 6c 6c 62 61 63 6b 0a 20 20 20 20 20 2a 20 40 76 69 72 74 75 61 6c 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 68 61 6e 64 6c 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 7d 2c 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 62 69 6e 64 20 74 68 65 20 65 76 65 6e 74 73 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 76 45 6c 20 26 26 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 20 74 68 69 73 2e 65 76 45 6c 2c 20 74 68 69 73 2e 64 6f 6d 48 61 6e 64 6c 65 72 29 Data Ascii: 7ff2 handle the inputEvent data and trigger the callback * @virtual / handler: function() { }, /* * bind the events */ init: function() { this.evEl && addEventListeners(this.element, this.evEl, this.domHandler)
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 29 28 6d 61 6e 61 67 65 72 2c 20 69 6e 70 75 74 48 61 6e 64 6c 65 72 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 68 61 6e 64 6c 65 20 69 6e 70 75 74 20 65 76 65 6e 74 73 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4d 61 6e 61 67 65 72 7d 20 6d 61 6e 61 67 65 72 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 65 76 65 6e 74 54 79 70 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 69 6e 70 75 74 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 70 75 74 48 61 6e 64 6c 65 72 28 6d 61 6e 61 67 65 72 2c 20 65 76 65 6e 74 54 79 70 65 2c 20 69 6e 70 75 74 29 20 7b 0a 20 20 20 20 76 61 72 20 70 6f 69 6e 74 65 72 73 4c 65 6e 20 3d 20 69 6e 70 75 74 2e 70 6f 69 6e 74 65 72 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 76 61 72 20 63 68 61 6e 67 65 64 50 6f Data Ascii: )(manager, inputHandler);}/** * handle input events * @param {Manager} manager * @param {String} eventType * @param {Object} input */function inputHandler(manager, eventType, input) { var pointersLen = input.pointers.length; var changedPo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.11	49738	151.101.129.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	396	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:47 UTC	959	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9677 X-GUploader-UploadID: ADPycdsatP3uOBH43PNMvxZOtintvSa5H1z49qk4vtDn6ukdJUU1Lr2JWaiuap_Ux-L3uoLIVD-6IIvnMtfUhStGT7M2PA Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Sat, 26 Aug 2023 06:41:03 GMT Last-Modified: Tue, 12 Feb 2019 18:19:08 GMT ETag: "6e0f7ad31bf187e0d88fc5787573ba71" x-goog-generation: 1549995548326466 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 9677 Content-Type: image/png x-goog-hash: crc32c=QhrKCw== x-goog-hash: md5=bg960xvxh+DYj8V4dXO6cQ== x-goog-storage-class: STANDARD Server: UploadServer Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:47 GMT Via: 1.1 varnish Age: 186531 X-Served-By: cache-nyc-kteb1890068-NYC X-Cache: HIT X-Cache-Hits: 565 X-Timer: S1728908387.348180,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c7 00 00 00 61 08 03 00 00 00 55 9e 45 07 00 00 02 fd 50 4c 54 45 ff ff ff 1b 1b 1b 17 17 17 e8 e8 e9 df df df 1f 1f 1f e4 e4 e5 15 15 15 e1 e1 e1 e3 e3 e3 e5 e5 e6 22 22 22 fd fd fd 12 12 12 e7 e7 e7 f9 f9 fa ea ea ea ef e6 df 24 24 24 ee ee ee 26 26 26 fb fb fb f5 f5 f8 f1 e7 e1 ec ec ed ea eb f0 0e 0e 0e e7 e8 ee ed ed f2 da d9 e1 e0 e0 e7 dd dd e4 d7 d7 de f2 e8 e2 28 28 28 e2 e2 e9 de dd dd eb e4 dc f1 f2 f6 d1 d0 d8 e6 e6 ec f7 f7 f9 eb eb ec e9 e9 ef fb f8 f6 ed e5 dd db da da ec ec f2 d5 d4 dc e4 e4 eb f2 f3 f7 ee ee f4 d3 d2 da cf ce d5 dc db e3 dd dc dc f0 f0 f0 cc cb d3 39 39 39 9c 90 8e df df e6 d5 d4 ce bb b7 bd 7d 7d 7d ef f0 f5 d8 d8 d8 32 32 32 2f 2f 2f be bb c0 b3 ae b2 45 45 45 e6 Data Ascii: PNGIHDRaUEPLTE"""$$$&&&(((999}}}222///EEE
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: a6 98 47 f1 38 24 0f ec 71 6f af 2d 9b b5 dd 89 87 ae 5c e9 8c 05 9b e3 cb 34 e0 31 ba 3c 8a 78 10 98 96 81 f2 95 21 6a f1 ab 8b f7 a1 61 17 97 57 2e 12 4f 80 d4 81 0f 5e e0 f1 65 81 ab 5b 6f 2a ee 51 58 1d f9 1e cc bb b3 bd e9 4c 26 7b 6a f5 d3 91 91 f8 53 67 b3 f3 07 96 5b 16 88 a2 79 00 5c 1e 2c cb 40 2f e2 c0 98 7c 19 48 46 50 11 e3 11 45 c0 43 17 e0 3c 0c 64 7e bf 1a b6 96 37 5e b4 96 56 8c e1 21 09 71 e5 2b d6 07 86 bd eb ed 4d 64 6e 0d 79 eb 13 e9 74 e2 a4 d3 19 bc 8f f1 1a 63 e7 81 02 a1 18 2d ab 67 39 11 4c 0a 86 01 47 c9 43 70 e1 11 8a 44 87 1b 5d 66 12 e5 42 e5 e7 a1 52 5c 56 1d 56 8d ee 57 6c f1 56 45 89 7d 17 dd ef e3 e7 44 53 3a a3 1a 1a 1a ca 64 cf 35 07 a3 75 af f3 3d c4 0d 27 f2 3d 60 b2 04 ef c1 a0 4c e8 80 03 63 08 8f dd 13 30 bb ba 86 Data Ascii: G8$qo-\41<x!jaW.O^e[o*QXL&{jSg[y\,@/\|HFPEC<d~7^V!q+Mdnytc-g9LGCpD]fBR\VVWlVE}DS:d5u='=`Lc0
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 5c c2 a8 af 76 88 70 ad 07 10 8d c0 01 c3 47 3d 60 d4 72 5c 7f dd f5 a5 0d c7 39 1c 15 39 94 b1 85 05 e0 70 d2 16 2f 66 25 5d c9 4c 72 c9 40 eb 28 0a b0 18 6a f0 8f df 9e 7e e6 4e 18 6b 5f 7f eb 2b 05 cb da 8c ac df 4f f0 0a e1 a7 11 cc df f3 15 ba 94 70 ea c0 5c 08 b9 55 d4 54 ed 81 05 8e 54 4a d0 a1 c6 14 7f 71 08 bf 2d 80 38 da db 81 e3 62 71 5e f1 2a f9 7b e3 ab 3d 3a 87 41 97 a0 08 c6 e5 48 64 96 32 06 07 80 78 5d 3a ab 19 e3 eb e4 37 bf f6 ed b7 df 3c 7e 93 4d 0b c6 12 66 82 20 78 65 d9 af 84 bb c2 81 a4 80 11 4a 02 82 e4 66 81 43 a6 7e 42 81 64 a8 8e b6 f5 a9 14 2a b8 95 bb 5c 86 d6 67 f4 7a 38 bc f0 94 0b 28 01 a3 bd fe 62 1c 37 54 27 a6 d7 3a c7 77 27 5d 16 ca 91 d5 11 3a da e9 76 bb 0d 16 5a a7 73 81 6b 51 5e 2b 86 c1 c1 ed 7e 9b 60 ac 1d e3 31 Data Ascii: \vpG=`r\99p/f%]Lr@(j~Nk_+Op\UTTJq-8bq^{=:AHd2x]:7<~Mf xeJfC~Bd\gz8(b7T':w']:vZskQ^+~`1
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 96 38 8d 11 8c 97 33 73 10 14 36 7f 3a ac 75 84 c1 b3 6c 7e 9b d1 d8 01 35 a4 1a e7 6d 15 3d e6 d6 fa 35 22 f5 0f f5 25 10 f9 67 22 e0 90 aa 34 21 0d d2 43 a3 59 9b d8 1a 96 0c 6e cb 5a 5a c0 dd 20 87 85 76 a2 d1 a3 c5 d9 89 cd 14 24 ab 7f cc 51 8a ee 70 aa 7b 64 c4 27 39 9f 43 f9 c5 50 77 e7 41 71 f9 9a ef 72 67 f2 f2 d4 d4 f8 42 24 9c 01 0e 97 81 34 5b ad bc 93 b7 b9 b2 09 10 c6 12 37 60 7e 2b 70 e0 50 d2 b5 6c 6a 98 75 f8 bc 34 94 44 10 64 00 0a 41 c5 af aa 3b d0 f6 b9 c5 bc aa cc 01 8f 61 0f 70 80 1c cd b3 9b 8b aa 66 88 f6 e6 e0 dc dc c6 a9 5a 0d 18 aa 50 f0 89 cf b6 43 9e d9 e8 ec 4e 74 65 7b e3 51 19 bc da 52 c3 31 d0 58 27 bf a1 ae a1 ed 86 f3 39 4c 9f 5e ca 46 8a 63 c5 e5 a1 62 31 72 79 ea f6 d5 ce 21 5f c2 0d 05 04 fc 88 b3 62 4e 8c a5 23 69 97 Data Ascii: 83s6:ul~5m=5"%g"4!CYnZZ v$Qp{d'9CPwAqrgB$4[7`~+pPlju4DdA;apfZPCNte{QR1X'9L^Fcb1ry!_bN#i
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 48 3f a2 89 e3 c3 e5 ef df 1e 72 15 d9 70 15 30 e8 8d c5 a0 96 13 13 99 41 e2 31 38 11 21 50 82 5a 6f e7 38 a2 05 8f 77 ef 58 5f 5e 5e 5f 3f a7 ff d7 8f 7b ec b5 ce 2a 6b ae 4c a5 30 ba ca 5a 52 92 75 12 bd 48 53 63 de 52 66 52 ba 92 e5 58 d5 c2 c5 88 42 25 d4 69 a5 1a a3 a5 24 3f 33 17 41 97 81 23 72 14 07 30 50 b3 33 df 7f 81 38 a8 c9 54 55 ec 82 35 04 18 96 00 3b 7e 0c 9e 24 8a ee 34 e0 e7 c6 c4 81 5b 99 db e0 47 4e 6b eb fc fe 43 e0 70 3a 6d d6 3c 59 62 9a a6 ad c4 9c 1f af d3 8b 45 69 6e 73 65 4b b1 31 4f ad d7 b8 32 35 8a 78 99 4c 24 14 eb 53 34 65 96 d2 4c 63 6a aa 51 2e 15 8a 02 38 ae e6 30 c6 dd 31 63 c3 f4 e9 b7 11 07 7e f1 a8 78 6a 36 8b e1 bb 0d c2 d1 70 69 81 10 76 9f 28 3b 41 8f 1f 14 10 c1 ce 6d e7 ea cb eb 9b 9b e7 f7 1d da 01 0e bb cd da Data Ascii: H?rp0A18!PZo8wX_^^_?{*kL0ZRuHScRfRXB%i$?3A#r0P38TU5;~$4[GNkCp:m<YbEinseK1O25xL$S4eLcjQ.801c~xj6piv(;Am
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 28 2c 69 fa 16 b7 c3 ab d2 09 75 52 39 71 88 25 d7 47 76 11 07 6e 1a 12 c7 c5 cf 7c 75 25 5c 82 36 fb 39 6e 9e 39 73 fa dd 01 1c c0 00 40 6c 6c 1c ad f0 b2 2d 67 86 ee 40 82 28 9e 23 f8 ba 8a c6 a2 f8 b6 72 74 57 75 75 d5 f3 57 f6 7f b7 bb db 6e ab a8 b2 d7 e4 63 11 54 9c 68 c8 36 57 5a 68 c5 50 6d aa ac b1 78 0d e0 c8 90 a4 6a 14 e2 64 89 f4 fa ae 6f ea 76 35 16 30 7e b4 c3 8f 40 0e 7f ce 3f 7f 6f e6 6c 70 f0 a7 c2 43 80 81 75 51 2c c2 11 06 c5 9d 7b 27 24 0e 04 5c c4 11 1e 1b 34 07 33 db ad cf 59 df 8c d1 bc 79 4e df 21 3f 47 a6 49 a5 97 62 2d ba 66 9d d5 a0 47 61 c9 dc 5b bc 96 4c 91 50 a7 16 cb 0d a9 5a a9 5e 2f b9 0b 1c e8 af 28 1f ed c8 c7 67 57 b3 1c 0b fd 73 59 f2 e3 bd 99 d3 47 d5 15 9a 19 0b 8c d8 38 6a 31 c7 c1 1b 12 45 22 a4 70 e2 08 1b 03 47 Data Ascii: (,iuR9q%Gvn\|u%\69n9s@ll-g@(#rtWuuWncTh6WZhPmxjdov50~@?olpCuQ,{'$\43YyN!?GIb-fGa[LPZ^/(gWsYG8j1E"pG
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 08 de 8f c8 e3 e7 e6 60 fc 68 47 8d 6f 9f ff e3 1d 5d dd 83 83 67 aa aa 6a 6b 9d 9e 92 36 83 5c 25 4e 16 ab 0c 96 b2 16 6b b1 44 24 4c 8a 57 68 5c a5 99 94 15 2c a1 3c 77 6c da 37 98 cd b4 d6 15 a2 cb 6a 3f 1d 0d 71 1c 68 2c 71 f8 fa ab 65 2f 52 5d 71 1c a4 b0 b8 38 a4 81 f3 83 de 68 fe 4b 6e 90 c8 14 f6 de c1 35 21 70 6d 61 b0 1c 3b d7 cf 99 4f 1c ab 97 ae ca f9 f0 b3 d3 83 0c 87 b3 d6 ee 29 cb 37 a8 54 da 64 a9 24 35 b3 04 6b 3e 0a 3c 7d 91 2c 37 b6 39 32 95 e0 d0 e9 92 14 e3 ba be 29 04 47 07 e6 26 4b d7 1c 8f 1e d9 ef 86 40 d4 f4 97 51 57 b7 c3 8f 11 1c 93 29 d6 40 e0 38 98 8a 02 0b c4 72 e0 34 71 84 8d 81 23 c2 c3 70 ac c1 9f 76 34 d6 7f 3a fe f8 60 e7 e0 d6 aa 0a 8f d3 e9 ac 49 4f 91 cb b5 52 75 bc bc d8 5b d6 52 aa 11 e3 9a 56 a5 cc 4d cf 54 66 24 Data Ascii: `hGo]gjk6\%NkD$LWh\,<wl7j?qh,qe/R]q8hKn5!pma;O)7Td$5k><},792)G&K@QW)@8r4q#pv4:`IORu[RVMTf$
2024-10-14 12:19:47 UTC	31	IN	Data Raw: 6f 20 26 61 22 3a ee 89 0c c7 3f 55 ac 27 d4 6f 18 be 59 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: o &a":?U'oYIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.11	49740	151.101.129.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	387	OUT	GET /js/site/footerSignup.js?buildTime=1728589706 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:47 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3600 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 10 Oct 2024 19:22:18 GMT ETag: "6708296a-e10" Expires: Thu, 24 Oct 2024 19:49:49 GMT Cache-Control: max-age=1209600 X-Host: grn140.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:47 GMT Age: 318598 X-Served-By: cache-sjc1000129-SJC, cache-nyc-kteb1890028-NYC X-Cache: HIT, HIT X-Cache-Hits: 88, 1 X-Timer: S1728908387.360610,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 66 61 6c 73 65 7d 3b 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 3b 69 2e 6c 6f 61 64 65 64 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 3b 72 2e 63 3d 65 3b 72 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 22 3b 72 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 77 69 6e 64 6f 77 2e 41 53 53 45 54 53 5f 42 41 53 45 Data Ascii: (function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={exports:{},id:n,loaded:false};t[n].call(i.exports,i,i.exports,r);i.loaded=true;return i.exports}r.m=t;r.c=e;r.p="https://cdn2.editmysite.com/js/";r.p="https://"+window.ASSETS_BASE
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 6e 75 6c 6c 3b 69 66 28 21 72 29 74 2e 61 70 70 6c 79 28 69 2c 6f 29 7d 3b 76 61 72 20 73 3d 72 26 26 21 6e 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 3b 6e 3d 73 65 74 54 69 6d 65 6f 75 74 28 61 2c 65 29 3b 69 66 28 73 29 74 2e 61 70 70 6c 79 28 69 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 65 3d 72 2e 65 6c 65 6d 65 6e 74 5b 30 5d 3b 66 28 65 29 3b 79 28 29 3b 76 61 72 20 6e 3d 74 28 22 23 77 73 69 74 65 2d 6d 69 6e 69 2d 63 61 72 74 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 29 7b 69 66 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 Data Ascii: n;return function(){var i=this;var o=arguments;var a=function(){n=null;if(!r)t.apply(i,o)};var s=r&&!n;clearTimeout(n);n=setTimeout(a,e);if(s)t.apply(i,o)}}function l(){var e=r.element[0];f(e);y();var n=t("#wsite-mini-cart");if(n.length){if(window.innerHe
2024-10-14 12:19:47 UTC	844	IN	Data Raw: 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 77 69 64 74 68 22 2c 22 31 30 30 25 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 68 65 69 67 68 74 22 2c 22 34 35 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 6c 65 66 74 22 2c 22 30 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 7a 2d 69 6e 64 65 78 22 2c 22 35 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 74 28 22 69 6d 67 2e 66 6f 6f 74 65 72 2d 61 62 2d 70 75 62 6c 69 73 68 65 64 2d 74 6f 61 73 74 2d 69 6d 61 67 65 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 2c 22 69 6d 70 6f 72 74 61 Data Ascii: le.setProperty("width","100%","important");e.style.setProperty("height","45px","important");e.style.setProperty("left","0px","important");e.style.setProperty("z-index","5","important");t("img.footer-ab-published-toast-image").css("display","none","importa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.11	49739	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	770	OUT	GET /files/theme/jquery.pxuMenu.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:47 UTC	927	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:47 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d27850d3f80191e-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"ac373d716afe4270df40f60417b0f418" Last-Modified: Thu, 25 Apr 2024 07:47:28 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: r0Csc77NezlXVge1GKY3h9cS2YN50MgU8rBLcluHCnq91tNRxGnz0Z7HgppefCRXnBpwCFgM8v4= x-amz-meta-btime: 2023-09-25T13:28:31.664Z x-amz-meta-mtime: 1695648511.664 x-amz-replication-status: COMPLETED x-amz-request-id: 3CV3KQQVAK5G3TQY x-amz-server-side-encryption: AES256 x-amz-version-id: YuLNF3avwFeaQ53LKsWBmjOk1H1qzEyo X-Storage-Bucket: zf755 X-Storage-Object: f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a Server: cloudflare
2024-10-14 12:19:47 UTC	442	IN	Data Raw: 65 37 31 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 3d 20 20 20 20 20 20 20 20 20 20 20 20 57 65 65 62 6c 79 20 48 6f 72 69 7a 6f 6e 74 61 6c 20 53 69 74 65 20 4d 65 6e 75 20 20 20 20 20 20 20 20 20 20 20 20 3d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 0a 20 20 20 2a 20 47 65 6e 65 72 61 74 65 20 61 20 66 6c 65 78 69 62 6c 65 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 65 6e 75 20 66 72 6f 6d 20 74 68 65 20 64 65 66 61 75 6c 74 20 6e 61 Data Ascii: e71/==================================================== Weebly Horizontal Site Menu ====================================================/(function($) { /** * * Generate a flexible responsive menu from the default na
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 73 3b 0a 20 20 20 20 74 68 69 73 2e 24 6d 6f 72 65 20 3d 20 20 24 28 27 5c 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6d 6f 72 65 20 68 61 73 2d 73 75 62 6d 65 6e 75 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 43 6c 61 73 73 20 2b 20 27 22 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 6d 6f 72 65 2d 6c 69 6e 6b 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 4c 69 6e 6b 43 6c 61 73 73 20 2b 20 27 22 3e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 6d 6f 72 65 4c 69 6e 6b 48 74 6d 6c 20 2b 20 27 3c 2f 61 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 20 2b 20 Data Ascii: s; this.$more = $('\ <li class="menu-more has-submenu ' + settings.parentClass + '"> \ <a href="#" class="more-link ' + settings.parentLinkClass + '">' + settings.moreLinkHtml + '</a> \ <div class="' + settings.containerClass +
2024-10-14 12:19:47 UTC	1369	IN	Data Raw: 69 72 73 74 4f 66 66 73 65 74 54 6f 70 20 3d 20 24 28 24 69 74 65 6d 73 2e 67 65 74 28 29 5b 30 5d 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0a 20 20 20 20 20 20 76 61 72 20 24 63 75 72 72 65 6e 74 49 74 65 6d 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 24 63 75 72 72 65 6e 74 49 74 65 6d 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 3e 20 66 69 72 73 74 4f 66 66 73 65 74 54 6f 70 20 7c 7c 20 73 65 6c 66 2e 24 6d 6f 72 65 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 3e 20 66 69 72 73 74 4f 66 66 73 65 74 54 6f 70 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6c 66 2e 24 6d 65 6e 75 2e 61 70 70 65 6e 64 28 73 65 6c 66 2e 24 6d 6f 72 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 73 65 6c 66 2e 74 6f 67 67 6c 65 43 6c 61 73 73 65 73 28 24 63 75 72 Data Ascii: irstOffsetTop = $($items.get()[0]).offset().top; var $currentItem = $(this); if ($currentItem.offset().top > firstOffsetTop \|\| self.$more.offset().top > firstOffsetTop) { self.$menu.append(self.$more); self.toggleClasses($cur
2024-10-14 12:19:47 UTC	524	IN	Data Raw: 20 20 20 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 77 72 61 70 27 2c 0a 20 20 20 20 20 20 6c 69 73 74 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 27 2c 0a 20 20 20 20 20 20 63 68 69 6c 64 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 73 75 62 69 74 65 6d 2d 77 72 61 70 27 2c 0a 20 20 20 20 20 20 63 68 69 6c 64 4c 69 6e 6b 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 73 75 62 69 74 65 6d 27 2c 0a 20 20 20 20 20 20 6d 6f 72 65 4c 69 6e 6b 48 74 6d 6c 3a 20 27 4d 6f 72 65 27 2c 0a 20 20 20 20 7d 2c 20 6f 70 74 69 6f 6e 73 20 29 3b 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 21 24 2e 64 61 74 Data Ascii: containerClass: 'wsite-menu-wrap', listClass: 'wsite-menu', childClass: 'wsite-menu-subitem-wrap', childLinkClass: 'wsite-menu-subitem', moreLinkHtml: 'More', }, options ); return this.each(function() { if (!$.dat
2024-10-14 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.11	49741	151.101.129.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	382	OUT	GET /js/lang/en/stl.js?buildTime=1720803349& HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:47 UTC	667	IN	HTTP/1.1 200 OK Connection: close Content-Length: 188909 Server: nginx Content-Type: application/javascript Last-Modified: Tue, 01 Oct 2024 14:33:54 GMT ETag: "66fc0852-2e1ed" Expires: Tue, 15 Oct 2024 16:24:23 GMT Cache-Control: max-age=1209600 X-Host: grn187.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1108524 Date: Mon, 14 Oct 2024 12:19:47 GMT X-Served-By: cache-sjc1000096-SJC, cache-nyc-kteb1890095-NYC X-Cache: HIT, HIT X-Cache-Hits: 19, 0 X-Timer: S1728908387.453749,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 0a 77 69 6e 64 6f 77 2e 5f 57 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 5f 57 2e 67 65 74 53 69 74 65 4c 61 6e 67 75 61 67 65 55 52 4c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6c 61 6e 67 29 7b 0a 09 72 65 74 75 72 6e 20 27 2f 2f 61 73 73 65 74 73 2d 73 74 61 67 69 6e 67 2e 77 65 65 62 6c 79 2e 6e 65 74 2f 6a 73 2f 6c 61 6e 67 2f 25 6c 61 6e 67 25 2f 73 74 6c 2e 6a 73 3f 62 75 69 6c 64 54 69 6d 65 3d 31 32 33 34 26 27 2e 72 65 70 6c 61 63 65 28 27 25 6c 61 6e 67 25 27 2c 20 6c 61 6e 67 29 3b 0a 7d 0a 5f 57 2e 74 6c 69 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 73 3b 7d 0a 5f 57 2e 73 69 74 65 4c 61 6e 67 20 3d 20 27 65 6e 27 3b 0a 5f 57 2e 66 74 6c 3d 5f 57 2e 73 74 Data Ascii: window._W = window.Weebly = window.Weebly \|\| {};_W.getSiteLanguageURL = function(lang){return '//assets-staging.weebly.net/js/lang/%lang%/stl.js?buildTime=1234&'.replace('%lang%', lang);}_W.tli=function(s){return s;}_W.siteLang = 'en';_W.ftl=_W.st
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 5c 22 42 61 64 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 33 5f 73 74 61 72 5c 22 3a 5c 22 4d 65 64 69 6f 63 72 65 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 34 5f 73 74 61 72 5c 22 3a 5c 22 47 6f 6f 64 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 35 5f 73 74 61 72 5c 22 3a 5c 22 45 78 63 65 6c 6c 65 6e 74 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 6e 6f 5f 72 61 74 69 6e 67 5f 6c 61 62 65 6c 5c 22 3a 5c 22 4e 6f 20 72 61 74 69 6e 67 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 Data Ascii: \"Bad\",\"components.star_input_component.3_star\":\"Mediocre\",\"components.star_input_component.4_star\":\"Good\",\"components.star_input_component.5_star\":\"Excellent\",\"components.star_input_component.no_rating_label\":\"No rating\",\"components.sta
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 65 61 74 65 20 41 63 63 6f 75 6e 74 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 64 6f 6e 65 5c 22 3a 5c 22 44 6f 6e 65 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 6d 61 69 6c 5f 61 64 64 72 65 73 73 5c 22 3a 5c 22 45 6d 61 69 6c 20 41 64 64 72 65 73 73 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 73 2e 62 61 64 5f 65 6d 61 69 6c 5c 22 3a 5c 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 73 2e 65 6d 61 69 6c 5f 72 65 71 75 69 72 65 64 5c 22 Data Ascii: eate Account\",\"customer_accounts.common.done\":\"Done\",\"customer_accounts.common.email_address\":\"Email Address\",\"customer_accounts.common.errors.bad_email\":\"Please enter a valid email address.\",\"customer_accounts.common.errors.email_required\"
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 6f 72 64 65 72 5f 6e 75 6d 62 65 72 5c 22 3a 5c 22 4f 72 64 65 72 20 23 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 73 74 61 74 75 73 5c 22 3a 5c 22 53 74 61 74 75 73 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 74 6f 74 61 6c 5c 22 3a 5c 22 54 6f 74 61 6c 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 64 65 66 61 75 6c 74 5f 74 Data Ascii: \"customer_accounts.order_history.column_heading_order_number\":\"Order #\",\"customer_accounts.order_history.column_heading_status\":\"Status\",\"customer_accounts.order_history.column_heading_total\":\"Total\",\"customer_accounts.order_history.default_t
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 72 65 64 65 65 6d 65 64 5c 22 3a 5c 22 52 65 64 65 65 6d 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 72 65 66 75 6e 64 65 64 5c 22 3a 5c 22 52 65 66 75 6e 64 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 73 65 6e 74 5c 22 3a 5c 22 53 65 6e 74 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 73 68 69 70 70 65 64 5c 22 3a 5c 22 53 68 69 70 70 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f Data Ascii: omer_accounts.order_history.status_redeemed\":\"Redeemed\",\"customer_accounts.order_history.status_refunded\":\"Refunded\",\"customer_accounts.order_history.status_sent\":\"Sent\",\"customer_accounts.order_history.status_shipped\":\"Shipped\",\"customer_
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 72 64 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 72 65 73 65 74 5f 70 61 73 73 77 6f 72 64 2e 72 65 73 65 74 5f 62 75 74 74 6f 6e 5c 22 3a 5c 22 52 65 73 65 74 20 50 61 73 73 77 6f 72 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 65 5f 70 61 73 73 77 6f 72 64 2e 68 65 61 64 65 72 5f 74 65 78 74 5c 22 3a 5c 22 55 70 64 61 74 65 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 65 5f 70 61 73 73 77 6f 72 64 2e 69 6e 73 74 72 75 63 74 69 6f 6e 5c 22 3a 5c 22 45 6e 74 65 72 20 79 6f 75 72 20 6e 65 77 20 70 61 73 73 77 6f 72 64 20 62 65 6c 6f 77 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 Data Ascii: rd.\",\"customer_accounts.reset_password.reset_button\":\"Reset Password\",\"customer_accounts.update_password.header_text\":\"Update password\",\"customer_accounts.update_password.instruction\":\"Enter your new password below.\",\"customer_accounts.updat
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 73 61 6e 74 20 64 6f 6c 6f 72 65 6d 71 75 65 20 6c 61 75 64 61 6e 74 69 75 6d 2c 20 74 6f 74 61 6d 20 72 65 6d 2e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 31 37 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 5c 5c 5c 22 3e 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 35 5c 5c 5c 22 3e 53 6b 69 6c 6c 20 54 77 6f 3c 5c 5c 2f 66 6f 6e 74 3e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 31 38 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 5c 5c 5c 22 3e 53 65 64 20 75 74 20 70 65 72 73 70 69 63 69 61 74 69 73 20 75 6e 64 65 20 6f Data Ascii: sant doloremque laudantium, totam rem.<\\/span>\",\"db.PageLayoutElements.1517\":\"<span style=\\\"font-weight: normal;\\\"><font size=\\\"5\\\">Skill Two<\\/font><\\/span>\",\"db.PageLayoutElements.1518\":\"<span style=\\\"\\\">Sed ut perspiciatis unde o
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 6e 6f 72 6d 61 6c 3b 5c 5c 5c 22 3e 52 65 73 70 6f 6e 73 69 76 65 20 26 61 6d 70 3b 20 49 6e 74 65 72 61 63 74 69 76 65 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 33 34 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 5c 5c 5c 22 3e 4c 6f 72 65 6d 20 69 70 73 75 6d 20 64 6f 6c 6f 72 20 73 69 74 20 61 6d 65 74 2c 20 63 6f 6e 73 65 63 74 65 74 75 72 20 61 64 69 70 69 73 63 69 6e 67 20 65 6c 69 74 2c 20 73 65 64 20 64 6f 20 65 69 75 73 6d 6f 64 20 74 65 6d 70 6f 72 20 69 6e 63 69 64 69 64 75 6e 74 20 75 74 20 6c 61 62 6f 72 65 20 65 74 20 64 6f 6c 6f 72 65 20 6d 61 67 6e 61 20 61 6c 69 71 75 61 2e 20 55 74 20 65 6e 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 Data Ascii: normal;\\\">Responsive & Interactive<\\/font>\",\"db.PageLayoutElements.1534\":\"<span style=\\\"\\\">Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam,
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 71 75 69 73 20 6e 6f 73 74 72 75 64 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 75 6c 6c 61 6d 63 6f 20 6c 61 62 6f 72 69 73 20 6e 69 73 69 2e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 35 30 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 53 65 65 20 53 6f 6d 65 20 45 78 61 6d 70 6c 65 73 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 35 37 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 53 65 72 76 69 63 65 73 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d Data Ascii: im ad minim veniam, quis nostrud exercitation ullamco laboris nisi.<\\/span>\",\"db.PageLayoutElements.1550\":\"<font size=\\\"6\\\">See Some Examples<\\/font>\",\"db.PageLayoutElements.1557\":\"<font size=\\\"6\\\">Services<\\/font>\",\"db.PageLayoutElem
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 75 72 20 61 64 69 70 69 73 69 63 69 6e 67 20 65 6c 69 74 2c 20 73 65 64 20 64 6f 20 65 69 75 73 6d 6f 64 20 74 65 6d 70 6f 72 20 69 6e 63 69 64 69 64 75 6e 74 20 75 74 20 6c 61 62 6f 72 65 20 65 74 20 64 6f 6c 6f 72 65 20 6d 61 67 6e 61 20 61 6c 69 71 75 61 2e 20 55 74 20 65 6e 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 71 75 69 73 20 6e 6f 73 74 72 75 64 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 75 6c 6c 61 6d 63 6f 20 6c 61 62 6f 72 69 73 20 6e 69 73 69 2e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 37 37 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 45 76 65 6e 74 20 48 65 61 64 6c 69 6e 65 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 Data Ascii: ur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi.\",\"db.PageLayoutElements.1577\":\"<font size=\\\"6\\\">Event Headline<\\/font>\",\"db.PageLay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.11	49743	151.101.129.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	379	OUT	GET /js/site/main.js?buildTime=1720803349 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:47 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 480909 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 03 Oct 2024 22:10:27 GMT ETag: "66ff1653-7568d" Expires: Fri, 18 Oct 2024 13:05:22 GMT Cache-Control: max-age=1209600 X-Host: grn33.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 861266 Date: Mon, 14 Oct 2024 12:19:47 GMT X-Served-By: cache-sjc10073-SJC, cache-nyc-kteb1890080-NYC X-Cache: HIT, MISS X-Cache-Hits: 25, 0 X-Timer: S1728908388.828399,VS0,VE72 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 5b 22 70 75 62 6c 69 73 68 65 64 57 42 4a 50 22 5d 3b 77 69 6e 64 6f 77 5b 22 70 75 62 6c 69 73 68 65 64 57 42 4a 50 22 5d 3d 66 75 6e 63 74 69 6f 6e 20 6f 28 73 2c 61 29 7b 76 61 72 20 6c 2c 75 2c 63 3d 30 2c 64 3d 5b 5d 3b 66 6f 72 28 3b 63 3c 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 75 3d 73 5b 63 5d 3b 69 66 28 6e 5b 75 5d 29 64 2e 70 75 73 68 2e 61 70 70 6c 79 28 64 2c 6e 5b 75 5d 29 3b 6e 5b 75 5d 3d 30 7d 66 6f 72 28 6c 20 69 6e 20 61 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6c 29 29 7b 65 5b 6c 5d 3d 61 5b 6c 5d 7d 7d 69 66 28 74 29 74 28 73 2c 61 29 3b 77 68 69 6c 65 28 64 2e 6c 65 Data Ascii: (function(e){var t=window["publishedWBJP"];window["publishedWBJP"]=function o(s,a){var l,u,c=0,d=[];for(;c<s.length;c++){u=s[c];if(n[u])d.push.apply(d,n[u]);n[u]=0}for(l in a){if(Object.prototype.hasOwnProperty.call(a,l)){e[l]=a[l]}}if(t)t(s,a);while(d.le
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 64 6f 77 2e 57 65 65 62 6c 79 3d 77 69 6e 64 6f 77 2e 5f 57 3d 77 69 6e 64 6f 77 2e 5f 57 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 75 74 6c 3d 77 69 6e 64 6f 77 2e 5f 57 2e 75 74 6c 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 66 74 6c 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 74 6c 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 46 74 6c 73 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 46 74 6c 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 57 2e Data Ascii: dow.Weebly=window._W=window._W\|\|{};window._W.utl=window._W.utl\|\|function(e){window._W.failedTls=window._W.failedTls\|\|[];window._W.failedTls.push(e);return e};window._W.ftl=window._W.ftl\|\|function(e){window._W.failedFtls=window._W.failedFtls\|\|[];window._W.
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 2c 72 3b 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 29 7b 69 66 28 74 72 75 65 29 7b 21 28 6e 3d 5b 69 28 33 29 2c 69 28 31 29 2c 74 5d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6f 2e 42 61 63 6b 62 6f 6e 65 3d 73 28 6f 2c 69 2c 65 2c 74 29 7d 2e 61 70 70 6c 79 28 74 2c 6e 29 2c 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 65 2e 65 78 70 6f 72 74 73 3d 72 29 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 76 61 72 20 61 3d 72 65 71 75 69 72 65 28 22 75 6e 64 65 72 73 63 6f 72 65 22 29 3b 73 28 6f 2c 74 2c 61 29 7d 65 6c 73 65 7b 6f 2e 42 61 63 6b 62 6f 6e 65 3d 73 28 6f 2c 7b 7d 2c 6f 2e 5f 2c 6f 2e 6a 51 75 65 72 79 7c 7c Data Ascii: :function(e,t,i){var n,r;(function(o,s){if(true){!(n=[i(3),i(1),t],r=function(e,t,i){o.Backbone=s(o,i,e,t)}.apply(t,n),r!==undefined&&(e.exports=r))}else if(typeof t!=="undefined"){var a=require("underscore");s(o,t,a)}else{o.Backbone=s(o,{},o._,o.jQuery\|\|
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 65 72 22 2c 65 2c 74 29 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 61 6c 6c 3b 69 66 28 69 29 66 28 69 2c 74 29 3b 69 66 28 6e 29 66 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 73 74 6f 70 4c 69 73 74 65 6e 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 69 6e 67 54 6f 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 6f 3d 21 74 26 26 21 6e 3b 69 66 28 21 6e 26 26 74 79 70 65 6f 66 20 74 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 6e 3d 74 68 69 73 3b 69 66 28 65 29 28 72 3d 7b 7d 29 5b 65 2e 5f 6c 69 73 74 65 6e 49 64 5d 3d Data Ascii: er",e,t))return this;var i=this._events[e];var n=this._events.all;if(i)f(i,t);if(n)f(n,arguments);return this},stopListening:function(e,t,n){var r=this._listeningTo;if(!r)return this;var o=!t&&!n;if(!n&&typeof t==="object")n=this;if(e)(r={})[e._listenId]=
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 61 74 74 72 69 62 75 74 65 73 3d 7b 7d 3b 69 66 28 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 3d 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 3b 69 66 28 74 2e 70 61 72 73 65 29 6e 3d 74 68 69 73 2e 70 61 72 73 65 28 6e 2c 74 29 7c 7c 7b 7d 3b 6e 3d 69 2e 64 65 66 61 75 6c 74 73 28 7b 7d 2c 6e 2c 69 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 64 65 66 61 75 6c 74 73 22 29 29 3b 74 68 69 73 2e 73 65 74 28 6e 2c 74 29 3b 74 68 69 73 2e 63 68 61 6e 67 65 64 3d 7b 7d 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 69 2e 65 78 74 65 6e 64 28 70 2e 70 72 6f 74 6f 74 79 70 65 2c 75 2c 7b 63 68 61 6e 67 65 64 3a 6e 75 6c 6c 2c 76 61 6c 69 64 61 74 69 6f 6e 45 72 Data Ascii: attributes={};if(t.collection)this.collection=t.collection;if(t.parse)n=this.parse(n,t)\|\|{};n=i.defaults({},n,i.result(this,"defaults"));this.set(n,t);this.changed={};this.initialize.apply(this,arguments)};i.extend(p.prototype,u,{changed:null,validationEr
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 65 2c 76 6f 69 64 20 30 2c 69 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 2c 7b 75 6e 73 65 74 3a 74 72 75 65 7d 29 29 7d 2c 63 6c 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 29 74 5b 6e 5d 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 74 2c 69 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2c 7b 75 6e 73 65 74 3a 74 72 75 65 7d 29 29 7d 2c 68 61 73 43 68 61 6e 67 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 69 2e 69 73 45 6d 70 74 79 28 74 68 69 73 2e 63 68 61 6e 67 65 64 29 3b 72 65 74 75 72 6e 20 69 2e 68 61 73 28 74 68 69 73 2e 63 68 61 Data Ascii: turn this.set(e,void 0,i.extend({},t,{unset:true}))},clear:function(e){var t={};for(var n in this.attributes)t[n]=void 0;return this.set(t,i.extend({},e,{unset:true}))},hasChanged:function(e){if(e==null)return!i.isEmpty(this.changed);return i.has(this.cha
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 72 6e 20 66 61 6c 73 65 7d 69 66 28 75 29 75 28 6c 2c 65 2c 6e 29 3b 6c 2e 74 72 69 67 67 65 72 28 22 73 79 6e 63 22 2c 6c 2c 65 2c 6e 29 7d 3b 4f 28 74 68 69 73 2c 6e 29 3b 6f 3d 74 68 69 73 2e 69 73 4e 65 77 28 29 3f 22 63 72 65 61 74 65 22 3a 6e 2e 70 61 74 63 68 3f 22 70 61 74 63 68 22 3a 22 75 70 64 61 74 65 22 3b 69 66 28 6f 3d 3d 3d 22 70 61 74 63 68 22 29 6e 2e 61 74 74 72 73 3d 72 3b 73 3d 74 68 69 73 2e 73 79 6e 63 28 6f 2c 74 68 69 73 2c 6e 29 3b 69 66 28 72 26 26 6e 2e 77 61 69 74 29 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 3d 61 3b 72 65 74 75 72 6e 20 73 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 3f 69 2e 63 6c 6f 6e 65 28 65 29 3a 7b 7d 3b 76 61 72 20 74 3d 74 68 69 73 3b 76 61 72 20 6e 3d 65 2e 73 75 63 Data Ascii: rn false}if(u)u(l,e,n);l.trigger("sync",l,e,n)};O(this,n);o=this.isNew()?"create":n.patch?"patch":"update";if(o==="patch")n.attrs=r;s=this.sync(o,this,n);if(r&&n.wait)this.attributes=a;return s},destroy:function(e){e=e?i.clone(e):{};var t=this;var n=e.suc
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 28 65 2c 74 29 7b 74 7c 7c 28 74 3d 7b 7d 29 3b 69 66 28 74 2e 6d 6f 64 65 6c 29 74 68 69 73 2e 6d 6f 64 65 6c 3d 74 2e 6d 6f 64 65 6c 3b 69 66 28 74 2e 63 6f 6d 70 61 72 61 74 6f 72 21 3d 3d 76 6f 69 64 20 30 29 74 68 69 73 2e 63 6f 6d 70 61 72 61 74 6f 72 3d 74 2e 63 6f 6d 70 61 72 61 74 6f 72 3b 74 68 69 73 2e 5f 72 65 73 65 74 28 29 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 65 29 74 68 69 73 2e 72 65 73 65 74 28 65 2c 69 2e 65 78 74 65 6e 64 28 7b 73 69 6c 65 6e 74 3a 74 72 75 65 7d 2c 74 29 29 7d 3b 76 61 72 20 67 3d 7b 61 64 64 3a 74 72 75 65 2c 72 65 6d 6f 76 65 3a 74 72 75 65 2c 6d 65 72 67 65 3a 74 72 75 65 7d 3b 76 61 72 20 79 3d 7b 61 64 64 3a 74 72 75 65 2c 72 Data Ascii: (e,t){t\|\|(t={});if(t.model)this.model=t.model;if(t.comparator!==void 0)this.comparator=t.comparator;this._reset();this.initialize.apply(this,arguments);if(e)this.reset(e,i.extend({silent:true},t))};var g={add:true,remove:true,merge:true};var y={add:true,r
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 6c 3d 75 2e 70 61 72 73 65 28 6c 2c 74 29 3b 75 2e 73 65 74 28 6c 2c 74 29 3b 69 66 28 68 26 26 21 63 26 26 75 2e 68 61 73 43 68 61 6e 67 65 64 28 6d 29 29 63 3d 74 72 75 65 7d 65 5b 72 5d 3d 75 7d 65 6c 73 65 20 69 66 28 77 29 7b 61 3d 65 5b 72 5d 3d 74 68 69 73 2e 5f 70 72 65 70 61 72 65 4d 6f 64 65 6c 28 6c 2c 74 29 3b 69 66 28 21 61 29 63 6f 6e 74 69 6e 75 65 3b 76 2e 70 75 73 68 28 61 29 3b 74 68 69 73 2e 5f 61 64 64 52 65 66 65 72 65 6e 63 65 28 61 2c 74 29 7d 61 3d 75 7c 7c 61 3b 69 66 28 5f 26 26 28 61 2e 69 73 4e 65 77 28 29 7c 7c 21 62 5b 61 2e 69 64 5d 29 29 5f 2e 70 75 73 68 28 61 29 3b 62 5b 61 2e 69 64 5d 3d 74 72 75 65 7d 69 66 28 53 29 7b 66 6f 72 28 72 3d 30 2c 6f 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 2b 2b 72 29 7b 69 66 28 Data Ascii: l=u.parse(l,t);u.set(l,t);if(h&&!c&&u.hasChanged(m))c=true}e[r]=u}else if(w){a=e[r]=this._prepareModel(l,t);if(!a)continue;v.push(a);this._addReference(a,t)}a=u\|\|a;if(_&&(a.isNew()\|\|!b[a.id]))_.push(a);b[a.id]=true}if(S){for(r=0,o=this.length;r<o;++r){if(
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 64 5d 7d 2c 61 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 65 6c 73 5b 65 5d 7d 2c 77 68 65 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 69 2e 69 73 45 6d 70 74 79 28 65 29 29 72 65 74 75 72 6e 20 74 3f 76 6f 69 64 20 30 3a 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 74 3f 22 66 69 6e 64 22 3a 22 66 69 6c 74 65 72 22 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 7b 69 66 28 65 5b 69 5d 21 3d 3d 74 2e 67 65 74 28 69 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 74 72 75 65 7d 29 7d 2c 66 69 6e 64 57 68 65 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 68 65 72 65 28 65 2c 74 72 75 65 29 7d 2c 73 6f 72 Data Ascii: d]},at:function(e){return this.models[e]},where:function(e,t){if(i.isEmpty(e))return t?void 0:[];return this[t?"find":"filter"](function(t){for(var i in e){if(e[i]!==t.get(i))return false}return true})},findWhere:function(e){return this.where(e,true)},sor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.11	49746	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	768	OUT	GET /files/theme/jquery.trend.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:48 UTC	927	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:47 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d2785102bf78c3c-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"4beccebe0a060b2b2c43de5c2d4512ef" Last-Modified: Sun, 07 Apr 2024 01:42:19 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: Ny1xHoaOJOuQe77y9y2IabE0FHGukTr+Y7iO5J3bEvA0OyS6KMzEtfvq5qXVLZnbQj/X/epODAA= x-amz-meta-btime: 2023-09-25T13:28:31.869Z x-amz-meta-mtime: 1695648511.869 x-amz-replication-status: COMPLETED x-amz-request-id: XTDQJSXVHADER5K9 x-amz-server-side-encryption: AES256 x-amz-version-id: SLcK2XYoSswC7.3mqk46FHp.mNA3XCRS X-Storage-Bucket: z446f X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738 Server: cloudflare
2024-10-14 12:19:48 UTC	442	IN	Data Raw: 65 62 66 0d 0a 2f 2a 21 0a 20 2a 20 54 72 65 6e 64 20 30 2e 32 2e 30 0a 20 2a 0a 20 2a 20 46 61 69 6c 2d 73 61 66 65 20 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 65 76 65 6e 74 20 66 6f 72 20 6a 51 75 65 72 79 2e 0a 20 2a 0a 20 2a 20 41 64 64 73 20 61 20 6e 65 77 20 22 74 72 65 6e 64 22 20 65 76 65 6e 74 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 62 72 6f 77 73 65 72 73 20 74 68 61 74 20 64 6f 6e 27 74 0a 20 2a 20 73 75 70 70 6f 72 74 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2e 0a 20 2a 0a 20 2a 20 4e 4f 54 45 3a 20 4f 6e 6c 79 20 73 75 70 70 6f 72 74 73 20 62 65 69 6e 67 20 62 6f 75 6e 64 20 77 69 74 68 20 22 6a 51 75 65 72 79 2e 6f 6e 65 22 2e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 50 69 78 65 6c Data Ascii: ebf/! Trend 0.2.0 * * Fail-safe TransitionEnd event for jQuery. * * Adds a new "trend" event that can be used in browsers that don't * support "transitionend". * * NOTE: Only supports being bound with "jQuery.one". * * Copyright 2014, Pixel
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 20 22 20 2b 0a 20 20 20 20 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 6d 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 0a 0a 20 20 2f 2f 20 50 72 65 66 69 78 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 64 75 72 61 74 69 6f 6e 20 70 72 6f 70 65 72 74 79 20 6e 61 6d 65 73 0a 20 20 76 61 72 20 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 20 3d 20 5b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: otransitionend " + "oTransitionEnd " + "msTransitionEnd " + "transitionend"; // Prefixed transition duration property names var transitionDurationProperties = [ "transition-duration", "-moz-transition-duration", "-webkit-trans
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 76 61 6c 75 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 75 72 61 74 69 6f 6e 20 3d 20 70 61 72 73 65 54 69 6d 65 28 76 61 6c 75 65 73 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 64 75 72 61 74 69 6f 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 20 20 20 20 20 20 20 20 7d 29 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 64 75 72 61 74 69 6f 6e 20 3d 20 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 4d 61 74 68 2c 20 64 75 72 61 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 53 69 6e 67 6c Data Ascii: for (var i = 0; i < values.length; i++) { var duration = parseTime(values[i]); results.push(duration); } return results; })(); duration = Math.max.apply(Math, durations); } // Singl
2024-10-14 12:19:48 UTC	602	IN	Data Raw: 68 6f 73 65 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 77 65 27 6c 6c 0a 20 20 20 20 20 20 20 20 2f 2f 20 68 61 76 65 20 74 6f 20 72 65 6c 79 20 6f 6e 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 74 68 65 73 65 20 63 61 73 65 73 2e 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 20 26 26 20 65 2e 73 72 63 45 6c 65 6d 65 6e 74 20 21 3d 3d 20 65 6c 5b 30 5d 29 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 4d 61 72 6b 20 65 6c 65 6d 65 6e 74 20 68 61 73 20 6e 6f 74 20 62 65 69 6e 67 20 69 6e 20 74 72 61 6e 73 69 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 65 6c 2e 64 61 74 61 28 22 74 72 65 6e 64 22 2c 20 66 61 6c 73 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 43 61 6c 6c 62 61 63 6b 0a 20 20 20 20 20 20 20 20 66 69 72 65 64 20 3d 20 74 Data Ascii: hose. Unfortunately, we'll // have to rely on the timeout in these cases. if (e && e.srcElement !== el[0]) return; // Mark element has not being in transition el.data("trend", false); // Callback fired = t
2024-10-14 12:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.11	49745	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	771	OUT	GET /files/theme/jquery.revealer.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:48 UTC	849	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d278510281a0cba-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"c22ab67199a33d876512504cda4ff55b" Last-Modified: Sun, 21 Apr 2024 12:39:24 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: KFIzUUZ5jgTTmN6x2XkL2RHhldRNKnES0Cff0KEgXaBeMQDvFR1ZfUkqj6E48dZ/OCLW/2mBHfk= x-amz-replication-status: COMPLETED x-amz-request-id: 3XE9WPYQF4CXQGXE x-amz-server-side-encryption: AES256 x-amz-version-id: VWhv4xSgduiSxPjjUnPvdmzftJykBxY7 X-Storage-Bucket: zc4cd X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311 Server: cloudflare
2024-10-14 12:19:48 UTC	520	IN	Data Raw: 62 30 63 0d 0a 2f 2a 21 0a 20 2a 20 52 65 76 65 61 6c 65 72 20 32 2e 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2c 20 50 69 78 65 6c 20 55 6e 69 6f 6e 20 2d 20 68 74 74 70 3a 2f 2f 70 69 78 65 6c 75 6e 69 6f 6e 2e 6e 65 74 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 2f 2f 20 63 68 65 63 6b 20 66 6f 72 20 74 72 65 6e 64 20 65 76 65 6e 74 20 28 6d 61 6b 65 20 73 75 72 65 20 6a 71 75 65 72 79 2e 74 72 65 6e 64 20 69 73 20 69 6e 63 6c 75 64 65 64 29 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 24 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 74 72 65 6e 64 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 20 20 20 Data Ascii: b0c/! Revealer 2.0.0 * * Copyright 2015, Pixel Union - http://pixelunion.net * Released under the MIT license */(function($){ // check for trend event (make sure jquery.trend is included) if (typeof $.event.special.trend !== "object") {
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 20 20 20 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 20 7b 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 6e 2c 20 31 30 30 30 2f 36 30 29 3b 20 7d 0a 0a 0a 20 20 2f 2f 20 50 75 62 6c 69 63 20 41 50 49 0a 20 20 76 61 72 20 6d 65 74 68 6f 64 73 20 3d 20 7b 0a 20 20 20 20 69 73 56 69 73 69 62 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 65 6c 2e 64 61 74 61 28 22 72 65 76 65 61 6c 65 72 2d 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 73 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 20 66 6f 72 63 65 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 43 68 65 63 6b 20 73 74 61 74 65 0a 20 20 20 20 20 20 69 66 20 28 6d 65 74 68 6f 64 73 2e 69 73 56 69 73 69 62 6c 65 28 65 6c 29 Data Ascii: function(fn) { window.setTimeout(fn, 1000/60); } // Public API var methods = { isVisible: function(el) { return !!el.data("revealer-visible"); }, show: function(el, force) { // Check state if (methods.isVisible(el)
2024-10-14 12:19:48 UTC	946	IN	Data Raw: 73 28 22 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 68 69 64 65 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 65 6c 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 69 6e 67 20 61 6e 69 6d 61 74 69 6e 67 2d 6f 75 74 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 61 6e 69 6d 61 74 69 6e 67 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 65 6c 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 69 73 69 62 6c 65 22 29 3b 0a 0a 20 20 20 20 Data Ascii: s("visible"); el.trigger("revealer-hide"); return; } raf(function(){ el.addClass("animating animating-out"); el.trigger("revealer-animating"); raf(function(){ el.removeClass("visible");
2024-10-14 12:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.11	49744	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	764	OUT	GET /files/theme/custom-1.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:48 UTC	939	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d2785102fddc32a-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"214dde43cebf15418cdcc76f9677ee46" Last-Modified: Mon, 22 Apr 2024 23:24:18 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: JASejwxDd9HoREXo7EYpXONpCX4Z7wkt0WwhlKNKg9EnKvgGDUXYjlBJxH3gdlJLSSIKWvrkHQcYBGoOHtuJsQ== x-amz-meta-btime: 2021-10-26T13:57:32.896Z x-amz-meta-mtime: 1635256652.896 x-amz-replication-status: COMPLETED x-amz-request-id: 9WCPM0XQVZZD32VR x-amz-server-side-encryption: AES256 x-amz-version-id: B9J1OqsSfx.0.VWPcb4gc1kD9Rq3dd1i X-Storage-Bucket: zcfbf X-Storage-Object: cfbf67a85c039719090cff2c4718de99203b1ced78cfb8fae5f7240d2f1570b7 Server: cloudflare
2024-10-14 12:19:48 UTC	430	IN	Data Raw: 34 33 63 0d 0a 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 20 20 2f 2f 20 4d 6f 62 69 6c 65 20 73 69 64 65 62 61 72 73 0a 20 20 24 2e 66 6e 2e 65 78 70 61 6e 64 61 62 6c 65 53 69 64 65 62 61 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 76 61 72 20 24 6d 65 20 3d 20 74 68 69 73 3b 0a 0a 20 20 20 20 24 6d 65 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 28 21 24 6d 65 2e 68 61 73 43 6c 61 73 73 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 24 6d 65 2e 61 64 64 43 6c 61 73 73 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: 43cjQuery(function($) { // Mobile sidebars $.fn.expandableSidebar = function(expandedClass) { var $me = this; $me.on('click', function() { if(!$me.hasClass(expandedClass)) { $me.addClass(expandedClass); } else {
2024-10-14 12:19:48 UTC	661	IN	Data Raw: 65 72 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 69 66 20 28 63 6f 75 6e 74 65 72 20 3e 3d 20 6c 69 6d 69 74 20 7c 7c 20 24 2e 66 6e 2e 63 68 65 63 6b 49 66 45 6c 65 6d 65 6e 74 45 78 69 73 74 73 28 63 6f 6e 64 69 74 69 6f 6e 29 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6c 6f 6f 70 65 72 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 65 72 2b 2b 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 20 64 75 72 61 74 69 6f 6e 29 3b 0a 0a 20 20 20 20 69 66 20 28 21 63 6f 6e 64 69 74 69 6f 6e 29 20 61 63 74 69 6f 6e 28 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 43 68 65 63 6b 20 Data Ascii: er = setInterval(function(){ if (counter >= limit \|\| $.fn.checkIfElementExists(condition)) { clearInterval(looper); } else { action(); counter++; } }, duration); if (!condition) action(); } // Check
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 33 39 32 62 0d 0a 76 61 72 20 62 61 73 65 20 3d 20 74 68 69 73 3b 0a 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 61 64 64 43 6c 61 73 73 65 73 28 29 3b 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 68 65 61 64 65 72 53 65 74 75 70 28 29 3b 0a 0a 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 72 65 73 69 7a 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 62 61 73 65 2e 5f 68 65 61 64 65 72 53 65 74 75 70 28 29 3b 0a 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 6d 6f 76 65 55 74 69 6c 73 28 29 3b 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 6e 61 76 53 65 74 75 70 28 29 3b 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 73 65 61 72 63 68 42 6f 78 28 29 3b 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 6d 69 6e 69 43 61 72 74 53 Data Ascii: 392bvar base = this; base._addClasses(); base._headerSetup(); $(window).on('resize', function() { base._headerSetup(); }); base._moveUtils(); base._navSetup(); base._searchBox(); base._miniCartS
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 20 20 24 28 27 6c 69 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 73 75 62 69 74 65 6d 2d 77 72 61 70 2e 77 73 69 74 65 2d 6e 61 76 2d 63 75 72 72 65 6e 74 27 29 2e 70 61 72 65 6e 74 73 28 27 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 77 72 61 70 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6f 70 65 6e 27 29 3b 0a 0a 20 20 20 20 20 20 2f 2f 20 41 64 64 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 74 65 78 74 20 74 6f 20 69 6e 70 75 74 73 0a 20 20 20 20 20 20 24 28 27 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 73 75 62 6c 61 62 65 6c 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 75 62 6c 61 62 65 6c 20 3d 20 24 28 74 68 69 73 29 2e 74 65 78 74 28 29 3b 0a 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 70 72 65 76 28 27 2e 77 73 69 74 65 Data Ascii: $('li.wsite-menu-subitem-wrap.wsite-nav-current').parents('.wsite-menu-wrap').addClass('open'); // Add placeholder text to inputs $('.wsite-form-sublabel').each(function(){ var sublabel = $(this).text(); $(this).prev('.wsite
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 20 20 20 20 24 62 6f 64 79 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 68 65 61 64 65 72 2d 63 6f 6d 70 72 65 73 73 65 64 27 2c 20 24 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 20 3e 20 68 65 61 64 65 72 48 65 69 67 68 74 20 2a 20 32 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 5f 64 65 74 65 63 74 48 65 61 64 65 72 57 72 61 70 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 68 65 61 64 65 72 48 65 69 67 68 74 20 3d 20 24 28 27 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 27 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3b 0a 0a 20 20 20 20 20 20 24 28 27 62 6f 64 79 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 68 65 61 64 65 72 2d 6d 75 6c 74 69 6c 69 6e 65 27 Data Ascii: $body.toggleClass('header-compressed', $(this).scrollTop() > headerHeight * 2); }); } }, _detectHeaderWrap: function() { var headerHeight = $('.edison-header').outerHeight(); $('body').toggleClass('header-multiline'
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 61 72 63 68 20 3d 20 24 28 27 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 77 72 61 70 27 29 3b 0a 20 20 20 20 20 20 76 61 72 20 73 65 61 72 63 68 20 3d 20 24 28 22 23 77 73 69 74 65 2d 68 65 61 64 65 72 2d 73 65 61 72 63 68 2d 66 6f 72 6d 20 69 6e 70 75 74 22 29 2e 63 6c 6f 6e 65 28 66 61 6c 73 65 29 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 77 69 6e 57 69 64 74 68 20 3e 3d 20 62 61 73 65 2e 5f 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 61 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 24 6c 6f 67 69 6e 2e 61 70 70 65 6e 64 54 6f 28 27 2e 64 65 73 6b 74 6f 70 2d 6e 61 76 20 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 27 29 3b 0a 20 20 20 20 20 20 20 20 24 73 65 61 72 63 68 2e 70 72 65 70 65 6e 64 54 6f 28 27 2e 73 69 74 65 2d 75 74 69 6c 73 27 29 3b 0a Data Ascii: arch = $('.wsite-search-wrap'); var search = $("#wsite-header-search-form input").clone(false); if (winWidth >= base._breakpoints.small) { $login.appendTo('.desktop-nav .wsite-menu-default'); $search.prependTo('.site-utils');
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 2d 77 72 61 70 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 76 65 61 6c 65 72 28 27 74 6f 67 67 6c 65 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 48 69 64 65 20 63 68 69 6c 64 72 65 6e 20 6f 66 20 6f 74 68 65 72 20 6d 61 69 6e 20 6e 61 76 20 69 74 65 6d 73 20 6f 6e 20 64 65 73 6b 74 6f 70 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 24 28 27 2e 68 61 6d 62 75 72 67 65 72 27 29 2e 69 73 28 27 3a 76 69 73 69 62 6c 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6c 6f 73 65 73 74 28 27 6c 69 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 69 62 6c 69 6e 67 73 28 27 2e 68 61 73 Data Ascii: -wrap') .revealer('toggle'); // Hide children of other main nav items on desktop if (!$('.hamburger').is(':visible')) { $(this) .closest('li') .siblings('.has
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 64 2d 6c 69 6e 6b 27 29 0a 20 20 20 20 20 20 20 20 20 20 2e 63 68 69 6c 64 72 65 6e 28 27 61 27 29 0a 20 20 20 20 20 20 20 20 20 20 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 77 73 69 74 65 2d 6d 65 6e 75 2d 69 74 65 6d 27 29 0a 20 20 20 20 20 20 20 20 20 20 2e 61 64 64 43 6c 61 73 73 28 27 77 73 69 74 65 2d 6d 65 6e 75 2d 73 75 62 69 74 65 6d 27 29 0a 20 20 20 20 20 20 20 20 20 20 2e 70 61 72 65 6e 74 28 29 0a 20 20 20 20 20 20 20 20 20 20 2e 70 72 65 70 65 6e 64 54 6f 28 24 6c 69 6e 6b 2e 6e 65 78 74 28 27 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 77 72 61 70 27 29 2e 63 68 69 6c 64 72 65 6e 28 27 2e 77 73 69 74 65 2d 6d 65 6e 75 27 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 2e 63 6c 6f 6e 65 64 2d 6c 69 6e 6b 27 29 2e 66 69 6e 64 28 27 2e 77 73 69 74 65 Data Ascii: d-link') .children('a') .removeClass('wsite-menu-item') .addClass('wsite-menu-subitem') .parent() .prependTo($link.next('.wsite-menu-wrap').children('.wsite-menu')); $('.cloned-link').find('.wsite
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 6e 57 69 64 74 68 20 3e 3d 20 62 61 73 65 2e 5f 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 61 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 4d 61 6b 65 20 73 75 72 65 20 74 68 65 20 65 64 69 74 6f 72 20 61 6c 73 6f 20 67 65 74 73 20 74 68 65 20 63 6c 61 73 73 0a 20 20 20 20 20 20 20 20 24 2e 66 6e 2e 69 6e 74 65 72 76 61 6c 4c 6f 6f 70 28 27 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 2e 77 73 69 74 65 2d 73 65 61 72 63 68 27 29 2e 61 74 74 72 28 27 73 74 79 6c 65 27 29 20 3d 3d 3d 20 27 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 27 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 24 28 27 62 6f 64 79 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 68 61 73 2d 73 69 74 65 2d 73 65 61 72 Data Ascii: nWidth >= base._breakpoints.small) { // Make sure the editor also gets the class $.fn.intervalLoop('', function() { if ($('.wsite-search').attr('style') === 'display: none;') return; $('body').toggleClass('has-site-sear
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e 6d 69 6e 69 2d 63 61 72 74 2d 6f 76 65 72 6c 61 79 27 29 2e 72 65 76 65 61 6c 65 72 28 72 65 76 65 61 6c 65 72 53 74 61 74 65 29 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 76 61 72 20 68 69 6a 61 63 6b 4d 69 6e 69 63 61 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 6f 67 67 6c 65 54 65 78 74 20 3d 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 68 74 6d 6c 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 22 27 28 29 5d 2f 67 2c 22 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 0a 20 20 20 20 20 20 20 20 20 20 2e 68 74 6d 6c 28 74 6f 67 67 6c 65 54 65 78 74 29 0a 20 20 20 20 20 20 20 20 Data Ascii: ); $('.mini-cart-overlay').revealer(revealerState); }; var hijackMinicart = function() { var toggleText = $('#wsite-nav-cart-a').html().replace(/["'()]/g,""); $('#wsite-nav-cart-a') .html(toggleText)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.11	49747	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	588	OUT	GET /js/site/main-customer-accounts-site.js?buildTime=1720803349 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:47 UTC	664	IN	HTTP/1.1 200 OK Connection: close Content-Length: 534233 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 10 Oct 2024 19:22:18 GMT ETag: "6708296a-826d9" Expires: Mon, 28 Oct 2024 01:37:46 GMT Cache-Control: max-age=1209600 X-Host: grn107.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:47 GMT Age: 38522 X-Served-By: cache-sjc10060-SJC, cache-ewr-kewr1740042-EWR X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1728908388.857502,VS0,VE71 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:47 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 66 61 6c 73 65 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 69 2e 6c 6f 61 64 65 64 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 22 3b 6e 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 77 69 6e 64 6f 77 2e 41 53 53 45 54 53 5f 42 41 53 45 Data Ascii: (function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:false};e[r].call(i.exports,i,i.exports,n);i.loaded=true;return i.exports}n.m=e;n.c=t;n.p="https://cdn2.editmysite.com/js/";n.p="https://"+window.ASSETS_BASE
2024-10-14 12:19:48 UTC	16384	IN	Data Raw: 2f 6a 73 6f 6e 22 3b 6f 2e 64 61 74 61 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 2e 61 74 74 72 73 7c 7c 72 2e 74 6f 4a 53 4f 4e 28 69 29 29 7d 69 66 28 69 2e 65 6d 75 6c 61 74 65 4a 53 4f 4e 29 7b 6f 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 3b 6f 2e 64 61 74 61 3d 6f 2e 64 61 74 61 3f 7b 6d 6f 64 65 6c 3a 6f 2e 64 61 74 61 7d 3a 7b 7d 7d 69 66 28 69 2e 65 6d 75 6c 61 74 65 48 54 54 50 26 26 28 61 3d 3d 3d 22 50 55 54 22 7c 7c 61 3d 3d 3d 22 44 45 4c 45 54 45 22 7c 7c 61 3d 3d 3d 22 50 41 54 43 48 22 29 29 7b 6f 2e 74 79 70 65 3d 22 50 4f 53 54 22 3b 69 66 28 69 2e 65 6d 75 6c 61 74 65 4a 53 4f 4e 29 6f 2e 64 61 74 61 2e 5f 6d 65 74 68 6f 64 3d Data Ascii: /json";o.data=JSON.stringify(i.attrs\|\|r.toJSON(i))}if(i.emulateJSON){o.contentType="application/x-www-form-urlencoded";o.data=o.data?{model:o.data}:{}}if(i.emulateHTTP&&(a==="PUT"\|\|a==="DELETE"\|\|a==="PATCH")){o.type="POST";if(i.emulateJSON)o.data._method=
2024-10-14 12:19:48 UTC	16384	IN	Data Raw: 65 41 63 74 69 6f 6e 28 22 63 68 65 63 6b 6f 75 74 22 2c 7b 73 69 74 65 5f 6f 72 64 65 72 5f 69 64 3a 6e 2e 67 65 74 28 22 73 69 74 65 5f 6f 72 64 65 72 5f 69 64 22 29 2c 73 6f 75 72 63 65 5f 73 69 74 65 5f 69 64 3a 6e 2e 67 65 74 28 22 73 6f 75 72 63 65 5f 73 69 74 65 5f 69 64 22 29 2c 72 65 76 65 6e 75 65 3a 6e 2e 67 65 74 28 22 6f 72 64 65 72 5f 74 6f 74 61 6c 22 29 2c 74 61 78 3a 6e 2e 67 65 74 28 22 6f 72 64 65 72 5f 74 61 78 5f 74 6f 74 61 6c 22 29 2c 73 68 69 70 70 69 6e 67 3a 6e 2e 67 65 74 28 22 6f 72 64 65 72 5f 73 68 69 70 70 69 6e 67 5f 74 6f 74 61 6c 22 29 2c 61 66 66 69 6c 69 61 74 69 6f 6e 3a 22 73 70 69 2e 63 68 65 63 6b 6f 75 74 22 2c 73 74 65 70 3a 65 2c 6c 69 73 74 3a 74 2c 70 61 79 6d 65 6e 74 5f 74 6f 6b 65 6e 3a 6e 2e 67 65 74 28 22 Data Ascii: eAction("checkout",{site_order_id:n.get("site_order_id"),source_site_id:n.get("source_site_id"),revenue:n.get("order_total"),tax:n.get("order_tax_total"),shipping:n.get("order_shipping_total"),affiliation:"spi.checkout",step:e,list:t,payment_token:n.get("
2024-10-14 12:19:48 UTC	16384	IN	Data Raw: 3d 30 2c 6f 3d 78 28 65 29 3b 77 68 69 6c 65 28 61 3c 6f 29 7b 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 61 2b 6f 29 2f 32 29 3b 69 66 28 6e 28 65 5b 73 5d 29 3c 69 29 61 3d 73 2b 31 3b 65 6c 73 65 20 6f 3d 73 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 69 2c 61 29 7b 76 61 72 20 6f 3d 30 2c 73 3d 78 28 72 29 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 69 66 28 65 3e 30 29 7b 6f 3d 61 3e 3d 30 3f 61 3a 4d 61 74 68 2e 6d 61 78 28 61 2b 73 2c 6f 29 7d 65 6c 73 65 7b 73 3d 61 3e 3d 30 3f 4d 61 74 68 2e 6d 69 6e 28 61 2b 31 2c 73 29 3a 61 2b 73 2b 31 7d 7d 65 6c 73 65 20 69 66 28 6e 26 26 61 26 26 73 29 7b 61 3d 6e 28 72 2c Data Ascii: =0,o=x(e);while(a<o){var s=Math.floor((a+o)/2);if(n(e[s])<i)a=s+1;else o=s}return a};function I(e,t,n){return function(r,i,a){var o=0,s=x(r);if(typeof a=="number"){if(e>0){o=a>=0?a:Math.max(a+s,o)}else{s=a>=0?Math.min(a+1,s):a+s+1}}else if(n&&a&&s){a=n(r,
2024-10-14 12:19:48 UTC	16384	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 3d 74 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 69 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 69 3d 74 2e 5f 69 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 66 3d 74 2e 5f 66 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 6c 3d 74 2e 5f 6c 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 73 74 72 69 63 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 73 74 72 69 63 74 3d 74 2e 5f 73 74 72 69 63 74 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 74 7a 6d 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 Data Ascii: ndefined"){e._isAMomentObject=t._isAMomentObject}if(typeof t._i!=="undefined"){e._i=t._i}if(typeof t._f!=="undefined"){e._f=t._f}if(typeof t._l!=="undefined"){e._l=t._l}if(typeof t._strict!=="undefined"){e._strict=t._strict}if(typeof t._tzm!=="undefined")
2024-10-14 12:19:48 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 65 28 65 29 7d 3b 6e 2e 69 6e 76 61 6c 69 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 75 74 63 28 4e 61 4e 29 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 7b 6c 65 28 74 2e 5f 70 66 2c 65 29 7d 65 6c 73 65 7b 74 2e 5f 70 66 2e 75 73 65 72 49 6e 76 61 6c 69 64 61 74 65 64 3d 74 72 75 65 7d 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 70 61 72 73 65 5a 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 2e 70 61 72 73 65 5a 6f 6e 65 28 29 7d 3b 6e 2e 70 61 72 73 65 54 77 6f 44 69 67 69 74 59 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 78 65 28 65 29 2b 28 78 65 28 65 29 3e 36 38 3f 31 39 Data Ascii: function(e){return Ae(e)};n.invalid=function(e){var t=n.utc(NaN);if(e!=null){le(t._pf,e)}else{t._pf.userInvalidated=true}return t};n.parseZone=function(){return n.apply(null,arguments).parseZone()};n.parseTwoDigitYear=function(e){return xe(e)+(xe(e)>68?19
2024-10-14 12:19:48 UTC	16384	IN	Data Raw: 6e 65 64 29 7d 2c 69 6e 63 6c 75 64 65 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 61 65 28 4d 65 28 74 68 69 73 29 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 75 6e 64 65 66 69 6e 65 64 29 7d 2c 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 64 65 2e 61 70 70 6c 79 28 4d 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6c 61 73 74 49 6e 64 65 78 4f 66 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 66 65 2e 61 70 70 6c 79 28 4d 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 45 65 28 4d 65 28 74 68 69 73 29 2c 74 2c 61 72 67 Data Ascii: ned)},includes:function e(t){return ae(Me(this),t,arguments.length>1?arguments[1]:undefined)},join:function e(t){return de.apply(Me(this),arguments)},lastIndexOf:function e(t){return fe.apply(Me(this),arguments)},map:function e(t){return Ee(Me(this),t,arg
2024-10-14 12:19:48 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 75 28 65 29 7b 69 66 28 69 3d 3d 3d 63 6c 65 61 72 54 69 6d 65 6f 75 74 29 7b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 69 66 28 28 69 3d 3d 3d 6f 7c 7c 21 69 29 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 29 7b 69 3d 63 6c 65 61 72 54 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 69 28 65 29 7d 63 61 74 63 68 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 7d 76 61 72 20 63 3d 5b 5d 3b 76 61 72 20 66 3d 66 61 6c 73 65 3b 76 61 72 20 6c 3b 76 61 72 20 76 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 64 28 Data Ascii: nction u(e){if(i===clearTimeout){return clearTimeout(e)}if((i===o\|\|!i)&&clearTimeout){i=clearTimeout;return clearTimeout(e)}try{return i(e)}catch(t){try{return i.call(null,e)}catch(t){return i.call(this,e)}}}var c=[];var f=false;var l;var v=-1;function d(
2024-10-14 12:19:48 UTC	16384	IN	Data Raw: 74 68 69 73 2c 74 29 3b 76 61 72 20 72 3d 6f 28 6e 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 75 6e 64 65 66 69 6e 65 64 2c 33 29 3b 76 61 72 20 69 3b 77 68 69 6c 65 28 69 3d 69 3f 69 2e 6e 3a 74 68 69 73 2e 5f 66 29 7b 72 28 69 2e 76 2c 69 2e 6b 2c 74 68 69 73 29 3b 77 68 69 6c 65 28 69 26 26 69 2e 72 29 69 3d 69 2e 70 7d 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 21 21 67 28 70 28 74 68 69 73 2c 74 29 2c 6e 29 7d 7d 29 3b 69 66 28 76 29 72 28 66 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 69 7a 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 28 74 68 69 73 2c 74 29 5b 68 5d 7d 7d 29 3b 72 65 74 75 72 6e 20 66 7d 2c 64 65 66 3a 66 75 6e Data Ascii: this,t);var r=o(n,arguments.length>1?arguments[1]:undefined,3);var i;while(i=i?i.n:this._f){r(i.v,i.k,this);while(i&&i.r)i=i.p}},has:function e(n){return!!g(p(this,t),n)}});if(v)r(f.prototype,"size",{get:function(){return p(this,t)[h]}});return f},def:fun
2024-10-14 12:19:48 UTC	16384	IN	Data Raw: 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 2b 2b 72 3c 69 29 7b 69 66 28 6e 28 74 2c 65 5b 72 5d 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 43 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 2c 72 3d 65 3d 3d 6e 75 6c 6c 3f 30 3a 65 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 72 29 3b 77 68 69 6c 65 28 2b 2b 6e 3c 72 29 7b 69 5b 6e 5d 3d 74 28 65 5b 6e 5d 2c 6e 2c 65 29 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 6b 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 2c 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 2b 2b 6e 3c 72 29 7b 65 5b 69 2b 6e 5d 3d 74 5b 6e 5d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4d 6e 28 65 2c Data Ascii: e.length;while(++r<i){if(n(t,e[r])){return true}}return false}function Cn(e,t){var n=-1,r=e==null?0:e.length,i=Array(r);while(++n<r){i[n]=t(e[n],n,e)}return i}function kn(e,t){var n=-1,r=t.length,i=e.length;while(++n<r){e[i+n]=t[n]}return e}function Mn(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.11	49748	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	866	OUT	GET /files/theme/images/arrow-light.svg?1720804667 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://att-mail-987654.weebly.com/files/main_style.css?1720804667 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:48 UTC	957	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:47 GMT Content-Type: image/svg+xml; charset=us-ascii Content-Length: 886 Connection: close CF-Ray: 8d2785104f15434c-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Disposition: attachment ETag: "552eb2e04260fc0733e5633d15c6aeaa" Last-Modified: Tue, 09 Apr 2024 09:20:13 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: HeRuXdja2g4FlpC1ZyKpJhGAZ88kd9ZByqg+KDrjDz6keHBCk7I74La1NI8/V9vbJa6uN3iC6QQ= x-amz-meta-btime: 2022-03-19T04:38:52.73Z x-amz-meta-mtime: 1647664732.73 x-amz-replication-status: COMPLETED x-amz-request-id: 4P9P5W1J9AFCQT2X x-amz-server-side-encryption: AES256 x-amz-version-id: laV8xkk7MteYwKEj3_0q8s8T2cHBLyJt X-Storage-Bucket: z705f X-Storage-Object: 705ff3240de004523ff9d628b28aad705ad3f0ceb046312495265a4042c67570 Server: cloudflare
2024-10-14 12:19:48 UTC	412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 32 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 33 39 2e 31 20 28 33 31 37 32 30 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="22px" height="11px" viewBox="0 0 22 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 39.1 (31720) - http://www.bo
2024-10-14 12:19:48 UTC	474	IN	Data Raw: 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 55 69 2d 4b 69 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 2e 30 30 30 30 30 30 2c 20 2d 36 39 37 2e 30 30 30 30 30 30 29 22 20 73 74 72 6f 6b 65 3d 22 23 46 46 46 46 46 46 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 32 2e 30 30 30 30 30 30 2c 20 36 39 38 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: " fill="none" fill-rule="evenodd" stroke-linecap="square"> <g id="Ui-Kit" transform="translate(-61.000000, -697.000000)" stroke="#FFFFFF" stroke-width="1.5"> <g id="Group" transform="translate(62.000000, 698.000000)"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.11	49749	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	620	OUT	GET /fonts/Roboto_Mono/regular.woff2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://att-mail-987654.weebly.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:47 UTC	629	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12312 Server: nginx Content-Type: font/woff2 Last-Modified: Mon, 07 Oct 2024 18:20:07 GMT ETag: "67042657-3018" Expires: Mon, 21 Oct 2024 20:06:17 GMT Cache-Control: max-age=1209600 X-Host: blu28.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:47 GMT Age: 576810 X-Served-By: cache-sjc10077-SJC, cache-nyc-kteb1890090-NYC X-Cache: HIT, HIT X-Cache-Hits: 139, 180 X-Timer: S1728908388.886693,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 30 18 00 0e 00 00 00 00 57 9c 00 00 2f be 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 36 06 60 3f 53 54 41 54 48 00 84 36 11 08 0a 81 99 60 f9 15 0b 83 42 00 01 36 02 24 03 83 42 04 20 05 85 04 07 20 0c 07 1b 97 44 b3 22 d8 38 00 80 a2 8d 2d 8a 72 b9 e9 82 ff 43 82 3c 43 9a ed 0a 2f 70 2e 5b f6 4c 89 ad aa 00 1c 38 8d 1d 10 4b d5 2b b5 e4 e3 31 17 ce d3 da fb 1f 2b 9e 5c 24 c4 cc e5 52 8e cb 8d bc 4f 3a 5a 81 5c fe 56 1c a1 b1 4f 72 a1 aa 61 eb d9 74 a4 e8 52 12 06 a1 72 d0 20 41 22 1c 48 4d 2e 8f 90 a8 57 5f 1e 8b 84 3f 7a 37 fb 59 92 10 98 d9 40 b9 f6 d4 3c 82 54 8c e6 54 12 f6 49 f2 4b bf 4e 45 28 35 19 82 6d 76 38 a3 e6 2c d0 06 41 10 83 10 69 45 aa c4 06 b4 09 31 73 46 cf a5 b5 39 a7 6e ea Data Ascii: wOF20W/6`?STATH6`B6$B D"8-rC<C/p.[L8K+1+\$RO:Z\VOratRr A"HM.W_?z7Y@<TTIKNE(5mv8,AiE1sF9n
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 10 63 3c ac 31 11 bc 3a c9 de 85 0e b6 5b f8 cf 20 d5 a3 db 29 b3 13 b7 e9 dd 6b a5 2a d1 d4 c7 20 82 50 54 69 09 89 62 99 dd 58 5c 18 74 32 5a 83 70 c5 14 2b 1b 8d ac 24 6f 9e 91 ca 66 93 1a 1e 0c 57 b1 c5 ce eb 79 77 ba 37 3a b6 39 3e 4b ae 8a f8 6a 6a 20 45 39 da 40 a0 29 8a 6d 6d 55 a2 10 0f d0 0f 2c b3 ed be cc 5a 84 2a a6 bf 9d 7a ee c8 6b a6 fb 9d 98 42 1d 5b b0 09 91 98 21 90 26 1c 12 98 5d cf 6f 45 72 ed bc 38 5a e8 05 4e 3e c0 c1 00 6f 63 f0 9c 75 8d 52 ac 1b 68 2e 89 60 75 ae ba c8 ec 9b 88 07 a3 64 53 f4 6e 1c 91 18 ea f7 fd ea 18 84 e4 5f 52 8b 1d b8 7d 1b ed dc 4e 3b 76 e2 51 69 8f dd 12 2a 13 58 25 cc 02 10 75 8c 18 24 46 ec b1 88 e4 eb 64 4c 3d b6 16 fd 15 1a cf 10 f8 a8 01 e0 2d 58 ff f4 b8 c0 7a 2a a4 12 d7 ac 2c 5d c4 97 32 37 d6 08 ce Data Ascii: c<1:[ )k* PTibX\t2Zp+$ofWyw7:9>Kjj E9@)mmU,ZzkB[!&]oEr8ZN>ocuRh.`udSn_R}N;vQiX%u$FdL=-Xz*,]27
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 1f 0f 9b c4 d9 8d 78 75 86 ce b7 a2 86 08 a0 46 b0 df 7a 26 1f e1 ba da 1f d9 3c 6c e0 c8 cf 8c 18 7c 44 e4 b1 84 12 4e 09 54 fb 39 10 eb 12 02 f8 a5 11 6c 61 10 d9 55 28 01 20 0b aa 47 68 67 38 00 dd 21 8f 5d 96 3c 0c ea 84 6e 52 ba 24 8c 07 92 0d ec 66 63 ea b3 01 03 a7 fe 04 72 15 82 c8 1d 4a 20 90 e1 61 8d 9c ef 2d 40 a1 15 b9 50 93 99 f4 15 8c 4b 61 0c e5 c3 58 34 77 e0 76 0e 1a a0 5d 18 96 19 5c e4 4c 1b d0 43 2a 01 35 54 2a a7 41 ad 52 c1 fa 95 3e 98 36 0f fc 56 31 18 cf 79 e2 fa 41 52 53 fe 95 42 ad 71 4f 86 3e 71 85 4d fc 82 72 c8 07 2d 9a c9 88 95 1c eb 4e 5c 23 41 f4 2a e8 c5 19 5a 0f ca 39 f4 5b 98 15 11 48 d0 99 ec ec 36 6d 32 ce bf 80 5a e4 9d 21 78 b5 cb e8 f2 b5 d7 5f a8 b5 3e d3 d1 14 26 a2 5a 6a e0 9d d3 d2 81 42 ec 90 15 80 60 11 66 bb Data Ascii: xuFz&<l\|DNT9laU( Ghg8!]<nR$fcrJ a-@PKaX4wv]\LC5TAR>6V1yARSBqO>qMr-N\#A*Z9[H6m2Z!x_>&ZjB`f
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 00 fc 22 c0 73 a9 23 c3 38 d1 b9 09 c8 36 74 0c e8 07 11 1f c7 47 34 d7 8f 8e 56 01 0b 63 d3 c8 cf e6 80 d5 d6 3e 92 f1 f1 f4 68 93 f2 a5 3c d2 0e 84 3f 9d 30 83 de 1e c6 42 44 1a 3e b6 a0 20 de 2a 96 0b 72 42 0c 55 34 bd 9b 9b 63 a5 e5 34 75 71 c5 b7 6f a1 59 4a a5 21 84 27 cc 09 52 0a 71 f9 33 87 ac 0d 8a 6d ff fe 33 1d 99 9d d6 47 19 99 49 68 f2 92 7a 49 3d c7 40 ec 24 88 f3 1d f3 95 f8 48 93 1b 8f 1d df 40 4e 06 49 60 1c 2b 0c 5c 21 e7 00 36 b0 30 ce 96 2b cb 67 96 51 33 e3 ca 71 60 fb c2 18 bf 8c 25 ca b1 d2 b1 f4 92 f4 71 40 e9 37 7e f1 c1 14 33 a4 39 44 1e 27 3b 50 24 0c ca 09 39 6a 9d 25 dd 72 fb f7 1d ac 6c c3 94 e0 ef bf 24 93 90 ac 2f c0 76 eb a1 ad 4f fc 3e 85 fd df f0 64 0a d6 39 fb eb 31 60 61 3c f6 17 68 1a 06 16 2e 26 60 61 6c 1d 01 6e fd Data Ascii: "s#86tG4Vc>h<?0BD> *rBU4c4uqoYJ!'Rq3m3GIhzI=@$H@NI`+\!60+gQ3q`%q@7~39D';P$9j%rl$/vO>d91`a<h.&`aln
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 47 0b 7d b8 86 69 12 a2 cc ca 86 d8 18 5e 0e 7b f6 fc 9b d3 7b e7 7f ae 3f 8f 82 11 a7 8a 10 6d b0 8a a1 1c 1d 7e 38 4c ce 6c ff 6b c9 c9 5e a4 9f d2 91 4f 2f f9 68 38 d3 a6 c9 22 f2 e8 a2 45 ab 89 4a 0e 28 47 7d bc ae 02 f6 fb 99 e3 a5 ff 94 8e ad 1e d3 6e bc ec 85 2b a0 d3 ea 71 1e ff fc 38 df e4 e9 d9 7d 7e fe 0d 70 b6 7d 9c f2 c6 14 98 5c 38 3c d5 93 ec 00 d6 8e 91 cd ec 07 da 6f 6a f7 ac 85 67 0d d3 b3 95 f4 cd b9 dc ab de b8 34 3a bd 01 87 6b a2 d3 33 c0 87 ef 9d df ff fc 5e 7d e0 d4 13 9d 7e 69 eb ae 39 60 09 e6 aa 81 fd 41 30 5e 7a 62 c4 af 3c b0 d0 00 47 32 73 07 d3 98 9e 19 7c 76 b1 83 9f ef c5 77 ef 9f 21 83 8d 41 96 36 16 58 f7 85 f9 0f 7e f0 77 0b 8f 3f 21 83 8c d8 68 54 b9 cb bb 64 04 bd 45 e0 62 cc 50 df 9c 78 85 5b 2b 70 0e 96 83 7c b6 35 Data Ascii: G}i^{{?m~8Llk^O/h8"EJ(G}n+q8}~p}\8<ojg4:k3^}~i9`A0^zb<G2s\|vw!A6X~w?!hTdEbPx[+p\|5
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 0d 7e d9 74 54 ea 02 48 20 29 d4 24 e4 fb 25 c8 14 06 03 99 f6 fe bd 1a 49 a5 26 fb 83 0f fe a9 a0 72 ab cb 76 97 fd ff ea 44 31 55 ed e2 c4 49 7e 0d f7 2d 37 86 c6 df 16 5f 5a 3a 11 4b e3 d3 05 f4 83 39 49 84 dd 24 01 49 30 9c 58 48 cf 80 e9 f5 d7 1b cd cc 53 09 d3 02 59 e7 1c 2f f6 1e 5f c7 5c 58 32 5f c7 91 a0 1a 70 de fa 30 2e 23 8b a6 4f 0c 19 d0 46 38 30 a3 e4 69 49 be e0 cb 20 d4 59 5b d9 72 93 9e 0c 98 ba 4d 2d 3d 33 bd 3b 44 a2 75 ad 9e 22 2c 2d 40 15 1d 9d 87 e0 09 8b b1 3a 7d 60 26 75 d4 c7 d1 d1 49 8f f6 79 37 3f ff cd 1d 8a 97 5f 5d 3d 00 77 28 04 88 e7 86 ca 44 9c c0 85 72 f4 b4 bb fb d7 1f f0 56 7f 54 2b e1 87 0b 74 94 45 52 6f ea cc f7 64 70 4a 7c 87 3b f1 4a 3a 3a 42 e4 5a c2 98 3c f2 be 66 b5 1f 2d 28 a1 b0 a0 c0 9b 13 91 e3 9b 5a 18 12 Data Ascii: ~tTH )$%I&rvD1UI~-7_Z:K9I$I0XHSY/_\X2_p0.#OF80iI Y[rM-=3;Du",-@:}`&uIy7?_]=w(DrVT+tERodpJ\|;J::BZ<f-(Z
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: d6 dd e1 4e 8e d4 55 ea 64 6a 07 89 d4 2f 4f f7 8d f2 28 a4 c2 09 70 05 29 cc 3b fe d8 e5 0c 14 27 3c 15 f7 ed 35 a2 94 7f 18 94 87 1b d7 1c ad a1 4b 6c ee f7 df 8f b5 59 c6 ba f2 94 b4 22 31 99 b1 22 41 d0 2f 4f f3 96 ba 15 d0 1d 1d 7d a3 40 d3 12 68 2a 52 72 eb c7 8f ed 82 18 bb 87 a6 a7 99 4e bd 3a 82 88 20 26 ce 64 06 65 12 67 f7 64 91 42 d4 f5 fe 69 7a 2d b1 6b e3 2e 71 60 54 2e 29 85 3e c8 17 cb c2 07 39 56 e6 7c ff fc cf 9f 92 30 61 44 95 a7 97 3d 26 89 3d a7 a6 75 91 78 03 34 8d 66 6b f8 ce 09 de 78 b6 b5 f9 d8 e0 76 ab 27 08 ab d8 ad db c4 3b e4 03 96 60 c3 d3 53 c1 39 db 6c e3 83 80 a5 49 d4 b1 b4 63 b2 a3 36 72 db a5 eb dc 68 5c a2 19 4e c9 55 5c df cd 27 a2 b6 61 b2 61 69 03 60 12 13 f3 8b db 57 54 54 b3 02 7a 63 95 c1 03 cd f5 cd 29 9f 9a 86 Data Ascii: NUdj/O(p);'<5KlY"1"A/O}@h*RrN: &degdBiz-k.q`T.)>9V\|0aD=&=ux4fkxv';`S9lIc6rh\NU\'aai`WTTzc)
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: c3 93 96 48 a9 b5 3a fe f4 89 70 ce 16 59 46 e6 16 29 48 67 9b 76 a9 b4 55 71 e7 c5 72 51 d4 29 75 59 d9 49 b5 38 4a 24 cf 72 d5 7c b8 73 22 b9 58 76 32 63 c1 c9 78 b1 54 22 55 5e 04 2a af 06 25 32 91 bc 48 2e 92 e1 f3 b5 f2 93 2a 18 a7 54 02 81 a1 aa 34 0b 1c 37 47 c7 1d d3 3a 70 a3 4a e7 c0 0b a8 08 6a ac f9 bf 78 9d 2f 17 2a 54 d0 b5 6d 19 45 d7 ea 0b 32 8e e6 4a 8f d0 a0 84 3f ff 3d 52 0a 58 37 fc 56 a7 78 94 f6 74 6f be 78 a5 1e 29 ab 56 af 24 e7 fc 1a d7 16 d7 f7 5b ea 6f 00 b6 fe 27 2a 36 cd cf 39 2d 80 1c 96 12 e0 ec 14 90 4e a1 04 64 b8 38 a7 60 c3 c8 69 58 67 14 36 a3 9e ec cd 71 82 7c f2 f2 ba e6 04 41 78 7b e1 81 d3 55 2f af 8f 10 c7 68 e0 d7 d7 67 2e 5a 9b 77 4d 7b 23 7f 6d d1 02 bf 31 9d b2 27 bf df 7b 6a af fb b6 c2 0d 94 19 70 6a 28 66 a8 Data Ascii: H:pYF)HgvUqrQ)uYI8J$r\|s"Xv2cxT"U^%2H.T47G:pJjx/TmE2J?=RX7Vxtox)V$[o'69-Nd8`iXg6q\|Ax{U/hg.ZwM{#m1'{jpj(f
2024-10-14 12:19:47 UTC	1288	IN	Data Raw: a7 f0 ba b6 d5 6d f5 6d 10 15 65 eb 4f 3f 35 86 46 47 14 3b b3 9d 36 5e a8 74 64 57 9e 10 0a 05 02 be ea 41 8d d9 be fa 7d ab f7 d5 ed b3 68 51 de e3 f3 85 a2 53 e2 2a 76 cd 92 26 a7 21 62 91 63 78 4c 73 d8 e9 31 ea 78 ba 05 c0 60 e2 d1 61 f3 7a 69 fb c6 fa 5f bb f4 e2 df b3 93 ca b6 ac 0b 38 3d 7c fb d0 41 33 cf 8d 05 34 eb 81 9d 03 c2 6b 16 87 ad f1 a1 73 0c 18 94 ab 7f 36 27 b0 c4 cb fb 97 8c 59 fb 8c 5b 55 e5 d4 59 5d 79 76 6d 9e 89 57 bf 07 f3 61 4d ca 0d b5 18 a4 5d 48 40 c1 81 44 5e 98 b0 0c 08 8d 07 4e c3 a8 55 2e 67 8a b2 27 bd a8 c6 96 a2 9c d1 b8 6d bb da cd 12 54 2f 71 3a 8c c1 4c d1 5f 07 3a 52 8b 87 e5 c1 8a 52 cf dd 08 96 1c 96 5b 18 82 a4 1c d6 04 1c 20 db 16 d4 83 be b4 d8 bc b3 40 33 15 40 b3 b4 61 ea 59 4b a6 91 b5 64 2c 58 4b a6 47 b3 Data Ascii: mmeO?5FG;6^tdWA}hQS*v&!bcxLs1x`azi_8=\|A34ks6'Y[UY]yvmWaM]H@D^NU.g'mT/q:L_:RR[ @3@aYKd,XKG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.11	49750	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:47 UTC	605	OUT	GET /fonts/Karla/bold.woff2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://att-mail-987654.weebly.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn2.editmysite.com/fonts/Karla/font.css?2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:47 UTC	628	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11384 Server: nginx Content-Type: font/woff2 Last-Modified: Tue, 01 Oct 2024 13:12:29 GMT ETag: "66fbf53d-2c78" Expires: Wed, 16 Oct 2024 08:26:59 GMT Cache-Control: max-age=1209600 X-Host: blu10.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1050769 Date: Mon, 14 Oct 2024 12:19:47 GMT X-Served-By: cache-sjc10056-SJC, cache-ewr-kewr1740048-EWR X-Cache: HIT, HIT X-Cache-Hits: 105, 0 X-Timer: S1728908388.888156,VS0,VE1 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2c 78 00 10 00 00 00 00 56 fc 00 00 2c 16 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 52 1b 88 08 1c 85 4a 06 60 3f 53 54 41 54 4c 00 84 16 11 08 0a 81 84 44 ed 69 0b 84 2e 00 01 36 02 24 03 88 58 04 20 05 84 0a 07 20 0c 07 1b 59 48 b3 a2 6e b4 5e 31 28 8a ea 49 33 fb 2f 13 38 1c 22 60 de 3a bf 09 8b 22 12 8b a6 19 14 4d 13 89 94 04 0f ee d1 b7 f8 19 ea b1 40 cb 17 97 e4 41 18 cf 08 07 de 7b 74 f9 9a b0 28 28 22 0e f8 eb a0 09 45 b1 ae 81 3a 42 63 9f e4 1e 91 6e cd de e5 92 10 20 8d a0 21 41 3c 20 84 16 21 f2 3c fd 69 5d b0 84 d2 22 ad 19 aa 08 58 1a 60 47 9e 62 69 60 c3 d2 f2 3e f8 18 5b 2c f5 f9 88 9d d2 2c 9d a6 e2 8b 15 1e ac fd 82 7a 49 a7 ff 2c 10 2b 22 54 ab 98 14 10 95 47 3a 02 cb e5 Data Ascii: wOF2,xV,RJ`?STATLDi.6$X YHn^1(I3/8"`:"M@A{t(("E:Bcn !A< !<i]"X`Gbi`>[,,zI,+"TG:
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: fa 5e 86 2e a2 c2 1d 37 02 e0 a7 f3 9e 6a 0b 0c 1e bb 6b d8 21 87 9d f2 b7 7f 5c d6 ef 43 70 a1 47 10 eb 16 24 79 43 6b 3d ac 19 64 6e eb a1 bd c5 a0 72 cd b1 ef 01 cf 7d f7 2b 28 48 1b e9 a5 7e dd e7 5c 77 db a0 17 7e 98 44 13 e9 20 1e 44 c8 f2 fb b8 cd 79 17 5d 76 c3 1d 77 3d d6 a3 df 53 2f 0d 1b f5 c1 cf 00 94 88 8a 74 11 37 f4 21 42 fe 02 04 0a 12 2c 44 a8 59 c2 84 9b 6d 8e b9 e6 89 50 a9 ca 86 16 ed 5b ad cf 58 70 60 a8 74 1e 1f 09 cf 9a 0a 7d 39 1c 94 32 c8 f3 08 40 6c 53 4a 00 5b c6 bc 54 76 e9 8e af 60 63 a0 0c 02 c7 01 7f 04 98 03 08 d1 dd 67 01 17 85 07 40 13 dd bd b6 a5 59 ad e9 00 f4 cd 30 e3 3d 00 ea 00 00 fe 93 7a 03 80 84 43 8f b0 11 00 6f 68 88 b6 79 e0 86 cc 62 04 00 3f 1c f5 91 b5 16 05 ff 33 03 00 9a d8 79 80 3d 07 b0 3f 80 4a 13 0b 00 Data Ascii: ^.7jk!\CpG$yCk=dnr}+(H~\w~D Dy]vw=S/t7!B,DYmP[Xp`t}92@lSJ[Tv`cg@Y0=zCohyb?3y=?J
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 15 de 98 77 0a a9 d9 31 5b 1c 57 df c8 b9 4c e8 d9 f6 59 7f 3e 8a 1c 5f 29 2d 6f 7a c9 c3 41 1e 3c 71 9b 44 b7 e8 6d da aa c4 51 f7 dd 2e a6 8d 93 57 ec 28 55 8d 7f 0a 86 75 40 4d e6 d8 18 67 4c eb 4a ae f2 59 37 97 c7 0f 5d 60 46 d7 dc 7b db d9 16 6b 1b 62 73 cb 5a 5f 8d bc 9d fb 97 15 63 42 82 a1 8d b5 c0 6f 69 05 83 0e 77 ac 78 8a 96 ae 1b f7 31 a3 cd 15 2a 08 12 71 11 c1 33 75 34 40 34 2a c9 c4 9e 6c f9 e3 fa 6b 28 ed 95 7c c4 11 83 52 83 92 18 29 a1 17 5a d0 2c 57 82 49 b4 db 26 90 45 c7 06 cc e3 84 c6 8f 3b 9c 5d 3f 43 53 37 75 4d 30 b9 0e 59 d7 b5 2c a4 4a 5d 01 60 e1 0d ff 90 e4 9f dd ad 71 71 44 e6 27 e3 01 a9 ea e0 98 12 a0 c4 c8 88 93 55 a1 64 bb bd 17 8b 17 5a 60 0a 77 e4 71 1f 3f ec 2e a2 2b 77 18 b9 b2 cd 01 aa 39 a6 f4 8d e2 ba eb fe 65 92 Data Ascii: w1[WLY>_)-ozA<qDmQ.W(Uu@MgLJY7]`F{kbsZ_cBoiwx1q3u4@4lk(\|R)Z,WI&E;]?CS7uM0Y,J]`qqD'UdZ`wq?.+w9e
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: b3 65 35 48 b5 06 6e c9 ff ff 9c 49 c5 27 c1 55 68 74 b1 2e 2e dc aa c2 a3 62 b9 42 ea 54 bc 64 70 7f 1c 98 0e c9 be 50 90 fe ae ad c5 3c 71 72 49 ba a1 5d c3 bf 58 4b 63 a0 12 e2 60 88 08 03 15 65 8d 11 a3 4a 0c 74 12 4c 83 c4 26 52 69 cd b1 97 1a d5 77 20 d6 d3 b9 53 80 88 07 a6 90 dc ab f9 39 6f 5a bb b2 5f 5f 2d b3 a4 6e 13 6b 3a 5c cf b3 b2 7a 0a be f6 d9 30 e7 7b b2 19 01 48 8a 2a 22 38 87 25 e5 05 58 e4 11 34 92 04 73 7d 84 99 90 54 bd 93 03 3e 62 b3 b8 c5 76 34 3b 30 7e 89 d6 8c d6 d2 d8 d5 6b 7e f9 cb d7 cd 71 dc 66 57 40 1b b0 fd 67 60 52 64 a9 8b 8a af 37 99 87 30 4a 1d 15 4f ea e0 55 a8 6b 11 1c 59 d8 c6 ef 41 fe ca 2e b4 34 01 8f 22 44 a7 fa 53 11 cc b5 64 88 b3 07 21 50 40 6e dd 95 9c ae 2b 3b fa 6d 11 43 cf 24 e5 b8 30 b9 55 a7 4f 6e 3f 2e Data Ascii: e5HnI'Uht..bBTdpP<qrI]XKc`eJtL&Riw S9oZ__-nk:\z0{H*"8%X4s}T>bv4;0~k~qfW@g`Rd70JOUkYA.4"DSd!P@n+;mC$0UOn?.
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: f4 bf c1 22 2c 79 25 a9 3c 31 bb ee 0d 9d 2a cb f5 a3 53 4c 9b b0 e4 40 1c 8b 2a 5c f7 53 5d 1f de d9 5a d6 f1 f9 ea 60 f7 f0 1d 56 cb 9b c5 a1 c9 e2 e4 b8 14 1e 26 8c 82 66 ac 81 24 6e 86 36 0f 16 a4 a5 6d 7f 29 01 f0 c1 ff ca f2 f6 9b 7e b9 93 b9 24 c0 48 73 98 b4 68 ea a9 ca 2f e8 ae ea f2 b8 4f 3c 60 79 fb a1 ac bf 5f 98 f5 eb 03 b3 10 ef 1a 7b 02 f2 92 8b 9b 53 e9 f0 e5 97 8a e5 00 f9 39 cc d7 3b 80 47 ae 54 4d 76 fd e2 fa c4 81 d7 17 b4 f0 5d fd fb cf 29 cb ac 27 80 78 db 76 b9 c2 25 e2 36 e4 81 51 6b c9 cb 32 8f c8 ab 81 ff 01 e0 7b 96 1f ea eb 87 f3 5d 75 f5 2b 7f 88 0f b5 eb 6f 7a 3a f2 0f f4 e0 f1 1d 89 4f a5 e4 e2 8c 4e c0 5f 06 4f ae ef 39 09 88 cf f0 08 84 9f 22 5c 59 bc 5b 17 da 2b c2 ad 53 45 c2 4a 58 44 38 32 36 12 f4 7d de 2f c2 ad 57 47 Data Ascii: ",y%<1SL@\S]Z`V&f$n6m)~$Hsh/O<`y_{S9;GTMv])'xv%6Qk2{]u+oz:ON_O9"\Y[+SEJXD826}/WG
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 40 2b 25 6f a8 fb 29 15 51 71 4e e5 f8 ff a6 70 27 5e cf 40 54 3d a4 0e f5 a6 a9 6b 2f 36 5e 04 59 8d 1b dc cc 7f 92 e9 66 f0 d0 91 e0 8e 38 bc e4 9e fd 95 92 83 a7 db 35 9a 9e 59 93 42 b3 9c 19 be 1c 6a a3 4f 28 41 c0 0f 25 fb 78 87 90 f9 82 10 c2 05 3a d3 7c 35 dd 36 66 53 67 eb bd c3 48 99 30 a2 37 10 3b 48 e0 ec 87 b9 13 93 ca 8e 51 12 d0 fc a7 ee 61 30 67 07 f6 18 cc f7 3a 9d c1 2e 62 39 45 6f 56 6c f7 ff 48 40 aa 80 8d 8e 17 ea 5e d5 8e f2 77 b8 07 4d d9 99 8f 08 0e d6 ea 5e 8c 2f 1f bd 53 6b af 6a 38 29 a7 65 57 2e dc 18 9c 2d 3f d9 60 af aa 05 a3 5b 2d 04 97 82 ac 06 95 8f 12 42 81 50 d6 b0 56 ad 73 c7 43 d3 2c 6c f7 bc ca 3c 89 b3 62 35 65 2d c5 89 ea b4 de fd 3f 10 d7 ea 70 25 2c e5 81 7b 8c e7 15 4b 73 dc 77 f3 2c d6 75 87 6c 77 ee bc 02 46 75 Data Ascii: @+%o)QqNp'^@T=k/6^Yf85YBjO(A%x:\|56fSgH07;HQa0g:.b9EoVlH@^wM^/Skj8)eW.-?`[-BPVsC,l<b5e-?p%,{Ksw,ulwFu
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 19 73 43 30 c0 ab 38 84 1a ac c0 93 bd 5d dc b0 70 19 42 ca c4 1a f9 5a 43 c3 30 57 09 2f 5b 5b 31 e3 dc 3f da 8d 21 50 c2 a6 e7 16 9e 88 68 21 41 88 09 67 86 85 41 19 54 22 94 0d a7 25 f1 62 cd b1 65 8d 15 d3 35 6d 86 1b 97 32 37 5b f6 d3 95 65 80 9c 9d d0 cd 69 cb 4f 4b 05 51 8f f1 7d 5c be c9 22 3a 32 da 77 b4 ef dc d7 cb 84 e0 87 be 5f 25 15 a2 a5 71 05 68 de ee 59 fd 7b dc ad f6 27 09 a4 fd c6 74 ef 1b cb 6e fb f6 29 16 d8 24 ee de 53 7b 41 44 f8 6c 0d 05 20 31 fd 03 b3 de 25 1a 1e 03 3f 74 68 0e 22 78 fc 4e 80 6a 9c 02 34 cd 48 ad dd 44 c5 c0 54 fc fe 52 07 07 97 e5 aa 2c 3e 27 b1 bc cc 90 dc 56 62 91 d4 2b a3 77 65 9c ec 1c 1f da 0b 67 13 c3 c2 39 78 18 8c 85 0f 0f 67 61 81 07 c4 7e 4f 9b fb 1c d5 48 02 84 09 43 3f 65 bc 75 53 5d 46 1a 9f 98 0e 9f Data Ascii: sC08]pBZC0W/[[1?!Ph!AgAT"%be5m27[eiOKQ}\":2w_%qhY{'tn)$S{ADl 1%?th"xNj4HDTR,>'Vb+weg9xga~OHC?euS]F
2024-10-14 12:19:47 UTC	1378	IN	Data Raw: 2c e2 4e 44 09 c0 16 68 07 e5 f9 dd d7 9b 92 4e e9 10 bf 7a 2d 96 91 ee 5b 9f 28 3e 76 06 4c ac ca 02 60 e4 09 75 95 93 67 0f 6f f9 99 8b 01 58 08 d2 aa 3b f1 32 46 03 15 c0 ae 26 46 00 30 47 c4 0d b7 6f 62 94 02 08 a0 0d 88 1d 5a c1 24 c1 69 e3 e5 80 ab e0 5a 8d 93 a0 53 c9 ad d1 59 66 e1 26 43 fc 12 ac b1 7e 7d 56 fe 21 18 c0 94 4f 1c 74 5e 72 7f e2 fd 78 09 20 c3 6a d5 d7 ca 10 02 e2 58 7e 2d da a1 ce 5e 38 e9 8b ba 3a 4e 3b e9 25 64 6b 6a 0f ad 0b 9b e5 be a3 ff 60 1a 06 a6 a7 13 4c 70 fb 1b cd 2a 76 1e 32 e7 8d e0 b9 48 78 b1 da 5c 7b 9a f4 1e b5 29 73 41 22 ed d6 be 59 82 19 27 4d fc 12 46 05 1d 5e 22 00 41 7c 95 f5 fb 4a 5d bc 00 74 3f db cf 25 18 c4 cd 45 cf a1 1a bb 06 b0 c8 c6 b7 c9 54 03 73 94 f8 08 80 8a b2 03 9a eb 1d 87 8f f0 36 d7 27 8e d7 Data Ascii: ,NDhNz-[(>vL`ugoX;2F&F0GobZ$iZSYf&C~}V!Ot^rx jX~-^8:N;%dkj`Lp*v2Hx\{)sA"Y'MF^"A\|J]t?%ETs6'
2024-10-14 12:19:47 UTC	360	IN	Data Raw: c3 80 cc 71 cc 1c 59 55 92 ad fe c0 76 1b 82 5c fb 94 52 a0 f8 bc ed 93 d9 b1 c8 c7 b8 b5 f2 d5 3a d7 a2 43 e0 78 ac c6 1d 33 6d b0 25 61 6e a3 2b 53 55 65 59 ca 95 c7 f6 c6 61 41 0e 1c 22 0c 10 0f 4e 8b 55 c3 59 2c 87 e5 bf 41 bc e1 b2 57 00 36 73 39 ea b0 53 0a 68 49 79 fc c6 c6 28 70 68 19 2f db 56 c3 97 dc 71 fe b4 dc 21 80 b6 13 83 2a 1b 6d 9f 13 50 fe 5e 25 b3 05 fe 7a a5 05 00 7b c0 3c 8f 30 ec c9 63 e8 0e e7 71 56 94 79 0a 9e ee 3c 41 60 24 4f c5 0b fa 93 98 1c c2 f0 44 08 40 27 e6 f6 10 74 65 44 3b a3 f2 bb 86 0e 8c c8 e6 23 4f be 32 85 b2 64 c8 54 8c 64 47 6a 26 67 24 59 01 69 2a 44 52 53 e5 4a 8a 62 f6 a0 f2 64 9f c9 94 42 e5 65 a1 a9 4c 79 14 45 a9 b4 20 50 c5 f2 13 e5 c2 f6 23 ca 90 95 65 9e 56 32 1b 29 a3 5c 90 60 c6 c6 63 67 c8 95 26 5d 28 Data Ascii: qYUv\R:Cx3m%an+SUeYaA"NUY,AW6s9ShIy(ph/Vq!mP^%z{<0cqVy<A`$OD@'teD;#O2dTdGj&g$YiDRSJbdBeLyE P#eV2)\`cg&](

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.11	49752	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:48 UTC	576	OUT	GET /files/theme/plugins.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:48 UTC	861	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d278512ceb40fab-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c" Last-Modified: Mon, 29 Apr 2024 13:02:46 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: fDTqxx/FxqnWMuPJwzYzGekYzhbUPsmOzhBqdgJ1SD+HWwcrtLuQr8XybkInu7ZdxhPePKA0217dd/g0rqDryQ== x-amz-replication-status: COMPLETED x-amz-request-id: N45SFGTCENBFD73B x-amz-server-side-encryption: AES256 x-amz-version-id: sTNQn2rzaHgQudj7CuT9D50TBpz30e4M X-Storage-Bucket: zb635 X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5 Server: cloudflare
2024-10-14 12:19:48 UTC	508	IN	Data Raw: 32 63 35 0d 0a 0a 2f 2a 21 20 48 61 6d 6d 65 72 2e 4a 53 20 2d 20 76 32 2e 30 2e 34 20 2d 20 32 30 31 34 2d 30 39 2d 32 38 0a 20 2a 20 68 74 74 70 3a 2f 2f 68 61 6d 6d 65 72 6a 73 2e 67 69 74 68 75 62 2e 69 6f 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4a 6f 72 69 6b 20 54 61 6e 67 65 6c 64 65 72 3b 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 65 78 70 6f 72 74 4e 61 6d 65 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 76 61 72 20 56 45 4e 44 4f 52 5f 50 52 45 46 49 58 45 53 20 3d 20 5b 27 27 2c 20 27 77 65 62 6b 69 74 Data Ascii: 2c5/! Hammer.JS - v2.0.4 - 2014-09-28 http://hammerjs.github.io/ * * Copyright (c) 2014 Jorik Tangelder; * Licensed under the MIT license */(function(window, document, exportName, undefined) { 'use strict';var VENDOR_PREFIXES = ['', 'webkit
2024-10-14 12:19:48 UTC	208	IN	Data Raw: 75 6d 62 65 72 7d 20 74 69 6d 65 6f 75 74 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 63 6f 6e 74 65 78 74 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 6e 75 6d 62 65 72 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 69 6d 65 6f 75 74 43 6f 6e 74 65 78 74 28 66 6e 2c 20 74 69 6d 65 6f 75 74 2c 20 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 62 69 6e 64 46 6e 28 66 6e 2c 20 63 6f 6e 74 65 78 74 29 2c 20 74 69 6d 65 6f 75 74 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 69 66 20 74 68 65 20 61 72 67 75 6d 65 6e 74 20 69 73 20 61 6e 20 61 72 72 0d 0a Data Ascii: umber} timeout * @param {Object} context * @returns {number} /function setTimeoutContext(fn, timeout, context) { return setTimeout(bindFn(fn, context), timeout);}/* * if the argument is an arr
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 37 66 65 61 0d 0a 61 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 65 78 65 63 75 74 65 20 74 68 65 20 66 6e 20 6f 6e 20 65 61 63 68 20 65 6e 74 72 79 0a 20 2a 20 69 66 20 69 74 20 61 69 6e 74 20 61 6e 20 61 72 72 61 79 20 77 65 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 64 6f 20 61 20 74 68 69 6e 67 2e 0a 20 2a 20 74 68 69 73 20 69 73 20 75 73 65 64 20 62 79 20 61 6c 6c 20 74 68 65 20 6d 65 74 68 6f 64 73 20 74 68 61 74 20 61 63 63 65 70 74 20 61 20 73 69 6e 67 6c 65 20 61 6e 64 20 61 72 72 61 79 20 61 72 67 75 6d 65 6e 74 2e 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7c 41 72 72 61 79 7d 20 61 72 67 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 66 6e 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 5b 63 6f 6e 74 65 78 74 5d 0a 20 2a Data Ascii: 7feaay, we want to execute the fn on each entry * if it aint an array we don't want to do a thing. * this is used by all the methods that accept a single and array argument. * @param {\|Array} arg @param {String} fn * @param {Object} [context] *
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 73 5b 69 5d 5d 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 74 5b 6b 65 79 73 5b 69 5d 5d 20 3d 20 73 72 63 5b 6b 65 79 73 5b 69 5d 5d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 2b 2b 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 64 65 73 74 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 6d 65 72 67 65 20 74 68 65 20 76 61 6c 75 65 73 20 66 72 6f 6d 20 73 72 63 20 69 6e 20 74 68 65 20 64 65 73 74 2e 0a 20 2a 20 6d 65 61 6e 73 20 74 68 61 74 20 70 72 6f 70 65 72 74 69 65 73 20 74 68 61 74 20 65 78 69 73 74 20 69 6e 20 64 65 73 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 6f 76 65 72 77 72 69 74 74 65 6e 20 62 79 20 73 72 63 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 Data Ascii: s[i]] === undefined)) { dest[keys[i]] = src[keys[i]]; } i++; } return dest;}/** * merge the values from src in the dest. * means that properties that exist in dest will not be overwritten by src * @param {Object}
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 20 76 61 6c 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 75 73 65 20 74 68 65 20 76 61 6c 32 20 77 68 65 6e 20 76 61 6c 31 20 69 73 20 75 6e 64 65 66 69 6e 65 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7d 20 76 61 6c 31 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7d 20 76 61 6c 32 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 2a 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 66 55 6e 64 65 66 69 6e 65 64 28 76 61 6c 31 2c 20 76 61 6c 32 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 28 76 61 6c 31 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 3f 20 76 61 6c 32 20 3a 20 76 61 6c 31 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 65 76 65 6e 74 73 20 61 74 20 6f 6e 63 65 0a 20 2a 20 40 70 61 72 Data Ascii: val;}/** * use the val2 when val1 is undefined * @param {} val1 @param {} val2 @returns {} /function ifUndefined(val1, val2) { return (val1 === undefined) ? val2 : val1;}/** * addEventListener with multiple events at once * @par
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 69 6e 67 7d 20 73 74 72 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 41 72 72 61 79 7d 20 77 6f 72 64 73 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 70 6c 69 74 53 74 72 28 73 74 72 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 74 72 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 67 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 66 69 6e 64 20 69 66 20 61 20 61 72 72 61 79 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 6f 62 6a 65 63 74 20 75 73 69 6e 67 20 69 6e 64 65 78 4f 66 20 6f 72 20 61 20 73 69 6d 70 6c 65 20 70 6f 6c 79 46 69 6c 6c 0a 20 2a 20 40 70 61 72 61 6d 20 7b 41 72 72 61 79 7d 20 73 72 63 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 66 69 6e 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 5b 66 69 6e 64 42 79 4b Data Ascii: ing} str * @returns {Array} words /function splitStr(str) { return str.trim().split(/\s+/g);}/* * find if a array contains the object using indexOf or a simple polyFill * @param {Array} src * @param {String} find * @param {String} [findByK
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 20 3d 20 76 61 6c 3b 0a 20 20 20 20 20 20 20 20 69 2b 2b 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 73 6f 72 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 20 3d 20 72 65 73 75 6c 74 73 2e 73 6f 72 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 20 3d 20 72 65 73 75 6c 74 73 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 20 73 6f 72 74 55 6e 69 71 75 65 41 72 72 61 79 28 61 2c 20 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 6b 65 79 5d 20 3e 20 62 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 Data Ascii: = val; i++; } if (sort) { if (!key) { results = results.sort(); } else { results = results.sort(function sortUniqueArray(a, b) { return a[key] > b[key]; }); }
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 20 3d 20 53 55 50 50 4f 52 54 5f 54 4f 55 43 48 20 26 26 20 4d 4f 42 49 4c 45 5f 52 45 47 45 58 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3b 0a 0a 76 61 72 20 49 4e 50 55 54 5f 54 59 50 45 5f 54 4f 55 43 48 20 3d 20 27 74 6f 75 63 68 27 3b 0a 76 61 72 20 49 4e 50 55 54 5f 54 59 50 45 5f 50 45 4e 20 3d 20 27 70 65 6e 27 3b 0a 76 61 72 20 49 4e 50 55 54 5f 54 59 50 45 5f 4d 4f 55 53 45 20 3d 20 27 6d 6f 75 73 65 27 3b 0a 76 61 72 20 49 4e 50 55 54 5f 54 59 50 45 5f 4b 49 4e 45 43 54 20 3d 20 27 6b 69 6e 65 63 74 27 3b 0a 0a 76 61 72 20 43 4f 4d 50 55 54 45 5f 49 4e 54 45 52 56 41 4c 20 3d 20 32 35 3b 0a 0a 76 61 72 20 49 4e 50 55 54 5f 53 54 41 52 54 20 3d 20 31 3b 0a 76 61 72 20 49 4e 50 55 54 5f 4d 4f 56 45 20 3d 20 32 Data Ascii: = SUPPORT_TOUCH && MOBILE_REGEX.test(navigator.userAgent);var INPUT_TYPE_TOUCH = 'touch';var INPUT_TYPE_PEN = 'pen';var INPUT_TYPE_MOUSE = 'mouse';var INPUT_TYPE_KINECT = 'kinect';var COMPUTE_INTERVAL = 25;var INPUT_START = 1;var INPUT_MOVE = 2
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 20 73 68 6f 75 6c 64 20 68 61 6e 64 6c 65 20 74 68 65 20 69 6e 70 75 74 45 76 65 6e 74 20 64 61 74 61 20 61 6e 64 20 74 72 69 67 67 65 72 20 74 68 65 20 63 61 6c 6c 62 61 63 6b 0a 20 20 20 20 20 2a 20 40 76 69 72 74 75 61 6c 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 68 61 6e 64 6c 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 7d 2c 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 62 69 6e 64 20 74 68 65 20 65 76 65 6e 74 73 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 76 45 6c 20 26 26 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 20 74 68 69 73 2e 65 76 45 6c 2c 20 74 68 69 73 2e 64 6f 6d 48 61 6e 64 6c 65 72 Data Ascii: should handle the inputEvent data and trigger the callback * @virtual / handler: function() { }, /* * bind the events */ init: function() { this.evEl && addEventListeners(this.element, this.evEl, this.domHandler
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 65 29 28 6d 61 6e 61 67 65 72 2c 20 69 6e 70 75 74 48 61 6e 64 6c 65 72 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 68 61 6e 64 6c 65 20 69 6e 70 75 74 20 65 76 65 6e 74 73 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4d 61 6e 61 67 65 72 7d 20 6d 61 6e 61 67 65 72 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 65 76 65 6e 74 54 79 70 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 69 6e 70 75 74 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 70 75 74 48 61 6e 64 6c 65 72 28 6d 61 6e 61 67 65 72 2c 20 65 76 65 6e 74 54 79 70 65 2c 20 69 6e 70 75 74 29 20 7b 0a 20 20 20 20 76 61 72 20 70 6f 69 6e 74 65 72 73 4c 65 6e 20 3d 20 69 6e 70 75 74 2e 70 6f 69 6e 74 65 72 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 76 61 72 20 63 68 61 6e 67 65 64 50 Data Ascii: e)(manager, inputHandler);}/** * handle input events * @param {Manager} manager * @param {String} eventType * @param {Object} input */function inputHandler(manager, eventType, input) { var pointersLen = input.pointers.length; var changedP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.11	49753	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:48 UTC	583	OUT	GET /files/theme/jquery.pxuMenu.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:48 UTC	927	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d2785132b1d8c47-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"ac373d716afe4270df40f60417b0f418" Last-Modified: Thu, 25 Apr 2024 07:47:28 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: eV21EFCXackGIAAYw8qmO6C5G8Wv/prZfjl5hvaW1IaguPQYlteWXVReAa3kHpT2b1oKKFvvOVo= x-amz-meta-btime: 2023-09-25T13:28:31.664Z x-amz-meta-mtime: 1695648511.664 x-amz-replication-status: COMPLETED x-amz-request-id: Q1Z3YR2GDSX8X6JD x-amz-server-side-encryption: AES256 x-amz-version-id: YuLNF3avwFeaQ53LKsWBmjOk1H1qzEyo X-Storage-Bucket: zf755 X-Storage-Object: f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a Server: cloudflare
2024-10-14 12:19:48 UTC	442	IN	Data Raw: 33 64 65 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 3d 20 20 20 20 20 20 20 20 20 20 20 20 57 65 65 62 6c 79 20 48 6f 72 69 7a 6f 6e 74 61 6c 20 53 69 74 65 20 4d 65 6e 75 20 20 20 20 20 20 20 20 20 20 20 20 3d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 0a 20 20 20 2a 20 47 65 6e 65 72 61 74 65 20 61 20 66 6c 65 78 69 62 6c 65 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 65 6e 75 20 66 72 6f 6d 20 74 68 65 20 64 65 66 61 75 6c 74 20 6e 61 Data Ascii: 3de/==================================================== Weebly Horizontal Site Menu ====================================================/(function($) { /** * * Generate a flexible responsive menu from the default na
2024-10-14 12:19:48 UTC	555	IN	Data Raw: 73 3b 0a 20 20 20 20 74 68 69 73 2e 24 6d 6f 72 65 20 3d 20 20 24 28 27 5c 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6d 6f 72 65 20 68 61 73 2d 73 75 62 6d 65 6e 75 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 43 6c 61 73 73 20 2b 20 27 22 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 6d 6f 72 65 2d 6c 69 6e 6b 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 4c 69 6e 6b 43 6c 61 73 73 20 2b 20 27 22 3e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 6d 6f 72 65 4c 69 6e 6b 48 74 6d 6c 20 2b 20 27 3c 2f 61 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 20 2b 20 Data Ascii: s; this.$more = $('\ <li class="menu-more has-submenu ' + settings.parentClass + '"> \ <a href="#" class="more-link ' + settings.parentLinkClass + '">' + settings.moreLinkHtml + '</a> \ <div class="' + settings.containerClass +
2024-10-14 12:19:48 UTC	1369	IN	Data Raw: 61 39 33 0d 0a 43 6c 61 73 73 28 22 6d 6f 72 65 2d 6e 61 76 2d 6f 6e 22 29 3b 0a 20 20 20 20 73 65 6c 66 2e 67 65 6e 65 72 61 74 65 4d 6f 72 65 28 29 3b 0a 0a 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 72 65 73 69 7a 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 73 65 6c 66 2e 67 65 6e 65 72 61 74 65 4d 6f 72 65 28 29 3b 0a 20 20 20 20 7d 29 3b 0a 20 20 7d 3b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 0a 20 20 20 2a 20 55 70 64 61 74 65 20 74 68 65 20 6d 65 6e 75 20 73 74 61 74 65 20 61 66 74 65 72 20 69 6e 69 74 0a 20 20 20 2a 0a 20 20 20 2a 2f 0a 0a 20 20 4d 65 6e 75 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 67 65 6e 65 72 61 74 65 4d 6f 72 65 Data Ascii: a93Class("more-nav-on"); self.generateMore(); $(window).on('resize', function() { self.generateMore(); }); }; /** * * Update the menu state after init * */ Menu.prototype.update = function() { this.generateMore
2024-10-14 12:19:48 UTC	1345	IN	Data Raw: 65 5d 27 29 2e 63 68 69 6c 64 72 65 6e 28 29 3b 0a 0a 20 20 20 20 74 68 69 73 2e 74 6f 67 67 6c 65 43 6c 61 73 73 65 73 28 24 6d 6f 72 65 43 68 69 6c 64 72 65 6e 29 3b 0a 0a 20 20 20 20 2f 2f 20 4d 6f 76 65 20 74 68 65 20 63 68 69 6c 64 72 65 6e 20 62 61 63 6b 20 69 6e 74 6f 20 74 68 65 20 6d 61 69 6e 20 6d 65 6e 75 0a 20 20 20 20 24 6d 6f 72 65 43 68 69 6c 64 72 65 6e 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 24 6d 65 6e 75 29 3b 0a 0a 20 20 20 20 2f 2f 20 52 65 6d 6f 76 65 20 74 68 65 20 69 6e 6a 65 63 74 65 64 20 77 72 61 70 70 65 72 20 69 74 65 6d 0a 20 20 20 20 74 68 69 73 2e 24 6d 6f 72 65 2e 72 65 6d 6f 76 65 28 29 3b 0a 20 20 7d 3b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 0a 20 20 20 2a 20 53 65 74 20 2f 20 72 65 73 65 74 20 74 68 65 20 63 6c 61 73 Data Ascii: e]').children(); this.toggleClasses($moreChildren); // Move the children back into the main menu $moreChildren.appendTo(this.$menu); // Remove the injected wrapper item this.$more.remove(); }; /** * * Set / reset the clas
2024-10-14 12:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.11	49754	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:48 UTC	588	OUT	GET /files/theme/images/arrow-light.svg?1720804667 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:48 UTC	969	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:48 GMT Content-Type: image/svg+xml; charset=us-ascii Content-Length: 886 Connection: close CF-Ray: 8d2785156a9942f5-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Disposition: attachment ETag: "552eb2e04260fc0733e5633d15c6aeaa" Last-Modified: Tue, 09 Apr 2024 09:20:13 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: cuiwyve1IPmAC52LMidLg1t5sjBlii78Xtymew+AvTZ+ibII1KpNgE210oW1/dfs+50ceaRz9279L/MwMNZSOw== x-amz-meta-btime: 2022-03-19T04:38:52.73Z x-amz-meta-mtime: 1647664732.73 x-amz-replication-status: COMPLETED x-amz-request-id: 38RS934BWMJD6WN4 x-amz-server-side-encryption: AES256 x-amz-version-id: laV8xkk7MteYwKEj3_0q8s8T2cHBLyJt X-Storage-Bucket: z705f X-Storage-Object: 705ff3240de004523ff9d628b28aad705ad3f0ceb046312495265a4042c67570 Server: cloudflare
2024-10-14 12:19:48 UTC	400	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 32 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 33 39 2e 31 20 28 33 31 37 32 30 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="22px" height="11px" viewBox="0 0 22 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 39.1 (31720) - http://www.bo
2024-10-14 12:19:48 UTC	486	IN	Data Raw: 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 55 69 2d 4b 69 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 2e 30 30 30 30 30 30 2c 20 2d 36 39 37 2e 30 30 30 30 30 30 29 22 20 73 74 72 6f 6b 65 3d 22 23 46 46 46 46 46 46 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 32 2e 30 30 30 30 30 30 2c 20 36 39 38 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 Data Ascii: oke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="square"> <g id="Ui-Kit" transform="translate(-61.000000, -697.000000)" stroke="#FFFFFF" stroke-width="1.5"> <g id="Group" transform="translate(62.000000, 698.000000)">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.11	49755	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:48 UTC	581	OUT	GET /files/theme/jquery.trend.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:49 UTC	927	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d278515684c42a1-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"4beccebe0a060b2b2c43de5c2d4512ef" Last-Modified: Sun, 07 Apr 2024 01:42:19 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: Ny1xHoaOJOuQe77y9y2IabE0FHGukTr+Y7iO5J3bEvA0OyS6KMzEtfvq5qXVLZnbQj/X/epODAA= x-amz-meta-btime: 2023-09-25T13:28:31.869Z x-amz-meta-mtime: 1695648511.869 x-amz-replication-status: COMPLETED x-amz-request-id: XTDQJSXVHADER5K9 x-amz-server-side-encryption: AES256 x-amz-version-id: SLcK2XYoSswC7.3mqk46FHp.mNA3XCRS X-Storage-Bucket: z446f X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738 Server: cloudflare
2024-10-14 12:19:49 UTC	442	IN	Data Raw: 65 62 66 0d 0a 2f 2a 21 0a 20 2a 20 54 72 65 6e 64 20 30 2e 32 2e 30 0a 20 2a 0a 20 2a 20 46 61 69 6c 2d 73 61 66 65 20 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 65 76 65 6e 74 20 66 6f 72 20 6a 51 75 65 72 79 2e 0a 20 2a 0a 20 2a 20 41 64 64 73 20 61 20 6e 65 77 20 22 74 72 65 6e 64 22 20 65 76 65 6e 74 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 62 72 6f 77 73 65 72 73 20 74 68 61 74 20 64 6f 6e 27 74 0a 20 2a 20 73 75 70 70 6f 72 74 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2e 0a 20 2a 0a 20 2a 20 4e 4f 54 45 3a 20 4f 6e 6c 79 20 73 75 70 70 6f 72 74 73 20 62 65 69 6e 67 20 62 6f 75 6e 64 20 77 69 74 68 20 22 6a 51 75 65 72 79 2e 6f 6e 65 22 2e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 50 69 78 65 6c Data Ascii: ebf/! Trend 0.2.0 * * Fail-safe TransitionEnd event for jQuery. * * Adds a new "trend" event that can be used in browsers that don't * support "transitionend". * * NOTE: Only supports being bound with "jQuery.one". * * Copyright 2014, Pixel
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 20 22 20 2b 0a 20 20 20 20 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 6d 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 0a 0a 20 20 2f 2f 20 50 72 65 66 69 78 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 64 75 72 61 74 69 6f 6e 20 70 72 6f 70 65 72 74 79 20 6e 61 6d 65 73 0a 20 20 76 61 72 20 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 20 3d 20 5b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: otransitionend " + "oTransitionEnd " + "msTransitionEnd " + "transitionend"; // Prefixed transition duration property names var transitionDurationProperties = [ "transition-duration", "-moz-transition-duration", "-webkit-trans
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 76 61 6c 75 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 75 72 61 74 69 6f 6e 20 3d 20 70 61 72 73 65 54 69 6d 65 28 76 61 6c 75 65 73 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 64 75 72 61 74 69 6f 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 20 20 20 20 20 20 20 20 7d 29 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 64 75 72 61 74 69 6f 6e 20 3d 20 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 4d 61 74 68 2c 20 64 75 72 61 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 53 69 6e 67 6c Data Ascii: for (var i = 0; i < values.length; i++) { var duration = parseTime(values[i]); results.push(duration); } return results; })(); duration = Math.max.apply(Math, durations); } // Singl
2024-10-14 12:19:49 UTC	602	IN	Data Raw: 68 6f 73 65 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 77 65 27 6c 6c 0a 20 20 20 20 20 20 20 20 2f 2f 20 68 61 76 65 20 74 6f 20 72 65 6c 79 20 6f 6e 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 74 68 65 73 65 20 63 61 73 65 73 2e 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 20 26 26 20 65 2e 73 72 63 45 6c 65 6d 65 6e 74 20 21 3d 3d 20 65 6c 5b 30 5d 29 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 4d 61 72 6b 20 65 6c 65 6d 65 6e 74 20 68 61 73 20 6e 6f 74 20 62 65 69 6e 67 20 69 6e 20 74 72 61 6e 73 69 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 65 6c 2e 64 61 74 61 28 22 74 72 65 6e 64 22 2c 20 66 61 6c 73 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 43 61 6c 6c 62 61 63 6b 0a 20 20 20 20 20 20 20 20 66 69 72 65 64 20 3d 20 74 Data Ascii: hose. Unfortunately, we'll // have to rely on the timeout in these cases. if (e && e.srcElement !== el[0]) return; // Mark element has not being in transition el.data("trend", false); // Callback fired = t
2024-10-14 12:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.11	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-14 12:19:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=102347 Date: Mon, 14 Oct 2024 12:19:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.11	49756	151.101.1.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:49 UTC	551	OUT	GET /js/wsnbn/snowday262.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:49 UTC	663	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75006 Server: nginx Content-Type: application/javascript Last-Modified: Tue, 08 Oct 2024 22:23:53 GMT ETag: "6705b0f9-124fe" Expires: Wed, 23 Oct 2024 09:43:21 GMT Cache-Control: max-age=1209600 X-Host: grn93.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:49 GMT Age: 441387 X-Served-By: cache-sjc10061-SJC, cache-nyc-kteb1890026-NYC X-Cache: HIT, HIT X-Cache-Hits: 110, 1 X-Timer: S1728908389.278558,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 67 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 2c 6a 29 7b 69 66 28 21 67 5b 6e 5d 29 7b 69 66 28 21 62 5b 6e 5d 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 6a 26 26 69 29 7b 72 65 74 75 72 6e 20 69 28 6e 2c 21 30 29 7d 69 66 28 61 29 7b 72 65 74 75 72 6e 20 61 28 6e 2c 21 30 29 7d 76 61 72 20 6d 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6e 2b 22 27 22 29 3b 74 68 72 6f 77 20 6d 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6d 7d 76 61 72 20 68 3d 67 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 62 5b 6e 5d 5b 30 5d 2e Data Ascii: (function e(b,g,d){function c(n,j){if(!g[n]){if(!b[n]){var i=typeof require=="function"&&require;if(!j&&i){return i(n,!0)}if(a){return a(n,!0)}var m=new Error("Cannot find module '"+n+"'");throw m.code="MODULE_NOT_FOUND",m}var h=g[n]={exports:{}};b[n][0].
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 6a 29 3b 76 2e 61 64 64 28 22 65 22 2c 22 70 76 22 29 3b 76 2e 61 64 64 28 22 75 72 6c 22 2c 75 29 3b 76 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 76 2e 61 64 64 28 22 72 65 66 72 22 2c 73 29 3b 72 65 74 75 72 6e 20 69 28 76 2c 72 2c 71 29 7d 2c 74 72 61 63 6b 50 61 67 65 50 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 74 2c 78 2c 79 2c 75 2c 72 2c 7a 2c 71 2c 76 29 7b 76 61 72 20 77 3d 67 2e 70 61 79 6c 6f 61 64 42 75 69 6c 64 65 72 28 6a 29 3b 77 2e 61 64 64 28 22 65 22 2c 22 70 70 22 29 3b 77 2e 61 64 64 28 22 75 72 6c 22 2c 73 29 3b 77 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 77 2e 61 64 64 28 22 72 65 66 72 22 2c 78 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 69 78 22 2c 79 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 61 78 22 2c 75 29 3b 77 2e 61 64 64 Data Ascii: j);v.add("e","pv");v.add("url",u);v.add("page",t);v.add("refr",s);return i(v,r,q)},trackPagePing:function(s,t,x,y,u,r,z,q,v){var w=g.payloadBuilder(j);w.add("e","pp");w.add("url",s);w.add("page",t);w.add("refr",x);w.add("pp_mix",y);w.add("pp_max",u);w.add
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 6a 3d 6e 2e 6c 65 6e 67 74 68 2d 31 3b 77 68 69 6c 65 28 6a 3e 3d 30 29 7b 76 61 72 20 6f 3d 6e 2e 73 6c 69 63 65 28 6a 2c 6e 2e 6c 65 6e 67 74 68 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 66 2e 63 6f 6f 6b 69 65 28 72 2c 70 2c 30 2c 22 2f 22 2c 6f 29 3b 69 66 28 66 2e 63 6f 6f 6b 69 65 28 72 29 3d 3d 3d 70 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 72 2c 6f 29 3b 76 61 72 20 71 3d 64 2e 67 65 74 43 6f 6f 6b 69 65 73 57 69 74 68 50 72 65 66 69 78 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 71 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 71 5b 6d 5d 2c 6f 29 7d 72 65 74 75 72 6e 20 6f 7d 6a 2d 3d 31 7d 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 Data Ascii: stname.split(".");var j=n.length-1;while(j>=0){var o=n.slice(j,n.length).join(".");f.cookie(r,p,0,"/",o);if(f.cookie(r)===p){d.deleteCookie(r,o);var q=d.getCookiesWithPrefix(l);for(var m=0;m<q.length;m++){d.deleteCookie(q[m],o)}return o}j-=1}return window
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 3d 6f 3b 41 2e 66 69 6c 74 65 72 3d 44 3b 41 2e 66 6f 72 45 61 63 68 3d 61 78 3b 41 2e 66 6f 72 49 6e 3d 61 69 3b 0a 09 41 2e 66 6f 72 4f 77 6e 3d 59 3b 41 2e 6b 65 79 73 3d 4a 3b 41 2e 6d 61 70 3d 78 3b 41 2e 6d 61 70 56 61 6c 75 65 73 3d 61 68 3b 41 2e 70 72 6f 70 65 72 74 79 3d 61 71 3b 41 2e 63 6f 6c 6c 65 63 74 3d 78 3b 41 2e 65 61 63 68 3d 61 78 3b 41 2e 65 78 74 65 6e 64 3d 61 43 3b 41 2e 73 65 6c 65 63 74 3d 44 3b 41 2e 63 6c 6f 6e 65 3d 42 3b 41 2e 66 69 6e 64 3d 61 52 3b 41 2e 69 64 65 6e 74 69 74 79 3d 54 3b 41 2e 69 73 41 72 67 75 6d 65 6e 74 73 3d 67 3b 41 2e 69 73 41 72 72 61 79 3d 66 3b 41 2e 69 73 44 61 74 65 3d 6d 3b 41 2e 69 73 45 6d 70 74 79 3d 70 3b 41 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 61 41 3b 41 2e 69 73 4e 75 6c 6c 3d 61 51 3b 41 Data Ascii: =o;A.filter=D;A.forEach=ax;A.forIn=ai;A.forOwn=Y;A.keys=J;A.map=x;A.mapValues=ah;A.property=aq;A.collect=x;A.each=ax;A.extend=aC;A.select=D;A.clone=B;A.find=aR;A.identity=T;A.isArguments=g;A.isArray=f;A.isDate=m;A.isEmpty=p;A.isFunction=aA;A.isNull=aQ;A
2024-10-14 12:19:49 UTC	9470	IN	Data Raw: 74 22 5d 3d 62 75 2e 69 73 42 6f 74 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 50 72 6f 78 69 65 64 22 5d 3d 62 75 2e 69 73 50 72 6f 78 69 65 64 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 54 6f 72 22 5d 3d 62 75 2e 69 73 54 6f 72 3b 76 61 72 20 62 71 3d 62 75 2e 66 69 6e 67 65 72 70 72 69 6e 74 7c 7c 7b 7d 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 49 6e 63 6f 67 6e 69 74 6f 22 5d 3d 62 71 2e 62 72 6f 77 73 65 72 48 61 73 49 6e 63 6f 67 6e 69 74 6f 45 6e 61 62 6c 65 64 3b 72 65 74 75 72 6e 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 69 6f 2e 61 75 67 75 72 2e 73 6e 6f 77 70 6c 6f 77 2f 69 64 65 6e 74 69 74 79 5f 6c 69 74 65 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 62 73 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 68 28 29 7b 69 66 28 Data Ascii: t"]=bu.isBot;bs.device["isProxied"]=bu.isProxied;bs.device["isTor"]=bu.isTor;var bq=bu.fingerprint\|\|{};bs.device["isIncognito"]=bq.browserHasIncognitoEnabled;return{schema:"iglu:io.augur.snowplow/identity_lite/jsonschema/1-0-0",data:bs}}}function bh(){if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.11	49758	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:49 UTC	584	OUT	GET /files/theme/jquery.revealer.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:49 UTC	849	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d2785193852424d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"c22ab67199a33d876512504cda4ff55b" Last-Modified: Sun, 21 Apr 2024 12:39:24 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: gK2b5P1U8Yt3WHLQSfQZP0Z56tIco/uCZX3xjupIXymRATNVMm2CfS1cMX0eV71Ch6CHqGXJOHM= x-amz-replication-status: COMPLETED x-amz-request-id: QX0C0QWX6B0KMQ42 x-amz-server-side-encryption: AES256 x-amz-version-id: VWhv4xSgduiSxPjjUnPvdmzftJykBxY7 X-Storage-Bucket: zc4cd X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311 Server: cloudflare
2024-10-14 12:19:49 UTC	520	IN	Data Raw: 62 30 63 0d 0a 2f 2a 21 0a 20 2a 20 52 65 76 65 61 6c 65 72 20 32 2e 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2c 20 50 69 78 65 6c 20 55 6e 69 6f 6e 20 2d 20 68 74 74 70 3a 2f 2f 70 69 78 65 6c 75 6e 69 6f 6e 2e 6e 65 74 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 2f 2f 20 63 68 65 63 6b 20 66 6f 72 20 74 72 65 6e 64 20 65 76 65 6e 74 20 28 6d 61 6b 65 20 73 75 72 65 20 6a 71 75 65 72 79 2e 74 72 65 6e 64 20 69 73 20 69 6e 63 6c 75 64 65 64 29 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 24 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 74 72 65 6e 64 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 20 20 20 Data Ascii: b0c/! Revealer 2.0.0 * * Copyright 2015, Pixel Union - http://pixelunion.net * Released under the MIT license */(function($){ // check for trend event (make sure jquery.trend is included) if (typeof $.event.special.trend !== "object") {
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 20 20 20 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 20 7b 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 6e 2c 20 31 30 30 30 2f 36 30 29 3b 20 7d 0a 0a 0a 20 20 2f 2f 20 50 75 62 6c 69 63 20 41 50 49 0a 20 20 76 61 72 20 6d 65 74 68 6f 64 73 20 3d 20 7b 0a 20 20 20 20 69 73 56 69 73 69 62 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 65 6c 2e 64 61 74 61 28 22 72 65 76 65 61 6c 65 72 2d 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 73 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 20 66 6f 72 63 65 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 43 68 65 63 6b 20 73 74 61 74 65 0a 20 20 20 20 20 20 69 66 20 28 6d 65 74 68 6f 64 73 2e 69 73 56 69 73 69 62 6c 65 28 65 6c 29 Data Ascii: function(fn) { window.setTimeout(fn, 1000/60); } // Public API var methods = { isVisible: function(el) { return !!el.data("revealer-visible"); }, show: function(el, force) { // Check state if (methods.isVisible(el)
2024-10-14 12:19:49 UTC	946	IN	Data Raw: 73 28 22 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 68 69 64 65 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 65 6c 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 69 6e 67 20 61 6e 69 6d 61 74 69 6e 67 2d 6f 75 74 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 61 6e 69 6d 61 74 69 6e 67 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 65 6c 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 69 73 69 62 6c 65 22 29 3b 0a 0a 20 20 20 20 Data Ascii: s("visible"); el.trigger("revealer-hide"); return; } raf(function(){ el.addClass("animating animating-out"); el.trigger("revealer-animating"); raf(function(){ el.removeClass("visible");
2024-10-14 12:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.11	49759	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:49 UTC	577	OUT	GET /files/theme/custom-1.js?1720786820 HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:49 UTC	939	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8d2785193dbc8cbd-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"214dde43cebf15418cdcc76f9677ee46" Last-Modified: Mon, 22 Apr 2024 23:24:18 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: 3IvqL4nGlU02HYPqHl6yQs3XLiv8ASNP3CRKKbQjX1cenjg0v80CcJ+FiUMEdrcOCrqYuMLZBZQzOt9LuuMpXg== x-amz-meta-btime: 2021-10-26T13:57:32.896Z x-amz-meta-mtime: 1635256652.896 x-amz-replication-status: COMPLETED x-amz-request-id: KYXWDGD6YYJPQX4C x-amz-server-side-encryption: AES256 x-amz-version-id: B9J1OqsSfx.0.VWPcb4gc1kD9Rq3dd1i X-Storage-Bucket: zcfbf X-Storage-Object: cfbf67a85c039719090cff2c4718de99203b1ced78cfb8fae5f7240d2f1570b7 Server: cloudflare
2024-10-14 12:19:49 UTC	430	IN	Data Raw: 32 62 35 31 0d 0a 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 20 20 2f 2f 20 4d 6f 62 69 6c 65 20 73 69 64 65 62 61 72 73 0a 20 20 24 2e 66 6e 2e 65 78 70 61 6e 64 61 62 6c 65 53 69 64 65 62 61 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 76 61 72 20 24 6d 65 20 3d 20 74 68 69 73 3b 0a 0a 20 20 20 20 24 6d 65 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 28 21 24 6d 65 2e 68 61 73 43 6c 61 73 73 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 24 6d 65 2e 61 64 64 43 6c 61 73 73 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 Data Ascii: 2b51jQuery(function($) { // Mobile sidebars $.fn.expandableSidebar = function(expandedClass) { var $me = this; $me.on('click', function() { if(!$me.hasClass(expandedClass)) { $me.addClass(expandedClass); } else {
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 70 65 72 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 69 66 20 28 63 6f 75 6e 74 65 72 20 3e 3d 20 6c 69 6d 69 74 20 7c 7c 20 24 2e 66 6e 2e 63 68 65 63 6b 49 66 45 6c 65 6d 65 6e 74 45 78 69 73 74 73 28 63 6f 6e 64 69 74 69 6f 6e 29 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6c 6f 6f 70 65 72 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 65 72 2b 2b 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 20 64 75 72 61 74 69 6f 6e 29 3b 0a 0a 20 20 20 20 69 66 20 28 21 63 6f 6e 64 69 74 69 6f 6e 29 20 61 63 74 69 6f 6e 28 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 43 68 65 63 6b Data Ascii: per = setInterval(function(){ if (counter >= limit \|\| $.fn.checkIfElementExists(condition)) { clearInterval(looper); } else { action(); counter++; } }, duration); if (!condition) action(); } // Check
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 6e 74 53 63 72 6f 6c 6c 54 6f 70 20 3d 20 24 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 72 65 74 75 72 6e 20 69 66 20 73 63 72 6f 6c 6c 20 68 61 73 6e 27 74 20 6d 65 74 20 64 65 6c 74 61 20 74 68 72 65 73 68 6f 6c 64 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4d 61 74 68 2e 61 62 73 28 70 72 65 76 69 6f 75 73 53 63 72 6f 6c 6c 54 6f 70 20 2d 20 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c 54 6f 70 29 20 3c 3d 20 64 65 6c 74 61 54 68 72 65 73 68 6f 6c 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 64 69 72 65 63 74 69 6f 6e 20 63 6f 6e 64 69 74 69 6f 6e 73 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 Data Ascii: ntScrollTop = $(this).scrollTop(); //return if scroll hasn't met delta threshold if (Math.abs(previousScrollTop - currentScrollTop) <= deltaThreshold) { return; } //direction conditions if (c
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 2f 2f 20 57 61 69 74 20 66 6f 72 20 72 65 64 72 61 77 20 74 6f 20 68 61 70 70 65 6e 20 61 66 74 65 72 20 61 70 70 65 6e 64 69 6e 67 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 64 65 74 65 63 74 48 65 61 64 65 72 57 72 61 70 28 29 3b 0a 20 20 20 20 20 20 68 65 61 64 65 72 48 65 69 67 68 74 20 3d 20 24 68 65 61 64 65 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 24 62 6f 64 79 2e 68 61 73 43 6c 61 73 73 28 27 68 65 61 64 65 72 2d 73 74 69 63 6b 79 2d 75 70 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 62 61 73 65 2e 5f 75 74 69 6c 73 2e 6f 6e 53 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 28 7b 0a 20 20 20 20 20 20 20 20 20 20 64 6f 77 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c 54 6f Data Ascii: // Wait for redraw to happen after appending base._detectHeaderWrap(); headerHeight = $header.outerHeight(); if ($body.hasClass('header-sticky-up')) { base._utils.onScrollDirection({ down: function(currentScrollTo
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 75 74 69 6c 73 2d 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 72 74 54 65 78 74 20 3d 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 68 74 6d 6c 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 22 27 28 29 5d 2f 67 2c 22 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 68 74 6d 6c 28 63 61 72 74 54 65 78 74 29 2e 61 64 64 43 6c 61 73 73 28 22 74 6f 67 67 6c 65 2d 63 75 73 74 6f 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 Data Ascii: ).removeClass('utils-hidden'); } if ($('#wsite-nav-cart-a').length) { var cartText = $('#wsite-nav-cart-a').html().replace(/["'()]/g,""); $('#wsite-nav-cart-a').html(cartText).addClass("toggle-custom"); }
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 6d 6f 76 65 28 29 3b 0a 20 20 20 20 20 20 7d 2c 20 7b 20 73 75 62 74 72 65 65 3a 20 74 72 75 65 20 7d 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 5f 6e 61 76 53 65 74 75 70 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 62 61 73 65 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 76 61 72 20 24 73 75 62 6d 65 6e 75 43 6f 6e 74 61 69 6e 65 72 20 3d 20 24 28 27 2e 6e 61 76 20 2e 68 61 73 2d 73 75 62 6d 65 6e 75 27 29 3b 0a 20 20 20 20 20 20 76 61 72 20 64 72 6f 70 64 6f 77 6e 43 6c 61 73 73 20 3d 20 27 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 6e 27 3b 0a 20 20 20 20 20 20 76 61 72 20 24 64 65 73 6b 74 6f 70 4e 61 76 20 3d 20 24 28 27 2e 64 65 73 6b 74 6f 70 2d 6e 61 76 20 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 27 29 3b Data Ascii: move(); }, { subtree: true }); }, _navSetup: function() { var base = this; var $submenuContainer = $('.nav .has-submenu'); var dropdownClass = 'dropdown-open'; var $desktopNav = $('.desktop-nav .wsite-menu-default');
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 70 78 75 4d 65 6e 75 27 29 2e 75 70 64 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 69 6e 64 4e 61 76 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 2c 20 35 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 69 6e 64 4e 61 76 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 2f 2f 20 55 6e 62 69 6e 64 20 2f 20 62 69 6e 64 20 61 66 74 65 72 20 64 65 66 61 75 6c 74 73 20 68 61 76 65 20 72 75 6e 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 6f 62 73 65 72 76 65 44 6f 6d 28 24 28 27 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 27 29 5b 30 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 62 69 6e 64 4e 61 76 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 Data Ascii: pxuMenu').update(); bindNavEvents(); } }, 500, 5); } bindNavEvents(); // Unbind / bind after defaults have run base._observeDom($('.wsite-menu-default')[0], function() { bindNavEvents();
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 20 20 7d 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 5f 63 6c 6f 73 65 41 6c 6c 44 72 6f 70 64 6f 77 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 24 28 27 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 27 29 0a 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 27 2e 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 6e 27 29 0a 20 20 20 20 20 20 20 20 2e 68 69 64 65 44 72 6f 70 64 6f 77 6e 73 28 27 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 6e 27 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 5f 73 65 61 72 63 68 42 6f 78 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 62 61 73 65 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 76 61 72 20 73 65 61 72 63 68 42 6f 78 20 3d 20 27 2e 77 73 69 74 65 2d 73 65 61 72 63 68 27 3b 20 2f 2f 20 4e 6f 74 Data Ascii: }); }, _closeAllDropdowns: function() { $('.edison-header') .find('.dropdown-open') .hideDropdowns('dropdown-open'); }, _searchBox: function() { var base = this; var searchBox = '.wsite-search'; // Not
2024-10-14 12:19:49 UTC	1084	IN	Data Raw: 64 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 33 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 62 61 73 65 2e 5f 75 74 69 6c 73 2e 6f 6e 45 73 63 4b 65 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 28 73 65 61 72 63 68 42 6f 78 29 2e 72 65 76 65 61 6c 65 72 28 27 69 73 56 69 73 69 62 6c 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 73 65 61 72 63 68 42 6f 78 29 2e 72 65 76 65 61 6c 65 72 28 27 68 69 64 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 73 65 61 72 63 68 54 6f 67 67 6c 65 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b Data Ascii: de'); }, 300); }); base._utils.onEscKey(function() { if ($(searchBox).revealer('isVisible')) { $(searchBox).revealer('hide'); } }); $searchToggle.on('click', function(event) {
2024-10-14 12:19:49 UTC	1369	IN	Data Raw: 31 32 31 36 0d 0a 72 72 6f 77 2d 74 6f 70 27 29 0a 20 20 20 20 20 20 20 20 20 20 2e 72 65 6d 6f 76 65 41 74 74 72 28 27 73 74 79 6c 65 27 29 0a 20 20 20 20 20 20 20 20 20 20 2e 70 72 65 70 65 6e 64 28 24 28 27 2e 6d 69 6e 69 2d 63 61 72 74 2d 68 65 61 64 65 72 27 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 2e 6d 69 6e 69 2d 63 61 72 74 2d 74 6f 67 67 6c 65 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 68 61 73 2d 6d 69 6e 69 2d 63 61 72 74 27 2c 20 21 21 24 28 27 2e 6d 69 6e 69 2d 63 61 72 74 2d 74 6f 67 67 6c 65 27 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 6c 65 6e 67 74 68 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 55 70 64 61 74 65 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 65 6e 75 20 73 69 6e 63 65 20 73 69 74 65 2d 75 74 69 6c 73 20 64 69 6d 65 73 Data Ascii: 1216rrow-top') .removeAttr('style') .prepend($('.mini-cart-header')); $('.mini-cart-toggle').toggleClass('has-mini-cart', !!$('.mini-cart-toggle').children().length); // Update responsive menu since site-utils dimes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.11	49761	151.101.129.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:49 UTC	402	OUT	GET /js/site/main-customer-accounts-site.js?buildTime=1720803349 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:49 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 534233 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 10 Oct 2024 19:22:18 GMT ETag: "6708296a-826d9" Expires: Mon, 28 Oct 2024 01:37:46 GMT Cache-Control: max-age=1209600 X-Host: grn107.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:49 GMT Age: 38523 X-Served-By: cache-sjc10060-SJC, cache-ewr-kewr1740054-EWR X-Cache: HIT, HIT X-Cache-Hits: 3, 1 X-Timer: S1728908389.309652,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 66 61 6c 73 65 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 69 2e 6c 6f 61 64 65 64 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 22 3b 6e 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 77 69 6e 64 6f 77 2e 41 53 53 45 54 53 5f 42 41 53 45 Data Ascii: (function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:false};e[r].call(i.exports,i,i.exports,n);i.loaded=true;return i.exports}n.m=e;n.c=t;n.p="https://cdn2.editmysite.com/js/";n.p="https://"+window.ASSETS_BASE
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 2f 6a 73 6f 6e 22 3b 6f 2e 64 61 74 61 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 2e 61 74 74 72 73 7c 7c 72 2e 74 6f 4a 53 4f 4e 28 69 29 29 7d 69 66 28 69 2e 65 6d 75 6c 61 74 65 4a 53 4f 4e 29 7b 6f 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 3b 6f 2e 64 61 74 61 3d 6f 2e 64 61 74 61 3f 7b 6d 6f 64 65 6c 3a 6f 2e 64 61 74 61 7d 3a 7b 7d 7d 69 66 28 69 2e 65 6d 75 6c 61 74 65 48 54 54 50 26 26 28 61 3d 3d 3d 22 50 55 54 22 7c 7c 61 3d 3d 3d 22 44 45 4c 45 54 45 22 7c 7c 61 3d 3d 3d 22 50 41 54 43 48 22 29 29 7b 6f 2e 74 79 70 65 3d 22 50 4f 53 54 22 3b 69 66 28 69 2e 65 6d 75 6c 61 74 65 4a 53 4f 4e 29 6f 2e 64 61 74 61 2e 5f 6d 65 74 68 6f 64 3d Data Ascii: /json";o.data=JSON.stringify(i.attrs\|\|r.toJSON(i))}if(i.emulateJSON){o.contentType="application/x-www-form-urlencoded";o.data=o.data?{model:o.data}:{}}if(i.emulateHTTP&&(a==="PUT"\|\|a==="DELETE"\|\|a==="PATCH")){o.type="POST";if(i.emulateJSON)o.data._method=
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 65 41 63 74 69 6f 6e 28 22 63 68 65 63 6b 6f 75 74 22 2c 7b 73 69 74 65 5f 6f 72 64 65 72 5f 69 64 3a 6e 2e 67 65 74 28 22 73 69 74 65 5f 6f 72 64 65 72 5f 69 64 22 29 2c 73 6f 75 72 63 65 5f 73 69 74 65 5f 69 64 3a 6e 2e 67 65 74 28 22 73 6f 75 72 63 65 5f 73 69 74 65 5f 69 64 22 29 2c 72 65 76 65 6e 75 65 3a 6e 2e 67 65 74 28 22 6f 72 64 65 72 5f 74 6f 74 61 6c 22 29 2c 74 61 78 3a 6e 2e 67 65 74 28 22 6f 72 64 65 72 5f 74 61 78 5f 74 6f 74 61 6c 22 29 2c 73 68 69 70 70 69 6e 67 3a 6e 2e 67 65 74 28 22 6f 72 64 65 72 5f 73 68 69 70 70 69 6e 67 5f 74 6f 74 61 6c 22 29 2c 61 66 66 69 6c 69 61 74 69 6f 6e 3a 22 73 70 69 2e 63 68 65 63 6b 6f 75 74 22 2c 73 74 65 70 3a 65 2c 6c 69 73 74 3a 74 2c 70 61 79 6d 65 6e 74 5f 74 6f 6b 65 6e 3a 6e 2e 67 65 74 28 22 Data Ascii: eAction("checkout",{site_order_id:n.get("site_order_id"),source_site_id:n.get("source_site_id"),revenue:n.get("order_total"),tax:n.get("order_tax_total"),shipping:n.get("order_shipping_total"),affiliation:"spi.checkout",step:e,list:t,payment_token:n.get("
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 3d 30 2c 6f 3d 78 28 65 29 3b 77 68 69 6c 65 28 61 3c 6f 29 7b 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 61 2b 6f 29 2f 32 29 3b 69 66 28 6e 28 65 5b 73 5d 29 3c 69 29 61 3d 73 2b 31 3b 65 6c 73 65 20 6f 3d 73 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 69 2c 61 29 7b 76 61 72 20 6f 3d 30 2c 73 3d 78 28 72 29 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 69 66 28 65 3e 30 29 7b 6f 3d 61 3e 3d 30 3f 61 3a 4d 61 74 68 2e 6d 61 78 28 61 2b 73 2c 6f 29 7d 65 6c 73 65 7b 73 3d 61 3e 3d 30 3f 4d 61 74 68 2e 6d 69 6e 28 61 2b 31 2c 73 29 3a 61 2b 73 2b 31 7d 7d 65 6c 73 65 20 69 66 28 6e 26 26 61 26 26 73 29 7b 61 3d 6e 28 72 2c Data Ascii: =0,o=x(e);while(a<o){var s=Math.floor((a+o)/2);if(n(e[s])<i)a=s+1;else o=s}return a};function I(e,t,n){return function(r,i,a){var o=0,s=x(r);if(typeof a=="number"){if(e>0){o=a>=0?a:Math.max(a+s,o)}else{s=a>=0?Math.min(a+1,s):a+s+1}}else if(n&&a&&s){a=n(r,
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 3d 74 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 69 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 69 3d 74 2e 5f 69 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 66 3d 74 2e 5f 66 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 6c 3d 74 2e 5f 6c 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 73 74 72 69 63 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 73 74 72 69 63 74 3d 74 2e 5f 73 74 72 69 63 74 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 74 7a 6d 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 Data Ascii: ndefined"){e._isAMomentObject=t._isAMomentObject}if(typeof t._i!=="undefined"){e._i=t._i}if(typeof t._f!=="undefined"){e._f=t._f}if(typeof t._l!=="undefined"){e._l=t._l}if(typeof t._strict!=="undefined"){e._strict=t._strict}if(typeof t._tzm!=="undefined")
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 65 28 65 29 7d 3b 6e 2e 69 6e 76 61 6c 69 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 75 74 63 28 4e 61 4e 29 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 7b 6c 65 28 74 2e 5f 70 66 2c 65 29 7d 65 6c 73 65 7b 74 2e 5f 70 66 2e 75 73 65 72 49 6e 76 61 6c 69 64 61 74 65 64 3d 74 72 75 65 7d 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 70 61 72 73 65 5a 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 2e 70 61 72 73 65 5a 6f 6e 65 28 29 7d 3b 6e 2e 70 61 72 73 65 54 77 6f 44 69 67 69 74 59 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 78 65 28 65 29 2b 28 78 65 28 65 29 3e 36 38 3f 31 39 Data Ascii: function(e){return Ae(e)};n.invalid=function(e){var t=n.utc(NaN);if(e!=null){le(t._pf,e)}else{t._pf.userInvalidated=true}return t};n.parseZone=function(){return n.apply(null,arguments).parseZone()};n.parseTwoDigitYear=function(e){return xe(e)+(xe(e)>68?19
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 6e 65 64 29 7d 2c 69 6e 63 6c 75 64 65 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 61 65 28 4d 65 28 74 68 69 73 29 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 75 6e 64 65 66 69 6e 65 64 29 7d 2c 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 64 65 2e 61 70 70 6c 79 28 4d 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6c 61 73 74 49 6e 64 65 78 4f 66 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 66 65 2e 61 70 70 6c 79 28 4d 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 45 65 28 4d 65 28 74 68 69 73 29 2c 74 2c 61 72 67 Data Ascii: ned)},includes:function e(t){return ae(Me(this),t,arguments.length>1?arguments[1]:undefined)},join:function e(t){return de.apply(Me(this),arguments)},lastIndexOf:function e(t){return fe.apply(Me(this),arguments)},map:function e(t){return Ee(Me(this),t,arg
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 75 28 65 29 7b 69 66 28 69 3d 3d 3d 63 6c 65 61 72 54 69 6d 65 6f 75 74 29 7b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 69 66 28 28 69 3d 3d 3d 6f 7c 7c 21 69 29 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 29 7b 69 3d 63 6c 65 61 72 54 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 69 28 65 29 7d 63 61 74 63 68 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 7d 76 61 72 20 63 3d 5b 5d 3b 76 61 72 20 66 3d 66 61 6c 73 65 3b 76 61 72 20 6c 3b 76 61 72 20 76 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 64 28 Data Ascii: nction u(e){if(i===clearTimeout){return clearTimeout(e)}if((i===o\|\|!i)&&clearTimeout){i=clearTimeout;return clearTimeout(e)}try{return i(e)}catch(t){try{return i.call(null,e)}catch(t){return i.call(this,e)}}}var c=[];var f=false;var l;var v=-1;function d(
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 74 68 69 73 2c 74 29 3b 76 61 72 20 72 3d 6f 28 6e 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 75 6e 64 65 66 69 6e 65 64 2c 33 29 3b 76 61 72 20 69 3b 77 68 69 6c 65 28 69 3d 69 3f 69 2e 6e 3a 74 68 69 73 2e 5f 66 29 7b 72 28 69 2e 76 2c 69 2e 6b 2c 74 68 69 73 29 3b 77 68 69 6c 65 28 69 26 26 69 2e 72 29 69 3d 69 2e 70 7d 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 21 21 67 28 70 28 74 68 69 73 2c 74 29 2c 6e 29 7d 7d 29 3b 69 66 28 76 29 72 28 66 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 69 7a 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 28 74 68 69 73 2c 74 29 5b 68 5d 7d 7d 29 3b 72 65 74 75 72 6e 20 66 7d 2c 64 65 66 3a 66 75 6e Data Ascii: this,t);var r=o(n,arguments.length>1?arguments[1]:undefined,3);var i;while(i=i?i.n:this._f){r(i.v,i.k,this);while(i&&i.r)i=i.p}},has:function e(n){return!!g(p(this,t),n)}});if(v)r(f.prototype,"size",{get:function(){return p(this,t)[h]}});return f},def:fun
2024-10-14 12:19:49 UTC	16384	IN	Data Raw: 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 2b 2b 72 3c 69 29 7b 69 66 28 6e 28 74 2c 65 5b 72 5d 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 43 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 2c 72 3d 65 3d 3d 6e 75 6c 6c 3f 30 3a 65 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 72 29 3b 77 68 69 6c 65 28 2b 2b 6e 3c 72 29 7b 69 5b 6e 5d 3d 74 28 65 5b 6e 5d 2c 6e 2c 65 29 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 6b 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 2c 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 2b 2b 6e 3c 72 29 7b 65 5b 69 2b 6e 5d 3d 74 5b 6e 5d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4d 6e 28 65 2c Data Ascii: e.length;while(++r<i){if(n(t,e[r])){return true}}return false}function Cn(e,t){var n=-1,r=e==null?0:e.length,i=Array(r);while(++n<r){i[n]=t(e[n],n,e)}return i}function kn(e,t){var n=-1,r=t.length,i=e.length;while(++n<r){e[i+n]=t[n]}return e}function Mn(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.11	49763	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:49 UTC	1003	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive Content-Length: 83 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://att-mail-987654.weebly.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q
2024-10-14 12:19:49 UTC	83	OUT	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
2024-10-14 12:19:49 UTC	304	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:49 GMT Content-Type: application/json Content-Length: 348 Connection: close CF-Ray: 8d2785198c29de95-EWR CF-Cache-Status: DYNAMIC Vary: X-W-SSL,User-Agent X-Host: grn153.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2024-10-14 12:19:49 UTC	348	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","messag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.11	49760	142.250.186.68	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:49 UTC	649	OUT	GET /recaptcha/api.js?_=1728908387555 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:49 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 14 Oct 2024 12:19:49 GMT Date: Mon, 14 Oct 2024 12:19:49 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 12:19:49 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-14 12:19:49 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-10-14 12:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.11	49764	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-14 12:19:50 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=102287 Date: Mon, 14 Oct 2024 12:19:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-14 12:19:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.11	49768	151.101.129.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:50 UTC	365	OUT	GET /js/wsnbn/snowday262.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:50 UTC	663	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75006 Server: nginx Content-Type: application/javascript Last-Modified: Tue, 08 Oct 2024 22:23:53 GMT ETag: "6705b0f9-124fe" Expires: Wed, 23 Oct 2024 09:43:21 GMT Cache-Control: max-age=1209600 X-Host: grn93.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:19:50 GMT Age: 441388 X-Served-By: cache-sjc10061-SJC, cache-nyc-kteb1890051-NYC X-Cache: HIT, HIT X-Cache-Hits: 110, 1 X-Timer: S1728908390.397823,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-14 12:19:50 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 67 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 2c 6a 29 7b 69 66 28 21 67 5b 6e 5d 29 7b 69 66 28 21 62 5b 6e 5d 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 6a 26 26 69 29 7b 72 65 74 75 72 6e 20 69 28 6e 2c 21 30 29 7d 69 66 28 61 29 7b 72 65 74 75 72 6e 20 61 28 6e 2c 21 30 29 7d 76 61 72 20 6d 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6e 2b 22 27 22 29 3b 74 68 72 6f 77 20 6d 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6d 7d 76 61 72 20 68 3d 67 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 62 5b 6e 5d 5b 30 5d 2e Data Ascii: (function e(b,g,d){function c(n,j){if(!g[n]){if(!b[n]){var i=typeof require=="function"&&require;if(!j&&i){return i(n,!0)}if(a){return a(n,!0)}var m=new Error("Cannot find module '"+n+"'");throw m.code="MODULE_NOT_FOUND",m}var h=g[n]={exports:{}};b[n][0].
2024-10-14 12:19:50 UTC	16384	IN	Data Raw: 6a 29 3b 76 2e 61 64 64 28 22 65 22 2c 22 70 76 22 29 3b 76 2e 61 64 64 28 22 75 72 6c 22 2c 75 29 3b 76 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 76 2e 61 64 64 28 22 72 65 66 72 22 2c 73 29 3b 72 65 74 75 72 6e 20 69 28 76 2c 72 2c 71 29 7d 2c 74 72 61 63 6b 50 61 67 65 50 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 74 2c 78 2c 79 2c 75 2c 72 2c 7a 2c 71 2c 76 29 7b 76 61 72 20 77 3d 67 2e 70 61 79 6c 6f 61 64 42 75 69 6c 64 65 72 28 6a 29 3b 77 2e 61 64 64 28 22 65 22 2c 22 70 70 22 29 3b 77 2e 61 64 64 28 22 75 72 6c 22 2c 73 29 3b 77 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 77 2e 61 64 64 28 22 72 65 66 72 22 2c 78 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 69 78 22 2c 79 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 61 78 22 2c 75 29 3b 77 2e 61 64 64 Data Ascii: j);v.add("e","pv");v.add("url",u);v.add("page",t);v.add("refr",s);return i(v,r,q)},trackPagePing:function(s,t,x,y,u,r,z,q,v){var w=g.payloadBuilder(j);w.add("e","pp");w.add("url",s);w.add("page",t);w.add("refr",x);w.add("pp_mix",y);w.add("pp_max",u);w.add
2024-10-14 12:19:50 UTC	16384	IN	Data Raw: 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 6a 3d 6e 2e 6c 65 6e 67 74 68 2d 31 3b 77 68 69 6c 65 28 6a 3e 3d 30 29 7b 76 61 72 20 6f 3d 6e 2e 73 6c 69 63 65 28 6a 2c 6e 2e 6c 65 6e 67 74 68 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 66 2e 63 6f 6f 6b 69 65 28 72 2c 70 2c 30 2c 22 2f 22 2c 6f 29 3b 69 66 28 66 2e 63 6f 6f 6b 69 65 28 72 29 3d 3d 3d 70 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 72 2c 6f 29 3b 76 61 72 20 71 3d 64 2e 67 65 74 43 6f 6f 6b 69 65 73 57 69 74 68 50 72 65 66 69 78 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 71 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 71 5b 6d 5d 2c 6f 29 7d 72 65 74 75 72 6e 20 6f 7d 6a 2d 3d 31 7d 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 Data Ascii: stname.split(".");var j=n.length-1;while(j>=0){var o=n.slice(j,n.length).join(".");f.cookie(r,p,0,"/",o);if(f.cookie(r)===p){d.deleteCookie(r,o);var q=d.getCookiesWithPrefix(l);for(var m=0;m<q.length;m++){d.deleteCookie(q[m],o)}return o}j-=1}return window
2024-10-14 12:19:50 UTC	16384	IN	Data Raw: 3d 6f 3b 41 2e 66 69 6c 74 65 72 3d 44 3b 41 2e 66 6f 72 45 61 63 68 3d 61 78 3b 41 2e 66 6f 72 49 6e 3d 61 69 3b 0a 09 41 2e 66 6f 72 4f 77 6e 3d 59 3b 41 2e 6b 65 79 73 3d 4a 3b 41 2e 6d 61 70 3d 78 3b 41 2e 6d 61 70 56 61 6c 75 65 73 3d 61 68 3b 41 2e 70 72 6f 70 65 72 74 79 3d 61 71 3b 41 2e 63 6f 6c 6c 65 63 74 3d 78 3b 41 2e 65 61 63 68 3d 61 78 3b 41 2e 65 78 74 65 6e 64 3d 61 43 3b 41 2e 73 65 6c 65 63 74 3d 44 3b 41 2e 63 6c 6f 6e 65 3d 42 3b 41 2e 66 69 6e 64 3d 61 52 3b 41 2e 69 64 65 6e 74 69 74 79 3d 54 3b 41 2e 69 73 41 72 67 75 6d 65 6e 74 73 3d 67 3b 41 2e 69 73 41 72 72 61 79 3d 66 3b 41 2e 69 73 44 61 74 65 3d 6d 3b 41 2e 69 73 45 6d 70 74 79 3d 70 3b 41 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 61 41 3b 41 2e 69 73 4e 75 6c 6c 3d 61 51 3b 41 Data Ascii: =o;A.filter=D;A.forEach=ax;A.forIn=ai;A.forOwn=Y;A.keys=J;A.map=x;A.mapValues=ah;A.property=aq;A.collect=x;A.each=ax;A.extend=aC;A.select=D;A.clone=B;A.find=aR;A.identity=T;A.isArguments=g;A.isArray=f;A.isDate=m;A.isEmpty=p;A.isFunction=aA;A.isNull=aQ;A
2024-10-14 12:19:50 UTC	9470	IN	Data Raw: 74 22 5d 3d 62 75 2e 69 73 42 6f 74 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 50 72 6f 78 69 65 64 22 5d 3d 62 75 2e 69 73 50 72 6f 78 69 65 64 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 54 6f 72 22 5d 3d 62 75 2e 69 73 54 6f 72 3b 76 61 72 20 62 71 3d 62 75 2e 66 69 6e 67 65 72 70 72 69 6e 74 7c 7c 7b 7d 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 49 6e 63 6f 67 6e 69 74 6f 22 5d 3d 62 71 2e 62 72 6f 77 73 65 72 48 61 73 49 6e 63 6f 67 6e 69 74 6f 45 6e 61 62 6c 65 64 3b 72 65 74 75 72 6e 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 69 6f 2e 61 75 67 75 72 2e 73 6e 6f 77 70 6c 6f 77 2f 69 64 65 6e 74 69 74 79 5f 6c 69 74 65 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 62 73 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 68 28 29 7b 69 66 28 Data Ascii: t"]=bu.isBot;bs.device["isProxied"]=bu.isProxied;bs.device["isTor"]=bu.isTor;var bq=bu.fingerprint\|\|{};bs.device["isIncognito"]=bq.browserHasIncognitoEnabled;return{schema:"iglu:io.augur.snowplow/identity_lite/jsonschema/1-0-0",data:bs}}}function bh(){if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.11	49769	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:50 UTC	773	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q; _snow_ses.30ea=*; _snow_id.30ea=c5c9a589-7ef4-4fa1-97a0-79e59709a466.1728908388.1.1728908388.1728908388.5ab037ce-74d8-42dc-a0e5-63a37bb7ecbb
2024-10-14 12:19:50 UTC	303	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:50 GMT Content-Type: application/json Content-Length: 118 Connection: close CF-Ray: 8d27852048e84382-EWR CF-Cache-Status: DYNAMIC Vary: X-W-SSL,User-Agent X-Host: blu26.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2024-10-14 12:19:50 UTC	118	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 30 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request","http_response_code":400},"id":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.11	49766	50.112.173.192	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:50 UTC	558	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://att-mail-987654.weebly.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:50 UTC	365	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:50 GMT Content-Length: 0 Connection: close Server: nginx Access-Control-Allow-Origin: https://att-mail-987654.weebly.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, SP-Anonymous Access-Control-Max-Age: 600 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.11	49770	142.250.185.132	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:50 UTC	463	OUT	GET /recaptcha/api.js?_=1728908387555 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:50 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 14 Oct 2024 12:19:50 GMT Date: Mon, 14 Oct 2024 12:19:50 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 12:19:50 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-14 12:19:50 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-10-14 12:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.11	49772	50.112.173.192	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:51 UTC	671	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 1963 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://att-mail-987654.weebly.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:19:51 UTC	1963	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 74 74 2d 6d 61 69 6c 2d 39 38 37 36 35 34 2e 77 65 65 62 6c 79 2e 63 6f 6d 2f 22 2c 22 70 61 67 65 22 3a 22 31 35 30 32 31 38 37 30 35 3a 38 33 30 30 38 33 33 36 39 38 39 35 33 34 30 36 38 30 22 2c 22 74 76 22 3a 22 6a 73 2d 32 2e 36 2e 32 22 2c 22 74 6e 61 22 3a 22 5f 77 6e 22 2c 22 61 69 64 22 3a 22 5f 77 6e 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 74 7a 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 6c 61 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"https://att-mail-987654.weebly.com/","page":"150218705:830083369895340680","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web","tz":"America/New_York","la
2024-10-14 12:19:52 UTC	410	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:52 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=dcb77132-a9e3-4ad8-b9b0-295383eeae3a; Expires=Tue, 14 Oct 2025 12:19:52 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://att-mail-987654.weebly.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-14 12:19:52 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.11	49773	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:52 UTC	943	OUT	GET /favicon.ico HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q; _snow_ses.30ea=; _snow_id.30ea=c5c9a589-7ef4-4fa1-97a0-79e59709a466.1728908388.1.1728908388.1728908388.5ab037ce-74d8-42dc-a0e5-63a37bb7ecbb
2024-10-14 12:19:53 UTC	920	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:53 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close CF-Ray: 8d278532dbc38cba-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4d27526198ac873ccec96935198e0fb9" Last-Modified: Fri, 05 Apr 2024 02:14:34 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: dZRa6wos2fM3jTDgLDl/HkOkztESFI5wjtzk2qqix3Otb0WyEgBLHKz5tIQAeofQUQiMLpp0ZvFJhv9atwrLYQ== x-amz-meta-btime: 2023-12-05T01:20:44.747Z x-amz-meta-mtime: 1701739244.747 x-amz-replication-status: COMPLETED x-amz-request-id: JNSV0RJJFMYY3R8A x-amz-server-side-encryption: AES256 x-amz-version-id: LsXk5SXX4YYENRi6Sb2HPGzXQEtkP7zo X-Storage-Bucket: z40a2 X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4 Server: cloudflare
2024-10-14 12:19:53 UTC	449	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @
2024-10-14 12:19:53 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 3f 34 00 49 44 35 02 44 3c 33 37 43 3b 33 91 43 3b 32 c6 43 3b 32 d8 43 3b 32 c9 43 3b 33 9f 44 3c 33 4c 45 3d 33 09 45 3d 32 00 44 3c 33 00 44 3d 33 0b 43 3c 32 51 43 3b 32 a4 43 3b 32 ce 43 3b 32 dc 43 3b 32 c8 44 3b 33 92 44 3b 34 36 4a 42 3b 02 47 3e 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 3b 34 00 48 3c 35 02 44 3b 33 5d 43 3b 32 e0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ef 44 3c 32 83 47 3c 33 0c 47 3c 34 0e 44 3c 33 89 43 3b 32 f2 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 df 44 3c 33 5b 43 3d 37 02 43 3c 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: F?4ID5D<37C;3C;2C;2C;2C;3D<3LE=3E=2D<3D=3C<2QC;2C;2C;2C;2D;3D;46JB;G>6E;4H<5D;3]C;2C;2C;2C;2C;2C;2C;2D<2G<3G<4D<3C;2C;2C;2C;2C;2C;2C;2D<3[C=7C<4
2024-10-14 12:19:53 UTC	1369	IN	Data Raw: 4b 47 36 00 44 3c 33 00 44 3d 33 31 43 3b 32 e6 43 3b 32 ff 43 3b 32 fa 44 3b 32 66 3f 3a 31 00 53 40 37 00 44 3c 34 00 45 3d 34 0b 43 3b 32 b0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ab 45 3d 35 09 44 3c 34 00 44 3d 33 00 45 3d 33 0b 44 3c 32 a2 44 3c 33 4e 44 3c 32 00 48 3f 37 00 3a 32 27 00 44 3b 32 7b 44 3c 32 77 3d 35 2f 00 49 40 35 00 44 3c 32 00 44 3c 32 4f 44 3c 32 a2 45 3d 33 0b 44 3d 33 00 45 3d 33 00 46 3f 33 0a 44 3c 32 ac 43 3b 32 ff 43 3b 32 ff 43 3b 32 af 44 3d 33 0b 44 3c 33 00 44 3c 33 00 44 3c 33 33 43 3b 32 e7 43 3b 32 ff 43 3b 32 f9 44 3c 33 60 40 38 2e 00 57 50 47 00 44 3c 33 00 44 3d 33 29 43 3b 32 e4 43 3c 32 8d 51 4d 34 01 46 3e 32 00 45 3c 32 00 44 3c 32 28 45 3d 33 26 45 3c 32 00 46 3e 32 00 51 4d 35 01 43 3c 32 8d 43 3b 32 e4 44 3d 33 Data Ascii: KG6D<3D=31C;2C;2C;2D;2f?:1S@7D<4E=4C;2C;2C;2C;2E=5D<4D=3E=3D<2D<3ND<2H?7:2'D;2{D<2w=5/I@5D<2D<2OD<2E=3D=3E=3F?3D<2C;2C;2C;2D=3D<3D<3D<33C;2C;2C;2D<3`@8.WPGD<3D=3)C;2C<2QM4F>2E<2D<2(E=3&E<2F>2QM5C<2C;2D=3
2024-10-14 12:19:53 UTC	1099	IN	Data Raw: 3b 32 ff 43 3b 32 ff 43 3b 32 fa 43 3b 32 fa 43 3b 32 ff 43 3b 32 ff 43 3b 32 fe 44 3c 32 91 44 3d 33 29 43 3b 32 c9 43 3b 32 ff 43 3b 32 ff 43 3b 32 fc 43 3b 32 f9 43 3b 32 fe 43 3b 32 ff 43 3b 32 ff 43 3b 32 ec 44 3b 32 59 45 3d 33 09 44 3c 32 77 43 3b 32 ec 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 d7 44 3c 32 45 3e 35 31 00 45 3d 33 1a 44 3b 32 a7 43 3b 32 f9 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 fb 43 3c 32 ae 45 3c 32 1e 3f 35 2c 00 44 3c 33 3e 43 3b 32 d2 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ed 44 3b 32 75 45 3d 33 07 45 3e 34 00 45 3f 34 07 44 3c 33 47 43 3b 32 9e 43 3b 32 cf 43 3b 32 de 43 3b 32 cc 44 3c 33 91 44 3c 33 32 43 3e 39 01 44 3d 36 00 43 3a 31 00 44 3d 35 13 Data Ascii: ;2C;2C;2C;2C;2C;2C;2D<2D=3)C;2C;2C;2C;2C;2C;2C;2C;2C;2D;2YE=3D<2wC;2C;2C;2C;2C;2C;2C;2D<2E>51E=3D;2C;2C;2C;2C;2C;2C;2C<2E<2?5,D<3>C;2C;2C;2C;2C;2C;2C;2D;2uE=3E>4E?4D<3GC;2C;2C;2C;2D<3D<32C>9D=6C:1D=5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.11	49777	54.201.56.249	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:54 UTC	424	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=dcb77132-a9e3-4ad8-b9b0-295383eeae3a
2024-10-14 12:19:54 UTC	455	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=dcb77132-a9e3-4ad8-b9b0-295383eeae3a; Expires=Tue, 14 Oct 2025 12:19:54 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-14 12:19:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.11	49778	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:55 UTC	696	OUT	GET /favicon.ico HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q; _snow_ses.30ea=*; _snow_id.30ea=c5c9a589-7ef4-4fa1-97a0-79e59709a466.1728908388.1.1728908388.1728908388.5ab037ce-74d8-42dc-a0e5-63a37bb7ecbb
2024-10-14 12:19:55 UTC	908	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:19:55 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close CF-Ray: 8d27853e5a790fa8-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4d27526198ac873ccec96935198e0fb9" Last-Modified: Fri, 05 Apr 2024 02:14:34 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: wnBXZTta7TCIXIulyMWY2v4J7bHeFBXr5lInZZIyW4ulQSIFaT47XYhJVTwPJWB8/l36A4cD9No= x-amz-meta-btime: 2023-12-05T01:20:44.747Z x-amz-meta-mtime: 1701739244.747 x-amz-replication-status: COMPLETED x-amz-request-id: 0YFJFQ79V5QZFX0D x-amz-server-side-encryption: AES256 x-amz-version-id: LsXk5SXX4YYENRi6Sb2HPGzXQEtkP7zo X-Storage-Bucket: z40a2 X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4 Server: cloudflare
2024-10-14 12:19:55 UTC	461	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @
2024-10-14 12:19:55 UTC	1369	IN	Data Raw: 00 00 00 00 00 46 3f 34 00 49 44 35 02 44 3c 33 37 43 3b 33 91 43 3b 32 c6 43 3b 32 d8 43 3b 32 c9 43 3b 33 9f 44 3c 33 4c 45 3d 33 09 45 3d 32 00 44 3c 33 00 44 3d 33 0b 43 3c 32 51 43 3b 32 a4 43 3b 32 ce 43 3b 32 dc 43 3b 32 c8 44 3b 33 92 44 3b 34 36 4a 42 3b 02 47 3e 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 3b 34 00 48 3c 35 02 44 3b 33 5d 43 3b 32 e0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ef 44 3c 32 83 47 3c 33 0c 47 3c 34 0e 44 3c 33 89 43 3b 32 f2 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 df 44 3c 33 5b 43 3d 37 02 43 3c 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 48 3c Data Ascii: F?4ID5D<37C;3C;2C;2C;2C;3D<3LE=3E=2D<3D=3C<2QC;2C;2C;2C;2D;3D;46JB;G>6E;4H<5D;3]C;2C;2C;2C;2C;2C;2C;2D<2G<3G<4D<3C;2C;2C;2C;2C;2C;2C;2D<3[C=7C<4H<
2024-10-14 12:19:55 UTC	1369	IN	Data Raw: 43 3b 32 e6 43 3b 32 ff 43 3b 32 fa 44 3b 32 66 3f 3a 31 00 53 40 37 00 44 3c 34 00 45 3d 34 0b 43 3b 32 b0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ab 45 3d 35 09 44 3c 34 00 44 3d 33 00 45 3d 33 0b 44 3c 32 a2 44 3c 33 4e 44 3c 32 00 48 3f 37 00 3a 32 27 00 44 3b 32 7b 44 3c 32 77 3d 35 2f 00 49 40 35 00 44 3c 32 00 44 3c 32 4f 44 3c 32 a2 45 3d 33 0b 44 3d 33 00 45 3d 33 00 46 3f 33 0a 44 3c 32 ac 43 3b 32 ff 43 3b 32 ff 43 3b 32 af 44 3d 33 0b 44 3c 33 00 44 3c 33 00 44 3c 33 33 43 3b 32 e7 43 3b 32 ff 43 3b 32 f9 44 3c 33 60 40 38 2e 00 57 50 47 00 44 3c 33 00 44 3d 33 29 43 3b 32 e4 43 3c 32 8d 51 4d 34 01 46 3e 32 00 45 3c 32 00 44 3c 32 28 45 3d 33 26 45 3c 32 00 46 3e 32 00 51 4d 35 01 43 3c 32 8d 43 3b 32 e4 44 3d 33 29 44 3c 33 00 57 50 43 00 3f 37 2f Data Ascii: C;2C;2C;2D;2f?:1S@7D<4E=4C;2C;2C;2C;2E=5D<4D=3E=3D<2D<3ND<2H?7:2'D;2{D<2w=5/I@5D<2D<2OD<2E=3D=3E=3F?3D<2C;2C;2C;2D=3D<3D<3D<33C;2C;2C;2D<3`@8.WPGD<3D=3)C;2C<2QM4F>2E<2D<2(E=3&E<2F>2QM5C<2C;2D=3)D<3WPC?7/
2024-10-14 12:19:55 UTC	1087	IN	Data Raw: 3b 32 fa 43 3b 32 ff 43 3b 32 ff 43 3b 32 fe 44 3c 32 91 44 3d 33 29 43 3b 32 c9 43 3b 32 ff 43 3b 32 ff 43 3b 32 fc 43 3b 32 f9 43 3b 32 fe 43 3b 32 ff 43 3b 32 ff 43 3b 32 ec 44 3b 32 59 45 3d 33 09 44 3c 32 77 43 3b 32 ec 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 d7 44 3c 32 45 3e 35 31 00 45 3d 33 1a 44 3b 32 a7 43 3b 32 f9 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 fb 43 3c 32 ae 45 3c 32 1e 3f 35 2c 00 44 3c 33 3e 43 3b 32 d2 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ed 44 3b 32 75 45 3d 33 07 45 3e 34 00 45 3f 34 07 44 3c 33 47 43 3b 32 9e 43 3b 32 cf 43 3b 32 de 43 3b 32 cc 44 3c 33 91 44 3c 33 32 43 3e 39 01 44 3d 36 00 43 3a 31 00 44 3d 35 13 43 3c 33 6a 43 3b 32 b8 43 3b 32 db Data Ascii: ;2C;2C;2C;2D<2D=3)C;2C;2C;2C;2C;2C;2C;2C;2C;2D;2YE=3D<2wC;2C;2C;2C;2C;2C;2C;2D<2E>51E=3D;2C;2C;2C;2C;2C;2C;2C<2E<2?5,D<3>C;2C;2C;2C;2C;2C;2C;2D;2uE=3E>4E?4D<3GC;2C;2C;2C;2D<3D<32C>9D=6C:1D=5C<3jC;2C;2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.11	49779	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:19:57 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7RCnMFwdRv3hZG9&MD=dvAMlg1G HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-14 12:19:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: deaef360-0a5d-4f88-af44-19ef9e135216 MS-RequestId: 91bb9791-7961-40f5-9e47-66c1de9fb8e9 MS-CV: 678yj7KDAUqO5Q+f.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 12:19:56 GMT Connection: close Content-Length: 24490
2024-10-14 12:19:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-14 12:19:57 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.11	49785	74.115.51.9	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:05 UTC	1259	OUT	POST /ajax/apps/formSubmitAjax.php HTTP/1.1 Host: att-mail-987654.weebly.com Connection: keep-alive Content-Length: 779 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://att-mail-987654.weebly.com Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryli48ktPF3fCZaNSk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://att-mail-987654.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=qIZ6LyQiQ6MZKqw.Q93CfK.Ip4BbrZYREvtNBP0u4so-1728908385-1.0.1.1-GF46gVyHZUT.m3cWeP2uPLPOx_rkcEfUnrlZkV4doqOSERDuRh1iyf.UrGWetG1WlhOEGvs8RsPK0qezuTfo2Q; _snow_ses.30ea=*; _snow_id.30ea=c5c9a589-7ef4-4fa1-97a0-79e59709a466.1728908388.1.1728908388.1728908388.5ab037ce-74d8-42dc-a0e5-63a37bb7ecbb
2024-10-14 12:20:05 UTC	779	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 69 34 38 6b 74 50 46 33 66 43 5a 61 4e 53 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 5f 75 34 34 31 34 37 34 34 34 34 34 36 37 34 39 34 34 30 36 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 69 34 38 6b 74 50 46 33 66 43 5a 61 4e 53 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 5f 75 32 30 38 38 31 31 37 37 35 38 38 31 38 32 39 34 31 31 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 69 34 38 6b 74 50 46 33 66 43 5a 61 4e 53 6b 0d Data Ascii: ------WebKitFormBoundaryli48ktPF3fCZaNSkContent-Disposition: form-data; name="_u441474444467494406"------WebKitFormBoundaryli48ktPF3fCZaNSkContent-Disposition: form-data; name="_u208811775881829411"------WebKitFormBoundaryli48ktPF3fCZaNSk
2024-10-14 12:20:05 UTC	407	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:20:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8d27857baad54217-EWR CF-Cache-Status: DYNAMIC Set-Cookie: language=en; expires=Mon, 28-Oct-2024 12:20:05 GMT; Max-Age=1209600; path=/ Vary: X-W-SSL,User-Agent X-Host: grn87.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2024-10-14 12:20:05 UTC	455	IN	Data Raw: 31 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 72 65 74 28 29 7b 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 26 26 20 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 72 65 73 70 6f 6e 73 65 27 29 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 6e 6f 64 65 56 61 6c 75 65 2c 27 68 74 74 70 73 3a 2f 2f 61 74 74 2d 6d 61 69 6c 2d 39 38 37 Data Ascii: 1c0<!DOCTYPE html><html><head><meta name="format-detection" content="telephone=no"><script type="text/javascript">function ret(){parent.postMessage && parent.postMessage(document.getElementById('response').childNodes[0].nodeValue,'https://att-mail-987
2024-10-14 12:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.11	49788	144.160.36.42	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:06 UTC	656	OUT	GET / HTTP/1.1 Host: att.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:07 UTC	119	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 6e 65 74 2f 0d 0a 53 65 72 76 65 72 3a 20 42 69 67 49 50 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.0 301 Moved PermanentlyLocation: https://www.att.net/Server: BigIPConnection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.11	49792	87.248.100.215	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:12 UTC	672	OUT	GET / HTTP/1.1 Host: currently.att.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:12 UTC	1178	IN	HTTP/1.1 200 OK expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block content-type: text/html; charset=utf-8 date: Mon, 14 Oct 2024 12:20:12 GMT x-envoy-upstream-service-time: 148 server: ATS Age: 0 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, max-age=0, private Expires: -1 Set-Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; Expires=Tue, 14 Oct 2025 18:20:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; Expires=Tue, 14 Oct 2025 18:20:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-10-14 12:20:12 UTC	5	IN	Data Raw: 39 66 64 0d 0a Data Ascii: 9fd
2024-10-14 12:20:12 UTC	1300	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 20 69 64 3d 61 74 6f 6d 69 63 20 63 6c 61 73 73 3d 22 6c 74 72 20 66 70 20 20 64 65 73 6b 74 6f 70 20 44 65 73 6b 74 6f 70 20 66 70 2d 61 74 74 20 62 6b 74 39 30 30 2c 73 65 61 6d 6c 65 73 73 20 75 61 2d 63 68 72 6f 6d 65 20 75 61 2d 31 31 37 2e 30 20 69 73 4d 6f 64 65 72 6e 22 20 6c 61 6e 67 3d 65 6e 2d 55 53 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 36 35 33 39 34 33 30 61 38 39 36 33 33 36 64 63 62 36 61 31 64 37 38 35 38 39 65 62 35 38 39 62 32 36 61 63 37 35 62 32 61 62 31 66 65 34 33 61 61 35 36 37 30 66 64 32 32 35 34 34 65 39 39 63 3e 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 Data Ascii: <!doctype html><html data-color-scheme id=atomic class="ltr fp desktop Desktop fp-att bkt900,seamless ua-chrome ua-117.0 isModern" lang=en-US><head><script nonce=6539430a896336dcb6a1d78589eb589b26ac75b2ab1fe43aa5670fd22544e99c> window.performance
2024-10-14 12:20:12 UTC	489	IN	Data Raw: 61 69 6c 2c 20 6e 65 77 73 2c 20 68 65 61 64 6c 69 6e 65 73 2c 20 66 69 6e 61 6e 63 65 2c 20 73 70 6f 72 74 73 2c 20 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2c 20 67 61 6d 65 73 2c 20 77 65 61 74 68 65 72 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 66 62 3a 61 70 70 5f 69 64 20 63 6f 6e 74 65 6e 74 3d 22 34 35 38 35 38 34 32 38 38 32 35 37 32 34 31 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 6f 67 3a 69 6d 61 67 65 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 70 61 72 74 6e 65 72 2d 70 6f 72 74 61 6c 73 2f 6d 6f 62 69 6c 65 2f 61 74 74 5f 6f 70 65 6e 2d 67 72 61 70 68 5f 69 63 6f 6e 5f 31 2e 70 6e 67 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 6f 67 3a 74 69 74 6c 65 Data Ascii: ail, news, headlines, finance, sports, entertainment, games, weather"><meta property=fb:app_id content="458584288257241"><meta property=og:image content="https://s.yimg.com/cv/apiv2/partner-portals/mobile/att_open-graph_icon_1.png"><meta property=og:title
2024-10-14 12:20:12 UTC	768	IN	Data Raw: 20 68 72 65 66 3d 22 2f 6d 61 6e 69 66 65 73 74 5f 70 61 72 74 6e 65 72 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 75 72 72 65 6e 74 6c 79 2e 61 74 74 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 63 75 72 72 65 6e 74 6c 79 2e 61 74 74 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 61 74 74 2f 70 6f 72 74 61 6c 2f 63 6f 6d 6d 6f 6e 2f 69 2f 66 61 76 69 63 6f 6e 5f 31 2e 69 63 6f 22 3e 3c 6c 69 Data Ascii: href="/manifest_partner.json"><link rel="canonical" href="https://currently.att.yahoo.com/"><meta property="og:url" content="https://currently.att.yahoo.com/"><link rel="shortcut icon" href="https://s.yimg.com/cv/ae/att/portal/common/i/favicon_1.ico"><li
2024-10-14 12:20:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-14 12:20:12 UTC	7	IN	Data Raw: 31 37 66 66 39 0d 0a Data Ascii: 17ff9
2024-10-14 12:20:12 UTC	1300	IN	Data Raw: 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 36 35 33 39 34 33 30 61 38 39 36 33 33 36 64 63 62 36 61 31 64 37 38 35 38 39 65 62 35 38 39 62 32 36 61 63 37 35 62 32 61 62 31 66 65 34 33 61 61 35 36 37 30 66 64 32 32 35 34 34 65 39 39 63 22 3e 2f 2a 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 73 63 70 2f 63 73 73 2f 63 6f 6d 6d 6f 6e 41 74 6f 6d 69 63 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 37 65 65 63 64 63 37 33 30 31 34 36 33 62 32 30 30 31 64 39 39 37 31 38 64 30 65 62 37 36 33 33 2e 63 73 73 20 2a 2f 20 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 66 73 5c 29 7b 61 6c 69 67 6e 2d 69 Data Ascii: <style type="text/css" nonce="6539430a896336dcb6a1d78589eb589b26ac75b2ab1fe43aa5670fd22544e99c">/* https://s.yimg.com/aaq/scp/css/commonAtomic.atomic.ltr.7eecdc7301463b2001d99718d0eb7633.css */ #atomic .Ai$c${align-items:center}#atomic .Ai$fs${align-i
2024-10-14 12:20:12 UTC	1300	IN	Data Raw: 72 3a 76 61 72 28 2d 2d 62 6c 75 72 70 6c 65 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 5c 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 62 63 5c 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 73 5c 28 68 5c 29 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 68 69 64 64 65 6e 7d 23 61 74 6f 6d 69 63 20 2e 42 64 73 5c 28 73 5c 29 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 73 5c 28 73 5c 29 Data Ascii: r:var(--blurple)}#atomic .Bdendc$--hulk-pants${border-right-color:var(--hulk-pants)}#atomic .Bdbc$--dirty-seagull${border-bottom-color:var(--dirty-seagull)}#atomic .Bds$h${border-style:hidden}#atomic .Bds$s${border-style:solid}#atomic .Bdends$s$
2024-10-14 12:20:12 UTC	1300	IN	Data Raw: 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 65 6e 64 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 73 74 61 72 74 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 74 73 74 61 72 74 5c 28 31 32 70 78 5c 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 74 73 74 61 72 74 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 67 5c 28 5c 23 65 65 65 5c 29 5c 21 7b 62 61 Data Ascii: us:8px}#atomic .Bdrsbend$8px${border-bottom-right-radius:8px}#atomic .Bdrsbstart$8px${border-bottom-left-radius:8px}#atomic .Bdrststart$12px${border-top-left-radius:12px}#atomic .Bdrststart$8px${border-top-left-radius:8px}#atomic .Bg$\#eee$\!{ba
2024-10-14 12:20:12 UTC	1300	IN	Data Raw: 69 6f 6e 2d 31 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 73 68 61 72 6b 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 68 61 72 6b 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 77 68 69 74 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 74 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 74 5c 29 5c 3a 5c 3a 62 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 Data Ascii: ion-1)}#atomic .Bgc$--marshmallow${background-color:var(--marshmallow)}#atomic .Bgc$--shark${background-color:var(--shark)}#atomic .Bgc$--white${background-color:var(--white)}#atomic .Bgc$t$,#atomic .Bgc$t$\:\:b::before{background-color:transpar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.11	49793	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:13 UTC	594	OUT	GET /cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://currently.att.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:13 UTC	705	IN	HTTP/1.1 200 OK x-amz-id-2: Uhq9xhgArXFCU2vgM4nq2viPeoiFhRVJWOYTCLZVuje47v1euQHNNk+Fswsen4eppTAQUmrCg+A= x-amz-request-id: AXQHG8B59JHQ9GAN Date: Sun, 06 Oct 2024 19:21:23 GMT Last-Modified: Mon, 30 Nov 2020 20:20:29 GMT ETag: "b4df4fce99e5a3c3d1493112a0159071" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 65176 Referrer-Policy: no-referrer-when-downgrade Age: 665931 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin ATS-Carp-Promotion: 1
2024-10-14 12:20:13 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 fe 98 00 11 00 00 00 02 5e d8 00 00 fe 2a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 8c 2f 1b 83 ee 0a 1c 92 7a 3f 48 56 41 52 8c 77 06 60 3f 53 54 41 54 1c 00 88 00 2f 64 0a 81 b9 10 81 94 4f 0b 87 36 00 30 83 a1 46 01 36 02 24 03 8e 66 04 20 05 8b 7c 07 99 39 5b b3 47 92 80 b0 09 68 2c 6a 2b 6e e3 d7 6d 44 c0 67 6e a9 56 da f1 b3 17 c2 3c bc d6 63 31 3d c5 8c 9a 32 13 7f 7e b0 06 cf 8d e4 ee 76 c4 5e 8d d7 eb b3 ff ff ff ff 17 25 8b 18 5b 33 87 cd ec dd 01 00 a9 66 81 a2 66 f5 fd 3f c9 61 44 2e b9 a8 a8 b6 e8 a8 87 d1 b5 79 18 0b 54 a6 e8 3b 4f d5 73 7e dd 0f 87 b6 d5 f1 f4 86 72 7e 7b c5 bb 3f c6 f1 b0 74 89 76 85 20 ee 44 e2 4b 5f 1b e4 95 c2 74 56 f3 16 de 37 b8 4a c2 86 e3 2d 32 16 3a 46 Data Ascii: wOF2^*/z?HVARw`?STAT/dO60F6$f \|9[Gh,j+nmDgnV<c1=2~v^%[3ff?aD.yT;Os~r~{?tv DK_tV7J-2:F
2024-10-14 12:20:13 UTC	1300	IN	Data Raw: 1f 66 86 85 fb d2 e9 d3 06 b3 8b 33 38 2b db 92 8b 92 5f 4a 39 f6 eb 3f dc 4e ff da 5b 4a 55 fe 43 c9 17 65 85 59 21 0d f6 2c d6 80 ed 97 fb e5 3b d8 4e b3 22 11 49 a7 f9 33 3d 02 5b 40 4d 2c d9 1d 24 2b 5c 85 37 cf a0 53 0f d3 81 05 ae 63 f8 f7 8a 77 2d c0 38 77 06 ba 2c 4a 08 e9 e1 8b 5d 76 a5 4b ec 12 91 74 e5 0f bb 83 1c 22 12 7c bb 44 82 1c de b2 db 8e 25 76 d9 65 97 88 1c 22 22 76 05 11 f1 0f 91 c3 2e bb 24 88 c8 61 97 e4 56 10 11 09 72 88 1c 22 7e 10 f1 03 e0 ef 75 ea fb 92 02 c0 05 1e c6 4e bd 0e 23 8e 38 d6 32 49 b1 d8 10 60 95 6c 16 16 b6 90 ec 84 37 22 ab e5 0d c1 4e 61 ed a4 4e 4b d2 0a d0 dc 27 10 0d 8b bc 65 b2 c4 a7 a7 e9 ff 7f 9b fe fb 67 ef 7d 0e 0f 6a 46 68 0a 11 77 59 69 8a 34 cd 1b 8f df 4a 97 a2 49 19 fe bf e8 02 04 17 c1 a0 97 eb 6b Data Ascii: f38+_J9?N[JUCeY!,;N"I3=[@M,$+\7Scw-8w,J]vKt"\|D%ve""v.$aVr"~uN#82I`l7"NaNK'eg}jFhwYi4JIk
2024-10-14 12:20:13 UTC	1300	IN	Data Raw: bf df f5 ee bf 5b bf 0d 5f 9e e3 32 a7 22 8f c9 3e f6 f4 a4 ae 9f e0 33 27 5f 9e e3 bf b1 2c 10 26 93 ff 41 67 a1 23 7b ae 29 1c fd 17 a3 7c 39 aa eb 91 0a ce 30 8f 3d 8d 8d 7e 1c 3a 26 94 4d 3c 4d 14 4e de 68 25 75 3d 15 9e 8a 4c 2f 93 01 98 82 9e 1e 05 ed f8 2f 4b d6 1a 7d 9e df c8 15 ce 84 67 22 33 80 19 e8 d9 53 75 dc bb 13 4f 27 46 7f 62 cc f3 af 7a f8 6a 81 fc c6 5c 75 e6 0a e7 47 41 f7 65 ec 98 9d 88 03 70 a0 9d d1 bb a7 ea 24 d9 c2 bb c2 53 a1 b0 c0 68 d0 e8 0b 63 5e 8c 1f 2d 8a 74 21 bc 50 b8 50 c1 10 46 43 18 0f 3d 55 5d 52 56 92 2d bd 2b 3d 95 c2 a5 48 09 50 82 2e 8d be 2a 92 aa 48 2b ca 2a b2 95 77 95 c2 4a 05 23 18 e7 fe f9 89 f2 bb 24 4c 22 04 40 a0 e9 a8 72 39 fe 75 49 d9 92 ec d2 83 9b 68 69 f4 cb d0 71 9a b5 9f 16 09 a4 e6 a7 0a 0d c6 30 Data Ascii: [_2">3'_,&Ag#{)\|90=~:&M<MNh%u=L//K}g"3SuO'Fbzj\uGAep$Shc^-t!PPFC=U]RV-+=HP.H+wJ#$L"@r9uIhiq0
2024-10-14 12:20:13 UTC	1300	IN	Data Raw: 02 21 b1 34 4c 36 62 59 b4 32 36 16 ab 50 4a c1 08 50 2e fd 6d 41 ae c7 77 3c cf b4 9a 93 b7 4e 31 f9 eb b5 ac 60 a3 96 17 63 bd 95 ed b6 4f 6a fb 05 7a 19 0f 62 94 6b 83 d8 9a 6d d3 d6 ad 82 83 db ff 3d 8e ee 74 50 27 0f 38 aa 87 6f b4 bb c5 de a8 bb 36 8a 5d 0b 2c 3f 65 ef 6d be 7a 83 d9 e5 6f 36 fa c0 09 42 2b cd ea 09 f3 e3 22 ac 7f 7e 68 dc e0 b1 9f 28 bd 36 2c 1e 4f 6a 1e 74 77 36 ff fa 0e 88 45 bb 2e d2 89 7e 77 97 8c 62 c4 7f 07 22 7e 34 2c bf cd 89 ec bf 7f cd 25 9e 6b ad b6 98 f4 c5 2b 82 33 36 5f 9d cf 3f ee 7e e3 41 2b e2 99 1a 5c 7f 5c 12 3f ad 1d 60 c5 d6 86 43 cb 71 52 7e bb 13 21 b0 b3 d2 18 62 d7 e8 c8 e9 d9 3d 75 18 bd cf d1 f4 2e 5c 41 8e a6 23 0d 4c 50 94 a8 28 bf 14 59 dc e9 b1 5f 39 7a 23 16 e4 e8 48 09 99 b3 4c cb 72 5e 40 61 60 d4 Data Ascii: !4L6bY26PJP.mAw<N1`cOjzbkm=tP'8o6],?emzo6B+"~h(6,Ojtw6E.~wb"~4,%k+36_?~A+\\?`CqR~!b=u.\A#LP(Y_9z#HLr^@a`
2024-10-14 12:20:13 UTC	1300	IN	Data Raw: c4 29 74 7c 37 93 7e fd 14 7a 2e 2f e6 d6 f7 81 ff 47 85 65 a4 39 53 fe 27 d1 9f 69 9b 76 48 22 99 94 46 53 17 34 63 37 62 a9 d9 d5 69 4f 7b a2 b7 be 58 3f c8 16 a7 22 ed e7 18 7d 05 90 9f 3c 07 aa 4f 15 9f ba b2 7c fb ff 72 06 25 7a df 73 1e 96 0c 2e 80 de fc ed a2 8d 8c 5c 5a bf 0c 7c 0d 61 2d 9a 35 0e e9 3a 89 75 4f 88 e0 6b 01 21 fa 6b eb a1 f0 63 54 5e f4 5b 0f e7 03 0f 7c 7d ec 81 af 7f 27 57 c3 3b bb 20 3c 0a 61 42 3e ac 8c 09 f4 66 ba b3 c0 97 7c ce b7 8b 2e 80 bd d9 cd 45 a0 74 f1 a5 03 9f 33 5c 05 b3 94 2a 76 5b 81 af d3 4b ef 6a 8d e8 ae 4f e4 48 08 74 52 03 5f 5a c9 55 f5 f9 1b 14 f0 75 81 98 9a 67 97 41 02 44 79 b8 c5 56 0c 93 3e 90 45 f9 b8 a7 cc 51 85 5f ea ec 9b 92 f9 17 bc 95 e1 60 36 2d c7 c7 dd 70 b9 8a 39 6b b8 7c fe 5b fc 44 bf aa 20 Data Ascii: )t\|7~z./Ge9S'ivH"FS4c7biO{X?"}<O\|r%zs.\Z\|a-5:uOk!kcT^[\|}'W; <aB>f\|.Et3\*v[KjOHtR_ZUugADyV>EQ_`6-p9k\|[D
2024-10-14 12:20:13 UTC	1300	IN	Data Raw: ca 94 8a e9 94 f3 20 ae 0a c9 20 c8 0e 0d 79 c9 1e 26 6b db af 0b 92 0e a0 a8 83 1d ed c8 d2 45 27 24 a2 16 ce 32 9c cd 5c 66 44 2d e6 b0 13 33 d9 8f 85 3f 4e 63 44 14 7d f8 cc 70 3b 55 2c 19 a3 fd a9 5b 4e f7 8f ae 5f ad 43 2e 72 43 43 ae 73 53 01 77 b9 a5 0b 1e 73 fb 62 66 9c 1b c6 2a ea 64 82 20 af 94 f0 9e b7 ca 44 25 ef 82 de d3 87 e3 1f 35 e2 2b 56 fb db fe a5 55 96 ff 68 a7 f9 1f bb e4 1e 37 c4 00 a2 84 19 1d 77 a2 d1 50 dc de 79 c3 f1 a2 a8 49 fc b3 28 23 79 fa 0d 2b 76 19 1d b0 12 92 79 2b 17 84 25 46 ad 06 93 6d 02 45 5e bb 85 fb 70 35 fc ad 5b 7f 1f 04 c6 bc 00 07 e1 cd cb f0 19 7a e7 aa 8d e9 e6 35 75 89 d0 c4 35 ee 09 60 63 10 f7 54 29 61 a6 35 0c 19 4a 8c 15 80 f5 d5 50 c3 68 e0 9f 36 ca 37 ca fd f0 a0 19 01 a2 d7 aa 39 0a 77 1a 76 77 0b fc Data Ascii: y&kE'$2\fD-3?NcD}p;U,[N_C.rCCsSwsbf*d D%5+VUh7wPyI(#y+vy+%FmE^p5[z5u5`cT)a5JPh679wvw
2024-10-14 12:20:13 UTC	1300	IN	Data Raw: ea 4d 07 39 67 3d 8e cf 76 48 42 4b 17 15 db f7 16 59 89 67 9c 56 a7 66 da 87 ed 5b 1f 4e 55 23 20 e7 1c ee c4 1b 38 ca a6 62 7e bf 78 c9 15 cb b7 c5 c5 2e 1f b8 5d fa 78 17 50 1d c4 6e ae 67 a6 7e 6a 6d ec f7 60 77 13 40 77 ca e7 6c c7 65 ae 87 c0 bb 1d 5e f8 29 82 b9 fd 53 eb 75 2d 76 69 d9 13 ad 01 b2 73 2f b9 27 20 b6 38 d6 7d 16 22 b6 29 33 6b 9e cc 5e 58 bb db 5b 9c 80 0a 13 49 db 0d 95 de e9 b0 f6 3c b3 db 48 99 b4 58 99 f6 8e 38 f6 0c 0f e1 07 89 49 32 2c 55 75 51 49 a6 26 4b 23 6f a4 20 65 a9 62 77 cb ec 55 60 ba fb 1d 83 74 a4 27 43 80 05 d4 31 28 63 a0 c8 6c 16 d5 ed 34 3b 0d b2 db dd be ee f6 ef b2 26 36 ec ca d3 9d 94 39 ab b7 13 e7 60 b7 9b 53 37 cf ee 65 df 05 56 7b f7 68 c5 40 37 24 d5 6f 5f 82 97 78 37 0c 72 04 06 26 16 92 13 67 2e d8 d5 Data Ascii: M9g=vHBKYgVf[NU# 8b~x.]xPng~jm`w@wle^)Su-vis/' 8}")3k^X[I<HX8I2,UuQI&K#o ebwU`t'C1(cl4;&69`S7eV{h@7$o_x7r&g.
2024-10-14 12:20:13 UTC	1300	IN	Data Raw: f6 5a a6 51 16 38 5e 3f a7 d5 08 19 c7 38 6f af e9 33 21 8b 4f 1c 95 d8 8e 7b 43 fd 77 93 f5 db 29 2a 71 da b6 d8 c4 b4 83 d5 f5 2a 9d 6d e5 0c 34 df b2 2a a2 f1 dc aa 8d 6a c6 c7 64 cd 95 36 ce 72 b8 7e c5 26 1b d3 f0 ad a0 e9 46 59 12 2d d0 62 b9 14 78 0d 9a bd 09 ba 0e 2a ee 2d c5 ba e3 61 04 b5 06 dd 5a 37 6a f6 a5 a0 57 51 2b 96 1a 47 37 a6 5e 4b 19 34 9b 26 d3 72 75 fb f4 7a 1c 03 ab 7b 38 ee 74 82 4e 52 e5 e2 2a de eb 60 8c ad 61 ba 39 66 9c 78 88 52 ef b5 89 a0 5e 03 c1 1d 21 b0 7c 91 d6 d3 a1 b3 26 c3 82 15 b0 bb 0c aa 9d ba 18 9b ab cf 5b 00 e7 3c c0 29 71 50 c7 87 ea c3 7d 50 9f c0 af 06 e0 e0 2a c8 7e 87 2a 0d 59 c5 b6 d6 20 90 ce f3 f9 45 91 99 d2 cc 10 39 18 0b 5a 6b a5 71 42 28 9d 02 20 e7 1e 90 f3 d3 4b a4 5d 6b 74 0e dd 36 71 22 88 2b ae Data Ascii: ZQ8^?8o3!O{Cw)qm4jd6r~&FY-bx-aZ7jWQ+G7^K4&ruz{8tNR`a9fxR^!\|&[<)qP}P~*Y E9ZkqB( K]kt6q"+
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 3d ce e5 88 64 a4 d2 22 ad da b4 3f 69 51 72 03 5d ec e9 d9 98 23 f7 82 ef b8 68 25 23 41 ee c0 81 ea 61 04 9e 3a 9c 97 28 62 7b 47 7f e7 a5 ca cc 14 25 1b f8 48 b5 c6 c7 52 fc 89 32 cb ba d4 1e 6d 37 ea b8 4d 5a 89 45 d6 28 81 28 f2 73 7b 5d 1b ad 8e bb 15 09 b0 4a 3d ab 16 02 fa 60 1f 3f a8 26 00 03 18 81 33 ca 3c 2f e5 78 75 96 69 0a 92 71 fa b3 6d 3b 71 b6 99 f7 bf 89 d7 d9 79 b9 f2 0c e9 80 c0 10 28 0c 8e 40 4e bb 47 15 f6 f4 d9 9c ba 01 5c f5 a1 6a 3c f3 dc 8b fd 7a f9 99 62 0d e0 fb 5f 6a 6c 9a 34 b3 6c ad aa d2 08 5b 2a 2d 68 d5 a6 bd 76 60 33 05 9d ba d8 d3 53 eb d2 8b 9f 66 5c a4 6f 55 0d 6a e5 43 4b 97 59 fb 81 60 76 69 66 cb d0 5e 9b 13 e6 ca 5d 0f 8a 73 e0 93 2c 04 7b ab 03 99 81 84 52 b3 25 59 0e ad 5a 05 cb 67 5a fa 67 a6 13 48 67 23 d3 08 Data Ascii: =d"?iQr]#h%#Aa:(b{G%HR2m7MZE((s{]J=`?&3</xuiqm;qy(@NG\j<zb_jl4l[*-hv`3Sf\oUjCKY`vif^]s,{R%YZgZgHg#
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 2a 36 20 47 01 16 7c b5 a2 e0 34 c4 4a 6c 38 03 9d 34 88 33 47 d0 f3 9e 42 cf 8e 9e 73 32 9c a0 2a b9 54 d6 94 92 8d a2 4d cd 36 3a 4d 3b 90 9d 1b cb 6e 64 6f a1 52 3b 66 67 fd 1e aa 93 0e d6 34 f7 5b 10 55 bd 4d 58 58 51 00 da 7b 58 7b fa 10 68 f7 c7 7c 7b 43 75 a9 d0 e3 61 8c a6 c9 b0 29 17 f4 2d 25 be 35 84 6d e3 5c a6 13 1d fc 16 f7 89 8a ba 1c 4d 44 51 8a 59 ad db f6 db f6 9b 7e 0e 5b 41 7e d0 55 b9 b6 6a 08 88 7a 20 d0 45 c2 c3 f2 65 38 15 2e ee 00 44 42 b3 f1 46 99 4e 3e 41 c1 1c 7a c5 24 9b 76 00 fb d1 11 53 5f 6c 07 b9 b5 3d a6 5a 53 95 5c 4d e4 01 98 b6 2e 54 73 f3 a1 bb 9c 36 93 17 13 b5 04 69 e5 81 87 da db e6 b2 2f 36 e2 01 ad 50 b1 d2 82 60 19 a4 3d cf 67 3e d7 fd 04 b8 0b b8 84 0c 17 15 43 82 c8 2f 10 11 2f 11 c2 52 1d 0b 07 61 c3 a5 87 06 Data Ascii: 6 G\|4Jl843GBs2TM6:M;ndoR;fg4[UMXXQ{X{h\|{Cua)-%5m\MDQY~[A~Ujz Ee8.DBFN>Az$vS_l=ZS\M.Ts6i/6P`=g>C//Ra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.11	49795	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:13 UTC	550	OUT	GET /aaq/wf/wf-loader-2.7.21-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:14 UTC	745	IN	HTTP/1.1 200 OK x-amz-id-2: iho4hGkkamnvlqrFHns9RnrfTDYDccDhSj1Jy1K3iKSudUoBcvuLX3kR98KLJcVpGzfF0ada7aQ= x-amz-request-id: RNECBYX0DW5Y5TY0 Date: Wed, 02 Oct 2024 13:46:43 GMT Last-Modified: Mon, 16 Sep 2024 04:28:36 GMT ETag: "59ae89307f6be51355e07acf3994f79b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ODQdcT.d6AiA15hD8NatovEvfsHYFam9 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 11901 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1031613 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 5d 3d 65 28 29 3a 28 61 2e 77 61 66 65 72 3d 61 2e 77 61 66 65 72 7c 7c 7b 7d 2c 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 33 31 2e 38 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 Data Ascii: :"/aaq/wf/wf-action-1.8.1.js",raw:"/aaq/wf/wf-action-1.8.1.raw.js"}},"wafer-autocomplete":{meta:{version:"1.31.8"},modern:{min:"/aaq/wf/wf-autocomplete-1.31.8-modern.js",raw:"/aaq/wf/wf-autocomplete-1.31.8-modern.raw.js"},default:{min:"/aaq/wf/wf-autocomp
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 2d 31 2e 30 2e 32 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 2d 31 2e 30 2e 32 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 63 6f 72 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 36 35 2e 31 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 31 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 31 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 Data Ascii: js"},default:{min:"/aaq/wf/wf-clipboard-copy-1.0.2.js",raw:"/aaq/wf/wf-clipboard-copy-1.0.2.raw.js"}},"wafer-core":{meta:{version:"1.65.1"},modern:{min:"/aaq/wf/wf-core-1.65.1-modern.js",raw:"/aaq/wf/wf-core-1.65.1-modern.raw.js"},default:{min:"/aaq/wf/wf
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 64 72 6f 70 64 6f 77 6e 2d 64 72 61 77 65 72 2d 31 2e 31 2e 33 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 64 72 6f 70 64 6f 77 6e 2d 64 72 61 77 65 72 2d 31 2e 31 2e 33 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 31 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 31 2e 32 2e 31 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 Data Ascii: modern.raw.js"},default:{min:"/aaq/wf/wf-dropdown-drawer-1.1.3.js",raw:"/aaq/wf/wf-dropdown-drawer-1.1.3.raw.js"}},"wafer-experiment-scrollview":{meta:{version:"1.2.10"},modern:{min:"/aaq/wf/wf-experiment-scrollview-1.2.10-modern.js",raw:"/aaq/wf/wf-exper
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 34 2e 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 30 2e 36 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6c Data Ascii: {version:"1.4.0"},modern:{min:"/aaq/wf/wf-image-1.4.0-modern.js",raw:"/aaq/wf/wf-image-1.4.0-modern.raw.js"},default:{min:"/aaq/wf/wf-image-1.4.0.js",raw:"/aaq/wf/wf-image-1.4.0.raw.js"}},"wafer-lightbox":{meta:{version:"1.10.6"},modern:{min:"/aaq/wf/wf-l
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 70 72 6f 67 72 65 73 73 2d 6c 6f 61 64 65 72 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 31 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 70 Data Ascii: n:{min:"/aaq/wf/wf-native-da-1.0.5-modern.js",raw:"/aaq/wf/wf-native-da-1.0.5-modern.raw.js"},default:{min:"/aaq/wf/wf-native-da-1.0.5.js",raw:"/aaq/wf/wf-native-da-1.0.5.raw.js"}},"wafer-progress-loader":{meta:{version:"1.2.10"},modern:{min:"/aaq/wf/wf-p
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 2e 31 32 2e 36 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 74 65 6d 70 6c 61 74 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 34 2e 33 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 74 65 78 74 22 3a 7b 6d 65 Data Ascii: .12.6.raw.js"}},"wafer-template":{meta:{version:"1.4.3"},modern:{min:"/aaq/wf/wf-template-1.4.3-modern.js",raw:"/aaq/wf/wf-template-1.4.3-modern.raw.js"},default:{min:"/aaq/wf/wf-template-1.4.3.js",raw:"/aaq/wf/wf-template-1.4.3.raw.js"}},"wafer-text":{me
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 6f 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 32 2e 32 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 32 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 32 2e 32 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 32 2e 32 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 32 2e 32 2e 72 61 77 2e 6a 73 22 7d 7d 7d 7d 2c 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 77 Data Ascii: o":{meta:{version:"3.2.2"},modern:{min:"/aaq/wf/wf-video-3.2.2-modern.js",raw:"/aaq/wf/wf-video-3.2.2-modern.raw.js"},default:{min:"/aaq/wf/wf-video-3.2.2.js",raw:"/aaq/wf/wf-video-3.2.2.raw.js"}}}},"./src/entry.js":function(a,e,r){"use strict";function w
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 65 72 6e 3a 21 30 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 69 7d 2c 72 6f 6f 74 3a 73 7d 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6c 6f 61 64 57 61 66 65 72 73 46 6f 72 57 72 61 70 70 65 72 45 6c 65 6d 28 64 6f 63 75 6d 65 6e 74 29 7d 2c 30 29 7d 29 2c 74 68 69 73 2e 73 79 6e 63 28 29 7d 72 65 74 75 72 6e 20 66 28 61 2c 5b 7b 6b 65 79 3a 22 6c 6f 61 64 57 61 66 65 72 73 46 6f 72 57 72 61 70 70 65 72 45 6c 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 5b 5d 3b 6a 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 76 61 72 20 66 3d 6c 5b 77 5d 7c 7c 77 2c 6f 3d 77 Data Ascii: ern:!0,successClass:i},root:s},window.wafer.ready(function(){setTimeout(function(){e.loadWafersForWrapperElem(document)},0)}),this.sync()}return f(a,[{key:"loadWafersForWrapperElem",value:function(a){var e=this,r=[];j.forEach(function(w){var f=l[w]\|\|w,o=w
2024-10-14 12:20:14 UTC	201	IN	Data Raw: 65 74 28 6c 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6f 28 29 3b 65 5b 72 5d 3d 21 30 2c 6e 2e 5f 61 73 73 65 74 4c 6f 61 64 65 64 4d 61 70 70 69 6e 67 2e 73 65 74 28 6c 2c 21 30 29 2c 69 28 7b 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 22 2b 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 65 5b 72 5d 3d 21 31 2c 61 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 28 61 29 3b 6f 28 29 7d 29 7d 29 7d 29 29 7d 7d 5d 29 2c 61 7d 28 29 2c 70 3d 71 3b 65 2e 64 65 66 61 75 6c 74 3d 6e 65 77 20 70 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: et(l))return void o();e[r]=!0,n._assetLoadedMapping.set(l,!0),i({src:"https://s.yimg.com"+l},function(a){if(e[r]=!1,a)return void s(a);o()})})}))}}]),a}(),p=q;e.default=new p({selector:".wafer"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.11	49798	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	609	OUT	GET /pv/static/ms/trendingNow.yhome-atomic.c9493b0439b3a8ef64a3f6b7f532117c.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:14 UTC	677	IN	HTTP/1.1 200 OK x-amz-id-2: jyYQOiebO7K3kTKHIoCf1Da39wx5Z9UbvOof898M9fUyO1aUrwoh6KbJp3G3VdeApbIijsdebyk= x-amz-request-id: DB1NB18J3SAYE8FH Date: Mon, 14 Oct 2024 07:46:31 GMT Last-Modified: Wed, 12 Jun 2024 01:40:02 GMT ETag: "e1026852c4e85d7df641ed51990b2993" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: text/css Content-Length: 9985 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 16424 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 42 64 5c 28 6e 5c 29 2c 2e 42 64 5c 28 6e 5c 29 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 44 69 72 74 79 53 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 2c 23 65 30 65 34 65 39 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 74 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 5c 23 30 30 35 37 62 38 5c 29 5c 3a 5c 3a 62 3a 3a 62 65 Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$\$srchFujiDirtySeagull${border-color:#e0e4e9;border-color:var(--dirty-seagull,#e0e4e9)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdendc$\#0057b8$\:\:b::be
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 70 78 5c 29 5c 3a 5c 3a 62 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 33 30 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 65 6e 64 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 73 74 61 72 74 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c Data Ascii: {border-left-width:112px}#atomic .Bdrs$2px$\:\:b::before{border-radius:2px}#atomic .Bdrs$30px${border-radius:30px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bdrsbend$8px${border-bottom-right-radius:8px}#atomic .Bdrsbstart$8px${border-bottom-l
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 2e 63 6f 6d 2f 70 76 2f 73 74 61 74 69 63 2f 69 6d 67 2f 66 69 72 65 49 63 6f 6e 46 69 6e 61 6c 5f 5f 61 6c 70 68 61 5f 62 67 2d 32 30 32 33 31 31 30 31 30 33 33 31 2e 67 69 66 27 29 29 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 42 67 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 57 68 69 74 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 2c 23 66 66 66 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 37 65 31 66 66 66 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 65 31 66 66 66 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 57 68 Data Ascii: .com/pv/static/img/fireIconFinal__alpha_bg-202311010331.gif'))}.active .active_Bgc$\$srchFujiWhite${background-color:#fff!important;background-color:var(--white,#fff)!important}#atomic .Bgc$\#7e1fff${background-color:#7e1fff}#atomic .Bgc\(\$srchFujiWh
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 24 73 72 63 68 46 75 6a 69 42 61 74 63 61 76 65 5c 29 7b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 2c 23 32 33 32 61 33 31 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 42 61 74 74 6c 65 73 68 69 70 5c 29 7b 63 6f 6c 6f 72 3a 23 35 62 36 33 36 61 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 2c 23 35 62 36 33 36 61 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 43 68 61 72 63 6f 61 6c 5c 29 7b 63 6f 6c 6f 72 3a 23 34 36 34 65 35 36 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 68 61 72 63 6f 61 6c 2c 23 34 36 34 65 35 36 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 44 6f 6c 70 68 69 6e 5c 29 7b 63 6f 6c Data Ascii: $srchFujiBatcave\){color:#232a31;color:var(--batcave,#232a31)}#atomic .C$\$srchFujiBattleship${color:#5b636a;color:var(--battleship,#5b636a)}#atomic .C$\$srchFujiCharcoal${color:#464e56;color:var(--charcoal,#464e56)}#atomic .C$\$srchFujiDolphin${col
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 62 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 30 5c 2e 36 38 37 35 72 65 6d 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 38 37 35 72 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 30 5c 2e 38 37 35 72 65 6d 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 32 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 36 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 38 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 23 61 74 6f 6d 69 63 20 Data Ascii: 00\){font-weight:700}#atomic .Fw$b${font-weight:700}#atomic .Fz$0\.6875rem${font-size:.6875rem}#atomic .Fz$0\.875rem${font-size:.875rem}#atomic .Fz$12px${font-size:12px}#atomic .Fz$16px${font-size:16px}#atomic .Fz$18px${font-size:18px}#atomic
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 30 5c 29 5c 3a 66 6f 74 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 31 36 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 38 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 39 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 61 68 5c 28 32 32 70 78 5c 29 7b 6d 61 78 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 66 6c 61 6d 65 54 Data Ascii: atomic .Mstart$0$\:fot:first-of-type{margin-left:0}#atomic .Mstart$16px${margin-left:16px}#atomic .Mstart$4px${margin-left:4px}#atomic .Mstart$8px${margin-left:8px}#atomic .Mstart$9px${margin-left:9px}#atomic .Mah$22px${max-height:22px}.flameT
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 79 5c 28 37 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 37 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 31 31 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 31 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 32 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 2e 77 61 66 65 72 2d 74 61 62 73 2d 74 61 72 67 65 74 20 2e 77 61 66 65 72 2d 74 61 62 73 2d 74 61 72 67 65 74 5f 50 74 5c 28 31 32 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 61 66 65 72 2d 74 61 62 73 2d 74 61 72 67 65 74 20 2e 77 61 66 65 72 2d 74 61 62 73 2d 74 61 72 67 65 74 5f 50 74 5c 28 38 70 78 5c 29 7b 70 61 64 Data Ascii: ){padding-top:7px}#atomic .Py$7px${padding-bottom:7px}#atomic .Pt$11px${padding-top:11px}#atomic .Pt$2px${padding-top:2px}.wafer-tabs-target .wafer-tabs-target_Pt$12px${padding-top:12px!important}.wafer-tabs-target .wafer-tabs-target_Pt$8px${pad
2024-10-14 12:20:14 UTC	885	IN	Data Raw: 63 20 2e 57 68 73 5c 28 6e 77 5c 29 2c 2e 45 6c 6c 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 5c 24 73 72 63 68 48 6f 6d 65 54 6e 52 6f 77 5c 29 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 34 70 78 29 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 30 30 5c 25 5c 29 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 31 5c 2e 32 35 70 78 5c 29 7b 77 69 64 74 68 3a 31 31 2e 32 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 31 32 70 78 5c 29 7b 77 69 64 74 68 3a 31 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 32 70 78 5c 29 7b 77 69 64 74 68 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 36 35 70 78 5c 29 7b 77 69 64 74 68 3a 31 36 35 70 78 7d 23 61 74 6f Data Ascii: c .Whs$nw$,.Ell{white-space:nowrap}#atomic .W$\$srchHomeTnRow${width:calc(50% - 4px)}#atomic .W$100\%${width:100%}#atomic .W$11\.25px${width:11.25px}#atomic .W$112px${width:112px}#atomic .W$12px${width:12px}#atomic .W$165px${width:165px}#ato

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.11	49803	87.248.100.215	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	1053	OUT	GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=900%2Cseamless&device=desktop&intl=us&rid=4vh116tjgq33s&site=fp&t=1728908412859 HTTP/1.1 Host: currently.att.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
2024-10-14 12:20:14 UTC	1131	IN	HTTP/1.1 204 No Content expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-xss-protection: 1; mode=block x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Mon, 14 Oct 2024 12:20:14 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=att&region=US&lang=en-US&device=desktop&yrid=7l9isupjgq33u&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.11	49799	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	627	OUT	GET /rz/p/att_homepage_en-US_s_f_p_bestfit_homepage.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:14 UTC	691	IN	HTTP/1.1 200 OK x-amz-id-2: kXC8KIlaQDBmzQyyYFJNn7BB0lfH0w2arCYAGP3JAESw6P45CTbxclvZmFaJ/20q867cMlMe314= x-amz-request-id: 58GPNQ7V8T70H7CZ Date: Mon, 14 Oct 2024 08:35:52 GMT Last-Modified: Sun, 13 Oct 2024 21:31:08 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 8999 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "16766a70949dcdcdf1ea0b15299b6b26" Expires: Mon, 14 Oct 2024 23:00:00 GMT Age: 13463 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000
2024-10-14 12:20:14 UTC	728	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2b 00 00 00 30 08 06 00 00 00 49 c2 5c 58 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 01 2b a0 03 00 04 00 00 00 01 00 00 00 30 00 00 00 00 96 be 57 8a 00 00 22 91 49 44 41 54 78 01 ed 5d 0b 7c 15 c5 d5 3f b3 7b ef 0d 37 3c 15 f0 81 02 a2 82 60 c0 d6 af da 5a eb 8b 0a 04 6c 6b ad da 26 01 1f 24 20 56 5b db fa e8 d7 56 0b 8d 8a da d6 fa 6e a9 20 02 ad 4a 00 e1 b3 7e 5a 4d c2 4b d4 af 56 ab 16 93 f0 92 37 a2 16 79 25 24 90 dc c7 ee 7c ff d9 bd bb 77 1f b3 37 a1 42 8c 65 e7 97 9b 9d 39 73 ce 99 d9 d9 9d 33 67 ce 9c 99 25 0a 43 d8 02 61 Data Ascii: PNGIHDR+0I\XsRGBDeXIfMM*i+0W"IDATx]\|?{7<`Zlk&$ V[Vn J~ZMKV7y%$\|w7Be9s3g%Ca
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 10 52 bd e4 0c da 00 65 ca f4 36 60 85 28 87 aa 05 d2 ec 26 08 1d af 01 7a 27 cd bd 78 6b ce 22 78 80 66 a5 84 f6 aa 9c ed 16 66 1e b2 16 e0 1a bb 51 3a 60 a2 04 46 bc 72 56 cb 19 9b 9c 85 65 a7 81 e3 97 77 82 a0 5a f8 a9 04 15 d1 4e 3a ad cf 5f 9c 05 84 f1 c3 d8 02 65 af 77 c5 c3 1e ef 2f 81 e5 d6 aa 26 bd 8d c5 11 fa a2 9f 0e 10 4e a1 66 25 6d 98 10 78 28 5b 60 62 7c fd 89 9c f8 a5 81 3c 15 36 cd 9b 97 9d 06 36 a7 44 e6 99 5e 04 47 1a 96 74 f6 02 29 b4 0c b0 2d 58 01 d4 f0 62 f7 21 ae 0f 40 fa db 88 17 90 c2 e6 50 79 41 76 0a 78 75 d5 50 4a 22 cf 1b 18 db 8d a5 f1 c7 6d b0 58 6d 5c bb f8 e7 b0 79 79 35 04 2c 36 aa 33 a9 62 c4 0e 03 b7 a4 72 34 e9 ec 4b 36 9d 11 51 ea 68 fe c8 e7 cd fc aa 91 b0 fb 5f 85 f8 17 b0 52 19 27 ae fc 92 e6 8f 7a 96 c6 be 76 14 Data Ascii: Re6`(&z'xk"xffQ:`FrVewZN:_ew/&Nf%mx([`b\|<66D^Gt)-Xb!@PyAvxuPJ"mXm\yy5,63br4K6Qh_R'zv
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 87 14 06 3a bf 56 eb 63 70 e8 00 73 52 43 31 78 49 06 1c 51 04 e7 e3 cb 2f 92 3f c3 89 d1 d5 5f 47 df f3 09 2a 41 66 f8 fb e0 5a a6 ae 1a 93 4a a6 56 a2 db db 82 4a e4 bb 02 e7 e3 b8 a6 cf 75 c1 0e 22 c1 52 e9 45 a8 c7 95 01 24 27 90 c6 96 8d 57 eb 0c c1 e9 c4 31 85 6d cd 64 2d ad ff 1d f5 c3 6a b0 64 a6 92 21 40 fe d9 9a a6 bd 3c 5e a9 99 51 5e b0 2a e6 e4 63 c5 17 7c 97 ab a5 4a ed fd 9a 96 5e 81 fa 64 04 95 95 eb be 82 df 79 69 8d 2f 2f 53 ea 1e 10 74 ee 5c 77 2a bd b2 ee 3b a8 9b ff 1d 32 d0 58 92 e7 c7 9f 74 53 98 29 c5 98 02 11 81 58 16 d8 87 a4 e6 97 d1 8c 7f c3 d9 d3 98 d2 31 89 70 41 39 dc f3 22 05 75 1e e6 30 f6 ae 5b 2e 46 a3 ae be 5a 72 3a 03 0c fb f9 e0 c4 97 66 a7 63 41 1d 9c fb 1e b8 c1 47 c9 5b 6c f3 2b a9 9e 09 81 f2 10 d2 79 36 ac d5 08 Data Ascii: :VcpsRC1xIQ/?_GAfZJVJu"RE$'W1md-jd!@<^Q^c\|J^dyi//St\w*;2XtS)X1pA9"u0[.FZr:fcAG[l+y6
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 4d 69 ed 64 ae eb 37 a3 6e 23 bd 78 80 75 a5 03 cd 57 03 fe 60 cb 1e 82 61 9f 1f eb c5 11 69 dc ef 1b 98 84 de 17 8d a8 eb d2 e9 f4 20 4c e9 7e 8e 76 fb 9a 17 17 2d d9 9b ef c5 0a 37 d1 2c 2b 4f 08 c1 e6 5d fa 35 e0 6d 81 5c 57 a6 70 7b 1f a0 2b 23 93 c0 43 64 27 c9 1e 12 60 ff be a0 32 98 07 7a 48 bf 69 64 5b ff b4 00 e3 37 a3 77 e9 7b 70 8f 10 41 68 5f 1f 35 0e 93 d6 33 12 f9 53 a0 a0 12 b4 7a 20 ff e5 81 82 4a d8 86 12 e9 2b 04 b9 2b 30 5a 45 83 1d a7 11 14 57 f7 a1 e6 e6 b9 c0 f1 bc 48 ac 19 cf 63 91 41 9b d0 ce 84 50 89 ba f8 88 04 63 2d d4 ed e8 97 5d 70 4e 58 88 92 04 ce 56 b9 a0 41 ae 07 c2 98 6d b9 1e b8 08 1c 89 a0 41 84 79 06 11 41 c2 19 84 15 17 ae 20 ee 60 b9 34 5c b3 a4 a7 b1 77 d4 fb f2 89 7b 53 d4 9b dc 44 ed 9f 9a d9 3c 70 3b 0c c8 cf a1 Data Ascii: Mid7n#xuW`ai L~v-7,+O]5m\Wp{+#Cd'`2zHid[7w{pAh_53Sz J++0ZEWHcAPc-]pNXVAmAyA `4\w{SD<p;
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 50 e5 c2 cf e5 17 e4 2b 0d 83 61 8e 29 58 f9 70 c9 98 63 f1 60 3d ad 98 eb ca d8 1a e8 d1 b0 e5 c1 ff 8c d8 4a c4 5f c6 96 98 db a1 f2 9f 05 6d ea 1c 4c 7d 96 b8 f0 85 4d 87 d3 29 2e 98 95 70 0a 63 03 16 60 5b e3 8a 5b e3 99 f4 76 3e 9e 99 5b bd b6 78 2a 18 0c 72 85 a0 15 da 9c fb 01 85 dd ca 13 38 1d 83 fb ba d5 03 45 93 d0 02 d8 01 17 fb e0 9f 31 20 72 ec d1 cf a0 0a 3e 17 13 d8 4f f2 b0 a4 e0 1d 5c 8c da 2a 4c 99 fd d0 f6 be cd 22 a1 28 0a 9e b7 3f a0 c3 0f 11 f6 2e 7f 0e ba a9 46 13 65 f0 c3 04 33 4d 0e 1e e6 f0 a0 c7 80 e2 0f cd 8d 62 a0 91 86 0c 1f 2e e5 a7 a5 74 29 1d bc f9 a5 70 68 7c db 44 29 e5 d8 7a 24 4e 03 4d a7 f8 6a 4c b9 e7 68 ba 5e 91 6a d1 36 94 29 35 01 d3 51 69 dd b0 1e 46 ca 72 79 16 a0 1c be 42 6b ab 56 d0 b8 c5 c3 7c 38 62 45 aa a4 Data Ascii: P+a)Xpc`=J_mL}M).pc`[[v>[xr8E1 r>O\L"(?.Fe3Mb.t)ph\|D)z$NMjLh^j6)5QiFryBkV\|8bE
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: be a4 a6 5b c6 a4 77 1a b6 4c f0 52 b7 6b 5a 0d 30 b4 bb 2a c1 b6 8d b9 fc f4 17 5d 20 24 9e 48 0c 79 1f da d5 5d 5e 78 47 49 f7 ef d7 e5 2e bc ec d9 19 c9 c1 55 6c 0b cb 8f ff c0 49 a2 1c 1d fd 6f f0 ab 73 c2 da 1a 87 06 bb ba 4b 8f f8 4f 0d 7c 55 d9 91 8b 0e 65 6c ce 95 ef cc 33 85 95 58 f5 51 a2 97 a2 83 be ef cc 6c 73 5c 9c 8d b4 a3 69 b8 8d cf d8 0a 3b 1e 14 11 2b 72 b2 7d 75 0c e7 42 39 cf 00 0f d2 4e 5a 35 ae 6b 01 d3 c7 56 56 10 45 7d 0d 01 a1 e2 e1 89 8e 78 30 01 82 58 6f 31 57 50 c5 a9 ab 32 97 10 c1 2e cf e3 d3 14 74 8f 5e 0d 4c d0 9e 12 5b 0b c3 fe 07 22 da 6a e0 3c 2b ac 0e a6 0c 2f 63 16 e0 6f 25 f0 18 cd c6 74 fc 6f 4e 12 d8 30 4a 9c 69 2b ae 71 fd 4a 2b fe 59 5c 67 a5 0a aa 51 6e ee 77 9c d1 f4 ef 3d 9b 71 46 f6 54 b2 ff 94 61 53 d1 f6 c2 Data Ascii: [wLRkZ0*] $Hy]^xGI.UlIosKO\|Uel3XQls\i;+r}uB9NZ5kVVE}x0Xo1WP2.t^L["j<+/co%toN0Ji+qJ+Y\gQnw=qFTaS
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 58 75 c8 6a 87 95 3a 2c 2d 50 54 09 67 40 e1 a5 4f 9b 21 a0 7a d1 ce 8d 45 90 35 ee 69 ba 51 30 8e 1c 09 3c 5a 87 68 1c df dd 6d cf de bd 15 40 35 6d a2 8c 2d 3d bb c7 c9 37 fe f5 b0 54 ba ed 4c cb a2 75 5f c0 d9 e4 d9 45 07 07 29 e4 ee b4 8c 5c 75 40 c3 68 47 6a 81 50 58 75 a4 a7 f1 59 d6 a5 78 c9 f9 f8 20 c6 08 08 a9 11 39 3b 2d ec 1d 38 26 e7 3e 59 55 c7 f3 cd 9d 76 d6 eb 63 f7 ee dd 7b 17 f2 4f 10 38 b0 33 cc ef 8c dd f6 e5 ac 15 5f 2d 19 c3 43 0c c3 f6 93 9b e4 2c d9 be 78 4f e5 99 9c 4b 42 72 c2 10 da 8e 2d 10 0a ab 76 6c ec 8e 5d 54 fa 86 56 eb 27 7c cf a2 6c 2c 61 55 4c 86 fb 49 03 bf 0a 06 d4 27 44 1e 0c a8 bb 38 53 7f f8 52 8f 01 f3 65 b8 ed 0d 9b d0 6d d5 d1 5a a3 36 56 56 2e 0c c4 7f 9e b6 b3 a0 49 96 17 c2 3a 4e 0b 84 c2 ca f8 0c 19 fc 91 18 Data Ascii: Xuj:,-PTg@O!zE5iQ0<Zhm@5m-=7TLu_E)\u@hGjPXuYx 9;-8&>YUvc{O83_-C,xOKBr-vl]TV'\|l,aULI'D8SRemZ6VV.I:N
2024-10-14 12:20:14 UTC	471	IN	Data Raw: 46 53 61 5d 0d bc 35 1f c2 00 2d 4e bd c4 e6 5f a1 1d 71 3a 0d 71 f3 0b 3b 5a 73 46 eb ca f0 b4 4e 09 75 f3 23 2a 5a 0a 8f 70 dd 74 4e e4 b0 73 71 5e 0e 3e 58 d5 13 c1 31 15 34 e8 21 20 bb 38 8e b4 e1 74 1b ca db 0c 2d ee 1e 8a c4 cb 20 5b c5 54 b3 04 84 f8 f0 ea c8 d7 0d 16 e2 9f a0 15 df 10 34 0e ce b3 a1 61 24 6c 81 cf 75 0b 1c 99 c2 2a 95 d1 3c dc 82 c4 9c d2 39 ed 3c 4a e6 2c 6a ae df 87 13 38 e7 42 6b 9a 6d 08 0b 62 e5 64 d9 85 ac ef 0f 5a 53 2f eb fb 7b 96 66 44 9e b3 ab 28 fd 3b bc 31 d0 cc d4 cb 60 88 3f 21 f3 9b 62 bc 45 9a 66 da ad c6 be 76 14 84 d0 a9 10 5e ef d3 8c 91 0d 8e 37 0c b6 2a ec 78 2f aa fc 0d a5 9b 05 9f 6e a8 0f c7 f5 5c 1b 47 b8 2f 70 de 07 e9 1a 68 78 2d 36 3c 8c 84 2d f0 39 6f 81 23 53 58 59 82 c5 75 80 1f 8f 43 23 79 c5 75 8e Data Ascii: FSa]5-N_q:q;ZsFNu#ZptNsq^>X14! 8t- [T4a$lu<9<J,j8BkmbdZS/{fD(;1`?!bEfv^7*x/n\G/phx-6<-9o#SXYuC#yu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.11	49801	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	622	OUT	GET /pv/static/img/header_1x-1479864976616.min.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:14 UTC	938	IN	HTTP/1.1 200 OK x-amz-id-2: DU0r/npCwh3JTmp3PO96IeMJyNHYauaS2GYS95vXUyF8l6FaYkz99XbwawIB5vHfYg/dYE9zpNk= x-amz-request-id: EWWGGAWTT5N7S1N7 Date: Fri, 11 Oct 2024 11:28:56 GMT Last-Modified: Thu, 19 Apr 2018 17:59:57 GMT ETag: "7f972abeceed50ca083138400b84d1c0" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-meta-created-date: Wed, 23 Nov 2016 01:36:21 GMT x-amz-meta-mbst-etag: "YM:1:174fb767-5e6f-47ee-959f-e24098938cca000541edea87a377" x-amz-meta-x-ysws-mbst-vtime: 1479864981365623 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Content-Length: 910 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 262279 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:14 UTC	910	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 ca 08 03 00 00 00 85 41 00 a9 00 00 00 f6 50 4c 54 45 00 00 00 b4 b4 b8 88 88 8c b4 b4 b7 88 88 8c bb bb bb 88 88 90 00 00 00 0a 0a 0a ff ff ff ff ff ff 00 00 00 ff ff ff ff ff ff 8e 8e 8e 48 48 53 ff ff ff 00 00 00 ff ff ff ff ff ff ff ff ff 8d 8d 8e 48 48 52 ff ff ff ff ff ff ff ff ff 8d 8d 8e 49 49 52 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 8d 8d 8f 49 49 53 ff ff ff ff ff ff ba ba ba ff ff ff ff ff ff 48 48 52 ff ff ff ff ff ff ff ff ff ff ff ff 8d 8d 8e 48 48 53 ff ff ff 8d 8d 8e 48 48 53 8d 8d 8f 49 49 52 ff ff ff ff ff ff 8e 8e 8e 48 48 53 8e 8e 8e 48 48 53 8f 8f 8f 49 49 52 ff ff ff ff ff ff 8d 8d 90 48 48 54 8e 8e 8e 4b 4b 52 ff ff ff 8f 8f 8f 4a 4a 53 ff ff ff 91 91 91 48 Data Ascii: PNGIHDRAPLTEHHSHHRIIRIISHHRHHSHHSIIRHHSHHSIIRHHTKKRJJSH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.11	49802	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	630	OUT	GET /kr/assets/spritify-sprite-light-fd484ded-e3dce7a4.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:14 UTC	711	IN	HTTP/1.1 200 OK x-amz-id-2: t1vKPxcmEANFPUZ31CE8fhmEUmc3oBfLhcNGqHlz8hAgb4xBQEzJz7uazlf0BGnr3Gxp8Zd8muH/0NXy79V5ybrPnpCThjmISV6KrVaVv24= x-amz-request-id: CD6YHTTRK0K3BHES Date: Fri, 11 Oct 2024 13:35:49 GMT Last-Modified: Sun, 20 Dec 2020 01:14:52 GMT ETag: "c52b9648030733c6235492f484942207" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 11967 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 254667 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 06 cc 08 03 00 00 00 46 f2 64 05 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 47 70 4c f0 52 33 35 a3 e4 0d 9a f8 2d 9b e7 64 00 aa 05 04 05 1d 48 93 5e 0e a6 1a 9f d8 60 01 d2 65 00 aa 10 10 12 1e a0 db 64 00 aa 64 00 aa 64 00 aa 1d 21 26 01 34 a4 1b 9f db 17 91 e9 5d 07 bc 64 06 b4 61 05 b0 64 00 aa 1a a0 d8 1a a0 d8 64 00 aa 63 02 ac 64 00 aa 19 9f df 67 08 ba 64 00 aa 64 00 ab 0b 66 ff 64 00 aa 1a a0 d8 64 00 aa 1d 21 26 64 00 aa 1b a0 d8 1b a0 da 1b a0 d9 60 c7 fe ff 8a 00 1a a0 d8 ed 54 27 fa 00 5a 1d a1 db 63 00 a9 1b a0 d9 1b 1d 21 65 00 ab 1a a0 d8 d8 23 26 1a a0 dc 60 01 d2 63 00 aa 16 9b e6 1a 1d 22 e0 2d 23 5e 06 Data Ascii: PNGIHDR FdgAMAasRGBPLTEGpLR35-dH^`eddd!&4]daddcdgddfdd!&d`T'Zc!e#&`c"-#^
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 39 4d 8d d7 9a 1b 10 a7 97 6b 0c 57 6f 91 f8 6a 39 0e 44 7b 8b 0f b0 67 24 6d e9 9f 4e 8f f4 20 9f 8f 4f c5 53 8b 8d f4 53 5b 12 08 c3 74 d2 21 c7 87 4f 79 1b 4f 05 f5 58 32 d4 e3 00 7d 8e 7a 74 98 19 c0 a4 bb 36 15 d4 02 4d 23 d9 3a 6d 8c e0 ee e9 d5 1f 7e 58 25 3b 4b 22 0b b5 38 78 3d 25 1d 16 15 cc 02 0e 4e 4f 89 dd 06 74 5b ed 24 c1 c3 af 13 c6 ee 88 cd c9 a5 f4 f2 65 bd 8f 0f d5 2c a7 97 02 36 1f ee 73 b9 83 9d fb 1d e8 73 84 8c c1 ed ca 1f db 57 fa ba 18 20 11 e0 bd af 03 36 35 93 45 45 45 0f 1e fe 7a 03 f0 eb c3 07 70 30 69 ca ce 01 02 33 79 4c f8 e9 df 80 9f 30 21 3f 53 8c db 09 a1 48 07 4f 60 60 84 a1 a1 a1 75 3b 61 1d 1a 19 61 a8 a8 18 a1 45 dd c4 7f 99 09 f0 21 50 b4 4e fd cb cf 22 79 d6 ae 61 11 a1 d9 3c f5 f4 42 7e 08 3c 65 84 1f 7f 64 04 f0 Data Ascii: 9MkWoj9D{g$mN OSS[t!OyOX2}zt6M#:m~X%;K"8x=%NOt[$e,6ssW 65EEEzp0i3yL0!?SHO``u;aaE!PN"ya<B~<ed
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: 94 44 29 0b 8a 21 ee 6a cb 0a 31 17 61 84 b9 6c 99 10 d9 5e 46 90 22 91 90 f0 cf 58 01 25 17 b0 65 70 a1 cc 0d cc 86 8b 8b 18 a3 84 10 e9 72 85 f4 81 65 0c 2f 8c e2 89 2f 8d 43 25 25 09 4a 96 c0 9b c8 dc b8 be 56 43 0d c3 48 42 bd d9 ec 38 6c a4 b2 6c 99 1f b6 a3 59 3d 0f 12 78 d9 45 5b e6 20 ff 11 20 80 26 34 ae fb 88 e4 42 84 bf 40 83 0b 61 ce 20 e8 61 26 58 98 6d f6 30 51 68 bc 17 32 13 90 46 61 3c e3 44 8d 83 3e 49 f6 8f 8e 4a 1f 78 a6 0c f7 ba 82 0e 99 b2 42 e5 1e 6f 73 45 57 81 a5 46 96 be b0 65 c8 e7 dd 8c 5f 73 d5 08 60 ca 7d 83 63 55 02 bc ee 64 f2 e1 b1 83 5d 01 aa 0e de 50 0d c3 af 0f aa aa 04 84 83 83 01 4a 18 38 a8 da 3d 78 3d e6 c4 c0 30 55 80 7b 0f 82 23 0e 30 1f ef 81 b1 01 61 a4 8c 82 09 83 5e b9 e9 04 0b 63 c3 0e 98 8c 9a d7 bb e0 85 23 Data Ascii: D)!j1al^F"X%epre//C%%JVCHB8llY=xE[ &4B@a a&Xm0Qh2Fa<D>IJxBosEWFe_s`}cUd]PJ8=x=0U{#0a^c#
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: ff b1 73 75 2d ae 22 4d d8 15 83 47 82 c9 80 4e 26 6a c6 c9 90 84 a8 20 18 89 c8 e4 42 bc 11 bc ca ff 16 6f a5 f1 3f 78 e3 4f 78 ab b5 d5 56 db 39 cb 59 96 77 cf b2 05 e7 e4 a3 9f f4 47 75 57 d5 53 dd ed 98 b5 cf 25 31 67 eb 23 5e 14 b5 cb 5e 51 39 35 28 54 1e 16 58 6c 8d 28 03 b1 0b 4e 70 74 58 00 76 29 ab a5 df 2e 94 76 8c 3c 01 58 65 ad 3f 38 a7 b2 21 7e 2a 63 0f d3 02 fc 10 3c 42 5a c7 a2 9a 5b 13 bb 28 ba 77 4e 50 59 3c 97 94 ca f8 00 9b 00 ec a8 44 e0 9c c4 73 35 e1 47 1d 20 74 7d 30 00 4f af a7 24 6e 68 82 93 d3 b8 d6 3d 6e 01 10 3e 35 84 82 74 9e 4f 76 80 bc b4 31 9d 98 cf 65 07 88 22 91 3d d5 03 40 15 05 56 b8 e9 01 9a ba e4 40 08 00 1c 08 53 12 12 2f c2 a2 73 1f 13 29 0b 9b 38 10 af 13 d3 d3 35 cf ec 3f b2 1c 88 ae 2d 3b 10 0b 24 d1 a4 04 bf b2 Data Ascii: su-"MGN&j Bo?xOxV9YwGuWS%1g#^^Q95(TXl(NptXv).v<Xe?8!~*c<BZ[(wNPY<Ds5G t}0O$nh=n>5tOv1e"=@V@S/s)85?-;$
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: a2 38 f8 ad 7f e7 93 30 f8 e6 7f 6a e9 92 16 d8 1e c7 3c 01 e5 d2 a8 42 9a ae e7 15 c2 29 db 4c cb 82 5b 17 b6 a7 0a 82 ec 24 75 91 ce eb 70 ab b8 37 93 34 47 ce 94 c3 84 15 24 fa 82 d0 a6 e1 f8 a8 50 19 73 18 19 13 48 7c ae de 1c a3 80 29 c3 64 8b e3 0a 30 dd 30 ed 20 0a 5c a5 b1 01 64 d2 08 21 c0 99 7e 88 2a 29 2a eb 08 5f 74 4e ab 70 d8 16 83 68 52 e0 1a dd c8 51 f9 87 0e e1 52 e0 94 91 6f 50 ce cd a1 29 df 78 c2 b0 c6 45 7c a4 85 c3 a2 8d 51 69 73 dd 7e 99 5b e1 f7 7c 54 40 23 9d 1f 8c f0 89 20 d9 a4 f4 cb 26 5d e6 23 7c c4 d7 03 72 02 c0 fa d4 1a 83 c1 df cd 01 78 b8 41 ab 21 36 00 6f 1f 9b ed e8 16 00 bc 16 91 78 bc d0 07 a1 df 15 c4 1d 1f ce 8b 81 6c da dc f8 8c 8e 8f ca 82 9a d1 b4 77 68 bd 72 bc 87 49 13 56 29 10 1a a7 1f 46 e9 e8 0f 30 f4 ef 12 Data Ascii: 80j<B)L[$up74G$PsH\|)d00 \d!~)_tNphRQRoP)xE\|Qis~[\|T@# &]#\|rxA!6oxlwhrIV)F0
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: ba 65 d5 23 b0 23 3f ce 46 85 7f b5 df 75 b1 e7 c8 50 1c 8e 59 38 68 bc 19 ec f2 c6 b5 64 9b 17 20 27 4b d3 0f 63 69 a2 e6 ea 65 d9 c2 b0 05 19 87 6f f9 ff 65 bd e3 fe 93 5f 94 4b b6 28 ad bd 2c 97 13 e3 c5 a1 f4 3a 7b 9c 71 77 a4 00 d7 f7 d9 1c 7e 42 5e 74 ed 01 10 0f c6 95 e0 9f 9f de 3e fe c7 de 15 bc b6 cd 2c 71 f9 f1 39 12 24 c8 ca 21 b1 c1 31 b1 31 ae 6f 02 53 23 30 f5 c9 94 42 88 40 09 41 7e a5 06 1d 5c 83 0e 45 97 62 87 0f 9b 96 90 52 7c f0 b1 e4 d6 43 0e bd 17 be 43 ff 07 43 1b 7c cd 21 f7 d2 3f a0 e4 f8 66 57 bb 92 56 da 95 fa d2 d7 d7 e4 fb 32 25 a9 ad f9 69 76 66 76 76 77 76 57 d1 86 00 49 61 84 a0 db db 39 29 0a 90 22 42 fc db 51 70 30 80 40 08 b9 3d 09 20 42 e8 ed 3c 00 16 42 6f e7 02 90 90 7a d8 cc 79 00 49 89 fc 39 2f 17 c0 84 f8 ad 02 6c Data Ascii: e##?FuPY8hd 'Kcieoe_K(,:{qw~B^t>,q9$!11oS#0B@A~\EbR\|CCC\|!?fWV2%ivfvvwvWIa9)"BQp0@= B<BozyI9/l
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: dd c2 9b 65 30 e9 dc 45 0f 26 b3 0f b7 23 44 35 58 36 53 9b 89 87 df 11 02 06 b7 6a 67 6b ab 83 81 95 1a 67 0f 86 ee 9d 14 eb 9c 7c 72 2b bf ac 87 4f 37 25 1f a8 92 d6 99 4b c5 7c 5c 44 4e 65 1f 48 6a 2e d5 48 23 06 aa 31 7b a3 fe a6 68 70 c8 38 b1 6d 3b b6 7f 11 cd c4 32 00 3b 40 ad 64 11 2d 74 9d 54 b2 8c 36 59 98 6d 97 f6 32 af b0 7f cb d6 60 36 44 b7 d4 c4 c6 db 4e 25 fa 64 59 83 f3 84 dc fa 72 d9 20 2b 12 e8 e1 c4 46 9c 8f 2b 4b 6d 17 15 a5 d8 46 9d a1 ca 2e 10 a0 bf 64 88 54 f7 b2 a1 c6 10 3b 6a 24 60 2a a5 0e be 10 dd 76 d6 2a 64 45 03 ec 6f 6f a3 bf 64 d9 89 55 8e d6 89 6d 11 c9 1d 86 2f 0b f7 90 e2 94 0d 50 d5 da 7d 07 74 53 32 e6 9f 05 34 37 30 40 c8 07 04 06 7c 4e 21 0c 30 c5 7c d3 57 62 60 f1 d9 d6 20 d0 b3 6f 27 14 99 db c1 e1 0e 1e 3a 59 a0 Data Ascii: e0E&#D5X6Sjgkg\|r+O7%K\|\DNeHj.H#1{hp8m;2;@d-tT6Ym2`6DN%dYr +F+KmF.dT;j$`vdEoodUm/P}tS2470@\|N!0\|Wb` o':Y
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: a3 de 69 6f b4 01 1f 47 24 08 46 a7 3d b8 cb 27 00 28 08 09 a5 82 c0 53 22 01 ee ee 9d 82 1a 27 20 be 87 4a 82 6f 1f 41 dc 47 62 45 8e be 8a 8d e8 0d b1 a6 c8 70 f5 d6 76 22 72 66 27 28 ff 8c 04 60 be 7d 9b 7a e6 b8 b4 f1 ed db 46 3a 60 7f ff 97 01 c8 5b 58 7d 40 ca ab 62 d7 f6 f7 d7 04 f6 6d 20 5a 7b bc bf ff 78 0d 7f 8c bd c3 4a 7e fb 6d 1f d3 37 fa ff 5b 99 7d 8b 6f 3a 20 b3 88 6c 25 7f d4 cc 5f eb ea 1f ad ee 8c 80 f9 3f 04 ed ad a6 3f 3e 84 9f 3f f0 de 20 f8 ee e2 35 fd f8 fa e2 1d 07 b0 77 41 11 af 2f 2e f6 a4 6f 5e 37 13 00 00 0a 69 49 44 41 54 14 84 88 4f 11 62 be 8f 48 e3 63 44 2a 1f 23 f6 d2 eb 71 ef cf bf c1 0c 30 d3 8a bd 6c 3f 65 79 fa 75 56 5d 65 d7 76 76 bc 08 11 99 31 99 19 d5 77 83 5e bd fb 57 2a ff cd c5 c5 33 42 af b8 80 8b bf fe 24 f4 Data Ascii: ioG$F='(S"' JoAGbEpv"rf'(`}zF:`[X}@bm Z{xJ~m7[}o: l%_??>? 5wA/.o^7iIDATObHcD#q0l?eyuV]evv1w^W3B$
2024-10-14 12:20:14 UTC	1300	IN	Data Raw: d1 51 16 40 11 12 60 34 ca 04 42 23 72 20 30 92 06 60 23 a9 00 32 92 01 8c 8e 6e da ac db 9e 53 62 f3 a7 9d f6 dc 6e 46 02 4f 38 20 f9 92 3d e7 81 26 fd 5d 73 4d 21 50 71 02 31 25 80 d9 08 44 06 50 22 b1 f0 24 10 f3 43 81 cc 22 32 e3 60 6e 87 d2 9c f3 73 9c f9 b6 49 b5 85 c3 bf eb 3e 7f 32 7f 52 0d c5 10 b4 e6 7c ee 90 d5 20 4d f2 0d b5 68 ad 9f fd 9e d8 1b b9 58 84 aa b8 ed 38 6d c9 77 83 a2 cb 1b 14 e3 c4 b2 4e e0 9f 70 b2 a8 38 9e 6b 7a 26 fc ba 9e 23 9a 77 db 5e 0d 66 c4 d5 2a cc 67 6b 40 70 26 0c af a6 b4 c1 01 c5 84 87 9a 67 f0 45 b8 5e 1b bd 2b 80 da b1 8d d7 22 59 0b 26 d8 55 9b 96 d5 54 c1 1b 93 b3 b0 8d e7 e2 cd 85 6d bf 87 d4 81 27 ec fa a3 63 99 55 45 b5 6c e8 c5 96 aa 54 4d cb 91 01 8a 04 48 16 e1 79 d8 e3 6b 39 79 85 6a e2 40 99 f2 40 69 61 Data Ascii: Q@`4B#r 0`#2nSbnFO8 =&]sM!Pq1%DP"$C"2`nsI>2R\| MhX8mwNp8kz&#w^f*gk@p&gE^+"Y&UTm'cUElTMHyk9yj@@ia
2024-10-14 12:20:14 UTC	267	IN	Data Raw: 87 01 35 09 0c 06 83 5f 69 0b 81 0f 17 17 e4 f7 02 0c bc 39 c7 4f 22 0b c8 87 8b 88 d8 02 03 17 98 88 2c a0 22 2e 42 59 85 12 2e a7 d3 a3 0b 0c e4 22 27 03 f5 d1 d9 bb c1 e0 00 5f fd 77 f6 36 b2 90 0f 81 b7 67 c3 b3 37 60 20 b8 40 30 e9 03 da 1d ed 77 79 19 ea 87 61 1c 94 c0 07 a4 ff f9 60 70 f0 f3 90 b5 40 7c 78 8b 5e bb 1c c4 25 0c 93 3e fc f7 4c 04 50 3e 4c c9 8b 97 ef 22 7d d2 07 62 20 29 09 1f de 0e 85 40 ec c3 11 af 7f 9e b0 f0 77 1e 38 34 a2 8c 02 13 cb cf 39 03 95 30 27 49 6b 55 0e 13 c8 f3 c3 8a 11 00 4a d0 6f 0c 46 70 df 21 17 35 29 38 af 09 51 0d fe 0c 23 2a 80 f4 cd 7c 80 e0 3f 15 ef 0f fd 8d 7c 22 04 57 24 a7 e6 92 fd 12 7a 3a b9 40 44 51 e2 6b a7 62 09 4b 8f ee 3a c5 12 8a a6 69 c9 4f 9c 04 4c 74 2d 56 7c d5 c9 ff 00 ba 9f 47 14 5f a7 28 b6 Data Ascii: 5_i9O",".BY."'_w6g7` @0wya`p@\|x^%>LP>L"}b )@w8490'IkUJoFp!5)8Q#*\|?\|"W$z:@DQkbK:iOLt-V\|G_(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.11	49800	3.161.82.22	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	547	OUT	GET /version/6.4.1/cmp.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:14 UTC	662	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 184464 Connection: close Last-Modified: Wed, 11 Sep 2024 20:31:23 GMT x-amz-expiration: expiry-date="Wed, 12 Sep 2029 00:00:00 GMT", rule-id="webapp-standard-lifecycle" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 14 Oct 2024 11:22:11 GMT ETag: "6863ce0703ce4f482389f8a7e640e4e6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b61ff825a3ca0ff851caf7741034ca52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: i38C_xsHcl7-myWEowC1Org4MQ3Dqboxgf0UetxDGCfG0_v9FueKkA== Age: 3484 cache-control: max-age=600
2024-10-14 12:20:14 UTC	15722	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 31 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S
2024-10-14 12:20:14 UTC	16384	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 65 76 65 6e 74 51 75 65 75 65 2e 64 65 6c 65 74 65 28 65 29 7d 65 78 65 63 28 65 2c 74 29 7b 74 68 69 73 2e 65 76 65 6e 74 51 75 65 75 65 2e 66 6f 72 45 61 63 68 28 28 28 6e 2c 6f 29 3d 3e 7b 6c 65 74 20 73 3d 6e 65 77 20 72 2e 45 76 65 6e 74 44 61 74 61 28 65 2c 6f 2c 74 2c 6e 65 77 20 69 2e 50 69 6e 67 44 61 74 61 28 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 29 29 3b 6e 2e 63 61 6c 6c 62 61 63 6b 28 73 2c 21 30 29 7d 29 29 7d 63 6c 65 61 72 28 29 7b 74 68 69 73 2e 71 75 65 75 65 4e 75 6d 62 65 72 3d 31 65 33 2c 74 68 69 73 2e 65 76 65 6e 74 51 75 65 75 65 2e 63 6c 65 61 72 28 29 7d 67 65 74 20 73 69 7a 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 76 65 6e 74 51 75 65 75 65 2e 73 69 7a 65 7d 7d 7d 2c 38 39 Data Ascii: turn this.eventQueue.delete(e)}exec(e,t){this.eventQueue.forEach(((n,o)=>{let s=new r.EventData(e,o,t,new i.PingData(this.cmpApiContext));n.callback(s,!0)}))}clear(){this.queueNumber=1e3,this.eventQueue.clear()}get size(){return this.eventQueue.size}}},89
2024-10-14 12:20:14 UTC	16384	IN	Data Raw: 29 2c 6f 3d 6e 28 37 34 30 29 3b 63 6c 61 73 73 20 73 20 65 78 74 65 6e 64 73 20 6f 2e 41 62 73 74 72 61 63 74 45 6e 63 6f 64 61 62 6c 65 42 69 74 53 74 72 69 6e 67 44 61 74 61 54 79 70 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 73 65 74 56 61 6c 75 65 28 65 29 7d 65 6e 63 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 72 2e 46 69 62 6f 6e 61 63 63 69 49 6e 74 65 67 65 72 52 61 6e 67 65 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 74 68 69 73 2e 76 61 6c 75 65 29 7d 64 65 63 6f 64 65 28 65 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 72 2e 46 69 62 6f 6e 61 63 63 69 49 6e 74 65 67 65 72 52 61 6e 67 65 45 6e 63 6f 64 65 72 2e 64 65 63 6f 64 65 28 65 29 7d 73 75 62 73 74 72 69 6e 67 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 69 2e Data Ascii: ),o=n(740);class s extends o.AbstractEncodableBitStringDataType{constructor(e){super(),this.setValue(e)}encode(){return r.FibonacciIntegerRangeEncoder.encode(this.value)}decode(e){this.value=r.FibonacciIntegerRangeEncoder.decode(e)}substring(e,t){let n=i.
2024-10-14 12:20:14 UTC	16384	IN	Data Raw: 74 29 2c 69 28 6e 28 37 33 36 30 29 2c 74 29 2c 69 28 6e 28 32 31 31 32 29 2c 74 29 2c 69 28 6e 28 35 38 32 30 29 2c 74 29 2c 69 28 6e 28 32 35 38 38 29 2c 74 29 2c 69 28 6e 28 36 30 39 32 29 2c 74 29 7d 2c 39 39 37 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 6e 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 74 2e 44 65 63 6f 64 69 6e Data Ascii: t),i(n(7360),t),i(n(2112),t),i(n(5820),t),i(n(2588),t),i(n(6092),t)},9973:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.DecodingError=void 0;class n extends Error{constructor(e){super(e),this.name="DecodingError"}}t.Decodin
2024-10-14 12:20:14 UTC	16384	IN	Data Raw: 4e 54 5f 54 59 50 45 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6e 65 77 20 63 2e 45 6e 63 6f 64 61 62 6c 65 46 69 78 65 64 49 6e 74 65 67 65 72 28 33 2c 33 29 29 2c 74 2e 73 65 74 28 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 50 55 42 5f 50 55 52 50 4f 53 45 53 5f 45 58 50 52 45 53 53 5f 43 4f 4e 53 45 4e 54 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6e 65 77 20 73 2e 45 6e 63 6f 64 61 62 6c 65 46 69 78 65 64 42 69 74 66 69 65 6c 64 28 5b 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 21 31 5d 29 29 2c 74 2e 73 65 74 28 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 50 55 42 5f 50 55 52 50 4f 53 45 53 5f 49 4d Data Ascii: NT_TYPE.toString(),new c.EncodableFixedInteger(3,3)),t.set(p.TcfCaV1Field.PUB_PURPOSES_EXPRESS_CONSENT.toString(),new s.EncodableFixedBitfield([!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1,!1])),t.set(p.TcfCaV1Field.PUB_PURPOSES_IM
2024-10-14 12:20:14 UTC	16384	IN	Data Raw: 64 2e 4d 53 50 41 5f 4f 50 54 5f 4f 55 54 5f 4f 50 54 49 4f 4e 5f 4d 4f 44 45 2e 74 6f 53 74 72 69 6e 67 28 29 2c 61 2e 55 73 43 74 56 31 46 69 65 6c 64 2e 4d 53 50 41 5f 53 45 52 56 49 43 45 5f 50 52 4f 56 49 44 45 52 5f 4d 4f 44 45 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2c 5b 61 2e 55 73 43 74 56 31 46 69 65 6c 64 2e 47 50 43 5f 53 45 47 4d 45 4e 54 5f 54 59 50 45 2e 74 6f 53 74 72 69 6e 67 28 29 2c 61 2e 55 73 43 74 56 31 46 69 65 6c 64 2e 47 50 43 2e 74 6f 53 74 72 69 6e 67 28 29 5d 5d 29 2c 74 68 69 73 2e 62 61 73 65 36 34 55 72 6c 45 6e 63 6f 64 65 72 3d 6e 65 77 20 64 2e 43 6f 6d 70 72 65 73 73 65 64 42 61 73 65 36 34 55 72 6c 45 6e 63 6f 64 65 72 2c 65 26 26 65 2e 6c 65 6e 67 74 68 3e 30 26 26 74 68 69 73 2e 64 65 63 6f 64 65 28 65 29 7d 65 6e 63 6f Data Ascii: d.MSPA_OPT_OUT_OPTION_MODE.toString(),a.UsCtV1Field.MSPA_SERVICE_PROVIDER_MODE.toString()],[a.UsCtV1Field.GPC_SEGMENT_TYPE.toString(),a.UsCtV1Field.GPC.toString()]]),this.base64UrlEncoder=new d.CompressedBase64UrlEncoder,e&&e.length>0&&this.decode(e)}enco
2024-10-14 12:20:14 UTC	16384	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 2c 69 2c 6f 3d 6e 2e 63 61 6c 6c 28 65 29 2c 73 3d 5b 5d 3b 74 72 79 7b 66 6f 72 28 3b 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2d 2d 20 3e 30 29 26 26 21 28 72 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 73 2e 70 75 73 68 28 72 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 72 26 26 21 72 2e 64 6f 6e 65 26 26 28 6e 3d 6f 2e 72 65 74 75 72 6e 29 26 26 6e 2e 63 61 6c 6c 28 6f 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 69 29 74 68 72 6f 77 20 69 2e 65 Data Ascii: e,t){var n="function"==typeof Symbol&&e[Symbol.iterator];if(!n)return e;var r,i,o=n.call(e),s=[];try{for(;(void 0===t\|\|t-- >0)&&!(r=o.next()).done;)s.push(r.value)}catch(e){i={error:e}}finally{try{r&&!r.done&&(n=o.return)&&n.call(o)}finally{if(i)throw i.e
2024-10-14 12:20:14 UTC	16384	IN	Data Raw: 65 61 74 28 6e 29 7d 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6e 2b 31 3b 65 2e 67 65 74 52 65 73 74 72 69 63 74 69 6f 6e 73 28 72 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 72 65 73 74 72 69 63 74 69 6f 6e 54 79 70 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 69 3d 65 2e 70 75 72 70 6f 73 65 49 64 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6f 3d 74 5b 69 5d 2e 73 75 62 73 74 72 28 30 2c 6e 29 2c 73 3d 74 5b 69 5d 2e 73 75 62 73 74 72 28 6e 2b 31 29 3b 74 5b 69 5d 3d 6f 2b 72 2b 73 7d 29 29 7d 2c 69 3d 30 3b 69 3c 6e 3b 69 2b 2b 29 72 28 69 29 7d 72 65 74 75 72 6e 20 74 7d 2c 74 7d 28 6e 28 36 38 30 38 29 2e 54 43 44 61 74 61 29 3b 74 2e 49 6e 41 70 70 54 43 44 61 74 Data Ascii: eat(n)}));for(var r=function(n){var r=n+1;e.getRestrictions(r).forEach((function(e){var r=e.restrictionType.toString(),i=e.purposeId.toString(),o=t[i].substr(0,n),s=t[i].substr(n+1);t[i]=o+r+s}))},i=0;i<n;i++)r(i)}return t},t}(n(6808).TCData);t.InAppTCDat
2024-10-14 12:20:14 UTC	16384	IN	Data Raw: 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6e 61 72 72 6f 77 56 65 6e 64 6f 72 73 54 6f 7d 2c 74 2e 4c 41 4e 47 55 41 47 45 5f 43 41 43 48 45 3d 6e 65 77 20 4d 61 70 2c 74 2e 43 41 43 48 45 3d 6e 65 77 20 4d 61 70 2c 74 2e 4c 41 54 45 53 54 5f 43 41 43 48 45 5f 4b 45 59 3d 30 2c 74 2e 44 45 46 41 55 4c 54 5f 4c 41 4e 47 55 41 47 45 3d 22 45 4e 22 2c 74 2e 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 73 3d 6e 65 77 20 6c 2e 43 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 73 2c 74 2e 6c 61 74 65 73 74 46 69 6c 65 6e 61 6d 65 3d 22 76 65 6e 64 6f 72 2d 6c 69 73 74 2e 6a 73 6f 6e 22 2c 74 2e 76 65 72 73 69 6f 6e 65 64 46 Data Ascii: Of=function(e){return"object"==typeof e&&"function"==typeof e.narrowVendorsTo},t.LANGUAGE_CACHE=new Map,t.CACHE=new Map,t.LATEST_CACHE_KEY=0,t.DEFAULT_LANGUAGE="EN",t.consentLanguages=new l.ConsentLanguages,t.latestFilename="vendor-list.json",t.versionedF
2024-10-14 12:20:14 UTC	16384	IN	Data Raw: 63 74 6f 72 45 6e 63 6f 64 65 72 2c 65 5b 72 2e 46 69 65 6c 64 73 2e 70 75 62 6c 69 73 68 65 72 4c 65 67 69 74 69 6d 61 74 65 49 6e 74 65 72 65 73 74 73 5d 3d 73 2e 46 69 78 65 64 56 65 63 74 6f 72 45 6e 63 6f 64 65 72 2c 65 5b 72 2e 46 69 65 6c 64 73 2e 6e 75 6d 43 75 73 74 6f 6d 50 75 72 70 6f 73 65 73 5d 3d 63 2e 49 6e 74 45 6e 63 6f 64 65 72 2c 65 5b 72 2e 46 69 65 6c 64 73 2e 70 75 62 6c 69 73 68 65 72 43 75 73 74 6f 6d 43 6f 6e 73 65 6e 74 73 5d 3d 73 2e 46 69 78 65 64 56 65 63 74 6f 72 45 6e 63 6f 64 65 72 2c 65 5b 72 2e 46 69 65 6c 64 73 2e 70 75 62 6c 69 73 68 65 72 43 75 73 74 6f 6d 4c 65 67 69 74 69 6d 61 74 65 49 6e 74 65 72 65 73 74 73 5d 3d 73 2e 46 69 78 65 64 56 65 63 74 6f 72 45 6e 63 6f 64 65 72 2c 65 7d 7d 2c 32 36 39 32 3a 66 75 6e 63 Data Ascii: ctorEncoder,e[r.Fields.publisherLegitimateInterests]=s.FixedVectorEncoder,e[r.Fields.numCustomPurposes]=c.IntEncoder,e[r.Fields.publisherCustomConsents]=s.FixedVectorEncoder,e[r.Fields.publisherCustomLegitimateInterests]=s.FixedVectorEncoder,e}},2692:func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.11	49805	87.248.100.215	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	1042	OUT	GET /tdv2_fp/api/resource/NotificationHistory.getHistory;count=5;imageTag=img%3A40x40%7C2%7C80;theme=default;notificationTypes=breakingNews;lastUpdate=1728908413;loadInHpViewer=true;includePersonalized=;partner=att HTTP/1.1 Host: currently.att.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
2024-10-14 12:20:15 UTC	1180	IN	HTTP/1.1 200 OK expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-xss-protection: 1; mode=block content-type: application/json; charset=utf-8 content-length: 1097 etag: W/"449-coOIrpvNC022XDuD0cbPcs+xa+U" vary: Accept-Encoding date: Mon, 14 Oct 2024 12:20:15 GMT x-envoy-upstream-service-time: 19 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-ir2.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Connection: close Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=att&region=US&lang=en-US&device=desktop&yrid=07hi8ndjgq33v&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com
2024-10-14 12:20:15 UTC	1097	IN	Data Raw: 7b 22 68 74 6d 6c 22 3a 22 22 2c 22 63 73 73 22 3a 22 2e 79 6e 73 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 79 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 79 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 65 65 70 73 2c 23 37 64 63 62 66 66 29 7d 2e 79 6e 73 2d 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 35 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 34 30 Data Ascii: {"html":"","css":".yns-notifications{list-style-type:none;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif}.yns-container{word-wrap:break-word}.yns-container:hover{background-color:var(--peeps,#7dcbff)}.yns-img{border-radius:45%;float:left;width:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.11	49808	212.82.100.140	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	985	OUT	GET /issueIUCookie?signature=gaeDwJGhlY_20JmbE7CMXkH8u4QFHhCZnW9zcs-j7YM=&partner=sbc&ts=1728908413 HTTP/1.1 Host: api.login.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
2024-10-14 12:20:15 UTC	599	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:20:15 GMT Cache-Control: no-store Cache-Control: no-cache Cache-Control: must-revalidate Pragma: no-cache Expires: 0 X-Frame-Options: DENY X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15552000 Server: ATS Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: IU=d=fPBofgIebZhYWUQINsoAqqmG5meI&v=1; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 0 Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.11	49804	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	621	OUT	GET /pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	677	IN	HTTP/1.1 200 OK x-amz-id-2: SLBtO7RwRfXx/aiOMlwDLlHkxBDmwVHIEq+jl87exUF3iESq3vMIvHAv1EjIjsZmod6SlKWKCMw= x-amz-request-id: PKWDMXANERR68BWR Date: Sun, 13 Oct 2024 22:52:10 GMT Last-Modified: Tue, 28 Mar 2023 10:17:50 GMT ETag: "da05f5d596c887a6a5221011fa70d158" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 1610 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 48486 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 3a 72 6f 6f 74 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 64 61 72 6b 5d 20 5b 64 61 74 61 2d 6d 61 69 6e 74 61 69 6e 2d 63 6f 6c 6f 72 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 73 72 63 68 2d 74 6e 2d 66 6c 61 6d 65 2d 63 6f 6c 6f 72 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 2d 36 33 2e 39 34 64 65 67 2c 20 23 31 44 32 32 32 38 20 30 25 2c 20 23 31 44 32 32 32 38 20 31 36 2e 31 25 2c 20 23 42 32 33 39 30 39 20 31 36 2e 31 25 2c 20 23 42 32 33 39 30 39 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 Data Ascii: :root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled][data-color-scheme=light]{--srch-tn-flame-color:linear-gradient(-63.94deg, #1D2228 0%, #1D2228 16.1%, #B23909 16.1%, #B23909 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D222
2024-10-14 12:20:15 UTC	310	IN	Data Raw: 39 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 38 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 38 20 36 37 2e 38 25 2c 20 23 42 32 33 39 30 39 20 36 37 2e 38 25 2c 20 23 42 32 33 39 30 39 20 38 33 2e 39 25 2c 20 23 46 46 35 32 30 44 20 38 33 2e 39 25 29 3b 2d 2d 73 72 63 68 2d 74 6e 2d 66 6c 61 6d 65 2d 69 63 6f 6e 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 70 76 2f 73 74 61 74 69 63 2f 69 6d 67 2f 69 63 6f 6e 2d 66 6c 61 6d 65 2d 6c 69 67 68 74 2d 32 30 32 33 30 33 30 31 30 33 35 32 2e 67 69 66 27 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 72 63 68 54 6e 54 65 78 74 41 6e 69 6d 74 69 6f 6e 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 Data Ascii: 9 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D2228 48.2%, #1D2228 67.8%, #B23909 67.8%, #B23909 83.9%, #FF520D 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif')}}@keyframes srchTnTextAnimtion{0%{background-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.11	49807	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:14 UTC	857	OUT	GET /ybar/cerebro_min.js HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
2024-10-14 12:20:15 UTC	693	IN	HTTP/1.1 200 OK x-amz-id-2: rMT1kqphNl9RCxDD9LSMS0jSOE2XpZuhWRnvWCeHRJUA4dGjxWKvKuxN37lo05TzaqkpH/JQ9EaXD6EyzXwMug== x-amz-request-id: CT4PVR9F0F2QRHMJ Date: Sun, 13 Oct 2024 16:13:14 GMT Last-Modified: Thu, 05 May 2022 20:34:05 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 5636 Referrer-Policy: no-referrer-when-downgrade X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Etag: "0ccb51bc1dd6980920da39e008a599e0" Age: 72423 Connection: close Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 76 61 72 20 57 4f 52 4b 5f 53 45 52 56 45 52 3d 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2d 6d 63 64 6e 2e 73 65 63 75 72 65 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 79 62 61 72 2f 65 78 70 2e 6a 73 6f 6e 22 2c 54 49 4d 45 4f 55 54 3d 32 65 33 2c 43 65 72 65 62 72 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3d 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 30 7d 72 65 74 75 72 6e 20 65 2e 72 75 6e 45 78 70 65 72 69 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 65 77 20 65 29 2e 5f 66 65 74 63 68 57 6f 72 6b 28 29 7d 2c 65 2e 73 65 6e 64 42 65 61 63 6f Data Ascii: var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeaco
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 69 73 20 30 22 29 3b 65 6c 73 65 7b 69 66 28 6e 3e 3d 65 2e 65 78 70 4c 69 73 74 2e 6c 65 6e 67 74 68 29 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 61 6c 6c 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 20 61 73 20 65 78 70 43 6f 75 6e 74 20 3e 3d 20 65 78 70 4c 69 73 74 20 6c 65 6e 67 74 68 22 29 2c 72 3d 65 2e 65 78 70 4c 69 73 74 3b 65 6c 73 65 20 69 66 28 22 72 61 6e 64 6f 6d 22 3d 3d 3d 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 22 2b 6e 2b 22 20 72 61 6e 64 6f 6d 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 3b 69 2b 2b 29 7b 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 65 2e 65 78 Data Ascii: is 0");else{if(n>=e.expList.length)console.log("marked all experiments to run as expCount >= expList length"),r=e.expList;else if("random"===t){console.log("marked "+n+" random experiments to run");for(var i=0;i<n;i++){var s=Math.floor(Math.random()*(e.ex
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 65 61 63 6f 6e 73 22 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 3d 30 2c 74 68 69 73 2e 65 6e 64 54 69 6d 65 3d 30 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 22 64 65 66 61 75 6c 74 22 7d 2c 74 3d 30 2c 6f 3d 65 3b 74 3c 6f 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 6f 5b 74 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 72 2c 69 2c 73 2c 6f 2c 61 2c 75 2c 63 29 7b 76 61 72 20 6c 2c 70 2c 64 2c 66 2c 68 3b 30 3c 61 2e 6c 65 6e 67 74 68 7c 7c 30 3c 6f 2e 6c 65 6e 67 74 68 3f 28 70 3d 6e 65 77 20 6e 2c 64 3d 21 31 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 Data Ascii: eacons")}},e.prototype._sendBeacons=function(e){for(var m=this,n=function(){this.startTime=0,this.endTime=0,this.source="default"},t=0,o=e;t<o.length;t++){var r=o[t];!function(r,i,s,o,a,u,c){var l,p,d,f,h;0<a.length\|\|0<o.length?(p=new n,d=!1,new Promise(f
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 66 7c 7c 65 28 29 7d 2c 68 2e 73 74 61 72 74 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6f 2e 73 72 63 3d 72 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 68 2e 65 6e 64 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 68 2e 73 6f 75 72 63 65 3d 22 69 6d 61 67 65 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 28 72 29 3b 6d 2e 65 78 70 43 6f 75 6e 74 3d 31 3c 65 2e 6c 65 6e 67 74 68 3f 6d 2e 65 78 70 43 6f 75 6e Data Ascii: clearTimeout(t),f\|\|e()},h.startTime=Date.now(),o.src=r}).then(function(){if("performance"in window&&"getEntriesByType"in window.performance){h.endTime=Date.now(),h.source="image";var e=window.performance.getEntriesByName(r);m.expCount=1<e.length?m.expCoun
2024-10-14 12:20:15 UTC	436	IN	Data Raw: 22 2c 6c 3d 5b 5d 2c 69 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2b 3d 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 2c 6c 2e 70 75 73 68 28 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 29 7d 29 2c 22 67 72 6f 75 70 22 3d 3d 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3f 28 63 20 69 6e 20 74 68 69 73 2e 70 65 6e 64 69 6e 67 7c 7c 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 3d 5b 5d 29 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 2e 70 75 73 68 28 5b 75 2c 6c 5d 29 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 2b 2b 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 3d 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 29 Data Ascii: ",l=[],i.forEach(function(e){c+=e.replace("<BEACON>",n),l.push(e.replace("<BEACON>",n))}),"group"==this.uploadType?(c in this.pending\|\|(this.pending[c]=[]),this.pending[c].push([u,l]),this.complete++,this.complete==this.expCount&&Object.keys(this.pending)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.11	49806	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	761	OUT	GET /uu/api/res/1.2/CwIwq1WdTD1rWMAuQ4Mqwg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/thedailybeast.com/d8a2de6cb16f498e74de09733e4a87d0.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	1137	IN	HTTP/1.1 200 OK Content-Length: 29838 Content-Type: image/webp Content-Disposition: inline; filename="d8a2de6cb16f498e74de09733e4a87d0.webp" Etag: "263d44e87c0740a4900d74ec0303bab0" Expiration: expiry-date="Sun, 13 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 14 Oct 2024 12:05:01 GMT Date: Mon, 14 Oct 2024 12:05:17 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=112;cpu=0;start=2024-10-14T12:05:16.935Z;desc=miss,rtt;dur=87,content-info;desc="width=560,height=272,bytes=29838,owidth=1170,oheight=658,obytes=100951,ef=(1,13,17,23,30)",cloudinary;dur=44;start=2024-10-14T12:05:16.998Z Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: d74b9895f5d3da53bb3f2208ad8a210a Age: 899 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close
2024-10-14 12:20:15 UTC	73	IN	Data Raw: 52 49 46 46 86 74 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 2f 02 00 0f 01 00 49 43 43 50 0c 0d 00 00 00 00 0d 0c 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e8 00 01 00 0a 00 0c 00 1e 00 Data Ascii: RIFFtWEBPVP8X /ICCPapplmntrRGB XYZ
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 09 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 64 65 73 63 00 00 01 50 00 00 00 62 64 73 63 6d 00 00 01 b4 00 00 01 e6 63 70 72 74 00 00 03 9c 00 00 00 23 77 74 70 74 00 00 03 c0 00 00 00 14 72 58 59 5a 00 00 03 d4 00 00 00 14 67 58 59 5a 00 00 03 e8 00 00 00 14 62 58 59 5a 00 00 03 fc 00 00 00 14 72 54 52 43 00 00 04 10 00 00 08 0c 61 61 72 67 00 00 0c 1c 00 00 00 20 76 63 67 74 00 00 0c 3c 00 00 00 30 6e 64 69 6e 00 00 0c 6c 00 00 00 3e 6d 6d 6f 64 00 00 0c ac 00 00 00 28 76 63 67 70 00 00 0c d4 00 00 00 38 62 54 Data Ascii: acspAPPLAPPL-appldescPbdscmcprt#wtptrXYZgXYZbXYZrTRCaarg vcgt<0ndinl>mmod(vcgp8bT
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c 0c 75 0c 8e 0c a7 0c c0 0c d9 0c f3 0d 0d 0d 26 0d 40 0d 5a 0d 74 0d 8e 0d a9 0d c3 0d de 0d f8 0e 13 0e 2e 0e 49 Data Ascii: Ucq~+:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi*C\u&@Zt.I
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 f0 b7 68 b7 e0 b8 59 b8 d1 b9 4a b9 c2 ba 3b ba b5 bb 2e bb a7 bc 21 bc 9b bd 15 bd 8f be 0a be 84 be ff bf 7a bf f5 c0 70 c0 ec c1 67 c1 e3 c2 5f c2 db c3 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d Data Ascii: 6n?zM _4uL$hBd@iG&vV8nR7u\D-u`K8%yhYJ;.!zpg_XQKFA=
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 1d 39 58 cb e0 57 cb 3a 62 3f fa 6f 52 91 f6 4f 9f 21 85 26 c5 e9 66 72 2e 87 11 b9 f5 67 76 de 38 ff 8c ba 87 dc 73 d0 95 e1 1e e7 c4 32 08 4d 39 38 53 3e 5c 73 5b 94 64 2b cf 4a 6f 92 63 7d 25 fc ff 64 4b 18 fe a9 89 fc 76 9e f1 a9 cf b7 92 39 83 58 7c 44 9f ae 31 a4 32 d9 a0 2b 6d c8 c0 52 c0 fa 07 53 d9 61 66 c0 11 1a 76 09 00 53 62 b1 05 12 4f 7c 9b 7c 44 93 c4 e0 b1 92 bf cc 9e 50 af 42 25 6c f8 41 ed cf bd f4 5f ff 1c 2f f2 f9 4d d4 5e 7f fd 39 23 25 5d d8 1d ff a9 cb 61 3c 67 f9 6a e5 73 50 2e 2d 86 db 26 49 cd ab a3 64 44 b6 99 23 d8 30 09 37 4f 48 41 1e f8 53 32 d3 ad e6 11 65 27 f5 e7 78 87 95 d3 8c 3f aa fc e7 43 5c 44 c3 1c 22 ea 49 30 77 54 32 dc 12 0e e4 40 89 e3 40 bd 5c 0a 02 30 dc 95 c8 1a d4 54 e0 7e 96 08 bb ad 62 ff c4 6f b0 b1 58 ee Data Ascii: 9XW:b?oRO!&fr.gv8s2M98S>\s[d+Joc}%dKv9X\|D12+mRSafvSbO\|\|DPB%lA_/M^9#%]a<gjsP.-&IdD#07OHAS2e'x?C\D"I0wT2@@\0T~boX
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: b5 6b aa 59 72 a0 42 79 01 21 84 6f b3 16 63 8c 28 57 49 57 5c 91 b1 14 02 a2 fc c4 b1 a1 fa a1 93 8c e5 ec 74 21 f4 d5 91 3a 58 3c fb 3a 07 65 f3 6d 17 ea 52 ba 54 6e 65 c4 5a 38 f4 c0 9c a2 52 30 06 a4 b2 ac 7f 7a 68 b4 4c 3c 09 59 6b c9 f9 02 cc ed 1b 80 e0 8b 5c 4f fe 19 88 c7 25 2d d5 9f 46 58 53 e0 11 a3 d9 d7 cf eb 28 5c 9b 14 c6 42 c3 f4 56 52 ae f6 50 63 d7 8d 8e fd 8a 92 cf e9 23 67 e2 83 d2 b5 45 ce a5 1a 85 72 52 f9 15 a0 fb 49 49 cb 7d 44 2c e9 3a 96 fd 37 4d ed bd a8 56 30 33 89 b1 76 bf f3 d6 7f b1 a1 3c 02 8b b2 f5 a1 f9 43 37 09 f5 b2 e4 fd 17 5a d5 81 f5 da f7 61 fc 1f ff 84 cf 0a f6 71 1b 5a 9a a7 7e ae f3 9c f4 34 47 5b 48 01 91 23 47 81 08 0b d8 40 cd 1f e2 53 cb e1 72 d6 ba 2f e9 c6 f3 f3 9e 04 8b bf 12 dd 04 bc f5 da 32 10 3f e2 3d Data Ascii: kYrBy!oc(WIW\t!:X<:emRTneZ8R0zhL<Yk\O%-FXS(\BVRPc#gErRII}D,:7MV03v<C7ZaqZ~4G[H#G@Sr/2?=
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: e5 17 da f7 27 6c 2a 91 fa 31 35 e7 fd 95 33 10 ac f5 66 2f d4 01 fe 59 13 ad 17 47 e0 a0 c2 3d 39 2e d3 52 bd 16 56 a7 c6 bb 44 9f 7a a3 0c 6b 58 6c 7e 6d 25 26 17 8a 97 60 ed e8 14 89 bf 4e a7 90 90 87 3d f5 fe aa d0 88 d8 d9 86 40 4d 5b d4 2e 3b 87 52 33 ac 4c f5 48 09 32 75 90 2a 8e 9f ce 08 cc ac 4d f6 12 ab 5b c8 6a b2 6c cd c1 c1 a6 ce 71 4e c9 71 64 0e b9 b5 ef 11 5f da 62 5d 67 bb fd 81 c3 9c 37 00 51 c8 30 f4 50 1d b2 52 0d c7 e6 04 c6 fa 8f d0 31 2b fa e0 2c 70 7a 45 83 4d 01 5a 5b ea 83 39 d1 39 76 24 49 2a de 34 94 39 86 3b d6 a3 5d 48 30 b9 69 39 6e 1d 31 eb 4b c0 5c 85 71 1b 0d db 6f 79 1f 59 96 62 53 0d 27 5d 13 5c b0 e2 3b 05 0f 1f 04 87 95 50 3b d9 63 05 c9 63 35 e6 65 26 2a f4 c3 b1 9c fc 1c 49 80 5c 29 1a c9 cc dd d5 ea a0 a5 c7 c0 40 Data Ascii: 'l153f/YG=9.RVDzkXl~m%&`N=@M[.;R3LH2uM[jlqNqd_b]g7Q0PR1+,pzEMZ[99v$I49;]H0i9n1K\qoyYbS']\;P;cc5e&I\)@
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 4c 7c 18 77 a0 c7 e5 23 14 7b 33 be 1e c8 7e 0c d4 58 96 c1 a9 8e 8e 2d e8 23 d1 0a 34 39 ab 37 8f 2b 9b 55 ac 42 b3 3b 9c b5 9c 45 71 7e 85 6c 40 af 2d db 77 e7 50 9f cb d4 b2 f9 d8 a0 88 d8 44 e3 4b f7 44 12 bb 20 00 da e3 cd 08 d1 14 1e d0 fd 5a 19 82 d9 33 3b ab fe 72 90 16 7f 27 01 e0 03 a1 72 f2 ea c8 84 d9 cc e6 e6 4f f3 23 c1 b3 74 93 72 76 3d a4 f4 e1 13 09 23 94 fc 80 07 92 90 e6 9e 78 5c 42 a8 74 3d f5 54 b6 b6 00 72 5c a0 ab 26 4a 10 22 f4 30 06 6f 16 b8 25 8e fe 37 04 59 77 2b 13 1e ab fc 45 39 a7 a7 a4 7e 47 9e e1 b5 dd 20 aa d1 a3 46 c5 e4 e6 ed aa 2a fa 7d 1f 21 5d 2b 2a 38 61 8a 73 6f 8f 48 44 58 96 18 15 a7 1a a5 a2 e0 47 ff 4b b5 81 13 36 34 10 1e 6a 5d 35 15 01 2d 44 68 ba 3b 97 e6 37 43 d2 45 d0 29 ca 4d 05 5d 0f 1a 5a 11 af b7 80 eb Data Ascii: L\|w#{3~X-#497+UB;Eq~l@-wPDKD Z3;r'rO#trv=#x\Bt=Tr\&J"0o%7Yw+E9~G F}!]+8asoHDXGK64j]5-Dh;7CE)M]Z
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 18 5d 70 cf c4 0f 78 c9 44 55 a3 fc 6a 68 30 a7 64 dc b8 d3 5a 9e b4 37 2f 3a b0 8f ff bf 43 79 0a 16 1f 5a f0 83 a2 d6 8a e5 a2 b5 94 52 3b e9 7c 05 14 eb 30 cc 88 33 20 79 53 05 c9 d2 c7 22 3f 3d a2 92 4c d6 5c d6 95 41 02 dd cc 9a 81 33 56 ad 3d 57 c0 71 05 fe 6e 70 5f 60 e0 43 de 4b 7e 61 ea 2a 61 40 59 f5 6a ff 8b d6 da bc 86 2e e8 55 9f 86 bd 8b 18 f1 8e 12 b3 0d 4a 80 9d 46 15 6e 00 81 11 82 03 f6 3c 85 88 9e af 76 0f 9d c0 0a e2 65 b3 d9 1f 5a da d4 46 e7 23 0f 1e a2 93 cb 8f 68 10 04 01 ad 01 01 9d fa 3c 6b 88 5d d6 35 50 93 f0 4f 68 e7 ed 91 6c 3c 03 8a 46 77 6e de ed 95 e5 3d 49 35 c9 80 93 92 d0 a2 fb bb bb 79 0e 76 88 25 e5 ae 67 1f 87 ab ef be 25 0b 9e a8 51 21 aa 3d 5a 2a 74 a7 25 2c e3 ed 33 ef 47 06 15 43 1b c6 6e 32 28 96 4e e2 b5 43 80 Data Ascii: ]pxDUjh0dZ7/:CyZR;\|03 yS"?=L\A3V=Wqnp_`CK~aa@Yj.UJFn<veZF#h<k]5POhl<Fwn=I5yv%g%Q!=Zt%,3GCn2(NC
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 41 e9 20 b6 00 9e 0d 38 ce a3 6f 90 0e 93 47 54 2d 65 ed f0 a9 57 a2 6e a6 24 40 8f 2f 8b e3 89 38 33 9e 04 f7 48 29 6b 0d 29 89 d4 21 c8 89 a0 ee c5 6d 24 ea 08 3b 23 68 9d e6 76 8e 90 dc 82 33 b2 5d 1a d6 c1 58 d5 0e 80 02 6f ba ce 7e 72 44 74 22 c0 b6 5c e5 bf 64 1e 3c 08 40 9e 58 86 52 ff dd 79 6e 9e 75 3d 14 5a 3a 49 eb fa b5 59 c7 e0 19 3a dd c8 1c fa cf ab 81 09 30 0e 10 62 b0 b6 7c e3 fa b5 78 44 58 8d e5 7f 88 11 45 3f a3 d9 6c 04 3f 14 d7 ed f9 bf ea 50 93 8d ef c2 ad 2e 7f ee ab 76 a5 c7 6c ec da 18 99 fd d6 60 05 a6 2b 41 f5 eb 58 42 c4 3b e5 90 2c 39 f2 39 b6 49 19 82 6e 0d cf 5a 04 43 d1 d2 a9 d3 dc aa 0f 0c 36 5f d1 24 63 96 3b 2f f1 ad 2b c3 88 21 42 09 ad 65 99 bf c8 81 8e ea 13 c8 77 0e 4c f6 69 51 5b 5a 7b f7 db ac 93 7f 55 74 75 73 bd Data Ascii: A 8oGT-eWn$@/83H)k)!m$;#hv3]Xo~rDt"\d<@XRynu=Z:IY:0b\|xDXE?l?P.vl`+AXB;,99InZC6_$c;/+!BewLiQ[Z{Utus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.11	49809	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	367	OUT	GET /aaq/wf/wf-loader-2.7.21-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	756	IN	HTTP/1.1 200 OK x-amz-id-2: +g9DSzfPqKjdl0ZntyMTSByQ0U3Exqmvu25QhW0BIyoE22Bz2+ii1vxcuCmkQZ+M2GlloBZGgYIjp7VyggfJpQ== x-amz-request-id: CY6YMSXY6NNEQVT1 Date: Thu, 10 Oct 2024 13:09:04 GMT Last-Modified: Mon, 16 Sep 2024 04:28:36 GMT ETag: "59ae89307f6be51355e07acf3994f79b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ODQdcT.d6AiA15hD8NatovEvfsHYFam9 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 11901 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 342672 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 5d 3d 65 28 29 3a 28 61 2e 77 61 66 65 72 3d 61 2e 77 61 66 65 72 7c 7c 7b 7d 2c 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 33 31 2e 38 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 Data Ascii: :"/aaq/wf/wf-action-1.8.1.js",raw:"/aaq/wf/wf-action-1.8.1.raw.js"}},"wafer-autocomplete":{meta:{version:"1.31.8"},modern:{min:"/aaq/wf/wf-autocomplete-1.31.8-modern.js",raw:"/aaq/wf/wf-autocomplete-1.31.8-modern.raw.js"},default:{min:"/aaq/wf/wf-autocomp
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 2d 31 2e 30 2e 32 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 2d 31 2e 30 2e 32 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 63 6f 72 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 36 35 2e 31 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 31 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 31 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 Data Ascii: js"},default:{min:"/aaq/wf/wf-clipboard-copy-1.0.2.js",raw:"/aaq/wf/wf-clipboard-copy-1.0.2.raw.js"}},"wafer-core":{meta:{version:"1.65.1"},modern:{min:"/aaq/wf/wf-core-1.65.1-modern.js",raw:"/aaq/wf/wf-core-1.65.1-modern.raw.js"},default:{min:"/aaq/wf/wf
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 64 72 6f 70 64 6f 77 6e 2d 64 72 61 77 65 72 2d 31 2e 31 2e 33 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 64 72 6f 70 64 6f 77 6e 2d 64 72 61 77 65 72 2d 31 2e 31 2e 33 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 31 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 31 2e 32 2e 31 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 Data Ascii: modern.raw.js"},default:{min:"/aaq/wf/wf-dropdown-drawer-1.1.3.js",raw:"/aaq/wf/wf-dropdown-drawer-1.1.3.raw.js"}},"wafer-experiment-scrollview":{meta:{version:"1.2.10"},modern:{min:"/aaq/wf/wf-experiment-scrollview-1.2.10-modern.js",raw:"/aaq/wf/wf-exper
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 34 2e 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 30 2e 36 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6c Data Ascii: {version:"1.4.0"},modern:{min:"/aaq/wf/wf-image-1.4.0-modern.js",raw:"/aaq/wf/wf-image-1.4.0-modern.raw.js"},default:{min:"/aaq/wf/wf-image-1.4.0.js",raw:"/aaq/wf/wf-image-1.4.0.raw.js"}},"wafer-lightbox":{meta:{version:"1.10.6"},modern:{min:"/aaq/wf/wf-l
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 70 72 6f 67 72 65 73 73 2d 6c 6f 61 64 65 72 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 31 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 70 Data Ascii: n:{min:"/aaq/wf/wf-native-da-1.0.5-modern.js",raw:"/aaq/wf/wf-native-da-1.0.5-modern.raw.js"},default:{min:"/aaq/wf/wf-native-da-1.0.5.js",raw:"/aaq/wf/wf-native-da-1.0.5.raw.js"}},"wafer-progress-loader":{meta:{version:"1.2.10"},modern:{min:"/aaq/wf/wf-p
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 2e 31 32 2e 36 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 74 65 6d 70 6c 61 74 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 34 2e 33 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 74 65 78 74 22 3a 7b 6d 65 Data Ascii: .12.6.raw.js"}},"wafer-template":{meta:{version:"1.4.3"},modern:{min:"/aaq/wf/wf-template-1.4.3-modern.js",raw:"/aaq/wf/wf-template-1.4.3-modern.raw.js"},default:{min:"/aaq/wf/wf-template-1.4.3.js",raw:"/aaq/wf/wf-template-1.4.3.raw.js"}},"wafer-text":{me
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 6f 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 32 2e 32 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 32 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 32 2e 32 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 32 2e 32 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 32 2e 32 2e 72 61 77 2e 6a 73 22 7d 7d 7d 7d 2c 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 77 Data Ascii: o":{meta:{version:"3.2.2"},modern:{min:"/aaq/wf/wf-video-3.2.2-modern.js",raw:"/aaq/wf/wf-video-3.2.2-modern.raw.js"},default:{min:"/aaq/wf/wf-video-3.2.2.js",raw:"/aaq/wf/wf-video-3.2.2.raw.js"}}}},"./src/entry.js":function(a,e,r){"use strict";function w
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 65 72 6e 3a 21 30 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 69 7d 2c 72 6f 6f 74 3a 73 7d 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6c 6f 61 64 57 61 66 65 72 73 46 6f 72 57 72 61 70 70 65 72 45 6c 65 6d 28 64 6f 63 75 6d 65 6e 74 29 7d 2c 30 29 7d 29 2c 74 68 69 73 2e 73 79 6e 63 28 29 7d 72 65 74 75 72 6e 20 66 28 61 2c 5b 7b 6b 65 79 3a 22 6c 6f 61 64 57 61 66 65 72 73 46 6f 72 57 72 61 70 70 65 72 45 6c 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 5b 5d 3b 6a 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 76 61 72 20 66 3d 6c 5b 77 5d 7c 7c 77 2c 6f 3d 77 Data Ascii: ern:!0,successClass:i},root:s},window.wafer.ready(function(){setTimeout(function(){e.loadWafersForWrapperElem(document)},0)}),this.sync()}return f(a,[{key:"loadWafersForWrapperElem",value:function(a){var e=this,r=[];j.forEach(function(w){var f=l[w]\|\|w,o=w
2024-10-14 12:20:15 UTC	201	IN	Data Raw: 65 74 28 6c 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6f 28 29 3b 65 5b 72 5d 3d 21 30 2c 6e 2e 5f 61 73 73 65 74 4c 6f 61 64 65 64 4d 61 70 70 69 6e 67 2e 73 65 74 28 6c 2c 21 30 29 2c 69 28 7b 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 22 2b 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 65 5b 72 5d 3d 21 31 2c 61 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 28 61 29 3b 6f 28 29 7d 29 7d 29 7d 29 29 7d 7d 5d 29 2c 61 7d 28 29 2c 70 3d 71 3b 65 2e 64 65 66 61 75 6c 74 3d 6e 65 77 20 70 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: et(l))return void o();e[r]=!0,n._assetLoadedMapping.set(l,!0),i({src:"https://s.yimg.com"+l},function(a){if(e[r]=!1,a)return void s(a);o()})})}))}}]),a}(),p=q;e.default=new p({selector:".wafer"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.11	49810	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	767	OUT	GET /uu/api/res/1.2/q6GKlQrNWZL2GH0uS9WZAg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_huffington_post_584/22aad6ac37ba7c2ebd256c0508355ff0.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	1160	IN	HTTP/1.1 200 OK Content-Length: 10980 Content-Type: image/webp Content-Disposition: inline; filename="22aad6ac37ba7c2ebd256c0508355ff0.webp" Etag: "62d65b9223a65fc493a3025d154c391d" Expiration: expiry-date="Sun, 13 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 14 Oct 2024 11:00:02 GMT Date: Mon, 14 Oct 2024 11:00:24 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=26;cpu=1;start=2024-10-14T11:00:24.316Z;desc=miss,rtt;dur=88,content-info;desc="width=356,height=180,bytes=10980,owidth=1200,oheight=599,obytes=123692,ef=(1,13,17,23,30)",cloudinary;dur=21;start=2024-10-14T11:00:24.317Z Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 931f763c4029d2a88d4a942b6de436c0 Age: 4791 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 52 49 46 46 dc 2a 00 00 57 45 42 50 56 50 38 20 d0 2a 00 00 90 b4 00 9d 01 2a 64 01 b4 00 3e 79 34 96 48 24 a2 a2 2b a7 d3 9d 69 70 0f 09 40 27 79 53 3c 64 70 2d ba 4e ab cb 1f 90 7c b0 07 7d da f4 16 7c 8f 51 1b 8a 3c d3 f9 9e fa 79 f4 00 fe c1 fe 03 ae df d0 af f6 03 ad db f7 6f d2 ef 07 1b 51 fc 2f f3 93 f6 69 62 9c 7f de 2c ed f6 cb fa ff 88 eb ed ed 26 bf ff f4 3c fb fb 69 d2 27 88 9d 02 7f 54 7f da f6 95 f0 33 fb 4f a8 a7 4a bf dd 9f 65 df d9 e7 19 07 76 46 be 61 a9 b2 9a 22 cb d4 04 7e ad 31 31 64 a2 3c 2c bc ea 20 b1 8a 2b 1a 4e bf 98 a5 03 7f 08 b3 39 21 62 dd 67 8b 14 4c 4d f7 b1 9f b3 86 1f 04 a5 03 ca cf df a6 58 27 38 ab 20 89 1d 4a 3c 19 9f db b8 b6 fa 63 23 0d a8 ef 52 5b bb b1 34 b5 d1 d9 44 a9 58 f7 e8 ce 2b c1 7a 27 a7 95 6f 1e 6c 92 14 Data Ascii: RIFFWEBPVP8 *d>y4H$+ip@'yS<dp-N\|}\|Q<yoQ/ib,&<i'T3OJevFa"~11d<, +N9!bgLMX'8 J<c#R[4DX+z'ol
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: d6 dc b6 1e e7 55 99 08 a5 e3 df bc 80 c8 d5 88 b2 2b af fc c2 06 ef a5 a3 a8 46 ad b6 2f 18 2f c3 e3 52 4f 90 07 61 83 cd 63 0c 93 fd 7c 6d 09 21 fc 39 10 e5 c5 7f 2d dd e8 e4 2a 7e 48 39 11 0d e3 aa 57 9e b0 70 1f 01 dc 39 b6 3f 8b df 10 ec 02 44 48 5f a9 ef f7 28 52 ac dc 45 99 6b 09 24 1c 45 36 35 e1 43 66 4c 00 0a d9 80 b8 75 de b3 d1 bc 26 e3 8a 57 54 8e 8e a8 61 f0 21 94 a8 45 12 d1 65 f5 2c 96 ac 44 e1 51 92 52 f6 cf f1 65 52 8b 43 41 e8 79 0e 46 b1 bd e5 64 13 d3 92 9c fd a9 c3 de f8 51 97 42 af 39 5e 00 00 fe fc 2e 23 cd 6b 9f 2f 97 95 51 d8 c5 4e 41 a2 7e 14 c0 eb c9 c8 bb 6a c1 62 57 1c 09 02 ad 88 d1 ba a0 5a db 2a ba bc 74 a7 53 4b 3e ef f3 3a 8b ae 3d 4d 44 9d ab 00 5b d7 bf c3 52 7c 00 95 a3 47 40 3e 8d 34 a9 6f cc a4 d1 4b 80 d9 b7 f8 29 Data Ascii: U+F//ROac\|m!9-~H9Wp9?DH_(REk$E65CfLu&WTa!Ee,DQReRCAyFdQB9^.#k/QNA~jbWZtSK>:=MD[R\|G@>4oK)
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 2c 93 a9 71 47 8e fb 0e 80 8f 6c f5 0e 19 e5 dc e3 65 60 d3 66 e8 0c b6 22 e0 9a d9 2b ee 3a eb 2e 55 36 5c e9 9d cc dd 9c 5d f0 0c fe 42 2a e2 fc 42 e2 53 bf 68 70 54 a9 5d 09 d4 04 66 07 66 64 34 e9 06 fa 73 e1 6e 04 72 45 91 d4 55 e8 79 d7 90 dc 3c 6f e2 12 11 7c c9 cc ed 9f 42 6c 92 e5 2e 5e c9 0e 7c 64 9a 4d fc 3b b0 21 5e dd 66 ac 05 9c 6e 4c f4 38 62 a4 2e 4a 56 69 62 28 9c 97 17 6f 05 de 57 5d 1f 33 41 8b 3d 86 66 e9 18 67 78 71 50 40 03 3d 87 21 39 f6 c4 71 7d 27 00 f0 c0 0b 1f 9c 2d 24 39 5e 4a ae bf 33 0a 2e 0c ae 47 03 7d 5f 4c 65 3a 34 ac 84 a9 9d 55 0e 69 16 43 cc 08 e4 a0 0e e9 c0 12 a2 2e 19 ae 86 76 3a af 31 69 f1 10 84 2c 55 79 3a 50 f9 f8 57 76 f2 7b 99 b2 b1 fb f7 4c 98 06 35 6f d3 bb 76 c5 a7 96 75 bc 64 3e 88 81 ff b3 4f 9d ff bc 21 Data Ascii: ,qGle`f"+:.U6\]B*BShpT]ffd4snrEUy<o\|Bl.^\|dM;!^fnL8b.JVib(oW]3A=fgxqP@=!9q}'-$9^J3.G}_Le:4UiC.v:1i,Uy:PWv{L5ovud>O!
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 5c ef 2e 54 7f 06 de 19 f2 ff 33 83 3c be 8d 51 58 1c a1 bc 19 b4 a9 2e 40 b7 69 ac f0 76 5a 93 8d 3e 31 87 dd a3 b8 15 78 22 3c 6c 91 6e 1f 83 70 bc 6f 4b 61 72 95 94 6f d9 61 ff e4 31 a7 78 32 91 be d4 c1 61 3c 75 6e 90 4a 30 9a a7 60 0b d9 22 2d d4 c8 af 72 9c c3 3c 0f 7e 54 7e d9 48 9f 09 1f ce d4 e2 c1 25 a9 a2 76 88 c7 bd 03 ea a7 19 15 5b 16 c3 af 9d 17 a4 23 75 5a 0f 2e 00 0d b6 6b 10 8b 39 0e 31 84 99 4c 67 7e 1a 52 e4 04 12 d9 7c 12 77 49 df 82 c7 29 1a 38 75 bb 45 f6 03 44 e3 c5 e3 f2 ba b3 be 58 a9 ac e9 5f c5 dd 71 3c 4e 5e 27 c3 2f 22 28 1a 86 9c 18 4a a5 12 a7 46 e9 b4 9c a0 cf e0 cc 96 58 79 c7 32 07 a0 4b ed c6 fb 08 21 17 23 c9 f8 94 e3 5d 17 b3 ff 34 93 6b d7 84 62 15 03 bf 58 3e c0 72 3e 7b 4e 11 39 c6 aa e8 31 be 77 20 e0 ae 1f 6f dd Data Ascii: \.T3<QX.@ivZ>1x"<lnpoKaroa1x2a<unJ0`"-r<~T~H%v[#uZ.k91Lg~R\|wI)8uEDX_q<N^'/"(JFXy2K!#]4kbX>r>{N91w o
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 7c fc da c5 6e 04 67 16 8e e5 1f 01 4b 15 dd 13 0c a5 54 81 1a 78 71 c9 b9 a3 f7 65 31 f0 ea 95 ea 46 43 98 1c 83 a8 0d 6d 45 f7 39 f8 a3 91 de 49 23 23 5e d1 ce 0c e8 82 4c 42 9f dd 27 3d 4b 24 b8 df c1 a2 9d 1a 06 37 85 9f e1 4a 0c 1a ec 8b 45 4d 07 55 87 f0 dd 06 2b 56 76 fa 98 70 3b f1 7b 0a 48 6d b1 d9 02 75 19 b8 cf 96 d9 0f 85 ea ae 83 10 8a db 52 29 f0 cc fd d8 ee c0 29 f9 ae fb 74 51 aa 6d 4f 4e 84 da fb b3 0e 09 35 2b e6 ab ce de c5 46 f0 a2 49 b3 b3 e3 3a 52 19 b3 91 7f 81 ff b6 c4 05 bc 9f c3 e7 6d 3f c4 20 a9 b4 1a de ee 83 80 2b c9 58 ef 82 a6 8f fb e7 89 fd 37 4b 1c fb 21 a7 18 90 7e 9e 43 e7 c3 97 46 0c 20 f2 54 5e a2 b1 3e 5d e9 03 d8 ba 85 cd 1e 29 da 44 75 a4 76 18 e2 ba 2b 01 97 71 91 3f 33 47 e7 e5 fe dd 71 e6 c5 6c e7 8e 18 e8 6c 49 Data Ascii: \|ngKTxqe1FCmE9I##^LB'=K$7JEMU+Vvp;{HmuR))tQmON5+FI:Rm? +X7K!~CF T^>])Duv+q?3GqllI
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 3b 39 61 9b b5 04 3d da 58 0d 2d 61 14 51 4c 5f f1 1b ad 2c da fc 57 64 9e 71 21 58 38 75 b4 41 55 fc 25 ed 48 8f 9c 88 09 54 b3 39 08 0b f1 fa 24 c7 6c 90 0e 2d f6 05 38 8e dd cc f5 70 a5 c7 ea 2e 90 de 87 3d 85 28 f9 cc a4 b8 5f 84 21 07 42 f0 8d f6 3a cd ab cf d3 06 cd f2 99 e1 11 23 e3 ee 5a 9b 34 63 91 e0 df 0c 9b 75 9d ec c5 36 6d b0 6a 58 15 1b 63 c2 dd 27 40 f5 6b 37 42 98 24 a7 33 91 ac 4c 1b 51 10 8e 5e c5 53 2e e3 60 2b c0 fb e5 cf 78 b1 83 ba 44 8e 51 e6 99 88 22 84 1e ee 8f cf 2d 30 d9 30 98 de 9c ab 5e 2b 09 d0 38 31 b9 5c 90 48 af 40 23 19 d6 4d ec 54 19 c2 4f 34 41 8b 02 ae 3a 2a 38 2c 79 eb 76 65 69 c0 6d e5 7e 40 74 5f b8 53 8b 63 a9 84 b7 17 43 b1 c5 be 5f a2 9a 99 62 fa da fb ac 4c 8f a4 b0 e8 a9 a9 a5 5b e6 ad 25 a4 ec 3f 18 ff fe 81 Data Ascii: ;9a=X-aQL_,Wdq!X8uAU%HT9$l-8p.=(_!B:#Z4cu6mjXc'@k7B$3LQ^S.`+xDQ"-00^+81\H@#MTO4A:*8,yveim~@t_ScC_bL[%?
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: b2 ca ab 61 34 61 4e 53 1f fd 9b 9a 9c 6d e7 33 9b ff f1 e9 61 71 d6 23 69 a7 09 f8 0d 42 08 eb 28 79 b7 50 1b 75 b9 ce 2e 7a 55 01 38 7f 8b c4 a7 95 7b b2 c4 04 a3 c7 8c a8 b3 9e 86 54 a0 1a c3 60 27 ea f7 32 72 21 48 3c ad 2a af 05 15 2e 6c 2a 36 b3 c2 cf 4f a7 9c 41 f9 32 d2 9c ed 72 57 50 01 b3 96 30 d1 d6 23 1f 33 b9 1c 43 1c 3a aa 73 b8 43 2b 43 8b 3d 39 68 79 96 68 6a 28 68 65 a9 0a 84 42 81 52 48 32 61 59 95 47 74 2f 05 33 ba 03 9e 6e d0 ac 22 ac 0b 56 99 d7 af d1 88 88 f1 da e9 ca a8 05 2b 60 c9 46 84 bf 52 bd 6a f9 c8 6d 00 34 b5 5f 2d 3b 67 52 87 a0 02 ae 35 33 c2 7a cb 88 87 b4 50 ec 2f c3 2f 29 f4 c7 7b a1 dd 82 1a d2 ab c5 48 0a 98 25 ce 38 32 b0 b2 b1 6c 3c d5 ae 46 69 02 66 f7 12 6b dc 64 ba b9 9d c7 37 96 8a 35 ca cf dd 50 01 db db cf 95 Data Ascii: a4aNSm3aq#iB(yPu.zU8{T`'2r!H<.l6OA2rWP0#3C:sC+C=9hyhj(heBRH2aYGt/3n"V+`FRjm4_-;gR53zP//){H%82l<Fifkd75P
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: b2 7d d5 f4 60 97 1a a1 d7 39 16 16 01 fc ec 01 b1 c5 70 a1 1d 6c 9a f1 74 62 4e cd e5 8b 2b a3 1b 04 cf 8e 52 1b a2 71 39 87 16 d0 60 1b bf ea 2b 45 d4 3e 7f 4e 42 d0 d6 16 33 f8 01 ba 27 ac 38 6f ae c1 0b 23 d7 af a6 5a 42 45 df d4 1d 52 2c 33 e7 e3 11 c8 87 8a b2 55 7d cd cd 8e 0c 94 44 3a 53 f8 39 c7 84 29 50 b5 f5 f8 e2 d9 8c 49 7d bc 10 e9 04 d8 a0 47 c8 21 a7 db 25 bb b3 c4 4b 00 62 ea 40 46 94 4d 31 85 4f fd 49 47 70 dc 92 ab aa 43 06 d5 5a 10 04 cf ee 58 92 98 5c 2f 42 c5 67 7e c0 59 5f d7 10 c3 f2 29 e2 c1 fd 55 64 f3 18 4f c6 c8 5d ec 9e 55 dd de 4b 67 12 98 26 ac af 40 f9 1f 44 76 a2 e2 85 ee 59 57 c9 47 8f 08 0b 09 3d a9 50 da e8 fe af 3c 16 73 38 39 35 dc f6 e9 05 24 b0 98 d9 0e db a6 78 0f 23 37 19 ee 58 d5 dd 89 30 91 ea ae 15 87 2a 52 8d Data Ascii: }`9pltbN+Rq9`+E>NB3'8o#ZBER,3U}D:S9)PI}G!%Kb@FM1OIGpCZX\/Bg~Y_)UdO]UKg&@DvYWG=P<s895$x#7X0*R
2024-10-14 12:20:15 UTC	580	IN	Data Raw: 35 6f 62 04 79 c5 ff 21 44 be d8 c7 5c 5e 53 de 28 0e 38 c1 fb de 0e 84 bf 04 1b 5f e2 a8 67 a1 cb 98 93 55 84 49 3d ab ee 7f de d9 af 78 15 f4 92 58 f1 00 75 36 49 b9 ba 7b 81 20 56 b9 31 b7 23 6d 26 f4 e1 49 7c 73 32 47 ff 3a 6a 3a 03 f9 43 1f bf dc da 71 f5 39 fb 9e 22 a0 59 c3 9c 91 c0 55 af ec 0f 1f 32 02 45 eb 2d 32 46 bb 44 7b 38 f1 3d d2 a1 79 fb 32 ab b2 e3 02 ac dc 9b 6c f7 5f 30 7c 63 bf 50 51 6d 01 8b e3 6a 76 97 98 a9 ad 30 52 17 7a 62 fb 97 fe da af 2a 04 a5 78 c2 0c c8 60 3e 93 0c 9c af 2d 0b 9d 77 52 a1 ca 6b 16 53 d1 89 81 b2 82 24 18 43 1a 7a 3e 7e f6 54 8d 36 43 c0 2a e3 25 b1 a3 de 35 29 ab 1d 5d c2 b3 75 89 bf 29 b0 06 ca 2a e3 83 ed 33 06 f2 04 05 9a 5e 6b be 10 4f fd 42 78 d2 0f a1 2d fb 57 ef 12 ba 8b e0 05 7b 08 10 25 51 41 ec 7a Data Ascii: 5oby!D\^S(8_gUI=xXu6I{ V1#m&I\|s2G:j:Cq9"YU2E-2FD{8=y2l_0\|cPQmjv0Rzbx`>-wRkS$Cz>~T6C%5)]u)*3^kOBx-W{%QAz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.11	49812	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	773	OUT	GET /uu/api/res/1.2/TXjvVjT6BxITti_rfSctrA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/f6c74ee0-89ce-11ef-9ebb-51a5b22ff008.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	1000	IN	HTTP/1.1 200 OK Content-Length: 4966 Content-Type: image/webp Content-Disposition: inline; filename="f6c74ee0-89ce-11ef-9ebb-51a5b22ff008.webp" Etag: "1930bdddfe5c445f9d43d8fb33cc1981" Last-Modified: Mon, 14 Oct 2024 01:52:37 GMT X-Request-Id: c4854be65f7ddf26753136f0fb17912e Date: Mon, 14 Oct 2024 10:44:18 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=1;cpu=0;start=2024-10-14T10:44:18.460Z;desc=hit,rtt;dur=90,content-info;desc="width=356,height=180,bytes=4966,owidth=769,oheight=433,obytes=33850,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options Age: 5757 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 52 49 46 46 5e 13 00 00 57 45 42 50 56 50 38 20 52 13 00 00 90 73 00 9d 01 2a 64 01 b4 00 3e 79 36 97 49 a4 a2 a2 22 24 51 5b 88 90 0f 09 67 6e dd 5c a8 66 e6 5c 7d 40 df d3 0d 05 ff be ef 2e bb be a7 33 6e 9e 3a 3a 7b 19 5b 8f ec 9d fd a7 89 33 53 3b 41 3c 67 f4 8f a0 5a bb 70 27 71 ad ad 15 e7 9a e4 d3 01 dd a0 ff 94 31 28 08 2b 8b ae f5 27 b9 14 64 4a cf 40 a4 72 5d ce 04 22 03 35 07 f9 07 20 77 70 48 f9 2a c7 27 83 f6 45 64 54 72 21 94 26 a0 39 c3 00 fa 74 eb e4 89 76 e8 5e 90 58 07 2a 4c 22 56 d2 4c 5a a2 14 5e 01 84 f6 ca 6c 21 3a 1f 88 8b dc cc 6c cb 7d b9 60 09 ff 7f 8f 61 42 2f c7 99 b0 d4 49 82 db 3d 1d 80 6b 33 09 80 5d 1e ba 6f 51 cf 69 af 0f 09 29 96 dd 6a 6a 51 20 e1 ea 85 d0 e0 c6 b9 8e 94 cf b1 d6 7e d1 19 4e 96 75 40 1b 5a 15 c8 bf 5e 98 Data Ascii: RIFF^WEBPVP8 Rsd>y6I"$Q[gn\f\}@.3n::{[3S;A<gZp'q1(+'dJ@r]"5 wpH'EdTr!&9tv^X*L"VLZ^l!:l}`aB/I=k3]oQi)jjQ ~Nu@Z^
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 9f 24 54 90 c3 a4 4f 37 b2 b1 2d 35 f1 41 4c 62 45 c8 dc 32 36 90 6d 66 93 e7 d1 09 fa 37 d1 24 d3 bb 7a ec fb e3 3a c5 21 42 e5 03 16 b1 20 b5 80 f7 8f aa 4e f0 2e e1 b7 35 2f 0a 23 74 04 a6 1d 54 d5 73 a7 2d 57 88 c9 09 a0 f6 d2 86 d7 dc 1e 24 fc c1 53 d2 fa 15 84 63 f1 f9 8c 63 96 a8 ab 6e 81 61 0a b7 b1 a4 1a 20 79 5b fb ff 73 f6 a9 ed bf 84 57 e7 37 e3 bf 9c 8f 4b af 6e 8a 5e b3 4a 78 af 02 c1 34 c6 01 98 dc 54 e9 e4 0c 5c 9a b3 ca 7d 57 65 0e c0 c7 bd a8 9a c0 c0 1a 9a 81 39 83 0b 6d 83 bd 6a 5a 13 4d d5 c4 b9 74 5c b3 fd fe 3e 2d ff 3d 11 42 69 b4 05 32 49 52 ca d3 46 de f4 65 11 a8 f1 ad a4 c5 f7 4d a3 a2 30 d4 79 9c a0 73 21 6f b2 da 26 2e 9d 53 49 3c 18 86 9b c7 10 dc 6c 0f f1 42 00 c3 31 fc 74 c3 90 9d c4 1e 94 74 24 a6 b6 c4 3a 40 ad 89 80 ed Data Ascii: $TO7-5ALbE26mf7$z:!B N.5/#tTs-W$Sccna y[sW7Kn^Jx4T\}We9mjZMt\>-=Bi2IRFeM0ys!o&.SI<lB1tt$:@
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 6d 1b 1b 06 32 46 1c de db 6d 76 a1 03 ce d3 e6 ba 71 27 58 16 93 c5 20 c1 41 75 7d ed 89 6b 2b fa 43 10 69 12 a4 16 95 dc 6c ef 71 bb d1 5e 58 8a 27 84 1f e4 59 49 55 eb 44 eb de 12 82 2b db 69 9b 36 a8 3e 8e 6b 6b 43 d7 48 80 56 d1 d7 d2 c2 a5 d9 82 3d a9 a1 4e e8 4a cd 25 b5 87 dd eb 08 96 bf 51 4d ce 33 f4 37 87 5a 3d e2 39 a7 61 0b 21 32 41 f2 af 14 82 c6 7f 00 88 32 58 75 02 e3 6c 58 3a 98 f3 57 ed eb b5 9b 1d 94 23 b2 d2 3f 76 0d f5 6c e9 ab 28 67 2d 64 40 b5 77 af 8c 61 75 1e 0d 4a c3 8d 7d e8 2b 7c 77 1b 85 8a ff e8 0a 5d a9 0e 42 1c 54 91 50 6d 44 f5 ba 9e be f4 f4 d7 38 48 0c 89 d1 82 67 20 97 87 9d 95 16 e6 57 69 68 a4 b3 27 bc 91 05 72 16 a9 9d 3b 11 af 2c 38 9e 31 48 7d 7e 54 4f ac fa 65 cb 19 3e 9f 1d 15 64 c9 50 ec 9d 47 0d b2 15 ce c9 a9 Data Ascii: m2Fmvq'X Au}k+Cilq^X'YIUD+i6>kkCHV=NJ%QM37Z=9a!2A2XulX:W#?vl(g-d@wauJ}+\|w]BTPmD8Hg Wih'r;,81H}~TOe>dPG
2024-10-14 12:20:15 UTC	1066	IN	Data Raw: 57 c9 34 5f 91 2a 0f 8f 0e 3b 0e 04 42 7d 1e 9c 40 31 3a b5 3d 46 e8 7d 8a fa 75 fb 79 61 01 6e c5 0c 64 1d 88 a2 99 3f 22 36 39 0f 54 d9 07 6a be b2 ed ab a6 c1 51 cf ab 16 fe 1b 2d 69 8a 6d 19 03 6e 99 16 6b 9d cf 54 68 5b 44 80 23 af b3 aa c7 98 49 dd b5 0d 44 08 c9 87 b7 a0 23 d1 81 8e 5a 83 6c 63 8c e8 c7 34 46 e4 76 7f 45 a3 38 ba 97 0f 33 cd 8f d9 8f 06 47 40 95 7f ef 93 4f bd 15 59 19 17 8a 6b bd a4 c2 f9 72 cd 01 8d 49 9f 3c 84 e7 73 6d c0 60 11 22 95 66 b9 5c 2f 28 26 a8 b4 0f 4b c5 9d 98 63 63 f7 6b 9f d6 c9 9b b9 a4 6b b9 b9 05 3b b0 9e e3 92 31 24 dd 72 24 1d 6a 4d ef 98 3e 30 b1 f7 3d db c6 49 5e bb 6c 61 a2 0a 66 9e 01 fb 7e 76 89 cb ca af 0b cf 97 79 cf 1a 13 4c 3a 43 cd 06 c1 78 f1 ff 8c e4 a6 b9 66 02 35 0d 79 7a ac 68 8f c7 08 e1 29 76 Data Ascii: W4_*;B}@1:=F}uyand?"69TjQ-imnkTh[D#ID#Zlc4FvE83G@OYkrI<sm`"f\/(&Kcckk;1$r$jM>0=I^laf~vyL:Cxf5yzh)v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.11	49813	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	379	OUT	GET /pv/static/img/header_1x-1479864976616.min.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	938	IN	HTTP/1.1 200 OK x-amz-id-2: sv5R/SDORJAYiU/+q57dQ7h4h4CQvtTh+KyDt1EWl8FjMqKZnG1vMs/VhKZVk89U6hakzSccLIs= x-amz-request-id: 44KJZ8HB68RD4FTP Date: Sat, 12 Oct 2024 15:21:52 GMT Last-Modified: Thu, 19 Apr 2018 17:59:57 GMT ETag: "7f972abeceed50ca083138400b84d1c0" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-meta-created-date: Wed, 23 Nov 2016 01:36:21 GMT x-amz-meta-mbst-etag: "YM:1:174fb767-5e6f-47ee-959f-e24098938cca000541edea87a377" x-amz-meta-x-ysws-mbst-vtime: 1479864981365623 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Content-Length: 910 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 161904 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:15 UTC	910	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 ca 08 03 00 00 00 85 41 00 a9 00 00 00 f6 50 4c 54 45 00 00 00 b4 b4 b8 88 88 8c b4 b4 b7 88 88 8c bb bb bb 88 88 90 00 00 00 0a 0a 0a ff ff ff ff ff ff 00 00 00 ff ff ff ff ff ff 8e 8e 8e 48 48 53 ff ff ff 00 00 00 ff ff ff ff ff ff ff ff ff 8d 8d 8e 48 48 52 ff ff ff ff ff ff ff ff ff 8d 8d 8e 49 49 52 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 8d 8d 8f 49 49 53 ff ff ff ff ff ff ba ba ba ff ff ff ff ff ff 48 48 52 ff ff ff ff ff ff ff ff ff ff ff ff 8d 8d 8e 48 48 53 ff ff ff 8d 8d 8e 48 48 53 8d 8d 8f 49 49 52 ff ff ff ff ff ff 8e 8e 8e 48 48 53 8e 8e 8e 48 48 53 8f 8f 8f 49 49 52 ff ff ff ff ff ff 8d 8d 90 48 48 54 8e 8e 8e 4b 4b 52 ff ff ff 8f 8f 8f 4a 4a 53 ff ff ff 91 91 91 48 Data Ascii: PNGIHDRAPLTEHHSHHRIIRIISHHRHHSHHSIIRHHSHHSIIRHHTKKRJJSH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.11	49816	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	384	OUT	GET /rz/p/att_homepage_en-US_s_f_p_bestfit_homepage.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	714	IN	HTTP/1.1 200 OK x-amz-id-2: kXC8KIlaQDBmzQyyYFJNn7BB0lfH0w2arCYAGP3JAESw6P45CTbxclvZmFaJ/20q867cMlMe314= x-amz-request-id: 58GPNQ7V8T70H7CZ Date: Mon, 14 Oct 2024 08:35:52 GMT Last-Modified: Sun, 13 Oct 2024 21:31:08 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 8999 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "16766a70949dcdcdf1ea0b15299b6b26" Expires: Mon, 14 Oct 2024 23:00:00 GMT Age: 13464 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2b 00 00 00 30 08 06 00 00 00 49 c2 5c 58 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 01 2b a0 03 00 04 00 00 00 01 00 00 00 30 00 00 00 00 96 be 57 8a 00 00 22 91 49 44 41 54 78 01 ed 5d 0b 7c 15 c5 d5 3f b3 7b ef 0d 37 3c 15 f0 81 02 a2 82 60 c0 d6 af da 5a eb 8b 0a 04 6c 6b ad da 26 01 1f 24 20 56 5b db fa e8 d7 56 0b 8d 8a da d6 fa 6e a9 20 02 ad 4a 00 e1 b3 7e 5a 4d c2 4b d4 af 56 ab 16 93 f0 92 37 a2 16 79 25 24 90 dc c7 ee 7c ff d9 bd bb 77 1f b3 37 a1 42 8c 65 e7 97 9b 9d 39 73 ce 99 d9 d9 9d 33 67 ce 9c 99 25 0a 43 d8 02 61 Data Ascii: PNGIHDR+0I\XsRGBDeXIfMM*i+0W"IDATx]\|?{7<`Zlk&$ V[Vn J~ZMKV7y%$\|w7Be9s3g%Ca
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: c6 f9 00 d4 b1 17 23 56 cf 18 df 16 89 b0 a5 a2 8e 4e dc b6 c4 27 c5 57 f5 4b 27 f5 91 3a 67 fd d1 57 b0 38 a3 ec 51 18 df 1a 89 29 8b 0f d6 d5 22 9d 48 4c 42 99 aa ac 5c d4 73 6b ff c9 43 5f a2 72 77 ae 29 ac 4a aa 2f 44 07 44 67 0d 08 8c 5e 27 25 7a 55 8e a9 c5 1d 54 b2 e4 0c 52 63 66 67 b0 d8 a4 a9 18 9d d8 dd 69 8c 3c 2e 84 4b 56 58 6d ac 3e 1d 9d e7 1e 8b cc be 32 f1 ea ab 8f d8 69 9d fd 37 f8 0d b7 d3 22 c2 f4 85 54 5c 0d 4d 82 cf 26 9d 8f b2 f3 c4 5a a8 ca 4d 35 52 3b 80 ce cd a7 da 79 56 84 a9 4f a1 83 95 51 aa f9 5e e4 77 31 c1 82 90 f9 b5 0b 71 7f 3c 7d 37 e9 da 25 c0 8d a0 23 67 02 22 66 fc 2c dc 43 09 56 4e 6f a3 a2 a5 97 d1 fc 8b b3 2f 83 10 c2 25 55 0f 03 d1 2d 58 b8 92 a2 b1 55 1a ad 49 ce 41 de 50 8b a3 c1 90 43 f3 d1 a8 04 42 e7 47 34 bf Data Ascii: #VN'WK':gW8Q)"HLB\skC_rw)J/DDg^'%zUTRcfgi<.KVXm>2i7"T\M&ZM5R;yVOQ^w1q<}7%#g"f,CVNo/%U-XUIAPCBG4
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 6d 6f 02 9d 2b ee 51 91 f3 9f 49 3b 88 d8 d9 10 63 e8 3c ed 1f fa 0f 56 16 a0 d4 4f a4 25 eb fa 44 2f 5c 6c 7f c1 14 49 3e 68 33 f6 c7 5b fa 6e ef 84 d5 ab 0a 68 18 2e 01 e1 e5 d3 5e 69 21 d0 b4 95 75 c5 56 79 a5 ea aa 2b 21 58 6e b5 d2 07 73 05 af ef 4c 50 6b f1 0c b3 01 82 ef 3a bc fb 13 b2 90 83 88 71 1a 5f aa d4 5c 2f a3 b8 2e b6 aa 00 e5 5d 28 cb 13 30 0c 32 d3 82 f2 14 bc 90 66 47 f0 61 40 a8 30 9a e7 03 b7 15 10 34 f5 62 04 61 70 4e d6 40 68 4e 97 1c f6 1a 47 01 11 47 27 d3 83 b4 23 81 6f 08 8e 17 70 c5 8d b2 c7 50 ef ff 45 43 57 19 9c c6 56 0f 44 e7 3c ca c1 d5 1d 65 d0 f2 18 3d 85 b9 df 03 98 b2 3c 8d cc 19 06 42 71 35 b4 42 fd 01 37 72 26 a5 b0 5f 53 3c 76 3c 6c 49 17 92 9a 77 06 e8 fd 9d 9a 51 67 07 6d 80 a0 45 1b 13 7b 16 4f e8 87 b8 4e 77 e0 Data Ascii: mo+QI;c<VO%D/\lI>h3[nh.^i!uVy+!XnsLPk:q_\/.](02fGa@04bapN@hNGG'#opPECWVD<e=<Bq5B7r&_S<v<lIwQgmE{ONw
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 95 24 f0 8c 81 3d 09 37 0a e9 02 01 bb 97 e6 8e d8 24 a1 6c 77 90 aa 44 7e 1f 50 e8 80 cc 76 0f 3c 46 b9 61 1d 74 ef 3c 99 2a 78 4b 4f 6a b0 bf ca 02 fb b8 ff 94 82 47 bc 39 e5 af b0 34 a9 6c b2 17 de e6 b4 c2 97 39 71 a1 1d fd c3 99 b6 e2 f0 bd 52 8c b8 e1 9b 67 41 b3 57 68 7b 93 0d 41 95 05 e1 55 82 d7 55 4c 85 36 24 0b c2 c7 cf 08 d6 d5 85 a4 46 22 77 78 5d 0a 44 9a 47 94 db 5d 88 d9 84 7b 00 e0 74 bd d0 44 a5 3f 46 73 7e b7 e3 b8 fd 59 52 7f 2c 02 bd 6e 1f 46 9e 5e be 2c 38 92 91 70 17 40 65 7c 79 ad 01 76 6e fa 22 50 62 3e 34 31 e2 76 e9 59 e3 82 07 ad 04 2a 0e 61 12 a4 7d 61 e4 c8 59 bf 72 2c c9 ae f9 40 d4 c5 1f 9c c6 64 6f 2e 27 a9 4a 9d 11 4c 10 4e 18 47 82 02 a3 bb 21 a8 ee b1 b3 19 8c e2 32 74 ce b2 c2 58 20 0b f7 06 d9 ee 73 61 0f cb 8f bf 63 Data Ascii: $=7$lwD~Pv<Fat<xKOjG94l9qRgAWh{AUUL6$F"wx]DG]{tD?Fs~YR,nF^,8p@e\|yvn"Pb>41vYa}aYr,@do.'JLNG!2tX sac
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 6f 83 65 f3 27 6e 3a 3b 95 b5 e7 f0 b4 5c ab 22 fa 17 84 85 74 04 b0 b9 50 c0 d4 2a a7 26 01 6a ae 6c c8 f2 70 c4 d2 fc 77 34 a1 f2 68 07 84 68 01 b6 16 14 57 5f 8a fb 79 13 2e 0a 6e 5b 4d a0 31 db 33 5d 13 ee 0d 24 3c f1 25 c1 2b 90 b9 b1 d1 5a 82 08 10 cb ec 55 13 8e 9f c5 d5 b7 d3 8d cb bb d8 88 c2 fe 28 dd ae 04 0c 6f 19 36 11 22 11 55 26 ac 9c 18 66 9c b1 5f 79 5d 5d ca 39 8f 7c 97 7f 10 17 57 3f 41 fb 42 58 8c 4f 13 86 dd 36 96 ba 58 d8 75 2c 5c 61 97 42 07 96 ba 61 a0 d3 9d 28 b6 99 8c 67 35 9b 61 1b 7b 7d eb 8a da 5d 58 69 bc db a2 6d 8f ab 1a c7 96 38 22 43 0b 74 97 87 a9 19 d7 27 37 6d 6c 69 c0 de bd 55 5b ee ac 85 7d 5a ff 83 d0 28 dd 78 22 85 f3 a3 54 05 fd 19 21 46 0b 30 c5 95 cd 3c 54 0c 94 bf de b2 a2 ae d1 e0 b7 a2 76 1f dc 2a 7e 8b 36 f0 Data Ascii: oe'n:;\"tP&jlpw4hhW_y.n[M13]$<%+ZU(o6"U&f_y]]9\|W?ABXO6Xu,\aBa(g5a{}]Xim8"Ct'7mliU[}Z(x"T!F0<Tv~6
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: ab 13 97 45 d4 52 94 e8 79 e7 45 1d d8 0b 32 a7 5a 27 ad 33 ee 36 8c 99 fe 3c d7 50 d1 92 a9 a4 a4 71 ea 23 bb 18 c8 05 e8 80 b8 37 6f 60 1b 00 7f 05 cb f6 4f d1 33 a3 5e c3 03 cc 6a 21 a2 33 8e 5d 02 c3 7b fa 49 68 17 17 d9 94 86 26 05 fc ce fc 4e 7a 72 c4 1e d8 7e de 03 dd 29 76 be 88 30 87 f7 6e 5a 3d 0d 16 b8 4d ae 7c 23 c1 b7 b9 b4 2f 3f 82 60 d4 0b ad e1 a7 65 f4 9a 14 5d 06 ac 18 35 93 4a 96 bd 41 7a ea 17 a8 d7 b7 e4 36 36 b4 03 c3 a6 e9 48 14 27 61 5e fc ae cd 46 c7 22 03 63 fe f2 39 b9 ed 26 c2 18 ae d5 43 f8 4a 70 29 e6 17 56 a2 80 b9 a3 97 a3 ed ce c5 fd 3d 6a d8 ca ec 42 8d 08 06 02 9c 06 a1 f2 df 1a a7 90 0a 90 58 b9 6d d8 05 97 07 49 19 0a 73 69 45 6e 56 56 2a 40 93 63 fc e7 64 ee 57 b4 10 8d 2b 67 0a 3e 5a a9 8d 70 01 91 80 7d 22 d8 4d c6 Data Ascii: ERyE2Z'36<Pq#7o`O3^j!3]{Ih&Nzr~)v0nZ=M\|#/?`e]5JAz66H'a^F"c9&CJp)V=jBXmIsiEnVV*@cdW+g>Zp}"M
2024-10-14 12:20:15 UTC	1199	IN	Data Raw: 79 85 0b b1 b9 fc 55 9c 51 f5 6d d8 c4 4f 81 f0 3c 1e 74 e2 50 46 18 da d5 e7 5d 1f 6c 0d e2 d1 c1 e1 c2 a1 13 55 94 4e 5f 3b 78 d5 c3 ea 65 5a e0 c8 14 56 45 55 df 84 a0 ba 05 c2 a0 0b b4 86 4f d0 f9 7f 0f bf a9 5b f1 31 d3 49 78 9d 07 43 c9 80 e3 26 ff 3e 3a ec bd 54 31 6a 05 8e c2 b9 1e 1d f8 7b e8 bc 11 08 92 17 e8 f2 51 0f 19 e7 c3 17 2d 1e 82 f7 ff 6e e0 89 e5 7d 38 07 e2 83 ab 8a 72 3f e8 e1 ac a7 dd 8a 74 14 79 77 48 57 ce 84 df d6 a2 ea 07 c1 6f 23 f8 1e 83 e7 31 d0 78 26 73 0b 5f c5 f5 04 12 6e 03 3b 37 35 42 20 ed 80 46 94 11 5e c8 19 b7 18 42 8d f7 80 50 29 87 bb 17 04 90 36 15 65 ec 31 68 2b 46 0b 8d ec 04 12 9b b8 1b f4 bd 80 af 07 ed 20 23 af b5 7f 4f 15 8a e9 9d 61 6f 6a 0d 35 cc 0f 5b e0 b3 68 81 23 53 58 29 38 6b 9a 33 fc d0 e4 1c c7 3a Data Ascii: yUQmO<tPF]lUN_;xeZVEUO[1IxC&>:T1j{Q-n}8r?tywHWo#1x&s_n;75B F^BP)6e1h+F #Oaoj5[h#SX)8k3:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.11	49811	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	754	OUT	GET /uu/api/res/1.2/gjr9LW9dHL.LMH20gjRF3g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/4d612b01abae8be4fec5c774c34a1d3f.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	1161	IN	HTTP/1.1 200 OK Content-Length: 13172 Content-Type: image/webp Content-Disposition: inline; filename="4d612b01abae8be4fec5c774c34a1d3f.webp" Etag: "395f1d8c5332cda7832a9a3ef44f4624" Expiration: expiry-date="Sun, 13 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 14 Oct 2024 11:00:02 GMT Date: Mon, 14 Oct 2024 11:00:02 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=27;cpu=0;start=2024-10-14T11:00:01.981Z;desc=miss,rtt;dur=88,content-info;desc="width=356,height=180,bytes=13172,owidth=2000,oheight=1333,obytes=208036,ef=(1,13,17,23,30)",cloudinary;dur=19;start=2024-10-14T11:00:01.985Z Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 570871ca85970e91b965b7f50f41bca1 Age: 4815 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 52 49 46 46 6c 33 00 00 57 45 42 50 56 50 38 20 60 33 00 00 d0 a8 00 9d 01 2a 64 01 b4 00 3e 79 34 95 47 24 a3 22 21 2c 97 8c 00 90 0f 09 40 76 0d d4 d6 7f 22 be c7 bf 0f d6 8e 4b fe 0f e5 8f e4 07 cc ff 2c f7 af ed ff 0b fc 6b 5f b1 d3 b9 7f f5 4d fc af b8 9f 9b 7f f0 3d 5d ff 79 ff 59 ff 63 dc 37 fa ef f4 6f f8 3f de fa f1 fe ec 7a 8f fd bc fd b7 f7 67 f4 b7 fe 2f d4 33 fa 47 fa ef 57 df 57 6f ed df f7 bd 89 fc e8 3f f4 fe e9 fc 3f ff 7e ff 8d fb 99 ed ab 79 47 f9 bf 07 fc 8d 7b 67 dc 3f f0 de e1 39 2b ec 57 52 6f 9a 7e 1f fe 1f ae 7f e9 3b f9 f9 0b f4 7f b0 5f b5 ff db ef 5e ee 9f eb bd 02 3d bc fb 2f ec 7f a9 cf cf ff e8 ff 25 ea 77 d9 3f 60 0f e7 ff da ff ef 7a d5 ff 0b c3 63 ed bf ef ff 6d 3e 01 ff 9d ff 83 fd 94 f6 72 fb 03 d1 57 d7 1e c2 3f b1 dd Data Ascii: RIFFl3WEBPVP8 `3*d>y4G$"!,@v"K,k_M=]yYc7o?zg/3GWWo??~yG{g?9+WRo~;_^=/%w?`zcm>rW?
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: f1 55 09 8f e2 28 61 2b d7 22 97 30 82 7f 76 3e e0 5c 1a 7f 8f aa 90 c7 12 c8 59 18 31 87 c1 29 cd 77 f7 56 ff 96 0e 44 46 5a 4e f5 02 2a 7d 0a 7e 1e b7 db 7e 74 8d 70 01 22 d7 8a ce f8 8a ac ca c7 d2 89 1e 2d f0 42 57 82 c8 54 e8 b4 40 00 fe e9 fb 67 f5 b1 f6 19 d5 ef 53 9f f6 e2 dc a4 f6 25 e7 cf 90 3c 54 a7 eb df dc 79 8a bc cd 55 50 9e ec ed 27 ef b0 44 a2 46 fb 31 4a 42 dd e1 a1 66 17 11 6d 1b 24 7c ef a1 a5 08 c2 61 e5 92 71 7c cc f4 aa cc 09 44 73 48 44 3d 59 96 05 2a c8 ae 74 b1 a7 5f a4 7c 4a 50 e1 f8 9f 65 05 8d ce 4e 3c e9 05 a1 19 3b 0d 90 33 15 43 dd cf 9a ef 91 dd 2c 56 d1 ad f1 bf d2 49 e9 b7 96 3b 1e ad b4 bb 13 f9 1a 64 37 bc ef 69 dd ff a5 e1 f7 bb f4 92 2f 8a a3 15 2c a6 40 57 6a d7 ed 21 bb 8d b9 0c 7a 7d 51 50 4b 0f 5d ee 6c 3e 75 97 Data Ascii: U(a+"0v>\Y1)wVDFZN}~~tp"-BWT@gS%<TyUP'DF1JBfm$\|aq\|DsHD=Yt_\|JPeN<;3C,VI;d7i/,@Wj!z}QPK]l>u
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 42 51 9f e7 d4 18 41 ec c6 76 c9 71 e1 7c 1b d5 42 60 a4 f7 09 3a 72 a0 67 2f 85 f7 3d 9f 70 87 d5 53 b3 ff 6f d2 fd 49 db 05 cd 30 60 9d c5 f2 73 67 cb 07 84 cf 30 8f 17 c4 7d f8 ff 32 d0 cc a0 45 44 ce 34 c1 85 0b cf f9 f7 cd c9 28 5c 35 91 33 ad 16 dd 37 fc fd ec bd 1d 18 8e 8c e1 81 bc 21 40 84 30 72 5a bf bb 47 1f e5 33 35 34 23 fb 19 f0 ce 05 c1 ed b5 ef 58 59 0a 74 fc 45 c8 39 2c 65 2b bc 23 29 2a d8 0e b9 06 d0 1b 39 50 2b fa 9f 46 75 3b 12 e3 2e 0f 5a 13 7d 11 d2 a9 b0 21 5e 1b 37 d8 6c 07 58 36 dc fb 3f 85 09 8a 5a 41 e8 8e 45 66 31 6a 29 14 dd 90 ba 29 cc 5e 71 15 b5 54 4b 4d 1d af 02 79 0b a1 88 e7 59 3b 66 17 d4 99 e0 3e 2c 0f df 69 88 b0 1e 9e 18 34 76 5c c4 58 8e 98 41 87 28 59 ff 13 12 24 c7 d9 c0 9a 09 89 ac 12 42 13 a4 3b b9 4c ef 65 7c Data Ascii: BQAvq\|B`:rg/=pSoI0`sg0}2ED4(\537!@0rZG354#XYtE9,e+#)*9P+Fu;.Z}!^7lX6?ZAEf1j))^qTKMyY;f>,i4v\XA(Y$B;Le\|
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 4c e9 c2 5f f9 68 c8 a6 7f 61 74 88 49 f1 df 23 1f d5 4c 36 ae b7 e9 dc dc 0e b6 36 46 39 c9 ac 85 d0 05 2d 47 5e 48 8d f3 9a 94 4b 40 e2 e4 cd 58 dd 78 2b b3 63 7c d0 13 3f b8 fa cd 67 b2 0e ff 39 86 4e 1f 79 af 76 02 ed bb 2c 88 90 11 59 d8 3b 16 6c e9 d6 57 af 4b b2 d0 95 4c 68 57 9f 1b ac 5f ce f2 05 fc c2 6b 66 ae 1f 53 ee c7 61 18 ee d1 d2 87 50 ad c7 d0 14 3c 12 9d 7b e9 86 85 b2 78 88 88 3b 7c b7 7f f5 cb e0 f9 d2 4f 0f 17 a7 a9 30 07 57 b3 47 7c 03 d0 dd 35 c4 20 e2 a7 63 9b 69 ab 96 5c a8 7f 08 18 f7 70 f8 86 8d c3 c5 8a 62 da b6 88 cd 69 ec 7b 57 86 f2 b5 36 2d 09 a7 35 66 70 ed a3 f7 0d e0 83 0f 86 f8 53 f2 7c 65 d6 cc db c2 93 9f a9 a4 6d d9 92 22 ed 54 ef db d3 dd 9a 08 f7 1a 9a 4b 7c a4 8c e8 61 1f e0 c0 df bc 7d cb ae 23 c3 aa dc 7e d6 8e Data Ascii: L_hatI#L66F9-G^HK@Xx+c\|?g9Nyv,Y;lWKLhW_kfSaP<{x;\|O0WG\|5 ci\pbi{W6-5fpS\|em"TK\|a}#~
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: cc 68 ac 21 e0 63 93 a9 eb 21 8d cd 8e 2e 5a c8 05 06 e5 86 13 2f 95 4b 00 05 68 9a 3f 44 7a e8 cf ee d1 e0 69 4f 26 10 c6 d9 9c 43 9b ca 2a 4e f6 91 fa 65 07 fb 4a 46 87 10 d4 7c 5c 0c 5b 65 97 eb 07 a0 15 78 60 db 97 ad 72 13 f1 1e 95 f6 6b 5e 53 21 c4 0a e3 b0 26 d6 5d cd 39 b1 0f 65 c6 b0 0b a7 68 8b 42 c3 1c 0f bb b6 bf 6d 44 8a a3 78 13 85 ef 11 e6 dc 89 fc 22 fa b6 2e a9 02 48 91 86 b9 7d 8a e4 df 71 4c 0f 08 ee 4a 83 f1 ff 9f 64 49 31 50 28 3a 70 14 1d 90 d7 41 ea ea 64 f2 b6 dd 36 19 0a 38 1b a3 4d 29 b9 4d 0a 59 2d 3d 84 64 29 62 32 11 05 03 80 a3 e7 89 2a 71 69 b5 23 36 ce 19 4b f7 42 6b d3 2f c2 53 ef 27 1f 0a 1d 7c f3 20 54 1e 0e 63 6f 3f d6 f2 d5 54 78 d8 12 c3 91 9e e8 27 a3 51 5d c2 1a 8f 60 f5 d9 2c 96 b7 b5 ba 8e ba 87 a4 5b 5d d2 dd 6f Data Ascii: h!c!.Z/Kh?DziO&CNeJF\|\[ex`rk^S!&]9ehBmDx".H}qLJdI1P(:pAd68M)MY-=d)b2qi#6KBk/S'\| Tco?Tx'Q]`,[]o
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: ff e9 1f 01 83 61 cc 7d d2 90 fd 86 bf 69 02 e6 aa 6e 57 08 02 34 0f 23 84 79 13 1e 93 7c b6 f4 e9 86 69 99 b8 28 41 02 15 f5 cf 92 60 e9 64 d0 4e dd 5e 11 9e 26 56 45 5e 17 a3 60 dc f2 26 95 8a 92 6f 06 60 84 80 c2 68 a1 c1 70 5c cb 2b 11 fc f1 f6 2a 54 d2 f6 dd 0e 7b 6b ca 2a fe 93 db 43 e8 eb af 48 36 fc 23 4e d7 cf fc aa fd f4 c9 17 e1 be bc 68 dd e5 57 75 86 79 51 20 21 02 d7 74 db 43 66 14 cd fe 15 f1 08 45 0b 63 75 53 c5 ef c4 55 79 56 54 76 a5 b7 c8 2e b2 a0 c0 07 dc 2c 88 a2 08 2a 16 9a 12 f8 73 97 96 d5 70 b3 d7 f8 34 f2 8a 19 c5 f5 5f 34 8e 82 5c d2 27 8c df 54 a7 b0 1f 2c 6f 7d d4 9d 9e 6e ee ce 5d 0b 99 b4 58 b7 49 d7 c4 31 94 50 6b b1 5e bd b1 12 7c 3f 8d c2 88 b2 1b f6 f7 0a 7b 73 30 78 e9 54 34 51 1e 86 98 fc 2d 7b d5 21 6f 02 37 bc e2 29 Data Ascii: a}inW4#y\|i(A`dN^&VE^`&o`hp\+T{kCH6#NhWuyQ !tCfEcuSUyVTv.,*sp4_4\'T,o}n]XI1Pk^\|?{s0xT4Q-{!o7)
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: e3 db 90 44 88 59 79 ac 36 d6 d7 23 bc dd d4 13 97 7d 9a 82 71 ce a4 d9 a8 5a db 91 46 7d 7e 3b d0 d8 53 04 89 08 b1 af 74 4d 8e 58 3e 0d 31 9d 42 39 60 1e ea 06 05 5a 32 cc 62 89 5f af 02 7f a1 66 fc fa 38 e3 c0 59 06 b5 2d 88 a6 0d 69 f2 8e 17 24 c3 9c 86 e0 58 26 dc 30 b7 b7 59 26 c9 1e ba e2 25 ad dd 45 1f 7f 9b bb 54 7a 0e 73 74 69 c0 35 2e fd 09 7c 5c 56 40 97 ff e9 4e 27 96 f7 b2 61 ff 7f 82 e5 e8 e6 4b d3 30 78 19 3d 66 84 56 4e 94 f3 e9 4b fe 2c ce 05 83 39 d3 09 dc 45 15 04 cb 18 eb 22 6a 76 2e d1 11 05 b7 09 78 db 29 50 9a d7 0e 32 d5 44 fb b0 47 5c 11 9c 66 7b a8 5a 17 34 2c ce 4c ea ed cc 76 69 64 80 fc e3 6f f6 d3 6b 77 d2 1e fb 15 00 ae fd 86 24 4f 53 c7 06 05 1d 1b 3c 9c 43 22 7f 84 a9 29 e4 f3 bf 62 4c c8 b7 dd dc 1d 17 8f 94 9d 37 7d 37 Data Ascii: DYy6#}qZF}~;StMX>1B9`Z2b_f8Y-i$X&0Y&%ETzsti5.\|\V@N'aK0x=fVNK,9E"jv.x)P2DG\f{Z4,Lvidokw$OS<C")bL7}7
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 70 d1 5d be 4a e9 62 0a c8 5e 89 06 c8 12 c5 44 ba ca bb f9 af e6 ba b5 aa bd 4a 2f 2e 31 51 31 e7 43 49 f8 15 da af dd 62 37 26 ec 87 91 a3 3b 63 56 8e ee 3f 29 dc 50 c9 50 cd 24 42 46 be d1 6c 98 4e 2c f0 ad 90 61 e7 c5 96 a5 c6 07 7e f1 2c b8 9e 84 29 c1 a4 35 89 48 15 1e 99 81 da fc 11 0f 02 b5 74 a1 8c 3f a5 0e 9c da 90 a6 ba 47 c6 58 66 09 1c 33 8c 9d c2 ff 50 a8 61 a1 85 f6 23 e7 74 b6 8a 40 45 0d 05 5d 56 fd 4b 5b 05 b8 9f d4 73 60 8b 71 f4 3c a8 2e 0f 96 9e e7 01 40 4a 61 46 34 e3 3b 87 c6 b6 46 c2 2b d1 e3 01 b4 97 79 f8 0b 93 c9 23 3b 96 95 d2 8f 8e c9 8e c6 4d bc 3e 57 db fc 63 76 05 9c a2 3e 2b c7 6d a3 9b 7f b9 f5 28 06 03 8d ef 05 db 72 cf 1b da dd 91 87 9b ce 81 f3 c0 33 b3 51 85 cc 8c 4c de c2 21 d4 35 3e 74 84 27 59 01 27 d0 37 43 ff 31 Data Ascii: p]Jb^DJ/.1Q1CIb7&;cV?)PP$BFlN,a~,)5Ht?GXf3Pa#t@E]VK[s`q<.@JaF4;F+y#;M>Wcv>+m(r3QL!5>t'Y'7C1
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 9f 50 6f 1d 1e f2 65 1d fe 00 1e d6 1e 4c 3a ef d4 48 57 f3 7b 7a b9 c5 fc 2a 0f 6c d6 15 bb 97 3b 4b f8 eb 6b 21 eb f6 62 02 a6 93 0a 70 7f 9e 17 07 5d b7 78 10 98 db e1 ad 69 19 7a 36 28 07 28 fd 1b ec 5a aa 89 fe b9 b8 16 f0 9b e5 b8 6e 01 53 b9 d6 19 33 63 1f 2c c3 9e 5f e6 6c 66 6f 60 a6 77 f6 9f 1a b0 c6 55 3f 64 39 07 ac 4a 66 e1 f9 ba 48 23 e6 33 8b 33 7f c4 37 76 a7 5c 49 88 f7 ec cc 49 bb 37 e4 dd 3f 1a ca 3c f7 53 7c 57 8c 2e 00 98 94 77 88 09 36 a3 d9 7e a0 1c cd 2e 7c 21 1e 17 5c e7 5e 10 84 4b 51 57 66 af 74 56 eb 9b 2b 7a 03 9a 2f d5 7a 06 8b 20 e6 c7 09 d2 c3 d5 78 4c ab 41 f3 79 d2 b4 0b 0a 0d f6 d2 f2 7f 31 d8 56 3d 84 19 59 a6 2d 66 56 35 df a5 d1 10 6a eb de 20 3d dd 6a 15 37 06 15 5a 2d 1d 00 a5 5c 50 fc 98 31 35 2b ed 10 47 3f 4a 2a Data Ascii: PoeL:HW{zl;Kk!bp]xiz6((ZnS3c,_lfo`wU?d9JfH#337v\II7?<S\|W.w6~.\|!\^KQWftV+z/z xLAy1V=Y-fV5j =j7Z-\P15+G?J
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 22 c8 01 0c f5 79 55 86 70 b9 2d 1e b0 02 2c a9 60 51 19 44 16 ae 22 92 a1 6c 55 93 13 06 b4 8b 0c 40 bb 2e 53 9e 04 5f 9f d8 1b 7d fe 18 f4 d2 5c 52 21 a2 df fd 51 52 fb d7 ca f9 82 84 46 d1 a7 51 a2 43 d2 75 ff d7 82 b5 42 67 a7 50 d6 da c0 64 c7 47 5d af 98 9c b0 3d b3 3a 9e f7 25 5e a1 98 12 e0 e1 12 cc 92 fc 44 bd bf 84 e1 ce 2c 6a 5a 10 87 b7 a6 cb 2f 46 8d 59 14 5b aa 55 e1 b0 ee ac 28 ec de 49 f5 a9 b3 6d c5 79 7b 3d 19 23 7b e7 f4 49 24 a7 74 36 0e 3d 4c ba 3a 02 9c 48 81 bd 8a fe e6 06 f3 39 b0 08 df 82 a7 d0 67 2f 53 38 32 2f cb b9 f7 fb 6a 8e a4 75 49 41 30 b8 e4 7e 85 7f a0 3d 9d 2f 44 89 40 f1 34 4a 3f bc df b2 d6 dd 55 58 d5 20 23 a2 f3 f5 45 94 6f 56 e9 70 83 d4 93 9c 97 21 43 2d ee 6d 38 6d e5 91 08 db b5 0f cd 38 3e ad 28 35 b2 9a cb ff Data Ascii: "yUp-,`QD"lU@.S_}\R!QRFQCuBgPdG]=:%^D,jZ/FY[U(Imy{=#{I$t6=L:H9g/S82/juIA0~=/D@4J?UX #EoVp!C-m8m8>(5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.11	49814	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	387	OUT	GET /kr/assets/spritify-sprite-light-fd484ded-e3dce7a4.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	679	IN	HTTP/1.1 200 OK x-amz-id-2: NaGfEXdjoboCh7QhdB6rJxefpl8S2kCS+pRIdsD4abnt41LwPIoJxU2x+NrtPW/5td3DU5K1x9Y= x-amz-request-id: 13H5JJ3MBQ8PN31R Date: Wed, 09 Oct 2024 18:36:23 GMT Last-Modified: Sun, 20 Dec 2020 01:14:52 GMT ETag: "c52b9648030733c6235492f484942207" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 11967 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 409433 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 06 cc 08 03 00 00 00 46 f2 64 05 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 47 70 4c f0 52 33 35 a3 e4 0d 9a f8 2d 9b e7 64 00 aa 05 04 05 1d 48 93 5e 0e a6 1a 9f d8 60 01 d2 65 00 aa 10 10 12 1e a0 db 64 00 aa 64 00 aa 64 00 aa 1d 21 26 01 34 a4 1b 9f db 17 91 e9 5d 07 bc 64 06 b4 61 05 b0 64 00 aa 1a a0 d8 1a a0 d8 64 00 aa 63 02 ac 64 00 aa 19 9f df 67 08 ba 64 00 aa 64 00 ab 0b 66 ff 64 00 aa 1a a0 d8 64 00 aa 1d 21 26 64 00 aa 1b a0 d8 1b a0 da 1b a0 d9 60 c7 fe ff 8a 00 1a a0 d8 ed 54 27 fa 00 5a 1d a1 db 63 00 a9 1b a0 d9 1b 1d 21 65 00 ab 1a a0 d8 d8 23 26 1a a0 dc 60 01 d2 63 00 aa 16 9b e6 1a 1d 22 e0 2d 23 5e 06 Data Ascii: PNGIHDR FdgAMAasRGBPLTEGpLR35-dH^`eddd!&4]daddcdgddfdd!&d`T'Zc!e#&`c"-#^
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 39 4d 8d d7 9a 1b 10 a7 97 6b 0c 57 6f 91 f8 6a 39 0e 44 7b 8b 0f b0 67 24 6d e9 9f 4e 8f f4 20 9f 8f 4f c5 53 8b 8d f4 53 5b 12 08 c3 74 d2 21 c7 87 4f 79 1b 4f 05 f5 58 32 d4 e3 00 7d 8e 7a 74 98 19 c0 a4 bb 36 15 d4 02 4d 23 d9 3a 6d 8c e0 ee e9 d5 1f 7e 58 25 3b 4b 22 0b b5 38 78 3d 25 1d 16 15 cc 02 0e 4e 4f 89 dd 06 74 5b ed 24 c1 c3 af 13 c6 ee 88 cd c9 a5 f4 f2 65 bd 8f 0f d5 2c a7 97 02 36 1f ee 73 b9 83 9d fb 1d e8 73 84 8c c1 ed ca 1f db 57 fa ba 18 20 11 e0 bd af 03 36 35 93 45 45 45 0f 1e fe 7a 03 f0 eb c3 07 70 30 69 ca ce 01 02 33 79 4c f8 e9 df 80 9f 30 21 3f 53 8c db 09 a1 48 07 4f 60 60 84 a1 a1 a1 75 3b 61 1d 1a 19 61 a8 a8 18 a1 45 dd c4 7f 99 09 f0 21 50 b4 4e fd cb cf 22 79 d6 ae 61 11 a1 d9 3c f5 f4 42 7e 08 3c 65 84 1f 7f 64 04 f0 Data Ascii: 9MkWoj9D{g$mN OSS[t!OyOX2}zt6M#:m~X%;K"8x=%NOt[$e,6ssW 65EEEzp0i3yL0!?SHO``u;aaE!PN"ya<B~<ed
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 94 44 29 0b 8a 21 ee 6a cb 0a 31 17 61 84 b9 6c 99 10 d9 5e 46 90 22 91 90 f0 cf 58 01 25 17 b0 65 70 a1 cc 0d cc 86 8b 8b 18 a3 84 10 e9 72 85 f4 81 65 0c 2f 8c e2 89 2f 8d 43 25 25 09 4a 96 c0 9b c8 dc b8 be 56 43 0d c3 48 42 bd d9 ec 38 6c a4 b2 6c 99 1f b6 a3 59 3d 0f 12 78 d9 45 5b e6 20 ff 11 20 80 26 34 ae fb 88 e4 42 84 bf 40 83 0b 61 ce 20 e8 61 26 58 98 6d f6 30 51 68 bc 17 32 13 90 46 61 3c e3 44 8d 83 3e 49 f6 8f 8e 4a 1f 78 a6 0c f7 ba 82 0e 99 b2 42 e5 1e 6f 73 45 57 81 a5 46 96 be b0 65 c8 e7 dd 8c 5f 73 d5 08 60 ca 7d 83 63 55 02 bc ee 64 f2 e1 b1 83 5d 01 aa 0e de 50 0d c3 af 0f aa aa 04 84 83 83 01 4a 18 38 a8 da 3d 78 3d e6 c4 c0 30 55 80 7b 0f 82 23 0e 30 1f ef 81 b1 01 61 a4 8c 82 09 83 5e b9 e9 04 0b 63 c3 0e 98 8c 9a d7 bb e0 85 23 Data Ascii: D)!j1al^F"X%epre//C%%JVCHB8llY=xE[ &4B@a a&Xm0Qh2Fa<D>IJxBosEWFe_s`}cUd]PJ8=x=0U{#0a^c#
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: ff b1 73 75 2d ae 22 4d d8 15 83 47 82 c9 80 4e 26 6a c6 c9 90 84 a8 20 18 89 c8 e4 42 bc 11 bc ca ff 16 6f a5 f1 3f 78 e3 4f 78 ab b5 d5 56 db 39 cb 59 96 77 cf b2 05 e7 e4 a3 9f f4 47 75 57 d5 53 dd ed 98 b5 cf 25 31 67 eb 23 5e 14 b5 cb 5e 51 39 35 28 54 1e 16 58 6c 8d 28 03 b1 0b 4e 70 74 58 00 76 29 ab a5 df 2e 94 76 8c 3c 01 58 65 ad 3f 38 a7 b2 21 7e 2a 63 0f d3 02 fc 10 3c 42 5a c7 a2 9a 5b 13 bb 28 ba 77 4e 50 59 3c 97 94 ca f8 00 9b 00 ec a8 44 e0 9c c4 73 35 e1 47 1d 20 74 7d 30 00 4f af a7 24 6e 68 82 93 d3 b8 d6 3d 6e 01 10 3e 35 84 82 74 9e 4f 76 80 bc b4 31 9d 98 cf 65 07 88 22 91 3d d5 03 40 15 05 56 b8 e9 01 9a ba e4 40 08 00 1c 08 53 12 12 2f c2 a2 73 1f 13 29 0b 9b 38 10 af 13 d3 d3 35 cf ec 3f b2 1c 88 ae 2d 3b 10 0b 24 d1 a4 04 bf b2 Data Ascii: su-"MGN&j Bo?xOxV9YwGuWS%1g#^^Q95(TXl(NptXv).v<Xe?8!~*c<BZ[(wNPY<Ds5G t}0O$nh=n>5tOv1e"=@V@S/s)85?-;$
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: a2 38 f8 ad 7f e7 93 30 f8 e6 7f 6a e9 92 16 d8 1e c7 3c 01 e5 d2 a8 42 9a ae e7 15 c2 29 db 4c cb 82 5b 17 b6 a7 0a 82 ec 24 75 91 ce eb 70 ab b8 37 93 34 47 ce 94 c3 84 15 24 fa 82 d0 a6 e1 f8 a8 50 19 73 18 19 13 48 7c ae de 1c a3 80 29 c3 64 8b e3 0a 30 dd 30 ed 20 0a 5c a5 b1 01 64 d2 08 21 c0 99 7e 88 2a 29 2a eb 08 5f 74 4e ab 70 d8 16 83 68 52 e0 1a dd c8 51 f9 87 0e e1 52 e0 94 91 6f 50 ce cd a1 29 df 78 c2 b0 c6 45 7c a4 85 c3 a2 8d 51 69 73 dd 7e 99 5b e1 f7 7c 54 40 23 9d 1f 8c f0 89 20 d9 a4 f4 cb 26 5d e6 23 7c c4 d7 03 72 02 c0 fa d4 1a 83 c1 df cd 01 78 b8 41 ab 21 36 00 6f 1f 9b ed e8 16 00 bc 16 91 78 bc d0 07 a1 df 15 c4 1d 1f ce 8b 81 6c da dc f8 8c 8e 8f ca 82 9a d1 b4 77 68 bd 72 bc 87 49 13 56 29 10 1a a7 1f 46 e9 e8 0f 30 f4 ef 12 Data Ascii: 80j<B)L[$up74G$PsH\|)d00 \d!~)_tNphRQRoP)xE\|Qis~[\|T@# &]#\|rxA!6oxlwhrIV)F0
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: ba 65 d5 23 b0 23 3f ce 46 85 7f b5 df 75 b1 e7 c8 50 1c 8e 59 38 68 bc 19 ec f2 c6 b5 64 9b 17 20 27 4b d3 0f 63 69 a2 e6 ea 65 d9 c2 b0 05 19 87 6f f9 ff 65 bd e3 fe 93 5f 94 4b b6 28 ad bd 2c 97 13 e3 c5 a1 f4 3a 7b 9c 71 77 a4 00 d7 f7 d9 1c 7e 42 5e 74 ed 01 10 0f c6 95 e0 9f 9f de 3e fe c7 de 15 bc b6 cd 2c 71 f9 f1 39 12 24 c8 ca 21 b1 c1 31 b1 31 ae 6f 02 53 23 30 f5 c9 94 42 88 40 09 41 7e a5 06 1d 5c 83 0e 45 97 62 87 0f 9b 96 90 52 7c f0 b1 e4 d6 43 0e bd 17 be 43 ff 07 43 1b 7c cd 21 f7 d2 3f a0 e4 f8 66 57 bb 92 56 da 95 fa d2 d7 d7 e4 fb 32 25 a9 ad f9 69 76 66 76 76 77 76 57 d1 86 00 49 61 84 a0 db db 39 29 0a 90 22 42 fc db 51 70 30 80 40 08 b9 3d 09 20 42 e8 ed 3c 00 16 42 6f e7 02 90 90 7a d8 cc 79 00 49 89 fc 39 2f 17 c0 84 f8 ad 02 6c Data Ascii: e##?FuPY8hd 'Kcieoe_K(,:{qw~B^t>,q9$!11oS#0B@A~\EbR\|CCC\|!?fWV2%ivfvvwvWIa9)"BQp0@= B<BozyI9/l
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: dd c2 9b 65 30 e9 dc 45 0f 26 b3 0f b7 23 44 35 58 36 53 9b 89 87 df 11 02 06 b7 6a 67 6b ab 83 81 95 1a 67 0f 86 ee 9d 14 eb 9c 7c 72 2b bf ac 87 4f 37 25 1f a8 92 d6 99 4b c5 7c 5c 44 4e 65 1f 48 6a 2e d5 48 23 06 aa 31 7b a3 fe a6 68 70 c8 38 b1 6d 3b b6 7f 11 cd c4 32 00 3b 40 ad 64 11 2d 74 9d 54 b2 8c 36 59 98 6d 97 f6 32 af b0 7f cb d6 60 36 44 b7 d4 c4 c6 db 4e 25 fa 64 59 83 f3 84 dc fa 72 d9 20 2b 12 e8 e1 c4 46 9c 8f 2b 4b 6d 17 15 a5 d8 46 9d a1 ca 2e 10 a0 bf 64 88 54 f7 b2 a1 c6 10 3b 6a 24 60 2a a5 0e be 10 dd 76 d6 2a 64 45 03 ec 6f 6f a3 bf 64 d9 89 55 8e d6 89 6d 11 c9 1d 86 2f 0b f7 90 e2 94 0d 50 d5 da 7d 07 74 53 32 e6 9f 05 34 37 30 40 c8 07 04 06 7c 4e 21 0c 30 c5 7c d3 57 62 60 f1 d9 d6 20 d0 b3 6f 27 14 99 db c1 e1 0e 1e 3a 59 a0 Data Ascii: e0E&#D5X6Sjgkg\|r+O7%K\|\DNeHj.H#1{hp8m;2;@d-tT6Ym2`6DN%dYr +F+KmF.dT;j$`vdEoodUm/P}tS2470@\|N!0\|Wb` o':Y
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: a3 de 69 6f b4 01 1f 47 24 08 46 a7 3d b8 cb 27 00 28 08 09 a5 82 c0 53 22 01 ee ee 9d 82 1a 27 20 be 87 4a 82 6f 1f 41 dc 47 62 45 8e be 8a 8d e8 0d b1 a6 c8 70 f5 d6 76 22 72 66 27 28 ff 8c 04 60 be 7d 9b 7a e6 b8 b4 f1 ed db 46 3a 60 7f ff 97 01 c8 5b 58 7d 40 ca ab 62 d7 f6 f7 d7 04 f6 6d 20 5a 7b bc bf ff 78 0d 7f 8c bd c3 4a 7e fb 6d 1f d3 37 fa ff 5b 99 7d 8b 6f 3a 20 b3 88 6c 25 7f d4 cc 5f eb ea 1f ad ee 8c 80 f9 3f 04 ed ad a6 3f 3e 84 9f 3f f0 de 20 f8 ee e2 35 fd f8 fa e2 1d 07 b0 77 41 11 af 2f 2e f6 a4 6f 5e 37 13 00 00 0a 69 49 44 41 54 14 84 88 4f 11 62 be 8f 48 e3 63 44 2a 1f 23 f6 d2 eb 71 ef cf bf c1 0c 30 d3 8a bd 6c 3f 65 79 fa 75 56 5d 65 d7 76 76 bc 08 11 99 31 99 19 d5 77 83 5e bd fb 57 2a ff cd c5 c5 33 42 af b8 80 8b bf fe 24 f4 Data Ascii: ioG$F='(S"' JoAGbEpv"rf'(`}zF:`[X}@bm Z{xJ~m7[}o: l%_??>? 5wA/.o^7iIDATObHcD#q0l?eyuV]evv1w^W3B$
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: d1 51 16 40 11 12 60 34 ca 04 42 23 72 20 30 92 06 60 23 a9 00 32 92 01 8c 8e 6e da ac db 9e 53 62 f3 a7 9d f6 dc 6e 46 02 4f 38 20 f9 92 3d e7 81 26 fd 5d 73 4d 21 50 71 02 31 25 80 d9 08 44 06 50 22 b1 f0 24 10 f3 43 81 cc 22 32 e3 60 6e 87 d2 9c f3 73 9c f9 b6 49 b5 85 c3 bf eb 3e 7f 32 7f 52 0d c5 10 b4 e6 7c ee 90 d5 20 4d f2 0d b5 68 ad 9f fd 9e d8 1b b9 58 84 aa b8 ed 38 6d c9 77 83 a2 cb 1b 14 e3 c4 b2 4e e0 9f 70 b2 a8 38 9e 6b 7a 26 fc ba 9e 23 9a 77 db 5e 0d 66 c4 d5 2a cc 67 6b 40 70 26 0c af a6 b4 c1 01 c5 84 87 9a 67 f0 45 b8 5e 1b bd 2b 80 da b1 8d d7 22 59 0b 26 d8 55 9b 96 d5 54 c1 1b 93 b3 b0 8d e7 e2 cd 85 6d bf 87 d4 81 27 ec fa a3 63 99 55 45 b5 6c e8 c5 96 aa 54 4d cb 91 01 8a 04 48 16 e1 79 d8 e3 6b 39 79 85 6a e2 40 99 f2 40 69 61 Data Ascii: Q@`4B#r 0`#2nSbnFO8 =&]sM!Pq1%DP"$C"2`nsI>2R\| MhX8mwNp8kz&#w^f*gk@p&gE^+"Y&UTm'cUElTMHyk9yj@@ia
2024-10-14 12:20:15 UTC	267	IN	Data Raw: 87 01 35 09 0c 06 83 5f 69 0b 81 0f 17 17 e4 f7 02 0c bc 39 c7 4f 22 0b c8 87 8b 88 d8 02 03 17 98 88 2c a0 22 2e 42 59 85 12 2e a7 d3 a3 0b 0c e4 22 27 03 f5 d1 d9 bb c1 e0 00 5f fd 77 f6 36 b2 90 0f 81 b7 67 c3 b3 37 60 20 b8 40 30 e9 03 da 1d ed 77 79 19 ea 87 61 1c 94 c0 07 a4 ff f9 60 70 f0 f3 90 b5 40 7c 78 8b 5e bb 1c c4 25 0c 93 3e fc f7 4c 04 50 3e 4c c9 8b 97 ef 22 7d d2 07 62 20 29 09 1f de 0e 85 40 ec c3 11 af 7f 9e b0 f0 77 1e 38 34 a2 8c 02 13 cb cf 39 03 95 30 27 49 6b 55 0e 13 c8 f3 c3 8a 11 00 4a d0 6f 0c 46 70 df 21 17 35 29 38 af 09 51 0d fe 0c 23 2a 80 f4 cd 7c 80 e0 3f 15 ef 0f fd 8d 7c 22 04 57 24 a7 e6 92 fd 12 7a 3a b9 40 44 51 e2 6b a7 62 09 4b 8f ee 3a c5 12 8a a6 69 c9 4f 9c 04 4c 74 2d 56 7c d5 c9 ff 00 ba 9f 47 14 5f a7 28 b6 Data Ascii: 5_i9O",".BY."'_w6g7` @0wya`p@\|x^%>LP>L"}b )@w8490'IkUJoFp!5)8Q#*\|?\|"W$z:@DQkbK:iOLt-V\|G_(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.11	49815	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	761	OUT	GET /uu/api/res/1.2/RdGJULZQ_0HBS0fKJ4Kq8g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/e8be05122130d6da406284fc8b35524c.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:15 UTC	1190	IN	HTTP/1.1 200 OK Content-Length: 8884 Content-Type: image/webp Content-Disposition: inline; filename="e8be05122130d6da406284fc8b35524c.webp" Etag: "65317abcfd7ff2ef5cc648a20189bcfb" Expiration: expiry-date="Sun, 13 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 14 Oct 2024 11:30:11 GMT Date: Mon, 14 Oct 2024 11:30:42 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=2;cpu=0;start=2024-10-14T11:30:42.326Z;desc=hit,rtt;dur=97,content-info;desc="width=356,height=180,bytes=8884,owidth=1280,oheight=720,obytes=104940,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 838fbe21a4c656df929db9189358f641 Age: 2973 cld_id: 838fbe21a4c656df929db9189358f641 x-image-width: 356 x-image-height: 180 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 52 49 46 46 ac 22 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 63 01 00 b3 00 00 49 43 43 50 0c 02 00 00 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: RIFF"WEBPVP8X cICCPlcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: b9 69 6e 26 bf 73 39 cc 7b a8 78 df c5 cc 39 12 71 b2 0a c6 29 22 03 4a 21 ea 64 67 e8 26 fa 67 c1 2b 69 1b f1 eb 85 81 41 fb f6 9f 41 5b bc 0f 55 c1 49 03 cf e1 11 9f 32 79 c7 4d 18 4f d3 22 8e 98 8d e5 46 a0 c8 6e 4b 00 08 6f db c7 eb 1a 63 62 3d 52 5a e7 09 19 0c ae 9f d6 95 6a c8 04 e2 a9 f0 c9 54 c4 ac ec 98 9e 91 ff 38 36 06 46 f6 a1 94 fc de e1 45 47 ef 7c ba c1 0b 36 cc 59 d0 f7 0b ca d2 ba 2e 09 14 d9 9f a2 a0 f7 20 eb 40 18 8c 34 bb 58 15 32 1e 63 f6 3f eb b2 b7 b3 f0 37 df 71 f7 ac cd 7d 75 36 c9 55 6c 97 ce 45 61 1b ba 8e b0 9e 6b 9a 3e 68 e7 28 62 a7 cc cc 40 e1 2a 66 05 97 b3 98 58 3e c8 a8 44 86 47 38 8e 62 77 8f 39 dc b8 7f 50 d6 13 4e 07 2f f9 ed fc f7 d5 37 e6 fc 74 a2 3d 7f d8 bd d7 21 a2 f7 23 2b b8 ee 05 9e 26 e5 2c eb f3 8e 61 09 81 Data Ascii: in&s9{x9q)"J!dg&g+iAA[UI2yMO"FnKocb=RZjT86FEG\|6Y. @4X2c?7q}u6UlEak>h(b@*fX>DG8bw9PN/7t=!#+&,a
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 9c 99 fd 64 37 40 5e 63 b7 84 f7 b5 ed a1 cd 8b c6 5d 36 b5 e3 d9 c0 f4 20 bd d5 32 95 2e c8 c2 9f 39 9f d0 24 36 2c 64 27 3d 2b c0 66 d8 e0 3b 7f d7 30 8c 4d d0 d3 87 b0 7d 3b 4e a9 c5 ea 02 91 f8 21 48 e0 a5 73 f5 da b3 e0 d8 07 ee 3f e0 bb e8 d0 b1 fd 1a fe 21 bc e1 a6 cc 22 0c a1 33 9d ec ca 66 3b 95 77 9e a8 59 54 a7 a0 2c d7 b6 65 74 c7 4e 06 9b 12 84 b1 28 ec c2 93 e1 7a ab 08 3a 10 1c 1d 3c df d4 c5 24 5d 17 a8 31 ff 70 a6 60 6b 22 96 08 76 65 12 c6 4e fb ae 35 7f 47 6b df fa b8 f7 a6 e1 01 d2 7e 44 54 e5 29 84 7f 04 36 4d d2 fd 66 eb d6 87 37 90 d9 3a a2 f8 69 53 4a 8f 23 83 e4 ad dd 1a 83 49 26 2b 42 cf 40 d1 ab a2 3f 07 56 61 aa e7 f9 a5 5e 6e 78 70 8e a5 cf 65 22 a2 dc bf e0 35 c6 c6 1f d6 a5 de d8 e9 3f c9 f6 47 c1 00 8f 4a 63 82 15 05 48 1d Data Ascii: d7@^c]6 2.9$6,d'=+f;0M};N!Hs?!"3f;wYT,etN(z:<$]1p`k"veN5Gk~DT)6Mf7:iSJ#I&+B@?Va^nxpe"5?GJcH
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 9a 01 4a 2c f6 74 2d f0 4a 5e ef 22 9c 80 84 93 13 1a 29 2e 6c 60 46 3a b4 bd b8 6d d8 ea ea fd f8 dd c1 94 ce 50 27 0d 19 e5 85 d1 fb 62 4a 14 a2 c8 d3 f0 b4 b5 66 85 03 66 d2 1d 54 b4 1d ad 48 ce 96 c7 86 25 29 90 90 f1 46 1c ac 3f ee d9 3a e2 21 81 b8 01 c7 1e 3b c2 94 9c 90 8a 52 a1 ff 74 84 fc b8 67 6b ff 35 f9 4d b8 56 d7 7a d9 18 2c 25 de 31 96 a9 cb 40 96 de ac ef dd 0d b7 de 07 31 c3 00 19 56 de c2 19 12 54 14 60 86 5d 13 1b 69 a9 57 a8 ca c6 21 01 3d 7a 3b ce ca c8 d8 8a 39 51 8d 1b cd 12 90 0a 3e f4 33 20 81 19 51 71 2b c0 4b 18 25 4f 46 b8 0d 17 82 9c a7 93 5c 40 05 d6 4c 5c 95 26 be a4 a3 9c 4d 2d 1c 3f 1b 54 5e ea 4b 08 7d 7f 38 8f 21 0a 27 24 c5 9f 18 5c 6b e6 ea 70 d7 81 3b b9 4a 26 f4 64 60 64 1a d5 f7 ed de 2e 59 0d d1 5b 0e 30 94 16 37 Data Ascii: J,t-J^").l`F:mP'bJffTH%)F?:!;Rtgk5MVz,%1@1VT`]iW!=z;9Q>3 Qq+K%OF\@L\&M-?T^K}8!'$\kp;J&d`d.Y[07
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: a4 07 98 cd 30 ed a1 64 44 d3 8c 3f 51 d8 ef 72 ec 7b c8 b1 c3 b9 16 cd a3 78 1d fd df 52 93 8c 70 3d 17 63 ef 37 e4 a0 1c d9 f8 f9 08 67 02 ca c7 21 1d 0c fe 99 5b 28 8c 43 2d a9 f5 09 61 88 b7 a6 f4 0f b9 c6 99 75 b9 57 a4 79 92 8a 3a 9e 63 3e 3a 9a fe 87 07 26 8a c5 79 16 1c f7 f5 92 0f e3 9c b7 b0 fe 32 98 bf dc 30 fb c3 06 e3 e2 90 84 75 02 28 a2 42 b2 08 74 ab 5c 78 e6 01 f1 a1 56 0c c5 ba d9 18 0a d5 f3 03 9d 93 1c dc 45 18 09 8e 97 d3 ae 31 73 35 d2 0b dd 2f ce 8e e2 3e ab b4 a5 95 c7 40 86 53 1e 46 dc 10 59 fe 41 fe d3 84 ea 3a eb 18 78 e7 27 c1 dc 12 e1 d6 ea ec 16 b8 c4 f4 67 30 74 dc af c9 59 57 15 eb 7b 92 39 3f a2 eb 14 90 93 32 9d 59 21 b1 bc 67 54 61 de 8d 6c b8 86 70 fe e5 e6 20 4a dd 32 c0 8b 0f 4d c7 e0 27 76 e4 4a 60 7c 77 35 15 9a c5 Data Ascii: 0dD?Qr{xRp=c7g![(C-auWy:c>:&y20u(Bt\xVE1s5/>@SFYA:x'g0tYW{9?2Y!gTalp J2M'vJ`\|w5
2024-10-14 12:20:15 UTC	1300	IN	Data Raw: 00 8b e3 45 4f 61 be 22 38 40 15 c5 3d e0 6b 6e 06 c4 83 c5 fe f3 a0 85 0d 9e 6f a2 a3 bc 67 a8 e3 71 9b 22 5e 76 6c ab 37 8d 07 9f 67 e7 b1 f7 6f 94 ba b8 bd 54 58 b5 db e5 6e 12 3d cc 0b 57 dc ed 93 3e a8 11 41 57 42 0e d3 cc de 68 6a 5d d1 e3 49 f5 c1 16 e0 7a 31 31 51 1b fd cf 5b df bf b5 cc 88 9b 84 93 2f 97 23 15 ec 64 91 00 16 f2 44 3e 6f 8e 6f f2 4a 86 02 6b b2 3d f2 d8 6d a0 71 b0 37 58 bc 02 5b 10 d5 b5 55 21 66 7a 97 a6 80 30 60 a3 41 f3 e6 e8 db c1 e0 f3 22 8e 73 80 73 e5 8c f4 a0 bb 78 59 79 50 29 8c 5e 5b 49 c2 30 1c 5a d9 f3 ac 64 97 41 1d 31 d9 55 b4 47 f6 4a b8 bc ba 34 ad a0 ac ba 56 02 11 5f 12 c1 0d fa eb e1 ae 6a 2e 04 c2 e1 6f ac cb 47 c6 1f a5 05 30 ec 71 69 0d f1 e7 15 bc 42 77 f7 22 f8 fd 66 4a f8 cd c5 21 20 27 bd be ba 8a 9d 10 Data Ascii: EOa"8@=knogq"^vl7goTXn=W>AWBhj]Iz11Q[/#dD>ooJk=mq7X[U!fz0`A"ssxYyP)^[I0ZdA1UGJ4V_j.oG0qiBw"fJ! '
2024-10-14 12:20:15 UTC	1084	IN	Data Raw: f0 d8 0e d5 dc 40 67 21 5b 5d ad 67 b1 f6 16 40 ac bc 98 a5 dd ff 79 30 f7 68 63 03 6e e3 ee 82 73 c0 62 9a 7c 71 7b 7c 1d 9e 02 98 e7 06 4a 28 82 01 16 4e 0d c7 7b 92 02 27 3a 67 18 31 d4 64 c7 4c 59 08 3f 18 d6 a8 c0 5e 45 e5 42 ed 88 d0 bc 47 a3 8d 68 0d b6 9e 7f 86 c8 a2 87 e7 99 bb 92 d4 01 56 87 f1 54 fc 88 e2 f0 c3 4e fc de 3f 7f 19 a6 8e cc 57 38 b3 39 5f fe a5 47 dd 6a 3e f2 2b 61 d2 75 58 86 f1 59 c0 c0 d7 9b 22 82 09 56 42 71 91 4b 75 f6 a3 d4 12 2b f1 d3 62 c6 bc 8e 72 a8 6d 32 08 e3 ef 91 de d2 04 91 a9 30 9b d5 92 77 cf 66 fc 87 dc 26 ca 2d 49 26 da 8a c8 e2 e3 7c f4 e4 06 5f 44 ee 09 9a 32 59 ca 73 37 0c 4e b0 69 91 73 78 d8 41 2e 1b aa b5 c5 e1 05 19 ce 6b 09 2b 6b 85 f1 14 ef 4e 18 d2 50 24 85 9b aa 38 c2 fc 46 57 34 bc 94 20 2e dc 0f 0b Data Ascii: @g![]g@y0hcnsb\|q{\|J(N{':g1dLY?^EBGhVTN?W89_Gj>+auXY"VBqKu+brm20wf&-I&\|_D2Ys7NisxA.k+kNP$8FW4 .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.11	49817	87.248.100.215	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	1051	OUT	GET /info/p.gif?apptype=default&beaconType=pageRenderEnd&code=pageRender&bucket=900%2Cseamless&device=desktop&intl=us&rid=4vh116tjgq33s&site=fp&t=1728908412863 HTTP/1.1 Host: currently.att.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8
2024-10-14 12:20:15 UTC	1131	IN	HTTP/1.1 204 No Content expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-xss-protection: 1; mode=block x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Mon, 14 Oct 2024 12:20:15 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=att&region=US&lang=en-US&device=desktop&yrid=2flqsptjgq33v&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.11	49818	212.82.100.140	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:15 UTC	782	OUT	GET /issueIUCookie?signature=gaeDwJGhlY_20JmbE7CMXkH8u4QFHhCZnW9zcs-j7YM=&partner=sbc&ts=1728908413 HTTP/1.1 Host: api.login.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=fPBofgIebZhYWUQINsoAqqmG5meI&v=1
2024-10-14 12:20:16 UTC	599	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:20:16 GMT Cache-Control: no-store Cache-Control: no-cache Cache-Control: must-revalidate Pragma: no-cache Expires: 0 X-Frame-Options: DENY X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15552000 Server: ATS Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 0 Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.11	49819	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	761	OUT	GET /uu/api/res/1.2/7QJM3GN5YBbg7HUo1M3jNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_telegraph_258/767c31696323f68d04b163e892ed999e.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	1261	IN	HTTP/1.1 200 OK Content-Length: 11680 Content-Type: image/webp Content-Disposition: inline; filename="767c31696323f68d04b163e892ed999e.webp" Etag: "485dfa2e93a1f97e6d69839f9f875ad0" Expiration: expiry-date="Sun, 13 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 14 Oct 2024 10:30:03 GMT Date: Mon, 14 Oct 2024 10:30:19 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=43;cpu=1;start=2024-10-14T10:30:19.431Z;desc=miss,rtt;dur=91,content-info;desc="width=356,height=180,bytes=11680,owidth=1814,oheight=1133,obytes=374140,ef=(1,13,17,23,30)",cloudinary;dur=32;start=2024-10-14T10:30:19.437Z Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: f4da1dec6a7190513283a886cb76a800 Age: 6597 cld_cache: miss cld_id: f4da1dec6a7190513283a886cb76a800 x-image-width: 356 x-image-height: 180 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 52 49 46 46 98 2d 00 00 57 45 42 50 56 50 38 20 8c 2d 00 00 30 c0 00 9d 01 2a 64 01 b4 00 3e 79 38 96 49 24 a3 22 21 26 14 5b 10 90 0f 09 63 61 77 58 34 bc 67 4f dc ba 72 e6 5d fd cb 55 f7 d7 fa 0b fe d7 b8 07 8d d7 b1 6f eb 1e 82 7f 69 3d 5e fd 1d 7f 76 f5 18 fe b5 fe c7 ad 23 d0 03 cb 87 f7 1b e1 7b fb 57 fd ab 67 1f 48 fe 4b be 1f cf bf 01 bd a6 27 7f 65 ed b7 fe 87 83 7c 03 b1 93 b6 fc 05 77 6f 4e f3 ea 0a 1e 33 7b a0 6f 94 47 82 2f dd fd 44 fa 68 13 b7 22 12 d6 78 fc 44 3b 9e d2 1f 96 87 e0 03 17 f2 78 d4 34 87 f8 45 12 bd d5 00 fd 9a 5a 14 8f 74 ee 4a 7f ee c9 f8 e6 a3 a0 06 b7 f2 7f bb 58 31 4c 8c 4a 24 cc 70 d3 85 01 f9 75 62 63 fc 2c 83 7e f5 80 ce 2e 5f 01 de be 14 7d 2b 41 76 3a 2f fa 8e 79 7e b0 56 e2 be db fb 2e dc 0e 7b 1a ef 09 b7 ac eb 1b Data Ascii: RIFF-WEBPVP8 -0*d>y8I$"!&[cawX4gOr]Uoi=^v#{WgHK'e\|woN3{oG/Dh"xD;x4EZtJX1LJ$pubc,~._}+Av:/y~V.{
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 13 2c c6 b7 44 d9 9a 81 c9 91 54 30 7e e4 48 08 88 06 38 ca 82 69 45 2c 69 cb 9e 72 64 b1 43 83 43 83 68 a3 1f 6e 0c 18 35 ff 74 e3 43 bf c3 e0 9d 0b f3 09 af 49 da c2 ae a4 c7 c7 6b 7c f2 83 ae ab 5c bb 92 5e 42 d0 38 98 4b a7 58 08 2b c8 a4 67 59 69 ea f9 a6 94 58 dc 52 a5 b9 8f 83 23 e7 78 f1 e5 7b 68 ac 2c 5a fa ca c9 f6 f7 46 c5 28 49 bc 29 7d 50 04 f3 b6 87 c9 57 e1 b4 59 b4 e1 f1 be 1b af 80 e1 53 04 3b 52 79 e9 c7 0e 98 14 81 bf a7 d7 74 ca bd 0d ed 26 4a af 98 ae 48 2e ea 5f 7e 2e 1a 2f b1 f4 72 29 5d 95 fa 60 fe 80 71 89 7c 51 3d b7 47 79 e3 9d f2 20 d3 16 eb c5 d1 50 de 42 d6 a8 1b d6 5d 40 74 28 74 fc e0 a7 c6 61 10 43 3d 25 01 c9 d6 eb d9 31 39 6f b6 f3 eb 35 08 ee 1f 3f 97 e4 23 36 da 85 31 d6 f8 ca d3 dd b0 aa 69 35 a9 43 c9 61 8c 50 d2 c9 Data Ascii: ,DT0~H8iE,irdCChn5tCIk\|\^B8KX+gYiXR#x{h,ZF(I)}PWYS;Ryt&JH._~./r)]`q\|Q=Gy PB]@t(taC=%19o5?#61i5CaP
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 26 03 ce 2e 60 d2 72 c6 bb f0 11 ee ae e9 a4 75 9e 16 aa fa 40 5f 02 37 d2 ad 94 2c 78 2b f6 fa 68 92 47 f4 59 3f 7c 49 1a 61 ed a6 63 7b 55 58 fd 84 d9 aa b1 43 1d ca a0 e9 95 df 2c e5 62 68 dc 97 6d 95 6a 3b d4 a7 9c d9 29 09 bd c9 ad c2 c3 8c c0 71 b3 6a 8d 10 1e a1 b2 ed dc a2 9b 42 58 d1 c5 75 d3 b8 e9 f2 dd f3 66 b5 e7 04 18 65 30 7c 18 3c 44 6f d9 5d d8 cd e2 58 10 f3 d4 97 83 a7 70 95 7a 4c 0f 8d 6a b0 04 7a 50 e1 00 7d 8f 48 b9 ee 78 c1 87 8e 0a 64 61 fb 48 88 af 54 ed 4d 6b 00 58 4b 5c 96 92 93 65 66 ae 9c 26 65 d4 3f 42 2f c3 8b d0 0d 9f 67 e6 ca 0a 64 78 0c fc ac 96 27 ab 2c 9d 0c 36 e4 f6 02 79 95 a7 6b d7 04 f9 b9 a9 7a 9b c8 b4 d2 05 8b f4 e7 48 ee 5b 0d f4 e3 fb 29 53 e0 a9 f2 1f 06 28 ee 06 60 c2 b5 9c 9c ab 76 e3 93 10 9b fa 4a 44 bb 36 Data Ascii: &.`ru@_7,x+hGY?\|Iac{UXC,bhmj;)qjBXufe0\|<Do]XpzLjzP}HxdaHTMkXK\ef&e?B/gdx',6ykzH[)S(`vJD6
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 3e 49 ea 94 74 82 79 9e cf 95 d9 13 64 32 2a ef b4 a3 7a 75 13 ae a8 44 58 13 d1 d4 8c d6 93 63 2c 9f 13 42 06 8b 34 c0 a4 fa 01 c4 6e 03 c3 c0 6b 81 1f c0 09 53 cc 83 6a 15 5b b3 ab 46 65 17 63 c9 ed 75 33 34 77 3e 24 84 07 15 37 ab f0 fe 61 3c 1c 9b 4f 14 e7 41 6d bd 7e 16 fc aa 72 69 ad 80 ce 3a 22 ca 3c 41 5d 20 a3 27 e3 09 28 e0 5e 85 f1 1e b6 0b 91 39 0e 27 d8 40 d0 0a 83 72 cb a3 97 6d bb 54 e0 54 04 da f7 de a3 ce 8d 46 60 d0 79 42 b8 fb 93 56 f4 87 53 36 8d 9a 1d b6 b0 fc 70 4c dd f9 ea f2 57 df 52 aa 81 38 48 69 95 8b a8 9a f5 6d cb 3e dc c8 77 36 7a 5f 4b 23 4d 55 ac 6c 53 b3 95 fe 8b 7c a8 81 29 57 73 6b b6 92 a0 0a 6e 31 20 3c de 0f c8 52 ed f7 39 24 87 85 af 83 6d 49 8e 86 b1 79 a6 61 ba eb 07 b5 c6 e4 c0 f8 bd 91 bf e8 88 72 35 8c 08 dd e1 Data Ascii: >Ityd2*zuDXc,B4nkSj[Fecu34w>$7a<OAm~ri:"<A] '(^9'@rmTTF`yBVS6pLWR8Him>w6z_K#MUlS\|)Wskn1 <R9$mIyar5
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 72 ca 97 42 fb 64 5a ce a9 ca 2e 6f 12 fb 10 0d db b4 bc 7b d0 47 90 16 f2 60 f8 3c 92 23 3b 7a dd 19 0c 59 d4 25 03 1e 58 ee e9 35 e9 78 70 21 67 30 47 2f e1 0c 6f 47 69 e2 64 b5 1d e5 d1 32 13 1d 75 a4 bf 89 9c d6 0c 5e 26 a9 2d d3 a4 62 d0 c5 0d 4f 5a dd af 57 f4 da 85 06 b9 40 db 16 06 f3 cf ae b2 29 79 74 76 e6 7d f7 03 db 68 ae 3d 4f 23 57 94 b3 c7 41 5d 6d 38 93 28 74 c0 8f 5f fa d1 f2 39 34 b7 a1 dd c8 f3 95 50 dc 1d 63 02 89 e6 66 12 fc f2 87 75 77 c0 b4 8a c0 ff 3c ff de 1f f2 d1 2d 4b af 7d 85 e4 00 b7 7b 28 b5 05 c7 4b 64 c9 91 34 45 5b e0 9d 51 aa 84 c8 e6 bf 09 7c e0 c7 7c 8e b5 41 fd f7 58 2b 5a 46 27 7c 9f e9 73 a5 4b 55 35 c2 a9 4f c6 1b 1c 78 93 b3 55 12 2d 4f 1a b2 11 c4 7d 0a 22 76 a4 b0 23 65 12 85 5d 03 a3 0f 33 35 3b a1 45 9f 4e b2 Data Ascii: rBdZ.o{G`<#;zY%X5xp!g0G/oGid2u^&-bOZW@)ytv}h=O#WA]m8(t_94Pcfuw<-K}{(Kd4E[Q\|\|AX+ZF'\|sKU5OxU-O}"v#e]35;EN
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 2b b4 ec e5 d6 7b 86 96 a0 42 cc d8 e2 ef e1 34 76 f9 b6 ec 1c b2 16 e0 6e be 34 95 a8 b2 79 bd 19 ab 9d b7 bc f0 b6 99 cd 0f eb 2e 3d 3b 2e 66 7a f3 ab 23 6d ca 0b bd 18 8a 41 41 d0 01 12 3a c3 63 45 94 e5 f2 ed f7 4b b7 20 db 2d 59 a1 de d9 5b f9 01 49 fd 2f bf 8a d4 04 4f 80 30 ac cf 6e 98 4d 7e 19 91 b1 d0 05 3d fb 27 c3 5a d7 c9 fa 0d 0f a0 f8 bd 9b 55 60 8d 29 24 4d eb b7 f3 8e db 4c 22 63 c2 ab f8 46 e3 1a d0 d2 42 3e db 8d 52 41 41 e3 1a 3e ae f4 f1 a3 4c a6 df 9d fd a1 78 d9 36 e6 09 b9 42 5f b5 59 5f f8 1b 4f 80 ae 24 b5 69 e5 6e 82 c2 35 18 54 69 71 70 80 c0 1e 23 f3 97 ce a5 4e 28 2b 67 65 25 e0 24 4d 6f eb 3f b5 17 2e 75 b8 c8 e0 4e 50 bc 96 3b 06 ae 4f c4 db b9 a0 59 7b fb f6 45 44 3e 76 a9 fe 8f d7 1e 24 d6 7d 4b a9 46 1f 9e be 47 12 a0 1c Data Ascii: +{B4vn4y.=;.fz#mAA:cEK -Y[I/O0nM~='ZU`)$ML"cFB>RAA>Lx6B_Y_O$in5Tiqp#N(+ge%$Mo?.uNP;OY{ED>v$}KFG
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 48 e2 ec d3 e7 7d 74 63 93 ec 7a 73 f5 fc a0 de df 51 46 fd e8 7c 10 d3 d5 4e fe 50 ea 44 35 5c 57 47 fe 24 2a 9f 5a f1 1a 42 15 f0 08 6f 17 34 ed 51 59 3c d6 3b e4 7e 7d ea f7 65 d0 be ae 4b 2c 79 84 bb 83 e3 aa 3d 92 d6 6a 4e f6 43 e5 93 08 b8 1a 8c 31 06 73 2f 68 67 cc 8f 17 ba 66 49 8c 90 d4 9f 22 2a b3 42 f9 3f a1 a4 b5 e3 00 16 97 b6 b1 12 b4 52 af 6d f4 a8 42 9d 17 02 d3 55 76 dc ab 0f 1a 35 06 aa b5 0d d9 e8 64 7f 93 82 d7 b9 74 75 38 44 e9 3d 3e 06 d8 2a f2 33 fc 9d c2 cf b4 1f 87 9d b4 36 ca 8c 53 5b af 2a cb 0d 21 5e da 50 13 74 f5 26 47 89 f0 a4 39 b1 2b b8 91 6c db f5 5c 46 5e 4d 9f bf 64 2c 72 79 cd e7 fe f0 bc 44 05 43 ba 0d 22 16 1a cf 59 1f 16 d4 a3 9d d0 49 f9 07 82 a0 96 d0 fe a1 86 6a e9 8e 34 55 4d c7 82 e3 f3 4e e3 ac c3 18 26 70 64 Data Ascii: H}tczsQF\|NPD5\WG$ZBo4QY<;~}eK,y=jNC1s/hgfI"B?RmBUv5dtu8D=>36S[!^Pt&G9+l\F^Md,ryDC"YIj4UMN&pd
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 13 84 10 75 6d 3a f1 86 4a 07 32 fd 58 d1 cb 11 d9 bc 46 fa d0 94 9c 8f 0f 35 d3 ee ac 98 23 48 49 0e 78 f6 3f b6 c1 df 34 a1 1b da 5e cd 63 9d b9 c5 ed 11 10 69 c8 97 34 30 19 9f a0 d0 94 f5 51 14 39 3f 9d b2 00 88 86 d3 f3 c4 eb 6e 7b f0 db 28 69 cd bd 50 28 2d 2c 7c bf 00 a1 07 5d df cd be 77 88 9c 2a 2f 8e 80 dd c1 05 5a ef 38 cb 5a 31 e0 cc 81 b1 22 dc 1c 88 be 02 e9 2b 56 69 56 11 f7 a7 10 73 f5 6a 89 fc fc e6 54 8c 4d c5 af de 95 f2 d8 a5 95 c5 56 13 70 ab 4a c3 41 f6 bb 95 ba 5b 50 f2 f0 19 71 99 0e c5 e1 9a bb 49 d8 a9 d8 d6 8a 35 01 28 a7 a4 f1 74 20 43 31 09 88 4b f4 7e e6 07 b8 a0 1b 62 1d 74 be 81 5e e5 1c f8 3d 41 7a 40 82 47 3b 3a 35 62 d6 e9 e9 44 45 80 d2 eb e2 9f 5e 00 4a 04 bd b2 34 d5 ee 90 39 d6 ae 34 3f 75 3e 40 0f 3f 8a 34 08 92 1a Data Ascii: um:J2XF5#HIx?4^ci40Q9?n{(iP(-,\|]w*/Z8Z1"+ViVsjTMVpJA[PqI5(t C1K~bt^=Az@G;:5bDE^J494?u>@?4
2024-10-14 12:20:16 UTC	1280	IN	Data Raw: e5 61 80 fd ed e8 a2 07 73 39 fb 06 60 f8 4a 6c cd c0 fb 55 80 36 22 26 0e 82 42 ad 54 e9 7b 02 d5 e1 36 a5 a8 f3 f5 ff 68 3f 1b 66 7d ed ee f4 14 16 3c e0 4e 7d c1 1c 7d 0f ad 77 2d 42 2a f5 f0 02 c6 69 05 25 a2 78 0a 7b c9 90 49 18 82 52 d2 21 85 9a 6f c0 69 3b 8f a9 93 1a 08 1b 2f 07 ad 74 85 9b bc 62 7b 26 01 32 d8 00 a3 5e 47 72 7f c7 a0 71 4e 14 e1 05 67 c2 1d 3c df 9a ea cd ac 24 65 6f cc cc 41 46 8a 35 95 43 03 59 7b 6c 41 07 ef 30 9e 70 46 e6 1a 90 80 ea 89 51 32 42 1d 77 52 0c 30 e6 82 47 b0 8b 46 ab bd 85 c6 5c 27 73 7b 80 19 90 58 0a 66 79 63 d3 8f 15 8b 6a 0c aa 67 15 7f 28 ad ce d6 48 0b 8f 1c be a9 b8 ab 7e 4b 0e a7 73 fd cf 50 5f 2c 1a ed 9c 93 48 11 73 e3 bf f7 d3 fe 0d e5 e8 c7 8e 04 e4 57 17 e9 e1 e2 b6 32 cd 8a c9 8f 3d 7a 5a 87 63 5b Data Ascii: as9`JlU6"&BT{6h?f}<N}}w-B*i%x{IR!oi;/tb{&2^GrqNg<$eoAF5CY{lA0pFQ2BwR0GF\'s{Xfycjg(H~KsP_,HsW2=zZc[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.11	49820	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	714	OUT	GET /ybar/cerebro_min.js HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=fPBofgIebZhYWUQINsoAqqmG5meI&v=1
2024-10-14 12:20:16 UTC	693	IN	HTTP/1.1 200 OK x-amz-id-2: 7JvF4HeA/vgaReGlmuo4J3QVpbfXXkmab+O2BRVno/TVfQc3FkXt3Xm/1/CvYqBhQZLMtO07qfA2BeipGfpj+g== x-amz-request-id: 1K6ANZ757MKBS225 Date: Mon, 14 Oct 2024 09:25:25 GMT Last-Modified: Thu, 05 May 2022 20:34:05 GMT ETag: "0ccb51bc1dd6980920da39e008a599e0" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 5636 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade Age: 10492 Connection: close Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 76 61 72 20 57 4f 52 4b 5f 53 45 52 56 45 52 3d 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2d 6d 63 64 6e 2e 73 65 63 75 72 65 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 79 62 61 72 2f 65 78 70 2e 6a 73 6f 6e 22 2c 54 49 4d 45 4f 55 54 3d 32 65 33 2c 43 65 72 65 62 72 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3d 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 30 7d 72 65 74 75 72 6e 20 65 2e 72 75 6e 45 78 70 65 72 69 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 65 77 20 65 29 2e 5f 66 65 74 63 68 57 6f 72 6b 28 29 7d 2c 65 2e 73 65 6e 64 42 65 61 63 6f Data Ascii: var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeaco
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 69 73 20 30 22 29 3b 65 6c 73 65 7b 69 66 28 6e 3e 3d 65 2e 65 78 70 4c 69 73 74 2e 6c 65 6e 67 74 68 29 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 61 6c 6c 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 20 61 73 20 65 78 70 43 6f 75 6e 74 20 3e 3d 20 65 78 70 4c 69 73 74 20 6c 65 6e 67 74 68 22 29 2c 72 3d 65 2e 65 78 70 4c 69 73 74 3b 65 6c 73 65 20 69 66 28 22 72 61 6e 64 6f 6d 22 3d 3d 3d 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 22 2b 6e 2b 22 20 72 61 6e 64 6f 6d 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 3b 69 2b 2b 29 7b 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 65 2e 65 78 Data Ascii: is 0");else{if(n>=e.expList.length)console.log("marked all experiments to run as expCount >= expList length"),r=e.expList;else if("random"===t){console.log("marked "+n+" random experiments to run");for(var i=0;i<n;i++){var s=Math.floor(Math.random()*(e.ex
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 65 61 63 6f 6e 73 22 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 3d 30 2c 74 68 69 73 2e 65 6e 64 54 69 6d 65 3d 30 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 22 64 65 66 61 75 6c 74 22 7d 2c 74 3d 30 2c 6f 3d 65 3b 74 3c 6f 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 6f 5b 74 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 72 2c 69 2c 73 2c 6f 2c 61 2c 75 2c 63 29 7b 76 61 72 20 6c 2c 70 2c 64 2c 66 2c 68 3b 30 3c 61 2e 6c 65 6e 67 74 68 7c 7c 30 3c 6f 2e 6c 65 6e 67 74 68 3f 28 70 3d 6e 65 77 20 6e 2c 64 3d 21 31 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 Data Ascii: eacons")}},e.prototype._sendBeacons=function(e){for(var m=this,n=function(){this.startTime=0,this.endTime=0,this.source="default"},t=0,o=e;t<o.length;t++){var r=o[t];!function(r,i,s,o,a,u,c){var l,p,d,f,h;0<a.length\|\|0<o.length?(p=new n,d=!1,new Promise(f
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 66 7c 7c 65 28 29 7d 2c 68 2e 73 74 61 72 74 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6f 2e 73 72 63 3d 72 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 68 2e 65 6e 64 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 68 2e 73 6f 75 72 63 65 3d 22 69 6d 61 67 65 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 28 72 29 3b 6d 2e 65 78 70 43 6f 75 6e 74 3d 31 3c 65 2e 6c 65 6e 67 74 68 3f 6d 2e 65 78 70 43 6f 75 6e Data Ascii: clearTimeout(t),f\|\|e()},h.startTime=Date.now(),o.src=r}).then(function(){if("performance"in window&&"getEntriesByType"in window.performance){h.endTime=Date.now(),h.source="image";var e=window.performance.getEntriesByName(r);m.expCount=1<e.length?m.expCoun
2024-10-14 12:20:16 UTC	436	IN	Data Raw: 22 2c 6c 3d 5b 5d 2c 69 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2b 3d 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 2c 6c 2e 70 75 73 68 28 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 29 7d 29 2c 22 67 72 6f 75 70 22 3d 3d 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3f 28 63 20 69 6e 20 74 68 69 73 2e 70 65 6e 64 69 6e 67 7c 7c 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 3d 5b 5d 29 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 2e 70 75 73 68 28 5b 75 2c 6c 5d 29 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 2b 2b 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 3d 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 29 Data Ascii: ",l=[],i.forEach(function(e){c+=e.replace("<BEACON>",n),l.push(e.replace("<BEACON>",n))}),"group"==this.uploadType?(c in this.pending\|\|(this.pending[c]=[]),this.pending[c].push([u,l]),this.complete++,this.complete==this.expCount&&Object.keys(this.pending)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.11	49821	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	615	OUT	GET /ok/u/assets/img/spinner-24x24-anim.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	934	IN	HTTP/1.1 200 OK x-amz-id-2: W4J9eQCj1L5NklAVfZmwNhl595G0SdgMeAeecOdkjpsDrv477A9yZaAdNvJH9J9FFownWBKQ3VI= x-amz-request-id: 93MJ1BBGPW1H1M93 Date: Mon, 30 Sep 2024 06:22:40 GMT Last-Modified: Thu, 05 Apr 2018 18:29:50 GMT ETag: "953c1ac7e3b4e3d58367e20b064034bb" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-meta-created-date: Mon, 05 Dec 2011 18:03:09 GMT x-amz-meta-mbst-etag: "YM:1:ed90b165-601e-4997-b914-768cf05cb2f80004b35c21a261b5" x-amz-meta-x-ysws-mbst-vtime: 1323108189495733 Expires: Thu, 02 Dec 2021 17:01:30 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 2684 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1231057 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 c4 17 00 ec ec ec f5 f5 f5 d5 d5 d5 f1 f1 f1 cc cc cc e9 e9 e9 9a 9a 9a c4 c4 c4 da da da a9 a9 a9 de de de ba ba ba d0 d0 d0 e1 e1 e1 e4 e4 e4 fa fa fa b5 b5 b5 c9 c9 c9 f8 f8 f8 fd fd fd be be be e7 e7 e7 b0 b0 b0 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 0a 00 17 00 2c 00 00 00 00 18 00 18 00 00 05 ed e0 25 8e e4 05 25 65 5a 02 91 34 5a 06 19 b8 aa 18 19 d1 1b 8b 92 03 d4 3c 83 61 20 82 89 26 15 07 0d 78 83 14 77 03 9f 0a c0 08 8c 12 06 c7 c5 38 71 54 26 c7 01 8d 61 48 30 44 0e 83 e5 a2 50 5c a2 c4 b7 a3 f1 13 31 b0 89 0a bb 7e b4 4a 2a 0d 0d 03 60 23 01 14 42 08 35 0f 81 05 0f 35 15 14 7c 25 13 00 56 40 97 40 07 14 Data Ascii: GIF89a!NETSCAPE2.0!,%%eZ4Z<a &xw8qT&aH0DP\1~J*`#B55\|%V@@
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 66 21 0c 45 3c 2d 09 94 98 41 16 01 02 25 c5 a5 b0 48 24 9a 24 0f 08 04 04 49 29 03 7e 14 4a 6e 3f 11 66 4a 90 2a 0d 0a 94 94 90 15 0b 99 9a 08 02 9d 9d 90 0d 09 91 a3 4a 86 a4 24 00 08 08 59 a7 23 0a 08 0a 59 55 24 12 8f 2a 03 aa 61 17 12 0d 49 43 11 06 80 2a 15 24 05 0d 78 00 c4 00 06 06 43 90 2c ba 00 8f 07 06 72 4a 0e 0d b3 d2 22 12 cc a6 92 ac 17 db 5f 06 10 4a 12 a6 e3 22 11 7a a7 c9 90 21 00 21 f9 04 05 0a 00 17 00 2c 00 00 00 00 18 00 18 00 00 05 b6 e0 25 8e e4 25 10 65 9a 3a d3 28 1c 64 a3 92 0e e1 b8 b0 58 2c cc 2c 4e 0c c2 43 f4 1a 1d 16 be 51 0d 41 cc 29 16 02 95 a4 40 0a 36 45 0b 0a 09 01 d0 09 04 54 11 81 09 e8 3e 15 a2 27 04 e5 15 20 02 97 41 4a 06 38 40 20 cc 52 e3 2b 9f dd 23 3e 01 0d 12 3e 0c 15 49 88 33 15 0e 8c 8c 70 3e 05 14 92 93 0d Data Ascii: f!E<-A%H$$I)~Jn?fJJ$Y#YU$aIC*$xC,rJ"_J"z!!,%%e:(dX,,NCQA)@6ET>' AJ8@ R+#>>I3p>
2024-10-14 12:20:16 UTC	84	IN	Data Raw: 13 2e 0a 16 09 16 95 38 3d 00 0c 04 0c 05 23 08 93 32 55 10 04 22 a7 0d 07 a7 8f 97 0a 49 07 8d 11 10 2a 04 14 17 01 07 ab 17 0f 6c 44 0e 10 ab 04 0b 22 0a 07 b6 72 0b 47 22 ca 45 07 75 65 0a 10 02 23 d4 af 07 db 65 00 ae dc cb 35 6d 76 bd 72 21 00 3b Data Ascii: .8=#2U"I*lD"rG"Eue#e5mvr!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.11	49822	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	518	OUT	GET /uu/api/res/1.2/CwIwq1WdTD1rWMAuQ4Mqwg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/thedailybeast.com/d8a2de6cb16f498e74de09733e4a87d0.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	1182	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Disposition: inline; filename="d8a2de6cb16f498e74de09733e4a87d0.webp" Etag: "263d44e87c0740a4900d74ec0303bab0" Expiration: expiry-date="Sun, 13 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 14 Oct 2024 12:05:01 GMT Date: Mon, 14 Oct 2024 12:11:29 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=2;cpu=1;start=2024-10-14T12:11:29.760Z;desc=hit,rtt;dur=90,content-info;desc="width=560,height=272,bytes=29838,owidth=1170,oheight=658,obytes=100951,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: d74b9895f5d3da53bb3f2208ad8a210a Age: 527 cld_id: d74b9895f5d3da53bb3f2208ad8a210a x-image-width: 560 x-image-height: 272 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 44438 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0d 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0d 0c 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e8 00 01 00 0a 00 0c 00 1e 00 09 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 64 65 73 63 00 00 01 50 00 00 00 62 64 73 63 6d 00 00 01 b4 00 00 01 e6 63 70 72 74 00 00 03 9c 00 00 00 23 77 74 70 74 00 00 03 c0 00 00 00 14 72 58 59 5a 00 00 03 d4 00 00 00 14 67 58 59 5a 00 00 03 e8 00 00 00 14 62 58 59 5a 00 00 03 fc 00 00 00 14 72 Data Ascii: JFIFICC_PROFILEapplmntrRGB XYZ acspAPPLAPPL-appldescPbdscmcprt#wtptrXYZgXYZbXYZr
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a Data Ascii: !-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 Data Ascii: k0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\D-u`K8%y
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 50 06 a7 01 23 59 37 da 33 29 f0 e7 c8 b6 b1 ac a8 c4 e2 61 c3 31 26 70 63 8c 68 e1 6d 2e ba 1a 24 e9 51 36 b4 74 74 9b 37 2b f9 a1 a2 a8 c5 5c fe 46 32 a3 d9 85 09 dc 49 5d 47 74 df 4a 96 05 bc a3 a9 a4 c1 69 a9 38 ce e4 35 4f 92 6a 8f 2b 4c f3 f9 83 46 92 3d 96 1c a6 99 97 51 f3 c8 3a 7e d8 b6 4c 6b 0c a0 be 97 33 67 47 b3 f5 75 9e 64 10 d4 d6 30 c5 88 00 92 da 49 f6 50 9b 00 23 8b c6 fb 46 58 d1 59 12 d8 f4 4c 07 b3 d7 3e cf 7a 1a ba 0e 57 a5 69 0f d4 dc 5a d7 d4 18 f2 0c 4f 6d a6 9d ea e7 2d cf 65 c2 76 26 38 98 99 90 df d1 f0 d5 3a 96 d8 43 0c 26 e3 ad a3 86 c4 36 82 a2 b5 d6 bf 03 bc c3 b0 5a 7a 2f 2a 17 29 48 48 b0 8d 1b fc 7c 54 dd fe 81 c5 64 80 1b 43 8c a6 6a 8d ff 00 6b ea 7f cc 4f f5 c7 b0 6c 3f cb 1f 35 76 9d fd 44 b1 ab fe fe b8 fa d3 b3 5f Data Ascii: P#Y73)a1&pchm.$Q6tt7+\F2I]GtJi85Oj+LF=Q:~Lk3gGud0IP#FXYL>zWiZOm-ev&8:C&6Zz/*)HH\|TdCjkOl?5vD_
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: cd 04 32 c2 46 9e b1 c5 d5 e2 33 55 af 33 b6 a6 c3 a1 a7 67 85 09 e9 20 ec 05 ad 18 2a ab ea 67 da dc 83 2b d1 e3 bc 56 5a 0e d4 7d 38 b3 88 ba 81 f6 89 8a c7 cc 28 2c 78 c4 a2 90 aa 86 76 89 be 2e aa 91 f4 51 fd 71 ec 5b 0f f2 a7 cd fd a5 f1 c4 4b 1a bf ef eb 8f ad 3b 35 f9 57 1f 3b 63 bf 30 a5 6c 7a a1 a0 16 09 06 e2 10 71 6e 38 86 d0 56 b5 04 a4 0b dc 98 ab 97 15 2b 46 aa 9c d7 1a 66 fa 28 8e 3b 25 4f 91 bc c2 4a 92 54 e9 b8 49 1b 72 8e 57 68 f6 a6 9f 07 85 ca 8b c4 e8 70 ec 21 66 f1 3c e0 f5 3c 47 54 a8 be eb 8e ce 3a 43 8a 24 8d 46 db 9f 08 f9 9b 1d db 5c 43 11 9d ca c7 aa 34 ed a0 a2 8a 26 a2 58 aa 52 d4 b3 75 12 63 8d 96 69 27 5c d2 2d cc c4 44 4e 41 45 24 96 34 a9 09 e7 27 10 18 97 0a 57 30 97 13 b2 87 86 f0 c0 6a 6b b2 d2 12 54 90 fc 92 5c 92 9a Data Ascii: 2F3U3g *g+VZ}8(,xv.Qq[K;5W;c0lzqn8V+Ff(;%OJTIrWhp!f<<GT:C$F\C4&XRuci'\-DNAE$4'W0jkT\
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 1a 6d 6f 20 1d 8b 82 e3 50 f3 04 5f dc 61 f3 0e 63 65 5c 61 c0 a4 cc cc 2c 2d 48 fc 1b 97 3d d5 78 1f 28 04 25 cc 4f ca 94 cb b4 fc 9b 69 72 5d 41 4f 20 0f 68 df 72 08 fa 40 8b 8e 57 17 eb 12 d7 2c 2f ba 02 a5 ce a1 82 73 0a 9f 87 1a 66 9b 29 51 4c ec 94 c2 ee 96 66 14 52 f3 27 95 92 79 5b c8 fd 71 eb 9b 17 b7 ef c3 15 20 aa 75 da 73 d8 9e 12 d9 ee f6 a7 13 b0 48 cf 4a d4 a5 51 39 26 f0 71 a7 05 c1 f0 f1 07 ce 3e 90 c3 b1 18 71 3a 74 9e 07 5d 14 e1 ea 22 5a 77 e4 72 0f c6 c0 a0 43 02 f3 48 df e7 08 26 f8 4b fa 10 ef 21 f4 2b 2d cd b0 55 28 5b 93 09 8f 99 f1 e5 ff 00 8e 79 c2 56 fc 55 35 40 1b f2 8d 29 8c 36 a8 bd 04 0b 57 94 38 1c 6f 89 d5 91 97 cf 81 b5 d4 04 67 d0 fc 43 7d 82 fc 63 c5 4a 6d 29 f8 c7 42 76 e1 a9 a4 ea 16 da f0 84 d8 74 35 7f 9d f6 42 90 Data Ascii: mo P_ace\a,-H=x(%Oir]AO hr@W,/sf)QLfR'y[q usHJQ9&q>q:t]"ZwrCH&K!+-U([yVU5@)6W8ogC}cJm)Bvt5B
2024-10-14 12:20:16 UTC	97	IN	Data Raw: 02 2a d2 09 55 fd 75 83 ee 58 83 46 4e 81 a4 f2 43 55 aa 71 ff 00 4d 6b f3 c4 1b bc 82 69 3f a1 24 56 a9 80 7f 0f 63 7f f7 82 0d da 41 34 9f d0 e4 f9 81 99 15 a9 0c 40 e4 95 1a 75 09 61 b4 8f 67 70 49 8d 95 35 22 31 a9 99 0d d5 15 0b 1f 1e 67 a1 9b 39 a3 8c 87 2a 97 d9 19 fb ab 3a 19 bd dd Data Ascii: UuXFNCUqMki?$VcA4@uagpI5"1g9:
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 05 85 27 35 f1 92 6f fe 32 bd fc 53 15 ee cc e8 2f 76 c3 d0 31 9b 58 cd 3c aa 03 f3 60 d0 8b a0 dd d7 0f 40 bf c2 ce 33 5f 3a 8f 2f c9 8a 34 18 9e 82 f7 64 1d 01 fe 15 f1 9f f2 87 d9 16 32 06 74 1f bb 61 b0 3f c2 b6 33 3c ea 1f 64 3e ef 1f 41 3b b6 00 7f 85 7c 64 39 4f 0f aa 0d de 3e 84 f7 5c 01 ff 00 85 ac 65 fe de 3f 36 0d 08 ba 11 dd 70 85 fe 16 31 97 fb 78 fc d8 47 c0 cf 68 dd d9 01 f5 ac 8b c7 cd c7 a1 8b 6b db 10 e3 89 9f 04 b8 2d e1 01 51 05 ce 76 80 04 39 d2 10 61 30 e2 82 14 82 a2 b3 8b 30 fd 01 05 75 4a 9b 4c e9 e8 55 bc 65 d3 d2 c9 3a f8 50 c2 a8 ac 86 9f cc a7 31 c4 fc 41 cb b4 1c 63 0f d3 8b 80 72 79 6b b0 31 d3 d2 6c c4 92 f8 9f c0 e7 6a f1 f4 f2 c4 79 e7 31 b3 ee 6e 65 2e 8a e6 29 21 bb ed 2c c1 3f 56 d1 b5 7d 06 1d 87 33 34 8e 4e 06 bb 5a Data Ascii: '5o2S/v1X<`@3_:/4d2ta?3<d>A;\|d9O>\e?6p1xGhk-Qv9a00uJLUe:P1Acryk1ljy1ne.)!,?V}34NZ
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 9e 53 2a 08 9c 62 90 ca 79 2b 5d d6 63 a4 a7 d9 d8 29 ff 00 12 b1 f6 34 93 e3 13 cf e0 81 0f 3b 62 ee 24 3d 65 6b 14 c6 9e a8 3f b8 0f 3e 4e 9f 78 10 f5 18 fe 1b 86 b7 25 32 5d 4a 62 c2 2a 6a d7 34 ea 73 ca 86 35 cc 2c 62 4a 17 38 b6 19 56 da 50 34 0b 78 78 c7 1f 89 6d ad 4c bc 11 d6 3a 9c 37 64 d5 f6 54 61 06 5f 08 a8 dd ea 8b 8e 2d 5d 6e 63 8f a8 c6 65 a8 5e 6a 76 54 db 34 c8 53 34 84 ae c2 42 48 f6 32 f2 c1 c5 8e 40 0d e2 da 4c 3e af 11 77 e1 a1 74 d2 d2 61 ed b2 d8 b1 a6 e1 ca bd 69 d0 96 10 a6 da b7 b2 91 ce 3a 9a 5d 9c 82 89 ba b5 cf b1 aa 75 5d 76 24 ed 2a 26 7f a9 d1 30 be 4f cd 21 69 7e 6f 43 4d 91 b8 f9 d1 55 66 db 61 b8 3a 2b 28 d1 15 7a 9d 56 11 d9 bd 5d 73 db 2d 72 f0 e8 74 aa 4e 12 a5 52 12 03 32 e3 50 f9 c7 73 1e 6b 8b 6d c5 7e 27 76 66 b2 Data Ascii: Sby+]c)4;b$=ek?>Nx%2]Jbj4s5,bJ8VP4xxmL:7dTa_-]nce^jvT4S4BH2@L>wtai:]u]v$*&0O!i~oCMUfa:+(zV]s-rtNR2Pskm~'vf
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 84 c9 0d c8 34 a7 55 e0 91 b0 8c aa 4d 9e ad ad e2 89 c3 a9 6c b8 fd 1c 0d b3 4b 96 b0 e5 6a a7 a0 21 95 9e d0 5c db 90 f8 c7 55 1e 01 87 e1 4c d5 ab 7a 2a f4 35 89 51 8a e3 6f c9 4b 1a a3 7a 9b 0c 39 94 2d b6 a1 35 50 d2 2f be 91 cc 46 aa bb 6f 69 a8 13 4a 85 9c 7a 9d 8e 11 d9 b3 e5 72 4b 5c eb fd 0d fd 37 0e d3 29 4d a5 32 f2 c8 04 75 b4 79 ce 2d b4 f5 98 a2 da 47 1e a1 87 e0 34 78 6b 51 b1 b5 0b 31 dd f6 76 8e 65 5c ae e2 a6 ed 11 13 90 09 24 58 c4 8c 16 9f 38 08 0e 00 09 50 00 98 00 10 27 21 01 0e 28 20 00 42 0e 18 17 80 60 f4 f9 c0 00 02 d0 00 92 20 14 61 48 37 8b 4a ac 19 41 11 24 2f 22 b3 09 8f f2 9a ad ee 47 dd 1e b7 b1 5f 2c 7c e7 da 47 cf 12 eb 9f c2 8c 7d 73 d9 b7 ca 38 f9 e7 19 f8 c5 7a 63 d3 8d 11 cd f3 da 73 b0 c3 92 ac 8d 8b af 93 f9 a9 fe Data Ascii: 4UMlKj!\ULz*5QoKz9-5P/FoiJzrK\7)M2uy-G4xkQ1ve\$X8P'!( B` aH7JA$/"G_,\|G}s8zcs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.11	49824	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	689	OUT	GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.c9493b0439b3a8ef64a3f6b7f532117c.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	633	IN	HTTP/1.1 200 OK x-amz-id-2: X+9jjNya6oRqfTyvtPBhFsb0CtfB879dHuy888SpJyhtXwx0mc76jN4D67qr8fcr1OT3hvDaFro= x-amz-request-id: AFV2VRS8XX7JCXKT Date: Thu, 05 Sep 2024 16:57:53 GMT Last-Modified: Wed, 01 Mar 2023 03:52:06 GMT ETag: "2fb9d43c74752389405abc1a5814b44a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Tue, 01 Mar 2033 03:52:18 GMT Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 539840 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 3352944 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 47 49 46 38 39 61 04 01 54 01 f7 01 00 ff ff ff fd fd ff fd ff ff ff f9 ff ff fa f4 ff fb ee ff fb ff ff fd fd ff fe f6 ff fe ff ff ff fa ff ff fe ff f3 ea ff f4 f5 ff fa fa ff fb fb f7 e5 e2 f8 fe ff fe e4 d1 ff e8 d1 ff f6 d8 ff fa e6 f4 55 2e f5 52 1a fb 51 10 fc 4f 0b fc d6 c2 fc e8 c5 fe 4b 0a fe 4d 08 fe 4e 0b fe 4e 13 fe 4f 0d fe 50 0c fe 51 0d fe 51 0f fe 53 16 fe 55 15 ff 4e 0d ff ef d2 ff b8 8c ff c3 a9 ff e4 c4 ff fe e8 d8 5e 3c e6 6d 43 fc 4e 12 fd 4f 0f fe 4c 22 fe 51 18 fe 53 13 fe 5b 18 ff 4d 15 ff f3 d5 c5 80 64 d3 64 3f dc a0 8d fe 70 41 bc 69 4d fe 68 2f d1 86 69 e4 cf b4 e0 bf b5 ff ad 95 fb 84 66 fe ea d3 fe fd ff fe ff fd ff e0 d0 ff f8 ee ff fb f8 ff fe fc ff ff fc fb ff fb fb ff ff ff ea e2 ff ef d9 ff f7 f6 ff fd f7 ff fd fa f7 df Data Ascii: GIF89aTU.RQOKMNNOPQQSUN^<mCNOL"QS[Mdd?pAiMh/if
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 07 ff 80 00 82 83 84 85 86 87 88 86 47 47 82 09 09 89 90 91 92 93 94 95 8d 5c 01 98 8f 96 9c 9d 9e 93 06 0f 46 5f 4d a5 a1 11 8e a9 a9 9f ac ad 91 a7 a4 a6 a8 aa aa ae b6 b7 97 a4 4b 10 0e 03 4a bf b4 8e b8 c3 ac 0b 48 04 0c 10 bc be c0 c1 c4 cf 9c 0a 48 ca bb 4b 0d 98 b9 ab d0 db af 4e 58 d4 d4 51 8c 00 ce dc e6 b5 e4 0e 5e 56 d4 12 ca d7 d2 02 02 e6 f4 83 e8 c6 ec ca ee 50 bb f0 f2 f5 f5 82 35 c8 b7 af 20 03 2c 08 87 28 3c 06 10 9a 40 30 ed 24 10 69 27 25 e1 42 24 0d 9f 05 6b 07 61 a2 c7 70 e2 e2 61 cc 38 ec 91 2a 8e 1f 3f fa 8b 47 b2 e4 b1 27 eb aa f1 4b 49 51 d4 28 2e 2d 71 bd 1c 88 b2 a0 ca 95 38 73 76 12 96 4e 5a 11 82 3d 69 1e 8c 95 50 a8 25 a2 3b f3 f5 ec e8 f3 9d ac 45 4e 2b c1 32 8a 14 25 55 a5 eb bc c1 dc 79 51 9e d9 79 4e b7 22 28 d0 75 e6 57 Data Ascii: GG\F_MKJHHKNXQ^VP5 ,(<@0$i'%B$kapa8*?G'KIQ(.-q8svNZ=iP%;EN+2%UyQyN"(uW
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 18 1b 7a d9 e8 20 4b 84 8c 20 43 62 64 60 a9 41 47 25 22 53 aa 4c c0 b2 a5 80 81 0d 7e fc 30 f9 71 a5 cd 9b 62 cc c9 34 47 a5 26 ce 9f 20 53 c8 ec 27 09 82 93 05 40 93 5a 84 30 b4 1f 2b 43 3d 95 4a 6d 08 81 1a 3f 7d 44 c7 e9 a3 39 b5 ab 4b 9f d4 7c 5c cd 5a 8a a7 d7 b3 06 3e 6e d1 d0 74 6c a1 38 a8 50 fa 7c 89 16 a8 06 b1 58 b5 ba 4d 31 f7 00 dd ba 36 ef 58 69 9b 57 6f 1c a3 48 12 a7 05 7c 73 9e 4e b7 fd 0a 47 96 c5 f5 2b e3 94 86 22 9b 22 ec 96 15 11 23 48 17 5b be 7c 71 f0 0f 53 5a 39 47 96 04 2a aa e8 d1 a4 1f da c1 5b 48 af e4 bc 92 7e 20 1e 80 a0 37 ec df b1 15 23 90 40 3b f5 ed d5 3f 7c 2c e1 ed 1b 78 70 84 05 b6 c4 a9 4d dd f6 f1 ab 71 9e 14 60 ee f7 81 f7 8a ce 63 57 ff 81 52 fd fa f5 92 af bf 83 7f 0e 5b 03 3b cd d6 cb cb c7 fa 59 8c fa fb e1 2f Data Ascii: z K Cbd`AG%"SL~0qb4G& S'@Z0+C=Jm?}D9K\|\Z>ntl8P\|XM16XiWoH\|sNG+""#H[\|qSZ9G*[H~ 7#@;?\|,xpMq`cWR[;Y/
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 04 00 21 f9 04 05 03 00 c3 00 2c 4e 00 de 00 6d 00 76 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 22 59 c8 50 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 06 e0 c2 31 8a c7 2b 54 be 44 39 41 ec 81 91 04 06 52 4e 59 c9 b2 a3 c6 97 30 25 82 9c 49 e7 12 98 27 28 55 ce 6c 19 b3 a7 cf 8d 1f 09 88 11 29 72 09 a3 59 92 20 1c 18 da 6e 27 cf 9f 50 7d 12 6d 50 69 13 1b 1b 50 74 3e 75 19 b5 eb 4b 06 4b 80 58 70 33 28 de 23 04 42 81 6e f5 ca 16 63 03 28 8a 60 08 8b 21 6d c7 98 b4 6b db ea 95 59 c4 88 86 3c 26 00 f9 b9 d5 a1 03 bb 62 26 d5 3a d0 ba b7 71 ce c7 3b bd 70 03 5c cd 1a 61 60 90 82 08 49 bc b8 b3 62 c7 a0 b1 84 41 2b 81 db d8 ca 96 79 c9 fb 73 76 b4 d3 a5 a1 63 17 70 fd e3 18 8d db a8 53 b3 11 9d a5 77 13 ce b1 65 43 80 7b 5a c4 9f 70 c8 67 88 92 97 62 89 eb Data Ascii: !,NmvH"YP#JH31+TD9ARNY0%I'(Ul)rY n'P}mPiPt>uKKXp3(#Bnc(`!mkY<&b&:q;p\a`IbA+ysvcpSweC{Zpgb
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: f9 ff ce 0f ca c0 16 8d 38 a5 b0 2c 91 b6 4b ee 33 97 fd f4 5f d1 68 91 03 02 56 80 1a a3 08 da 6d d6 99 d0 40 ee 06 95 ac a8 c5 c4 f8 e9 ce 8a 72 d4 4e b2 1c 20 67 98 c0 83 56 c2 d3 a3 59 1c 1a 24 c7 26 90 20 18 ab a3 28 b5 e6 24 28 b1 52 96 12 e1 a5 27 8d a9 0f 83 99 4c c5 11 c3 0c bf f3 45 ad bc a6 53 f7 8d 82 1d 4a b1 a9 ca 76 48 46 84 16 15 73 49 19 e2 4f 83 2a 54 62 3e 55 a1 41 64 29 00 88 b0 54 fd 39 f5 aa 71 cb aa 52 73 6a 55 b0 16 6f 06 89 58 82 56 27 00 54 b3 02 12 1c d9 f4 29 4e 4d fa 55 b7 1e 4c 18 3e 78 9e 62 ba 80 0e aa 96 d5 ae 2f 6c 83 39 4c d8 05 1c f8 f5 af 80 05 21 1b 06 6b c2 29 72 6f a8 75 4d 6c 9a 2c 10 8b 5e d2 0f 0c f0 a9 a2 64 21 d8 06 88 10 09 97 82 db 6c ba e4 f3 2d 02 ba 0d b4 a2 55 ec 35 ea 59 90 42 a4 b3 03 f8 8b 23 6a 53 4b Data Ascii: 8,K3_hVm@rN gVY$& ($(R'LESJvHFsIO*Tb>UAd)T9qRsjUoXV'T)NMUL>xb/l9L!k)rouMl,^d!l-U5YB#jSK
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 0d 31 81 43 84 73 f6 29 27 1b c8 cc 73 9b 9a 78 6a 61 28 02 5e 6c 61 8a 74 7e 5e 49 e6 2a 73 1c 3a e4 9a 05 54 d1 42 33 1e 34 aa 29 2f c1 2c d3 0d 72 ca 4d 5a a3 94 fb c4 e3 22 9c 3c 6e 5a 8d 28 80 a4 30 1a 86 85 82 ff 8a 40 1d df 2c 62 6b 9c a8 3a 2a e7 3a 1a 20 3a 68 a1 14 14 d3 88 38 b8 e6 aa ab 9c f1 90 32 cf 71 b1 22 50 8c 21 2c 7a 66 ec b4 aa c2 b2 49 25 d8 35 4b 0c 37 3a fe 48 6d aa 4a f6 39 c9 23 52 1c 10 6b 0a 3a dc 3a e6 b7 e1 8a bb 03 18 e5 56 26 ea 65 bd 31 f2 26 ab ec 16 ab 2a 0b c3 14 21 c6 bc bb 31 41 4d 26 62 e2 9b 2f b8 8d 7a ea 1d a1 1c d2 11 1e 2e 16 1e ac af aa 32 38 62 5c 7f 0c ef 26 47 ba 11 1f 8b 70 b5 8e f8 9a f1 6a 1e 76 c2 a9 c1 1e a7 3c a7 37 91 b6 e3 24 77 76 d0 e1 0a 88 de 4e ac f2 a6 9c 78 e3 f2 cb 00 93 15 c4 0f 87 d9 4c f1 Data Ascii: 1Cs)'sxja(^lat~^Is:TB34)/,rMZ"<nZ(0@,bk:: :h82q"P!,zfI%5K7:HmJ9#Rk::V&e1&*!1AM&b/z.28b\&Gpjv<7$wvNxL
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: b1 8f 05 42 84 f6 d6 b8 c8 37 5e 44 73 b9 bb e4 81 10 c3 0c 19 86 b2 24 d9 c1 61 2a 2f b9 c9 5a e6 69 22 bc ca d1 2a 33 79 a0 36 3c 59 9a c3 fc c3 77 8c c6 ff cb 55 96 00 9a b3 cc e6 f9 8d 19 ce 71 ae 55 9d 0d 7a 67 3c 4b e4 41 e8 1c f2 9a f7 8c 40 70 64 f7 c4 4a fe 32 0f 46 f9 56 42 ff 70 6e 49 4e f4 9f d1 a1 35 b3 ea 75 d0 8e 96 5c 2d d8 60 0e 09 6b 48 d2 36 c2 01 8d 1b 9d e9 e4 1d a6 d3 ff fa b4 aa 41 ed 90 56 8c 22 6b 96 a6 68 a9 63 c7 86 78 10 37 d5 14 36 33 93 7d c1 6b 22 cb 7a d6 9a 6e 03 6b c6 10 bc 4b 0b 19 d8 a1 53 84 b0 3d ad 6b 82 1c 07 1e 20 8d f5 b1 91 fd b6 58 84 8c d9 cd 26 88 20 f4 30 88 f1 52 7b 7b c2 d0 83 6b b1 ad 91 1f 70 db d7 df a6 b5 2d e8 1b e3 85 a0 22 15 a3 4e 77 ec 66 71 0c cb b5 5b 21 e0 f1 b6 bc 93 cd 0f 7b df 1b 21 5d 40 87 Data Ascii: B7^Ds$a/Zi"3y6<YwUqUzg<KA@pdJ2FVBpnIN5u\-`kH6AV"khcx763}k"znkKS=k X& 0R{{kp-"Nwfq[!{!]@
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: c1 9f 7f fe cd d1 49 53 c0 44 38 08 66 22 54 68 e1 1a ab c9 62 47 4d 48 d8 c5 60 68 08 b4 b0 0c 79 14 5e 68 60 25 5c c9 d6 a1 87 1f e6 45 00 01 2a f4 03 a1 7d 25 9a 38 9d 38 fa d1 f4 04 8b 2d e2 f5 62 0a df c4 80 9a 81 35 da f8 87 38 40 e9 c8 63 8f 6c 79 e1 c5 0e 58 d1 88 8d 1a 54 56 69 a4 0b a8 54 70 dd 82 49 44 b0 00 93 3e a2 23 cd 22 7e 48 69 65 91 e5 a1 f5 de 92 60 8a b5 65 23 b6 68 c6 98 09 19 d4 39 e5 99 78 96 79 c1 23 5e ee c7 66 9b 30 ad 70 9d 39 93 f4 45 e4 9d 79 16 f9 49 1b 4a 02 da 64 18 75 3c 83 a1 99 88 26 3a 5e 66 9e 04 c1 e1 8a 5f 3a ea a6 1c 41 5e 69 a7 a5 79 ea 60 88 60 9c 7a aa 53 01 15 30 41 e2 a1 68 c6 ff 1a ca 05 8c 28 30 0f 64 5b a6 aa 6a 4b d7 d9 81 0c 7d 94 c2 21 ac ac b1 ee e0 cf 1d 2f e6 ba ab 4e fd 6c d3 4b 62 71 0d 49 ec b4 16 Data Ascii: ISD8f"ThbGMH`hy^h`%\E*}%88-b58@clyXTViTpID>#"~Hie`e#h9xy#^f0p9EyIJdu<&:^f_:A^iy``zS0Ah(0d[jK}!/NlKbqI
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 2f 66 44 9c 00 2d 2e 78 41 b8 8a 68 d4 34 bb 3e 6b 07 05 28 30 56 79 aa 77 bd 32 2c 43 1d 58 a5 dd 54 6d e0 57 df bd 2f 7e e1 c7 09 12 ce b6 21 0a 0c f0 5c 07 ec 5a 7a ec d3 7c a4 a5 2d 18 3a 2b 60 06 7f f6 02 f4 a8 87 0f 20 1c 61 db 6c c0 9e 08 74 29 6b 2d 1c d4 e7 01 41 03 4a fc 08 45 c8 30 ce 10 57 98 c4 43 c4 c4 0f 78 07 ca 86 6c 6f aa 2e 8e de 88 61 5c d6 36 d4 60 03 59 8d c8 04 f0 b0 da d3 51 58 4f 22 e6 b1 67 47 d1 83 5b 05 b9 b9 ac 44 69 5f 5f ac 64 ce e1 63 0e f3 b8 15 45 48 99 45 78 ee 98 ca 55 ae 9a b5 36 30 d9 87 fc 13 a8 e4 0c b3 71 93 04 b2 cb 79 77 ff b1 6a d6 6d 59 1c ba 90 29 26 36 cd 71 96 2e 35 38 fc 90 55 ea 78 c1 79 26 31 2d 6d 33 94 20 48 42 a5 81 86 71 33 ee aa 10 0d 74 4d c1 89 06 ef 32 4c 61 5e 84 94 e1 c8 1a fd 72 a4 e5 ca 66 8e Data Ascii: /fD-.xAh4>k(0Vyw2,CXTmW/~!\Zz\|-:+` alt)k-AJE0WCxlo.a\6`YQXO"gG[Di__dcEHExU60qywjmY)&6q.58Uxy&1-m3 HBq3tM2La^rf
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 03 ac e7 93 d8 b4 04 d4 b0 2d 1f 89 7a 79 c6 55 01 69 87 20 32 8a 4b 10 07 f0 d0 83 73 48 62 cd 60 95 57 69 89 2a 26 19 92 60 6c ff 08 71 7b e9 0d 14 57 6a a1 c1 04 6b f9 94 61 37 91 0c 76 0a fb b5 94 94 b9 2a 82 65 0e ee e0 88 3b 57 9a e0 c6 09 c7 f2 99 82 f7 28 2e 27 1b 2a 10 07 6f 96 79 a6 d9 58 fa 15 8a 5a b9 98 3d a9 98 68 79 07 e7 e0 0e cf 94 99 c9 58 8e 41 a5 0a 37 50 09 14 a0 81 74 49 15 c9 72 08 28 00 25 c1 f9 88 9b 25 95 f8 d4 14 33 40 06 75 30 5f 04 99 9c ac 69 0e cc 00 09 67 e0 3d be b8 5b d2 d0 90 0a 36 b0 61 ba 79 8f 3d c2 2a 41 50 0c f8 d3 8f c1 04 1d 93 70 44 b5 17 93 b8 49 2f 1a d0 9b ab d0 7c 90 d5 4d a7 77 61 a4 94 0d ac 90 8d af 53 9f e5 a2 25 75 70 0a 8e 80 99 fc a9 49 f5 57 27 8c 60 0a e3 75 9c b7 79 72 7e f9 32 8d 22 0b 95 70 0c 3a Data Ascii: -zyUi 2KsHb`Wi&`lq{Wjka7ve;W(.'oyXZ=hyXA7PtIr(%%3@u0_ig=[6ay=APpDI/\|MwaS%upIW'`uyr~2"p:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.11	49825	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	539	OUT	GET /ss/analytics-3.54.3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	781	IN	HTTP/1.1 200 OK x-amz-id-2: zPeEyrpxl4xlKIFbYbAurKsU10BQ/5uKljjxXrIfMDo5lr+uay9+DoGJFsq4vjRPiCez+B2Z21Ga/rwjvpWPO27PW1SOB/aqDcINbCfs+SQ= x-amz-request-id: 6M0PMA58C8DH1891 Date: Wed, 25 Sep 2024 04:43:15 GMT Last-Modified: Fri, 03 May 2024 16:05:29 GMT ETag: "af551b67310e4c8fc63e60101c77c97f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, immutable x-amz-version-id: o3Y2FoKXiHcpVnUZzDPBetSL4nVZrNUK Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 51086 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1669022 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 65 28 64 29 7b 76 61 72 20 66 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function fe(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 6f 3f 28 6d 5b 74 5d 3d 6e 2c 61 3d 66 5b 74 5d 2c 64 26 26 61 26 26 61 2e 6c 6f 67 26 26 64 2e 73 65 74 28 61 2e 6b 65 79 2c 6e 29 29 3a 30 3c 73 2b 6c 26 26 28 73 2d 2d 2c 75 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 63 28 73 29 26 26 75 28 29 7d 2c 6e 75 6c 6c 29 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 69 66 28 65 26 26 2f Data Ascii: Rapid Was Prevented From Accessing Cookies:",e)}-1!==o?(m[t]=n,a=f[t],d&&a&&a.log&&d.set(a.key,n)):0<s+l&&(s--,u())}e.fpc&&".yahoo.com"!==c(s)&&u()},null);try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}if(e&&/
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 66 66 65 63 74 69 76 65 5f 64 65 76 69 63 65 69 64 3a 65 5b 36 5d 2c 64 65 76 69 63 65 69 64 5f 74 79 70 65 3a 65 5b 37 5d 2c 6c 69 6d 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 66 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 28 74 3d 22 72 69 63 68 76 69 65 77 22 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 79 71 6c 69 64 7d 2c 67 65 74 45 76 65 Data Ascii: ffective_deviceid:e[6],deviceid_type:e[7],limit_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new fe).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=(t="richview",e.prototype={getYQLID:function(){return this.yqlid},getEve
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 6d 61 70 5b 65 5d 7d 2c 67 65 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 7d 2c 61 62 73 6f 72 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 79 2e 68 61 73 4f 77 6e 28 65 2c 74 29 26 26 74 68 69 73 2e 73 65 74 28 74 2c 65 5b 74 5d 29 7d 2c 61 62 73 6f 72 62 5f 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 26 26 21 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6e 29 7c 7c 79 2e 68 61 73 4f 77 6e 28 65 2c 6e 29 26 26 74 68 69 73 2e 73 65 74 28 6e 2c 65 5b 6e 5d 29 7d 2c 67 65 74 53 69 7a Data Ascii: urn this.map[e]},getAll:function(){return this.map},absorb:function(e){if(e&&y.isObj(e))for(var t in e)y.hasOwn(e,t)&&this.set(t,e[t])},absorb_filter:function(e,t){if(e&&y.isObj(e))for(var n in e)t&&!t.call(null,n)\|\|y.hasOwn(e,n)&&this.set(n,e[n])},getSiz
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 63 61 74 69 6f 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7c 7c 22 22 2c 69 3d 28 4e 28 65 2c 6e 29 2c 74 3d 74 26 26 79 2e 6e 6f 72 6d 28 22 22 2b 74 29 2c 65 2e 6f 76 65 72 72 69 64 65 7c 7c 7b 7d 29 2c 6f 3d 22 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 72 3d 22 75 64 63 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 69 3d 28 21 30 21 3d 3d 65 2e 66 70 63 26 26 22 79 61 68 6f 6f 2e 63 6f 6d 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7c 7c 28 6f 3d 22 33 70 2d 22 2b 6f 2c 72 3d 22 33 70 2d 22 2b 72 29 2c 7b 6f 76 65 72 72 69 64 65 3a 69 2c 76 65 72 73 69 6f 6e 3a 6d 65 2c 63 6f 6d 62 6f 4e 61 6d 65 3a 70 65 2c 6b 65 79 73 3a Data Ascii: cation&&document.location.href\|\|"",i=(N(e,n),t=t&&y.norm(""+t),e.override\|\|{}),o="geo.yahoo.com",r="udc.yahoo.com",i=(!0!==e.fpc&&"yahoo.com"===document.domain.split(".").slice(-2).join(".")\|\|(o="3p-"+o,r="3p-"+r),{override:i,version:me,comboName:pe,keys:
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 6f 63 6c 69 63 6b 2d 72 65 73 70 22 2c 6e 6f 6e 61 6e 63 68 6f 72 5f 74 72 61 63 6b 5f 63 6c 61 73 73 3a 65 2e 6e 6f 6e 61 6e 63 68 6f 72 5f 74 72 61 63 6b 5f 63 6c 61 73 73 7c 7c 22 72 61 70 69 64 2d 6e 6f 6e 61 6e 63 68 6f 72 2d 6c 74 22 2c 74 72 61 63 6b 5f 69 6e 70 75 74 3a 65 2e 74 72 61 63 6b 5f 69 6e 70 75 74 7c 7c 22 72 61 70 69 64 2d 74 72 61 63 6b 2d 69 6e 70 75 74 22 2c 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 3a 65 2e 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 7c 7c 22 72 61 70 69 64 2d 77 69 74 68 2d 63 6c 69 63 6b 69 64 22 2c 61 6e 63 5f 70 6f 73 5f 61 74 74 72 3a 22 64 61 74 61 2d 72 61 70 69 64 5f 70 22 2c 61 6e 63 5f 76 39 79 5f 61 74 74 72 3a 22 64 61 74 61 2d 76 39 79 22 2c 64 65 62 3a 21 30 3d 3d 3d 65 2e 64 65 62 75 67 2c 6c 64 62 67 Data Ascii: oclick-resp",nonanchor_track_class:e.nonanchor_track_class\|\|"rapid-nonanchor-lt",track_input:e.track_input\|\|"rapid-track-input",click_id_class:e.click_id_class\|\|"rapid-with-clickid",anc_pos_attr:"data-rapid_p",anc_v9y_attr:"data-v9y",deb:!0===e.debug,ldbg
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 62 63 6f 6f 6b 69 65 5f 6f 76 65 72 72 69 64 65 29 26 26 28 69 2e 79 71 6c 5f 65 6e 61 62 6c 65 64 3d 21 31 29 2c 69 2e 63 75 73 74 6f 6d 55 49 44 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 28 74 3d 69 2e 63 75 73 74 6f 6d 55 49 44 29 26 26 74 2e 74 79 70 65 26 26 74 2e 69 64 3f 69 2e 63 75 73 74 6f 6d 55 49 44 3d 79 2e 61 75 67 28 7b 7d 2c 74 29 3a 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 63 75 73 74 6f 6d 55 49 44 20 6d 75 73 74 20 62 65 20 61 6e 20 4f 62 6a 65 63 74 20 77 69 74 68 20 22 69 64 22 20 61 6e 64 20 22 74 79 70 65 22 27 29 2c 69 2e 63 75 73 74 6f 6d 55 49 44 3d 6e 75 6c 6c 29 29 2c 2b 69 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 29 3b 72 65 74 75 72 6e 20 79 2e 69 73 4e 75 6d 28 72 29 3f 69 2e 63 6f 6d 70 72 5f 74 69 6d Data Ascii: bcookie_override)&&(i.yql_enabled=!1),i.customUID&&("object"==typeof(t=i.customUID)&&t.type&&t.id?i.customUID=y.aug({},t):(console.error('customUID must be an Object with "id" and "type"'),i.customUID=null)),+i.compr_timeout);return y.isNum(r)?i.compr_tim
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 73 72 63 7c 61 63 74 69 6f 6e 29 24 7c 5e 28 41 5f 7c 5f 29 2f 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 28 61 29 66 6f 72 28 76 61 72 20 73 20 69 6e 20 61 3d 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 2e 73 70 6c 69 74 28 22 26 22 29 29 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 29 26 26 32 3c 3d 28 73 3d 61 5b 73 5d 2e 73 70 6c 69 74 28 22 3d 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 69 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 5b 30 5d 29 2c 73 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 5b 31 5d 29 2c 6f 3d 21 72 2e 74 65 73 74 28 69 29 2c 6b 28 22 51 75 65 72 79 70 61 72 61 6d 73 20 64 65 63 6f 64 65 64 3a 20 22 2b 69 2b 22 20 3a 20 22 2b 73 29 Data Ascii: src\|action)$\|^(A_\|_)/,a=document.location.search;if(a)for(var s in a=(a=a.substring(1)).split("&"))a.hasOwnProperty(s)&&2<=(s=a[s].split("=")).length&&(i=decodeURIComponent(s[0]),s=decodeURIComponent(s[1]),o=!r.test(i),k("Queryparams decoded: "+i+" : "+s)
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 3a 6e 75 6c 6c 2c 69 2e 41 5f 70 72 65 6d 73 3d 52 3f 52 2e 6d 73 3a 6e 75 6c 6c 29 2c 6e 2e 65 76 65 6e 74 26 26 79 2e 61 75 67 28 69 2c 6e 2e 65 76 65 6e 74 2e 64 61 74 61 29 2c 6e 2e 70 70 26 26 79 2e 61 75 67 28 69 2c 6e 2e 70 70 29 2c 65 65 28 51 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 28 5b 65 5d 2c 74 2c 21 30 2c 69 2c 6e 29 7d 29 29 7d 2c 73 65 6e 64 55 4c 54 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 7b 7d 2c 69 3d 64 28 22 70 22 2c 6e 65 77 20 6c 28 69 3d 65 26 26 65 2e 64 61 74 61 3f 65 2e 64 61 74 61 3a 69 29 2c 74 7c 7c 30 29 3b 65 2e 74 79 70 65 26 26 28 69 2b 3d 22 26 5f 56 3d 22 2b 65 2e 74 79 70 65 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 29 2c 63 28 69 2c 6e 29 7d 2c 73 65 6e Data Ascii: :null,i.A_prems=R?R.ms:null),n.event&&y.aug(i,n.event.data),n.pp&&y.aug(i,n.pp),ee(Q(function(){return $([e],t,!0,i,n)}))},sendULTEvent:function(e,t,n){var i={},i=d("p",new l(i=e&&e.data?e.data:i),t\|\|0);e.type&&(i+="&_V="+e.type.spaceidPrefix),c(i,n)},sen
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 75 6c 6c 3b 72 65 74 75 72 6e 28 6e 3d 79 2e 69 73 49 45 26 26 79 2e 69 65 56 3c 3d 38 3f 28 74 3d 22 22 2c 79 2e 69 73 53 65 63 75 72 65 28 29 26 26 36 3d 3d 79 2e 69 65 56 26 26 28 74 3d 27 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 27 2b 41 2e 67 65 6f 5f 68 6f 73 74 2b 27 2f 62 2e 68 74 6d 6c 22 27 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 3c 69 66 72 61 6d 65 20 22 2b 74 2b 27 20 6e 61 6d 65 3d 22 27 2b 65 2b 27 22 3e 3c 2f 69 66 72 61 6d 65 3e 27 29 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 6e 61 6d 65 3d 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 65 3d 22 22 3b 41 2e 6c 64 62 67 26 26 Data Ascii: ull;return(n=y.isIE&&y.ieV<=8?(t="",y.isSecure()&&6==y.ieV&&(t='src="https://'+A.geo_host+'/b.html"'),document.createElement("<iframe "+t+' name="'+e+'"></iframe>')):document.createElement("iframe")).name=e,n}function F(e,t){function n(){var e="";A.ldbg&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.11	49823	87.248.100.215	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	901	OUT	GET /tdv2_fp/api/resource/NotificationHistory.getHistory;count=5;imageTag=img%3A40x40%7C2%7C80;theme=default;notificationTypes=breakingNews;lastUpdate=1728908413;loadInHpViewer=true;includePersonalized=;partner=att HTTP/1.1 Host: currently.att.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=fPBofgIebZhYWUQINsoAqqmG5meI&v=1
2024-10-14 12:20:16 UTC	669	IN	HTTP/1.1 200 OK expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block content-type: application/json; charset=utf-8 content-length: 2077 etag: W/"81d-Om+l1Dj5Z6sugjtrtzO3jGdk6Hk" vary: Accept-Encoding date: Mon, 14 Oct 2024 12:20:16 GMT x-envoy-upstream-service-time: 32 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-ir2.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Connection: close
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 7b 22 68 74 6d 6c 22 3a 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 79 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 20 77 61 66 65 72 2d 74 6f 67 67 6c 65 20 68 61 73 2d 74 6f 67 67 6c 65 2d 63 6c 69 63 6b 5c 22 20 64 61 74 61 2d 77 66 2d 74 6f 67 67 6c 65 2d 63 6c 61 73 73 3d 5c 22 63 6c 69 63 6b 3a 74 6f 67 67 6c 65 3a 70 72 6f 66 69 6c 65 2d 6f 70 65 6e 5c 22 20 64 61 74 61 2d 77 66 2d 74 6f 67 67 6c 65 2d 74 61 72 67 65 74 3d 5c 22 62 6f 64 79 5c 22 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 79 6e 73 2d 6c 69 6e 6b 20 6a 73 2d 63 6f 6e 74 65 6e 74 2d 76 69 65 77 65 72 20 77 61 66 65 72 2d 63 61 61 73 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 65 6c 6d 3a 68 64 6c 6e 3b 73 75 62 73 65 63 3a 6e 6f 74 69 66 69 63 61 74 69 Data Ascii: {"html":"<li class=\"yns-container wafer-toggle has-toggle-click\" data-wf-toggle-class=\"click:toggle:profile-open\" data-wf-toggle-target=\"body\"><a class=\"yns-link js-content-viewer wafer-caas\" target=\"_blank\" data-ylk=\"elm:hdln;subsec:notificati
2024-10-14 12:20:16 UTC	777	IN	Data Raw: 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 79 6e 73 2d 74 69 74 6c 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 79 6e 73 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 2c 23 32 33 32 61 33 31 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 79 6e 73 2d 65 6c 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c Data Ascii: x;position:absolute;top:0;left:0;font-size:30px;line-height:20px}.yns-title{line-height:1.5}.yns-content{font-size:14px;height:42px;overflow:hidden;color:var(--batcave,#232a31);padding-left:24px;padding-right:44px;position:relative}.yns-ell{position:absol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.11	49828	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	530	OUT	GET /oa/consent.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	678	IN	HTTP/1.1 200 OK x-amz-id-2: xN2lGA3xXeci6IqMs2oyRa1QzEScbvNi6knIWQugHa9yRlBa+lN3VnKbLxI/mjy2T6FQeIvvm/E= x-amz-request-id: ZKXP3YST95RRJZ59 Date: Mon, 14 Oct 2024 12:17:48 GMT Last-Modified: Fri, 11 Oct 2024 16:18:32 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 136069 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "019508b4a5da022114a78e5ac39b6108" Age: 149 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6e 73 65 6e 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 36 38 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 2c 61 3b 21 66 75 6e 63 74 69 6f 6e 28 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 54 79 70 65 29 65 2e 65 78 70 6f 72 74 73 3d 73 28 29 3b 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 74 2e 61 6d 64 4f 29 69 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6f 3d 73 Data Ascii: /! For license information please see consent.js.LICENSE.txt /!function(){var e={6848:function(e,n,t){var o,i,a;!function(s){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=s();else if(null!=t.amdO)i=[],void 0===(a="function"==typeof(o=s
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 69 3f 2f 5e 6c 6f 61 64 65 64 7c 5e 63 2f 3a 2f 5e 6c 6f 61 64 65 64 7c 5e 69 7c 5e 63 2f 29 2e 74 65 73 74 28 6f 2e 72 65 61 64 79 53 74 61 74 65 29 29 7c 7c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 6f 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 6e 29 2c 73 3d 31 3b 6e 3d 74 2e 73 68 69 66 74 28 29 3b 29 6e 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 3f 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3a 74 2e 70 75 73 68 28 65 29 7d 29 7d 2c 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6e 2e 72 75 6e 3d 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e Data Ascii: i?/^loaded\|^c/:/^loaded\|^i\|^c/).test(o.readyState))\|\|o.addEventListener(a,n=function(){for(o.removeEventListener(a,n),s=1;n=t.shift();)n()}),function(e){s?setTimeout(e,0):t.push(e)})},52:function(e,n,t){"use strict";n.__esModule=!0,n.run=n.runWithDecision
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 63 69 64 65 29 28 65 2c 66 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 64 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 7d 2c 36 36 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 2c 74 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: cide)(e,f)}))}catch(e){(0,d.dispatchTaskCompletedEvent)("",!1)}}},6695:function(e,n,t){"use strict";var o=this&&this.__assign\|\|function(){return o=Object.assign\|\|function(e){for(var n,t=1,o=arguments.length;t<o;t++)for(var i in n=arguments[t])Object.proto
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 73 46 72 6f 6d 4d 65 74 61 54 61 67 73 29 28 29 7d 3b 74 72 79 7b 72 65 74 75 72 6e 28 30 2c 75 2e 67 65 74 49 74 65 6d 29 28 6d 29 26 26 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 63 2e 73 65 72 76 69 63 65 54 79 70 65 2e 61 67 65 6e 74 41 75 74 68 29 26 26 28 74 3d 28 30 2c 73 2e 67 65 74 53 65 73 73 69 6f 6e 4f 62 6a 65 63 74 29 28 22 56 4d 41 67 65 6e 74 41 75 74 68 22 29 2c 21 28 30 2c 73 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 29 28 74 29 29 3f 67 28 29 3f 28 6f 2e 6f 75 74 63 6f 6d 65 3d 34 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 33 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 30 2c 6e 28 6e 75 6c 6c 2c 6f 29 2c 76 6f 69 64 28 30 2c 6c 2e 64 69 73 70 61 74 63 68 Data Ascii: sFromMetaTags)()};try{return(0,u.getItem)(m)&&(0,c.default)(c.serviceType.agentAuth)&&(t=(0,s.getSessionObject)("VMAgentAuth"),!(0,s.isValidSession)(t))?g()?(o.outcome=4,void n(null,o)):(o.outcome=3,void n(null,o)):(o.outcome=0,n(null,o),void(0,l.dispatch
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 6e 6e 65 72 2e 6c 61 73 74 44 65 63 69 73 69 6f 6e 26 26 68 2e 59 43 54 42 61 6e 6e 65 72 2e 6c 61 73 74 44 65 63 69 73 69 6f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 6e 29 7b 69 66 28 22 79 62 61 6e 6e 65 72 2d 61 31 31 79 22 21 3d 3d 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 65 78 70 65 72 69 6d 65 6e 74 29 7b 76 61 72 20 74 3d 28 30 2c 63 2e 65 6e 63 6f 64 65 29 28 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 28 30 2c 63 2e 73 61 76 65 53 65 73 73 69 6f 6e 29 28 74 2c 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 29 2c Data Ascii: nner.lastDecision&&h.YCTBanner.lastDecision.normalizedOptions)))}function y(e,n){if("ybanner-a11y"!==e.normalizedOptions.experiment){var t=(0,c.encode)(e.cookieResult.consentCookies,n);return null!==t&&(0,c.saveSession)(t,e.normalizedOptions.consentHost),
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 49 66 72 61 6d 65 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 75 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 63 6f 6e 74 65 78 74 44 61 74 61 3a 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 30 2c 63 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 56 61 6c 75 65 29 28 6e 2c 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 29 3f 6e 3a 6e 75 6c 6c 7d 28 65 2c 6e 2e 73 65 73 73 69 6f 6e 29 3b 69 66 28 6e 2e 69 73 42 61 6e 6e 65 72 45 6c 69 67 69 62 6c 65 26 26 21 64 29 7b 6f 2e 64 69 73 70 6c 61 79 46 72 61 6d 65 28 29 2c 74 3d 21 30 2c 54 28 65 2c 22 63 6a 73 42 61 6e 6e 65 72 44 69 73 70 6c 61 79 22 29 2c 6f 2e 72 65 66 72 65 73 68 46 72 61 6d 65 53 69 7a 65 28 29 3b 76 61 72 20 6c 3d 79 28 65 Data Ascii: Iframe();break;case u.MessageType.contextData:var d=function(e,n){return(0,c.isValidSessionValue)(n,e.cookieResult.consentCookies)?n:null}(e,n.session);if(n.isBannerEligible&&!d){o.displayFrame(),t=!0,T(e,"cjsBannerDisplay"),o.refreshFrameSize();var l=y(e
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 2e 77 61 72 6e 29 28 22 45 72 72 6f 72 20 64 75 72 69 6e 67 20 72 75 6e 3a 20 22 2e 63 6f 6e 63 61 74 28 65 2e 6d 65 73 73 61 67 65 3f 65 2e 6d 65 73 73 61 67 65 3a 65 29 29 2c 28 30 2c 66 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 69 2e 73 74 61 72 74 3d 2b 6e 65 77 20 44 61 74 65 2c 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 65 2c 41 29 7d 6e 2e 62 61 6e 6e 65 72 54 61 73 6b 4e 61 6d 65 3d 22 50 72 69 76 61 63 79 42 61 6e 6e 65 72 22 2c 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e 3d 41 2c 6e 2e 72 75 6e 3d 53 2c 68 2e 59 43 54 42 61 6e 6e 65 72 7c 7c 28 68 2e 59 43 54 42 61 6e 6e 65 72 3d 7b 6c 61 73 74 44 65 63 69 73 69 6f 6e 3a 6e 75 Data Ascii: .warn)("Error during run: ".concat(e.message?e.message:e)),(0,f.dispatchTaskCompletedEvent)("",!1)}}}function S(e){i.start=+new Date,(0,s.default)(e,A)}n.bannerTaskName="PrivacyBanner",n.runWithDecision=A,n.run=S,h.YCTBanner\|\|(h.YCTBanner={lastDecision:nu
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 73 69 6f 6e 45 78 70 69 72 79 2c 6f 2e 74 72 61 63 6b 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 3d 63 29 3a 28 6f 2e 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 55 72 69 3d 75 2c 73 3d 31 31 34 29 3a 73 3d 31 31 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 30 3a 73 3d 31 30 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 73 3d 31 31 30 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 73 3d 31 30 39 7d 6f 2e 72 65 6d 6f 74 65 52 65 73 75 6c 74 3d 7b 6f 75 74 63 6f 6d 65 3a 73 2c 61 63 74 69 6f 6e 3a 69 2e 61 63 74 69 6f 6e 2c 63 6f 6f 6b 69 65 73 3a 5b 5d 2c 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 43 6f 6f 6b 69 65 73 3a 5b 5d 7d 2c 61 28 65 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 65 2e 63 6f 6e 73 65 6e 74 48 6f Data Ascii: sionExpiry,o.trackUserInteraction=c):(o.unsafeRejectedUri=u,s=114):s=115;break;case 0:s=100;break;case 4:s=110;break;default:s=109}o.remoteResult={outcome:s,action:i.action,cookies:[],unsafeRejectedCookies:[]},a(e,o)}}function v(e){return!!(e&&e.consentHo
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 55 3a 65 2e 69 73 50 72 6f 64 75 63 74 45 55 2c 6c 6f 63 61 6c 65 3a 65 2e 6c 6f 63 61 6c 65 2c 6a 73 56 65 72 73 69 6f 6e 3a 64 2e 76 65 72 73 69 6f 6e 2c 72 65 66 65 72 72 65 72 3a 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 3b 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 73 2c 28 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 74 72 79 7b 68 28 69 2c 6f 2c 65 2c 6e 2c 61 2c 74 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 2c 6e 29 7d 7d 29 29 7d 28 72 2c 41 2c 74 29 3b 74 28 6e 75 6c 6c 2c 41 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 2c 70 29 7d 7d 7d 2c 38 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6e 2e 55 72 6c 73 3d 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f Data Ascii: U:e.isProductEU,locale:e.locale,jsVersion:d.version,referrer:document.referrer};(0,c.default)(s,(function(i,a){try{h(i,o,e,n,a,t)}catch(e){t(e,n)}}))}(r,A,t);t(null,A)}catch(e){t(e,p)}}},830:function(e,n){"use strict";n.__esModule=!0,n.Urls=void 0,functio
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 73 68 6f 70 70 69 6e 67 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 73 74 61 67 69 6e 67 2e 73 68 6f 70 70 69 6e 67 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 5d 2c 70 6f 70 75 70 44 69 73 61 62 6c 65 64 44 6f 6d 61 69 6e 73 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 2e 61 6f 6c 2e 63 6f 6d 2f 22 5d 2c 70 6f 70 75 70 45 6e 61 62 6c 65 64 53 74 61 74 65 57 6f 65 69 64 73 3a 5b 5d 2c 70 6f 70 75 70 44 69 73 61 62 6c 65 64 53 74 61 74 65 57 6f 65 69 64 73 3a 5b 32 33 34 37 35 36 34 5d 2c 73 74 61 74 75 73 43 68 65 63 6b 47 75 63 65 45 6e 64 70 6f Data Ascii: "https://shopping.yahoo.com/","https://staging.shopping.yahoo.com/"],popupDisabledDomains:["https://www.aol.com/","https://www.mail.yahoo.com/","https://www.mail.aol.com/"],popupEnabledStateWoeids:[],popupDisabledStateWoeids:[2347564],statusCheckGuceEndpo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.11	49826	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	524	OUT	GET /uu/api/res/1.2/q6GKlQrNWZL2GH0uS9WZAg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_huffington_post_584/22aad6ac37ba7c2ebd256c0508355ff0.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	1073	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Disposition: inline; filename="22aad6ac37ba7c2ebd256c0508355ff0.webp" Etag: "62d65b9223a65fc493a3025d154c391d" Last-Modified: Mon, 14 Oct 2024 07:18:29 GMT Date: Mon, 14 Oct 2024 12:04:08 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=2;cpu=1;start=2024-10-14T12:04:08.022Z;desc=hit,rtt;dur=89,content-info;desc="width=356,height=180,bytes=10980,owidth=1200,oheight=599,obytes=123692,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 931f763c4029d2a88d4a942b6de436c0 Age: 971 cld_id: 931f763c4029d2a88d4a942b6de436c0 x-image-width: 356 x-image-height: 180 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 26824 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 06 04 05 07 08 02 03 09 01 00 0a ff c4 00 4d 10 00 02 01 03 02 04 03 06 03 05 04 08 03 06 07 01 01 02 03 04 05 11 00 06 07 12 21 31 13 41 51 08 14 22 61 71 81 32 91 a1 15 Data Ascii: JFIFCCdM!1AQ"aq2
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 0d c5 5e 02 ec 7d 9b c5 2b a5 64 fb 76 a2 7d 95 75 db 95 7b 82 d2 f6 fa 9f 04 c5 25 3c 61 da 34 25 5c 72 12 46 32 0e 04 a0 8c e3 aa 5b 7a 98 7c ff 00 69 b9 d1 fa f6 7d 9d 55 07 2e dc b1 f2 55 c9 62 81 e4 76 8e 3e 44 2c 4a 2e 73 ca 3c 86 7c f5 89 2e 1f 07 d4 22 db 8a 6c d3 22 e1 48 f9 6a a7 9a b1 2c d1 1f 15 1b d1 75 64 09 a5 7c 8b 2d d6 0b d5 fb de bf 63 5b 66 ac f7 0a 66 ac aa 11 0c b4 50 29 01 a4 23 b9 50 59 73 8e c0 e7 57 85 ba 68 53 71 e0 8a a9 70 58 fe 03 7b 6f 6e ae 1f 50 db b6 76 f8 b7 fe db b0 51 a2 53 45 50 ad cb 57 4b 08 c8 03 27 a4 8a a3 00 06 c1 e9 df b0 d7 53 a7 d5 38 ed 67 ca be a2 fa 2f de 5e c6 0e 24 5f cd 9b bc f6 e6 ff 00 db f4 bb 9f 6a 5c e1 ae b7 d5 a0 64 91 17 04 1f 35 65 23 2a c0 e4 10 7a f4 d6 fc 25 dc ac f8 d6 e6 96 c6 9e 7f 47 38 Data Ascii: ^}+dv}u{%<a4%\rF2[z\|i}U.Ubv>D,J.s<\|."l"Hj,ud\|-c[ffP)#PYsWhSqpX{onPvQSEPWK'S8g/^$_j\d5e#*z%G8
2024-10-14 12:20:16 UTC	422	IN	Data Raw: 8a c4 f6 eb 4e ef 71 9b d6 bf 05 74 74 b6 3a 6f 4d 96 0c f0 a9 49 ff 00 df e4 cf 69 71 16 2d d1 ec 85 bc 36 d6 e0 96 17 be ec 9a 53 45 04 8e c1 a4 14 73 c8 a8 08 c7 4c 0c 32 77 38 0a ba 1c b6 57 a4 d0 4c 9d 22 5a 9d 63 1e 6c 2b ec 9f fe 91 51 b1 8d 62 cb 96 7d 56 3c 24 6b 93 a9 03 55 3c d5 9a 5d 40 60 4e a5 03 6a 99 27 f0 56 b2 a6 c7 47 7e bf 51 dc 26 a1 95 a7 b5 5b 05 4c 2c 55 e3 49 6b 16 49 30 41 07 05 29 d8 1e b8 e5 27 20 f6 d6 ff 00 41 82 9d d9 f3 0f f8 91 bb 2c 38 a1 d8 e9 b3 ee 29 70 ee 21 2c 9b 8f 6d c1 14 65 d0 4f 57 43 1a 78 51 a8 3d 4c 90 8e dc b9 24 32 8e 80 82 cb f0 7e 13 f5 4e 97 5f ad 84 4b e9 4f aa 96 d2 f6 3b bf bb e1 fe 47 0f 66 8f 68 4b af 04 b7 44 70 5c a7 92 a7 6b 5c 5d 63 b9 52 0f f7 7f f8 f1 8c f4 70 7b 8e c4 7c f0 45 ba 5e db d6 fb Data Ascii: Nqtt:oMIiq-6SEsL2w8WL"Zcl+Qb}V<$kU<]@`Nj'VG~Q&[L,UIkI0A)' A,8)p!,meOWCxQ=L$2~N_KO;GfhKDp\k\]cRp{\|E^
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: ac 5d ad ba e1 1a ba 9a 75 cb 13 cd 51 53 51 3a a4 72 72 07 ee 00 ce 00 f3 d6 64 b6 5f c9 af da 92 a1 9e ed 71 87 6c d1 cb 25 40 09 2c e0 99 30 70 47 d0 f7 f3 fa 92 74 c6 aa ee 66 6c e4 c8 b2 e3 7a a9 bf 57 c7 4b 4c a4 06 6e 55 f8 bb e7 cf 5a 6e 09 2b 17 bb 74 89 c7 62 db a9 62 58 6d 10 c6 09 a5 0b e3 1e fc f5 47 e2 7f 91 ef 1a 0e 9f c3 f6 d7 3f b7 3b 97 27 43 a9 05 44 b4 2d 10 43 71 a7 56 62 ed 1a 24 39 23 a9 23 a0 19 fb 13 f7 d0 fb be d1 8e df bb c1 2a ec b8 8d 3c 81 1a 30 03 63 1a ca c9 cb 36 71 f0 91 33 ed f5 79 b9 4e 31 8c 69 69 a1 b8 87 56 ab 6c 6c c1 42 22 36 41 05 57 1a 0d 59 69 05 50 db e5 0c a9 24 79 c8 ee a7 3a 9f 48 5e 72 42 b3 42 b8 e5 64 d5 7f 6f 82 ae 49 f9 2a 77 b5 af b2 45 2e f3 a2 a9 e2 1e c0 a1 8a 0b f4 00 c9 5d 4b 1a f2 c7 5f 18 ea c7 Data Ascii: ]uQSQ:rrd_ql%@,0pGtflzWKLnUZn+tbbXmG?;'CD-CqVb$9##<0c6q3yN1iiVllB"6AWYiP$y:H^rBBdoIwE.]K_
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 07 a6 96 9a b1 9b a4 1e d8 dc c7 1c 4d 23 f3 16 00 67 b6 84 bc 9e 93 0f 2d 70 03 08 97 9d 8f 4f 33 a2 7c 09 e5 7c 9b da 16 63 92 d9 d0 5a a6 42 97 06 6b 40 b5 08 51 b1 ca 47 5c 8c e7 51 44 f7 57 05 01 f6 d8 e0 44 5b 52 bd b7 ee d9 b6 f8 74 77 13 24 95 ca bf 85 26 c6 4b 0c 75 19 c1 39 1d 8e 7d 46 3a 2e 97 b9 ff 00 25 b3 1f aa 6a 7f ce 45 57 b5 d5 c6 d2 d3 52 5c 94 2c 15 2c 62 0e 7b 46 46 0e 4f d4 1c fd b5 b3 2e 0c 78 87 36 19 65 4b 8c 30 bb f2 b2 93 1b 3e 3b e3 cf f5 fc b3 a5 a4 fb 58 d4 23 dc 88 b7 8a 96 17 b3 6e 8a aa 78 a9 b9 60 9e 4f 1e 20 0f e1 12 0c e3 ec c1 b5 b9 a8 ed 23 0b 6a 24 e5 c0 7f 69 ab cf b3 47 b3 50 3b 66 8e 17 bb df f7 5d e5 29 ea 67 05 92 01 15 15 b0 31 0b d8 b7 ef 06 09 c8 1d 7a 1d 5f 63 3e 6f 18 86 7a 6e b6 9f f2 ed 78 5f 1f 92 b6 f1 Data Ascii: M#g-pO3\|\|cZBk@QG\QDWD[Rtw$&Ku9}F:.%jEWR\,,b{FFO.x6eK0>;X#nx`O #j$iGP;f])g1z_c>oznx_
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 6d d9 46 ec f8 9f 3d 78 95 26 78 15 e4 3f 08 d4 16 8e 3b 14 47 03 0c 64 6a 1b 1a 8e 1e 0d f1 d3 f3 38 50 31 9d 56 52 25 63 1c a2 b6 cb cb 90 31 aa f7 05 4a 8c 65 a1 91 57 e3 50 47 a6 35 ee e2 5f 83 ca 76 a9 a6 71 25 2c cd 13 2f a7 9e 86 e0 a4 17 5b 7b 63 51 fe 93 09 ad 1b ea ef 43 c9 15 4a 99 51 7c f3 8f d3 b6 86 f0 7e 0e cb 53 ea 8c f1 fe 6e 43 5b 4f 10 ad 35 01 12 a5 bc 36 6f 22 7b 69 79 46 8e 9f 53 ea 0d 5d 8a 56 13 d1 5c ad f5 c8 1a 9a 74 95 4f cf 41 9c 38 3a 48 64 84 95 a6 67 2d ba 92 5f de 44 af 04 a7 f8 e1 72 b9 fa 8e c7 ef 9d 02 51 1b 8c 84 e2 1b 85 18 60 55 6a 10 92 4c 9c dc 8e 33 eb fc 27 f4 d0 24 90 c4 73 b3 c5 90 0f f6 a4 44 7d 1c f5 ff 00 03 f6 3a ab 88 68 ec 58 43 b7 77 b6 e2 db 14 f3 50 d1 54 a5 4d b2 ab a5 55 be a9 04 f4 95 03 ff 00 12 26 Data Ascii: mF=x&x?;Gdj8P1VR%c1JeWPG5_vq%,/[{cQCJQ\|~SnC[O56o"{iyFS]V\tOA8:Hdg-_DrQ`UjL3'$sD}:hXCwPTMU&
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 56 f9 f4 24 7d f1 e9 e7 aa 3c 49 97 5f 58 38 ff 00 60 cf 3c fb da cf 57 34 57 5d b1 56 69 c3 f3 19 69 ca bf 7f 20 3a 67 f3 d0 a5 ac 9f 2c 9d 4f ad bf 5f f5 e1 f6 0e 16 eb dd 0d 78 c4 15 08 ce bf 89 01 f8 97 ea 0f 51 af 38 34 a9 1d 76 af 58 d5 dd fe 2f 90 eb 6d f1 0b 70 59 60 8a de f3 2d c6 d7 04 8b 34 74 35 05 b9 61 90 7f bd 89 94 ab c3 27 fc 71 b2 9f 5c 82 46 a7 57 6d ea 31 7d de 93 a9 b6 9d 34 9f e4 98 76 2d 65 b7 74 54 99 2c 90 a9 45 86 a5 2a 68 ea a9 c4 cf 4a d3 42 f1 f8 a1 50 28 47 6e 7e 5f 78 89 55 1f 98 2c d1 ab 15 90 f4 1a bb 6b 65 36 cf 9e 75 2d 4c dd 2b 2a 59 1f 77 3e 57 fd c8 a7 82 bb ad b6 27 16 76 ae e6 12 08 e3 a4 ba 41 ef 12 13 8e 5a 76 6e 49 7f fa 1d b4 9e 9e 7a ce 76 5f 50 6b 7f 50 e9 8f 1f e5 1d 73 1d 75 d9 2f 07 e6 4c 90 ed 9c a3 f8 66 Data Ascii: V$}<I_X8`<W4W]Vii :g,O_xQ84vX/mpY`-4t5a'q\FWm1}4v-etT,EhJBP(Gn~_xU,ke6u-L+Yw>W'vAZvnIzv_PkPsu/Lf
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 7c 8d af 04 9c cb 2c 9f 04 80 e4 b6 47 c5 f9 1e 9a b4 75 ee 49 a3 7f a7 fd 52 bb 1e be 7f db 5e 4e bb f0 b6 ff 00 fe 95 70 e7 6c ee 37 97 c4 9a e1 68 a4 9a 66 ff 00 c5 31 2f 38 3f 3e 6c eb af 83 e1 23 e3 5d 46 9e d6 46 bc 04 da b9 9c 70 57 59 75 46 92 3e d5 49 36 ac 64 91 f3 d7 9f 82 39 17 db e8 79 41 96 51 f0 f6 03 f9 8f a1 d0 db ae 46 f0 46 c9 4b 6d 52 1b 75 aa 29 0a 82 67 8f c4 6c 0c 7e ec 7f 99 5f b6 75 c7 75 cd 9b e0 e9 fa 6e b3 5c b1 ee db 49 20 91 e6 cf 37 2b 19 64 6f 54 20 80 3e e4 eb 95 52 76 6d 52 37 a7 c1 6d 8a 4e 64 6e 7a d5 6c 2b 0e 9c ae 7d 71 e4 a4 e8 b1 67 84 d6 7b a0 aa dc 3b 6a ac 90 62 9a e1 32 67 3f 87 f7 5c 9f 7e aa 75 7f 92 2f 80 57 da 36 38 6e fb 42 4a f5 f8 ea a9 aa d9 1c fa 00 41 5f cc 48 7e 98 1a df e9 86 77 50 56 56 fb 4d 1c b2 Data Ascii: \|,GuIR^Npl7hf1/8?>l#]FFpWYuF>I6d9yAQFFKmRu)gl~_uun\I 7+doT >RvmR7mNdnzl+}qg{;jb2g?\~u/W68nBJA_H~wPVVM
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: e7 5b 7b 4e 72 3a c8 7d ab 83 1a 71 14 b5 b7 48 1e 4e 5a 64 51 4f 10 c6 72 88 98 03 f2 70 7e fa aa 54 11 3b 13 50 46 b1 59 ac f4 33 53 f3 4e c9 27 33 16 ea c5 b0 c4 9f ff 00 b7 ed 92 73 a2 c7 c9 36 06 ed 3a 89 a1 b2 58 eb 03 f3 78 35 b5 12 c2 71 8c a2 3b 26 07 fc d9 24 7f 96 8f 9f f9 58 3b fb 04 bc 67 a3 e5 b3 5e a9 56 4c bb 1f 1c 80 30 33 13 98 d8 01 db 24 11 ad ae 9b f6 88 ed 7d c8 80 2c de 1c 76 6a b2 ef 8c d6 40 c4 01 93 85 59 7b 0f 3e ac ba d7 5e 4c ea 1c 76 f5 33 5c af d0 22 a6 4c 8d f8 7d 40 3d bf 30 47 db 4b 6c 4b 80 da 8b bb 29 63 65 da 09 72 b5 aa 95 0d 3c 64 b2 b8 e8 47 40 07 f4 fc f3 ac 9b 4a d1 bf 18 55 12 0f 0f 76 e5 54 74 ab 6f 68 ca c6 f8 ca ca bc cb cd d7 a9 ed a5 a5 26 38 a2 a8 b0 7b 22 d5 15 be 38 d7 9f 99 53 e1 0a 8c 46 31 f5 1a 1d db Data Ascii: [{Nr:}qHNZdQOrp~T;PFY3SN'3s6:Xx5q;&$X;g^VL03$},vj@Y{>^Lv3\"L}@=0GKlK)cer<dG@JUvTtoh&8{"8SF1
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 33 5c 41 54 50 a8 a1 40 c7 75 ef d8 fd b4 2a 3d 34 a2 29 dc b6 eb 5d 05 ae 53 77 af 55 22 36 72 aa 7f 0a 81 d4 93 ab c5 30 4d 72 53 dd d7 6a b8 71 2f 70 d4 4d 6c b9 d0 da 6d 68 c5 69 8c d2 61 a6 23 f8 94 0e e3 e5 9f 3d 3f 4c f3 4a 87 ed ad 43 26 cd b8 d2 5b 27 96 22 d0 90 5a 40 df 88 79 1f 9e 87 28 39 2e 4b eb ba 65 d9 e1 f5 15 45 46 dc 86 b9 2a 12 44 f0 83 e1 47 7e 9d b4 a7 b6 a0 1b 79 da 62 ed d1 b1 2d f7 4a d5 b8 53 2b 45 28 eb f0 8c e0 8e df 51 d4 f4 d5 e3 0a 16 5b 16 a9 88 a8 2c 06 9d 05 2c f4 c9 22 11 86 60 32 cc be 60 fa e8 c9 b4 7b b9 4b 93 9f bf da 59 b6 2d 9b 16 c7 b0 b6 f5 a9 1a 38 2a 2e 37 6b 83 60 f4 2e e6 1f d4 64 8d 3d d2 b9 ee b3 2b aa ff 00 69 5b 78 5e 63 4b 6c 73 ce e7 00 64 29 1d f9 43 1d 31 b6 ca 6a 22 40 d9 f4 55 14 fb 86 39 59 72 b1 Data Ascii: 3\ATP@u=4)]SwU"6r0MrSjq/pMlmhia#=?LJC&['"Z@y(9.KeEFDG~yb-JS+E(Q[,,"`2`{KY-8*.7k`.d=+i[x^cKlsd)C1j"@U9Yr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.11	49827	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	530	OUT	GET /uu/api/res/1.2/TXjvVjT6BxITti_rfSctrA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/f6c74ee0-89ce-11ef-9ebb-51a5b22ff008.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	1075	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Disposition: inline; filename="f6c74ee0-89ce-11ef-9ebb-51a5b22ff008.webp" Etag: "1930bdddfe5c445f9d43d8fb33cc1981" Last-Modified: Mon, 14 Oct 2024 01:52:37 GMT X-Request-Id: c4854be65f7ddf26753136f0fb17912e Date: Mon, 14 Oct 2024 11:44:42 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=1;cpu=0;start=2024-10-14T11:44:42.977Z;desc=hit,rtt;dur=88,content-info;desc="width=356,height=180,bytes=4966,owidth=769,oheight=433,obytes=33850,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options Age: 2135 cld_id: c4854be65f7ddf26753136f0fb17912e x-image-width: 356 x-image-height: 180 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 14430 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 01 06 07 08 09 0a ff c4 00 48 10 00 01 03 03 02 03 04 07 04 05 0c 01 03 05 00 00 01 02 03 04 00 05 11 06 12 07 21 31 13 41 51 61 14 22 32 71 81 91 a1 08 23 Data Ascii: JFIFCCdH!1AQa"2q#
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: f5 a9 e5 d6 cb 1b ac eb be 8f d4 5a 79 bb 65 ca e8 96 7d 6d c4 05 74 ff 00 5a 9e e3 62 24 9d 1a 74 e1 d3 8a bc 04 34 3a 2b 7f 5f 87 fb d5 04 ad 2d 75 d1 5a 66 2c 9b 5c 6b c2 36 39 cf 72 bc fc a8 1e d1 8e b7 b1 5b af 29 94 d5 c1 2e 21 cc 25 7b 47 b3 e1 fc 6a 6d d0 4b 77 50 68 78 10 65 37 fa c8 3a 99 19 2a 0a 3d 39 1a 60 cb 1c 45 d2 96 38 f0 ed f1 c9 5a 56 00 dc 93 d2 8e ed 0d 33 0f 50 e8 f5 c8 9e ea 2e 09 2d 4d 6c ee 18 ef f1 fa d2 ee 0d 72 d7 6f d2 5a 76 f4 65 41 bf 8d eb 24 9c 1a 3b 82 cb 88 ba 87 4c 49 d3 4a 8c a9 6c c9 94 73 d9 a8 1c a8 f4 ce 7e 94 e5 d8 53 f0 f3 5a 43 d3 fa 65 f5 a1 f0 99 09 51 50 47 4c e3 cf e3 4c 36 69 dc 50 d3 b2 ec b1 6e 1b 90 97 50 bc ba d8 e4 40 f1 34 0d 9a 5c cd 25 70 bc b5 ab 3f 5b 1e d1 29 04 33 b8 64 78 f2 ee ee a0 19 d3 5c Data Ascii: Zye}mtZb$t4:+_-uZf,\k69r[).!%{GjmKwPhxe7:*=9`E8ZV3P.-MlroZveA$;LIJls~SZCeQPGLL6iPnP@4\%p?[)3dx\
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 40 29 ce 12 79 74 3c fe 1b 6b b3 e9 49 e3 4e 8f 99 3c 3c af ad 9f 5c db ec b9 4f ff 00 5a b7 d6 95 a7 f2 91 ea 91 9f 78 35 ea f8 b7 78 c8 f0 bc f9 db 96 da f8 46 7b eb 9f 94 d3 8b 29 35 2a 22 82 dc 94 52 a2 8a aa 63 02 90 18 14 e2 72 a4 d2 40 a1 78 b1 8c d0 a2 68 48 a8 40 a0 0a 00 aa d0 14 c0 a5 40 a8 d1 ed b3 c1 e1 c5 fe 4d ac dd 4b 5b 5a 4a 8a 7a 66 b9 3a 38 b2 4f 08 35 22 a2 22 58 53 60 2d 21 41 2a 18 23 df 4b 29 b3 d3 4d 9b 0d e8 12 57 12 42 54 97 1b 38 50 23 15 95 2c 8c 54 a4 55 ac 50 05 05 58 ef 34 20 e5 0d 31 bb 18 34 28 aa 00 a0 0a 02 c2 c7 65 95 7f b8 b7 6d 86 3e f1 ce 9c b3 40 6d b3 78 3f 7e 83 1d 4f b9 29 93 8e 80 0e bf 5a b9 06 d0 27 f0 cf 51 db fb 05 29 a4 ad 0f e3 69 1c aa e6 29 ca f8 48 3c 36 bf b7 da 92 d7 aa c2 77 ad 5b 7a 0a e3 f2 26 b1 Data Ascii: @)yt<kIN<<\OZx5xF{)5"Rcr@xhH@@MK[ZJzf:8O5""XS`-!A#K)MWBT8P#,TUPX4 14(em>@mx?~O)Z'Q)i)H<6w[z&
2024-10-14 12:20:16 UTC	579	IN	Data Raw: 1f 75 50 59 cd 9b 6a 61 4d 36 f5 cd a4 2f b2 49 23 c2 96 a0 79 e2 ed 6e d4 7a 75 b4 44 9a 0c 74 28 90 12 39 f4 a2 fa 38 ae 7a 54 89 3b 4c 97 0b 8b 19 f5 89 ac a9 19 db e7 40 1b 7c e8 0c 81 8a 00 a0 0a 01 74 01 40 22 80 56 df 3a 00 db e7 40 66 80 7a 2b af 47 79 32 18 71 48 71 07 29 52 4e 08 34 c2 c9 cd 4d 7c 52 0b 66 e4 f9 cf 79 5d 30 88 ab ad d1 e7 1b 71 c9 ce 15 b7 9d a4 f7 67 af ee a3 c8 3c ab ed e9 27 22 e6 f1 5a bd a5 15 67 34 6e 9f 75 46 6e e3 36 2e a3 b7 5f 5d 4a e5 76 4e 8e db 72 77 02 00 ce 48 f7 03 5d 27 c9 f1 fc 57 a2 f8 5e 47 9f 2f 5e e8 2d 4b aa 6e f6 68 e8 d3 c6 02 bb 21 da 2d 53 5d 21 3d a2 f9 82 50 30 4f 2c 1e 4a c7 3a f1 33 c6 56 75 5f 45 92 fe 86 fa 4b 4e 29 fe b4 b1 e9 18 2d ea 1b c4 5b a5 c6 54 c6 96 b5 c6 64 30 d8 48 29 3e aa 79 9c 02 Data Ascii: uPYjaM6/I#ynzuDt(98zT;L@\|t@"V:@fz+Gy2qHq)RN4M\|Rfy]0qg<'"Zg4nuFn6._]JvNrwH]'W^G/^-Knh!-S]!=P0O,J:3Vu_EKN)-[Td0H)>y
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: a7 e2 29 2c b3 26 3b 19 c9 c6 48 06 ab 54 1b 8d 0f 5d 4b 7b f5 93 2c ca 52 cf 45 91 4f 43 66 97 7e d6 33 5c 5d b5 72 64 38 ac e1 48 00 8a 37 42 15 d2 76 a8 4c a2 db cf 3e 85 a1 21 24 60 f7 51 a1 b7 44 e3 7b ce 2b d1 62 25 ac a1 94 84 a9 d2 ae 7e 59 f9 52 0e 4a 0e 69 68 58 72 99 0a 00 a0 0a 03 0a a8 05 26 9c 05 55 02 76 f9 d4 e8 14 84 67 3c e8 f4 02 d1 8c 73 a7 27 70 15 60 50 0e d4 ac 01 8e 42 82 61 49 dd 8e 74 4b a1 66 db b7 0f 2c d6 eb fb 73 ad 93 95 87 dc 6b 6a 55 8e 40 f3 c2 be 78 ae 3f 2b 8f fa f3 c3 93 c3 e4 7d be 51 da 78 72 fc 7b 4b 26 12 87 f4 88 fb 5a ed 09 e6 40 ce 39 57 cd 3e 5a 5e 37 5a c7 d9 7e 1e ce 57 42 69 69 c4 3b 8b 33 ae d6 28 2f bc 86 db 32 5b 75 c7 56 70 00 c8 da 0f ed 11 5d 1f 1f cd f2 ef 79 38 49 23 7e d4 89 82 cd 92 24 94 ce 5a e5 Data Ascii: ),&;HT]K{,REOCf~3\]rd8H7BvL>!$`QD{+b%~YRJihXr&Uvg<s'p`PBaItKf,skjU@x?+}Qxr{K&Z@9W>Z^7Z~WBii;3(/2[uVp]y8I#~$Z
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 09 49 54 0b 52 83 e8 41 c6 7a 04 25 09 1c fd a5 63 27 3f 0a ce 71 e6 cb 8b c9 e4 5f 67 ed 30 6f 56 4b 1b 0c ea 1b c3 b7 49 e1 d5 3c a7 16 94 27 6a 09 ca 11 ea 24 02 40 e4 55 8e 75 d1 75 f5 f8 7a 1e 87 ad d5 f4 e9 e2 74 30 f8 56 54 39 67 bf 15 c7 9e 9a 7e 5c f1 e8 1e 9b a8 e7 c3 28 ed 13 19 24 a8 f9 0e fa df 18 ac 74 9b a5 22 bc ad 44 fe c4 ee ec 9c 5b c7 9f 7a 46 00 f9 a8 57 23 0d ee 38 fc 9b db 2b 92 7d b4 74 44 bd 39 76 d2 9a cd e6 9f 6d 8d 4b 17 b2 90 b5 7b 08 90 14 a5 35 9f 02 a6 4a 30 3f b8 6b e9 5f 19 ac 7a 13 6f 91 7c ed fb 8e bd d3 ce 3b 08 f2 ae cb 7b 79 fb 34 55 00 51 26 ca dd 0a aa 50 db 83 38 a9 90 f4 cd 06 28 02 80 28 06 aa 90 28 02 80 ce ea 92 d1 38 14 b4 60 f4 a2 83 64 9c d4 86 28 2d 17 41 91 44 80 ba a9 34 05 30 28 02 80 28 05 d5 01 40 14 Data Ascii: ITRAz%c'?q_g0oVKI<'j$@Uuuzt0VT9g~\($t"D[zFW#8+}tD9vmK{5J0?k_zo\|;{y4UQ&P8(((8`d(-AD40((@
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 97 da 30 d2 bb 16 b2 3d 5c 67 ad 69 3d 33 bb 58 69 f7 3d 36 c4 fc e2 96 99 77 b4 eb 9c 54 cf 74 94 e8 79 c5 5f d9 8b 21 4d bc 97 15 b7 c7 15 52 2a 2c 35 74 08 da 6e 33 09 86 c3 4e a9 cf 69 ce a5 39 f1 aa 15 89 d7 b5 1d 26 97 90 cb 48 59 50 00 ed ce 33 51 ad 15 54 68 8b c3 16 8b db 4b 7a 2a 5e 0f 2c 23 07 ba a6 dd 09 36 ec ba 96 e1 6d 83 70 b5 5b c5 ad 21 13 55 b9 45 20 1c 72 cf 87 fc cd 5c 38 d8 e7 69 d8 0e 05 30 f4 26 93 10 31 80 76 83 57 da 2b 47 d5 b6 2b 30 d2 f1 5d b6 40 cf f4 84 fa e8 1f be 92 6d 6c f0 74 dd a5 12 2d df d0 9a 39 8e 9f c3 55 26 84 48 87 a2 b4 9c 49 ef dc 5b 8c ca 9c 7f 3d 39 84 d3 5c f2 c5 a6 cb 01 bb 7c 8e c2 de d1 cb 9c f9 01 51 91 b8 a7 1f e5 69 cd 30 eb 32 61 86 d3 25 6d 9d c8 6c f5 23 18 f7 57 1f 2c b4 d7 18 f3 4d ca f1 72 ba b8 Data Ascii: 0=\gi=3Xi=6wTty_!MR,5tn3Ni9&HYP3QThKz^,#6mp[!UE r\8i0&1vW+G+0]@mlt-9U&HI[=9\\|Qi02a%ml#W,Mr
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 2f 93 f0 7d 59 ff 00 a6 4f 6e da 52 10 ca 08 00 04 8c 00 06 00 1e 55 de 59 3f 0f 98 e7 95 cb da d4 10 72 71 53 e1 8f a6 87 c5 bd 71 6f e1 97 0f 35 06 ba b8 6c 52 6c f0 1f 94 84 2b f1 b8 84 12 91 ee 27 15 b7 4f 1d d0 fc f7 de ef 57 0d 49 78 b9 5f ae b2 14 fc bb 94 a7 65 be ea ba ad c7 14 54 a5 1f 79 26 bb 3c 7d 22 aa 4b 61 24 72 a3 26 56 19 9f 29 88 63 67 ac b7 07 e0 48 fe 35 9d 9b 56 d4 85 a5 f7 d6 76 03 9d 9f 3c d2 d1 6a 9b 2d ac f5 a3 b4 f6 03 3f 8b 2a 4a 87 b2 a4 9c 11 4e 78 27 60 e1 ef da 27 51 e9 84 33 6d d5 0d 1b d4 36 70 98 ef ac e6 43 1e 59 3c 94 3a e7 3c fc fa 0a df 1a c7 29 1d 19 8e 38 bf 28 4a 9b 6f 6d 2b 4c 92 76 2d 03 70 15 ac bb 63 71 21 ce 2a 19 ed c3 72 e7 10 29 d8 ca 07 07 bf 15 7d cb d2 5a 38 dd 76 44 d2 7b 34 08 ea 04 6d c5 4d ca 21 0e Data Ascii: /}YOnRUY?rqSqo5lRl+'OWIx_eTy&<}"Ka$r&V)cgH5Vv<j-?JNx'`'Q3m6pCY<:<)8(Jom+Lv-pcq!r)}Z8vD{4mM!
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: dd a9 73 b1 49 1b 11 ec f9 66 b3 ea cf 01 13 6f 9d 65 8d f0 1b 16 8f d2 f7 0d 47 25 50 ed f0 5d 94 fb e8 58 69 b6 d3 95 1d a9 2a 57 ff 00 14 93 ee 06 b6 b8 f8 28 8c e4 a9 56 60 4c 19 58 92 f2 f7 34 eb 2a f6 00 20 80 0f e6 07 15 d6 65 35 5a c7 a4 7e ce 3f 68 ad 7f a6 b8 7f ac 78 6f 75 7a e1 2d 65 a4 49 85 32 63 e4 aa d4 df ae 1e 08 dc 4a 81 56 e4 84 a4 72 0a 24 e3 24 e7 89 f2 9c 9b c6 e8 78 7b 7f a1 3e 2a 7c 9f c8 cf d6 fe 9c 57 ba 56 d1 6b b8 b3 a7 5b bc a9 e5 c5 32 90 ca d2 57 c8 85 28 93 dd e3 9f 9d 78 d9 7b fa f2 bf 58 f3 b8 9f a3 f1 77 ed fc 6a 3e b5 22 cf a5 ac 1a 36 16 9e d3 76 d8 d0 2d cd 36 db 5d 8b 2d 84 21 0d 90 33 d0 79 fc 7e 35 ef 31 93 53 51 f8 e7 9f cb e4 72 39 59 67 d7 ca dc b7 50 78 64 98 ba 2e fb 3a 1d 8a 3b a7 4e 4f 73 b5 2c a0 7a 90 a5 Data Ascii: sIfoeG%P]XiW(V`LX4 e5Z~?hxouz-eI2cJVr$$x{>*\|WVk[2W(x{Xwj>"6v-6]-!3y~51SQr9YgPxd.:;NOs,z
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 35 4d 8a 3b 45 c6 ee 0d 3e a1 d1 0d 9c a8 d1 e8 f4 a6 57 10 d9 4a 52 bf d5 6a 21 59 c7 df 7f b5 57 71 f6 f8 5a 47 d6 56 37 a3 19 0e 4b 4b 2a 18 cb 6b f6 8f bb c6 a2 e7 22 7b 36 44 8d 73 64 6e 32 de 8c b5 c8 5a 31 f7 69 04 13 9e fe 7d d4 af 58 ff 00 41 ad cc d7 b7 87 16 e3 71 99 8f 1d 07 a2 92 92 55 f3 27 07 e5 53 bd aa 74 24 f6 aa 91 2e 64 a2 8b 8c d9 2e 3e 50 70 37 77 0e e1 cb 97 d2 86 da d4 4b 53 03 7f 68 15 94 ac 64 55 cf 3e 59 6b 4a be d3 b1 65 c6 3d ad ae e7 39 eb 51 62 c8 6d 1b 96 94 fe 6a 9e d3 38 eb 7d 92 f6 67 38 ef a7 ad 03 25 d5 b7 ec 2b 19 a9 b7 c8 93 64 03 9a cf 25 36 8d 07 a7 66 5f 2e f1 a2 c4 8e 5e 7a 53 c9 61 86 c7 55 ad 44 00 07 c4 8a e4 71 e6 fc aa 3e ba b9 a2 62 f0 8f ec 95 7d d1 f6 e8 85 c9 11 b4 bc e6 a5 3c 86 f9 29 d7 23 ac 3a 72 7d Data Ascii: 5M;E>WJRj!YWqZGV7KK*k"{6Dsdn2Z1i}XAqU'St$.d.>Pp7wKShdU>YkJe=9Qbmj8}g8%+d%6f_.^zSaUDq>b}<)#:r}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.11	49829	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	518	OUT	GET /uu/api/res/1.2/RdGJULZQ_0HBS0fKJ4Kq8g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/e8be05122130d6da406284fc8b35524c.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	1181	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Disposition: inline; filename="e8be05122130d6da406284fc8b35524c.webp" Etag: "65317abcfd7ff2ef5cc648a20189bcfb" Expiration: expiry-date="Sun, 13 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 14 Oct 2024 11:30:11 GMT Date: Mon, 14 Oct 2024 12:11:30 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=2;cpu=1;start=2024-10-14T12:11:30.063Z;desc=hit,rtt;dur=94,content-info;desc="width=356,height=180,bytes=8884,owidth=1280,oheight=720,obytes=104940,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 838fbe21a4c656df929db9189358f641 Age: 526 cld_id: 838fbe21a4c656df929db9189358f641 x-image-width: 356 x-image-height: 180 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 22951 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: f7 ca 0f ee a4 74 03 f3 a7 ba 0e 0a cb 4f 4b eb ed 5f 6b 69 0e 3d 35 89 69 1f 12 1d 40 49 1f 2c 7f 0a 4b 59 74 58 4b 8e 4b 4f 4f 76 8d 64 d4 48 05 6f b6 c3 a3 85 35 f8 92 7c 41 a2 de 98 d2 31 d7 72 a0 c8 88 88 0e 12 be f5 b5 e0 24 67 39 4d 33 76 2a 39 6e d5 1d 6b bb a1 94 10 42 4a 81 55 43 27 5d 92 43 91 ba e1 c4 65 13 51 45 d8 53 54 56 f2 c1 54 a7 56 3c 56 6a 78 aa 29 cc d2 9f 77 00 8a 20 12 b3 da 41 19 23 25 5c 72 69 58 e9 59 25 11 e4 a8 7b 8c 29 5f 21 48 63 12 14 92 52 b4 94 91 e0 69 0e d5 1e a4 d2 02 8c b7 7a 52 18 97 6a 77 64 f6 b8 eb 9a d7 f1 ad 58 32 e8 2c 99 1b bc 05 6f be 0a 73 46 61 dc 8c e2 9a d0 14 59 36 fe ce 35 55 c1 a4 3a c4 24 04 38 d2 1e 42 96 e0 4a 4a 15 9c 1c 9f 91 af 3d 8a 67 ac ac cd 1b 36 5a ad f2 ec d3 24 db ae 4c a9 89 11 e5 c4 2e Data Ascii: tOK_ki=5i@I,KYtXKKOOvdHo5\|A1r$g9M3v*9nkBJUC']CeQESTVTV<Vjx)w A#%\riXY%{)_!HcRizRjwdX2,osFaY65U:$8BJJ=g6Z$L.
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 32 e0 c8 1a 57 b3 2e d1 f5 d9 ce 9a d2 b7 0b 82 02 b6 29 c4 32 a0 84 9f 2d c7 8f d6 99 e5 e8 c7 b3 21 62 49 96 2d 8f ec 69 db d5 e9 b0 f2 f4 bb 30 1a 3f 8e 5c b6 d3 fa 02 4f e9 51 3f 27 a0 1a c3 d4 67 d7 df b1 bf 6e 16 1d a5 eb 0b 32 d2 a2 41 54 47 7b dc 63 c4 8c 03 fa 52 fd 4b 1d 85 ec f5 05 c9 fd 8c 76 89 a1 df 6e 5e a4 d2 d3 23 34 b5 84 36 b7 10 52 0a be 74 de f7 42 5d 0e b1 1a e5 85 5a 4d cd e8 22 3b 31 5c 53 a8 e1 43 6f 87 87 f3 a9 62 af a2 5b ae 18 03 50 e8 ad 57 3e 39 7a 3d 8e 5b 8b 48 f8 50 d9 57 5f 32 3a 74 ab 30 89 53 5d df 45 7a eb 0a 65 6a 69 c4 14 ad 24 85 02 30 41 f2 c5 4b 19 53 2a a4 19 65 3f ea 4c 60 f8 2b f9 57 6b 84 96 d2 8e 45 ae 10 6f 4f 69 ad 53 7c 56 74 fd 8a e3 3b a6 4c 78 ea 71 23 3d 39 48 3e 46 96 4e 66 2e 3b ad 66 87 5a 79 32 55 Data Ascii: 2W.)2-!bI-i0?\OQ?'gn2ATG{cRKvn^#46RtB]ZM";1\SCob[PW>9z=[HPW_2:t0S]Ezeji$0AKS*e?L`+WkEoOiS\|Vt;Lxq#=9H>FNf.;fZy2U
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 83 81 e3 5d e7 87 fa 8b dc 2d ba e7 13 e5 fc 3f b6 7b 91 54 5e b4 7d c9 99 31 d9 b7 59 2e 3b dc 61 4e 2d a5 0e f5 63 69 c1 50 29 48 ca 7c b8 ae af 1b 2e 0f b3 9f f4 28 04 e4 49 71 64 2a 1b d1 24 22 42 0e 0b 4a 6c 85 fc b1 56 77 c1 72 27 1d bc 1e 96 dc 04 85 a0 82 38 20 8c 11 4d eb e9 a1 7f f0 d0 e2 14 39 ea 3f 85 2f 71 a6 f8 21 93 67 cf af 6b 0c 8c 75 dd fc a9 d4 94 89 2d fa 51 23 0f ec dc 27 a0 19 c5 47 96 97 a6 d9 67 1e eb 92 15 95 25 57 74 11 fb d5 c0 e5 4b ee 66 ae 87 63 e5 c5 85 49 b7 38 d2 3a a9 35 49 36 5a d5 e5 15 fa 90 a6 d6 a4 28 60 a4 e0 d5 85 4b b3 3e 9b 7c 0e da 57 b1 3e d5 75 ab 69 91 a6 b4 1d e6 5c 75 fc 2f fb 31 43 6a f9 29 58 07 e8 71 51 bc ad 14 5b 58 7a d5 d1 17 52 76 57 da 06 8b 98 dc 5d 57 a5 6e 56 ad eb d8 1d 7e 3a 83 79 ff 00 7f e1 Data Ascii: ]-?{T^}1Y.;aN-ciP)H\|.(Iqd*$"BJlVwr'8 M9?/q!gku-Q#'Gg%WtKfcI8:5I6Z(`K>\|W>ui\u/1Cj)XqQ[XzRvW]WnV~:y
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 45 74 1f 89 32 2e af 8e bb 2d d2 df 0a 54 49 eb da f3 6f 30 95 b7 b4 f8 10 ac 83 f9 53 72 b9 1f 62 39 17 ed 4b f6 6c 1a 06 59 d4 fa 1a 0b 0a b4 a9 67 da a2 6f 52 93 19 47 18 5a 4e 73 b0 9e 08 fc 3d 7a 74 d1 c6 c9 a7 4c cb ca c4 f9 47 28 ea 84 ea 18 af 2e 13 10 d3 15 b5 fe e1 e7 8a d4 de 92 31 25 7d 0f 5a 23 b1 7d 30 ed b6 3d c6 fd 29 e7 a5 cb 67 da c8 40 fd 9b 40 f2 91 d7 93 8a 4b 5f e0 06 9c 79 02 be cb 31 de 5b 0c 0f 71 0a 50 4f a8 04 8c fd 71 52 af bb 91 3d 61 1b 55 c3 11 9e 0b 48 e1 cc fe 9f f3 a9 e0 d2 20 ec 7b ec 8e c1 72 36 94 dc ad b6 67 1f 5c 85 ab 7b e8 64 92 48 24 63 23 ff 00 7c d4 83 a4 5c f0 ec b7 a7 1d 08 36 89 69 f5 ee 8f f3 c5 33 a1 04 6e ba 2e e3 2a 1a 99 7a dc eb a9 23 a6 ce 94 0d 58 e9 15 72 bb 26 ed 01 73 47 b1 e9 87 43 40 8d bb 9d 40 Data Ascii: Et2.-TIo0Srb9KlYgoRGZNs=ztLG(.1%}Z#}0=)g@@K_y1[qPOqR=aUH {r6g\{dH$c#\|\6i3n.*z#Xr&sGC@@
2024-10-14 12:20:16 UTC	272	IN	Data Raw: 35 8e 89 bc e9 e7 a3 5e 6f cc a5 a7 d2 a0 90 f1 09 49 49 04 67 24 fa d1 a8 3f fa 8d 29 2f 96 73 6b 56 2e c1 80 5a 35 06 ad f6 e5 ad 25 18 4a 54 12 91 e1 c8 19 3f a5 4a bd 66 67 cb db 14 cf 68 ac 0d 17 2d b8 d6 cd 42 fd c2 c9 29 6b 5b 21 87 f7 06 70 71 b5 69 1c a7 c0 8c f9 d6 86 2a be cc 4c aa 4c 58 8f 72 8f 31 01 71 d6 16 07 5e 79 15 75 ba 74 52 b5 44 5b cc 18 f7 58 8a 89 21 23 6a ba 2b c4 1f 31 46 ac 02 fe fb 3d 5a 5c 83 a0 2d d0 e6 b6 39 7d e3 b7 91 91 c1 07 83 eb 46 9b 0a 25 c6 9b 74 41 d5 a0 7f cc af eb 44 98 c6 f6 ed f0 73 fd d1 b3 f9 d1 da 11 2f d9 20 80 d9 71 b4 a1 0d 2b 7e 47 e1 e0 82 7f 22 7f 3a 86 54 b9 0a 3d 94 f2 2d c9 d7 d7 93 76 bb ad 42 de 85 6c b7 c6 00 a4 25 af de 29 cf 52 79 cd 63 65 64 be 91 d3 62 61 da 4d 8e ad e8 bd 20 cb 68 69 b8 80 Data Ascii: 5^oIIg$?)/skV.Z5%JT?Jfgh-B)k[!pqi*LLXr1q^yutRD[X!#j+1F=Z\-9}F%tADs/ q+~G":T=-vBl%)RycedbaM hi
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 97 23 0d 9e 23 1d 6a 09 4d fe 49 96 26 80 85 da 06 89 ff 00 e5 f5 c1 7a df 40 4d 75 b9 10 5f 01 f8 eb e7 be 6b 9c a7 c3 23 8e 9f ce b4 bc 5f 95 77 e8 b3 17 ca e1 a4 ad 20 57 da 92 5a 27 f6 69 12 e1 1c 00 99 73 e1 3a 3e 4e 32 e9 1f c6 ba 06 ff 00 72 d1 ca ce 3b 4e 55 f6 6b 64 92 9f 68 50 5e dc e0 53 a9 6b d7 60 70 6c f6 0b 40 c8 6d 96 f6 f8 66 8b d4 d6 fc 8b 6a fc 0e 7a 42 d1 70 6d 25 c7 ed b2 4a 12 ae 54 86 94 b1 d4 fe e8 27 f4 ac fc 86 97 06 ae 34 5a 76 3c db ee 50 d4 10 f8 53 81 23 e2 49 6c ee 4f cc 0e 95 55 e8 29 1a 51 d6 da c3 31 bb 41 5c 3c c1 b7 5b 9c 5a d6 94 a8 b8 ac 12 3a e0 25 19 dc 4f e4 3d 6a 37 8d 18 96 23 90 e4 60 5d d5 6f 4a 91 75 62 7d cd 2f 36 54 ad b2 24 02 ad c0 13 b9 29 1e 06 a2 70 51 61 6e 72 e4 66 3a 63 55 f7 dd e3 93 d1 35 ab 93 6d Data Ascii: ##jMI&z@Mu_k#_w WZ'is:>N2r;NUkdhP^Sk`pl@mfjzBpm%JT'4Zv<PS#IlOU)Q1A\<[Z:%O=j7#`]oJub}/6T$)pQanrf:cU5m
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 9a 31 50 e4 25 be f0 68 10 80 b0 90 53 e0 49 3d 33 f2 35 cc cd 29 3a 3b 38 64 52 43 7e 9f ed 46 3d f2 77 dd b1 b4 fc 8f 69 da 54 12 14 97 01 c7 91 15 07 a0 89 23 95 66 50 bb 66 8e a9 2e 45 87 a6 9f 71 69 56 c2 57 21 0d 24 28 75 1c f3 e3 e5 43 e8 12 ac b3 eb 86 a4 67 53 40 7c b7 9d cd e0 3c c9 20 ed 57 90 50 e0 8f 5a 86 31 51 92 a1 e7 ff 00 27 41 b6 2f 76 e7 6f ef 3b 0b 88 56 9c fb 38 b7 2d 3f 3d ce a4 7e 84 0a ea 2f a6 70 b9 1f 6b a3 8c ae 0a 2d cb 71 39 c0 15 3a e8 aa 99 83 4d c9 79 01 6d 38 ad bf 3a 49 87 67 4f e9 8f 63 9f 0d f6 2d ee 22 4d d1 94 25 b6 96 95 14 77 6e 02 a3 9c 83 9c 60 8e 3c 7f 8e 56 52 74 75 78 c9 7a 34 4d ef 7b 84 c7 9a d9 08 71 d1 87 9b 09 c0 4a c7 5e 2a 86 e6 1c 52 41 eb 6d d1 a2 1c 53 f6 f6 56 b3 83 bc 70 41 19 c1 14 ce c9 61 4d 07 Data Ascii: 1P%hSI=35):;8dRC~F=wiT#fPf.EqiVW!$(uCgS@\|< WPZ1Q'A/vo;V8-?=~/pk-q9:Mym8:IgOc-"M%wn`<VRtuxz4M{qJ^*RAmSVpAaM
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: a0 00 21 47 d3 ad 67 65 e5 b6 8b 30 c1 fc 92 ed 16 5b 1d f6 d0 88 d3 03 5e d0 39 ca d0 15 8f 96 7a 56 03 97 26 bc 22 9a 49 a0 be 8f 8d a2 f4 ad fd 8b 7c 37 e3 42 5b 67 24 ac 04 92 3c 86 05 3d 32 d7 ec 63 92 67 68 dd 05 a9 6f 0e 38 d2 d8 50 2e 07 5c 4b 0a 4b 88 df cf 20 8c 81 ce ee 3a e4 1c d4 53 b4 b9 1f d0 5d 84 75 34 5b 1d 8e d5 ec 96 38 ac b6 b4 7b ae 16 d3 8c 03 e0 7c fa 7d 2a 28 49 49 f0 27 1a 54 21 f6 b7 7d 6e f7 d8 9d f1 94 db 5e 8e 9b 39 83 14 29 c5 0c bd b5 e4 7b d8 1f 08 39 e3 93 5d 37 f5 39 3f 27 8e b4 19 c5 97 17 52 ec a7 16 9e 99 ab 28 c7 44 88 0f 77 31 c2 31 e2 4d 3a 25 2c 1b 0e a2 93 a7 af cd dd 63 64 86 c8 dc d8 56 02 c7 91 aa 79 11 b6 5a c6 ca 78 fc 32 cf 7b 5c 5b 75 51 69 f8 50 5c 65 28 6b 2f 29 6e e4 85 78 0d bc 9f 3f 2a a5 e8 51 aa b2 Data Ascii: !Gge0[^9zV&"I\|7B[g$<=2cgho8P.\KK :S]u4[8{\|}(II'T!}n^9){9]79?'R(Dw11M:%,cdVyZx2{\[uQiP\e(k/)nx?Q
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 64 96 f9 92 ea 52 78 03 3c 0c 1e 3a e2 ab ce 22 8f 94 5d 15 96 9e d6 51 8d a9 e9 9e d0 3f 64 d9 73 60 e5 4a c7 95 67 3c 4a 76 5a 59 96 2f 4c 96 e6 aa 92 99 f7 48 6d 30 96 d3 dd b2 8d c8 64 a8 78 02 56 42 89 f3 34 6a 2b a2 37 2f 5d db 2c 0d 23 ae ed d0 64 b3 a6 1c b4 22 df b5 3b d9 90 54 30 73 d4 28 8c 85 73 d3 9f 1c 55 5c 98 af 83 47 dd 57 06 ed 4f ae a0 bb 21 51 19 93 bd 7e 1e 19 a0 c4 c5 7d b0 65 96 92 33 ed 52 fb a7 6e 1d 8d 4f d3 f6 ae f1 53 df 88 c3 8e 34 94 95 61 69 79 0a 23 20 7e ea 7f 4a dc 52 e1 18 99 8d e4 9c 51 20 61 d5 fc ea d4 1d 98 b4 d1 22 39 01 a1 93 47 42 1d 7b ac 1e 95 1f 61 27 67 8a f6 86 16 97 a3 38 a4 2d 3d 0a 4e 0d 3d 20 94 dc 42 50 24 5e af 65 51 0a b2 52 92 42 d5 c0 49 f5 f9 d4 d1 c7 bf 81 7a ee 23 45 aa 38 b1 b0 a0 ed c1 c9 2e b8 Data Ascii: dRx<:"]Q?ds`Jg<JvZY/LHm0dxVB4j+7/],#d";T0s(sU\GWO!Q~}e3RnOS4aiy# ~JRQ a"9GB{a'g8-=N= BP$^eQRBIz#E8.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.11	49830	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	598	OUT	GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	739	IN	HTTP/1.1 200 OK x-amz-id-2: u3zXxssV6bNHRUwFPP9OP2t3DzjlefIZfnVDbyR5mGJRy16uSuwDWF4vKyCdkLGZ6FpXCanAcyy+yXzlssu8814uk+T9nztJ x-amz-request-id: Z9XVQ1DTT259CYV0 Date: Sun, 13 Oct 2024 15:29:20 GMT Last-Modified: Wed, 22 Nov 2023 02:30:41 GMT ETag: "bcda778b736c3a054af62f437b536e78" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 4nvcVa.IxmhX7xaj3DD1aoyDc2oHnofW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4249 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 75057 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 74 79 70 65 Data Ascii: "use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_type
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 77 2e 77 61 66 65 72 2c 73 3d 21 28 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 7c 7c 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 29 2c 67 3d 22 22 2e 63 6f 6e 63 61 74 28 22 2f 5f 74 64 5f 61 70 69 2f 62 65 61 63 6f 6e 22 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 75 28 29 2c 22 26 73 69 74 65 3d 22 29 2e 63 6f 6e 63 61 74 28 66 2e 73 69 74 65 2c 22 26 63 6f 6e 6e 65 63 74 69 6f 6e 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 2c 22 26 68 61 73 57 66 3d 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 26 68 61 73 57 66 52 3d 22 29 2e 63 6f 6e 63 61 74 28 73 29 3b 76 28 67 29 2c 72 2e 5f 5f 74 65 73 74 45 72 72 6f 72 26 26 Data Ascii: w.wafer,s=!(!window.wafer\|\|!window.wafer.ready),g="".concat("/_td_api/beacon","/").concat(e,"?").concat(i).concat(u(),"&site=").concat(f.site,"&connection=").concat(escape(JSON.stringify(w())),"&hasWf=").concat(c,"&hasWfR=").concat(s);v(g),r.__testError&&
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 28 64 3e 33 29 26 26 28 21 72 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 21 31 21 3d 3d 72 2e 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 29 26 26 65 29 7b 76 61 72 20 6e 3d 65 2e 6d 65 74 61 2c 74 3d 65 2e 6e 61 6d 65 2c 6f 3d 65 2e 73 74 61 63 6b 2c 61 3d 6f 26 26 6f 2e 6d 65 73 73 61 67 65 7c 7c 6f 7c 7c 22 22 2c 69 3d 22 2f 22 2e 63 6f 6e 63 61 74 28 66 2e 62 65 61 63 6f 6e 50 61 74 68 2c 22 3f 65 72 72 3d 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 26 62 65 61 63 6f 6e 54 79 70 65 3d 77 61 66 65 72 5f 65 72 72 26 69 6e 66 6f 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 29 2c 22 26 73 74 61 63 6b 3d 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 26 Data Ascii: },m=function(e){if(!(d>3)&&(!r.navigator\|\|!1!==r.navigator.onLine)&&e){var n=e.meta,t=e.name,o=e.stack,a=o&&o.message\|\|o\|\|"",i="/".concat(f.beaconPath,"?err=").concat(t,"&beaconType=wafer_err&info=").concat(escape(JSON.stringify(n)),"&stack=").concat(a,"&
2024-10-14 12:20:16 UTC	349	IN	Data Raw: 63 65 73 43 72 65 61 74 6f 72 3b 72 2e 59 41 48 4f 4f 2e 75 74 69 6c 73 2e 74 72 61 63 65 73 3d 6e 2e 63 72 65 61 74 65 54 72 61 63 65 73 49 6e 73 74 61 6e 63 65 28 7b 74 72 61 63 65 73 3a 7b 67 6c 6f 62 61 6c 41 74 74 72 69 62 75 74 65 73 3a 7b 61 75 74 68 65 64 3a 4f 2e 61 75 74 68 65 64 7c 7c 22 30 22 2c 62 75 63 6b 65 74 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 41 29 26 26 41 2e 6a 6f 69 6e 28 22 2c 22 29 7c 7c 41 2c 63 6f 6e 6e 65 63 74 3a 22 22 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 29 2e 63 6f 6e 63 61 74 28 75 28 29 29 2c 64 65 76 69 63 65 3a 4f 2e 64 65 76 69 63 65 2c 65 6e 76 3a 4f 2e 65 6e 76 7c 7c 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 6c 61 6e 67 3a 4f 2e 6c 61 6e 67 2c 72 Data Ascii: cesCreator;r.YAHOO.utils.traces=n.createTracesInstance({traces:{globalAttributes:{authed:O.authed\|\|"0",bucket:Array.isArray(A)&&A.join(",")\|\|A,connect:"".concat(escape(JSON.stringify(w()))).concat(u()),device:O.device,env:O.env\|\|"production",lang:O.lang,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.11	49831	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	511	OUT	GET /uu/api/res/1.2/gjr9LW9dHL.LMH20gjRF3g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/4d612b01abae8be4fec5c774c34a1d3f.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:16 UTC	1075	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Disposition: inline; filename="4d612b01abae8be4fec5c774c34a1d3f.webp" Etag: "395f1d8c5332cda7832a9a3ef44f4624" Last-Modified: Sun, 13 Oct 2024 23:48:13 GMT Date: Mon, 14 Oct 2024 11:40:17 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=2;cpu=0;start=2024-10-14T11:40:17.666Z;desc=hit,rtt;dur=89,content-info;desc="width=356,height=180,bytes=13172,owidth=2000,oheight=1333,obytes=208036,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 570871ca85970e91b965b7f50f41bca1 Age: 2400 cld_id: 570871ca85970e91b965b7f50f41bca1 x-image-width: 356 x-image-height: 180 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 29385 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 05 06 07 08 01 03 09 ff c4 00 4c 10 00 01 03 02 05 02 04 03 06 02 05 08 08 07 01 00 01 02 03 04 05 11 00 06 07 12 21 13 31 22 41 51 61 08 14 32 15 23 71 81 91 a1 Data Ascii: JFIFCCdL!1"AQa2#q
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 74 2a c9 47 f3 aa 33 ab 4f e5 71 63 f9 61 ea fe ac 7b 49 ff 00 92 93 d3 2d 1f e4 5f e0 8f ca 44 b0 e5 a4 34 96 94 09 e1 71 1a 07 f7 45 c7 e5 8d 1b 5d 6a fd 3f 75 50 cd ba e1 ad 3a eb f1 69 a1 9d f0 b5 c9 73 73 68 40 16 b6 c2 6c 7f 22 78 c7 af 70 8e a7 5b 51 a3 2f 15 2c e0 f1 ce 37 d1 2d 34 5a d1 f0 b1 c6 42 86 c1 1d b1 d7 1e 7d 90 bb 3d b0 a1 90 6c f6 c0 19 07 4f df 00 b9 07 4f df 00 64 1d 3f 7c 01 90 74 fd f0 06 41 b3 db 00 99 06 cf 6c 01 90 fb 3d b0 00 36 fb 60 00 db 47 a6 00 05 86 00 00 48 18 03 07 96 cf 6c 4a 19 06 cf 6c 01 90 74 fd f0 0b 90 74 fd f0 06 41 b3 db 00 99 06 cf 6c 01 90 fb 3d b0 8d e0 01 b3 db 06 40 1b 3d b0 99 00 6d f6 c3 5b 13 21 80 b7 03 09 91 52 c9 dc 19 17 95 83 06 44 06 0c 81 cb 0c 19 00 58 60 13 20 b0 c0 26 41 61 84 ce 03 20 b0 c2 Data Ascii: t*G3Oqca{I-_D4qE]j?uP:issh@l"xp[Q/,7-4ZB}=lOOd?\|tAl=6`GHlJlttAl=@=m[!RDX` &Aa
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 6e 2e a1 db b8 8e 52 aa fd 45 51 a4 bb 13 4c 8f 98 fe 2d 5a cd d4 7a 46 76 56 5c 99 97 de a9 b2 ba 8b d1 47 de 04 f5 37 ee 06 e0 fd 60 1f a7 cb 0d cb f5 13 1f 23 d7 e3 31 a0 9a e6 5a 71 46 ea 31 a4 24 9f 5b 29 bf f8 e3 d8 3d 9c cb dd 54 5f a1 e1 de d6 d6 2a d1 fd cc e9 d2 03 cb be 3d 47 73 c6 f9 b0 0e 98 f4 c2 64 3a c0 e9 8f 4c 19 0e b0 3a 7e d8 32 0a b1 ce 9e 17 22 f5 8e f4 fd b0 99 11 d6 07 4c 7a 60 c8 75 81 d2 4e 17 21 d6 3b d3 4e 0c 0d e6 07 4d 38 03 9b 27 3a 69 c1 b8 73 08 aa f5 5a 6d 0a 1a ea 35 49 29 8f 1d b1 72 7b 92 7c 92 07 72 4e 33 ee ef ed ec 93 ad 5d 9a 7a 4e 9d 71 aa d7 54 68 2c b2 ac cc 19 82 b5 9e cb b1 ee f5 32 84 55 b4 a5 28 21 c9 1e 9d bc bf 51 e9 bb 82 3c 4f 8b 38 dd dc b7 42 d9 f9 4f a5 b8 23 d9 95 0b 64 ae 2e 57 9b ea 25 66 93 19 b6 Data Ascii: n.REQL-ZzFvV\G7`#1ZqF1$[)=T_*=Gsd:L:~2"Lz`uN!;NM8':isZm5I)r{\|rN3]zNqTh,2U(!Q<O8BO#d.W%f
2024-10-14 12:20:16 UTC	1237	IN	Data Raw: 15 83 cf ad 50 4f 85 0b d8 91 d8 5a ff 00 8f 97 ad ff 00 f7 ee 4c 0e cb 2e 0c 7d ad 93 f3 70 18 46 f2 2a 06 00 78 06 1b 81 98 06 1c 38 18 00 18 00 18 00 e0 37 f2 c2 64 03 01 7f 3c 28 08 6b 73 cd 32 02 dd 42 ac f3 84 34 c8 fe da b8 bf e0 90 4a 8f b0 38 cb d6 2e fc 1d b4 eb a3 a0 e1 bd 2d 6a b7 f0 a0 fb 1d e9 38 c4 37 67 3f 57 98 86 58 69 4f ba ad a8 3b 50 91 75 1b 04 5c d8 5f b7 38 f1 a9 71 a6 a8 e4 d2 91 ef d5 7d 9f e8 89 26 e9 7f 24 ab 2f 7c 42 c0 a5 b9 4f 6e 9f 56 ca ec 18 4d 96 c2 dc a1 a9 0a 90 95 24 03 d5 da a4 07 15 64 85 ee b0 37 fc 71 91 79 7b 7f 7a a7 e2 19 af a7 e9 da 4d 86 3c 3a c3 27 54 8f 89 ed 58 6a aa dc 95 c7 cb d2 99 70 25 a4 21 30 de 69 3b 39 21 5b 7a c4 6e 37 26 f6 bf 36 bf 03 18 aa 6e 9f 99 7a 1d 37 22 ab 1e 5f 99 61 e4 8c a1 0f 2b 53 Data Ascii: POZL.}pF*x87d<(ks2B4J8.-j87g?WXiO;Pu\_8q}&$/\|BOnVM$d7qy{zM<:'TXjp%!0i;9![zn7&6nz7"_a+S
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 8e 41 3d b9 c7 95 fb 4a e2 25 a6 50 8d 04 fe 23 da 7d 95 70 a7 da 55 e5 70 ff 00 29 32 cc 3a 00 c3 14 b9 b4 fa 36 61 71 99 cf c7 53 71 44 a8 e8 5b 49 77 69 09 2a b1 3c 5c 82 4e d2 38 ed 8f 09 b6 d7 da af e6 81 f4 0d de 8f 9a 18 a3 32 a6 7f e1 97 59 52 a5 83 27 27 d4 56 77 25 4a 11 f6 ed b8 1e ac a4 79 7a f6 bf 6c 74 52 e2 3b 26 bb 1c e4 38 72 f7 9b 6d ff 00 c1 63 4e d0 ac d1 48 6a 93 3a 04 b8 f5 05 d9 3f 30 c2 14 96 43 25 20 5c 27 72 b9 4d c2 ad 6f 43 8c 79 eb 34 24 f6 3a 4a 7a 3d 7b 34 9b 2d fc 87 46 7e 8f 90 e8 f4 69 4c 2d a9 31 da 4f 59 2a 21 45 2b b9 2a 1b 81 20 8b a8 f6 e3 d2 e3 1c b5 e4 b3 5f 63 7e cd 3c 62 44 b9 31 23 29 28 3d 3b 59 23 cf 19 6d 65 ee 5b 68 2b b1 5b 1f 4a 90 9f f4 95 6c 0a 3e 81 b9 26 ca 4c ba d0 95 d4 16 be cb 7f b5 8e af 87 9a 4e Data Ascii: A=J%P#}pUp)2:6aqSqD[Iwi<\N82YR''Vw%JyzltR;&8rmcNHj:?0C% \'rMoCy4$:Jz={4-F~iL-1OY!E+* _c~<bD1#)(=;Y#me[h+[Jl>&LN
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 98 2e 90 4a 97 e2 da 1d e7 b9 04 83 71 8d 39 dc 68 f8 8f ef 92 9c 6d 35 08 b9 7e d8 2c aa ee 65 af d0 68 d4 b8 91 69 55 09 95 19 74 b9 4b f9 86 18 0f 21 97 da 67 77 de 6e f0 8d ca 3c 12 0d c8 b6 39 db 58 5b 73 4f 3d bd 0d 1b ab ab 9c 43 62 a8 77 54 75 6e 25 21 6e c8 4b 8a 5c 6a 2c 07 d2 a9 14 d4 a2 cf b9 25 28 70 80 94 80 08 41 37 16 f4 c6 c3 b3 b2 ea c5 b7 f3 2b ad 4e e5 39 2c 7c 89 ae a8 ea 3d 6f 24 66 18 d0 69 71 20 48 65 ca 2c ca 8a 84 a6 d6 b2 5c 61 b2 5b 17 4a 87 1e 46 f7 b8 c6 7d ad 8d 1b a7 35 92 cd ce ab 71 6d c9 b0 d9 42 f8 84 a9 d2 a6 aa 1c 9c b3 09 ff 00 98 91 44 89 b9 b7 54 dd be 76 3a 9d 59 b1 0a b8 4a ae 00 e3 8b 73 e6 6c cf 42 8c 54 5f 3f 7c 84 75 c7 3a d2 4e 1d b1 fc 9a 17 25 66 5f b6 6b 55 9a 3f c8 25 8f b3 98 88 f7 51 2b bf 53 ad d5 e2 Data Ascii: .Jq9hm5~,ehiUtK!gwn<9X[sO=CbwTun%!nK\j,%(pA7+N9,\|=o$fiq He,\a[JF}5qmBDTv:YJslBT_?\|u:N%f_kU?%Q+S
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 63 cf bd a0 6b 5f 64 69 d2 8d 39 62 52 ec 7a 2f b3 dd 0d ea fa 9c 25 52 19 a7 1e ff 00 e8 b8 a8 ed a3 fa 69 37 72 16 bd d4 c4 84 ec 1f c2 56 a3 b8 fb 92 0e 3e 5e 72 e7 96 67 ea cf ad b9 54 29 f2 c5 7a 11 4c a7 4f cf b4 ad 21 ae 44 ad c3 9d fd 21 54 cd f1 10 64 97 16 52 90 d0 46 c5 25 67 68 ba 55 c0 23 9e 6d ce 2f 5c dd 58 f8 d8 2f c8 61 5b 5a df f8 37 2f cd ff 00 ec 6b 85 9a 33 e5 05 f9 55 4a b6 5e cc 35 58 ad d3 61 38 b8 b1 dc 70 38 b7 5c 69 90 a2 da 96 95 8f 01 52 c9 f0 f3 62 0f b6 83 b5 d3 ee 94 5a 7f 3c 95 a3 71 a8 66 4a 5f 4c 7f b2 71 99 b3 9c 6c be c5 3d 73 9d ad 87 df 84 eb cd fc 8b 0d 2d 8d cd 20 b8 ef 57 78 e1 5b 40 e9 ed b0 2a be eb 8e d9 d6 b6 96 f7 2e 69 3f 84 d8 b9 b9 f0 d1 83 c1 1f 56 b3 65 67 61 be a9 35 49 51 ae cf 5d 5f 3b 01 05 69 4b c0 Data Ascii: ck_di9bRz/%Ri7rV>^rgT)zLO!D!TdRF%ghU#m/\X/a[Z7/k3UJ^5Xa8p8\iRbZ<qfJ_Lql=s- Wx[@*.i?Vega5IQ]_;iK
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 94 89 8a 70 b4 ea 00 51 1b 52 9d c4 0e 13 72 83 c6 37 fc 46 36 39 af 0d 59 ee 8a 93 6d f1 f4 ea 78 3e 38 e4 0f d3 c2 f3 0e c3 06 c1 84 6f 22 c5 03 60 1d c7 ed 86 b6 3d 47 21 ba 2a 36 da 90 70 d7 20 e9 9e a1 80 0f d5 fb 62 37 51 12 60 f5 43 60 0b 5a f8 6f 31 22 89 ea 96 3d ff 00 6c 27 32 26 85 1c 07 0c 93 e5 fb e1 b2 9a 4b 24 f0 a7 96 91 67 69 e4 36 e9 cc 43 79 de 8a de 9a f2 d2 91 62 b5 94 a1 bb 84 f3 62 a5 0b 76 00 fd 58 f9 af da 5e ad f6 9d ff 00 87 fc b4 cf a8 7d 9a 69 0b 4b b0 eb b8 79 aa 7f a2 71 4d 5d 2e 05 56 44 c6 67 36 e4 93 0d a8 6b 42 9c b7 4d 29 2b 20 da de 15 92 a5 5f f2 c7 9b 46 2f 3d 8f 4d 94 d6 3b 89 63 53 ea 50 72 d4 9a 1c 1c df 51 7a a0 ea d4 a8 55 19 b2 1b 92 fb 26 c0 84 d9 4d ed 50 f0 f9 8c 59 50 a1 d7 ea b8 79 7e 44 79 af d1 da 63 74 Data Ascii: pQRr7F69Ymx>8o"`=G!*6p b7Q`C`Zo1"=l'2&K$gi6CybbvX^}iKyqM].VDg6kBM)+ _F/=M;cSPrQzU&MPYPy~Dyct
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 84 98 fc e7 62 4d 94 72 5d 1f 3b 55 3f a3 d5 4c ec d6 51 86 fb 6e 29 ca 9b a8 0a 43 7b 5b 52 80 20 90 79 b1 4f 1c f8 ae 39 00 61 d6 4b c5 57 c2 2b df 4b c2 5b f5 99 37 cb ba 45 a7 9a 76 1d 8e c8 91 5d 9b 5e cb 92 36 cd 0d f5 9d 90 a5 6d 4a 8b 26 d6 6d 25 0e 5c a8 90 00 20 a9 5e 78 e9 9e 29 d1 c2 38 58 cd ce e7 98 ad 74 db 49 28 b9 2b 5c 24 52 5c 5c a5 b8 e3 50 dd 75 b1 b5 b4 32 0b 54 f7 36 ed f1 15 91 f3 e9 04 92 39 41 b0 b1 be 31 ef 57 52 81 d1 d8 bc d7 db ca 68 8d 5e cb 34 ba 9e 88 67 af b4 18 f9 a8 b0 61 b5 31 0d 29 d7 10 85 a5 01 e5 90 a0 95 a7 cd b6 cd c7 1c f9 8e 71 99 65 0e 5a a6 ae aa eb ba 2b ce 42 fe 0b b2 fd 52 5e 67 99 97 a8 b9 96 55 0a 33 54 a7 e2 4c 11 11 77 95 15 0f 21 b2 84 38 a2 4b 64 90 13 bc 02 ab 5e ca bf 38 d1 b7 da e1 e4 cc bc cb b6 Data Ascii: bMr];U?LQn)C{[R yO9aKW+K[7Ev]^6mJ&m%\ ^x)8XtI(+\$R\\Pu2T69A1WRh^4ga1)qeZ+BR^gU3TLw!8Kd^8
2024-10-14 12:20:16 UTC	1300	IN	Data Raw: 3a 9a 6a 75 89 1d 34 f2 1b 6d 22 ee 3a af 24 a4 79 9b 91 ff 00 36 18 a1 a9 ea d4 34 da 3d 4a 8f 73 57 43 d0 2e 35 9a dd 2a 48 a4 f3 55 76 bf 9f 24 13 5c ea 42 a6 36 ad cc 53 d0 6d bc 73 cb 8a ee 78 f2 e3 b9 bf 98 c7 8a 6b fc 59 71 a9 4b 10 78 89 f4 5f 0a 70 45 b6 97 1e 6a eb ce 35 38 db 4d 32 b6 9a 6c 34 87 42 82 50 91 c2 13 d9 20 0f c2 df a6 39 77 2e 6d d9 db ae 58 6c 82 05 47 44 27 e4 3d 1e 64 87 94 f2 22 32 d3 04 24 24 a8 29 5d 55 a8 83 e1 4e cb da de 22 6d 71 85 78 64 57 55 f1 f8 42 38 10 9d 95 3d 11 63 14 3c fb eb 08 4f 50 ec 01 47 d7 bd 87 af 7e 2f c1 c4 72 5c b3 c0 8a 5c cb 24 eb 4b 72 ba e6 ea 34 5c a9 9e 69 10 d4 b5 fc dc 09 d0 56 90 b6 52 e8 65 c4 94 8b 8f 15 96 38 57 1d af 6e d8 47 14 aa e1 88 9b 74 3a c8 a7 d3 03 3a ea 56 af 51 32 2e 49 cb b3 Data Ascii: :ju4m":$y64=JsWC.5*HUv$\B6SmsxkYqKx_pEj58M2l4BP 9w.mXlGD'=d"2$$)]UN"mqxdWUB8=c<OPG~/r\\$Kr4\iVRe8WnGt::VQ2.I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.11	49832	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:16 UTC	1488	OUT	GET /_td_api/beacon/performance?ybar-init_0=1.6000000000058208&ybar-mod-sidenav_0=0.40000000002328306&ybar-mod-logo_0=0.39999999999417923&ybar-mod-searchbox_0=0.29999999998835847&ybar-mod-assistjs_0=3.2999999999883585&ybar-mod-adaptivenav_0=0.20000000001164153&ybar-account-init_0=0.5999999999767169&ybar-mail-init_0=1.3000000000174623&ybar-mod-navigation_0=13&ybar-mod-notification_0=2.3000000000174623&src=ybar&_rdn=414547&apptype=default&rid=4vh116tjgq33s&bucket=900%2Cseamless&device=desktop&osName=windows%20nt&browserName=chrome&browserVersion=117.0&site=homepage HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=fPBofgIebZhYWUQINsoAqqmG5meI&v=1
2024-10-14 12:20:17 UTC	589	IN	HTTP/1.1 204 No Content expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Mon, 14 Oct 2024 12:20:16 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close
2024-10-14 12:20:17 UTC	762	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.11	49834	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:17 UTC	518	OUT	GET /uu/api/res/1.2/7QJM3GN5YBbg7HUo1M3jNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_telegraph_258/767c31696323f68d04b163e892ed999e.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:17 UTC	1075	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Disposition: inline; filename="767c31696323f68d04b163e892ed999e.webp" Etag: "485dfa2e93a1f97e6d69839f9f875ad0" Last-Modified: Fri, 11 Oct 2024 16:48:15 GMT X-Request-Id: f4da1dec6a7190513283a886cb76a800 Date: Mon, 14 Oct 2024 10:48:59 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=1;cpu=0;start=2024-10-14T10:48:59.596Z;desc=hit,rtt;dur=89,content-info;desc="width=356,height=180,bytes=11680,owidth=1814,oheight=1133,obytes=374140,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options Age: 5478 cld_id: f4da1dec6a7190513283a886cb76a800 x-image-width: 356 x-image-height: 180 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 26302 Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 ff c4 00 45 10 00 02 01 02 04 04 03 06 05 01 06 05 02 06 03 00 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 07 14 32 71 81 91 23 42 a1 b1 c1 Data Ascii: JFIFCCdE!1A"Qa2q#B
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 35 d8 ea 5e a0 83 71 8d ed 58 50 77 bd 2c 79 39 5a 8d 32 03 d7 50 06 fe bb f4 38 84 90 c8 34 64 b9 6d 72 ad 51 84 c9 cc 00 dd 57 f4 3e b8 14 03 47 97 43 3c 0c 8b 22 ab ac 2d a9 dc f4 1b 13 61 f6 c7 45 b2 29 50 73 42 cb 48 95 45 ad cc 5d 40 5b b7 63 80 6b 28 cb f9 6d a1 69 1f 4b 20 b3 07 16 d4 3d 3e e3 ef 88 e5 56 64 ec be a0 c7 1d 4b cb 52 75 5e 27 0a 3a 58 ed be 1a 26 a1 74 a9 69 6e 87 53 4a ac ca 4f 7b 7f e4 61 90 a0 92 40 1e 03 52 67 8d 64 52 6d e2 be 19 48 c4 68 96 49 de 59 9e 75 93 59 16 65 c5 7c 23 0c e3 51 23 88 c0 5d 86 e4 ad ec 3b 9c 4d 98 16 9e 27 69 24 40 8b 22 8b 6a 56 17 07 19 18 ba 6c 93 9a 91 d4 d9 57 99 7d a2 3a 48 b7 a8 b1 ef 83 ef 1b db a0 0a 9c a6 8a 9d f4 54 d5 49 cc ef ac 03 d8 1d ad 6f 3c 1f 7d 99 aa 2c ab c9 72 f7 86 39 e9 6b 6e c1 Data Ascii: 5^qXPw,y9Z2P84dmrQW>GC<"-aE)PsBHE]@[ck(miK =>VdKRu^':X&tinSJO{a@RgdRmHhIYuYe\|#Q#];M'i$@"jVlW}:HTIo<},r9kn
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 8f 29 96 76 d2 aa 4c 6c a2 c4 5e fd c8 1d b0 3d db 30 b6 7c be b6 95 fd e0 c2 22 17 eb 71 a4 fd 46 ff 00 b6 0f 7d f9 2b 1b 5e 00 e5 7a ca 3c c0 3d 73 4d ac 82 8d a8 f6 3d 6d 8e 85 ed fc 1d 39 9f bc 87 73 e6 b9 95 2f 2f 2f d2 0c 25 03 26 e4 6f 72 41 db 63 bf af 6c 2c bb 48 f6 d1 54 9f d5 e2 a3 49 a2 75 44 dc 8b 9f 88 62 4f c8 4f 29 9e 4b 34 d5 ae 6c 4d ae 58 9b 7e d8 06 20 c9 ee d0 47 34 52 ac f6 b9 2a 5f 7d 3e 7d 31 8c 9d 14 49 17 bd 2b 27 85 34 f7 0b 72 7e 67 a9 c6 18 37 26 ad a3 ca 4d 43 cd 1b 4a 66 88 c6 15 e4 1b 5f be 93 df fc f0 d1 5c d9 39 b1 15 44 34 ad 2e a4 17 03 55 81 ed 8e 82 33 e4 5b 57 51 32 c4 47 30 6f b6 1a 31 03 56 0b 46 1b 9f aa 47 26 fb 61 94 45 a1 8d 1a a2 3b 22 53 6b d6 b6 27 58 16 fb e2 6c 35 41 b4 cb 45 34 e2 9f f1 04 4e c4 e9 8c f8 Data Ascii: )vLl^=0\|"qF}+^z<=sM=m9s///%&orAcl,HTIuDbOO)K4lMX~ G4R*_}>}1I+'4r~g7&MCJf_\9D4.U3[WQ2G0o1VFG&aE;"Sk'Xl5AE4N
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: a9 a4 ab 92 38 93 5e 98 a3 52 ce c6 dd 14 00 49 27 a6 39 73 6c c5 3a b3 d0 d6 e9 5b 1b d1 ee c4 b8 2a cb 78 23 8c 17 3a 92 06 e1 bc d9 18 ab aa 30 a6 95 55 ed 6b d8 85 df a8 c5 d6 de 06 a9 32 f8 ba 46 cc ef b6 0f 82 8e 38 e1 9e 26 e0 dc dd 72 5e 33 ca aa 32 ba f6 a4 8e 71 4f 3a 10 c2 29 50 3c 6c 7e 6a 41 b7 a8 c3 e0 92 72 a3 cd ce 9d d3 32 45 a1 92 6e 42 b4 8a dd b5 c7 6b fe b8 ea a2 09 50 e2 ba 18 22 48 13 95 7b 27 99 fe 71 27 96 fc 04 12 65 8b dd 62 09 1e 93 76 ef f2 c1 4e cd 40 aa 9e 05 4d 4c 34 f9 1b 5f 04 29 d0 74 f3 08 27 7a 78 e4 bb ad 8b 8f 52 2f 7c 46 48 60 dc b5 e0 70 c2 27 ff 00 b9 6d 8e 6c cb e0 28 75 07 10 4f 44 86 92 40 49 88 95 16 b3 0b 7c ef 8e 6f 61 95 b3 55 1c d9 8c 50 46 d2 52 30 8c 81 2b 59 08 17 b9 b1 df eb 8b bf 07 3d 0e e9 29 e3 9e Data Ascii: 8^RI'9sl:[*x#:0Uk2F8&r^32qO:)P<l~jAr2EnBkP"H{'q'ebvN@ML4_)t'zxR/\|FH`p'ml(uOD@I\|oaUPFR0+Y=)
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: ac 81 e6 96 44 0a c5 40 5d ca d8 5b 7e db e3 93 de b6 64 80 2a f3 85 a4 a8 78 8d 24 32 12 49 d4 8d b7 5b 79 7a 63 77 31 ce a9 59 98 2c fa 6a 26 a9 69 5d 96 e4 9b ef 70 46 d6 3d 3c b0 e2 14 41 99 c5 24 48 34 e9 ea 4e fd 4f 9e 11 a3 03 cf 59 cb 79 74 42 9f 15 d5 06 dd 7d 70 e9 50 ad 51 1c ba b6 6a 8a 76 9a 7f 02 b1 d2 bd f7 1d 7f 71 82 95 80 3e 08 e2 98 d4 8b ea 66 8b 52 8f 91 02 df ae 28 91 4c 54 62 2b ea 1e 2a 83 a7 98 8d 35 94 84 7d 6a d6 fa 6d f7 38 a4 17 24 58 d3 2a ad a7 8f 2c 67 a9 a7 13 ce 9e 2b 2f 83 a0 00 6a b7 51 b6 e7 e5 8a c9 58 28 f2 2a c4 aa 90 4c 33 1a 51 10 db 93 12 0d 76 ee 14 91 bf d7 0b 46 25 4e c6 64 26 8e ae a9 00 36 11 49 27 8f e8 01 ff 00 4c 6e cb 10 cf ae 66 b1 c9 2a 66 11 33 b0 20 25 8e ec 77 db e6 71 d5 54 64 5a 5e 28 62 67 78 e5 Data Ascii: D@][~dx$2I[yzcw1Y,j&i]pF=<A$H4NOYytB}pPQjvq>fR(LTb+5}jm8$X,g+/jQX(L3QvF%Nd&6I'Lnf*f3 %wqTdZ^(bgx
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: d2 ad 89 fa 62 60 c3 cf 00 b9 a4 32 d4 d5 25 55 7d 65 12 68 1a 41 2a fd 07 a2 ad bf 6c 53 17 25 33 e0 99 08 e0 ca 5a fc de 20 a2 8e dd 34 c5 3b 5f ff 00 eb 18 cc 94 78 27 4d 0d 2c 6f cd 9f 89 29 dd 47 c0 56 39 96 fe 7d 53 e5 8d 63 24 5d 4b 26 5c da bd ef 37 a5 3a db 51 28 b2 a1 3f 5d 07 0b 41 18 d2 e6 d1 34 ba aa 38 bb 2e 10 45 f8 6b 1b 47 3e a0 07 fd b1 6f b1 38 9a c0 04 ac f5 a4 e1 c9 03 a4 d9 e6 56 c8 a0 aa 1e 45 4e a8 c5 c7 4f c2 df ee 30 cb 08 e2 52 29 c3 7e 16 6a 8c 07 52 23 73 fa 90 0f e9 87 ec b3 05 d1 65 94 f5 b3 09 e2 e2 1a 58 0a da e2 60 50 9f 5b 5f a6 0a c2 98 12 a3 a2 e5 dc 00 b4 34 94 59 b5 57 10 25 54 84 07 0b 4b 4e cf 25 39 1f 91 cb 32 83 f3 17 18 12 c3 45 62 85 b5 32 f0 65 6d 5c cb 98 67 19 d6 b8 9f 41 5f e9 91 36 96 ee 2f ef 03 d3 1c b3 Data Ascii: b`2%U}ehA*lS%3Z 4;_x'M,o)GV9}Sc$]K&\7:Q(?]A48.EkG>o8VENO0R)~jR#seX`P[_4YW%TKN%92Eb2em\gA_6/
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 32 a9 dc 49 bd 80 ee 4d fa 6d e5 84 8b bf 06 a6 01 9b f0 cc 74 d5 02 2a 92 59 4d f4 3a 37 85 bc f7 c5 94 9a 19 70 37 6a 2c e3 fa 74 5c 3a d5 d5 9e ea f3 17 08 5d 91 c1 04 0d 07 7b db c3 b0 6b 85 3d 3b df 3d 85 1f bc 56 38 dc 9d 24 37 8f d9 9e 7b 41 44 d5 d5 4d 3d 05 21 d2 e8 26 ab 8d 9e 64 26 c6 58 e3 21 1d 97 71 d1 4d fb 5f 1c 3f 57 86 59 5d 1e f4 7d 3b bd 0c 71 d8 9c 3e c1 db 32 6c df 81 b8 57 85 e3 68 bd e2 23 97 52 2b cc 79 71 89 27 75 4d 57 b7 c5 76 04 79 6d 63 8f 81 df d4 d8 dc d8 68 fe 84 e8 9d 53 53 4b a7 63 a4 aa 8d cf 09 56 67 15 59 3c 59 b4 f9 4d 56 5f 25 5e fe ef 53 20 67 55 1d 09 b7 4b dc fd b1 f2 fb 7a 12 d4 95 1f 41 a7 d4 17 55 c1 79 7e c8 81 a8 72 43 c6 55 2e 78 77 2e 92 79 6f 59 2c cf 0f 33 99 2b 10 35 5d af d3 d2 c3 1f 42 b3 67 d3 d0 be Data Ascii: 2IMmt*YM:7p7j,t\:]{k=;=V8$7{ADM=!&d&X!qM_?WY]};q>2lWh#R+yq'uMWvymchSSKcVgY<YMV_%^S gUKzAUy~rCU.xw.yoY,3+5]Bg
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: f5 c3 28 8e 86 15 f9 f7 0a d5 54 2c d4 79 50 a7 67 51 ad 17 e1 67 be a2 c3 ca fe 5d 2f 7f 96 21 fc 6b 19 53 14 e6 54 b4 35 4d 55 99 65 28 b4 21 8e a5 a6 d6 4c 67 7d 95 6f b8 da e6 fb f4 e9 8e a1 45 f5 30 af bd 6b 14 e9 26 98 f4 78 bb 7a e3 02 d0 2c 8a f4 90 29 65 ba f4 53 7b 5f cf 14 42 25 65 02 b5 d8 78 d6 ff 00 5c 11 d2 a2 1e f5 79 42 f2 98 ea ff 00 0e f6 c0 a1 97 05 ee d6 16 d2 c2 ff 00 e2 16 c2 30 84 52 57 c9 0a 2a 26 de 67 09 24 e4 b8 03 97 69 a0 cb 3f e6 07 55 92 8e a5 69 e1 9b ac a5 ec 4d bc 80 04 9e bd 81 c5 35 f5 5b 39 fe a9 45 9a aa ce 26 e1 4c 8b fa 46 67 9e f0 ed 74 93 47 2a f3 a1 1a 0c 33 e9 20 9d 3c c0 f2 25 f6 be fd 4e d6 1b 05 9e 9e 78 79 9d 1e ee 3d ad 1d b5 c4 3e d2 3c 83 db 4f b3 fc ae 44 ab a2 f6 78 d5 75 b2 a1 79 26 aa ad 32 82 4b 35 Data Ascii: (T,yPgQg]/!kST5MUe(!Lg}oE0k&xz,)eS{_B%ex\yB0RW&g$i?UiM5[9E&LFgtG3 <%Nxy=><ODxuy&2K5
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 90 c4 db b0 b6 20 ab ae e5 ba c6 b0 a8 45 17 50 a0 0b 5f e4 30 e1 7c 92 a3 ad 6a a4 7a 7a 7b ac ac 06 c5 ac 36 f3 37 1f f9 c2 b4 2d 03 56 e5 99 84 8b cb a8 94 c8 8d bd 8b 0e a3 a1 36 1b db 13 93 a0 a5 68 a1 78 5d de 42 f1 33 23 9b 58 03 60 7e 67 17 59 ac 46 81 ea 32 5c d3 2e b4 59 9e 57 12 c4 08 1a 8b b1 2d 71 7e c7 cb 0c d8 8d 0b 84 74 14 d3 99 a2 3a 07 64 b5 ff 00 5b e2 a8 0d 03 55 35 24 e5 58 c4 75 0b dc 83 60 7e 43 a0 c3 50 1b 48 95 35 46 b3 a0 c4 aa 46 de 11 6b e3 34 2a b0 83 59 2d 3c 66 56 a4 9c 45 d9 c5 d6 ff 00 71 84 93 a1 d7 28 26 bd e9 d6 a2 18 45 34 a2 41 1d cb 49 27 80 12 49 b9 d5 b5 c8 23 b8 c4 fb 8c a2 11 9b e5 79 9e 47 0d 2c f3 3a c9 4e 74 c8 88 01 07 70 2d 75 3d ee 6d bf 9e 2b 68 64 84 55 47 de 92 59 be 09 0b 5e e0 92 05 fc 81 df f5 c3 20 Data Ascii: EP_0\|jzz{67-V6hx]B3#X`~gYF2\.YW-q~t:d[U5$Xu`~CPH5FFk4*Y-<fVEq(&E4AI'I#yG,:Ntp-u=m+hdUGY^
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 23 fe a1 77 53 64 4b fc 3a 6c 6d a8 f5 db 12 77 7c 15 48 df e5 74 be c8 4e 5b 4c 6b f2 9c da 09 cc 60 ba c4 c7 49 3d c8 bd f6 bd fa 5b a7 d4 ad 4c c6 a2 49 a5 99 63 12 8d 11 8b 20 45 01 49 f5 24 75 c2 44 41 5e 71 25 35 25 13 52 51 c5 1b c8 d7 3a cb 16 20 02 49 24 1f 9e 19 23 0d ab 72 69 e0 ca 01 e4 b4 51 b5 38 9d a4 56 b6 b2 7a 8b 75 d3 f3 eb fa e2 89 58 c2 00 29 32 da 38 67 b3 16 73 6f 10 b6 0d 05 a3 41 95 2a 0a 79 2a 5a 35 67 d2 8c a1 86 eb 75 3d ba 77 fd 31 cf 9b 82 f8 15 30 3a da ba 23 4b 52 d2 bb ac af 28 58 f4 9b 04 5b 5b 7f a0 3f 7c 51 20 6c d3 7c 08 f3 2a ec c6 b1 99 61 97 5a 35 b7 b5 bb 01 73 eb 86 ba f2 71 f6 0b a0 e1 ba b9 e3 12 4a a8 18 ee 49 6b 6d dc e3 b1 3a 15 e3 b0 88 78 4a ea f2 4d 54 81 12 d7 2c bd 3f 5b 9f b6 24 f3 c4 0f 03 21 16 41 51 Data Ascii: #wSdK:lmw\|HtN[Lk`I=[LIc EI$uDA^q%5%RQ: I$#riQ8VzuX)28gsoAyZ5gu=w10:#KR(X[[?\|Q l\|*aZ5sqJIkm:xJMT,?[$!AQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.11	49835	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:17 UTC	548	OUT	GET /aaq/wf/wf-core-1.65.1-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:17 UTC	764	IN	HTTP/1.1 200 OK x-amz-id-2: 7rrQmDh04YcOibMHRu/Kt++sfqvVVnYv4/eODSreLaEkFaUyYsOiZsyWKwMjKzyOcURjTe63EZ/H/IuUMabfceuRT4pfX8xL x-amz-request-id: ZYKWMP4Y91GHEP62 Date: Tue, 08 Oct 2024 05:36:45 GMT Last-Modified: Thu, 18 Apr 2024 01:03:09 GMT ETag: "c1fbb54c4f22838f40ce99e7418fcd97" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: VaxAIobZ0y0iWnHdR00i8Xnb9e_2JypL Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 60378 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 542613 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 77 61 66 65 72 3d 74 28 29 3a 65 2e 77 61 66 65 72 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return fun
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 Data Ascii: le:!0,writable:!0}):e[t]=n,e}function c(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}function u(e){return Array.isArray(e)?e:Array.from(e)}function l(e,t){if(!(e instanceof t))throw new TypeE
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 20 45 7d 29 2c 6e 2e 64 28 6d 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 53 75 70 70 6f 72 74 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 54 6f 75 63 68 53 61 66 61 72 69 44 65 76 69 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 2c 6e 2e 64 28 6d 2c 22 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 50 57 41 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 3b 76 61 72 20 79 3d 7b 7d 3b 6e 2e 64 28 79 2c 22 69 73 56 69 73 69 62 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 29 2c 6e 2e 64 28 79 2c 22 64 65 62 6f 75 6e 63 65 22 2c Data Ascii: E}),n.d(m,"performanceMarkSupported",function(){return T}),n.d(m,"isTouchSafariDevice",function(){return k}),n.d(m,"smoothScroll",function(){return C}),n.d(m,"isPWA",function(){return S});var y={};n.d(y,"isVisible",function(){return G}),n.d(y,"debounce",
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 72 61 6d 65 74 65 72 56 61 6c 75 65 42 79 4e 61 6d 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 65 7d 29 2c 6e 2e 64 28 79 2c 22 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 65 7d 29 2c 6e 2e 64 28 79 2c 22 75 72 6c 69 66 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 65 7d 29 2c 6e 2e 64 28 79 2c 22 66 65 74 63 68 57 69 74 68 43 61 63 68 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 43 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: rameterValueByName",function(){return _e}),n.d(y,"setTransition",function(){return Ee}),n.d(y,"removeTransition",function(){return Te}),n.d(y,"urlify",function(){return ke}),n.d(y,"fetchWithCache",function(){return Ce}),n.d(y,"removeCookie",function(){ret
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 7d 28 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 65 29 3b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 6f 7a 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 43 6f 6e 6e 65 63 74 69 6f 6e 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 6e 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 3b 69 66 28 22 73 6c 6f 77 2d 32 67 22 3d 3d 3d 72 7c 7c 22 32 67 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 65 3d 21 30 2c 74 28 21 30 29 2c 21 30 7d 69 66 28 Data Ascii: prototype}(),E=function(){var e=void 0;return new Promise(function(t){if(void 0!==e)return t(e);var n=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection;if(n){var r=n.effectiveType;if("slow-2g"===r\|\|"2g"===r)return e=!0,t(!0),!0}if(
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 75 72 6e 20 65 7d 2c 41 3d 5b 22 72 69 64 22 2c 22 63 72 75 6d 62 22 2c 22 73 75 62 73 63 72 75 6d 62 22 5d 2c 78 3d 7b 6f 6d 69 74 3a 31 2c 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 3a 31 2c 69 6e 63 6c 75 64 65 3a 31 7d 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 22 2c 74 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 74 2b 22 3d 5b 5e 26 23 5d 2a 28 23 2e 2a 29 3f 24 22 29 2c 22 24 31 22 29 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 28 5b 3f 26 5d 29 22 2b Data Ascii: urn e},A=["rid","crumb","subscrumb"],x={omit:1,"same-origin":1,include:1},L=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"",t=arguments[1];return e.replace(new RegExp("[?&]"+t+"=[^&#](#.)?$"),"$1").replace(new RegExp("([?&])"+
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 6d 65 64 20 6f 75 74 20 66 6f 72 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 22 2b 45 2b 22 20 68 61 76 69 6e 67 20 73 74 61 72 74 54 69 6d 65 20 22 2b 61 2b 22 20 61 6e 64 20 65 6e 64 54 69 6d 65 20 22 2b 65 29 29 7d 2c 45 29 3b 54 3d 6d 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 26 26 22 63 61 63 68 65 46 69 72 73 74 22 3d 3d 3d 73 3f 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 2e 67 65 74 28 6f 2c 22 66 65 74 63 68 22 2c 7b 74 69 6d 65 6f 75 74 3a 31 65 33 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 74 6c 2c 72 3d 65 2e 76 61 6c 75 65 2c 69 3d 65 2e 63 61 63 68 65 64 54 69 6d 65 2c 6f 3d 28 44 61 74 65 2e 6e 6f 77 28 29 2d 69 29 2f 31 65 33 3b 74 72 79 7b 5f 3d 4a 53 4f 4e 2e 70 61 Data Ascii: med out for timeout value "+E+" having startTime "+a+" and endTime "+e))},E);T=m&&window.wafer.db&&"cacheFirst"===s?window.wafer.db.get(o,"fetch",{timeout:1e3}).then(function(e){if(e){var n=e.ttl,r=e.value,i=e.cachedTime,o=(Date.now()-i)/1e3;try{_=JSON.pa
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 4f 28 7b 7d 2c 65 2c 7b 5f 66 65 74 63 68 4d 65 74 61 3a 72 7d 29 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 7b 5f 66 65 74 63 68 4d 65 74 61 3a 72 7d 29 7d 29 7d 69 66 28 32 30 30 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 3b 69 66 28 6d 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 26 26 75 26 26 69 26 26 69 2e 6d 61 74 63 68 28 2f 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 6a 73 6f 6e 2f 69 29 29 7b 76 61 72 20 73 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 65 2e 63 6c 6f 6e 65 28 29 2e 74 65 78 74 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 Data Ascii: .then(function(e){t(O({},e,{_fetchMeta:r}))}).catch(function(){t({_fetchMeta:r})})}if(200===n){var i=e.headers.get("Content-Type");if(m&&window.wafer.db&&u&&i&&i.match(/application\/json/i)){var s=Date.now();e.clone().text().then(function(e){return window
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 74 61 3a 7b 64 75 72 61 74 69 6f 6e 3a 44 61 74 65 2e 6e 6f 77 28 29 2d 61 2c 73 6f 75 72 63 65 3a 63 3c 69 3f 22 43 41 43 48 45 5f 53 45 43 4f 4e 44 5f 41 54 54 45 4d 50 54 22 3a 22 43 41 43 48 45 5f 53 45 43 4f 4e 44 5f 41 54 54 45 4d 50 54 5f 53 54 41 4c 45 22 7d 7d 29 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 65 29 7d 29 7d 65 6c 73 65 20 72 28 65 29 7d 29 7d 7d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 73 73 65 74 73 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 72 3d 6e 2e 63 73 73 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 5b 5d 3a 72 3b 72 65 74 75 72 6e 20 69 3f 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 69 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 Data Ascii: ta:{duration:Date.now()-a,source:c<i?"CACHE_SECOND_ATTEMPT":"CACHE_SECOND_ATTEMPT_STALE"}}))}).catch(function(e){r(e)})}else r(e)})}})}).then(function(e){var t=e.assets,n=void 0===t?{}:t,r=n.css,i=void 0===r?[]:r;return i?Promise.all(i.map(function(e){var
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 3d 72 7c 7c 7a 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 6e 29 3b 65 2e 68 61 73 28 69 29 7c 7c 65 2e 73 65 74 28 69 2c 6e 65 77 20 4d 61 70 29 3b 76 61 72 20 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 65 2e 67 65 74 28 69 29 2e 64 65 6c 65 74 65 28 6f 29 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 6e 29 7d 2c 6e 29 3b 72 65 74 75 72 6e 20 65 2e 67 65 74 28 69 29 2e 73 65 74 28 6f 2c 6f 29 2c 6f 7d 29 2c 63 6c 65 61 72 41 6c 6c 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 65 26 26 65 2e 73 69 7a 65 29 7b 76 61 72 20 74 3d 21 30 2c 6e 3d 21 Data Ascii: =r\|\|z;if(!i)return setTimeout(t,n);e.has(i)\|\|e.set(i,new Map);var o=setTimeout(function(){var n=Array.prototype.slice.call(arguments);e.get(i).delete(o),t.apply(this,n)},n);return e.get(i).set(o,o),o}),clearAllTimeout:function(){if(e&&e.size){var t=!0,n=!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.11	49833	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:17 UTC	584	OUT	GET /cv/apiv2/partner-portals/att/adobe_analytics/1.1.20/s_code_yahoo.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:17 UTC	668	IN	HTTP/1.1 200 OK x-amz-id-2: GMjyL68FoE5x8lZrgod/X5HMY8Y7frZ+EqenJPkLdfuNVQqQtb0TGeGBgJJuszZT5yNIPqEHBpQ= x-amz-request-id: RF2MW8KY1YZZ1CSW Date: Sat, 07 Sep 2024 19:13:26 GMT Last-Modified: Tue, 11 Jun 2024 06:43:08 GMT ETag: "76e810dd9dcfac158af86fc92f9f05d2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript; charset=utf-8 Server: ATS Content-Length: 119177 Referrer-Policy: no-referrer-when-downgrade Age: 3172013 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin ATS-Carp-Promotion: 1
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 0a 2f 2a 0a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 44 4f 20 4e 4f 54 20 41 4c 54 45 52 20 41 4e 59 54 48 49 4e 47 20 42 45 4c 4f 57 20 54 48 49 53 20 4c 49 4e 45 20 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 0a 20 41 64 6f 62 65 20 56 69 73 69 74 6f 72 20 41 50 49 20 66 6f 72 20 4a 61 76 61 53 63 72 69 70 74 20 76 65 72 73 69 6f 6e 3a 20 31 2e 31 0a 20 43 6f 70 79 72 69 67 68 74 20 31 39 39 36 2d 32 30 31 34 20 41 64 6f 62 65 2c 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 20 4d 6f 72 65 20 69 6e 66 6f 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6d 6e 69 74 75 72 65 2e 63 6f 6d 0a 20 4c 61 73 74 20 55 70 64 61 74 65 64 3a 20 30 32 2d 30 31 2d 32 30 31 36 0a 2a 2f 0a 2f 2a 2a 0a Data Ascii: /* ============== DO NOT ALTER ANYTHING BELOW THIS LINE ! ============ Adobe Visitor API for JavaScript version: 1.1 Copyright 1996-2014 Adobe, Inc. All Rights Reserved More info available at http://www.omniture.com Last Updated: 02-01-2016//*
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 63 68 28 65 29 7b 7d 7d 7d 2c 65 78 65 63 75 74 65 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 74 7c 7c 65 26 26 21 55 2e 69 73 4f 62 6a 65 63 74 45 6d 70 74 79 28 65 29 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 76 6f 69 64 20 30 21 3d 3d 65 5b 74 5d 3f 65 5b 74 5d 3a 22 22 3b 74 68 69 73 2e 65 78 65 63 75 74 65 28 74 2c 6e 29 7d 2c 74 68 69 73 29 7d 2c 68 61 73 43 61 6c 6c 62 61 63 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 29 2e 6c 65 6e 67 74 68 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 Data Ascii: ch(e){}}},executeAll:function(e,t){(t\|\|e&&!U.isObjectEmpty(e))&&Object.keys(this.callbacks).forEach(function(t){var n=void 0!==e[t]?e[t]:"";this.execute(t,n)},this)},hasCallbacks:function(){return Boolean(Object.keys(this.callbacks).length)}}}function i(e
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 65 74 3a 4e 65 2c 72 65 6d 6f 76 65 3a 4e 65 7d 3b 76 61 72 20 72 3d 7b 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 72 65 6d 6f 76 65 28 74 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2e 67 65 74 28 74 29 2c 6e 3d 7b 7d 3b 74 72 79 7b 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 6e 3d 7b 7d 7d 72 65 74 75 72 6e 20 6e 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 3b 76 61 72 20 61 3d 72 2e 67 65 74 28 29 2c 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2c 65 29 3b 69 2e 73 65 74 28 74 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 2c 7b 64 6f 6d 61 69 6e 3a 6e 2e 6f 70 74 49 6e 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 7c 7c 22 22 2c 63 6f Data Ascii: et:Ne,remove:Ne};var r={remove:function(){i.remove(t)},get:function(){var e=i.get(t),n={};try{n=JSON.parse(e)}catch(e){n={}}return n},set:function(e,n){n=n\|\|{};var a=r.get(),o=Object.assign(a,e);i.set(t,JSON.stringify(o),{domain:n.optInCookieDomain\|\|"",co
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 76 61 6c 73 60 21 22 29 3b 76 61 72 20 6d 3d 64 28 7b 63 6f 6f 6b 69 65 4e 61 6d 65 3a 22 61 64 6f 62 65 75 6a 73 2d 6f 70 74 69 6e 22 7d 2c 7b 63 6f 6f 6b 69 65 73 3a 70 7d 29 2c 68 3d 74 68 69 73 2c 5f 3d 6c 65 28 68 29 2c 43 3d 5f 65 28 29 2c 53 3d 4c 65 28 67 29 2c 49 3d 4c 65 28 6f 29 2c 76 3d 73 3f 6d 2e 67 65 74 28 29 3a 7b 7d 2c 44 3d 7b 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 50 65 28 65 29 7c 7c 74 26 26 50 65 28 74 29 3f 64 65 2e 43 4f 4d 50 4c 45 54 45 3a 64 65 2e 50 45 4e 44 49 4e 47 7d 28 53 2c 76 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6b 65 28 68 65 2c 21 72 29 3b 72 65 74 75 72 6e 20 72 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 69 2c 65 2c 74 2c 6e 29 3a Data Ascii: vals`!");var m=d({cookieName:"adobeujs-optin"},{cookies:p}),h=this,_=le(h),C=_e(),S=Le(g),I=Le(o),v=s?m.get():{},D={},y=function(e,t){return Pe(e)\|\|t&&Pe(t)?de.COMPLETE:de.PENDING}(S,v),b=function(e,t,n){var i=ke(he,!r);return r?Object.assign({},i,e,t,n):
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 2e 73 74 61 74 75 73 3d 3d 3d 64 65 2e 50 45 4e 44 49 4e 47 7d 7d 2c 69 73 43 6f 6d 70 6c 65 74 65 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 2e 73 74 61 74 75 73 3d 3d 3d 64 65 2e 43 4f 4d 50 4c 45 54 45 7d 7d 2c 5f 5f 70 6c 75 67 69 6e 73 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 44 29 7d 7d 2c 69 73 49 61 62 43 6f 6e 74 65 78 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 3d 6e 75 6c 6c 2c 65 2e 63 61 6c 6c 28 65 2c 6e 65 77 20 66 28 22 54 68 65 20 63 61 6c 6c 20 74 6f 6f 6b 20 6c 6f Data Ascii: on(){return h.status===de.PENDING}},isComplete:{get:function(){return h.status===de.COMPLETE}},__plugins:{get:function(){return Object.keys(D)}},isIabContext:{get:function(){return l}}})}function g(e,t){function n(){r=null,e.call(e,new f("The call took lo
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 74 5d 7d 29 3b 72 65 74 75 72 6e 20 69 26 26 72 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 65 2e 6e 61 6d 65 3d 22 69 61 62 50 6c 75 67 69 6e 22 2c 65 2e 76 65 72 73 69 6f 6e 3d 22 30 2e 30 2e 32 22 3b 76 61 72 20 74 2c 6e 3d 5f 65 28 29 2c 69 3d 7b 74 72 61 6e 73 70 61 72 65 6e 63 79 41 6e 64 43 6f 6e 73 65 6e 74 44 61 74 61 3a 6e 75 6c 6c 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 72 65 74 75 Data Ascii: ery(function(t){return!0===e.purpose.consents[t]});return i&&r}function _(){var e=this;e.name="iabPlugin",e.version="0.0.2";var t,n=_e(),i={transparencyAndConsentData:null},r=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};retu
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 67 65 74 54 43 44 61 74 61 22 2c 32 2c 65 2c 74 29 7d 7d 76 61 72 20 43 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 2b 2b 69 29 7b 6e 3d 61 72 67 75 Data Ascii: getTCData",2,e,t)}}var C="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};Object.assign=Object.assign\|\|function(e){for(var t,n,i=1;i<arguments.length;++i){n=argu
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 44 3a 4f 2c 46 49 45 4c 44 53 3a 4d 2c 41 55 54 48 5f 53 54 41 54 45 3a 6b 2c 4f 50 54 5f 4f 55 54 3a 45 2c 53 41 4d 45 5f 53 49 54 45 5f 56 41 4c 55 45 53 3a 54 7d 2c 50 3d 4c 2e 53 54 41 54 45 5f 4b 45 59 53 5f 4d 41 50 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 65 28 30 2c 74 29 2c 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 3d 72 2c 69 2e 73 65 74 53 74 61 74 65 41 6e 64 50 75 62 6c 69 73 68 28 61 29 2c 6e 28 72 29 2c 72 7d 7d 74 68 69 73 2e 67 65 74 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: D:O,FIELDS:M,AUTH_STATE:k,OPT_OUT:E,SAME_SITE_VALUES:T},P=L.STATE_KEYS_MAP,R=function(e){function t(){}function n(t,n){var i=this;return function(){var r=e(0,t),a={};return a[t]=r,i.setStateAndPublish(a),n(r),r}}this.getMarketingCloudVisitorID=function(e)
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 3d 3d 3d 65 7c 7c 74 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 22 29 3e 3d 30 7c 7c 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 22 29 3e 3d 30 26 26 74 2e 69 6e 64 65 78 4f 66 28 22 57 69 6e 64 6f 77 73 20 4e 54 20 36 22 29 3e 3d 30 7d 3b 6e 2e 67 65 74 49 65 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3a 69 28 29 3f 37 3a 6e 75 6c 6c 7d 2c 6e 2e 65 6e 63 6f 64 65 41 6e 64 42 75 69 6c 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e Data Ascii: ernet Explorer"===e\|\|t.indexOf("MSIE ")>=0\|\|t.indexOf("Trident/")>=0&&t.indexOf("Windows NT 6")>=0};n.getIeVersion=function(){return document.documentMode?document.documentMode:i()?7:null},n.encodeAndBuildRequest=function(e,t){return e.map(encodeURICompon
2024-10-14 12:20:17 UTC	1300	IN	Data Raw: 2e 6f 72 69 67 69 6e 21 3d 3d 74 2c 6f 3d 2d 31 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 42 29 2e 69 6e 64 65 78 4f 66 28 69 2e 70 72 65 66 69 78 29 3b 72 65 74 75 72 6e 20 72 7c 7c 61 7c 7c 6f 7d 2c 74 68 69 73 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 2c 72 29 7b 76 61 72 20 61 3d 69 2b 22 7c 22 2b 65 3b 72 26 26 72 3d 3d 3d 4f 62 6a 65 63 74 28 72 29 26 26 28 61 2b 3d 22 7c 22 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 29 3b 74 72 79 7b 6e 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 2c 74 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 2c 71 3d 4c 2e 4d 45 53 53 41 47 45 53 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 70 2c 65 29 7d Data Ascii: .origin!==t,o=-1===Object.keys(B).indexOf(i.prefix);return r\|\|a\|\|o},this.send=function(n,i,r){var a=i+"\|"+e;r&&r===Object(r)&&(a+="\|"+JSON.stringify(r));try{n.postMessage(a,t)}catch(e){}}},q=L.MESSAGES,X=function(e,t,n,i){function r(e){Object.assign(p,e)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.11	49838	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:17 UTC	556	OUT	GET /cx/hp-viewer/desktop_1.11.185.modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.11	49836	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:18 UTC	545	OUT	GET /uc/sf/0.1.434/js/safe.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	692	IN	HTTP/1.1 200 OK x-amz-id-2: /hycQ2mJW79x4OtWqAtZEtUO7WPZIL0aZthZlfm/J1cha5iYhTuAYie5oCp2za2QX5Ts4XqODME= x-amz-request-id: ZKZ5700ZAC5GVC7P Date: Sun, 06 Oct 2024 10:03:20 GMT Last-Modified: Thu, 25 Apr 2024 19:26:58 GMT ETag: "60f19ca2f094acabba5b7988467387c4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 77851 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 699422 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 2f 2a 21 20 53 41 46 45 46 52 41 4d 45 20 30 2e 31 2e 34 33 34 20 c2 a9 20 32 30 32 34 2c 20 59 61 68 6f 6f 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 39 34 36 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 28 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 29 2e 63 6c 6f 73 65 3d 7b 6e 61 6d 65 3a 22 63 6c 6f 73 65 22 2c 68 65 69 67 68 74 3a 34 38 2c 77 69 64 74 68 3a 34 38 2c 70 61 74 68 3a 22 4d 33 37 2e 39 38 20 33 34 2e 38 32 37 6c 2d 39 2e 39 2d 39 2e 39 20 39 2e 39 2d 39 2e 38 39 38 63 2e 37 38 2d 2e 37 38 32 2e 37 38 2d 32 2e 30 35 20 30 2d 32 2e 38 33 2d 2e 37 38 2d 2e 37 38 2d 32 2e 30 34 37 2d 2e 37 38 2d 32 2e 38 32 38 20 30 6c Data Ascii: /! SAFEFRAME 0.1.434 2024, Yahoo Inc. All rights reserved. /!function(){var t={9466:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 3a 6e 2e 63 6f 6f 6b 69 65 73 3b 69 66 28 6e 3d 63 28 6e 29 2c 65 3d 65 7c 7c 7b 7d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 6e 2e 65 72 72 6f 72 28 5b 22 43 6f 6f 6b 69 65 3a 3a 67 65 74 20 2d 20 69 6e 76 61 6c 69 64 20 69 6e 70 75 74 22 2c 7b 6e 61 6d 65 3a 74 2c 6f 70 74 73 3a 65 7d 2c 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 29 2c 6e 75 6c 6c 3b 76 61 72 20 73 3d 72 5b 74 5d 3b 72 65 74 75 72 6e 20 65 2e 6a 73 6f 6e 26 26 73 26 26 28 73 3d 69 28 73 29 29 2c 76 6f 69 64 20 30 21 3d 3d 73 3f 73 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 6e 29 7b 65 3d 65 7c 7c 7b 7d 3b 76 61 72 20 72 3d 66 28 74 2c 6e 75 6c 6c 2c 6e 29 3b 69 66 28 22 73 74 72 69 6e Data Ascii: :n.cookies;if(n=c(n),e=e\|\|{},"string"!=typeof t)return n.error(["Cookie::get - invalid input",{name:t,opts:e},(new Error).stack].join("\n")),null;var s=r[t];return e.json&&s&&(s=i(s)),void 0!==s?s:null}function p(t,e,n){e=e\|\|{};var r=f(t,null,n);if("strin
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 6f 6e 29 2c 72 2e 6a 73 6f 6e 3d 21 31 2c 68 28 74 2c 69 2c 72 29 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 73 65 74 53 75 62 73 3d 68 7d 2c 33 32 31 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 74 72 79 7b 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 28 74 29 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 33 39 34 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 Data Ascii: on),r.json=!1,h(t,i,r)},t.exports.setSubs=h},3215:function(t){"use strict";t.exports=function(t,e){var n;try{n=JSON.parse(t)}catch(t){console&&console.dir&&console.dir(t),n=void 0===e?{}:e}return n}},3945:function(t){"use strict";t.exports=function(t,e){v
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 74 28 6f 2e 70 61 74 68 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6f 70 74 69 6f 6e 20 70 61 74 68 20 69 73 20 69 6e 76 61 6c 69 64 22 29 3b 63 2b 3d 22 3b 20 50 61 74 68 3d 22 2b 6f 2e 70 61 74 68 7d 6f 2e 65 78 70 69 72 65 73 26 26 28 63 2b 3d 22 3b 20 45 78 70 69 72 65 73 3d 22 2b 6f 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 3b 6f 2e 68 74 74 70 4f 6e 6c 79 26 26 28 63 2b 3d 22 3b 20 48 74 74 70 4f 6e 6c 79 22 29 3b 6f 2e 73 65 63 75 72 65 26 26 28 63 2b 3d 22 3b 20 53 65 63 75 72 65 22 29 3b 6f 2e 66 69 72 73 74 50 61 72 74 79 4f 6e 6c 79 26 26 28 63 2b 3d 22 3b 20 46 69 72 73 74 2d 50 61 72 74 79 2d 4f 6e 6c 79 22 29 3b 72 65 74 75 72 6e 20 63 7d 3b 76 61 72 20 6e 3d 64 65 63 6f 64 65 55 52 49 43 Data Ascii: t(o.path))throw new TypeError("option path is invalid");c+="; Path="+o.path}o.expires&&(c+="; Expires="+o.expires.toUTCString());o.httpOnly&&(c+="; HttpOnly");o.secure&&(c+="; Secure");o.firstPartyOnly&&(c+="; First-Party-Only");return c};var n=decodeURIC
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 30 38 30 29 2c 6f 3d 6e 28 39 35 36 35 29 2c 69 3d 6e 28 38 39 38 31 29 2c 73 3d 6e 28 36 33 31 39 29 2c 61 3d 6e 28 34 32 30 39 29 2c 63 3d 6e 28 33 35 31 37 29 2c 75 3d 6e 28 36 31 39 38 29 2c 6c 3d 6e 28 34 36 35 39 29 2c 66 3d 6e 28 38 31 29 2c 70 3d 6e 28 38 35 31 29 2c 68 3d 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 69 28 74 29 2c 6e 3d 63 28 74 68 69 73 29 2c 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6d 3d 64 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 76 3d 76 6f 69 64 20 30 21 3d 3d 6d 3b 76 26 26 28 6d 3d 72 28 6d 2c 64 3e 32 3f 61 72 67 75 6d 65 Data Ascii: tion(t,e,n){"use strict";var r=n(6080),o=n(9565),i=n(8981),s=n(6319),a=n(4209),c=n(3517),u=n(6198),l=n(4659),f=n(81),p=n(851),h=Array;t.exports=function(t){var e=i(t),n=c(this),d=arguments.length,m=d>1?arguments[1]:void 0,v=void 0!==m;v&&(m=r(m,d>2?argume
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 38 35 35 31 29 2c 6f 3d 6e 28 39 35 33 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 69 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 3f 65 28 72 28 6e 29 5b 30 5d 2c 6e 5b 31 5d 29 3a 65 28 6e 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 74 2c 22 74 68 72 6f 77 22 2c 65 29 7d 7d 7d 2c 34 35 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 35 30 34 29 2c 6f 3d 72 28 7b 7d 2e 74 6f 53 74 72 69 6e 67 29 2c 69 3d 72 28 22 22 2e 73 6c 69 63 65 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 6f 28 74 29 2c 38 2c 2d 31 29 7d 7d 2c 36 39 35 35 3a 66 75 6e 63 74 69 Data Ascii: strict";var r=n(8551),o=n(9539);t.exports=function(t,e,n,i){try{return i?e(r(n)[0],n[1]):e(n)}catch(e){o(t,"throw",e)}}},4576:function(t,e,n){"use strict";var r=n(9504),o=r({}.toString),i=r("".slice);t.exports=function(t){return i(o(t),8,-1)}},6955:functi
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 3a 21 28 32 26 74 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 65 7d 7d 7d 2c 34 36 35 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 37 32 34 29 2c 6f 3d 6e 28 34 39 31 33 29 2c 69 3d 6e 28 36 39 38 30 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 3f 6f 2e 66 28 74 2c 65 2c 69 28 30 2c 6e 29 29 3a 74 5b 65 5d 3d 6e 7d 7d 2c 32 31 30 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 38 33 29 2c 6f 3d 6e 28 34 39 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 26 26 72 28 Data Ascii: :!(2&t),writable:!(4&t),value:e}}},4659:function(t,e,n){"use strict";var r=n(3724),o=n(4913),i=n(6980);t.exports=function(t,e,n){r?o.f(t,e,i(0,n)):t[e]=n}},2106:function(t,e,n){"use strict";var r=n(283),o=n(4913);t.exports=function(t,e,n){return n.get&&r(
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 65 78 70 6f 72 74 73 3d 7b 43 53 53 52 75 6c 65 4c 69 73 74 3a 30 2c 43 53 53 53 74 79 6c 65 44 65 63 6c 61 72 61 74 69 6f 6e 3a 30 2c 43 53 53 56 61 6c 75 65 4c 69 73 74 3a 30 2c 43 6c 69 65 6e 74 52 65 63 74 4c 69 73 74 3a 30 2c 44 4f 4d 52 65 63 74 4c 69 73 74 3a 30 2c 44 4f 4d 53 74 72 69 6e 67 4c 69 73 74 3a 30 2c 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 3a 31 2c 44 61 74 61 54 72 61 6e 73 66 65 72 49 74 65 6d 4c 69 73 74 3a 30 2c 46 69 6c 65 4c 69 73 74 3a 30 2c 48 54 4d 4c 41 6c 6c 43 6f 6c 6c 65 63 74 69 6f 6e 3a 30 2c 48 54 4d 4c 43 6f 6c 6c 65 63 74 69 6f 6e 3a 30 2c 48 54 4d 4c 46 6f 72 6d 45 6c 65 6d 65 6e 74 3a 30 2c 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 3a 30 2c 4d 65 64 69 61 4c 69 73 74 3a 30 2c 4d 69 6d 65 54 79 70 65 41 72 72 61 Data Ascii: exports={CSSRuleList:0,CSSStyleDeclaration:0,CSSValueList:0,ClientRectList:0,DOMRectList:0,DOMStringList:0,DOMTokenList:1,DataTransferItemList:0,FileList:0,HTMLAllCollection:0,HTMLCollection:0,HTMLFormElement:0,HTMLSelectElement:0,MediaList:0,MimeTypeArra
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 6c 2c 66 2c 70 2c 68 2c 64 3d 74 2e 74 61 72 67 65 74 2c 6d 3d 74 2e 67 6c 6f 62 61 6c 2c 76 3d 74 2e 73 74 61 74 3b 69 66 28 6e 3d 6d 3f 72 3a 76 3f 72 5b 64 5d 7c 7c 61 28 64 2c 7b 7d 29 3a 72 5b 64 5d 26 26 72 5b 64 5d 2e 70 72 6f 74 6f 74 79 70 65 29 66 6f 72 28 6c 20 69 6e 20 65 29 7b 69 66 28 70 3d 65 5b 6c 5d 2c 66 3d 74 2e 64 6f 6e 74 43 61 6c 6c 47 65 74 53 65 74 3f 28 68 3d 6f 28 6e 2c 6c 29 29 26 26 68 2e 76 61 6c 75 65 3a 6e 5b 6c 5d 2c 21 75 28 6d 3f 6c 3a 64 2b 28 76 3f 22 2e 22 3a 22 23 22 29 2b 6c 2c 74 2e 66 6f 72 63 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 66 29 7b 69 66 28 74 79 70 65 6f 66 20 70 3d 3d 74 79 70 65 6f 66 20 66 29 63 6f 6e Data Ascii: 6);t.exports=function(t,e){var n,l,f,p,h,d=t.target,m=t.global,v=t.stat;if(n=m?r:v?r[d]\|\|a(d,{}):r[d]&&r[d].prototype)for(l in e){if(p=e[l],f=t.dontCallGetSet?(h=o(n,l))&&h.value:n[l],!u(m?l:d+(v?".":"#")+l,t.forced)&&void 0!==f){if(typeof p==typeof f)con
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 34 37 36 29 2c 6f 3d 6e 28 39 33 30 36 29 2c 69 3d 6e 28 36 31 36 29 2c 73 3d 72 28 72 2e 62 69 6e 64 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 3a 69 3f 73 28 74 2c 65 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 30 33 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 62 69 6e 64 28 29 3b 72 Data Ascii: se strict";var r=n(7476),o=n(9306),i=n(616),s=r(r.bind);t.exports=function(t,e){return o(t),void 0===e?t:i?s(t,e):function(){return t.apply(e,arguments)}}},616:function(t,e,n){"use strict";var r=n(9039);t.exports=!r((function(){var t=function(){}.bind();r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.11	49840	87.248.100.215	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:18 UTC	901	OUT	GET /__rapid-worker-1.2.js HTTP/1.1 Host: currently.att.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1
2024-10-14 12:20:20 UTC	903	IN	HTTP/1.1 200 OK x-amz-id-2: jUAuD+qjnZqgE5tlI9MOhk7XyDsGr01G6StMDoChqhYl1GxHM3Sr3GNSzQHSOHkYRjIEz8hAWeI= x-amz-request-id: 317WW0W3VE34P2MX Date: Fri, 23 Aug 2024 07:14:55 GMT Last-Modified: Tue, 06 Mar 2018 20:46:57 GMT ETag: "e2202e6ed6ef52cec2c4a875c99225ba" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-meta-created-date: Wed, 15 Oct 2014 18:48:37 GMT x-amz-meta-mbst-etag: "YM:1:e64293ae-a913-4bb2-8dd1-87431f3be4230005057a946243f1" x-amz-meta-x-ysws-mbst-vtime: 1413398917170161 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public x-amz-version-id: null Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 15697 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4511126 ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1 Connection: close
2024-10-14 12:20:20 UTC	611	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 73 61 6e 64 62 6f 78 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 2d 74 6f 2d 65 73 63 61 70 65 2d 73 61 6e 64 62 6f 78 20 61 6c 6c 6f 77 2d 70 72 65 73 65 6e 74 61 74 69 6f 6e 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 61 74 73 26 73 69 74 65 3d 61 74 74 26 72 65 67 69 6f 6e 3d 55 53 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 64 65 76 69 63 65 3d 64 65 73 6b 74 6f 70 26 79 72 69 64 3d 30 32 75 71 66 68 64 6a 67 71 33 34 Data Ascii: Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=att&region=US&lang=en-US&device=desktop&yrid=02uqfhdjgq34
2024-10-14 12:20:20 UTC	1086	IN	Data Raw: 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 24 49 64 3a 20 72 61 77 64 65 66 6c 61 74 65 2e 6a 73 2c 76 20 30 2e 33 20 32 30 30 39 2f 30 33 2f 30 31 20 31 39 3a 30 35 3a 30 35 20 64 61 6e 6b 6f 67 61 69 20 45 78 70 20 64 61 6e 6b 6f 67 61 69 20 24 0a 20 2a 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 3a 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6e 69 63 6f 73 2e 63 6f 6d 2f 73 74 61 66 66 2f 69 7a 2f 61 6d 75 73 65 2f 6a 61 76 61 73 63 72 69 70 74 2f 65 78 70 65 72 74 2f 64 65 66 6c 61 74 65 2e 74 78 74 0a 20 2a 2f 0a 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 39 20 4d 61 73 61 6e 61 6f 20 49 7a 75 6d 6f 20 3c 69 7a 40 6f 6e 69 63 6f 73 2e 63 6f 2e 6a 70 3e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a Data Ascii: /* @preserve * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $ * * Original: * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt // @preserve * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp> * Version:
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 66 5b 6c 5d 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 22 22 29 7d 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 33 32 37 36 38 2c 65 3d 30 2c 6e 3d 31 2c 66 3d 32 2c 6f 3d 36 2c 69 3d 21 30 2c 61 3d 33 32 37 36 38 2c 6c 3d 36 34 2c 75 3d 38 31 39 32 2c 73 3d 32 2a 74 2c 63 3d 33 2c 68 3d 32 35 38 2c 64 3d 31 36 2c 41 3d 38 31 39 32 2c 5f 3d 31 33 3b 41 3e 61 26 26 70 6f 73 74 4d 65 73 73 61 67 65 28 22 65 72 72 6f 72 3a 20 7a 69 70 5f 49 4e 42 55 46 53 49 5a 20 69 73 20 74 6f 6f 20 73 6d 61 6c 6c 22 29 2c 74 3c 3c 31 3e 31 3c 3c 64 26 26 70 6f 73 74 4d 65 73 73 61 67 65 28 22 65 72 72 6f 72 3a 20 7a 69 70 5f 57 53 49 5a 45 20 69 73 20 74 6f 6f 20 6c 61 72 67 65 22 29 2c 5f 3e 64 2d 31 26 26 70 6f Data Ascii: .fromCharCode(f[l]);return f.join("")}(function(r){var t=32768,e=0,n=1,f=2,o=6,i=!0,a=32768,l=64,u=8192,s=2*t,c=3,h=258,d=16,A=8192,_=13;A>a&&postMessage("error: zip_INBUFSIZ is too small"),t<<1>1<<d&&postMessage("error: zip_WSIZE is too large"),_>d-1&&po
2024-10-14 12:20:20 UTC	196	IN	Data Raw: 20 71 74 28 34 2c 35 2c 31 36 2c 38 29 2c 6e 65 77 20 71 74 28 34 2c 36 2c 33 32 2c 33 32 29 2c 6e 65 77 20 71 74 28 34 2c 34 2c 31 36 2c 31 36 29 2c 6e 65 77 20 71 74 28 38 2c 31 36 2c 33 32 2c 33 32 29 2c 6e 65 77 20 71 74 28 38 2c 31 36 2c 31 32 38 2c 31 32 38 29 2c 6e 65 77 20 71 74 28 38 2c 33 32 2c 31 32 38 2c 32 35 36 29 2c 6e 65 77 20 71 74 28 33 32 2c 31 32 38 2c 32 35 38 2c 31 30 32 34 29 2c 6e 65 77 20 71 74 28 33 32 2c 32 35 38 2c 32 35 38 2c 34 30 39 36 29 29 2c 51 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3b 69 66 28 72 3f 31 3e 72 3f 72 3d 31 3a 72 3e Data Ascii: qt(4,5,16,8),new qt(4,6,32,32),new qt(4,4,16,16),new qt(8,16,32,32),new qt(8,16,128,128),new qt(8,32,128,256),new qt(32,128,258,1024),new qt(32,258,258,4096)),Qt=function(r){var t;if(r?1>r?r=1:r>
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 39 26 26 28 72 3d 39 29 3a 72 3d 6f 2c 57 3d 72 2c 6d 3d 21 31 2c 5a 3d 21 31 2c 6e 75 6c 6c 3d 3d 46 74 29 7b 66 6f 72 28 76 3d 79 3d 77 3d 6e 75 6c 6c 2c 46 74 3d 41 72 72 61 79 28 75 29 2c 70 3d 41 72 72 61 79 28 73 29 2c 4d 3d 41 72 72 61 79 28 77 74 29 2c 43 3d 41 72 72 61 79 28 61 2b 6c 29 2c 42 3d 41 72 72 61 79 28 31 3c 3c 64 29 2c 4a 3d 41 72 72 61 79 28 5a 74 29 2c 74 3d 30 3b 5a 74 3e 74 3b 74 2b 2b 29 4a 5b 74 5d 3d 6e 65 77 20 54 74 3b 66 6f 72 28 4b 3d 41 72 72 61 79 28 32 2a 6b 74 2b 31 29 2c 74 3d 30 3b 32 2a 6b 74 2b 31 3e 74 3b 74 2b 2b 29 4b 5b 74 5d 3d 6e 65 77 20 54 74 3b 66 6f 72 28 4c 3d 41 72 72 61 79 28 6a 74 2b 32 29 2c 74 3d 30 3b 6a 74 2b 32 3e 74 3b 74 2b 2b 29 4c 5b 74 5d 3d 6e 65 77 20 54 74 3b 66 6f 72 28 4f 3d 41 72 72 61 Data Ascii: 9&&(r=9):r=o,W=r,m=!1,Z=!1,null==Ft){for(v=y=w=null,Ft=Array(u),p=Array(s),M=Array(wt),C=Array(a+l),B=Array(1<<d),J=Array(Zt),t=0;Zt>t;t++)J[t]=new Tt;for(K=Array(2kt+1),t=0;2kt+1>t;t++)K[t]=new Tt;for(L=Array(jt+2),t=0;jt+2>t;t++)L[t]=new Tt;for(O=Arra
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 21 30 2c 45 3d 30 2c 76 6f 69 64 20 30 3b 66 6f 72 28 5a 3d 21 31 3b 4d 74 3e 45 26 26 21 5a 3b 29 73 65 28 29 3b 66 6f 72 28 58 3d 30 2c 72 3d 30 3b 63 2d 31 3e 72 3b 72 2b 2b 29 58 3d 28 58 3c 3c 45 74 5e 32 35 35 26 70 5b 72 5d 29 26 67 74 7d 2c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 46 2c 66 3d 48 2c 6f 3d 53 2c 61 3d 48 3e 43 74 3f 48 2d 43 74 3a 62 74 2c 6c 3d 48 2b 68 2c 75 3d 70 5b 66 2b 6f 2d 31 5d 2c 73 3d 70 5b 66 2b 6f 5d 3b 53 3e 3d 71 26 26 28 6e 3e 3e 3d 32 29 3b 64 6f 20 69 66 28 74 3d 72 2c 70 5b 74 2b 6f 5d 3d 3d 73 26 26 70 5b 74 2b 6f 2d 31 5d 3d 3d 75 26 26 70 5b 74 5d 3d 3d 70 5b 66 5d 26 26 70 5b 2b 2b 74 5d 3d 3d 70 5b 66 2b 31 5d 29 7b 66 2b 3d 32 2c 74 2b 2b 3b 64 6f 3b 77 68 69 6c 65 28 70 5b Data Ascii: !0,E=0,void 0;for(Z=!1;Mt>E&&!Z;)se();for(X=0,r=0;c-1>r;r++)X=(X<<Et^255&p[r])&gt},ue=function(r){var t,e,n=F,f=H,o=S,a=H>Ct?H-Ct:bt,l=H+h,u=p[f+o-1],s=p[f+o];S>=q&&(n>>=2);do if(t=r,p[t+o]==s&&p[t+o-1]==u&&p[t]==p[f]&&p[++t]==p[f+1]){f+=2,t++;do;while(p[
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 3e 45 26 26 21 5a 3b 29 73 65 28 29 7d 7d 2c 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5a 7c 7c 28 7a 3d 30 2c 49 3d 30 2c 76 65 28 29 2c 6c 65 28 29 2c 79 3d 6e 75 6c 6c 2c 67 3d 30 2c 78 3d 30 2c 6b 3d 30 2c 33 3e 3d 57 3f 28 53 3d 63 2d 31 2c 4e 3d 30 29 3a 28 4e 3d 63 2d 31 2c 6b 3d 30 2c 6b 3d 30 29 2c 62 3d 21 31 29 7d 2c 41 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6d 7c 7c 28 64 65 28 29 2c 6d 3d 21 30 2c 30 21 3d 45 29 3f 28 6e 3d 5f 65 28 72 2c 74 2c 65 29 29 3d 3d 65 3f 65 3a 62 3f 6e 3a 28 33 3e 3d 57 3f 63 65 28 29 3a 68 65 28 29 2c 30 3d 3d 45 26 26 28 30 21 3d 6b 26 26 7a 65 28 30 2c 32 35 35 26 70 5b 48 2d 31 5d 29 2c 42 65 28 31 29 2c 62 3d 21 30 29 2c 6e 2b 5f 65 28 72 2c 6e 2b 74 2c 65 Data Ascii: >E&&!Z;)se()}},de=function(){Z\|\|(z=0,I=0,ve(),le(),y=null,g=0,x=0,k=0,3>=W?(S=c-1,N=0):(N=c-1,k=0,k=0),b=!1)},Ae=function(r,t,e){var n;return m\|\|(de(),m=!0,0!=E)?(n=_e(r,t,e))==e?e:b?n:(3>=W?ce():he(),0==E&&(0!=k&&ze(0,255&p[H-1]),Be(1),b=!0),n+_e(r,n+t,e
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 4f 5b 72 5d 2e 64 6c 3d 35 2c 4f 5b 72 5d 2e 66 63 3d 44 65 28 72 2c 35 29 3b 79 65 28 29 7d 7d 2c 79 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 3d 30 3b 6a 74 3e 72 3b 72 2b 2b 29 4a 5b 72 5d 2e 66 63 3d 30 3b 66 6f 72 28 72 3d 30 3b 6b 74 3e 72 3b 72 2b 2b 29 4b 5b 72 5d 2e 66 63 3d 30 3b 66 6f 72 28 72 3d 30 3b 4e 74 3e 72 3b 72 2b 2b 29 50 5b 72 5d 2e 66 63 3d 30 3b 4a 5b 44 74 5d 2e 66 63 3d 31 2c 41 74 3d 5f 74 3d 30 2c 75 74 3d 73 74 3d 63 74 3d 30 2c 68 74 3d 30 2c 64 74 3d 31 7d 2c 77 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 72 74 5b 74 5d 2c 6e 3d 74 3c 3c 31 3b 74 74 3e 3d 6e 26 26 28 74 74 3e 6e 26 26 69 65 28 72 2c 72 74 5b 6e 2b 31 5d 2c 72 74 5b 6e 5d 29 26 26 6e 2b 2b 2c 21 Data Ascii: O[r].dl=5,O[r].fc=De(r,5);ye()}},ye=function(){var r;for(r=0;jt>r;r++)J[r].fc=0;for(r=0;kt>r;r++)K[r].fc=0;for(r=0;Nt>r;r++)P[r].fc=0;J[Dt].fc=1,At=_t=0,ut=st=ct=0,ht=0,dt=1},we=function(r,t){for(var e=rt[t],n=t<<1;tt>=n&&(tt>n&&ie(r,rt[n+1],rt[n])&&n++,!
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 5d 2e 66 63 2c 6e 74 5b 61 5d 3d 6e 74 5b 74 5d 3e 6e 74 5b 65 5d 2b 31 3f 6e 74 5b 74 5d 3a 6e 74 5b 65 5d 2b 31 2c 6e 5b 74 5d 2e 64 6c 3d 6e 5b 65 5d 2e 64 6c 3d 61 2c 72 74 5b 42 74 5d 3d 61 2b 2b 2c 77 65 28 6e 2c 42 74 29 3b 77 68 69 6c 65 28 74 74 3e 3d 32 29 3b 72 74 5b 2d 2d 65 74 5d 3d 72 74 5b 42 74 5d 2c 6d 65 28 72 29 2c 67 65 28 6e 2c 69 29 7d 2c 62 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 65 2c 6e 2c 66 3d 2d 31 2c 6f 3d 72 5b 30 5d 2e 64 6c 2c 69 3d 30 2c 61 3d 37 2c 6c 3d 34 3b 66 6f 72 28 30 3d 3d 6f 26 26 28 61 3d 31 33 38 2c 6c 3d 33 29 2c 72 5b 74 2b 31 5d 2e 64 6c 3d 36 35 35 33 35 2c 65 3d 30 3b 74 3e 3d 65 3b 65 2b 2b 29 6e 3d 6f 2c 6f 3d 72 5b 65 2b 31 5d 2e 64 6c 2c 61 3e 2b 2b 69 26 26 6e 3d 3d 6f 7c 7c 28 6c Data Ascii: ].fc,nt[a]=nt[t]>nt[e]+1?nt[t]:nt[e]+1,n[t].dl=n[e].dl=a,rt[Bt]=a++,we(n,Bt);while(tt>=2);rt[--et]=rt[Bt],me(r),ge(n,i)},be=function(r,t){var e,n,f=-1,o=r[0].dl,i=0,a=7,l=4;for(0==o&&(a=138,l=3),r[t+1].dl=65535,e=0;t>=e;e++)n=o,o=r[e+1].dl,a>++i&&n==o\|\|(l
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 2b 2c 4d 5b 73 74 2b 2b 5d 3d 72 2c 68 74 7c 3d 64 74 29 2c 64 74 3c 3c 3d 31 2c 30 3d 3d 28 37 26 75 74 29 26 26 28 6c 74 5b 63 74 2b 2b 5d 3d 68 74 2c 68 74 3d 30 2c 64 74 3d 31 29 2c 57 3e 32 26 26 30 3d 3d 28 34 30 39 35 26 75 74 29 29 7b 76 61 72 20 65 2c 6e 3d 38 2a 75 74 2c 66 3d 48 2d 52 3b 66 6f 72 28 65 3d 30 3b 6b 74 3e 65 3b 65 2b 2b 29 6e 2b 3d 4b 5b 65 5d 2e 66 63 2a 28 35 2b 4b 74 5b 65 5d 29 3b 69 66 28 6e 3e 3e 3d 33 2c 70 61 72 73 65 49 6e 74 28 75 74 2f 32 29 3e 73 74 26 26 70 61 72 73 65 49 6e 74 28 66 2f 32 29 3e 6e 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 20 75 74 3d 3d 41 2d 31 7c 7c 73 74 3d 3d 77 74 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 65 2c 6e 2c 66 2c 6f 2c 69 3d 30 2c 61 3d 30 2c 6c 3d 30 Data Ascii: +,M[st++]=r,ht\|=dt),dt<<=1,0==(7&ut)&&(lt[ct++]=ht,ht=0,dt=1),W>2&&0==(4095&ut)){var e,n=8ut,f=H-R;for(e=0;kt>e;e++)n+=K[e].fc(5+Kt[e]);if(n>>=3,parseInt(ut/2)>st&&parseInt(f/2)>n)return!0}return ut==A-1\|\|st==wt},Ie=function(r,t){var e,n,f,o,i=0,a=0,l=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.11	49844	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:18 UTC	372	OUT	GET /ok/u/assets/img/spinner-24x24-anim.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	933	IN	HTTP/1.1 200 OK x-amz-id-2: kDRKBhazSZAPCgefhwv+6KnyCgTU/4pIBSZJkT6RuT5a/VunWqP7Fg1+OiteFY89Q9smtSR58mQ= x-amz-request-id: CBC5VVZ15RRNBH9H Date: Fri, 11 Oct 2024 10:36:09 GMT Last-Modified: Thu, 05 Apr 2018 18:29:50 GMT ETag: "953c1ac7e3b4e3d58367e20b064034bb" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-meta-created-date: Mon, 05 Dec 2011 18:03:09 GMT x-amz-meta-mbst-etag: "YM:1:ed90b165-601e-4997-b914-768cf05cb2f80004b35c21a261b5" x-amz-meta-x-ysws-mbst-vtime: 1323108189495733 Expires: Thu, 02 Dec 2021 17:01:30 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 2684 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 265452 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 c4 17 00 ec ec ec f5 f5 f5 d5 d5 d5 f1 f1 f1 cc cc cc e9 e9 e9 9a 9a 9a c4 c4 c4 da da da a9 a9 a9 de de de ba ba ba d0 d0 d0 e1 e1 e1 e4 e4 e4 fa fa fa b5 b5 b5 c9 c9 c9 f8 f8 f8 fd fd fd be be be e7 e7 e7 b0 b0 b0 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 0a 00 17 00 2c 00 00 00 00 18 00 18 00 00 05 ed e0 25 8e e4 05 25 65 5a 02 91 34 5a 06 19 b8 aa 18 19 d1 1b 8b 92 03 d4 3c 83 61 20 82 89 26 15 07 0d 78 83 14 77 03 9f 0a c0 08 8c 12 06 c7 c5 38 71 54 26 c7 01 8d 61 48 30 44 0e 83 e5 a2 50 5c a2 c4 b7 a3 f1 13 31 b0 89 0a bb 7e b4 4a 2a 0d 0d 03 60 23 01 14 42 08 35 0f 81 05 0f 35 15 14 7c 25 13 00 56 40 97 40 07 14 Data Ascii: GIF89a!NETSCAPE2.0!,%%eZ4Z<a &xw8qT&aH0DP\1~J*`#B55\|%V@@
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 66 21 0c 45 3c 2d 09 94 98 41 16 01 02 25 c5 a5 b0 48 24 9a 24 0f 08 04 04 49 29 03 7e 14 4a 6e 3f 11 66 4a 90 2a 0d 0a 94 94 90 15 0b 99 9a 08 02 9d 9d 90 0d 09 91 a3 4a 86 a4 24 00 08 08 59 a7 23 0a 08 0a 59 55 24 12 8f 2a 03 aa 61 17 12 0d 49 43 11 06 80 2a 15 24 05 0d 78 00 c4 00 06 06 43 90 2c ba 00 8f 07 06 72 4a 0e 0d b3 d2 22 12 cc a6 92 ac 17 db 5f 06 10 4a 12 a6 e3 22 11 7a a7 c9 90 21 00 21 f9 04 05 0a 00 17 00 2c 00 00 00 00 18 00 18 00 00 05 b6 e0 25 8e e4 25 10 65 9a 3a d3 28 1c 64 a3 92 0e e1 b8 b0 58 2c cc 2c 4e 0c c2 43 f4 1a 1d 16 be 51 0d 41 cc 29 16 02 95 a4 40 0a 36 45 0b 0a 09 01 d0 09 04 54 11 81 09 e8 3e 15 a2 27 04 e5 15 20 02 97 41 4a 06 38 40 20 cc 52 e3 2b 9f dd 23 3e 01 0d 12 3e 0c 15 49 88 33 15 0e 8c 8c 70 3e 05 14 92 93 0d Data Ascii: f!E<-A%H$$I)~Jn?fJJ$Y#YU$aIC*$xC,rJ"_J"z!!,%%e:(dX,,NCQA)@6ET>' AJ8@ R+#>>I3p>
2024-10-14 12:20:20 UTC	84	IN	Data Raw: 13 2e 0a 16 09 16 95 38 3d 00 0c 04 0c 05 23 08 93 32 55 10 04 22 a7 0d 07 a7 8f 97 0a 49 07 8d 11 10 2a 04 14 17 01 07 ab 17 0f 6c 44 0e 10 ab 04 0b 22 0a 07 b6 72 0b 47 22 ca 45 07 75 65 0a 10 02 23 d4 af 07 db 65 00 ae dc cb 35 6d 76 bd 72 21 00 3b Data Ascii: .8=#2U"I*lD"rG"Eue#e5mvr!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.11	49845	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:18 UTC	415	OUT	GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	743	IN	HTTP/1.1 200 OK x-amz-id-2: c3tv0qoEoGrA2kRLoJOHjUK4vLRJkMGmwQOct6F3DQkKhNPEyuzy7TtqLK2Kl4NbsHgHnRYCTe4= x-amz-request-id: 84KN6WGTXVHAC3FR Date: Thu, 10 Oct 2024 15:45:15 GMT Last-Modified: Wed, 22 Nov 2023 02:30:41 GMT ETag: "bcda778b736c3a054af62f437b536e78" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 4nvcVa.IxmhX7xaj3DD1aoyDc2oHnofW Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 4249 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 333306 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 74 79 70 65 Data Ascii: "use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_type
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 77 2e 77 61 66 65 72 2c 73 3d 21 28 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 7c 7c 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 29 2c 67 3d 22 22 2e 63 6f 6e 63 61 74 28 22 2f 5f 74 64 5f 61 70 69 2f 62 65 61 63 6f 6e 22 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 75 28 29 2c 22 26 73 69 74 65 3d 22 29 2e 63 6f 6e 63 61 74 28 66 2e 73 69 74 65 2c 22 26 63 6f 6e 6e 65 63 74 69 6f 6e 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 2c 22 26 68 61 73 57 66 3d 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 26 68 61 73 57 66 52 3d 22 29 2e 63 6f 6e 63 61 74 28 73 29 3b 76 28 67 29 2c 72 2e 5f 5f 74 65 73 74 45 72 72 6f 72 26 26 Data Ascii: w.wafer,s=!(!window.wafer\|\|!window.wafer.ready),g="".concat("/_td_api/beacon","/").concat(e,"?").concat(i).concat(u(),"&site=").concat(f.site,"&connection=").concat(escape(JSON.stringify(w())),"&hasWf=").concat(c,"&hasWfR=").concat(s);v(g),r.__testError&&
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 28 64 3e 33 29 26 26 28 21 72 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 21 31 21 3d 3d 72 2e 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 29 26 26 65 29 7b 76 61 72 20 6e 3d 65 2e 6d 65 74 61 2c 74 3d 65 2e 6e 61 6d 65 2c 6f 3d 65 2e 73 74 61 63 6b 2c 61 3d 6f 26 26 6f 2e 6d 65 73 73 61 67 65 7c 7c 6f 7c 7c 22 22 2c 69 3d 22 2f 22 2e 63 6f 6e 63 61 74 28 66 2e 62 65 61 63 6f 6e 50 61 74 68 2c 22 3f 65 72 72 3d 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 26 62 65 61 63 6f 6e 54 79 70 65 3d 77 61 66 65 72 5f 65 72 72 26 69 6e 66 6f 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 29 2c 22 26 73 74 61 63 6b 3d 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 26 Data Ascii: },m=function(e){if(!(d>3)&&(!r.navigator\|\|!1!==r.navigator.onLine)&&e){var n=e.meta,t=e.name,o=e.stack,a=o&&o.message\|\|o\|\|"",i="/".concat(f.beaconPath,"?err=").concat(t,"&beaconType=wafer_err&info=").concat(escape(JSON.stringify(n)),"&stack=").concat(a,"&
2024-10-14 12:20:20 UTC	349	IN	Data Raw: 63 65 73 43 72 65 61 74 6f 72 3b 72 2e 59 41 48 4f 4f 2e 75 74 69 6c 73 2e 74 72 61 63 65 73 3d 6e 2e 63 72 65 61 74 65 54 72 61 63 65 73 49 6e 73 74 61 6e 63 65 28 7b 74 72 61 63 65 73 3a 7b 67 6c 6f 62 61 6c 41 74 74 72 69 62 75 74 65 73 3a 7b 61 75 74 68 65 64 3a 4f 2e 61 75 74 68 65 64 7c 7c 22 30 22 2c 62 75 63 6b 65 74 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 41 29 26 26 41 2e 6a 6f 69 6e 28 22 2c 22 29 7c 7c 41 2c 63 6f 6e 6e 65 63 74 3a 22 22 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 29 2e 63 6f 6e 63 61 74 28 75 28 29 29 2c 64 65 76 69 63 65 3a 4f 2e 64 65 76 69 63 65 2c 65 6e 76 3a 4f 2e 65 6e 76 7c 7c 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 6c 61 6e 67 3a 4f 2e 6c 61 6e 67 2c 72 Data Ascii: cesCreator;r.YAHOO.utils.traces=n.createTracesInstance({traces:{globalAttributes:{authed:O.authed\|\|"0",bucket:Array.isArray(A)&&A.join(",")\|\|A,connect:"".concat(escape(JSON.stringify(w()))).concat(u()),device:O.device,env:O.env\|\|"production",lang:O.lang,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.11	49843	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:18 UTC	356	OUT	GET /ss/analytics-3.54.3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	748	IN	HTTP/1.1 200 OK x-amz-id-2: RVMEt1YtNpG+/HGlukuASeGyRPENvY/UavNfJ9Y+884QnPe6YEvpMNupCSP2ePQ2/4j4MvTz+9I= x-amz-request-id: 164NEG5JZ8FJ4GGY Date: Fri, 11 Oct 2024 16:47:12 GMT Last-Modified: Fri, 03 May 2024 16:05:29 GMT ETag: "af551b67310e4c8fc63e60101c77c97f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, immutable x-amz-version-id: o3Y2FoKXiHcpVnUZzDPBetSL4nVZrNUK Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 51086 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 243189 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 65 28 64 29 7b 76 61 72 20 66 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function fe(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 6f 3f 28 6d 5b 74 5d 3d 6e 2c 61 3d 66 5b 74 5d 2c 64 26 26 61 26 26 61 2e 6c 6f 67 26 26 64 2e 73 65 74 28 61 2e 6b 65 79 2c 6e 29 29 3a 30 3c 73 2b 6c 26 26 28 73 2d 2d 2c 75 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 63 28 73 29 26 26 75 28 29 7d 2c 6e 75 6c 6c 29 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 69 66 28 65 26 26 2f Data Ascii: Rapid Was Prevented From Accessing Cookies:",e)}-1!==o?(m[t]=n,a=f[t],d&&a&&a.log&&d.set(a.key,n)):0<s+l&&(s--,u())}e.fpc&&".yahoo.com"!==c(s)&&u()},null);try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}if(e&&/
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 66 66 65 63 74 69 76 65 5f 64 65 76 69 63 65 69 64 3a 65 5b 36 5d 2c 64 65 76 69 63 65 69 64 5f 74 79 70 65 3a 65 5b 37 5d 2c 6c 69 6d 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 66 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 28 74 3d 22 72 69 63 68 76 69 65 77 22 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 79 71 6c 69 64 7d 2c 67 65 74 45 76 65 Data Ascii: ffective_deviceid:e[6],deviceid_type:e[7],limit_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new fe).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=(t="richview",e.prototype={getYQLID:function(){return this.yqlid},getEve
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 6d 61 70 5b 65 5d 7d 2c 67 65 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 7d 2c 61 62 73 6f 72 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 79 2e 68 61 73 4f 77 6e 28 65 2c 74 29 26 26 74 68 69 73 2e 73 65 74 28 74 2c 65 5b 74 5d 29 7d 2c 61 62 73 6f 72 62 5f 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 26 26 21 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6e 29 7c 7c 79 2e 68 61 73 4f 77 6e 28 65 2c 6e 29 26 26 74 68 69 73 2e 73 65 74 28 6e 2c 65 5b 6e 5d 29 7d 2c 67 65 74 53 69 7a Data Ascii: urn this.map[e]},getAll:function(){return this.map},absorb:function(e){if(e&&y.isObj(e))for(var t in e)y.hasOwn(e,t)&&this.set(t,e[t])},absorb_filter:function(e,t){if(e&&y.isObj(e))for(var n in e)t&&!t.call(null,n)\|\|y.hasOwn(e,n)&&this.set(n,e[n])},getSiz
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 63 61 74 69 6f 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7c 7c 22 22 2c 69 3d 28 4e 28 65 2c 6e 29 2c 74 3d 74 26 26 79 2e 6e 6f 72 6d 28 22 22 2b 74 29 2c 65 2e 6f 76 65 72 72 69 64 65 7c 7c 7b 7d 29 2c 6f 3d 22 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 72 3d 22 75 64 63 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 69 3d 28 21 30 21 3d 3d 65 2e 66 70 63 26 26 22 79 61 68 6f 6f 2e 63 6f 6d 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7c 7c 28 6f 3d 22 33 70 2d 22 2b 6f 2c 72 3d 22 33 70 2d 22 2b 72 29 2c 7b 6f 76 65 72 72 69 64 65 3a 69 2c 76 65 72 73 69 6f 6e 3a 6d 65 2c 63 6f 6d 62 6f 4e 61 6d 65 3a 70 65 2c 6b 65 79 73 3a Data Ascii: cation&&document.location.href\|\|"",i=(N(e,n),t=t&&y.norm(""+t),e.override\|\|{}),o="geo.yahoo.com",r="udc.yahoo.com",i=(!0!==e.fpc&&"yahoo.com"===document.domain.split(".").slice(-2).join(".")\|\|(o="3p-"+o,r="3p-"+r),{override:i,version:me,comboName:pe,keys:
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 6f 63 6c 69 63 6b 2d 72 65 73 70 22 2c 6e 6f 6e 61 6e 63 68 6f 72 5f 74 72 61 63 6b 5f 63 6c 61 73 73 3a 65 2e 6e 6f 6e 61 6e 63 68 6f 72 5f 74 72 61 63 6b 5f 63 6c 61 73 73 7c 7c 22 72 61 70 69 64 2d 6e 6f 6e 61 6e 63 68 6f 72 2d 6c 74 22 2c 74 72 61 63 6b 5f 69 6e 70 75 74 3a 65 2e 74 72 61 63 6b 5f 69 6e 70 75 74 7c 7c 22 72 61 70 69 64 2d 74 72 61 63 6b 2d 69 6e 70 75 74 22 2c 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 3a 65 2e 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 7c 7c 22 72 61 70 69 64 2d 77 69 74 68 2d 63 6c 69 63 6b 69 64 22 2c 61 6e 63 5f 70 6f 73 5f 61 74 74 72 3a 22 64 61 74 61 2d 72 61 70 69 64 5f 70 22 2c 61 6e 63 5f 76 39 79 5f 61 74 74 72 3a 22 64 61 74 61 2d 76 39 79 22 2c 64 65 62 3a 21 30 3d 3d 3d 65 2e 64 65 62 75 67 2c 6c 64 62 67 Data Ascii: oclick-resp",nonanchor_track_class:e.nonanchor_track_class\|\|"rapid-nonanchor-lt",track_input:e.track_input\|\|"rapid-track-input",click_id_class:e.click_id_class\|\|"rapid-with-clickid",anc_pos_attr:"data-rapid_p",anc_v9y_attr:"data-v9y",deb:!0===e.debug,ldbg
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 62 63 6f 6f 6b 69 65 5f 6f 76 65 72 72 69 64 65 29 26 26 28 69 2e 79 71 6c 5f 65 6e 61 62 6c 65 64 3d 21 31 29 2c 69 2e 63 75 73 74 6f 6d 55 49 44 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 28 74 3d 69 2e 63 75 73 74 6f 6d 55 49 44 29 26 26 74 2e 74 79 70 65 26 26 74 2e 69 64 3f 69 2e 63 75 73 74 6f 6d 55 49 44 3d 79 2e 61 75 67 28 7b 7d 2c 74 29 3a 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 63 75 73 74 6f 6d 55 49 44 20 6d 75 73 74 20 62 65 20 61 6e 20 4f 62 6a 65 63 74 20 77 69 74 68 20 22 69 64 22 20 61 6e 64 20 22 74 79 70 65 22 27 29 2c 69 2e 63 75 73 74 6f 6d 55 49 44 3d 6e 75 6c 6c 29 29 2c 2b 69 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 29 3b 72 65 74 75 72 6e 20 79 2e 69 73 4e 75 6d 28 72 29 3f 69 2e 63 6f 6d 70 72 5f 74 69 6d Data Ascii: bcookie_override)&&(i.yql_enabled=!1),i.customUID&&("object"==typeof(t=i.customUID)&&t.type&&t.id?i.customUID=y.aug({},t):(console.error('customUID must be an Object with "id" and "type"'),i.customUID=null)),+i.compr_timeout);return y.isNum(r)?i.compr_tim
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 73 72 63 7c 61 63 74 69 6f 6e 29 24 7c 5e 28 41 5f 7c 5f 29 2f 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 28 61 29 66 6f 72 28 76 61 72 20 73 20 69 6e 20 61 3d 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 2e 73 70 6c 69 74 28 22 26 22 29 29 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 29 26 26 32 3c 3d 28 73 3d 61 5b 73 5d 2e 73 70 6c 69 74 28 22 3d 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 69 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 5b 30 5d 29 2c 73 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 5b 31 5d 29 2c 6f 3d 21 72 2e 74 65 73 74 28 69 29 2c 6b 28 22 51 75 65 72 79 70 61 72 61 6d 73 20 64 65 63 6f 64 65 64 3a 20 22 2b 69 2b 22 20 3a 20 22 2b 73 29 Data Ascii: src\|action)$\|^(A_\|_)/,a=document.location.search;if(a)for(var s in a=(a=a.substring(1)).split("&"))a.hasOwnProperty(s)&&2<=(s=a[s].split("=")).length&&(i=decodeURIComponent(s[0]),s=decodeURIComponent(s[1]),o=!r.test(i),k("Queryparams decoded: "+i+" : "+s)
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 3a 6e 75 6c 6c 2c 69 2e 41 5f 70 72 65 6d 73 3d 52 3f 52 2e 6d 73 3a 6e 75 6c 6c 29 2c 6e 2e 65 76 65 6e 74 26 26 79 2e 61 75 67 28 69 2c 6e 2e 65 76 65 6e 74 2e 64 61 74 61 29 2c 6e 2e 70 70 26 26 79 2e 61 75 67 28 69 2c 6e 2e 70 70 29 2c 65 65 28 51 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 28 5b 65 5d 2c 74 2c 21 30 2c 69 2c 6e 29 7d 29 29 7d 2c 73 65 6e 64 55 4c 54 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 7b 7d 2c 69 3d 64 28 22 70 22 2c 6e 65 77 20 6c 28 69 3d 65 26 26 65 2e 64 61 74 61 3f 65 2e 64 61 74 61 3a 69 29 2c 74 7c 7c 30 29 3b 65 2e 74 79 70 65 26 26 28 69 2b 3d 22 26 5f 56 3d 22 2b 65 2e 74 79 70 65 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 29 2c 63 28 69 2c 6e 29 7d 2c 73 65 6e Data Ascii: :null,i.A_prems=R?R.ms:null),n.event&&y.aug(i,n.event.data),n.pp&&y.aug(i,n.pp),ee(Q(function(){return $([e],t,!0,i,n)}))},sendULTEvent:function(e,t,n){var i={},i=d("p",new l(i=e&&e.data?e.data:i),t\|\|0);e.type&&(i+="&_V="+e.type.spaceidPrefix),c(i,n)},sen
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 75 6c 6c 3b 72 65 74 75 72 6e 28 6e 3d 79 2e 69 73 49 45 26 26 79 2e 69 65 56 3c 3d 38 3f 28 74 3d 22 22 2c 79 2e 69 73 53 65 63 75 72 65 28 29 26 26 36 3d 3d 79 2e 69 65 56 26 26 28 74 3d 27 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 27 2b 41 2e 67 65 6f 5f 68 6f 73 74 2b 27 2f 62 2e 68 74 6d 6c 22 27 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 3c 69 66 72 61 6d 65 20 22 2b 74 2b 27 20 6e 61 6d 65 3d 22 27 2b 65 2b 27 22 3e 3c 2f 69 66 72 61 6d 65 3e 27 29 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 6e 61 6d 65 3d 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 65 3d 22 22 3b 41 2e 6c 64 62 67 26 26 Data Ascii: ull;return(n=y.isIE&&y.ieV<=8?(t="",y.isSecure()&&6==y.ieV&&(t='src="https://'+A.geo_host+'/b.html"'),document.createElement("<iframe "+t+' name="'+e+'"></iframe>')):document.createElement("iframe")).name=e,n}function F(e,t){function n(){var e="";A.ldbg&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.11	49846	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:18 UTC	347	OUT	GET /oa/consent.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	655	IN	HTTP/1.1 200 OK x-amz-id-2: xN2lGA3xXeci6IqMs2oyRa1QzEScbvNi6knIWQugHa9yRlBa+lN3VnKbLxI/mjy2T6FQeIvvm/E= x-amz-request-id: ZKXP3YST95RRJZ59 Date: Mon, 14 Oct 2024 12:17:48 GMT Last-Modified: Fri, 11 Oct 2024 16:18:32 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 136069 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "019508b4a5da022114a78e5ac39b6108" Age: 153 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6e 73 65 6e 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 36 38 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 2c 61 3b 21 66 75 6e 63 74 69 6f 6e 28 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 54 79 70 65 29 65 2e 65 78 70 6f 72 74 73 3d 73 28 29 3b 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 74 2e 61 6d 64 4f 29 69 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6f 3d 73 Data Ascii: /! For license information please see consent.js.LICENSE.txt /!function(){var e={6848:function(e,n,t){var o,i,a;!function(s){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=s();else if(null!=t.amdO)i=[],void 0===(a="function"==typeof(o=s
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 69 3f 2f 5e 6c 6f 61 64 65 64 7c 5e 63 2f 3a 2f 5e 6c 6f 61 64 65 64 7c 5e 69 7c 5e 63 2f 29 2e 74 65 73 74 28 6f 2e 72 65 61 64 79 53 74 61 74 65 29 29 7c 7c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 6f 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 6e 29 2c 73 3d 31 3b 6e 3d 74 2e 73 68 69 66 74 28 29 3b 29 6e 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 3f 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3a 74 2e 70 75 73 68 28 65 29 7d 29 7d 2c 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6e 2e 72 75 6e 3d 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e Data Ascii: i?/^loaded\|^c/:/^loaded\|^i\|^c/).test(o.readyState))\|\|o.addEventListener(a,n=function(){for(o.removeEventListener(a,n),s=1;n=t.shift();)n()}),function(e){s?setTimeout(e,0):t.push(e)})},52:function(e,n,t){"use strict";n.__esModule=!0,n.run=n.runWithDecision
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 63 69 64 65 29 28 65 2c 66 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 64 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 7d 2c 36 36 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 2c 74 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: cide)(e,f)}))}catch(e){(0,d.dispatchTaskCompletedEvent)("",!1)}}},6695:function(e,n,t){"use strict";var o=this&&this.__assign\|\|function(){return o=Object.assign\|\|function(e){for(var n,t=1,o=arguments.length;t<o;t++)for(var i in n=arguments[t])Object.proto
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 73 46 72 6f 6d 4d 65 74 61 54 61 67 73 29 28 29 7d 3b 74 72 79 7b 72 65 74 75 72 6e 28 30 2c 75 2e 67 65 74 49 74 65 6d 29 28 6d 29 26 26 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 63 2e 73 65 72 76 69 63 65 54 79 70 65 2e 61 67 65 6e 74 41 75 74 68 29 26 26 28 74 3d 28 30 2c 73 2e 67 65 74 53 65 73 73 69 6f 6e 4f 62 6a 65 63 74 29 28 22 56 4d 41 67 65 6e 74 41 75 74 68 22 29 2c 21 28 30 2c 73 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 29 28 74 29 29 3f 67 28 29 3f 28 6f 2e 6f 75 74 63 6f 6d 65 3d 34 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 33 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 30 2c 6e 28 6e 75 6c 6c 2c 6f 29 2c 76 6f 69 64 28 30 2c 6c 2e 64 69 73 70 61 74 63 68 Data Ascii: sFromMetaTags)()};try{return(0,u.getItem)(m)&&(0,c.default)(c.serviceType.agentAuth)&&(t=(0,s.getSessionObject)("VMAgentAuth"),!(0,s.isValidSession)(t))?g()?(o.outcome=4,void n(null,o)):(o.outcome=3,void n(null,o)):(o.outcome=0,n(null,o),void(0,l.dispatch
2024-10-14 12:20:20 UTC	5	IN	Data Raw: 6e 6e 65 72 2e Data Ascii: nner.
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 6c 61 73 74 44 65 63 69 73 69 6f 6e 26 26 68 2e 59 43 54 42 61 6e 6e 65 72 2e 6c 61 73 74 44 65 63 69 73 69 6f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 6e 29 7b 69 66 28 22 79 62 61 6e 6e 65 72 2d 61 31 31 79 22 21 3d 3d 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 65 78 70 65 72 69 6d 65 6e 74 29 7b 76 61 72 20 74 3d 28 30 2c 63 2e 65 6e 63 6f 64 65 29 28 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 28 30 2c 63 2e 73 61 76 65 53 65 73 73 69 6f 6e 29 28 74 2c 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 29 2c 74 7d 7d 66 75 Data Ascii: lastDecision&&h.YCTBanner.lastDecision.normalizedOptions)))}function y(e,n){if("ybanner-a11y"!==e.normalizedOptions.experiment){var t=(0,c.encode)(e.cookieResult.consentCookies,n);return null!==t&&(0,c.saveSession)(t,e.normalizedOptions.consentHost),t}}fu
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 65 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 75 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 63 6f 6e 74 65 78 74 44 61 74 61 3a 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 30 2c 63 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 56 61 6c 75 65 29 28 6e 2c 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 29 3f 6e 3a 6e 75 6c 6c 7d 28 65 2c 6e 2e 73 65 73 73 69 6f 6e 29 3b 69 66 28 6e 2e 69 73 42 61 6e 6e 65 72 45 6c 69 67 69 62 6c 65 26 26 21 64 29 7b 6f 2e 64 69 73 70 6c 61 79 46 72 61 6d 65 28 29 2c 74 3d 21 30 2c 54 28 65 2c 22 63 6a 73 42 61 6e 6e 65 72 44 69 73 70 6c 61 79 22 29 2c 6f 2e 72 65 66 72 65 73 68 46 72 61 6d 65 53 69 7a 65 28 29 3b 76 61 72 20 6c 3d 79 28 65 2c 31 29 3b 6c Data Ascii: e();break;case u.MessageType.contextData:var d=function(e,n){return(0,c.isValidSessionValue)(n,e.cookieResult.consentCookies)?n:null}(e,n.session);if(n.isBannerEligible&&!d){o.displayFrame(),t=!0,T(e,"cjsBannerDisplay"),o.refreshFrameSize();var l=y(e,1);l
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 29 28 22 45 72 72 6f 72 20 64 75 72 69 6e 67 20 72 75 6e 3a 20 22 2e 63 6f 6e 63 61 74 28 65 2e 6d 65 73 73 61 67 65 3f 65 2e 6d 65 73 73 61 67 65 3a 65 29 29 2c 28 30 2c 66 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 69 2e 73 74 61 72 74 3d 2b 6e 65 77 20 44 61 74 65 2c 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 65 2c 41 29 7d 6e 2e 62 61 6e 6e 65 72 54 61 73 6b 4e 61 6d 65 3d 22 50 72 69 76 61 63 79 42 61 6e 6e 65 72 22 2c 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e 3d 41 2c 6e 2e 72 75 6e 3d 53 2c 68 2e 59 43 54 42 61 6e 6e 65 72 7c 7c 28 68 2e 59 43 54 42 61 6e 6e 65 72 3d 7b 6c 61 73 74 44 65 63 69 73 69 6f 6e 3a 6e 75 6c 6c 2c 68 61 Data Ascii: )("Error during run: ".concat(e.message?e.message:e)),(0,f.dispatchTaskCompletedEvent)("",!1)}}}function S(e){i.start=+new Date,(0,s.default)(e,A)}n.bannerTaskName="PrivacyBanner",n.runWithDecision=A,n.run=S,h.YCTBanner\|\|(h.YCTBanner={lastDecision:null,ha
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 78 70 69 72 79 2c 6f 2e 74 72 61 63 6b 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 3d 63 29 3a 28 6f 2e 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 55 72 69 3d 75 2c 73 3d 31 31 34 29 3a 73 3d 31 31 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 30 3a 73 3d 31 30 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 73 3d 31 31 30 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 73 3d 31 30 39 7d 6f 2e 72 65 6d 6f 74 65 52 65 73 75 6c 74 3d 7b 6f 75 74 63 6f 6d 65 3a 73 2c 61 63 74 69 6f 6e 3a 69 2e 61 63 74 69 6f 6e 2c 63 6f 6f 6b 69 65 73 3a 5b 5d 2c 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 43 6f 6f 6b 69 65 73 3a 5b 5d 7d 2c 61 28 65 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 65 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 26 26 65 Data Ascii: xpiry,o.trackUserInteraction=c):(o.unsafeRejectedUri=u,s=114):s=115;break;case 0:s=100;break;case 4:s=110;break;default:s=109}o.remoteResult={outcome:s,action:i.action,cookies:[],unsafeRejectedCookies:[]},a(e,o)}}function v(e){return!!(e&&e.consentHost&&e
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 73 50 72 6f 64 75 63 74 45 55 2c 6c 6f 63 61 6c 65 3a 65 2e 6c 6f 63 61 6c 65 2c 6a 73 56 65 72 73 69 6f 6e 3a 64 2e 76 65 72 73 69 6f 6e 2c 72 65 66 65 72 72 65 72 3a 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 3b 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 73 2c 28 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 74 72 79 7b 68 28 69 2c 6f 2c 65 2c 6e 2c 61 2c 74 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 2c 6e 29 7d 7d 29 29 7d 28 72 2c 41 2c 74 29 3b 74 28 6e 75 6c 6c 2c 41 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 2c 70 29 7d 7d 7d 2c 38 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6e 2e 55 72 6c 73 3d 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: sProductEU,locale:e.locale,jsVersion:d.version,referrer:document.referrer};(0,c.default)(s,(function(i,a){try{h(i,o,e,n,a,t)}catch(e){t(e,n)}}))}(r,A,t);t(null,A)}catch(e){t(e,p)}}},830:function(e,n){"use strict";n.__esModule=!0,n.Urls=void 0,function(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.11	49842	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:18 UTC	381	OUT	GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	656	IN	HTTP/1.1 200 OK x-amz-id-2: dQvEIG9XfV/NzfL4jOpwXAWrvIAo1fuJCI75EPhUo2GPC05fIxViQg+IiUuJNzjpjfEhL7SqFno= x-amz-request-id: 5PTSKMDCGF95R7PP Date: Mon, 29 Jul 2024 23:16:28 GMT Last-Modified: Wed, 01 Mar 2023 03:52:06 GMT ETag: "2fb9d43c74752389405abc1a5814b44a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Tue, 01 Mar 2033 03:52:18 GMT Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 539840 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 6613433 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 47 49 46 38 39 61 04 01 54 01 f7 01 00 ff ff ff fd fd ff fd ff ff ff f9 ff ff fa f4 ff fb ee ff fb ff ff fd fd ff fe f6 ff fe ff ff ff fa ff ff fe ff f3 ea ff f4 f5 ff fa fa ff fb fb f7 e5 e2 f8 fe ff fe e4 d1 ff e8 d1 ff f6 d8 ff fa e6 f4 55 2e f5 52 1a fb 51 10 fc 4f 0b fc d6 c2 fc e8 c5 fe 4b 0a fe 4d 08 fe 4e 0b fe 4e 13 fe 4f 0d fe 50 0c fe 51 0d fe 51 0f fe 53 16 fe 55 15 ff 4e 0d ff ef d2 ff b8 8c ff c3 a9 ff e4 c4 ff fe e8 d8 5e 3c e6 6d 43 fc 4e 12 fd 4f 0f fe 4c 22 fe 51 18 fe 53 13 fe 5b 18 ff 4d 15 ff f3 d5 c5 80 64 d3 64 3f dc a0 8d fe 70 41 bc 69 4d fe 68 2f d1 86 69 e4 cf b4 e0 bf b5 ff ad 95 fb 84 66 fe ea d3 fe fd ff fe ff fd ff e0 d0 ff f8 ee ff fb f8 ff fe fc ff ff fc fb ff fb fb ff ff ff ea e2 ff ef d9 ff f7 f6 ff fd f7 ff fd fa f7 df Data Ascii: GIF89aTU.RQOKMNNOPQQSUN^<mCNOL"QS[Mdd?pAiMh/if
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 07 ff 80 00 82 83 84 85 86 87 88 86 47 47 82 09 09 89 90 91 92 93 94 95 8d 5c 01 98 8f 96 9c 9d 9e 93 06 0f 46 5f 4d a5 a1 11 8e a9 a9 9f ac ad 91 a7 a4 a6 a8 aa aa ae b6 b7 97 a4 4b 10 0e 03 4a bf b4 8e b8 c3 ac 0b 48 04 0c 10 bc be c0 c1 c4 cf 9c 0a 48 ca bb 4b 0d 98 b9 ab d0 db af 4e 58 d4 d4 51 8c 00 ce dc e6 b5 e4 0e 5e 56 d4 12 ca d7 d2 02 02 e6 f4 83 e8 c6 ec ca ee 50 bb f0 f2 f5 f5 82 35 c8 b7 af 20 03 2c 08 87 28 3c 06 10 9a 40 30 ed 24 10 69 27 25 e1 42 24 0d 9f 05 6b 07 61 a2 c7 70 e2 e2 61 cc 38 ec 91 2a 8e 1f 3f fa 8b 47 b2 e4 b1 27 eb aa f1 4b 49 51 d4 28 2e 2d 71 bd 1c 88 b2 a0 ca 95 38 73 76 12 96 4e 5a 11 82 3d 69 1e 8c 95 50 a8 25 a2 3b f3 f5 ec e8 f3 9d ac 45 4e 2b c1 32 8a 14 25 55 a5 eb bc c1 dc 79 51 9e d9 79 4e b7 22 28 d0 75 e6 57 Data Ascii: GG\F_MKJHHKNXQ^VP5 ,(<@0$i'%B$kapa8*?G'KIQ(.-q8svNZ=iP%;EN+2%UyQyN"(uW
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 18 1b 7a d9 e8 20 4b 84 8c 20 43 62 64 60 a9 41 47 25 22 53 aa 4c c0 b2 a5 80 81 0d 7e fc 30 f9 71 a5 cd 9b 62 cc c9 34 47 a5 26 ce 9f 20 53 c8 ec 27 09 82 93 05 40 93 5a 84 30 b4 1f 2b 43 3d 95 4a 6d 08 81 1a 3f 7d 44 c7 e9 a3 39 b5 ab 4b 9f d4 7c 5c cd 5a 8a a7 d7 b3 06 3e 6e d1 d0 74 6c a1 38 a8 50 fa 7c 89 16 a8 06 b1 58 b5 ba 4d 31 f7 00 dd ba 36 ef 58 69 9b 57 6f 1c a3 48 12 a7 05 7c 73 9e 4e b7 fd 0a 47 96 c5 f5 2b e3 94 86 22 9b 22 ec 96 15 11 23 48 17 5b be 7c 71 f0 0f 53 5a 39 47 96 04 2a aa e8 d1 a4 1f da c1 5b 48 af e4 bc 92 7e 20 1e 80 a0 37 ec df b1 15 23 90 40 3b f5 ed d5 3f 7c 2c e1 ed 1b 78 70 84 05 b6 c4 a9 4d dd f6 f1 ab 71 9e 14 60 ee f7 81 f7 8a ce 63 57 ff 81 52 fd fa f5 92 af bf 83 7f 0e 5b 03 3b cd d6 cb cb c7 fa 59 8c fa fb e1 2f Data Ascii: z K Cbd`AG%"SL~0qb4G& S'@Z0+C=Jm?}D9K\|\Z>ntl8P\|XM16XiWoH\|sNG+""#H[\|qSZ9G*[H~ 7#@;?\|,xpMq`cWR[;Y/
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 04 00 21 f9 04 05 03 00 c3 00 2c 4e 00 de 00 6d 00 76 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 22 59 c8 50 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 06 e0 c2 31 8a c7 2b 54 be 44 39 41 ec 81 91 04 06 52 4e 59 c9 b2 a3 c6 97 30 25 82 9c 49 e7 12 98 27 28 55 ce 6c 19 b3 a7 cf 8d 1f 09 88 11 29 72 09 a3 59 92 20 1c 18 da 6e 27 cf 9f 50 7d 12 6d 50 69 13 1b 1b 50 74 3e 75 19 b5 eb 4b 06 4b 80 58 70 33 28 de 23 04 42 81 6e f5 ca 16 63 03 28 8a 60 08 8b 21 6d c7 98 b4 6b db ea 95 59 c4 88 86 3c 26 00 f9 b9 d5 a1 03 bb 62 26 d5 3a d0 ba b7 71 ce c7 3b bd 70 03 5c cd 1a 61 60 90 82 08 49 bc b8 b3 62 c7 a0 b1 84 41 2b 81 db d8 ca 96 79 c9 fb 73 76 b4 d3 a5 a1 63 17 70 fd e3 18 8d db a8 53 b3 11 9d a5 77 13 ce b1 65 43 80 7b 5a c4 9f 70 c8 67 88 92 97 62 89 eb Data Ascii: !,NmvH"YP#JH31+TD9ARNY0%I'(Ul)rY n'P}mPiPt>uKKXp3(#Bnc(`!mkY<&b&:q;p\a`IbA+ysvcpSweC{Zpgb
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: f9 ff ce 0f ca c0 16 8d 38 a5 b0 2c 91 b6 4b ee 33 97 fd f4 5f d1 68 91 03 02 56 80 1a a3 08 da 6d d6 99 d0 40 ee 06 95 ac a8 c5 c4 f8 e9 ce 8a 72 d4 4e b2 1c 20 67 98 c0 83 56 c2 d3 a3 59 1c 1a 24 c7 26 90 20 18 ab a3 28 b5 e6 24 28 b1 52 96 12 e1 a5 27 8d a9 0f 83 99 4c c5 11 c3 0c bf f3 45 ad bc a6 53 f7 8d 82 1d 4a b1 a9 ca 76 48 46 84 16 15 73 49 19 e2 4f 83 2a 54 62 3e 55 a1 41 64 29 00 88 b0 54 fd 39 f5 aa 71 cb aa 52 73 6a 55 b0 16 6f 06 89 58 82 56 27 00 54 b3 02 12 1c d9 f4 29 4e 4d fa 55 b7 1e 4c 18 3e 78 9e 62 ba 80 0e aa 96 d5 ae 2f 6c 83 39 4c d8 05 1c f8 f5 af 80 05 21 1b 06 6b c2 29 72 6f a8 75 4d 6c 9a 2c 10 8b 5e d2 0f 0c f0 a9 a2 64 21 d8 06 88 10 09 97 82 db 6c ba e4 f3 2d 02 ba 0d b4 a2 55 ec 35 ea 59 90 42 a4 b3 03 f8 8b 23 6a 53 4b Data Ascii: 8,K3_hVm@rN gVY$& ($(R'LESJvHFsIO*Tb>UAd)T9qRsjUoXV'T)NMUL>xb/l9L!k)rouMl,^d!l-U5YB#jSK
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 0d 31 81 43 84 73 f6 29 27 1b c8 cc 73 9b 9a 78 6a 61 28 02 5e 6c 61 8a 74 7e 5e 49 e6 2a 73 1c 3a e4 9a 05 54 d1 42 33 1e 34 aa 29 2f c1 2c d3 0d 72 ca 4d 5a a3 94 fb c4 e3 22 9c 3c 6e 5a 8d 28 80 a4 30 1a 86 85 82 ff 8a 40 1d df 2c 62 6b 9c a8 3a 2a e7 3a 1a 20 3a 68 a1 14 14 d3 88 38 b8 e6 aa ab 9c f1 90 32 cf 71 b1 22 50 8c 21 2c 7a 66 ec b4 aa c2 b2 49 25 d8 35 4b 0c 37 3a fe 48 6d aa 4a f6 39 c9 23 52 1c 10 6b 0a 3a dc 3a e6 b7 e1 8a bb 03 18 e5 56 26 ea 65 bd 31 f2 26 ab ec 16 ab 2a 0b c3 14 21 c6 bc bb 31 41 4d 26 62 e2 9b 2f b8 8d 7a ea 1d a1 1c d2 11 1e 2e 16 1e ac af aa 32 38 62 5c 7f 0c ef 26 47 ba 11 1f 8b 70 b5 8e f8 9a f1 6a 1e 76 c2 a9 c1 1e a7 3c a7 37 91 b6 e3 24 77 76 d0 e1 0a 88 de 4e ac f2 a6 9c 78 e3 f2 cb 00 93 15 c4 0f 87 d9 4c f1 Data Ascii: 1Cs)'sxja(^lat~^Is:TB34)/,rMZ"<nZ(0@,bk:: :h82q"P!,zfI%5K7:HmJ9#Rk::V&e1&*!1AM&b/z.28b\&Gpjv<7$wvNxL
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: b1 8f 05 42 84 f6 d6 b8 c8 37 5e 44 73 b9 bb e4 81 10 c3 0c 19 86 b2 24 d9 c1 61 2a 2f b9 c9 5a e6 69 22 bc ca d1 2a 33 79 a0 36 3c 59 9a c3 fc c3 77 8c c6 ff cb 55 96 00 9a b3 cc e6 f9 8d 19 ce 71 ae 55 9d 0d 7a 67 3c 4b e4 41 e8 1c f2 9a f7 8c 40 70 64 f7 c4 4a fe 32 0f 46 f9 56 42 ff 70 6e 49 4e f4 9f d1 a1 35 b3 ea 75 d0 8e 96 5c 2d d8 60 0e 09 6b 48 d2 36 c2 01 8d 1b 9d e9 e4 1d a6 d3 ff fa b4 aa 41 ed 90 56 8c 22 6b 96 a6 68 a9 63 c7 86 78 10 37 d5 14 36 33 93 7d c1 6b 22 cb 7a d6 9a 6e 03 6b c6 10 bc 4b 0b 19 d8 a1 53 84 b0 3d ad 6b 82 1c 07 1e 20 8d f5 b1 91 fd b6 58 84 8c d9 cd 26 88 20 f4 30 88 f1 52 7b 7b c2 d0 83 6b b1 ad 91 1f 70 db d7 df a6 b5 2d e8 1b e3 85 a0 22 15 a3 4e 77 ec 66 71 0c cb b5 5b 21 e0 f1 b6 bc 93 cd 0f 7b df 1b 21 5d 40 87 Data Ascii: B7^Ds$a/Zi"3y6<YwUqUzg<KA@pdJ2FVBpnIN5u\-`kH6AV"khcx763}k"znkKS=k X& 0R{{kp-"Nwfq[!{!]@
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: c1 9f 7f fe cd d1 49 53 c0 44 38 08 66 22 54 68 e1 1a ab c9 62 47 4d 48 d8 c5 60 68 08 b4 b0 0c 79 14 5e 68 60 25 5c c9 d6 a1 87 1f e6 45 00 01 2a f4 03 a1 7d 25 9a 38 9d 38 fa d1 f4 04 8b 2d e2 f5 62 0a df c4 80 9a 81 35 da f8 87 38 40 e9 c8 63 8f 6c 79 e1 c5 0e 58 d1 88 8d 1a 54 56 69 a4 0b a8 54 70 dd 82 49 44 b0 00 93 3e a2 23 cd 22 7e 48 69 65 91 e5 a1 f5 de 92 60 8a b5 65 23 b6 68 c6 98 09 19 d4 39 e5 99 78 96 79 c1 23 5e ee c7 66 9b 30 ad 70 9d 39 93 f4 45 e4 9d 79 16 f9 49 1b 4a 02 da 64 18 75 3c 83 a1 99 88 26 3a 5e 66 9e 04 c1 e1 8a 5f 3a ea a6 1c 41 5e 69 a7 a5 79 ea 60 88 60 9c 7a aa 53 01 15 30 41 e2 a1 68 c6 ff 1a ca 05 8c 28 30 0f 64 5b a6 aa 6a 4b d7 d9 81 0c 7d 94 c2 21 ac ac b1 ee e0 cf 1d 2f e6 ba ab 4e fd 6c d3 4b 62 71 0d 49 ec b4 16 Data Ascii: ISD8f"ThbGMH`hy^h`%\E*}%88-b58@clyXTViTpID>#"~Hie`e#h9xy#^f0p9EyIJdu<&:^f_:A^iy``zS0Ah(0d[jK}!/NlKbqI
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 2f 66 44 9c 00 2d 2e 78 41 b8 8a 68 d4 34 bb 3e 6b 07 05 28 30 56 79 aa 77 bd 32 2c 43 1d 58 a5 dd 54 6d e0 57 df bd 2f 7e e1 c7 09 12 ce b6 21 0a 0c f0 5c 07 ec 5a 7a ec d3 7c a4 a5 2d 18 3a 2b 60 06 7f f6 02 f4 a8 87 0f 20 1c 61 db 6c c0 9e 08 74 29 6b 2d 1c d4 e7 01 41 03 4a fc 08 45 c8 30 ce 10 57 98 c4 43 c4 c4 0f 78 07 ca 86 6c 6f aa 2e 8e de 88 61 5c d6 36 d4 60 03 59 8d c8 04 f0 b0 da d3 51 58 4f 22 e6 b1 67 47 d1 83 5b 05 b9 b9 ac 44 69 5f 5f ac 64 ce e1 63 0e f3 b8 15 45 48 99 45 78 ee 98 ca 55 ae 9a b5 36 30 d9 87 fc 13 a8 e4 0c b3 71 93 04 b2 cb 79 77 ff b1 6a d6 6d 59 1c ba 90 29 26 36 cd 71 96 2e 35 38 fc 90 55 ea 78 c1 79 26 31 2d 6d 33 94 20 48 42 a5 81 86 71 33 ee aa 10 0d 74 4d c1 89 06 ef 32 4c 61 5e 84 94 e1 c8 1a fd 72 a4 e5 ca 66 8e Data Ascii: /fD-.xAh4>k(0Vyw2,CXTmW/~!\Zz\|-:+` alt)k-AJE0WCxlo.a\6`YQXO"gG[Di__dcEHExU60qywjmY)&6q.58Uxy&1-m3 HBq3tM2La^rf
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 03 ac e7 93 d8 b4 04 d4 b0 2d 1f 89 7a 79 c6 55 01 69 87 20 32 8a 4b 10 07 f0 d0 83 73 48 62 cd 60 95 57 69 89 2a 26 19 92 60 6c ff 08 71 7b e9 0d 14 57 6a a1 c1 04 6b f9 94 61 37 91 0c 76 0a fb b5 94 94 b9 2a 82 65 0e ee e0 88 3b 57 9a e0 c6 09 c7 f2 99 82 f7 28 2e 27 1b 2a 10 07 6f 96 79 a6 d9 58 fa 15 8a 5a b9 98 3d a9 98 68 79 07 e7 e0 0e cf 94 99 c9 58 8e 41 a5 0a 37 50 09 14 a0 81 74 49 15 c9 72 08 28 00 25 c1 f9 88 9b 25 95 f8 d4 14 33 40 06 75 30 5f 04 99 9c ac 69 0e cc 00 09 67 e0 3d be b8 5b d2 d0 90 0a 36 b0 61 ba 79 8f 3d c2 2a 41 50 0c f8 d3 8f c1 04 1d 93 70 44 b5 17 93 b8 49 2f 1a d0 9b ab d0 7c 90 d5 4d a7 77 61 a4 94 0d ac 90 8d af 53 9f e5 a2 25 75 70 0a 8e 80 99 fc a9 49 f5 57 27 8c 60 0a e3 75 9c b7 79 72 7e f9 32 8d 22 0b 95 70 0c 3a Data Ascii: -zyUi 2KsHb`Wi&`lq{Wjka7ve;W(.'oyXZ=hyXA7PtIr(%%3@u0_ig=[6ay=APpDI/\|MwaS%upIW'`uyr~2"p:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.11	49841	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:18 UTC	365	OUT	GET /aaq/wf/wf-core-1.65.1-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	776	IN	HTTP/1.1 200 OK x-amz-id-2: 2Gx8ZAZ94Iq7l3s8CKczOT/DGI33+0Fvr/tgIAgcFIOZFwKJx0AxtXfcDN21Mo3Q7bJgZNEh88OUtZY1cjdIP46Qdpf4jR8kdRKxstGU/78= x-amz-request-id: 2FAD4C0C6P70BDTT Date: Wed, 09 Oct 2024 18:24:42 GMT Last-Modified: Thu, 18 Apr 2024 01:03:09 GMT ETag: "c1fbb54c4f22838f40ce99e7418fcd97" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: VaxAIobZ0y0iWnHdR00i8Xnb9e_2JypL Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 60378 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 410139 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 77 61 66 65 72 3d 74 28 29 3a 65 2e 77 61 66 65 72 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return fun
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 Data Ascii: le:!0,writable:!0}):e[t]=n,e}function c(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}function u(e){return Array.isArray(e)?e:Array.from(e)}function l(e,t){if(!(e instanceof t))throw new TypeE
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 20 45 7d 29 2c 6e 2e 64 28 6d 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 53 75 70 70 6f 72 74 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 54 6f 75 63 68 53 61 66 61 72 69 44 65 76 69 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 2c 6e 2e 64 28 6d 2c 22 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 50 57 41 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 3b 76 61 72 20 79 3d 7b 7d 3b 6e 2e 64 28 79 2c 22 69 73 56 69 73 69 62 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 29 2c 6e 2e 64 28 79 2c 22 64 65 62 6f 75 6e 63 65 22 2c Data Ascii: E}),n.d(m,"performanceMarkSupported",function(){return T}),n.d(m,"isTouchSafariDevice",function(){return k}),n.d(m,"smoothScroll",function(){return C}),n.d(m,"isPWA",function(){return S});var y={};n.d(y,"isVisible",function(){return G}),n.d(y,"debounce",
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 72 61 6d 65 74 65 72 56 61 6c 75 65 42 79 4e 61 6d 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 65 7d 29 2c 6e 2e 64 28 79 2c 22 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 65 7d 29 2c 6e 2e 64 28 79 2c 22 75 72 6c 69 66 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 65 7d 29 2c 6e 2e 64 28 79 2c 22 66 65 74 63 68 57 69 74 68 43 61 63 68 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 43 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: rameterValueByName",function(){return _e}),n.d(y,"setTransition",function(){return Ee}),n.d(y,"removeTransition",function(){return Te}),n.d(y,"urlify",function(){return ke}),n.d(y,"fetchWithCache",function(){return Ce}),n.d(y,"removeCookie",function(){ret
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 7d 28 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 65 29 3b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 6f 7a 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 43 6f 6e 6e 65 63 74 69 6f 6e 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 6e 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 3b 69 66 28 22 73 6c 6f 77 2d 32 67 22 3d 3d 3d 72 7c 7c 22 32 67 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 65 3d 21 30 2c 74 28 21 30 29 2c 21 30 7d 69 66 28 Data Ascii: prototype}(),E=function(){var e=void 0;return new Promise(function(t){if(void 0!==e)return t(e);var n=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection;if(n){var r=n.effectiveType;if("slow-2g"===r\|\|"2g"===r)return e=!0,t(!0),!0}if(
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 75 72 6e 20 65 7d 2c 41 3d 5b 22 72 69 64 22 2c 22 63 72 75 6d 62 22 2c 22 73 75 62 73 63 72 75 6d 62 22 5d 2c 78 3d 7b 6f 6d 69 74 3a 31 2c 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 3a 31 2c 69 6e 63 6c 75 64 65 3a 31 7d 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 22 2c 74 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 74 2b 22 3d 5b 5e 26 23 5d 2a 28 23 2e 2a 29 3f 24 22 29 2c 22 24 31 22 29 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 28 5b 3f 26 5d 29 22 2b Data Ascii: urn e},A=["rid","crumb","subscrumb"],x={omit:1,"same-origin":1,include:1},L=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"",t=arguments[1];return e.replace(new RegExp("[?&]"+t+"=[^&#](#.)?$"),"$1").replace(new RegExp("([?&])"+
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 6d 65 64 20 6f 75 74 20 66 6f 72 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 22 2b 45 2b 22 20 68 61 76 69 6e 67 20 73 74 61 72 74 54 69 6d 65 20 22 2b 61 2b 22 20 61 6e 64 20 65 6e 64 54 69 6d 65 20 22 2b 65 29 29 7d 2c 45 29 3b 54 3d 6d 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 26 26 22 63 61 63 68 65 46 69 72 73 74 22 3d 3d 3d 73 3f 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 2e 67 65 74 28 6f 2c 22 66 65 74 63 68 22 2c 7b 74 69 6d 65 6f 75 74 3a 31 65 33 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 74 6c 2c 72 3d 65 2e 76 61 6c 75 65 2c 69 3d 65 2e 63 61 63 68 65 64 54 69 6d 65 2c 6f 3d 28 44 61 74 65 2e 6e 6f 77 28 29 2d 69 29 2f 31 65 33 3b 74 72 79 7b 5f 3d 4a 53 4f 4e 2e 70 61 Data Ascii: med out for timeout value "+E+" having startTime "+a+" and endTime "+e))},E);T=m&&window.wafer.db&&"cacheFirst"===s?window.wafer.db.get(o,"fetch",{timeout:1e3}).then(function(e){if(e){var n=e.ttl,r=e.value,i=e.cachedTime,o=(Date.now()-i)/1e3;try{_=JSON.pa
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 4f 28 7b 7d 2c 65 2c 7b 5f 66 65 74 63 68 4d 65 74 61 3a 72 7d 29 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 7b 5f 66 65 74 63 68 4d 65 74 61 3a 72 7d 29 7d 29 7d 69 66 28 32 30 30 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 3b 69 66 28 6d 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 26 26 75 26 26 69 26 26 69 2e 6d 61 74 63 68 28 2f 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 6a 73 6f 6e 2f 69 29 29 7b 76 61 72 20 73 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 65 2e 63 6c 6f 6e 65 28 29 2e 74 65 78 74 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 Data Ascii: .then(function(e){t(O({},e,{_fetchMeta:r}))}).catch(function(){t({_fetchMeta:r})})}if(200===n){var i=e.headers.get("Content-Type");if(m&&window.wafer.db&&u&&i&&i.match(/application\/json/i)){var s=Date.now();e.clone().text().then(function(e){return window
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 74 61 3a 7b 64 75 72 61 74 69 6f 6e 3a 44 61 74 65 2e 6e 6f 77 28 29 2d 61 2c 73 6f 75 72 63 65 3a 63 3c 69 3f 22 43 41 43 48 45 5f 53 45 43 4f 4e 44 5f 41 54 54 45 4d 50 54 22 3a 22 43 41 43 48 45 5f 53 45 43 4f 4e 44 5f 41 54 54 45 4d 50 54 5f 53 54 41 4c 45 22 7d 7d 29 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 65 29 7d 29 7d 65 6c 73 65 20 72 28 65 29 7d 29 7d 7d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 73 73 65 74 73 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 72 3d 6e 2e 63 73 73 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 5b 5d 3a 72 3b 72 65 74 75 72 6e 20 69 3f 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 69 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 Data Ascii: ta:{duration:Date.now()-a,source:c<i?"CACHE_SECOND_ATTEMPT":"CACHE_SECOND_ATTEMPT_STALE"}}))}).catch(function(e){r(e)})}else r(e)})}})}).then(function(e){var t=e.assets,n=void 0===t?{}:t,r=n.css,i=void 0===r?[]:r;return i?Promise.all(i.map(function(e){var
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 3d 72 7c 7c 7a 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 6e 29 3b 65 2e 68 61 73 28 69 29 7c 7c 65 2e 73 65 74 28 69 2c 6e 65 77 20 4d 61 70 29 3b 76 61 72 20 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 65 2e 67 65 74 28 69 29 2e 64 65 6c 65 74 65 28 6f 29 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 6e 29 7d 2c 6e 29 3b 72 65 74 75 72 6e 20 65 2e 67 65 74 28 69 29 2e 73 65 74 28 6f 2c 6f 29 2c 6f 7d 29 2c 63 6c 65 61 72 41 6c 6c 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 65 26 26 65 2e 73 69 7a 65 29 7b 76 61 72 20 74 3d 21 30 2c 6e 3d 21 Data Ascii: =r\|\|z;if(!i)return setTimeout(t,n);e.has(i)\|\|e.set(i,new Map);var o=setTimeout(function(){var n=Array.prototype.slice.call(arguments);e.get(i).delete(o),t.apply(this,n)},n);return e.get(i).set(o,o),o}),clearAllTimeout:function(){if(e&&e.size){var t=!0,n=!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.11	49847	99.81.224.135	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:18 UTC	733	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1728908416462 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://currently.att.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	829	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:20:20 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1476 Connection: close X-TID: zdIkdy4dRcA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://currently.att.yahoo.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-1-v066-068216051.edge-irl1.demdex.com 3 ms set-cookie: demdex=40870874266210334561808127464824079183; Max-Age=15552000; Expires=Sat, 12 Apr 2025 12:20:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-14 12:20:20 UTC	1476	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 34 30 39 36 37 30 35 36 36 38 38 34 38 32 34 36 32 32 36 31 38 33 34 36 33 34 32 33 31 34 34 30 33 38 31 32 39 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"40967056688482462261834634231440381293","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.11	49851	67.195.204.151	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:20 UTC	1263	OUT	GET /?.lang=en-US&src=homepage&partner=sbc&.done=https%3A%2F%2Fcurrently.att.yahoo.com%2F&pspid=1197744451&activity=ybar-signin HTTP/1.1 Host: login.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CvVersion%7C5.2.0
2024-10-14 12:20:20 UTC	811	IN	HTTP/1.1 302 Found Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Age: 0 Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: AS=v=1&s=GHbgQ5Qz; path=/; domain=login.yahoo.com; secure; HttpOnly Cross-Origin-Opener-Policy: same-origin Location: https://login.yahoo.com/saml2/atthaloc/request?yid=&src=homepage&done=https%3A%2F%2Fcurrently.att.yahoo.com%2F Vary: Accept, Accept-Encoding Content-Type: text/html; charset=utf-8 Content-Length: 280 Date: Mon, 14 Oct 2024 12:20:20 GMT Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-10-14 12:20:20 UTC	280	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 61 6d 6c 32 2f 61 74 74 68 61 6c 6f 63 2f 72 65 71 75 65 73 74 3f 79 69 64 3d 26 61 6d 70 3b 73 72 63 3d 68 6f 6d 65 70 61 67 65 26 61 6d 70 3b 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 72 72 65 6e 74 6c 79 2e 61 74 74 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 22 3e 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 61 6d 6c 32 2f 61 74 74 68 61 6c 6f 63 2f 72 65 71 75 65 73 74 3f 79 69 64 3d 26 61 6d 70 3b 73 72 63 3d 68 6f 6d 65 70 61 67 65 26 61 6d 70 3b 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 72 72 65 6e 74 6c 79 Data Ascii: <p>Found. Redirecting to <a href="https://login.yahoo.com/saml2/atthaloc/request?yid=&src=homepage&done=https%3A%2F%2Fcurrently.att.yahoo.com%2F">https://login.yahoo.com/saml2/atthaloc/request?yid=&src=homepage&done=https%3A%2F%2Fcurrently

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.11	49848	67.195.204.151	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:20 UTC	1470	OUT	GET /saml2/atthaloc/request?yid=&src=homepage&done=https%3A%2F%2Fcurrently.att.yahoo.com%2F HTTP/1.1 Host: login.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513218%7C6%7CMCAAMB-1729513218%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1728915618s%7CNONE%7CvVersion%7C5.2.0; AS=v=1&s=GHbgQ5Qz
2024-10-14 12:20:20 UTC	1204	IN	HTTP/1.1 302 Found Date: Mon, 14 Oct 2024 12:20:20 GMT Cache-Control: no-store Cache-Control: no-cache Cache-Control: must-revalidate Pragma: no-cache Expires: 0 X-Frame-Options: DENY X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15552000 Server: ATS Referrer-Policy: strict-origin-when-cross-origin Location: https://att-yahoo.att.net/FIM/sps/ATT-Yahoo/saml20/login?SAMLRequest=jVJbT8IwFP4rS9%2B7GyDasBGUEElQCQwffDGlPbCarZ1tt%2Bi%2FdzcS4sM06cs5Pf1up7P5V545FWgjlIxQ4PrIAckUF%2FIcoUOywrdoHs8MzbOwIIvSpnIHnyUY69QPpSHdTYRKLYmiRhgiaQ6GWEb2i6cNCV2fFFpZxVSGnIUxoG1N9aCkKXPQe9CVYHDYbSKUWlsY4nmZOgvpftNUKZep3GspPGptSjPFvIpmglMLyFkpzaDVFCGry7qzXkbofXTko9FkQjGb3jE8PnLAd5OAYs7HNAjoFDjc1KPGlLCWxlJpIxT64RgHPg7GSRCS0K%2BPO5kGb8jZ9uLvhexCGXJ67IYMeUySLd6%2B7JMWoBIc9HM9%2FYdJ5LxeNlGjoT530krV14EPq6CXlFE8SDfzrvE7NrIvjx%2FArtf7b7IOoPG5XjbLyakdftt0BMendpQUjXdjQVoUl5LDSUjgncYeNO6rXmNf%2FvqY8Q8%3D&RelayState=https%3A%2F%2Fcurrently.att.yahoo.com%2F&.lts=1728908420&Target=https%3A%2F%2Fcurrently.att.yahoo.com%2F&ForceAuthn=true Content-Length: 0 Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.11	49850	188.125.72.139	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:20 UTC	1223	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197744451&yhlCT=2&yhlBTMS=1728908416548&yhlClientVer=3.54.3&yhlRnd=Dn4tJHbiX759G0kv&yhlCompressed=0 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 13707 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://currently.att.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CvVersion%7C5.2.0
2024-10-14 12:20:20 UTC	13707	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 77 4d 44 57 63 43 45 44 61 54 53 48 4b 50 58 6e 75 54 4e 62 55 76 49 4e 47 41 31 63 49 46 45 67 45 42 41 51 46 64 44 6d 63 57 5a 39 78 48 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6a 38 46 4c 66 4d 48 49 37 59 43 34 4c 6d 48 6f 4c 53 74 4d 78 38 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 34 2e 33 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA%26S%3DAQAAAj8FLfMHI7YC4LmHoLStMx8%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.54.3%22%2C%22A_cn%22%3A%22ANALYT
2024-10-14 12:20:20 UTC	913	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://currently.att.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 5 date: Mon, 14 Oct 2024 12:20:20 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:20 GMT; Max-Age=0; Domain=udc.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:20 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.11	49849	188.125.72.139	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:20 UTC	1222	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197744451&yhlCT=2&yhlBTMS=1728908416640&yhlClientVer=3.54.3&yhlRnd=97kYXeU3Y6Eituzw&yhlCompressed=0 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 6095 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://currently.att.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CvVersion%7C5.2.0
2024-10-14 12:20:20 UTC	6095	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 77 4d 44 57 63 43 45 44 61 54 53 48 4b 50 58 6e 75 54 4e 62 55 76 49 4e 47 41 31 63 49 46 45 67 45 42 41 51 46 64 44 6d 63 57 5a 39 78 48 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6a 38 46 4c 66 4d 48 49 37 59 43 34 4c 6d 48 6f 4c 53 74 4d 78 38 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 34 2e 33 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA%26S%3DAQAAAj8FLfMHI7YC4LmHoLStMx8%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.54.3%22%2C%22A_cn%22%3A%22ANALYT
2024-10-14 12:20:20 UTC	913	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://currently.att.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 2 date: Mon, 14 Oct 2024 12:20:20 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:20 GMT; Max-Age=0; Domain=udc.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:20 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.11	49839	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:20 UTC	559	OUT	GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	699	IN	HTTP/1.1 200 OK x-amz-id-2: J1ynaDtSto1WGe1vp1ESFmDVVjJHY1ZfP+P8EFf9F4ODRQf6Mll/BEceEBOQaeXDKDTW8/ihIo8= x-amz-request-id: WC6ZE4Y82BD8QV90 Date: Thu, 26 Sep 2024 15:52:22 GMT Last-Modified: Tue, 19 May 2020 03:33:21 GMT ETag: "ca243b22264dca7a4a899c51cc2dc963" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public, immutable Accept-Ranges: bytes Content-Type: application/x-javascript Server: ATS Content-Length: 158 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:20 UTC	158	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 64 69 76 20 69 64 3d 22 61 64 76 65 72 74 69 73 65 6d 65 6e 74 2d 74 68 61 6d 62 61 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 44 69 73 70 6c 61 79 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 3c 2f 64 69 76 3e 27 29 3b 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 2c 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 0a Data Ascii: document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.11	49837	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:20 UTC	543	OUT	GET /aaq/benji/benji-2.1.135.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:20 UTC	776	IN	HTTP/1.1 200 OK x-amz-id-2: eDbze3uTfSF/XMjc5T9XT+LZ+hfyFsJE2q5SXU20RJwq3cDz2X4ZP2wtN59OmdYOSyxqjumVY65lidi+HcM978E8Zq1xlCF8R4wx7Gr5OOk= x-amz-request-id: MWYVXG4BBXT2KQAS Date: Thu, 10 Oct 2024 19:03:19 GMT Last-Modified: Thu, 10 Oct 2024 16:27:13 GMT ETag: "0b40b3e560acdd82e1faf314cbce5299" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: vyKsJjFDrylXlE7wccX97sIb6z8In3aV Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 88659 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 321423 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 61 73 73 65 72 74 69 76 65 3a 7b 7d 2c 62 65 6e 6a 69 3a 7b 7d 2c 67 6f 6f 67 6c 65 74 61 67 3a 7b 63 6d 64 3a 5b 5d 7d 2c 70 62 6a 73 3a 7b 71 75 65 3a 5b 5d 7d 2c 59 41 48 4f 4f 3a 7b 7d 7d 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 7c 7c 28 65 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 65 2e 6d 61 70 28 28 65 3d 3e 65 2e 74 68 65 6e 28 28 65 3d 3e 28 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 29 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 28 7b 72 Data Ascii: !function(){"use strict";const e="undefined"!=typeof window?window:{assertive:{},benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({r
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 31 33 33 31 2c 49 6e 66 69 6e 69 74 79 22 3a 5b 31 36 2c 33 5d 2c 22 34 38 31 2c 31 33 33 30 22 3a 5b 34 30 2c 39 5d 7d 2c 73 69 7a 65 3a 5b 33 2c 31 5d 7d 2c 4c 69 67 68 74 68 6f 75 73 65 3a 7b 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 22 30 2c 49 6e 66 69 6e 69 74 79 22 3a 5b 39 2c 31 36 5d 7d 2c 73 69 7a 65 3a 5b 32 2c 32 5d 7d 2c 53 6d 61 72 74 41 73 73 65 74 57 69 64 67 65 74 4c 61 72 67 65 3a 7b 73 69 7a 65 3a 5b 38 30 30 2c 36 33 35 5d 7d 2c 53 70 6f 74 6c 69 67 68 74 3a 7b 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 22 30 2c 34 38 30 22 3a 5b 38 2c 39 5d 7d 2c 73 69 7a 65 3a 5b 33 2c 32 5d 7d 2c 54 72 61 64 65 4e 6f 77 3a 7b 73 69 7a 65 3a 5b 32 38 30 2c 35 35 5d 7d 7d 2c 6b 3d 7b 22 5b 31 34 34 30 2c 31 30 32 34 5d 22 3a 22 4c 6f 67 69 6e 22 2c 22 5b 32 Data Ascii: 1331,Infinity":[16,3],"481,1330":[40,9]},size:[3,1]},Lighthouse:{breakpoints:{"0,Infinity":[9,16]},size:[2,2]},SmartAssetWidgetLarge:{size:[800,635]},Spotlight:{breakpoints:{"0,480":[8,9]},size:[3,2]},TradeNow:{size:[280,55]}},k={"[1440,1024]":"Login","[2
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 7d 2c 51 3d 7b 63 6c 69 63 6b 3a 22 63 6c 69 63 6b 22 2c 6e 6f 63 6f 6e 74 65 6e 74 3a 22 6e 6f 63 6f 6e 74 65 6e 74 22 2c 72 65 6e 64 65 72 3a 22 72 65 6e 64 65 72 22 7d 2c 4a 3d 22 61 75 63 74 69 6f 6e 45 6e 64 22 2c 4b 3d 22 61 75 63 74 69 6f 6e 49 6e 69 74 22 2c 58 3d 22 62 69 64 57 6f 6e 22 2c 5a 3d 7b 65 30 3a 22 2d 65 30 22 2c 65 31 3a 22 2d 65 31 22 2c 45 49 44 53 5f 55 52 4c 3a 22 69 64 78 2e 6c 69 61 64 6d 2e 63 6f 6d 22 2c 48 42 5f 55 49 5f 4d 4f 44 3a 22 68 62 5f 75 69 64 5f 6d 6f 64 22 2c 4c 49 5f 4f 46 46 3a 22 6c 69 76 65 49 6e 74 65 6e 74 49 64 5f 6f 66 66 22 2c 4c 49 5f 4f 4e 5f 45 4e 52 49 43 48 45 44 3a 22 6c 69 76 65 69 6e 74 65 6e 74 69 64 5f 6f 6e 5f 65 6e 72 69 63 68 65 64 22 2c 4c 49 5f 4f 4e 5f 4e 4f 54 5f 45 4e 52 49 43 48 45 44 Data Ascii: },Q={click:"click",nocontent:"nocontent",render:"render"},J="auctionEnd",K="auctionInit",X="bidWon",Z={e0:"-e0",e1:"-e1",EIDS_URL:"idx.liadm.com",HB_UI_MOD:"hb_uid_mod",LI_OFF:"liveIntentId_off",LI_ON_ENRICHED:"liveintentid_on_enriched",LI_ON_NOT_ENRICHED
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 22 6d 6f 6e 65 79 22 2c 65 2e 6d 6f 76 69 65 73 3d 22 6d 6f 76 69 65 73 22 2c 65 2e 6d 75 73 69 63 3d 22 6d 75 73 69 63 22 2c 65 2e 6e 65 77 73 3d 22 6e 65 77 73 22 2c 65 2e 72 69 76 61 6c 73 3d 22 72 69 76 61 6c 73 22 2c 65 2e 73 70 6f 72 74 73 3d 22 73 70 6f 72 74 73 22 2c 65 2e 73 74 79 6c 65 3d 22 73 74 79 6c 65 22 2c 65 2e 74 65 63 68 3d 22 74 65 63 68 22 2c 65 2e 74 65 63 68 63 72 75 6e 63 68 3d 22 74 65 63 68 63 72 75 6e 63 68 22 7d 28 61 65 7c 7c 28 61 65 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 79 61 68 6f 6f 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 6d 61 69 6c 22 2c 65 2e 61 6f 6c 5f 77 65 62 6d 61 69 6c 3d 22 61 6f 6c 5f 77 65 62 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 72 6f 67 65 72 73 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f Data Ascii: "money",e.movies="movies",e.music="music",e.news="news",e.rivals="rivals",e.sports="sports",e.style="style",e.tech="tech",e.techcrunch="techcrunch"}(ae\|\|(ae={})),function(e){e.yahoo_mail="yahoo_mail",e.aol_webmail="aol_webmail",e.yahoo_rogers_mail="yahoo_
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 5f 6d 61 69 6c 5d 3a 22 64 34 39 70 68 38 6a 7a 33 77 65 77 67 22 2c 5b 63 65 2e 79 61 68 6f 6f 5f 61 74 74 5f 6d 61 69 6c 5d 3a 22 64 34 39 70 68 38 6a 7a 33 77 65 77 67 22 2c 5b 63 65 2e 79 61 68 6f 6f 5f 66 72 6f 6e 74 69 65 72 5f 6d 61 69 6c 5d 3a 22 64 34 39 70 68 38 6a 7a 33 77 65 77 67 22 2c 5b 63 65 2e 79 61 68 6f 6f 5f 76 65 72 69 7a 6f 6e 5f 6d 61 69 6c 5d 3a 22 64 34 39 70 68 38 6a 7a 33 77 65 77 67 22 2c 5b 63 65 2e 61 6f 6c 5f 77 65 62 6d 61 69 6c 5d 3a 22 64 32 75 65 76 33 69 33 36 35 7a 35 71 38 22 2c 5b 63 65 2e 79 61 68 6f 6f 5f 6c 6f 67 69 6e 5d 3a 22 64 31 74 71 72 73 37 76 7a 39 34 64 39 6b 22 2c 5b 63 65 2e 61 6f 6c 5f 6c 6f 67 69 6e 5d 3a 22 64 33 61 78 68 35 65 6d 67 35 65 63 65 30 22 2c 64 65 66 61 75 6c 74 3a 22 64 39 70 6d 73 67 Data Ascii: _mail]:"d49ph8jz3wewg",[ce.yahoo_att_mail]:"d49ph8jz3wewg",[ce.yahoo_frontier_mail]:"d49ph8jz3wewg",[ce.yahoo_verizon_mail]:"d49ph8jz3wewg",[ce.aol_webmail]:"d2uev3i365z5q8",[ce.yahoo_login]:"d1tqrs7vz94d9k",[ce.aol_login]:"d3axh5emg5ece0",default:"d9pmsg
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 31 32 30 38 31 2c 31 31 39 37 38 31 32 30 38 32 2c 31 31 39 37 38 31 32 30 38 33 2c 39 36 33 39 39 38 38 35 34 2c 31 31 38 33 38 33 36 31 39 33 2c 31 31 39 37 38 31 32 31 35 30 2c 31 31 39 37 38 31 32 31 34 36 2c 31 31 39 37 38 31 32 31 32 38 2c 31 31 39 37 38 31 32 31 32 35 2c 31 31 39 37 38 31 32 31 32 36 2c 31 31 39 37 38 31 32 31 32 37 2c 31 31 39 37 38 31 32 31 33 33 2c 31 31 39 37 38 31 32 31 33 32 2c 31 31 39 37 38 31 32 31 33 34 2c 31 31 39 37 38 31 32 31 32 39 2c 31 31 39 37 38 31 32 31 33 30 2c 31 31 39 37 38 31 32 31 33 31 2c 31 31 38 37 33 33 36 32 30 31 2c 39 36 34 32 39 38 38 35 34 2c 31 31 38 37 33 33 36 32 30 32 2c 31 31 39 37 38 31 32 31 35 33 2c 31 31 39 37 38 31 32 31 35 34 2c 31 31 39 37 38 31 32 31 35 35 2c 31 31 39 37 38 31 32 31 35 Data Ascii: 12081,1197812082,1197812083,963998854,1183836193,1197812150,1197812146,1197812128,1197812125,1197812126,1197812127,1197812133,1197812132,1197812134,1197812129,1197812130,1197812131,1187336201,964298854,1187336202,1197812153,1197812154,1197812155,119781215
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 6e 74 22 2c 5b 61 65 2e 66 69 6e 61 6e 63 65 5d 3a 22 79 66 69 6e 22 2c 5b 61 65 2e 66 70 5d 3a 22 79 68 70 22 2c 5b 61 65 2e 67 6d 61 5d 3a 22 79 6e 65 77 73 22 2c 5b 61 65 2e 6c 69 66 65 73 74 79 6c 65 5d 3a 22 79 6c 69 66 65 22 2c 5b 61 65 2e 6d 6f 6e 65 79 5d 3a 22 79 66 69 6e 22 2c 5b 61 65 2e 6d 6f 76 69 65 73 5d 3a 22 79 6d 6f 76 22 2c 5b 61 65 2e 6d 75 73 69 63 5d 3a 22 79 65 6e 74 22 2c 5b 61 65 2e 6e 65 77 73 5d 3a 22 79 6e 65 77 73 22 2c 5b 61 65 2e 73 70 6f 72 74 73 5d 3a 22 79 73 70 6f 72 74 73 22 2c 5b 61 65 2e 73 74 79 6c 65 5d 3a 22 79 6c 69 66 65 22 2c 5b 61 65 2e 74 65 63 68 5d 3a 22 79 74 65 63 68 22 7d 2c 6b 65 3d 5b 22 63 6f 6d 6d 65 72 63 65 41 72 74 69 63 6c 65 54 79 70 65 22 2c 22 65 78 74 72 61 63 74 65 64 4b 65 79 57 6f 72 64 73 Data Ascii: nt",[ae.finance]:"yfin",[ae.fp]:"yhp",[ae.gma]:"ynews",[ae.lifestyle]:"ylife",[ae.money]:"yfin",[ae.movies]:"ymov",[ae.music]:"yent",[ae.news]:"ynews",[ae.sports]:"ysports",[ae.style]:"ylife",[ae.tech]:"ytech"},ke=["commerceArticleType","extractedKeyWords
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 30 30 5f 36 30 30 22 5d 2c 74 6f 70 5f 72 69 67 68 74 5f 73 74 61 63 6b 3a 5b 22 4c 52 45 43 22 2c 22 4d 4f 4e 22 5d 7d 2c 51 65 3d 5b 22 61 79 5f 66 6c 6f 6f 72 22 2c 22 61 79 5f 66 6c 6f 6f 72 5f 6d 22 2c 22 61 79 5f 66 6c 6f 6f 72 5f 67 22 2c 22 61 79 5f 68 61 73 68 22 2c 22 68 62 5f 61 64 6f 6d 61 69 6e 22 2c 22 68 62 5f 61 64 69 64 22 2c 22 68 62 5f 62 69 64 64 65 72 22 2c 22 68 62 5f 62 69 64 64 65 72 5f 73 65 61 74 69 64 22 2c 22 68 62 5f 63 61 63 68 65 5f 68 6f 73 74 22 2c 22 68 62 5f 63 61 63 68 65 5f 69 64 22 2c 22 68 62 5f 63 61 63 68 65 5f 70 61 74 68 22 2c 22 68 62 5f 63 61 63 68 65 5f 72 65 67 69 6f 6e 22 2c 22 68 62 5f 63 72 69 64 22 2c 22 68 62 5f 64 65 61 6c 22 2c 22 68 62 5f 64 73 70 22 2c 22 68 62 5f 64 74 22 2c 22 68 62 5f 66 6f 72 6d Data Ascii: 00_600"],top_right_stack:["LREC","MON"]},Qe=["ay_floor","ay_floor_m","ay_floor_g","ay_hash","hb_adomain","hb_adid","hb_bidder","hb_bidder_seatid","hb_cache_host","hb_cache_id","hb_cache_path","hb_cache_region","hb_crid","hb_deal","hb_dsp","hb_dt","hb_form
2024-10-14 12:20:20 UTC	1300	IN	Data Raw: 2c 6f 3d 44 61 74 65 2e 6e 6f 77 28 29 7d 29 29 7d 63 6f 6e 73 74 20 73 74 3d 22 64 65 66 61 75 6c 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 2c 74 2c 6e 29 7b 6c 65 74 20 69 2c 73 2c 6f 2c 72 2c 61 3d 2d 31 3b 69 66 28 22 75 70 22 3d 3d 3d 6e 29 66 6f 72 28 69 3d 65 2e 74 6f 70 2c 73 3d 65 2e 62 6f 74 74 6f 6d 3b 69 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 69 2b 73 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 65 2e 6c 65 66 74 2c 61 29 2c 6f 3d 3d 3d 74 3f 73 3d 61 2d 31 3a 69 3d 61 2b 31 3b 65 6c 73 65 20 69 66 28 22 64 6f 77 6e 22 3d 3d 3d 6e 29 66 6f 72 28 69 3d 65 2e 74 6f 70 2c 73 3d 65 2e 62 6f 74 74 6f 6d 3b 69 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 69 2b Data Ascii: ,o=Date.now()}))}const st="default";function ot(e,t,n){let i,s,o,r,a=-1;if("up"===n)for(i=e.top,s=e.bottom;i<=s;)a=Math.floor((i+s)/2),o=document.elementFromPoint(e.left,a),o===t?s=a-1:i=a+1;else if("down"===n)for(i=e.top,s=e.bottom;i<=s;)a=Math.floor((i+
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 7b 62 6f 74 74 6f 6d 3a 64 2c 6c 65 66 74 3a 72 2c 72 69 67 68 74 3a 61 2c 74 6f 70 3a 63 7d 2c 74 29 29 7b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 7b 74 6f 70 3a 69 2c 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 7d 3d 65 3b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 6f 74 28 7b 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 69 7d 2c 74 2c 22 75 70 22 29 2c 61 3d 6f 74 28 7b 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 64 6f 77 6e 22 29 2c 63 3d 6f 74 28 7b 62 6f 74 74 6f 6d 3a 61 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d Data Ascii: eturn!0}return!1}({bottom:d,left:r,right:a,top:c},t)){const e=function(e,t,n){const{top:i,bottom:s,left:o,right:r}=e;try{const e=ot({bottom:s,left:o,right:r,top:i},t,"up"),a=ot({bottom:s,left:o,right:r,top:e},t,"down"),c=ot({bottom:a,left:o,right:r,top:e}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.11	49854	34.248.235.56	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:20 UTC	758	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: att.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=40870874266210334561808127464824079183
2024-10-14 12:20:21 UTC	607	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:20:21 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: 27z/ianjR6M= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Thu, 10 Oct 2024 08:50:57 GMT DCS: dcs-prod-irl1-1-v066-0e18d3732.edge-irl1.demdex.com 0 ms
2024-10-14 12:20:21 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.11	49853	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:21 UTC	401	OUT	GET /cv/apiv2/partner-portals/att/adobe_analytics/1.1.20/s_code_yahoo.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:21 UTC	711	IN	HTTP/1.1 200 OK x-amz-id-2: GMjyL68FoE5x8lZrgod/X5HMY8Y7frZ+EqenJPkLdfuNVQqQtb0TGeGBgJJuszZT5yNIPqEHBpQ= x-amz-request-id: RF2MW8KY1YZZ1CSW Date: Sat, 07 Sep 2024 19:13:26 GMT Last-Modified: Tue, 11 Jun 2024 06:43:08 GMT ETag: "76e810dd9dcfac158af86fc92f9f05d2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript; charset=utf-8 Server: ATS Content-Length: 119177 Referrer-Policy: no-referrer-when-downgrade Age: 3172017 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 0a 2f 2a 0a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 44 4f 20 4e 4f 54 20 41 4c 54 45 52 20 41 4e 59 54 48 49 4e 47 20 42 45 4c 4f 57 20 54 48 49 53 20 4c 49 4e 45 20 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 0a 20 41 64 6f 62 65 20 56 69 73 69 74 6f 72 20 41 50 49 20 66 6f 72 20 4a 61 76 61 53 63 72 69 70 74 20 76 65 72 73 69 6f 6e 3a 20 31 2e 31 0a 20 43 6f 70 79 72 69 67 68 74 20 31 39 39 36 2d 32 30 31 34 20 41 64 6f 62 65 2c 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 20 4d 6f 72 65 20 69 6e 66 6f 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6d 6e 69 74 75 72 65 2e 63 6f 6d 0a 20 4c 61 73 74 20 55 70 64 61 74 65 64 3a 20 30 32 2d 30 31 2d 32 30 31 36 0a 2a 2f 0a 2f 2a 2a 0a Data Ascii: /* ============== DO NOT ALTER ANYTHING BELOW THIS LINE ! ============ Adobe Visitor API for JavaScript version: 1.1 Copyright 1996-2014 Adobe, Inc. All Rights Reserved More info available at http://www.omniture.com Last Updated: 02-01-2016//*
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 63 68 28 65 29 7b 7d 7d 7d 2c 65 78 65 63 75 74 65 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 74 7c 7c 65 26 26 21 55 2e 69 73 4f 62 6a 65 63 74 45 6d 70 74 79 28 65 29 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 76 6f 69 64 20 30 21 3d 3d 65 5b 74 5d 3f 65 5b 74 5d 3a 22 22 3b 74 68 69 73 2e 65 78 65 63 75 74 65 28 74 2c 6e 29 7d 2c 74 68 69 73 29 7d 2c 68 61 73 43 61 6c 6c 62 61 63 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 29 2e 6c 65 6e 67 74 68 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 Data Ascii: ch(e){}}},executeAll:function(e,t){(t\|\|e&&!U.isObjectEmpty(e))&&Object.keys(this.callbacks).forEach(function(t){var n=void 0!==e[t]?e[t]:"";this.execute(t,n)},this)},hasCallbacks:function(){return Boolean(Object.keys(this.callbacks).length)}}}function i(e
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 65 74 3a 4e 65 2c 72 65 6d 6f 76 65 3a 4e 65 7d 3b 76 61 72 20 72 3d 7b 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 72 65 6d 6f 76 65 28 74 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2e 67 65 74 28 74 29 2c 6e 3d 7b 7d 3b 74 72 79 7b 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 6e 3d 7b 7d 7d 72 65 74 75 72 6e 20 6e 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 3b 76 61 72 20 61 3d 72 2e 67 65 74 28 29 2c 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2c 65 29 3b 69 2e 73 65 74 28 74 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 2c 7b 64 6f 6d 61 69 6e 3a 6e 2e 6f 70 74 49 6e 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 7c 7c 22 22 2c 63 6f Data Ascii: et:Ne,remove:Ne};var r={remove:function(){i.remove(t)},get:function(){var e=i.get(t),n={};try{n=JSON.parse(e)}catch(e){n={}}return n},set:function(e,n){n=n\|\|{};var a=r.get(),o=Object.assign(a,e);i.set(t,JSON.stringify(o),{domain:n.optInCookieDomain\|\|"",co
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 76 61 6c 73 60 21 22 29 3b 76 61 72 20 6d 3d 64 28 7b 63 6f 6f 6b 69 65 4e 61 6d 65 3a 22 61 64 6f 62 65 75 6a 73 2d 6f 70 74 69 6e 22 7d 2c 7b 63 6f 6f 6b 69 65 73 3a 70 7d 29 2c 68 3d 74 68 69 73 2c 5f 3d 6c 65 28 68 29 2c 43 3d 5f 65 28 29 2c 53 3d 4c 65 28 67 29 2c 49 3d 4c 65 28 6f 29 2c 76 3d 73 3f 6d 2e 67 65 74 28 29 3a 7b 7d 2c 44 3d 7b 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 50 65 28 65 29 7c 7c 74 26 26 50 65 28 74 29 3f 64 65 2e 43 4f 4d 50 4c 45 54 45 3a 64 65 2e 50 45 4e 44 49 4e 47 7d 28 53 2c 76 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6b 65 28 68 65 2c 21 72 29 3b 72 65 74 75 72 6e 20 72 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 69 2c 65 2c 74 2c 6e 29 3a Data Ascii: vals`!");var m=d({cookieName:"adobeujs-optin"},{cookies:p}),h=this,_=le(h),C=_e(),S=Le(g),I=Le(o),v=s?m.get():{},D={},y=function(e,t){return Pe(e)\|\|t&&Pe(t)?de.COMPLETE:de.PENDING}(S,v),b=function(e,t,n){var i=ke(he,!r);return r?Object.assign({},i,e,t,n):
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 2e 73 74 61 74 75 73 3d 3d 3d 64 65 2e 50 45 4e 44 49 4e 47 7d 7d 2c 69 73 43 6f 6d 70 6c 65 74 65 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 2e 73 74 61 74 75 73 3d 3d 3d 64 65 2e 43 4f 4d 50 4c 45 54 45 7d 7d 2c 5f 5f 70 6c 75 67 69 6e 73 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 44 29 7d 7d 2c 69 73 49 61 62 43 6f 6e 74 65 78 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 3d 6e 75 6c 6c 2c 65 2e 63 61 6c 6c 28 65 2c 6e 65 77 20 66 28 22 54 68 65 20 63 61 6c 6c 20 74 6f 6f 6b 20 6c 6f Data Ascii: on(){return h.status===de.PENDING}},isComplete:{get:function(){return h.status===de.COMPLETE}},__plugins:{get:function(){return Object.keys(D)}},isIabContext:{get:function(){return l}}})}function g(e,t){function n(){r=null,e.call(e,new f("The call took lo
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 74 5d 7d 29 3b 72 65 74 75 72 6e 20 69 26 26 72 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 65 2e 6e 61 6d 65 3d 22 69 61 62 50 6c 75 67 69 6e 22 2c 65 2e 76 65 72 73 69 6f 6e 3d 22 30 2e 30 2e 32 22 3b 76 61 72 20 74 2c 6e 3d 5f 65 28 29 2c 69 3d 7b 74 72 61 6e 73 70 61 72 65 6e 63 79 41 6e 64 43 6f 6e 73 65 6e 74 44 61 74 61 3a 6e 75 6c 6c 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 72 65 74 75 Data Ascii: ery(function(t){return!0===e.purpose.consents[t]});return i&&r}function _(){var e=this;e.name="iabPlugin",e.version="0.0.2";var t,n=_e(),i={transparencyAndConsentData:null},r=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};retu
2024-10-14 12:20:21 UTC	77	IN	Data Raw: 67 65 74 54 43 44 61 74 61 22 2c 32 2c 65 2c 74 29 7d 7d 76 61 72 20 43 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 Data Ascii: getTCData",2,e,t)}}var C="undefined"!=typeof globalThis?globalThis:"undefined
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 2b 2b 69 29 7b 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 66 6f 72 28 74 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 74 29 26 26 28 65 5b 74 5d 3d 6e 5b 74 5d 29 7d 72 65 Data Ascii: "!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};Object.assign=Object.assign\|\|function(e){for(var t,n,i=1;i<arguments.length;++i){n=arguments[i];for(t in n)Object.prototype.hasOwnProperty.call(n,t)&&(e[t]=n[t])}re
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 65 28 30 2c 74 29 2c 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 3d 72 2c 69 2e 73 65 74 53 74 61 74 65 41 6e 64 50 75 62 6c 69 73 68 28 61 29 2c 6e 28 72 29 2c 72 7d 7d 74 68 69 73 2e 67 65 74 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 7c 7c 74 3b 76 61 72 20 69 3d 74 68 69 73 2e 66 69 6e 64 46 69 65 6c 64 28 50 2e 4d 43 4d 49 44 2c 65 29 2c 72 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 50 2e 4d 43 4d 49 44 2c 65 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 Data Ascii: function(e){function t(){}function n(t,n){var i=this;return function(){var r=e(0,t),a={};return a[t]=r,i.setStateAndPublish(a),n(r),r}}this.getMarketingCloudVisitorID=function(e){e=e\|\|t;var i=this.findField(P.MCMID,e),r=n.call(this,P.MCMID,e);return void
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 4f 66 28 22 57 69 6e 64 6f 77 73 20 4e 54 20 36 22 29 3e 3d 30 7d 3b 6e 2e 67 65 74 49 65 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3a 69 28 29 3f 37 3a 6e 75 6c 6c 7d 2c 6e 2e 65 6e 63 6f 64 65 41 6e 64 42 75 69 6c 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 2e 6a 6f 69 6e 28 74 29 7d 2c 6e 2e 69 73 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 65 28 74 29 26 26 21 31 3d 3d 3d 41 Data Ascii: Of("Windows NT 6")>=0};n.getIeVersion=function(){return document.documentMode?document.documentMode:i()?7:null},n.encodeAndBuildRequest=function(e,t){return e.map(encodeURIComponent).join(t)},n.isObject=function(t){return null!==t&&"object"===e(t)&&!1===A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.11	49855	52.210.96.13	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:21 UTC	519	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1728908416462 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=40870874266210334561808127464824079183
2024-10-14 12:20:21 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 12:20:21 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1476 Connection: close X-TID: VtDnkvGRT74= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-1-v066-0cf635aa8.edge-irl1.demdex.com 2 ms set-cookie: demdex=40870874266210334561808127464824079183; Max-Age=15552000; Expires=Sat, 12 Apr 2025 12:20:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-14 12:20:21 UTC	1476	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 34 30 39 36 37 30 35 36 36 38 38 34 38 32 34 36 32 32 36 31 38 33 34 36 33 34 32 33 31 34 34 30 33 38 31 32 39 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"40967056688482462261834634231440381293","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.11	49856	87.248.100.215	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:21 UTC	1027	OUT	GET /__rapid-worker-1.2.js HTTP/1.1 Host: currently.att.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513218%7C6%7CMCAAMB-1729513218%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1728915618s%7CNONE%7CvVersion%7C5.2.0
2024-10-14 12:20:21 UTC	1260	IN	HTTP/1.1 200 OK x-amz-id-2: jUAuD+qjnZqgE5tlI9MOhk7XyDsGr01G6StMDoChqhYl1GxHM3Sr3GNSzQHSOHkYRjIEz8hAWeI= x-amz-request-id: 317WW0W3VE34P2MX Date: Fri, 23 Aug 2024 07:14:55 GMT Last-Modified: Tue, 06 Mar 2018 20:46:57 GMT ETag: "e2202e6ed6ef52cec2c4a875c99225ba" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-meta-created-date: Wed, 15 Oct 2014 18:48:37 GMT x-amz-meta-mbst-etag: "YM:1:e64293ae-a913-4bb2-8dd1-87431f3be4230005057a946243f1" x-amz-meta-x-ysws-mbst-vtime: 1413398917170161 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public x-amz-version-id: null Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 15697 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4511127 ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1 Connection: close X-Frame-Options: SAMEORIGIN Set-Cookie: AMCVS_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:21 GMT; Max-Age=0; Domain=currently.att.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCVS_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:21 GMT; Max-Age=0; Domain=att.yahoo.com; Path=; Secure; HttpOnly
2024-10-14 12:20:21 UTC	703	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 4d 43 56 53 5f 35 35 36 33 33 46 37 41 35 33 34 35 33 35 31 31 30 41 34 39 30 44 34 34 25 34 30 41 64 6f 62 65 4f 72 67 3d 44 45 4c 45 54 45 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 31 34 20 4f 63 74 20 32 30 32 34 20 31 32 3a 31 30 3a 32 31 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 44 6f 6d 61 69 6e 3d 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 4d 43 56 5f 35 35 36 33 33 46 37 41 35 33 34 35 33 35 31 31 30 41 34 39 30 44 34 34 25 34 30 41 64 6f 62 65 4f 72 67 3d 44 45 4c 45 54 45 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 31 34 20 4f 63 74 20 32 30 32 34 20 31 32 3a 31 30 3a 32 31 20 47 4d 54 3b 20 Data Ascii: Set-Cookie: AMCVS_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:21 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnlySet-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:21 GMT;
2024-10-14 12:20:21 UTC	637	IN	Data Raw: 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 24 49 64 3a 20 72 61 77 64 65 66 6c 61 74 65 2e 6a 73 2c 76 20 30 2e 33 20 32 30 30 39 2f 30 33 2f 30 31 20 31 39 3a 30 35 3a 30 35 20 64 61 6e 6b 6f 67 61 69 20 45 78 70 20 64 61 6e 6b 6f 67 61 69 20 24 0a 20 2a 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 3a 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6e 69 63 6f 73 2e 63 6f 6d 2f 73 74 61 66 66 2f 69 7a 2f 61 6d 75 73 65 2f 6a 61 76 61 73 63 72 69 70 74 2f 65 78 70 65 72 74 2f 64 65 66 6c 61 74 65 2e 74 78 74 0a 20 2a 2f 0a 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 39 20 4d 61 73 61 6e 61 6f 20 49 7a 75 6d 6f 20 3c 69 7a 40 6f 6e 69 63 6f 73 2e 63 6f 2e 6a 70 3e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a Data Ascii: /* @preserve * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $ * * Original: * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt // @preserve * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp> * Version:
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 6f 64 65 41 74 28 73 2b 2b 29 2c 6e 3d 72 2e 63 68 61 72 43 6f 64 65 41 74 28 73 2b 2b 29 2c 66 3d 74 3e 3e 32 2c 6f 3d 28 33 26 74 29 3c 3c 34 7c 65 3e 3e 34 2c 69 3d 28 31 35 26 65 29 3c 3c 32 7c 6e 3e 3e 36 2c 61 3d 36 33 26 6e 2c 69 73 4e 61 4e 28 65 29 3f 69 3d 61 3d 36 34 3a 69 73 4e 61 4e 28 6e 29 26 26 28 61 3d 36 34 29 2c 75 2e 70 75 73 68 28 6c 2e 63 68 61 72 41 74 28 66 29 2b 6c 2e 63 68 61 72 41 74 28 6f 29 2b 6c 2e 63 68 61 72 41 74 28 69 29 2b 6c 2e 63 68 61 72 41 74 28 61 29 29 3b 72 65 74 75 72 6e 20 75 2e 6a 6f 69 6e 28 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 7a 77 5f 65 6e 63 6f 64 65 28 72 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 7b 7d 2c 6e 3d 28 72 2b 22 22 29 2e 73 70 6c 69 74 28 22 22 29 2c 66 3d 5b 5d 2c 6f 3d 6e 5b 30 5d 2c 69 Data Ascii: odeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i
2024-10-14 12:20:21 UTC	196	IN	Data Raw: 6f 6e 28 72 2c 74 2c 65 2c 6e 29 7b 74 68 69 73 2e 67 6f 6f 64 5f 6c 65 6e 67 74 68 3d 72 2c 74 68 69 73 2e 6d 61 78 5f 6c 61 7a 79 3d 74 2c 74 68 69 73 2e 6e 69 63 65 5f 6c 65 6e 67 74 68 3d 65 2c 74 68 69 73 2e 6d 61 78 5f 63 68 61 69 6e 3d 6e 7d 2c 47 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 65 78 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6c 65 6e 3d 30 2c 74 68 69 73 2e 70 74 72 3d 41 72 72 61 79 28 75 29 2c 74 68 69 73 2e 6f 66 66 3d 30 7d 2c 4a 74 3d 41 72 72 61 79 28 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 31 2c 31 2c 32 2c 32 2c 32 2c 32 2c 33 Data Ascii: on(r,t,e,n){this.good_length=r,this.max_lazy=t,this.nice_length=e,this.max_chain=n},Gt=function(){this.next=null,this.len=0,this.ptr=Array(u),this.off=0},Jt=Array(0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 2c 33 2c 33 2c 33 2c 34 2c 34 2c 34 2c 34 2c 35 2c 35 2c 35 2c 35 2c 30 29 2c 4b 74 3d 41 72 72 61 79 28 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 32 2c 32 2c 33 2c 33 2c 34 2c 34 2c 35 2c 35 2c 36 2c 36 2c 37 2c 37 2c 38 2c 38 2c 39 2c 39 2c 31 30 2c 31 30 2c 31 31 2c 31 31 2c 31 32 2c 31 32 2c 31 33 2c 31 33 29 2c 4c 74 3d 41 72 72 61 79 28 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 32 2c 33 2c 37 29 2c 4f 74 3d 41 72 72 61 79 28 31 36 2c 31 37 2c 31 38 2c 30 2c 38 2c 37 2c 39 2c 36 2c 31 30 2c 35 2c 31 31 2c 34 2c 31 32 2c 33 2c 31 33 2c 32 2c 31 34 2c 31 2c 31 35 29 2c 50 74 3d 41 72 72 61 79 28 6e 65 77 20 71 74 28 30 2c 30 2c 30 2c 30 29 2c 6e 65 77 20 71 74 28 34 2c 34 2c 38 2c 34 29 2c 6e 65 77 20 71 Data Ascii: ,3,3,3,4,4,4,4,5,5,5,5,0),Kt=Array(0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13),Lt=Array(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7),Ot=Array(16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15),Pt=Array(new qt(0,0,0,0),new qt(4,4,8,4),new q
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 42 5b 48 26 78 74 5d 3d 44 2c 72 65 28 58 2c 48 29 7d 2c 66 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 58 65 28 74 5b 72 5d 2e 66 63 2c 74 5b 72 5d 2e 64 6c 29 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 32 35 35 26 28 32 35 36 3e 72 3f 6f 74 5b 72 5d 3a 6f 74 5b 32 35 36 2b 28 72 3e 3e 37 29 5d 29 7d 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 66 63 3e 72 5b 74 5d 2e 66 63 7c 7c 72 5b 74 5d 2e 66 63 3d 3d 72 5b 65 5d 2e 66 63 26 26 6e 74 5b 65 5d 3e 3d 6e 74 5b 74 5d 7d 2c 61 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3b 66 6f 72 28 6e 3d 30 3b 65 3e 6e 26 26 76 74 2e 6c 65 6e 67 74 68 3e 79 74 3b 6e 2b 2b 29 72 5b 74 2b 6e 5d 3d 32 35 35 26 76 Data Ascii: B[H&xt]=D,re(X,H)},fe=function(r,t){Xe(t[r].fc,t[r].dl)},oe=function(r){return 255&(256>r?ot[r]:ot[256+(r>>7)])},ie=function(r,t,e){return r[e].fc>r[t].fc\|\|r[t].fc==r[e].fc&&nt[e]>=nt[t]},ae=function(r,t,e){var n;for(n=0;e>n&&vt.length>yt;n++)r[t+n]=255&v
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 45 2d 3d 4e 2c 54 3e 3d 4e 29 7b 4e 2d 2d 3b 64 6f 20 48 2b 2b 2c 6e 65 28 29 3b 77 68 69 6c 65 28 30 21 3d 2d 2d 4e 29 3b 48 2b 2b 7d 65 6c 73 65 20 48 2b 3d 4e 2c 4e 3d 30 2c 58 3d 32 35 35 26 70 5b 48 5d 2c 58 3d 28 58 3c 3c 45 74 5e 32 35 35 26 70 5b 48 2b 31 5d 29 26 67 74 3b 65 6c 73 65 20 72 3d 7a 65 28 30 2c 32 35 35 26 70 5b 48 5d 29 2c 45 2d 2d 2c 48 2b 2b 3b 66 6f 72 28 72 26 26 28 42 65 28 30 29 2c 52 3d 48 29 3b 4d 74 3e 45 26 26 21 5a 3b 29 73 65 28 29 7d 7d 2c 68 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 30 21 3d 45 26 26 6e 75 6c 6c 3d 3d 79 3b 29 7b 69 66 28 6e 65 28 29 2c 53 3d 4e 2c 6a 3d 55 2c 4e 3d 63 2d 31 2c 44 21 3d 62 74 26 26 54 3e 53 26 26 43 74 3e 3d 48 2d 44 26 26 28 4e 3d 75 65 28 44 29 2c 4e 3e 45 26 26 28 4e 3d Data Ascii: E-=N,T>=N){N--;do H++,ne();while(0!=--N);H++}else H+=N,N=0,X=255&p[H],X=(X<<Et^255&p[H+1])>else r=ze(0,255&p[H]),E--,H++;for(r&&(Be(0),R=H);Mt>E&&!Z;)se()}},he=function(){for(;0!=E&&null==y;){if(ne(),S=N,j=U,N=c-1,D!=bt&&T>S&&Ct>=H-D&&(N=ue(D),N>E&&(N=
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 5f 62 69 74 73 3d 4c 74 2c 59 2e 65 78 74 72 61 5f 62 61 73 65 3d 30 2c 59 2e 65 6c 65 6d 73 3d 4e 74 2c 59 2e 6d 61 78 5f 6c 65 6e 67 74 68 3d 49 74 2c 59 2e 6d 61 78 5f 63 6f 64 65 3d 30 2c 65 3d 30 2c 6e 3d 30 3b 52 74 2d 31 3e 6e 3b 6e 2b 2b 29 66 6f 72 28 69 74 5b 6e 5d 3d 65 2c 72 3d 30 3b 31 3c 3c 4a 74 5b 6e 5d 3e 72 3b 72 2b 2b 29 66 74 5b 65 2b 2b 5d 3d 6e 3b 66 6f 72 28 66 74 5b 65 2d 31 5d 3d 6e 2c 66 3d 30 2c 6e 3d 30 3b 31 36 3e 6e 3b 6e 2b 2b 29 66 6f 72 28 61 74 5b 6e 5d 3d 66 2c 72 3d 30 3b 31 3c 3c 4b 74 5b 6e 5d 3e 72 3b 72 2b 2b 29 6f 74 5b 66 2b 2b 5d 3d 6e 3b 66 6f 72 28 66 3e 3e 3d 37 3b 6b 74 3e 6e 3b 6e 2b 2b 29 66 6f 72 28 61 74 5b 6e 5d 3d 66 3c 3c 37 2c 72 3d 30 3b 31 3c 3c 4b 74 5b 6e 5d 2d 37 3e 72 3b 72 2b 2b 29 6f 74 5b 32 Data Ascii: _bits=Lt,Y.extra_base=0,Y.elems=Nt,Y.max_length=It,Y.max_code=0,e=0,n=0;Rt-1>n;n++)for(it[n]=e,r=0;1<<Jt[n]>r;r++)ft[e++]=n;for(ft[e-1]=n,f=0,n=0;16>n;n++)for(at[n]=f,r=0;1<<Kt[n]>r;r++)ot[f++]=n;for(f>>=7;kt>n;n++)for(at[n]=f<<7,r=0;1<<Kt[n]-7>r;r++)ot[2
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 3b 7a 74 3e 3d 65 3b 65 2b 2b 29 6f 3d 6f 2b 24 5b 65 2d 31 5d 3c 3c 31 2c 66 5b 65 5d 3d 6f 3b 66 6f 72 28 6e 3d 30 3b 74 3e 3d 6e 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 72 5b 6e 5d 2e 64 6c 3b 30 21 3d 69 26 26 28 72 5b 6e 5d 2e 66 63 3d 44 65 28 66 5b 69 5d 2b 2b 2c 69 29 29 7d 7d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 72 2e 64 79 6e 5f 74 72 65 65 2c 66 3d 72 2e 73 74 61 74 69 63 5f 74 72 65 65 2c 6f 3d 72 2e 65 6c 65 6d 73 2c 69 3d 2d 31 2c 61 3d 6f 3b 66 6f 72 28 74 74 3d 30 2c 65 74 3d 5a 74 2c 74 3d 30 3b 6f 3e 74 3b 74 2b 2b 29 30 21 3d 6e 5b 74 5d 2e 66 63 3f 28 72 74 5b 2b 2b 74 74 5d 3d 69 3d 74 2c 6e 74 5b 74 5d 3d 30 29 3a 6e 5b 74 5d 2e 64 6c 3d 30 3b 66 6f 72 28 3b 32 3e 74 74 3b 29 7b 76 61 72 20 6c 3d Data Ascii: ;zt>=e;e++)o=o+$[e-1]<<1,f[e]=o;for(n=0;t>=n;n++){var i=r[n].dl;0!=i&&(r[n].fc=De(f[i]++,i))}},xe=function(r){var t,e,n=r.dyn_tree,f=r.static_tree,o=r.elems,i=-1,a=o;for(tt=0,et=Zt,t=0;o>t;t++)0!=n[t].fc?(rt[++tt]=i=t,nt[t]=0):n[t].dl=0;for(;2>tt;){var l=
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 37 2c 35 29 2c 58 65 28 74 2d 31 2c 35 29 2c 58 65 28 65 2d 34 2c 34 29 2c 6e 3d 30 3b 65 3e 6e 3b 6e 2b 2b 29 58 65 28 50 5b 4f 74 5b 6e 5d 5d 2e 64 6c 2c 33 29 3b 70 65 28 4a 2c 72 2d 31 29 2c 70 65 28 4b 2c 74 2d 31 29 7d 2c 42 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 2c 6f 2c 69 2c 61 3b 69 66 28 61 3d 48 2d 52 2c 6c 74 5b 63 74 5d 3d 68 74 2c 78 65 28 51 29 2c 78 65 28 56 29 2c 69 3d 4d 65 28 29 2c 74 3d 41 74 2b 33 2b 37 3e 3e 33 2c 6f 3d 5f 74 2b 33 2b 37 3e 3e 33 2c 74 3e 3d 6f 26 26 28 74 3d 6f 29 2c 74 3e 3d 61 2b 34 26 26 52 3e 3d 30 29 7b 76 61 72 20 6c 3b 66 6f 72 28 58 65 28 28 65 3c 3c 31 29 2b 72 2c 33 29 2c 6a 65 28 29 2c 65 65 28 61 29 2c 65 65 28 7e 61 29 2c 6c 3d 30 3b 61 3e 6c 3b 6c 2b 2b 29 74 65 28 70 5b 52 2b 6c 5d Data Ascii: 7,5),Xe(t-1,5),Xe(e-4,4),n=0;e>n;n++)Xe(P[Ot[n]].dl,3);pe(J,r-1),pe(K,t-1)},Be=function(r){var t,o,i,a;if(a=H-R,lt[ct]=ht,xe(Q),xe(V),i=Me(),t=At+3+7>>3,o=_t+3+7>>3,t>=o&&(t=o),t>=a+4&&R>=0){var l;for(Xe((e<<1)+r,3),je(),ee(a),ee(~a),l=0;a>l;l++)te(p[R+l]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.11	49857	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:21 UTC	362	OUT	GET /uc/sf/0.1.434/js/safe.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:21 UTC	692	IN	HTTP/1.1 200 OK x-amz-id-2: Vmq0hg9Hf3EoSuVUI+wbncZFy8cZBA8c7CBv5KbkBHeYjyi/x+3unBepEEr449Xq9rxA4Vsqaqc= x-amz-request-id: YJ4CVS3P2S1DGZ7B Date: Tue, 08 Oct 2024 03:49:15 GMT Last-Modified: Thu, 25 Apr 2024 19:26:58 GMT ETag: "60f19ca2f094acabba5b7988467387c4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 77851 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 549068 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 2f 2a 21 20 53 41 46 45 46 52 41 4d 45 20 30 2e 31 2e 34 33 34 20 c2 a9 20 32 30 32 34 2c 20 59 61 68 6f 6f 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 39 34 36 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 28 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 29 2e 63 6c 6f 73 65 3d 7b 6e 61 6d 65 3a 22 63 6c 6f 73 65 22 2c 68 65 69 67 68 74 3a 34 38 2c 77 69 64 74 68 3a 34 38 2c 70 61 74 68 3a 22 4d 33 37 2e 39 38 20 33 34 2e 38 32 37 6c 2d 39 2e 39 2d 39 2e 39 20 39 2e 39 2d 39 2e 38 39 38 63 2e 37 38 2d 2e 37 38 32 2e 37 38 2d 32 2e 30 35 20 30 2d 32 2e 38 33 2d 2e 37 38 2d 2e 37 38 2d 32 2e 30 34 37 2d 2e 37 38 2d 32 2e 38 32 38 20 30 6c Data Ascii: /! SAFEFRAME 0.1.434 2024, Yahoo Inc. All rights reserved. /!function(){var t={9466:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 3a 6e 2e 63 6f 6f 6b 69 65 73 3b 69 66 28 6e 3d 63 28 6e 29 2c 65 3d 65 7c 7c 7b 7d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 6e 2e 65 72 72 6f 72 28 5b 22 43 6f 6f 6b 69 65 3a 3a 67 65 74 20 2d 20 69 6e 76 61 6c 69 64 20 69 6e 70 75 74 22 2c 7b 6e 61 6d 65 3a 74 2c 6f 70 74 73 3a 65 7d 2c 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 29 2c 6e 75 6c 6c 3b 76 61 72 20 73 3d 72 5b 74 5d 3b 72 65 74 75 72 6e 20 65 2e 6a 73 6f 6e 26 26 73 26 26 28 73 3d 69 28 73 29 29 2c 76 6f 69 64 20 30 21 3d 3d 73 3f 73 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 6e 29 7b 65 3d 65 7c 7c 7b 7d 3b 76 61 72 20 72 3d 66 28 74 2c 6e 75 6c 6c 2c 6e 29 3b 69 66 28 22 73 74 72 69 6e Data Ascii: :n.cookies;if(n=c(n),e=e\|\|{},"string"!=typeof t)return n.error(["Cookie::get - invalid input",{name:t,opts:e},(new Error).stack].join("\n")),null;var s=r[t];return e.json&&s&&(s=i(s)),void 0!==s?s:null}function p(t,e,n){e=e\|\|{};var r=f(t,null,n);if("strin
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 6f 6e 29 2c 72 2e 6a 73 6f 6e 3d 21 31 2c 68 28 74 2c 69 2c 72 29 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 73 65 74 53 75 62 73 3d 68 7d 2c 33 32 31 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 74 72 79 7b 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 28 74 29 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 33 39 34 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 Data Ascii: on),r.json=!1,h(t,i,r)},t.exports.setSubs=h},3215:function(t){"use strict";t.exports=function(t,e){var n;try{n=JSON.parse(t)}catch(t){console&&console.dir&&console.dir(t),n=void 0===e?{}:e}return n}},3945:function(t){"use strict";t.exports=function(t,e){v
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 74 28 6f 2e 70 61 74 68 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6f 70 74 69 6f 6e 20 70 61 74 68 20 69 73 20 69 6e 76 61 6c 69 64 22 29 3b 63 2b 3d 22 3b 20 50 61 74 68 3d 22 2b 6f 2e 70 61 74 68 7d 6f 2e 65 78 70 69 72 65 73 26 26 28 63 2b 3d 22 3b 20 45 78 70 69 72 65 73 3d 22 2b 6f 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 3b 6f 2e 68 74 74 70 4f 6e 6c 79 26 26 28 63 2b 3d 22 3b 20 48 74 74 70 4f 6e 6c 79 22 29 3b 6f 2e 73 65 63 75 72 65 26 26 28 63 2b 3d 22 3b 20 53 65 63 75 72 65 22 29 3b 6f 2e 66 69 72 73 74 50 61 72 74 79 4f 6e 6c 79 26 26 28 63 2b 3d 22 3b 20 46 69 72 73 74 2d 50 61 72 74 79 2d 4f 6e 6c 79 22 29 3b 72 65 74 75 72 6e 20 63 7d 3b 76 61 72 20 6e 3d 64 65 63 6f 64 65 55 52 49 43 Data Ascii: t(o.path))throw new TypeError("option path is invalid");c+="; Path="+o.path}o.expires&&(c+="; Expires="+o.expires.toUTCString());o.httpOnly&&(c+="; HttpOnly");o.secure&&(c+="; Secure");o.firstPartyOnly&&(c+="; First-Party-Only");return c};var n=decodeURIC
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 30 38 30 29 2c 6f 3d 6e 28 39 35 36 35 29 2c 69 3d 6e 28 38 39 38 31 29 2c 73 3d 6e 28 36 33 31 39 29 2c 61 3d 6e 28 34 32 30 39 29 2c 63 3d 6e 28 33 35 31 37 29 2c 75 3d 6e 28 36 31 39 38 29 2c 6c 3d 6e 28 34 36 35 39 29 2c 66 3d 6e 28 38 31 29 2c 70 3d 6e 28 38 35 31 29 2c 68 3d 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 69 28 74 29 2c 6e 3d 63 28 74 68 69 73 29 2c 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6d 3d 64 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 76 3d 76 6f 69 64 20 30 21 3d 3d 6d 3b 76 26 26 28 6d 3d 72 28 6d 2c 64 3e 32 3f 61 72 67 75 6d 65 Data Ascii: tion(t,e,n){"use strict";var r=n(6080),o=n(9565),i=n(8981),s=n(6319),a=n(4209),c=n(3517),u=n(6198),l=n(4659),f=n(81),p=n(851),h=Array;t.exports=function(t){var e=i(t),n=c(this),d=arguments.length,m=d>1?arguments[1]:void 0,v=void 0!==m;v&&(m=r(m,d>2?argume
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 38 35 35 31 29 2c 6f 3d 6e 28 39 35 33 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 69 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 3f 65 28 72 28 6e 29 5b 30 5d 2c 6e 5b 31 5d 29 3a 65 28 6e 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 74 2c 22 74 68 72 6f 77 22 2c 65 29 7d 7d 7d 2c 34 35 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 35 30 34 29 2c 6f 3d 72 28 7b 7d 2e 74 6f 53 74 72 69 6e 67 29 2c 69 3d 72 28 22 22 2e 73 6c 69 63 65 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 6f 28 74 29 2c 38 2c 2d 31 29 7d 7d 2c 36 39 35 35 3a 66 75 6e 63 74 69 Data Ascii: strict";var r=n(8551),o=n(9539);t.exports=function(t,e,n,i){try{return i?e(r(n)[0],n[1]):e(n)}catch(e){o(t,"throw",e)}}},4576:function(t,e,n){"use strict";var r=n(9504),o=r({}.toString),i=r("".slice);t.exports=function(t){return i(o(t),8,-1)}},6955:functi
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 3a 21 28 32 26 74 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 65 7d 7d 7d 2c 34 36 35 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 37 32 34 29 2c 6f 3d 6e 28 34 39 31 33 29 2c 69 3d 6e 28 36 39 38 30 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 3f 6f 2e 66 28 74 2c 65 2c 69 28 30 2c 6e 29 29 3a 74 5b 65 5d 3d 6e 7d 7d 2c 32 31 30 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 38 33 29 2c 6f 3d 6e 28 34 39 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 26 26 72 28 Data Ascii: :!(2&t),writable:!(4&t),value:e}}},4659:function(t,e,n){"use strict";var r=n(3724),o=n(4913),i=n(6980);t.exports=function(t,e,n){r?o.f(t,e,i(0,n)):t[e]=n}},2106:function(t,e,n){"use strict";var r=n(283),o=n(4913);t.exports=function(t,e,n){return n.get&&r(
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 65 78 70 6f 72 74 73 3d 7b 43 53 53 52 75 6c 65 4c 69 73 74 3a 30 2c 43 53 53 53 74 79 6c 65 44 65 63 6c 61 72 61 74 69 6f 6e 3a 30 2c 43 53 53 56 61 6c 75 65 4c 69 73 74 3a 30 2c 43 6c 69 65 6e 74 52 65 63 74 4c 69 73 74 3a 30 2c 44 4f 4d 52 65 63 74 4c 69 73 74 3a 30 2c 44 4f 4d 53 74 72 69 6e 67 4c 69 73 74 3a 30 2c 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 3a 31 2c 44 61 74 61 54 72 61 6e 73 66 65 72 49 74 65 6d 4c 69 73 74 3a 30 2c 46 69 6c 65 4c 69 73 74 3a 30 2c 48 54 4d 4c 41 6c 6c 43 6f 6c 6c 65 63 74 69 6f 6e 3a 30 2c 48 54 4d 4c 43 6f 6c 6c 65 63 74 69 6f 6e 3a 30 2c 48 54 4d 4c 46 6f 72 6d 45 6c 65 6d 65 6e 74 3a 30 2c 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 3a 30 2c 4d 65 64 69 61 4c 69 73 74 3a 30 2c 4d 69 6d 65 54 79 70 65 41 72 72 61 Data Ascii: exports={CSSRuleList:0,CSSStyleDeclaration:0,CSSValueList:0,ClientRectList:0,DOMRectList:0,DOMStringList:0,DOMTokenList:1,DataTransferItemList:0,FileList:0,HTMLAllCollection:0,HTMLCollection:0,HTMLFormElement:0,HTMLSelectElement:0,MediaList:0,MimeTypeArra
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 6c 2c 66 2c 70 2c 68 2c 64 3d 74 2e 74 61 72 67 65 74 2c 6d 3d 74 2e 67 6c 6f 62 61 6c 2c 76 3d 74 2e 73 74 61 74 3b 69 66 28 6e 3d 6d 3f 72 3a 76 3f 72 5b 64 5d 7c 7c 61 28 64 2c 7b 7d 29 3a 72 5b 64 5d 26 26 72 5b 64 5d 2e 70 72 6f 74 6f 74 79 70 65 29 66 6f 72 28 6c 20 69 6e 20 65 29 7b 69 66 28 70 3d 65 5b 6c 5d 2c 66 3d 74 2e 64 6f 6e 74 43 61 6c 6c 47 65 74 53 65 74 3f 28 68 3d 6f 28 6e 2c 6c 29 29 26 26 68 2e 76 61 6c 75 65 3a 6e 5b 6c 5d 2c 21 75 28 6d 3f 6c 3a 64 2b 28 76 3f 22 2e 22 3a 22 23 22 29 2b 6c 2c 74 2e 66 6f 72 63 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 66 29 7b 69 66 28 74 79 70 65 6f 66 20 70 3d 3d 74 79 70 65 6f 66 20 66 29 63 6f 6e Data Ascii: 6);t.exports=function(t,e){var n,l,f,p,h,d=t.target,m=t.global,v=t.stat;if(n=m?r:v?r[d]\|\|a(d,{}):r[d]&&r[d].prototype)for(l in e){if(p=e[l],f=t.dontCallGetSet?(h=o(n,l))&&h.value:n[l],!u(m?l:d+(v?".":"#")+l,t.forced)&&void 0!==f){if(typeof p==typeof f)con
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 34 37 36 29 2c 6f 3d 6e 28 39 33 30 36 29 2c 69 3d 6e 28 36 31 36 29 2c 73 3d 72 28 72 2e 62 69 6e 64 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 3a 69 3f 73 28 74 2c 65 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 30 33 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 62 69 6e 64 28 29 3b 72 Data Ascii: se strict";var r=n(7476),o=n(9306),i=n(616),s=r(r.bind);t.exports=function(t,e){return o(t),void 0===e?t:i?s(t,e):function(){return t.apply(e,arguments)}}},616:function(t,e,n){"use strict";var r=n(9039);t.exports=!r((function(){var t=function(){}.bind();r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.11	49862	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:21 UTC	773	OUT	GET /uu/api/res/1.2/nR2a_FaR0oKAtiOqOncykg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/3b7a28d0-89cc-11ef-9e3f-7e6e98da5766.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:21 UTC	1166	IN	HTTP/1.1 200 OK Content-Length: 21292 Content-Type: image/webp Content-Disposition: inline; filename="3b7a28d0-89cc-11ef-9e3f-7e6e98da5766.webp" Etag: "3867d627cc29739a41b1e925af5dcd71" Expiration: expiry-date="Sun, 13 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 14 Oct 2024 11:00:02 GMT Date: Mon, 14 Oct 2024 11:00:02 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=36;cpu=0;start=2024-10-14T11:00:01.971Z;desc=miss,rtt;dur=87,content-info;desc="width=536,height=284,bytes=21292,owidth=2120,oheight=1414,obytes=1653269,ef=(1,13,17,23,30)",cloudinary;dur=29;start=2024-10-14T11:00:01.966Z Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 5ee480c2f92f5cd48d82b633b5cd6762 Age: 4820 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 52 49 46 46 24 53 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFF$SWEBPVP8X ICCP00ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: a9 56 7d 7e b8 ea 8c bf 0b c8 04 42 c8 68 a9 cd cd 09 32 1b 4b a7 9f 2f 88 a8 5f 23 46 9a 76 6f d4 30 e9 c0 92 b3 2e 5f 87 ca 29 66 60 06 35 5a c5 d7 78 6a 4d ae c1 1e 98 6d ce c3 99 86 1c 18 8d 30 ab 7b 3e fe 9f ad 56 ac 0f 69 26 bf 6e 38 4d f5 59 7f da c5 d6 1f e5 5f 38 95 18 25 b2 11 07 d9 c2 38 4c fa 53 01 92 24 4f 17 0b b9 12 ff 1e db e6 5e 8d 01 fb 1b 2b ba e7 a8 83 30 cf b3 f4 60 d0 b7 45 d3 9c 0f 62 01 7c 21 7c 4e e1 70 0a 8f 21 46 37 12 dc 4a 3b 2a ca f4 69 54 c1 1b 4d 79 68 1e 29 9c 15 c0 fa 69 cf 4c b0 ef a7 f8 ab 81 a2 52 eb 89 97 0b 71 e5 3d 09 86 28 a9 f3 99 52 43 5e 85 95 d7 00 10 54 3c f1 9d 49 ea cc 22 8f 52 2a 55 d8 73 be 21 7a 48 ba e3 c7 37 f3 de d4 1d 5b 63 19 ce 5b db f5 1b 68 1a 8a 28 eb 7d 0c 3f 8a 1a 83 42 ed 42 5a 12 12 b1 53 20 Data Ascii: V}~Bh2K/_#Fvo0._)f`5ZxjMm0{>Vi&n8MY_8%8LS$O^+0`Eb\|!\|Np!F7J;iTMyh)iLRq=(RC^T<I"RUs!zH7[c[h(}?BBZS
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 96 f0 e0 9b e5 3d 3b b3 a8 5d 1b 1d 1b 44 c2 fd 9e 48 4c e9 16 f2 71 d6 13 45 17 cf 72 f5 53 e7 78 60 ff 42 93 36 c0 25 a3 d4 f2 1f 73 93 60 00 14 92 24 3b be 14 1c c6 aa c5 64 3a 4a 0c 41 c1 ce a6 f9 24 25 62 04 76 35 56 af ac d7 51 f4 93 c1 7a f6 ec a2 48 c7 e9 9e 11 00 9f bc 23 29 0d 26 0f 4f 47 a5 8d d9 d4 d7 9f fc 3c 62 26 a6 95 62 09 02 2f c6 cb b3 7f 00 6f 3c b4 41 6f 8b 8b 26 00 2e b8 4b 55 cb cd 17 c4 82 59 e5 c0 54 42 2c 49 65 c5 dd 98 41 c6 aa 3c 6d 16 3f 8f 99 9e 71 c5 d5 2a 0a 72 ab 5a 7e 07 16 ac 4c ba 0d 08 71 4f da a6 85 f6 0d 5c f5 b9 08 5b d3 0e d4 a4 0b 44 c6 89 3d 93 b0 20 c9 73 33 81 88 32 66 7e d8 18 e8 ef 95 89 cc 14 46 3c ee bc e7 79 f4 74 e6 00 16 ec 2a 9a e6 9a 9f 80 1c 05 6c 2e da 1d fd dc c7 af 33 98 b3 b6 f9 18 93 f0 27 9c e6 Data Ascii: =;]DHLqErSx`B6%s`$;d:JA$%bv5VQzH#)&OG<b&b/o<Ao&.KUYTB,IeA<m?qrZ~LqO\[D= s32f~F<ytl.3'
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 88 d8 f9 8a 81 a8 73 e1 69 91 7b ee 9d 5d 0c 22 ee 12 ac 13 10 2f 54 c1 33 e4 4f 74 f3 e9 0a 03 fb a2 60 69 27 38 9c 6d 68 ac 4d 32 01 83 3b f0 a4 d5 55 6c b7 ac f3 39 ce 3d a1 e5 8a 06 c0 db 29 ae e4 d8 6e 0d 8d 5e 3a 49 f9 9d ff be 6d 2c ee b5 d8 6b 9c 91 21 48 df 04 67 35 44 b7 de 7e a5 f5 93 23 16 39 3a 94 41 09 58 67 bf a3 3d fa 3d 0a 14 97 2d 4a e0 65 fe 2b e0 75 e3 10 7c 31 f1 1b 43 b4 41 72 3e 8e db 7d c1 87 b1 9e 81 de 8c 88 ca bd 9a 64 15 ea dc 6a b3 ae 30 8a 12 1f 77 96 68 a6 78 d6 bb 92 57 af bd e9 99 23 2d 2b 26 8e b0 7b e5 7b b0 c5 08 da de 68 07 f3 f5 06 23 7c ee c1 75 ef 61 ea 19 14 a8 fa 2c 9e 05 8d 9d 32 de ce 1e 10 7a 3d 3e f4 fb 0f f0 67 fb a9 3a 24 53 b9 5f 7f e2 3f be c6 1a ad 59 2d 24 23 7c 87 cc 7b 28 4b 91 5e c5 22 a7 e4 ba b5 fa Data Ascii: si{]"/T3Ot`i'8mhM2;Ul9=)n^:Im,k!Hg5D~#9:AXg==-Je+u\|1CAr>}dj0whxW#-+&{{h#\|ua,2z=>g:$S_?Y-$#\|{(K^"
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 64 af b9 8e 6b fc 1b fd e0 62 60 b6 ac ff 4a ec e3 81 8a 2b 55 ad 06 c1 0c 9f 53 f3 3d b9 67 cb 9a e1 25 d3 9f 94 ba 89 37 96 d4 46 bb 64 15 8a 52 fd 96 de f4 fd 06 80 79 db d4 59 84 bb 82 9c b6 3a 30 ad 5f fd 8e 33 42 de 9f 34 19 72 20 59 99 1a b4 cc af ff 37 2b f6 43 86 63 63 34 1f 3f ec 1f 25 2f 12 2b c0 55 a6 d5 71 b4 4d 7f 04 37 50 d0 e9 88 23 36 4c 59 1f d0 b2 a9 76 e5 13 3f 0e 2c 55 c7 61 e6 92 62 aa 6a b4 4f a9 66 18 9c b3 67 b0 b2 56 ea f2 b0 89 af 1e 1d 8c 94 95 83 03 25 e5 2d e6 80 b1 19 3c 56 16 9a 9e 1c 54 b2 ad 0d 5a 47 40 9e 1e 1b 2c e6 91 be 14 02 4e 8f 7f 97 1c 58 cc b2 d6 f5 d5 7b c3 da dd ef b3 a8 7c 30 11 45 3f 83 f9 40 42 94 cb c3 0a 53 32 e5 90 2c 5e a7 ad 81 87 98 fd 58 03 90 9f b3 3d 1a f6 55 b8 ec fe 75 1a 02 65 80 a7 9f 87 42 09 Data Ascii: dkb`J+US=g%7FdRyY:0_3B4r Y7+Ccc4?%/+UqM7P#6LYv?,UabjOfgV%-<VTZG@,NX{\|0E?@BS2,^X=UueB
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 15 0d 77 d5 67 5b 7d d5 d8 73 f8 50 1f 30 3c 7e 21 fe fe 26 b6 3f 45 4a c6 fe 04 67 08 4b 15 d0 81 ac 3b 2e de 8d 22 d6 ce ae 8d c7 a5 df ac df 38 d4 bb 8c f2 ec 07 5c 8f 6e b9 da d2 69 98 c5 41 8f 0b 91 79 7d 21 be ca 04 ff 4d 31 33 6f f0 90 0b e3 d6 c7 5d 4c 6a e9 36 b4 de 6e 16 59 9f 69 00 c4 8b fa c9 16 72 37 f3 ad 29 c5 7e 4f b4 93 dc c5 ca 45 7f f4 60 73 e4 7f a5 88 9a 01 05 5a e2 1b 33 ea aa ce b6 57 cf 6a 36 7f 4c 93 60 23 22 2d b6 1b 3e 0f 4f bb 7c 3d bc 85 d1 31 b3 37 1a 30 34 05 24 49 ba 52 3d 7d 17 5e 2f 90 ad 4d 6b 8d c6 cc 58 85 3c 2d 80 92 93 ed 68 2a 18 04 01 d4 16 a3 ba 07 7f e1 48 dc 75 79 08 b6 b8 5d 52 61 9c 53 8b c7 ac 34 f7 3b b1 01 0e 54 84 9c a0 be c5 ad 39 ea 8b 4d 26 59 f6 c8 ce b2 6c ee a8 f7 93 c0 be 2c 11 46 3b 94 26 2b 55 7e Data Ascii: wg[}sP0<~!&?EJgK;."8\niAy}!M13o]Lj6nYir7)~OE`sZ3Wj6L`#"->O\|=1704$IR=}^/MkX<-h*Huy]RaS4;T9M&Yl,F;&+U~
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: b0 2e b3 96 0d 74 b6 7f 72 2e 74 a9 22 81 5a d6 6f 52 bc 41 38 49 1a fd f1 69 9e 5f 82 99 d3 20 b3 3d cb 95 42 01 71 b8 ed c0 94 e3 1c 0a c6 b3 cd 9a 1c 91 79 e3 9f 8f 50 39 97 f9 0a e9 98 10 4a 28 a0 f2 42 73 3c bd 2d e3 09 f6 f5 b8 f1 2e e4 16 d7 1a a0 df ec 9e 15 51 5b df ca e1 a6 95 f4 5f 0a f7 d3 a9 a5 b8 66 6e 0a 57 b6 75 b0 4a e1 34 e8 30 10 80 b4 49 ba 3b 39 4f df d5 66 60 05 f7 8d 84 9e 4b 34 35 d9 f2 ec e0 5a 4d ba 04 e4 61 84 f5 11 e4 de 49 02 7c 63 0f 8c f3 63 6d cf aa 67 26 39 8c 6a 39 44 f9 62 9a 1e fd 75 94 3a 7e 24 95 93 ad 57 fa de 74 8b 47 ad 38 5b 81 18 84 84 16 77 58 93 14 87 fe bf 05 72 93 37 c8 dc 69 49 29 a7 70 bf a7 57 95 87 f0 07 0f 56 74 6e 72 9d 4d 19 77 74 6a 74 21 78 f9 fd bd 52 c1 b6 01 c0 42 4e ed 42 36 ff 9a 65 3d 3e 9e 0a Data Ascii: .tr.t"ZoRA8Ii_ =BqyP9J(Bs<-.Q[_fnWuJ40I;9Of`K45ZMaI\|ccmg&9j9Dbu:~$WtG8[wXr7iI)pWVtnrMwtjt!xRBNB6e=>
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: ec f4 97 ec 4e ff 25 a5 23 1a 40 93 c7 8d 87 05 d8 ef 0e fe 7e 58 d5 1d 53 2a 64 aa 17 97 32 d3 ab 41 a6 36 77 c4 32 d5 57 a7 76 6c ab 86 ae 32 9c bb 8f 28 42 6a 0a 95 e5 e5 64 07 af a3 54 76 a8 d9 c3 52 ba da cf 4e 50 9f f9 72 d5 65 1e 2a 2b d7 80 35 33 3b a3 8a 6b cb 76 04 bf d1 4a 13 b6 a0 f3 46 01 04 0d a0 38 96 b7 7d 96 0e 66 e2 38 b0 22 67 91 0a 84 c8 29 90 2c 86 8f 19 2a c2 1c f5 fc fa 6a 35 9f 4e bb b8 16 2b b2 53 e7 c2 51 b1 c6 af 8d d1 35 0b 2f 61 70 79 99 75 c9 2d 42 73 bb f1 b6 21 b3 0c 7b 81 a1 21 00 06 e0 62 95 7d 9e e5 fb 1e 58 92 1d a2 22 d4 c3 d1 46 2a ba 1b 1e 25 5c 3a 14 24 4d e4 cb 99 6a f3 4c fb 70 bf 8a e8 81 9d d5 26 cb 7d 9e 11 62 b9 cb 65 4a 41 3a 9c e3 17 69 1a 8d 8c a6 c2 d3 3a 0b f7 86 f9 f3 bf 08 20 b4 61 e0 3f 0b b7 b8 56 ce Data Ascii: N%#@~XSd2A6w2Wvl2(BjdTvRNPre+53;kvJF8}f8"g),j5N+SQ5/apyu-Bs!{!b}X"F%\:$MjLp&}beJA:i: a?V
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 71 fb f7 cb f1 d9 40 9c bf 1b f6 23 7f e8 5c cb 0a a4 03 4c 20 2e 8d ab 1b 17 ce 79 96 41 bf 11 c3 0b d7 b0 7f a3 23 9c a7 fa e5 ee 7b 01 d0 3b 7b 8f da e8 03 fb 79 d2 11 31 2f 42 41 62 47 d2 19 18 c3 9f 4e 20 71 64 48 f3 63 5e 3a 1c cb 2a 41 a7 a7 62 18 58 56 42 4c 8c 4f 35 fe 5e 93 43 70 3d 5a f0 b0 30 9a 03 d3 39 dc ba d3 3f 1b 99 97 76 0b 65 78 d2 bb 83 48 78 71 c3 e2 f0 a0 17 d4 11 1c bd 45 47 fd f0 90 4d a0 df 19 e1 f5 cc 91 b1 17 e8 c2 70 33 7b 37 dd e0 7d 01 3e 03 5d 15 65 a7 55 ff 8a ad 87 cd 31 73 c4 2a 13 c0 2c ae 89 0c c8 29 1e 4c 3f 03 ec d5 9c 16 c7 6a 91 a3 7e f1 fd 9c ff a3 7e 10 6a f0 c5 69 ed 78 94 ed 2b 37 7a af 0c 7b 3a 2f 36 df f4 a9 3a c2 00 a1 b6 e0 29 44 9c 5a 12 34 41 33 e7 62 88 aa 74 93 64 cc 4e 97 a8 55 77 fe a0 db d4 9b 42 22 Data Ascii: q@#\L .yA#{;{y1/BAbGN qdHc^:AbXVBLO5^Cp=Z09?vexHxqEGMp3{7}>]eU1s,)L?j~~jix+7z{:/6:)DZ4A3btdNUwB"
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 6a fb 57 61 b1 26 77 19 a8 9b 6d f4 d6 c1 b6 52 bd d8 91 9f da 40 e2 8a 93 24 e2 76 70 2b 9a db d5 08 e1 e6 c8 c0 3c f5 4e 67 5b 1d 3f 3a c7 76 d0 0c 96 eb 06 5f d3 f0 bd 0f 0f cc d2 5b 26 f0 92 ea e8 79 42 4f 55 fa 5c 85 03 4d 5d 70 2a 51 3e be 94 f9 07 e6 30 fc e0 01 51 e9 64 8d 38 e5 e1 69 dc e8 ca 1e 36 64 52 11 bf 33 0d 10 14 c1 9a 1f 70 e5 0d 7a 8e 1c 83 9f 26 47 cc 4b a7 33 19 8b 61 66 56 02 ad d3 09 94 9c 13 31 3f c4 88 52 0e 88 89 c5 17 7b 13 d2 7d 3e db bb 1c a5 63 ff 9d db 25 58 aa 41 ba 2b fe 9d 37 a0 92 88 d3 13 e3 9f 9a 68 07 55 71 3c 86 45 00 bf ab a4 9e 92 a1 63 af b7 a7 a1 3f be 18 9a b0 68 23 c8 20 d3 cf a6 ff 61 d4 25 35 b6 41 13 9b d5 94 04 8b 9f de 3e 87 67 b6 43 6d 84 1b 3d f9 d9 e1 93 0b 1e 69 72 62 ea 29 1a 05 29 e7 3f 70 37 cb 70 Data Ascii: jWa&wmR@$vp+<Ng[?:v_[&yBOU\M]p*Q>0Qd8i6dR3pz&GK3afV1?R{}>c%XA+7hUq<Ec?h# a%5A>gCm=irb))?p7p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.11	49859	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:21 UTC	778	OUT	GET /uu/api/res/1.2/f1365fOmnZ.4elatJGgP8Q--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/wpix_new_york_city_ny_articles_672/0499bb6503b1adc9da306296f5b6156a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:21 UTC	1193	IN	HTTP/1.1 200 OK Content-Length: 20440 Content-Type: image/webp Content-Disposition: inline; filename="0499bb6503b1adc9da306296f5b6156a.webp" Etag: "f635da6dce787c8447e043cf0819517b" Expiration: expiry-date="Fri, 11 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 12 Oct 2024 19:16:34 GMT Date: Sun, 13 Oct 2024 00:26:09 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=1;cpu=0;start=2024-10-13T00:26:09.361Z;desc=hit,rtt;dur=88,content-info;desc="width=536,height=284,bytes=20440,owidth=900,oheight=506,obytes=101452,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: ea5d426236dd17b7694060dbfd06760f Age: 129252 cld_id: ea5d426236dd17b7694060dbfd06760f x-image-width: 536 x-image-height: 284 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 52 49 46 46 d0 4f 00 00 57 45 42 50 56 50 38 20 c4 4f 00 00 f0 6b 01 9d 01 2a 18 02 1c 01 3e 79 38 95 48 24 a3 a9 ad a9 d6 6b 81 b0 0f 09 67 08 91 4f 9a d7 9a 45 d7 f4 e3 af 7d 25 91 7e e5 7d 1c 84 99 d3 82 e3 f6 6d 84 db d8 7c 3b c5 5d 8e fe 71 f6 ce 02 01 32 b0 b7 30 7e 75 ea 35 88 ff f4 3b c5 f7 df f9 fe 84 17 cf e1 c7 ef fe 59 7e 9d f8 4a d0 27 8b 97 ee bf 9b df 03 1f d8 ff dd 2a 8f 98 4e 6e b8 c9 e5 ea df 31 f9 6b b8 8f 2d 57 fc fe e0 44 f0 71 69 81 ca 7c 1b 1a 34 ba 67 27 9f aa f9 9f 8f 90 c5 a9 f1 7a b5 03 c1 c9 3d 1e fc 12 69 71 c2 b2 1e 65 08 0d ff c3 f2 f4 80 67 c2 21 dd c4 f7 89 c0 14 87 5f 1e 2b ba 7a c7 6a 20 f1 1a 0b e5 ec e5 52 c6 fd e6 55 a6 94 97 59 1f 76 1c 9b d0 20 22 9a 84 7c 6d d6 69 51 cd 40 27 e5 57 57 9d a0 4d c3 22 1b 0b 40 fe a1 Data Ascii: RIFFOWEBPVP8 Ok>y8H$kgOE}%~}m\|;]q20~u5;Y~J'Nn1k-WDqi\|4g'z=iqeg!_+zj RUYv "\|miQ@'WWM"@
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 4f 61 cb c6 32 34 65 ea b4 a0 77 7d 1c e7 e4 4a 1a 48 ea cf 00 f1 a1 c8 f9 de ad 4c b0 b7 4e 5a c3 3a ee 8c 9a e2 fd 80 b1 84 9c af e0 2f e5 30 3f d0 ce 4d d9 fb ff 7e af 2e 21 ae 97 02 a6 99 1a ed f9 6f 8d be 81 35 2d f9 53 ba 71 bf 4a e1 f8 c2 08 0d b0 25 e0 a0 3a 3c 62 8d 0f f7 5b 84 6a 31 12 20 23 f7 2a f8 b5 41 c9 19 0f 5e 98 b1 81 ce 53 a3 16 7a 4e ad bf f4 16 ac 05 6a 80 c1 d4 ca 14 c3 df 29 8c 03 f3 ff d7 00 c1 d1 b3 1e 59 a1 d2 fc d7 e6 d1 47 c7 e4 3b 19 62 ce 2b f6 b2 86 8a 0d d6 42 1b 70 08 e2 16 52 7c 8b c4 82 d1 f0 53 3d bc 77 9f c1 8e ef da bd 97 9b 79 81 4c f0 82 21 28 16 40 5b 99 fc d4 0a 4c a3 bc a9 c8 b7 de b9 44 ed b4 1b 8e 2c 34 15 c4 7c e1 ae 50 d1 cf 0f 87 97 27 a8 2c 66 73 ca e3 b0 3a 4b a7 9b 34 5a ed df 98 cc 36 b5 4a d6 9c c0 17 Data Ascii: Oa24ew}JHLNZ:/0?M~.!o5-SqJ%:<b[j1 #*A^SzNj)YG;b+BpR\|S=wyL!(@[LD,4\|P',fs:K4Z6J
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 16 fc a2 58 1c 1d 26 10 77 54 7b ff 55 ce b9 3a f9 ae ae 74 27 c6 30 b3 f7 02 d6 c3 cf 27 b2 ce d5 5b 1e d3 2c 5b ac 07 e0 50 a8 0b 8c b3 ac f6 24 09 18 36 7e 52 17 96 11 58 88 10 85 99 26 53 82 95 c1 9b 3f 01 30 d8 31 70 06 6b 78 be b9 16 4e a4 b5 7c 08 3a f4 82 b7 b9 8b 86 c0 b9 3f 90 28 2f ae 61 7e 37 13 b5 3e 70 a7 5a 2f a9 39 fa a5 f3 e0 3f 45 b2 05 d3 2e a7 20 17 2a 3d b2 b5 ef b0 53 89 2e 87 e1 bb 57 f4 ee 5c d7 3e 41 98 04 60 4c 53 7a e8 cb 0a f0 97 df d1 86 99 29 ae 58 c8 21 76 60 d3 2b 0b ce 17 dc 14 b0 7a e8 13 a8 0c e6 bc 36 d9 17 e1 e2 02 53 2b 5a e7 88 a6 20 49 fd c1 98 ab 34 15 7a 83 e3 26 6f 0d d5 8c 6d 43 be 76 49 62 61 01 46 dc 99 79 0a f4 e2 8c 85 2c 3e 4a d1 44 37 7d bf b8 36 88 04 ea a1 79 17 cb e5 a8 c8 20 c3 a6 26 1a 14 3f 51 ef bc Data Ascii: X&wT{U:t'0'[,[P$6~RX&S?01pkxN\|:?(/a~7>pZ/9?E. *=S.W\>A`LSz)X!v`+z6S+Z I4z&omCvIbaFy,>JD7}6y &?Q
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 72 e8 c8 c6 91 e3 39 ad 04 86 96 3d 98 2d c4 a2 3d ee 18 7e 3f 2a 02 d9 fb 21 36 e4 cd b2 31 76 59 97 37 55 2e 50 31 a1 b8 89 61 45 71 11 2e df 0d 9f 90 25 ab 5f 88 4c 55 cc b4 e3 9a 11 87 62 d4 72 f0 41 fd a5 2e 76 e1 e0 54 6c 67 03 9d c8 40 36 f2 e2 39 71 1c a8 7b 28 fe 97 0d d3 0c 0f 5e 15 5b a3 16 31 31 90 d1 e7 be 3f fb 57 87 8f fd ef 8f 02 0e 53 60 92 e5 f3 74 61 3d 6a 73 2d d0 a3 2f 44 18 4a ad 75 ee 29 c8 ab 6f 0c 94 8c 73 b6 cc 4b f0 d9 7e 19 d9 6f 52 41 ff e5 e4 e7 43 a9 a4 4c 9a 07 7c cb 7e 90 d3 b0 d3 1c 5c 99 e7 02 19 07 db 06 54 04 fb 98 c1 40 bb 97 4a ac 1e 05 30 9c e5 de d5 72 74 f0 03 cc 5c 00 94 75 8b 54 5e c5 22 d8 21 9f 61 ca 66 a0 f2 5d f0 c9 82 1b b6 b2 8e 82 3b 62 c0 54 0b 69 61 e2 e7 96 0c b2 5e 27 4f 5e 5b bd e8 45 9c 06 61 18 4c Data Ascii: r9=-=~?*!61vY7U.P1aEq.%_LUbrA.vTlg@69q{(^[11?WS`ta=js-/DJu)osK~oRACL\|~\T@J0rt\uT^"!af];bTia^'O^[EaL
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 09 f6 14 13 2d 74 9c a3 be 14 50 ae 71 ae 86 64 50 79 38 10 f4 98 4a df bd ef 97 ee 10 50 93 4d 31 d8 d2 e8 60 76 f6 98 5a 52 95 24 59 bc 97 f3 4b 65 3a 9f 17 2a 0c 25 d3 2f 39 e3 c1 57 ba 35 35 c1 b2 ce a3 26 a3 9f 87 45 33 48 c8 40 8d f0 b8 70 ef 26 a5 57 a8 0d db 1d fd 5d a5 cd 65 d0 09 1d 45 11 65 da e6 e8 78 36 23 e2 85 bc a4 42 27 f3 b4 7a 2d c1 31 69 59 5d af bb d1 4f 28 e1 87 72 be fa 3b df fd b4 3e f2 59 50 0d 6e 2a 8a 46 e3 d9 ab 4b ee 6a 1d 28 ae 96 40 44 4e 3c 8c 4b 33 fb 25 62 d9 e9 53 65 99 51 0e 23 1a 4c 7f 35 41 39 f6 95 b0 98 bc 1f 23 43 45 c5 dd 1f 45 77 de 6e fc 5b f9 41 6f ed a1 41 68 7b 03 24 2f 12 19 36 82 ff 5c 2f 62 ba 23 ce e2 9d bb a9 05 fd 8a 0b 72 0c fd c5 16 47 59 a2 3d 49 8d e9 73 e4 43 15 4d 0f 56 fe 3c f4 94 24 bd e4 f1 ab Data Ascii: -tPqdPy8JPM1`vZR$YKe:%/9W55&E3H@p&W]eEex6#B'z-1iY]O(r;>YPnFKj(@DN<K3%bSeQ#L5A9#CEEwn[AoAh{$/6\/b#rGY=IsCMV<$
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 87 a7 47 42 e2 84 da 6f 20 f1 7a 15 3d 48 07 c3 2c 43 95 58 55 03 7a 5f e4 b5 3a 2f e6 9f 99 a7 bd 65 aa a6 12 61 10 c5 d7 ff e4 65 74 29 1c d6 44 39 39 1b 9d 24 87 f7 21 96 d9 6f 9e 69 52 13 ce c8 57 f6 e1 4d 1c 4e 46 18 49 5f ab 83 cb ca cd ee 7e 95 a6 cc 54 e8 20 47 ec c4 1f 6f 1c 73 89 a3 ae d3 7b 59 41 2a 26 4f 8c 7c 83 0b 9c dc 0c 75 36 f4 ef d8 fd 5d 2a 96 d4 0a bd e9 d1 58 ee bb 8c eb 37 94 bd 78 3d 83 00 19 24 99 e2 bd 60 cc a4 03 c8 12 fc b5 e2 ad da 7f d7 48 79 b1 2c 5a 4d 21 05 bd 04 a1 bb cf b6 3a c4 7f 41 ab d9 07 d7 14 ec 05 d6 e8 ad 1c f4 de 65 49 b4 74 e8 ea 11 6f 8e 51 0a 55 71 0c 93 a8 2d 59 d5 79 d3 fc f3 e1 29 4d e6 2c 30 25 45 77 52 5b cf d1 0d 6a e5 7b 4a 0e 75 50 85 b5 fa cd 1b c1 f2 6d 81 01 25 c7 ff 17 2c cd 7d 5d a7 b3 b9 e3 1c Data Ascii: GBo z=H,CXUz_:/eaet)D99$!oiRWMNFI_~T Gos{YA&O\|u6]X7x=$`Hy,ZM!:AeItoQUq-Yy)M,0%EwR[j{JuPm%,}]
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 15 9d 4f 16 7d dc 8b 6f e6 a6 a7 7b a7 da e8 31 f6 ec f8 ff 28 e8 6f 3e ed 21 5a d0 74 ec 1d 1d de d1 fc 03 59 d4 4d a1 9e 51 48 6b ed d0 af 20 eb 6b d7 4f fe 00 72 ac e1 5b 99 58 41 55 0c ab ad c5 23 5d ed f1 9c 31 30 ff de 35 4b d3 3e f0 26 d2 9a 00 cf 93 30 c4 24 2c 77 22 f3 b0 ab 08 6b 3a 13 fb ac 3e 29 f4 cf 6d 24 b7 f3 08 e5 83 49 fe fe 78 d7 c4 5d a7 c3 ed c0 f5 df 34 df bb a4 45 ed 99 7f 29 08 2c fa 69 b3 ed 6e c1 de 2a e9 f8 61 c9 78 88 e9 15 01 07 5f 9e 2e 0f e0 8b 62 54 d0 20 5b ff bd 8c 7b 6e 8f c9 3b 8b 4e 9d 63 f6 35 f0 be 2f 50 9d 7b 89 f9 29 e9 41 84 ed d6 ec c8 2b 34 e6 28 af 4a ca e4 05 b4 33 90 0a f9 d7 6e cd b0 0a a5 a6 9d 7d 05 3c af 05 f9 58 a5 67 43 e3 87 14 ad 7f 18 90 ff cf c9 9f 1f 2d e1 45 ce b7 41 d9 ad 32 19 ba 86 e3 07 b6 0b Data Ascii: O}o{1(o>!ZtYMQHk kOr[XAU#]105K>&0$,w"k:>)m$Ix]4E),in*ax_.bT [{n;Nc5/P{)A+4(J3n}<XgC-EA2
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 40 85 2f 91 3d e6 49 dc 20 b5 5d 0c b9 51 3a 31 fa eb 45 59 aa b6 77 f5 8d 57 79 1f c7 99 5e 0b 9c 37 cf 9e 28 03 7d 13 f1 b1 e4 87 a1 b5 23 45 f2 10 88 8a ea 81 d0 02 73 3a 55 5d fd 61 be c7 a8 d2 9c 9c 2f eb 44 3e 21 a4 e0 59 e8 d0 1c c5 80 5d bf b1 e7 e2 7f 2d 85 b2 d7 71 ae ff fa 8e 4c b7 9d f1 65 32 fb b4 51 cf ac 50 fc a3 1b a0 f1 43 1a 27 36 0f 1f 23 b1 03 a7 36 87 7f b8 11 85 23 40 bf fd 49 c9 78 0e c3 e8 40 d0 4e 01 71 65 86 85 b6 7e 62 91 75 32 4c 7c d9 1b f9 f2 c2 d4 d8 3b 85 20 ad b8 88 3c d6 ff 2c 5c 94 7f a9 ed c5 d2 fb c0 37 8a b1 36 e6 6e bd b4 93 44 dc a2 9a 25 91 48 85 4c 6a 26 20 7f ae ad 59 31 01 c0 96 44 9f 8c e0 47 98 28 d8 27 15 5e 86 cc 9a e2 b5 68 98 5e f1 61 af 81 6e 58 d0 ee d5 94 33 08 50 4f 53 e9 0c ad f2 d2 a0 9a ee 98 f2 5f Data Ascii: @/=I ]Q:1EYwWy^7(}#Es:U]a/D>!Y]-qLe2QPC'6#6#@Ix@Nqe~bu2L\|; <,\76nD%HLj& Y1DG('^h^anX3POS_
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 62 b9 b2 57 c8 f4 d9 36 a9 d9 05 db 70 f0 0f b4 47 49 eb 29 c6 85 ae 63 14 0e a7 0f c9 a0 bd c9 21 32 f2 f4 16 5e 3c 9c 85 ec 8a 77 c5 08 92 24 7d 4d 6e c2 90 28 96 36 2d 19 84 23 41 20 16 26 f0 21 8a e9 3d 83 bc 98 33 90 5a 85 56 e5 a6 cd d9 50 d0 bd d2 53 01 97 7d 8c 83 8f fe db c9 62 bd bb 10 f9 13 2a f4 27 c9 27 8d 1c bb a4 5c 30 0d 33 cf 8b 82 d2 80 92 0d 2c a2 87 6f 5e 6e 04 66 c6 80 bd b2 1b af 7c 17 0a 22 30 84 df 5a 4e 5b 4b f0 0b 19 8d fc 53 b3 a9 cb 10 6e 30 81 92 91 21 2d a4 10 a5 4e 76 db bf 1f 77 36 b7 a5 de ff ab 74 28 c4 0f c7 91 d9 31 d6 e0 dc 51 cf e6 a8 12 4d 92 c7 fe 29 29 17 73 c8 0e 07 3e 8c 64 d5 40 3b de bc 1e 6f 07 23 52 c6 90 98 dc 39 4f ce e6 00 b5 4d c0 54 6c 4d 12 91 ab 95 37 19 27 be 5d 53 aa 53 04 32 8d f1 b9 a0 ab 6b 5b 19 Data Ascii: bW6pGI)c!2^<w$}Mn(6-#A &!=3ZVPS}b*''\03,o^nf\|"0ZN[KSn0!-Nvw6t(1QM))s>d@;o#R9OMTlM7']SS2k[
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 7b 62 fb 00 83 95 0c 0d d3 b7 f6 2c 89 0e 39 2b ea 16 65 72 d4 8f 90 ca 2a eb a5 7b 06 3a 68 13 4f 79 d7 bd 6b 43 f4 77 e7 71 a5 8a c3 f7 e5 c9 3b cd 7a 12 d2 57 f3 d1 a2 33 f6 da 6d d9 f8 92 b4 4e 9b 8c e5 b4 93 2f f0 f3 18 0b 38 e8 d2 14 85 3c 1d 99 05 e2 d9 73 14 fc d6 6e 95 20 c5 4b 32 b3 5d eb 43 94 00 c0 36 4d b2 44 31 61 84 0a f0 02 0d 19 aa 2a 44 d5 f7 c2 30 8c 65 ad 95 ee f4 fb d1 68 0d 7e f6 1f 53 6f 5e 54 6c 03 da be 95 35 aa 10 0e b6 b5 15 89 3b fe 8e a9 df 9a fa 06 be d9 06 0a aa cb de 66 c9 ec 21 5e 78 04 81 4a 32 bb ff 67 b1 ef 77 5d 5f f8 74 e0 7e dc 3d 62 8d e5 70 02 b5 68 2f 84 ed 28 49 3a 42 02 27 ae 51 79 fe b4 ce 9f f8 8d b3 1b 72 82 ae e1 46 41 7f 5e 68 5c 74 8a 17 cf 77 76 11 fc 16 88 9d e1 66 7e 64 51 b2 4c 17 18 b1 7c 44 6d 99 b0 Data Ascii: {b,9+er{:hOykCwq;zW3mN/8<sn K2]C6MD1aD0eh~So^Tl5;f!^xJ2gw]_t~=bph/(I:B'QyrFA^h\twvf~dQL\|Dm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.11	49860	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:21 UTC	750	OUT	GET /uu/api/res/1.2/IKm1uI6ofoB8D8CcUqetHw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/71168fc52590d31ed26a2a8e925c20f6.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:21 UTC	1087	IN	HTTP/1.1 200 OK Content-Length: 20728 Content-Type: image/webp Content-Disposition: inline; filename="71168fc52590d31ed26a2a8e925c20f6.webp" Etag: "ffd20ba807556587d642d14f5f18e8b6" Last-Modified: Sun, 13 Oct 2024 00:20:13 GMT Date: Sun, 13 Oct 2024 00:57:15 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=2;cpu=1;start=2024-10-13T00:57:15.266Z;desc=hit,rtt;dur=89,content-info;desc="width=536,height=284,bytes=20728,owidth=5226,oheight=3484,obytes=3172051,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 97db377a3556bb7b6a802712714e10fc Age: 127386 cld_id: 97db377a3556bb7b6a802712714e10fc x-image-width: 536 x-image-height: 284 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 52 49 46 46 f0 50 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFFPWEBPVP8X ICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 3c c7 a1 13 7e 3d 88 a4 ba 12 06 c5 30 8a ad 1e e9 21 9e 28 08 5b 24 ed eb 2c cd 00 a2 ac e0 65 c0 63 d9 b6 89 8b 32 ff 85 5c 52 c5 a2 30 e4 9d a7 ab e3 31 1e 08 54 bc 3b 91 e2 ab 22 c9 19 16 ea e6 87 dd b2 92 82 eb ee f1 06 f1 de 9f 89 34 e6 1c f3 7b ee 63 0e 5f b9 11 ab 22 ba 8d 06 d4 d3 9a 21 ba d2 04 39 44 e0 2f 55 05 5e 64 6c 20 26 44 1e 39 1e c8 d0 fc 1a 82 72 27 f8 d1 82 2d 20 97 7c cf 09 a5 50 34 70 e2 c1 d8 d3 d6 46 1a 65 55 ce 60 b6 71 8a 31 6b bc 7f 20 7d 2c eb ad be 16 ce 2c 78 ea 44 80 67 8d 6e 15 43 67 c9 2d 98 87 4c 6b b7 1b 4d 10 6a 78 12 e5 ca e8 eb 63 60 ed 05 3f 92 09 44 fc 31 37 e5 94 18 65 a5 ea 12 23 c9 08 d3 bd ec 60 ba 05 1c e7 5f 85 4c ed 9d fc 88 be 12 aa bf f3 90 df 10 fe 51 1b 99 75 9a c3 a2 4f 81 12 34 77 34 84 e5 b3 a1 57 7f Data Ascii: <~=0!([$,ec2\R01T;"4{c_"!9D/U^dl &D9r'- \|P4pFeU`q1k },,xDgnCg-LkMjxc`?D17e#`_LQuO4w4W
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 03 63 ec d9 f7 60 cd b1 74 ae fa 27 9d 51 05 54 56 a6 61 a8 46 19 30 59 e1 9e a1 8e de 35 77 1a 81 e5 24 61 99 4f ff e9 b7 31 fd 17 ea f3 9a b8 93 b5 be b9 ff 29 fd f5 b2 15 76 2e 57 71 1a ca 7e 15 c6 ea fb 19 97 04 9c ba 0d c4 3a 77 f5 2b 9e 32 b7 c6 8c b9 be aa d8 4e ee 35 06 52 51 85 17 1a f5 10 23 8d b6 1d 95 fe e0 a0 58 ae 00 0c 50 e7 c7 74 b3 5b 14 29 f3 41 56 f8 34 a2 53 28 de ad 7a ed 5c 0c 7f d2 bf bc 1b fd 48 12 c9 82 2f a6 b4 2d b3 e9 9f fc 3a be 86 9c b9 85 dc 25 32 77 c5 55 12 f3 bb 3b 47 58 e4 87 d7 49 c5 fc 3c aa 35 32 d0 2a 56 7b c9 5c 56 c5 27 85 2d 27 b0 63 c9 fa 76 e0 a7 04 1d 19 87 44 8b bc b4 23 30 f0 9f c6 cb f5 bc d4 76 a7 76 04 c6 c8 1a 4d d5 7e 2e 56 3d ca 19 98 dc 6b a3 9e 0c 6f 6a 47 68 42 98 3e 32 fa 2a 4e ee a2 47 a6 9c ec 6a Data Ascii: c`t'QTVaF0Y5w$aO1)v.Wq~:w+2N5RQ#XPt[)AV4S(z\H/-:%2wU;GXI<52V{\V'-'cvD#0vvM~.V=kojGhB>2NGj
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 1b 6f 7e 35 31 f4 17 14 cf d9 fa 08 68 58 fa 16 77 e5 84 c3 a1 64 9d 3a db 7d 57 24 6f c4 f6 a4 39 ed 0f a7 2d 2c 04 52 c0 aa 82 92 09 7b a5 40 11 1a a0 fb 77 65 25 c0 e3 08 b0 e1 95 8e 59 45 de a2 68 98 8e 5c 9f e4 41 23 f6 35 26 9e e2 a1 f7 29 a3 55 53 f0 ec a2 86 66 93 27 84 b7 33 03 91 9c 87 ad c3 39 e7 e7 f1 dc 9b 5d 1e 3d 22 14 53 1e 2a f8 f9 e9 7e a7 ee 3e a4 bb 4d 4e ab 1c f3 2e e3 6b 06 1a 97 b9 ef a6 2e 6a fd 95 aa f4 d6 73 76 89 9d 0c b8 aa 56 f7 31 9a d8 8c 38 5f 72 28 35 24 94 2e 93 48 1c 3e 74 20 bf 42 21 5f 74 d1 d2 b2 e6 1f 0a cd 32 d4 d6 f1 65 02 5e 75 01 f7 40 20 d9 2f cb 6e 53 cf c4 df a1 13 a2 93 ef bd 18 a8 d8 26 89 3f 99 ed 4c 39 65 d7 73 33 c8 4a ff b1 fb ba 4f 39 a3 6a 81 7b 9e dc af 91 f4 9b f4 ff 6c ab 9f bb 27 fb 5c ee 77 09 32 Data Ascii: o~51hXwd:}W$o9-,R{@we%YEh\A#5&)USf'39]="S*~>MN.k.jsvV18_r(5$.H>t B!_t2e^u@ /nS&?L9es3JO9j{l'\w2
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 18 58 7b 3b 05 41 06 92 7a a0 c7 cc dd 69 7c f3 59 d4 b3 bb 6f 91 87 82 9a 40 3f 4d 51 df 4c 7e dd d0 21 ae 74 55 25 98 a6 84 68 76 b9 63 59 fb fc 72 60 30 31 b5 8c a2 63 96 05 2f 1a 6e 10 4d 65 03 7b 9f 1a e7 27 72 b7 3d 06 69 17 85 15 ef 68 c9 9f c2 bb 14 f8 d4 7e 4a 44 32 f2 ef 37 6e d2 6c 95 3d 92 ac a1 6c 80 fa 28 13 1b a1 2c c6 29 a8 1f 8c 14 91 c2 30 9e 89 0b 6e 13 26 45 af 9c c7 e4 52 e1 de 8c c9 4a 0b 27 70 80 71 f8 b1 e3 95 f1 e1 fa 3e 36 9b 12 51 cf 49 a2 de 24 d7 f2 89 21 0b 34 85 68 78 16 cc 90 03 e8 e2 b1 78 2d 45 3e a5 a2 8c e9 03 03 05 ac 8e 7d 5a 82 7c a7 5a ef 5c 6b fb f7 5c 2d 43 6e 2d d8 be a7 4b af 62 11 20 ca 6a 57 52 e9 4e b3 be 19 38 87 98 18 c6 3e 3e e6 4a 8b 85 07 ce 40 f5 b7 92 a6 24 68 37 68 7e 86 13 a4 3c 4e ae 3a 5b 37 ca c7 Data Ascii: X{;Azi\|Yo@?MQL~!tU%hvcYr`01c/nMe{'r=ih~JD27nl=l(,)0n&ERJ'pq>6QI$!4hxx-E>}Z\|Z\k\-Cn-Kb jWRN8>>J@$h7h~<N:[7
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 18 eb a1 5f 29 d9 99 50 3f 31 2c 79 6e d2 ec f8 e2 d9 09 62 70 56 a5 2b 27 9f 18 06 a5 6f 83 99 25 dd 39 be 57 e0 84 fe 52 ae 33 eb 71 3f 98 8d e5 ec 15 3d e0 0c d2 88 d0 4b 86 2e f7 12 13 36 28 6d 82 6c d5 f3 b2 d5 a4 0e 46 1b 57 28 8f 68 c0 04 49 3a bf 54 6c 8d f4 73 ee 39 8d 2f 4a b2 53 84 b3 f5 16 c1 6e 8e af 79 20 1a 80 96 b6 7b 1d 3b 8b fd fb 5a d2 56 75 5f 36 3c 5d 62 d6 d9 82 5b 56 fe e0 2e 41 92 5b 40 1c 9f 14 31 6e 04 cf 43 d7 d5 61 c2 5a 73 1b d6 a0 66 02 3b 3c db 6a f2 9e f4 4c 3f 9c 0d 20 69 3b 9d 36 12 71 12 f7 06 be 71 11 76 ac 23 27 86 50 6e ae 26 42 c7 e8 1a 68 cc a2 8a fb c2 29 44 45 1d 87 07 58 6a 62 2d 71 8e ff 11 97 36 7c 95 94 70 f8 83 41 76 2e e0 3b 65 cb f5 8e ef 47 df e1 d5 90 24 88 9e 16 2c 02 d2 e8 e9 05 6e b0 95 4c 27 43 b4 8e Data Ascii: _)P?1,ynbpV+'o%9WR3q?=K.6(mlFW(hI:Tls9/JSny {;ZVu_6<]b[V.A[@1nCaZsf;<jL? i;6qqv#'Pn&Bh)DEXjb-q6\|pAv.;eG$,nL'C
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 5e 8a 74 74 ba b0 bc 02 13 04 b6 75 75 d1 89 a4 f7 d7 48 d6 43 16 f2 55 fc 1e a3 69 e6 0f 18 92 cb 91 13 96 6b 39 af 6e e2 f5 c2 87 ab 12 56 54 67 7f 08 63 58 e0 09 e1 39 70 e2 d8 97 b0 18 a6 9b 67 0a ff 6f 5f 23 74 e4 77 09 92 cf 0a c6 93 b5 07 e3 7a d2 a2 33 d4 12 a7 a1 91 79 ad 05 f5 c9 03 64 bc 8d 4a 46 91 e1 f2 84 98 4d 6a 7b 0c 9c 8b 2c 01 d6 06 57 52 8a a5 47 ff f4 c5 25 d8 15 84 12 ae b6 fe 96 a7 45 fb 65 4c f9 9e 75 26 17 2b bc 9d b3 77 da 6d e0 6f 5f fa 49 92 ff 23 44 41 49 2f 29 8b 6a b9 2b 2a d9 46 9c 27 10 53 09 96 67 8f 0c 15 93 c4 9c 1b a7 88 5c 5c 5d 77 e8 82 e7 59 c4 17 e1 05 29 b9 ad bf 67 7e e4 ee 93 fa 7a 43 0d 33 0c 63 58 ed cc ec 3e 59 4c 2c ba 3e c4 8b e5 08 5b 3c d7 f5 1c 76 1e eb b1 60 61 24 b1 2b 4f 96 6a 23 e0 76 9d 3d 8f 72 df Data Ascii: ^ttuuHCUik9nVTgcX9pgo_#twz3ydJFMj{,WRG%EeLu&+wmo_I#DAI/)j+*F'Sg\\]wY)g~zC3cX>YL,>[<v`a$+Oj#v=r
2024-10-14 12:20:21 UTC	1300	IN	Data Raw: 1b d5 2f ac 79 29 1e 35 a0 f8 4c f6 d0 25 e1 a4 95 11 09 39 a2 3c b0 30 09 ef 11 23 94 ad 67 bc 24 8d ef 82 f9 98 e2 5e 26 37 7d 30 af eb e5 a2 dd e5 f5 6d df ac 81 26 eb 93 0c 11 2b 1a b5 25 38 18 cb f1 b3 5a 32 c5 a7 0d 61 6f 94 d4 38 37 85 43 38 f7 ff b7 18 1c 34 70 2d d3 de 6b 1c 4b 79 99 e7 d9 00 1d a0 4d 68 f9 96 88 66 7e d3 68 fb 3e d6 b2 15 de 84 66 f9 e6 72 76 95 71 3a e5 aa 03 7b f0 97 ee 0e d5 12 c3 cf 07 c5 2e fb 51 54 09 20 15 66 56 32 e7 d0 67 c8 be 8f 5e ec 7e 39 e8 0c 72 20 cc 10 36 64 6a f3 51 12 d3 4e 5a 0c 7b 8a 9f 9f d3 4c b0 80 de b0 5d 22 f1 9b d9 65 0f c5 39 11 86 2f 64 af 90 94 bd ee ba bf c3 9d 78 b5 d6 68 ad a5 f6 ef e7 eb 39 a7 06 b0 25 60 ea b0 e2 19 a0 8f a9 fd 4b a1 9d 80 48 40 75 5d 00 78 7a e0 6f 6b e5 bc 44 40 f9 59 00 ed Data Ascii: /y)5L%9<0#g$^&7}0m&+%8Z2ao87C84p-kKyMhf~h>frvq:{.QT fV2g^~9r 6djQNZ{L]"e9/dxh9%`KH@u]xzokD@Y
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: bf e8 b0 a1 06 07 11 1a 7a eb b7 55 e5 e2 e1 62 a1 ce 9d 2e 07 21 7a 36 bb 4d 74 b2 e7 aa 78 13 71 cc 51 da 9b 64 39 cd c5 0c 25 43 83 0b 49 28 38 76 f9 be 76 cf 91 07 c0 2c 0a a5 71 a1 7d 81 f5 29 45 23 d8 96 4b 24 c2 62 ae 4e 64 d4 d9 e4 8f 30 ef 99 4d e0 0d b1 70 45 0d ea 1b a3 65 53 a7 c3 6a a6 ab a1 b7 14 24 a4 93 83 de e2 81 54 fc 9a d1 c7 49 50 65 43 d8 f8 ca 87 54 9c de 1f 03 a2 6f b2 ba 4a b8 f9 1f 66 60 46 55 f3 b3 11 f9 94 ae 86 3b 88 26 cc 08 94 f8 5a 87 2f 80 6b aa 3a 87 a6 c2 d8 e4 70 2b fb 1c 19 5b 11 9a 20 30 fb f3 aa 61 f8 f3 8e a5 3a d6 aa f5 7e 2d 06 75 8b ec 13 e7 8a 26 e2 1a 66 fc a9 53 f9 05 4f 44 2c b4 af 0f 40 d3 c3 ce e2 f1 bb 98 73 8b 1e ed c7 e4 49 39 25 9d c2 9f ac a1 e7 3d 6f a1 99 9c 72 bf d5 b3 2d 52 5d d4 21 38 4b 3b cd 38 Data Ascii: zUb.!z6MtxqQd9%CI(8vv,q})E#K$bNd0MpEeSj$TIPeCToJf`FU;&Z/k:p+[ 0a:~-u&fSOD,@sI9%=or-R]!8K;8
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 9e 99 49 89 30 66 a2 bb ad bc 19 6b 55 a0 d1 95 d6 fb 49 4d 6b 43 07 92 0e eb ee 02 8d 9a 35 35 86 bb a1 ef a1 4f 4e a8 46 df 10 6e ec 07 9e f7 11 0c e8 9d 48 46 0f e3 ec 60 08 47 18 7d 31 51 4c 8d 52 5a 63 5b 5d 79 1a 5e b1 d0 5b ba 67 96 33 9c 1a 3d 09 1a 33 41 64 a4 39 74 c7 82 4b 1e c3 e6 9e ee 85 27 1b 5b 7e 65 9b b7 d8 92 95 ca 53 73 a9 22 b7 54 5c 7c 09 48 a8 9d 1a e5 81 a3 e2 e6 b5 fa 5d 6f f1 e8 32 eb 14 c4 c8 6f d8 d6 fd c4 0c 69 c2 e5 07 81 f2 79 b2 73 52 12 a5 31 89 28 77 73 41 5c 36 34 d2 01 b1 f5 4b 67 36 83 c7 bb 26 0f 6e b4 07 ee fc 1f f9 a0 58 23 17 ce 85 8d ff 26 c8 bf 14 19 1a e8 fb 95 cf 10 88 fd 28 a2 1c d7 24 eb 1a c2 70 7f bd 3f 76 d8 57 a0 46 df d4 a6 05 77 d4 4e c8 4e 6f 6e 9a dd 80 85 32 49 79 82 a8 78 a8 d0 53 35 f7 11 4d 7c 1b Data Ascii: I0fkUIMkC55ONFnHF`G}1QLRZc[]y^[g3=3Ad9tK'[~eSs"T\\|H]o2oiysR1(wsA\64Kg6&nX#&($p?vWFwNNon2IyxS5M\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.11	49861	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:21 UTC	599	OUT	GET /g/images/spaceball.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:21 UTC	729	IN	HTTP/1.1 200 OK x-amz-id-2: 3sxtJTfROdI85Y6sAnfJZATOb9NEuaUv5cZ6hPdqu+cwD2qcuHdLzyGq69g1deDKQAdlOc4yRDM= x-amz-request-id: A5QVA36H1434EH7M Date: Wed, 02 Oct 2024 17:09:47 GMT Last-Modified: Wed, 24 Feb 2021 23:21:03 GMT ETag: "325472601571f31e1bf00674c368d335" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: KAUQOG5o0gBSJgl4c2JS9bVGo5z87pfq Accept-Ranges: bytes Content-Type: image/gif Content-Length: 43 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1019435 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.11	49863	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:22 UTC	376	OUT	GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:22 UTC	699	IN	HTTP/1.1 200 OK x-amz-id-2: negFVKVkWt/TOl+RmM7GCfWgSsCSNkqtJCc6UDh9clq7aXBD2Cgp5S1S/73mnYJwBHxQ+i+35DQ= x-amz-request-id: RBE4QDDSN426B7PH Date: Tue, 08 Oct 2024 16:07:25 GMT Last-Modified: Tue, 19 May 2020 03:33:21 GMT ETag: "ca243b22264dca7a4a899c51cc2dc963" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public, immutable Accept-Ranges: bytes Content-Type: application/x-javascript Server: ATS Content-Length: 158 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:22 UTC	158	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 64 69 76 20 69 64 3d 22 61 64 76 65 72 74 69 73 65 6d 65 6e 74 2d 74 68 61 6d 62 61 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 44 69 73 70 6c 61 79 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 3c 2f 64 69 76 3e 27 29 3b 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 2c 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 0a Data Ascii: document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.11	49864	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:22 UTC	551	OUT	GET /aaq/notifications/js/sh-5.17.91.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:22 UTC	711	IN	HTTP/1.1 200 OK x-amz-id-2: wndDckrRHS8LroPYu+rctGptrH2jkEPPfpqGh7alwYN9u91QsQ1gOUnWITQv8tv/4FiK+m2w5TmlqhBt81OVU90KIzYeODlNs3vwBRXjQ68= x-amz-request-id: TGXKP2NPAVVBR4QG Date: Fri, 20 Sep 2024 17:27:58 GMT Last-Modified: Fri, 01 Mar 2024 20:31:04 GMT ETag: "e6a743e22f5b7027f77359f0a549572b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: a4d6j1rGXjJh7zYv1zxDfxRxpUDhRFD1 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 23479 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2055146 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 22 42 72 6f 77 73 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 48 65 6c 70 65 72 22 2c 69 3d 5b 22 63 68 72 6f 6d 65 22 2c 22 63 68 72 6f 6d 65 20 6d 6f 62 69 6c 65 22 5d 2c 70 3d 22 65 72 72 6f 72 22 2c 66 3d 22 69 6e 66 6f 22 2c 6e 3d 22 70 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 74 3d 22 55 6e 73 75 70 70 6f 72 74 65 64 20 42 72 6f 77 73 65 72 2e 22 2c 75 3d 22 67 72 61 6e 74 65 64 22 2c 61 3d 22 64 65 6e 69 65 64 22 2c 63 3d 22 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 73 3d 22 74 79 70 65 22 2c 64 3d 22 70 75 73 68 22 2c 65 3d 22 64 69 73 70 6c 61 79 2d 70 75 73 68 2d 70 72 6f 6d 6f 73 22 2c 6c 3d 22 6a 73 2d 70 75 73 68 2d 73 75 62 73 63 72 Data Ascii: !function(){var r="BrowserSubscriptionHelper",i=["chrome","chrome mobile"],p="error",f="info",n="pushNotifications",o="undefined",t="Unsupported Browser.",u="granted",a="denied",c="subscriptions",s="type",d="push",e="display-push-promos",l="js-push-subscr
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 41 67 65 6e 74 2c 6e 3d 65 2e 62 72 6f 77 73 65 72 4e 61 6d 65 2c 69 3d 65 2e 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 2c 72 3d 65 2e 6f 73 7c 7c 65 2e 6f 73 4e 61 6d 65 2c 74 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 73 5b 6e 5d 7c 7c 7b 7d 2c 6f 3d 21 31 2c 73 3d 21 31 2c 61 3d 74 2e 6f 73 26 26 74 2e 6f 73 2e 6c 65 6e 67 74 68 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 69 66 28 2d 31 3c 72 2e 69 6e 64 65 78 4f 66 28 74 2e 6f 73 5b 63 5d 29 29 7b 73 3d 21 30 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 28 21 74 2e 6d 69 6e 56 65 72 73 69 6f 6e 7c 7c 69 3e 3d 74 2e 6d 69 6e 56 65 72 73 69 6f 6e 29 26 26 28 21 74 2e 6d 61 78 56 65 72 73 69 6f 6e 7c 7c 69 3c 3d 74 2e 6d 61 78 56 65 72 73 69 6f 6e 29 26 26 28 21 74 2e 75 Data Ascii: Agent,n=e.browserName,i=e.browserVersion,r=e.os\|\|e.osName,t=this.config.supportedBrowsers[n]\|\|{},o=!1,s=!1,a=t.os&&t.os.length,c=0;c<a;c++)if(-1<r.indexOf(t.os[c])){s=!0;break}return(!t.minVersion\|\|i>=t.minVersion)&&(!t.maxVersion\|\|i<=t.maxVersion)&&(!t.u
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 2e 6f 6e 62 6f 61 72 64 54 69 6d 65 7d 29 2c 6c 26 26 6c 28 6e 75 6c 6c 2c 7b 69 73 4f 6e 62 6f 61 72 64 45 72 72 6f 72 3a 21 30 2c 70 75 73 68 4d 61 6e 61 67 65 72 43 68 75 72 6e 3a 6e 75 6c 6c 7d 2c 6e 29 3b 69 26 26 69 3d 3d 3d 72 7c 7c 22 67 72 61 6e 74 65 64 22 21 3d 3d 65 2e 73 74 61 74 65 3f 6c 26 26 6c 28 6e 75 6c 6c 2c 7b 69 73 4f 6e 62 6f 61 72 64 45 72 72 6f 72 3a 21 31 2c 70 75 73 68 4d 61 6e 61 67 65 72 43 68 75 72 6e 3a 21 31 7d 2c 6e 29 3a 70 2e 6c 6f 67 53 75 62 73 63 72 69 70 74 69 6f 6e 43 68 75 72 6e 43 68 65 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 70 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 66 2c 7b 63 6f 64 65 3a 22 73 75 62 43 68 75 72 6e 22 2c 69 64 62 44 65 76 69 63 65 49 64 3a 69 2c 64 65 76 69 63 65 49 64 3a 72 2c 73 Data Ascii: .onboardTime}),l&&l(null,{isOnboardError:!0,pushManagerChurn:null},n);i&&i===r\|\|"granted"!==e.state?l&&l(null,{isOnboardError:!1,pushManagerChurn:!1},n):p.logSubscriptionChurnCheck(function(e){d&&p._sendBeacon(f,{code:"subChurn",idbDeviceId:i,deviceId:r,s
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 73 65 20 73 26 26 73 28 6e 75 6c 6c 2c 6e 75 6c 6c 29 7d 2c 66 65 74 63 68 50 75 73 68 50 65 72 6d 69 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 74 68 69 73 2e 63 68 65 63 6b 49 73 53 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 28 29 26 26 2d 31 3c 69 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 75 73 65 72 41 67 65 6e 74 2e 62 72 6f 77 73 65 72 4e 61 6d 65 29 3f 74 68 69 73 2e 5f 66 65 74 63 68 50 75 73 68 50 65 72 6d 69 73 73 69 6f 6e 43 68 72 6f 6d 65 28 65 29 3a 65 28 6e 65 77 20 45 72 72 6f 72 28 74 2c 6e 75 6c 6c 29 29 7d 7d 2c 72 65 71 75 65 73 74 50 75 73 68 50 65 72 6d 69 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 6e 29 7b 74 68 69 73 2e 63 68 65 63 6b 49 73 53 75 70 70 6f Data Ascii: se s&&s(null,null)},fetchPushPermission:function(e){if(e){this.checkIsSupportedBrowser()&&-1<i.indexOf(this.config.userAgent.browserName)?this._fetchPushPermissionChrome(e):e(new Error(t,null))}},requestPushPermission:function(e,n){if(n){this.checkIsSuppo
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 65 72 53 65 72 76 69 63 65 57 6f 72 6b 65 72 28 72 2c 74 29 7d 29 2e 74 68 65 6e 28 69 2e 5f 64 6f 50 75 73 68 4d 61 6e 61 67 65 72 53 75 62 73 63 72 69 62 65 2e 62 69 6e 64 28 69 29 29 2e 74 68 65 6e 28 69 2e 5f 62 75 69 6c 64 50 65 72 6d 69 73 73 69 6f 6e 4f 62 6a 65 63 74 43 68 72 6f 6d 65 2e 62 69 6e 64 28 69 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 66 2c 7b 63 6f 64 65 3a 22 62 72 77 73 72 50 65 72 6d 52 65 71 53 75 63 63 65 73 73 22 2c 6d 65 73 73 61 67 65 3a 65 2e 73 74 61 74 65 7d 29 2c 6e 28 6e 75 6c 6c 2c 65 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 62 72 77 73 72 50 65 72 6d 52 65 71 45 72 72 Data Ascii: erServiceWorker(r,t)}).then(i._doPushManagerSubscribe.bind(i)).then(i._buildPermissionObjectChrome.bind(i)).then(function(e){i._sendBeacon(f,{code:"brwsrPermReqSuccess",message:e.state}),n(null,e)}).catch(function(e){i._sendBeacon(p,{code:"brwsrPermReqErr
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 65 7d 29 2c 6e 2e 6c 6f 67 50 75 73 68 4d 61 6e 61 67 65 72 46 61 69 6c 75 72 65 28 29 7d 29 3b 6e 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 50 75 73 68 4d 6e 67 72 53 75 62 46 61 69 6c 22 2c 6d 65 73 73 61 67 65 3a 22 50 75 73 68 20 4d 61 6e 61 67 65 72 20 73 75 62 73 63 72 69 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 6f 75 74 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 20 6b 65 79 22 7d 29 7d 7d 2c 5f 64 6f 50 75 73 68 4d 61 6e 61 67 65 72 55 6e 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 67 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 Data Ascii: e}),n.logPushManagerFailure()});n._sendBeacon(p,{code:"PushMngrSubFail",message:"Push Manager subscribe called without application server key"})}},_doPushManagerUnsubscribe:function(r){var e=this;return r.pushManager.getSubscription().then(function(e){if(
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 69 6e 6b 56 69 65 77 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 74 72 61 63 6b 65 72 26 26 65 26 26 65 2e 73 65 63 26 26 65 2e 73 6c 6b 26 26 74 68 69 73 2e 74 72 61 63 6b 65 72 2e 62 65 61 63 6f 6e 4c 69 6e 6b 56 69 65 77 73 28 5b 7b 73 65 63 3a 65 2e 73 65 63 2c 74 31 3a 65 2e 74 31 2c 74 32 3a 65 2e 74 32 2c 5f 6c 69 6e 6b 73 3a 5b 65 5d 7d 5d 29 7d 2c 5f 61 74 74 61 63 68 50 65 72 6d 69 73 73 69 6f 6e 55 70 64 61 74 65 48 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 72 2e 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 50 65 72 6d 69 73 73 69 6f 6e 43 68 61 6e 67 65 42 65 61 63 6f 6e 3f 72 2e 63 68 65 63 6b 49 73 53 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 28 6e 29 3f 6e 61 76 69 67 61 74 6f 72 26 26 6e Data Ascii: inkView:function(e){this.tracker&&e&&e.sec&&e.slk&&this.tracker.beaconLinkViews([{sec:e.sec,t1:e.t1,t2:e.t2,_links:[e]}])},_attachPermissionUpdateHandle:function(e){var r=this;r.config.enablePermissionChangeBeacon?r.checkIsSupportedBrowser(n)?navigator&&n
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 63 6f 6d 70 6c 65 74 65 64 22 3d 3d 3d 6f 2e 6f 6e 62 6f 61 72 64 53 74 61 74 65 26 26 6e 29 7b 76 61 72 20 69 3d 7b 63 68 61 6e 6e 65 6c 5f 69 64 3a 6e 2c 64 65 76 69 63 65 5f 69 64 3a 72 2e 64 65 76 69 63 65 49 64 7d 3b 73 26 26 28 69 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 69 64 3d 73 29 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2c 61 2e 67 65 74 45 73 73 65 6e 74 69 61 6c 41 74 74 72 69 62 75 74 65 73 28 29 29 3b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 53 75 62 73 63 72 69 70 74 69 6f 6e 53 65 72 76 69 63 65 28 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 6f 70 65 72 61 74 69 6f 6e 3a 22 75 70 64 61 74 65 22 2c 73 65 72 76 69 63 65 52 65 73 6f 75 72 63 65 3a 22 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 73 65 74 41 74 74 72 69 Data Ascii: completed"===o.onboardState&&n){var i={channel_id:n,device_id:r.deviceId};s&&(i.registration_id=s);var t=Object.assign(i,a.getEssentialAttributes());return a.callSubscriptionService({method:"POST",operation:"update",serviceResource:"subscriptions.setAttri
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 22 79 61 68 6f 6f 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 2c 32 29 3b 65 2e 6f 6e 75 70 67 72 61 64 65 6e 65 65 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 63 2c 7b 6b 65 79 50 61 74 68 3a 73 7d 29 2e 74 72 61 6e 73 61 63 74 69 6f 6e 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 75 70 67 72 61 64 69 6e 67 3a 20 22 2b 65 2e 74 61 72 67 65 74 2e 65 72 72 6f 72 43 6f 64 65 29 3b 72 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 49 44 42 55 70 67 72 61 64 65 46 61 69 6c 22 2c 6d 65 73 73 61 67 65 3a 6e 2e 6d 65 73 73 61 67 65 7d 29 2c 69 26 26 69 Data Ascii: "yahooNotifications",2);e.onupgradeneeded=function(e){e.target.result.createObjectStore(c,{keyPath:s}).transaction.onerror=function(e){var n=new Error("Failed upgrading: "+e.target.errorCode);r._sendBeacon(p,{code:"IDBUpgradeFail",message:n.message}),i&&i
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 52 65 61 64 69 6e 67 3a 20 22 2c 65 2e 74 61 72 67 65 74 2e 65 72 72 6f 72 43 6f 64 65 29 3b 6f 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 49 44 42 52 65 61 64 46 61 69 6c 22 2c 6d 65 73 73 61 67 65 3a 6e 2e 6d 65 73 73 61 67 65 7d 29 2c 74 26 26 74 28 6e 29 2c 69 2e 63 6c 6f 73 65 28 29 7d 7d 29 7d 2c 5f 73 65 74 45 6e 74 72 79 49 6e 44 42 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 76 61 72 20 73 3d 74 68 69 73 2c 61 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 73 2e 5f 72 65 61 64 45 6e 74 72 79 49 6e 44 42 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 65 7c 7c 21 72 3f 73 2e 5f 69 6e 69 74 44 42 28 73 2e 5f 62 75 69 6c Data Ascii: on(e){var n=new Error("Failed Reading: ",e.target.errorCode);o._sendBeacon(p,{code:"IDBReadFail",message:n.message}),t&&t(n),i.close()}})},_setEntryInDB:function(t,o){var s=this,a=(new Date).getTime();s._readEntryInDB(function(e,r){e\|\|!r?s._initDB(s._buil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.11	49865	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:22 UTC	773	OUT	GET /uu/api/res/1.2/LbcXySL6ihB5eG7HKyPptg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-10/210837c0-89b4-11ef-bdef-60178d6b3891.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:22 UTC	1199	IN	HTTP/1.1 200 OK Content-Length: 21990 Content-Type: image/webp Content-Disposition: inline; filename="210837c0-89b4-11ef-bdef-60178d6b3891.webp" Etag: "df793c45770fdabbe85f3f1b8958ddb7" Expiration: expiry-date="Sat, 12 Apr 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 13 Oct 2024 22:41:20 GMT Date: Sun, 13 Oct 2024 22:41:35 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=4;cpu=0;start=2024-10-13T22:41:35.695Z;desc=hit,rtt;dur=83,content-info;desc="width=536,height=284,bytes=21990,owidth=5654,oheight=3769,obytes=3084065,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: c452dde1c78526527dfb770782f5daf9 Age: 49127 cld_id: c452dde1c78526527dfb770782f5daf9 x-image-width: 536 x-image-height: 284 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 52 49 46 46 de 55 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFFUWEBPVP8X ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: ca 15 04 d6 35 9b d2 de 5c 16 87 d4 d1 0e 99 fc ca 06 9c 47 c2 3f 34 07 98 a3 22 75 4d 6b 5c 65 8f 52 6e ae 36 30 2e c2 f4 4d d2 0e 40 32 5b bf 36 63 a1 53 40 0f 85 20 46 69 85 1e c4 0e ae 83 6e 43 79 89 93 da 3b af e9 f0 f9 6a 99 a6 71 0d ac f7 71 d6 4a 54 15 dd b1 ab d7 26 72 bf ca 68 5b ec 1d 98 80 f1 bb f3 e6 28 f8 40 ee b7 6d c5 f2 67 9a 15 f4 c5 6b d8 37 3b 25 2b ac f6 28 dc 55 2b 66 ce 0c 65 25 5f 19 87 f6 8f 7e 83 44 b0 58 10 2a a4 03 7a 26 93 75 cc 4a cf 67 b5 e9 bd 58 d2 5d ec 35 02 7e e1 54 ea ad 2c df 86 d9 4b b1 06 40 d0 fc ec 27 24 8a 48 56 fc f6 90 b7 a7 14 bf 82 bd 11 48 70 03 8c ed 08 b2 56 9a 0a fb 07 50 58 16 62 15 f9 67 71 87 15 21 59 b3 a5 67 38 37 1f 39 4b 56 34 fd f3 d0 13 1c e8 a3 fa 16 38 9c b5 2a 44 3c af 0b 8c f1 9c 31 98 87 f3 Data Ascii: 5\G?4"uMk\eRn60.M@2[6cS@ FinCy;jqqJT&rh[(@mgk7;%+(U+fe%_~DXz&uJgX]5~T,K@'$HVHpVPXbgq!Yg879KV48D<1
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 67 3d 68 0a fd ee 23 17 42 6f b5 70 5a ef 1b ac ac 40 d0 da 8e 7e e5 35 52 7c aa 61 9b f9 8b b7 e2 9a 3e de f0 91 6d 44 7b 0b b4 c8 68 a3 66 51 be e2 ec 0e 69 c8 5a bd 0d 43 5b a7 e0 cd 51 71 b7 ce 66 08 11 dc f3 15 74 ac d3 cc 58 96 f6 dc f8 6f 91 62 ec 2e 1b 6f 98 38 f2 90 4b 66 a5 0a 52 99 44 1a 5b 86 6f 2b 04 62 5c a4 74 58 f1 e5 67 94 33 d8 00 bd 9f 20 a9 b3 05 cb 17 40 8a cf 54 d5 1d 76 55 a2 cd da 93 0d d6 b1 eb d1 38 88 46 ec db 98 56 12 58 ba 0c ed 8e f1 fd 46 6f f0 ae 56 ab ee 69 cd 35 dd 48 1a e1 a6 24 c4 69 35 90 58 55 82 8f 60 61 a8 91 6c fd a3 b5 f7 3c 3a d5 4e b1 e4 b0 b9 08 9d 22 0d 36 cc 3c 7b b2 dc 74 f4 4c 86 71 c7 95 ad 68 d6 be 7b ce 0b 11 7a c0 85 a1 2d 70 10 f9 5c 2c e6 69 f0 8e d6 8f cd 88 ce b5 31 62 dd c5 6a 67 43 70 e0 8f be 87 Data Ascii: g=h#BopZ@~5R\|a>mD{hfQiZC[QqftXob.o8KfRD[o+b\tXg3 @TvU8FVXFoVi5H$i5XU`al<:N"6<{tLqh{z-p\,i1bjgCp
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 0d cc 7f 49 83 28 d5 2c 9d 0c f8 cb 17 5e 74 1e 6b 6a 3d a6 12 78 ed f8 2e ec 0b 2f 30 a6 1a 0d 9a a2 b4 21 18 54 52 a5 a4 ae e1 12 16 35 b2 da a3 af bd dd 1d 65 14 f0 61 f2 b8 d7 bd 74 86 02 7a 65 9c ad 4d 7c e6 49 f4 9a 23 3b 30 2b 7a 71 f4 20 f8 a3 5c 52 16 da f7 d9 3a e9 13 d8 0e d5 41 10 ac 66 33 75 cd 62 57 a8 29 a8 97 29 a4 52 20 ba bf 17 b6 1e bf 64 57 7f 16 3f d3 e4 19 ee b1 01 ce 51 2d bc bb 88 fc 3f 83 95 de 90 29 3e bc f3 0d bf 95 b5 b0 7d 80 cf 05 96 4a 5d aa c9 8b c8 8d 56 88 0c ca 1d 10 b2 2d d9 d3 2a 0a a3 94 cd 07 0b 51 b9 f9 35 54 8e 83 72 fb cd 7f d6 62 bc 5d 9d 2f 0d 82 4f 5a df 14 e5 45 26 fb ab 6d 0a e3 cb ba b8 76 f0 f9 97 3c 33 4a 1e c8 61 1c f3 b0 61 69 d1 51 e3 89 fd 81 99 8f cf ba 2d 35 66 c5 78 ea ea f6 2e 5a e7 95 cf 2e 69 00 Data Ascii: I(,^tkj=x./0!TR5eatzeM\|I#;0+zq \R:Af3ubW))R dW?Q-?)>}J]V-*Q5Trb]/OZE&mv<3JaaiQ-5fx.Z.i
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: de a2 30 c2 46 51 5c 03 ea 9a dc 40 4c c1 0c 5a 84 a0 f8 50 4a 2d 31 6e c0 c1 07 a2 9c b4 47 cb 73 d0 4c d2 68 43 1e ec 88 b7 69 84 70 d3 50 2e ac 36 f4 55 35 62 3a 94 f0 43 e2 60 d5 c3 18 cf d0 a6 1c 49 cc df 78 94 19 1b e1 1f 4d e0 0a c2 27 97 6e 13 bd 14 0d 65 d2 27 50 b4 e8 f9 a0 9b 1f 1e c5 6c 2b 8f 27 05 21 69 31 01 06 8f 9c a2 f4 2c ee a4 ac 32 eb 2c b9 f5 10 1c 5e 8b b2 e0 c2 b8 a7 74 e5 8f c5 d9 12 df 38 ea 03 6f a2 ee 3a 95 1d 15 9a a7 2c d9 54 8c 9d 9b 74 7b 73 75 04 53 06 d1 09 60 c3 95 19 57 b4 32 60 18 0a 23 94 60 91 76 0a bc c4 dd 1a 2b 5e dd 94 f5 ba c0 26 b9 65 b6 36 56 cd 06 89 df 39 ec 36 e3 25 0f f9 4f 1b 21 9c 9b 2e ba a5 93 8f 64 d1 cb 7e 34 45 cd 61 7c 75 f0 4c f9 73 64 0f 17 92 9b db 5b 92 e0 de 24 d8 53 6b a4 0c 64 3c 10 58 36 f0 Data Ascii: 0FQ\@LZPJ-1nGsLhCipP.6U5b:C`IxM'ne'Pl+'!i1,2,^t8o:,Tt{suS`W2`#`v+^&e6V96%O!.d~4Ea\|uLsd[$Skd<X6
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: f7 d2 93 14 11 68 1d 2a 98 b7 e5 0c b8 39 5d 5e 88 c4 25 d9 f2 a0 49 9a 61 4b 47 b3 a0 e1 b4 d7 c2 46 34 d2 4d aa 0d a4 57 ba 5b d8 31 ed 66 38 84 92 8f 93 0d e7 d2 9a 7e 44 09 a6 e4 93 8c 7b 45 5e 19 63 5e 95 71 af 83 b8 82 b8 f2 da fb 7e 6c 37 29 a9 a3 76 76 87 98 55 50 80 de fb c0 f4 29 bd a8 b8 9b 81 f8 07 7e 5a 56 1a 26 02 77 79 67 e9 61 c5 1e ff 89 28 b3 15 56 5a 22 02 ef 9c 64 ee f1 a1 7c ec 9b 17 07 0e 00 82 e1 b2 be a8 82 fa 55 39 a1 68 b5 63 8d a7 a4 af 31 a0 c0 d8 27 02 39 4d fd 27 e6 ee f7 95 82 d0 20 33 56 47 37 6b 1d 5d fd cd 5a 05 d9 3e 2f 80 09 85 d5 04 70 42 23 82 8a 4c 69 0a 16 4a cd ad 2d 93 99 5d ce 71 22 e9 5e 3d 1b 90 63 33 db 2f 38 16 e1 2d f7 5a 89 9d 34 23 cb 53 00 6f 21 9c 0a 25 7b 9b bf 0d 58 6a 58 b6 9a 64 ad f4 b2 73 c4 57 c2 Data Ascii: h*9]^%IaKGF4MW[1f8~D{E^c^q~l7)vvUP)~ZV&wyga(VZ"d\|U9hc1'9M' 3VG7k]Z>/pB#LiJ-]q"^=c3/8-Z4#So!%{XjXdsW
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 5c 37 3f 48 2a ba fe d2 4f 26 c3 cf df f5 da 82 7a 5d ff 82 a5 bf 44 bd 6e aa 5f 7b df 52 95 1f fa 84 0e ed 4d 09 4b 40 aa a6 00 d9 6b dd 7b d2 17 39 b6 13 3e b2 b1 24 e5 4a d1 b0 a7 03 0b a5 9e 20 1a 0e fe f7 23 75 68 27 dd 4e eb 65 d5 b8 d9 cc 94 90 97 91 68 d0 63 f9 2e f0 2e 69 2b 25 30 34 91 0f 9b 0f 8e fc 21 4e 54 70 18 b8 35 f0 b4 57 29 59 33 fa 6a f9 8f 80 ee 8d 58 9b f6 bf ef 88 0b f2 67 fd 29 cf db 18 a7 25 fb 2a b9 7b ae 8b 91 a4 de 0d 9a 6e bd c8 10 bd 78 6b f3 9b d4 2e e0 89 19 7b af 38 1f f8 52 f2 1c 0d 3b c5 f7 17 bc 6d 53 6f e2 75 1c 8f 09 ee 52 04 3f a5 79 75 fd 69 80 ca fa f3 8e ac 57 7a 9a 98 cc 58 e2 61 35 42 95 a2 4f f6 26 d7 0c 5e 84 b3 6c f9 5e f9 ef c1 8e 48 f8 f0 49 12 c0 fc c4 5c 0f 36 47 14 48 59 78 c7 78 98 b7 10 46 48 46 61 cd Data Ascii: \7?HO&z]Dn_{RMK@k{9>$J #uh'Nehc..i+%04!NTp5W)Y3jXg)%{nxk.{8R;mSouR?yuiWzXa5BO&^l^HI\6GHYxxFHFa
2024-10-14 12:20:22 UTC	1300	IN	Data Raw: 4a d3 86 27 ad 18 15 0f b3 de 40 2c 06 f5 c1 87 4b 57 0a ee cc 4f 39 71 90 b1 17 b9 0e 8a 6e c3 78 71 ad ae 50 86 ee 53 51 29 72 80 dc ff f1 2c d6 4a d9 25 2d 35 a3 db f2 d0 2d 11 20 ee 23 ac a4 b4 ea 2c 8e 0e 74 ee 57 7f 25 13 fb cc a1 a5 e4 65 df 8b e3 75 9c e4 57 b0 d5 b2 fa 80 1b 9b 9d a0 c2 0a cb 67 1e 56 6b bd 55 e8 d2 11 40 32 14 e6 bb bc 89 33 75 72 96 e7 49 44 59 0b 10 4d ea 02 97 41 2d 7b e2 a5 58 02 ce c8 11 a8 00 3a 70 6f f9 ab cf 10 d0 d7 f6 34 4a da 62 df 23 d7 b2 7b 01 30 8b 9d b0 58 58 df 56 ed 00 ed 2f 44 92 cc 45 7d 2f 7f 52 29 a9 fc de b0 fa a2 15 f6 32 1a 9e 97 66 a0 56 a0 86 e5 b3 07 86 a3 f6 6f cd 7b c2 b9 f9 c6 4d ef 13 a3 ac 06 84 97 a5 90 8e aa c7 3b 44 11 91 b7 b6 48 3b 38 aa 5f 81 96 d9 e3 3b af 7d 9f 56 63 20 b1 3a 83 59 eb 6e Data Ascii: J'@,KWO9qnxqPSQ)r,J%-5- #,tW%euWgVkU@23urIDYMA-{X:po4Jb#{0XXV/DE}/R)2fVo{M;DH;8_;}Vc :Yn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.11	49867	151.101.129.44	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:22 UTC	551	OUT	GET /libtrc/yahoo-hp-att/loader.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:22 UTC	891	IN	HTTP/1.1 200 OK Connection: close Content-Length: 943089 Server: nginx Content-Type: application/javascript; charset=utf-8 access-control-allow-origin: * etag: "31f3093868f2b282d22cf8dea4e873ed143c38cc" last-modified: Mon, 14 Oct 2024 12:20:22 UTC x-amz-id-2: vLORU/o9TdVxAqFskGR6G4OAWq8G1TChPPNlAjG1DGqau0+xWMkrZlqd0fWIQBlrAxm8TGDQJQ4= x-amz-replication-status: FAILED x-amz-request-id: RW8MD3JPD99HF3BE x-amz-server-side-encryption: AES256 x-amz-version-id: tNwpwT4IovYV.O851w_qfwcZbiUSgyKQ x-envoy-upstream-service-time: 57 Accept-Ranges: bytes Age: 0 Date: Mon, 14 Oct 2024 12:20:22 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740070-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728908422.299325,VS0,VE73 Cache-Control: private,max-age=14400 Vary: Accept-Encoding, Accept-Encoding abp: 21 Set-Cookie: abLdr=21;Max-Age=10800; path=/; SameSite=None;Secure
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 2f 2f 41 42 5f 54 45 4d 50 4c 41 54 45 0a 2f 2f 61 62 20 2d 3e 20 32 31 0a 0a 0a 0a 09 09 76 61 72 20 5f 74 61 62 6f 6f 6c 61 20 3d 20 5f 74 61 62 6f 6f 6c 61 20 7c 7c 20 5b 5d 3b 76 61 72 20 54 52 43 20 3d 20 54 52 43 20 7c 7c 20 7b 7d 3b 0a 54 52 43 2e 70 65 72 66 43 6f 6e 66 4f 76 65 72 72 69 64 65 20 3d 20 7b 27 6c 6f 67 54 69 6d 65 72 27 3a 20 35 30 30 30 30 2c 20 27 6c 6f 67 4c 65 6e 67 74 68 27 20 3a 20 35 2c 20 27 74 72 61 66 66 69 63 27 20 3a 20 35 30 2c 20 27 6d 65 61 73 75 72 65 45 6e 61 62 6c 65 27 20 3a 20 74 72 75 65 2c 20 27 6d 65 61 73 75 72 65 54 69 6d 65 54 6f 53 65 6e 64 27 20 3a 20 31 30 30 30 30 2c 20 27 6d 65 61 73 75 72 65 49 6e 74 65 72 76 61 6c 27 20 3a 20 31 30 30 30 30 2c 20 27 64 69 73 61 62 6c 65 52 61 77 44 61 74 61 53 65 6e Data Ascii: //AB_TEMPLATE//ab -> 21var _taboola = _taboola \|\| [];var TRC = TRC \|\| {};TRC.perfConfOverride = {'logTimer': 50000, 'logLength' : 5, 'traffic' : 50, 'measureEnable' : true, 'measureTimeToSend' : 10000, 'measureInterval' : 10000, 'disableRawDataSen
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 69 29 26 26 28 65 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 Data Ascii: ar o=function(){return o=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},o.apply(this,arguments)};function a(e,t,n,r){var i,o=arguments.length
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 6f 6e 65 29 72 65 74 75 72 6e 20 69 3b 73 77 69 74 63 68 28 72 3d 30 2c 69 26 26 28 6c 3d 5b 32 26 6c 5b 30 5d 2c 69 2e 76 61 6c 75 65 5d 29 2c 6c 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 69 3d 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 6c 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 6f 2e 6c 61 62 65 6c 2b 2b 2c 72 3d 6c 5b 31 5d 2c 6c 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 6c 3d 6f 2e 6f 70 73 2e 70 6f 70 28 29 2c 6f 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 28 69 3d 28 69 3d 6f 2e 74 72 79 73 29 2e 6c 65 6e 67 74 68 3e 30 26 26 69 5b 69 2e 6c 65 6e 67 74 68 2d 31 5d Data Ascii: one)return i;switch(r=0,i&&(l=[2&l[0],i.value]),l[0]){case 0:case 1:i=l;break;case 4:return o.label++,{value:l[1],done:!1};case 5:o.label++,r=l[1],l=[0];continue;case 7:l=o.ops.pop(),o.trys.pop();continue;default:if(!((i=(i=o.trys).length>0&&i[i.length-1]
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 6e 20 74 7d 28 29 2c 74 3d 5b 5d 2c 6e 3d 6e 75 6c 6c 2c 72 3d 6e 75 6c 6c 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 54 48 52 4f 54 54 4c 45 5f 54 49 4d 45 4f 55 54 3d 31 30 30 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 50 4f 4c 4c 5f 49 4e 54 45 52 56 41 4c 3d 6e 75 6c 6c 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 55 53 45 5f 4d 55 54 41 54 49 4f 4e 5f 4f 42 53 45 52 56 45 52 3d 21 30 2c 61 2e 5f 73 65 74 75 70 43 72 6f 73 73 4f 72 69 67 69 6e 55 70 64 61 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 3d 65 26 26 6e 3f 75 28 65 2c 6e 29 3a 7b 74 6f 70 3a 30 2c 62 6f 74 74 6f 6d 3a 30 2c 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 30 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 2c Data Ascii: n t}(),t=[],n=null,r=null;a.prototype.THROTTLE_TIMEOUT=100,a.prototype.POLL_INTERVAL=null,a.prototype.USE_MUTATION_OBSERVER=!0,a._setupCrossOriginUpdater=function(){return n\|\|(n=function(e,n){r=e&&n?u(e,n):{top:0,bottom:0,left:0,right:0,width:0,height:0},
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 75 73 69 76 65 6c 79 22 29 3b 72 65 74 75 72 6e 20 65 21 3d 3d 6e 5b 74 2d 31 5d 7d 29 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 70 61 72 73 65 52 6f 6f 74 4d 61 72 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 65 7c 7c 22 30 70 78 22 29 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 2f 5e 28 2d 3f 5c 64 2a 5c 2e 3f 5c 64 2b 29 28 70 78 7c 25 29 24 2f 2e 65 78 65 63 28 65 29 3b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 72 6f 6f 74 4d 61 72 67 69 6e 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 70 69 78 65 6c 73 20 6f 72 20 70 65 72 63 65 6e 74 22 29 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 70 61 72 73 65 46 6c 6f 61 Data Ascii: usively");return e!==n[t-1]}))},a.prototype._parseRootMargin=function(e){var t=(e\|\|"0px").split(/\s+/).map((function(e){var t=/^(-?\d*\.?\d+)(px\|%)$/.exec(e);if(!t)throw new Error("rootMargin must be specified in pixels or percent");return{value:parseFloa
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 31 7d 29 29 3b 69 66 28 21 6f 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 55 6e 73 75 62 73 63 72 69 62 65 73 5b 6e 5d 3b 69 66 28 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 44 6f 63 75 6d 65 6e 74 73 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 55 6e 73 75 62 73 63 72 69 62 65 73 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 61 28 29 2c 74 21 3d 72 29 7b 76 61 72 20 6c 3d 69 28 74 29 3b 6c 26 26 74 68 69 73 2e 5f 75 6e 6d 6f 6e 69 74 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 28 6c 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 7d 7d 7d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 75 6e 6d 6f 6e 69 74 6f 72 41 6c 6c 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 1}));if(!o){var a=this._monitoringUnsubscribes[n];if(this._monitoringDocuments.splice(n,1),this._monitoringUnsubscribes.splice(n,1),a(),t!=r){var l=i(t);l&&this._unmonitorIntersections(l.ownerDocument)}}}},a.prototype._unmonitorAllIntersections=function()
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 2c 77 3d 31 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 3f 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 67 29 3a 7b 7d 3b 69 66 28 22 6e 6f 6e 65 22 3d 3d 77 2e 64 69 73 70 6c 61 79 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 67 3d 3d 74 68 69 73 2e 72 6f 6f 74 7c 7c 39 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 5f 3d 21 30 2c 67 3d 3d 74 68 69 73 2e 72 6f 6f 74 7c 7c 67 3d 3d 65 29 6e 26 26 21 74 68 69 73 2e 72 6f 6f 74 3f 21 72 7c 7c 30 3d 3d 72 2e 77 69 64 74 68 26 26 30 3d 3d 72 2e 68 65 69 67 68 74 3f 28 67 3d 6e 75 6c 6c 2c 79 3d 6e 75 6c 6c 2c 62 3d 6e 75 6c 6c 29 3a 79 3d 72 3a 79 3d 6f 3b 65 6c 73 65 7b 76 61 72 20 78 3d 66 28 67 29 2c 43 3d 78 26 26 63 28 78 29 2c 45 3d 78 26 26 74 68 69 73 2e 5f 63 6f 6d 70 75 74 65 Data Ascii: ,w=1==g.nodeType?window.getComputedStyle(g):{};if("none"==w.display)return null;if(g==this.root\|\|9==g.nodeType)if(_=!0,g==this.root\|\|g==e)n&&!this.root?!r\|\|0==r.width&&0==r.height?(g=null,y=null,b=null):y=r:y=o;else{var x=f(g),C=x&&c(x),E=x&&this._compute
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 26 26 65 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 65 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 2c 72 3d 74 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 74 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 3b 69 66 28 6e 21 3d 3d 72 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 73 5b 69 5d 3b 69 66 28 6f 3d 3d 6e 7c 7c 6f 3d 3d 72 7c 7c 6f 3c 6e 21 3d 6f 3c 72 29 72 65 74 75 72 6e 21 30 7d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 6f 6f 74 49 73 49 6e 44 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: ion(e,t){var n=e&&e.isIntersecting?e.intersectionRatio\|\|0:-1,r=t.isIntersecting?t.intersectionRatio\|\|0:-1;if(n!==r)for(var i=0;i<this.thresholds.length;i++){var o=this.thresholds[i];if(o==n\|\|o==r\|\|o<n!=o<r)return!0}},a.prototype._rootIsInDom=function(){re
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 20 6f 72 20 45 6c 65 6d 65 6e 74 22 29 3b 74 68 69 73 2e 5f 63 68 65 63 6b 46 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 3d 28 6e 3d 74 68 69 73 2e 5f 63 68 65 63 6b 46 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 2e 62 69 6e 64 28 74 68 69 73 29 2c 72 3d 74 68 69 73 2e 54 48 52 4f 54 54 4c 45 5f 54 49 4d 45 4f 55 54 2c 69 3d 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 7c 7c 28 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 29 2c 69 3d 6e 75 6c 6c 7d 29 2c 72 29 29 7d 29 2c 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 3d 65 2c 74 68 69 73 2e 5f 6f 62 73 65 72 76 61 74 69 6f 6e 54 61 72 67 65 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e 74 72 69 65 73 3d 5b 5d 2c 74 68 69 73 2e Data Ascii: Document or Element");this._checkForIntersections=(n=this._checkForIntersections.bind(this),r=this.THROTTLE_TIMEOUT,i=null,function(){i\|\|(i=setTimeout((function(){n(),i=null}),r))}),this._callback=e,this._observationTargets=[],this._queuedEntries=[],this.
2024-10-14 12:20:22 UTC	1378	IN	Data Raw: 69 66 28 6e 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 6e 3d 66 28 6e 29 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 76 61 72 20 6e 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 39 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 74 21 3d 65 3f 69 28 74 29 3a 28 6e 26 26 6e 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 26 26 28 6e 3d 6e 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 6e 26 26 31 31 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 68 6f 73 74 3f 6e 2e 68 6f 73 74 3a 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7d 7d 28 29 7d 2c 37 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: if(n==e)return!0;n=f(n)}return!1}function f(t){var n=t.parentNode;return 9==t.nodeType&&t!=e?i(t):(n&&n.assignedSlot&&(n=n.assignedSlot.parentNode),n&&11==n.nodeType&&n.host?n.host:n)}function m(e){return e&&9===e.nodeType}}()},780:function(e){"use strict

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.11	49866	172.217.16.194	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:22 UTC	643	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:22 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Mon, 14 Oct 2024 12:20:22 GMT Expires: Mon, 14 Oct 2024 12:20:22 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 819 / 20010 / m202410080101 / config-hash: 652310961389071086 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 107349 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 12:20:22 UTC	605	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=type
2024-10-14 12:20:22 UTC	1390	IN	Data Raw: 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 66 61 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 66 61 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 2c 77 3d 66 75 6e 63 74 Data Ascii: c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=funct
2024-10-14 12:20:22 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 76 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 61 2c 61 29 7d 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 Data Ascii: unction(){return ha(aa(this))}})}return a},"es6");var ha=function(a){a={next:a};a[v(t.Symbol,"iterator")]=function(){return this};return a},ja=function(a){return ia(a,a)},ia=function(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a
2024-10-14 12:20:22 UTC	1390	IN	Data Raw: 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 79 62 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 75 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 Data Ascii: or(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.yb=b.prototype},ua=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c
2024-10-14 12:20:22 UTC	1390	IN	Data Raw: 67 29 3f 64 65 6c 65 74 65 20 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 66 7d 2c 22 65 73 36 22 29 3b 77 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 76 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 78 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b Data Ascii: g)?delete g[d][this.g]:!1};return f},"es6");w("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!v(a.prototype,"entries")\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(x([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k
2024-10-14 12:20:22 UTC	1390	IN	Data Raw: 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 76 28 74 68 69 73 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 71 3b 21 28 71 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 71 3d 71 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 71 5b 31 5d 2c 71 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: urn e(this,function(h){return h.key})};c.prototype.values=function(){return e(this,function(h){return h.value})};c.prototype.forEach=function(h,k){for(var l=v(this,"entries").call(this),q;!(q=l.next()).done;)q=q.value,h.call(k,q[1],q[0],this)};c.prototype
2024-10-14 12:20:22 UTC	1390	IN	Data Raw: 2e 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 63 3d 3d 3d 30 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 63 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e Data Ascii: .done;)this.add(d.value)}this.size=this.g.size};b.prototype.add=function(c){c=c===0?0:c;this.g.set(c,c);this.size=this.g.size;return this};b.prototype.delete=function(c){c=this.g.delete(c);this.size=this.g.size;return c};b.prototype.clear=function(){this.
2024-10-14 12:20:22 UTC	1390	IN	Data Raw: 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 76 61 28 74 68 69 73 2c 62 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 21 3d 3d 2d 31 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d Data Ascii: lar expression");return a+""};w("String.prototype.includes",function(a){return a?a:function(b,c){return va(this,b,"includes").indexOf(b,c\|\|0)!==-1}},"es6");w("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var e=[],f=
2024-10-14 12:20:22 UTC	1390	IN	Data Raw: 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 76 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 Data Ascii: urn!1;return g>=f}},"es6");var wa=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[v(t.Symbol,"iterator")]=function(){return e};re
2024-10-14 12:20:22 UTC	1390	IN	Data Raw: 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 7a 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 7a 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 63 3d 63 7c 7c 7a 3b 61 5b 30 5d 69 6e 20 63 7c 7c 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 Data Ascii: ure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var z=this\|\|self,xa=function(a){a=a.split(".");for(var b=z,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},ya=function(a,b,c){a=a.split(".");c=c\|\|z;a[0]in c\|\|typeof c.execScript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.11	49868	87.248.100.215	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:23 UTC	551	OUT	GET /manifest_partner.json HTTP/1.1 Host: currently.att.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:23 UTC	1253	IN	HTTP/1.1 200 OK x-amz-id-2: 6llOEiou+f74ZKdNVZk1rEYmlD7ldfe4usb2ZXVGPPRL0p8dSOb4OqJ5BvRg3RuYgRuqZc9V3ZE= x-amz-request-id: WFZCTWVSVEA2FZQS Date: Sun, 13 Oct 2024 03:04:56 GMT Last-Modified: Thu, 05 Sep 2024 07:54:24 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=259200, public x-amz-version-id: Z70gS5oRWB9v7qFYyZgt0iAjTimlrBv_ Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 1855 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "ea42e573726b80c5c11295d397658462" Age: 119729 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Connection: close Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=att&region=US&lang=en-US&device=desktop&yrid=3n2s195jgq347&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 66 66 66 66 66 66 22 2c 0a 20 20 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 20 20 22 67 63 6d 5f 73 65 6e 64 65 72 5f 69 64 22 3a 20 22 39 37 32 34 37 31 36 32 30 39 35 38 22 2c 0a 20 20 20 20 22 67 63 6d 5f 75 73 65 72 5f 76 69 73 69 62 6c 65 5f 6f 6e 6c 79 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 34 38 78 34 38 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 30 39 30 36 32 30 31 38 2f 6d 61 6e 69 66 Data Ascii: { "background_color": "#ffffff", "display": "standalone", "gcm_sender_id": "972471620958", "gcm_user_visible_only": true, "icons": [ { "sizes": "48x48", "src": "https://s.yimg.com/cv/apiv2/09062018/manif
2024-10-14 12:20:23 UTC	555	IN	Data Raw: 74 2f 79 61 68 6f 6f 5f 69 6e 73 74 61 6c 6c 5f 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 38 34 78 33 38 34 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 30 39 30 36 32 30 31 38 2f 6d 61 6e 69 66 65 73 74 2f 79 61 68 6f 6f 5f 69 6e 73 74 61 6c 6c 5f 33 38 34 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 Data Ascii: t/yahoo_install_192.png", "type": "image/png" }, { "sizes": "384x384", "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_384.png", "type": "image/png" }, {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.11	49869	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:23 UTC	773	OUT	GET /uu/api/res/1.2/w.MaFC_IqxQcYcfu3SsZzw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-08/c4dda7e0-6c7c-11ef-9ffd-4f64f470813e.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:23 UTC	1200	IN	HTTP/1.1 200 OK Content-Length: 12416 Content-Type: image/webp Content-Disposition: inline; filename="c4dda7e0-6c7c-11ef-9ffd-4f64f470813e.webp" Expiration: expiry-date="Sun, 09 Mar 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 09 Sep 2024 21:23:34 GMT Date: Wed, 09 Oct 2024 21:26:36 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=2;cpu=1;start=2024-09-09T21:26:10.596Z;desc=hit,rtt;dur=96,content-info;desc="width=536,height=284,bytes=12416,owidth=5341,oheight=3004,obytes=1060584,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 5cb109856661edf118125a6f8e365177 cld_id: 5cb109856661edf118125a6f8e365177 x-image-width: 536 x-image-height: 284 Referrer-Policy: no-referrer-when-downgrade Etag: "5ed94efdd76b2e4626285e3f5836c11d" Age: 399227 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 52 49 46 46 78 30 00 00 57 45 42 50 56 50 38 20 6c 30 00 00 d0 21 01 9d 01 2a 18 02 1c 01 3e 79 38 96 48 a4 a3 27 a6 25 74 ed 78 f0 0f 09 63 6d 14 d2 5d dd 71 b6 1b 2b 18 e4 e7 fd 57 3f ed ec 01 60 03 9f df 97 e7 f7 6c a1 20 c3 52 86 54 a6 01 34 35 42 1f f6 90 c8 65 7c da f3 0f de 3f 5d f6 d1 e5 f1 c9 d2 7f f5 67 1a 5e 73 bd 2a 3d 3e fa 88 e7 3f dd 23 f5 da fe 29 d3 c1 6f e1 de cf ee 67 8b 7f 9d 6d 5a 38 f7 58 3f 06 5f 36 e8 9e 77 1f 0f 78 fa f2 be fc 47 45 77 82 bf e0 37 e5 18 35 d5 19 3f 90 f5 36 9a f5 21 8e f0 b7 27 49 58 46 3e 79 06 f5 ef 49 e4 17 f7 e4 26 28 8e 33 96 da 0e 42 cb 55 31 20 f3 f9 20 fc b0 32 b7 b6 45 e9 7b e9 6f 1c 04 c1 ee 58 f0 cc 07 9b d3 ed 9b 60 e8 0b e4 38 71 dc 5d 1e 54 92 43 17 e8 46 68 49 4f f1 92 5e ce 37 c9 31 35 6d b3 95 8d Data Ascii: RIFFx0WEBPVP8 l0!>y8H'%txcm]q+W?`l RT45Be\|?]g^s=>?#)ogmZ8X?_6wxGEw75?6!'IXF>yI&(3BU1 2E{oX`8q]TCFhIO^715m
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 38 a9 f5 81 67 9c af e6 46 34 2c cd 23 d1 e3 06 b5 b5 83 77 16 d5 91 70 21 79 fe dd d4 28 76 f7 43 0a 42 56 7a e7 cd 72 08 b2 52 af 7c d9 2c bc 33 af 3a 5d 16 61 b3 54 cd 65 5a 92 7a f5 11 ca c0 7f 66 c5 4b 62 52 49 09 df 98 28 20 f5 0d c7 3e 8b d1 f6 2b 6d 02 21 96 64 47 56 9a 4f 5e bc fb cb d6 ef e7 ff eb eb ed 16 4d c6 64 91 56 47 d9 73 e7 ae 82 72 a3 13 1f a4 f3 c6 35 4a fc 3f 1a b4 cc 9d 45 77 1c f3 08 99 16 47 2a 00 92 3f ee c2 58 03 08 40 9c e8 eb bc f4 9f db 65 32 a3 3d 9e b1 bd 4a 3b 84 28 63 e5 7a 15 d0 e6 95 17 2d 73 89 1b 2f 4e ea f6 32 2a 57 d4 8e 43 48 85 9f 06 66 b3 e9 b2 45 8c 94 11 98 41 d3 28 3a 2f a1 b2 70 a2 1b 8a c4 81 2a b6 08 63 d9 6d 03 a3 1c 59 56 e3 67 d0 59 25 20 7d c1 b9 3c 58 71 9c 9b 87 52 05 68 1c 47 30 16 31 7f 8c 6f f3 42 Data Ascii: 8gF4,#wp!y(vCBVzrR\|,3:]aTeZzfKbRI( >+m!dGVO^MdVGsr5J?EwG?X@e2=J;(cz-s/N2WCHfEA(:/p*cmYVgY% }<XqRhG01oB
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 41 ca f3 e9 ac 09 20 b2 24 f4 19 f3 e3 9f 12 fb 26 bf 3e 2e a1 74 31 45 6e 4b f2 c7 c6 fd c5 cf e8 ff 94 54 9f 6f be f1 1a 35 76 d9 82 64 58 c2 fe 7e a0 23 63 ba 97 c1 a1 f8 73 b8 03 61 da 2e 6a 08 5a b8 90 b0 20 d3 41 79 8f 74 55 73 28 2f 3e ff 5a 0e 8d 23 ef 8e b5 92 6e 3f cf 79 ee 05 13 7d 95 2a 46 d1 9c 51 df 9a 61 f0 65 d7 ad 80 c2 63 e6 9d d3 56 e9 e2 33 b8 ba 6b 78 e8 76 29 97 21 2c 74 9c 80 00 fb 29 ef eb 37 a3 f3 a4 3c 8b ff 5d 9b 13 10 14 49 58 96 76 b0 bf 00 5f 63 62 38 02 39 8a 4b 34 3c ba 05 92 1b cb 59 1f 35 9e 49 34 85 55 43 2e 81 56 9e 49 f6 5b eb 9d 07 66 f2 55 05 d7 10 ed 1e 36 62 03 9f fe 8b 4a de a5 77 d2 ee 35 de 86 4e a9 3e 58 85 78 fd 9a 4a b5 21 d4 5f 70 46 b9 30 b1 2d 38 33 09 a6 69 a7 7c 62 49 7c f2 59 33 85 8f 47 4b dc 9c 44 97 Data Ascii: A $&>.t1EnKTo5vdX~#csa.jZ AytUs(/>Z#n?y}*FQaecV3kxv)!,t)7<]IXv_cb89K4<Y5I4UC.VI[fU6bJw5N>XxJ!_pF0-83i\|bI\|Y3GKD
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: ad 0e bf d3 94 ef 62 68 6c 04 1e 87 74 13 b6 d7 a0 8f 30 0b 17 0b 00 9b 11 b9 4d 27 fc 1b 92 c6 02 97 02 73 a6 b1 ff 36 0b c9 f6 f8 d1 18 92 5c 09 b2 94 5c c7 80 ca 00 5a 8a 5b 17 e1 39 e4 27 f9 df 25 45 1e af 39 8a 36 d0 68 36 87 93 11 b2 af f0 68 34 1d 61 c2 dd 60 4b b1 06 d5 5f 3a 36 ec f8 25 35 69 59 29 e3 4b b1 ad b7 3d 89 84 23 18 e1 cf 2a 27 f3 30 df b9 2e b8 a6 f5 99 70 ab 1f de c1 47 17 04 be 02 fa f6 1c c7 2f cc 19 36 da 75 55 59 2f 95 b5 aa b0 be 02 59 59 58 3c 57 ba e0 45 35 28 14 3e 82 2a 6a 87 57 d5 4d 1b 66 1d 35 fc 07 ae 6a ee 67 42 79 c6 8e 8c bf 55 66 24 d9 0e cc 64 fe dc cc 67 1c ff e1 b8 16 3f e2 00 2a 47 20 c7 96 9f 35 a4 b3 07 dd 88 5f 8a 9d 16 cc db b4 ce 4b e9 6f ef 1a c3 2f 06 c3 d1 61 2c 6f d1 68 44 dc 35 b9 bc 7d 47 31 e1 3d 14 Data Ascii: bhlt0M's6\\Z[9'%E96h6h4a`K_:6%5iY)K=#'0.pG/6uUY/YYX<WE5(>jWMf5jgByUf$dg?*G 5_Ko/a,ohD5}G1=
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: bc 9e 39 e4 ad f7 fa 45 dd 05 b1 77 65 4a 10 1b 94 79 1e d5 f0 83 24 41 78 60 ef a0 c2 bc 63 f2 76 97 1e 61 34 26 88 af 9b 19 2e 15 e6 9c df 83 6c cf d5 18 b8 c2 2a cb aa 42 67 bf 72 62 ff 0a f7 6b 2f 6b 4b 46 cb c0 15 db ee 04 b4 dc 90 9e 32 5f e0 73 1c b0 ae f4 fb 11 c8 50 d2 9d af fd 1d cc bc 68 0e 98 0a 41 c3 9e f2 29 0c 3b 26 7f 8b da 50 56 97 4b 1b 99 ab 35 9c fa 58 30 cd ae c6 9c 64 37 6c 4b a4 16 1b 99 fb df a8 b1 b5 e8 80 6c 8a 45 4e a3 a1 98 13 1a 60 83 95 04 62 31 67 5c cd 2d 05 8b 21 a4 b8 f1 d4 04 90 8b de a6 bf 93 c2 87 4c 49 dc 4c a6 e8 30 54 10 e5 c1 29 ab 53 08 e0 e7 9b c9 f6 cd e8 c3 d4 d9 43 87 71 b9 42 f4 24 98 65 c8 e3 f8 80 e7 d3 79 d7 6f 0a 4f fe 74 94 87 f5 e7 d9 c1 60 53 0b 59 6b 4e ba 6c 83 19 ad 9d 2a ab 02 86 1e 1e 70 b0 02 ac Data Ascii: 9EweJy$Ax`cva4&.lBgrbk/kKF2_sPhA);&PVK5X0d7lKlEN`b1g\-!LIL0T)SCqB$eyoOt`SYkNlp
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: f8 cb 99 12 93 99 ed 48 a6 2e 85 7c d3 a5 16 f7 52 dd 6d a0 9e 5d d4 4a 66 b0 f5 41 01 8a aa f5 62 0e ac ea 96 df 9c b6 b8 0b e0 de 42 43 f7 cc d2 55 6f ab df 2c 73 74 9b bf 75 1c 34 87 01 17 2e cb f8 8a bd 42 8d ec 77 3b 41 38 8d 31 a7 b3 22 a8 86 51 66 17 8a 5a c4 5d de 9a 77 2c ae 5f a9 c9 e3 2e 59 71 cd 99 76 5b c1 d0 20 48 30 9a 1e 67 4d 3b d3 18 9d 55 fe b1 65 05 2e e7 13 dc cd 88 1b 9b 15 41 c8 a0 e5 3d ac f7 67 1e 6a f6 79 35 b3 82 44 79 6a 44 b4 ce c6 f9 04 e7 ab 81 ce a7 de eb e2 51 3c 5e a8 25 2c 81 99 66 00 d9 45 49 86 6c 1d 4c 90 fa 4b f5 b9 23 b0 b1 9b 38 7f ed 0d 8c 87 87 84 80 51 ac bb 17 9c b6 8f cb 3e 27 61 c5 68 48 c2 3e c4 82 74 db 11 2c b4 d6 f7 72 e0 7f 87 97 52 e8 26 c1 8e 35 df 2e b1 ad c7 70 14 23 fd 07 24 0f 84 ef 50 41 c1 d2 0c Data Ascii: H.\|Rm]JfAbBCUo,stu4.Bw;A81"QfZ]w,_.Yqv[ H0gM;Ue.A=gjy5DyjDQ<^%,fEIlLK#8Q>'ahH>t,rR&5.p#$PA
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: c6 8e c3 2e 74 95 22 a0 ab 94 8e 51 ef 91 ef b8 8f 00 2e a1 7f 55 32 2a 47 65 09 2a 3c 20 13 b9 a7 84 f3 d3 21 72 72 df 34 a0 99 64 71 6a 03 a0 f8 f7 b0 cd 52 d8 aa d5 1e ee d9 6f c0 8c 83 9a 78 09 ae de 3a 18 58 2a 96 fd 54 19 43 42 78 9f 5e c9 7b f7 c5 7b 5f 73 29 5c 31 7f b1 90 2c b9 80 6b 54 8d 93 e3 4e 46 30 ab 0b 84 cc 80 1f 8d 57 fc 7d 06 c0 f4 8a f2 ad d7 10 1b af aa b5 10 ce d9 3a 08 dd 5d 3c e9 30 5e 42 68 8b 5c 0f e8 f4 6f 43 77 4c a2 31 58 40 8e 3e 6d 36 2e f5 36 16 7e 93 92 8c a2 e5 cd d2 26 e8 83 31 d1 89 64 ed 87 dc a4 0d 53 b9 80 99 40 af c2 2a 2a f2 62 86 a2 4f 7c 07 18 05 da 5c c1 37 a3 10 c6 8a 19 16 4f ba cd 6a 72 a0 5d 53 13 1f 92 ff cd 13 4f ef 53 d3 60 73 a9 64 db 59 97 82 cb 29 a2 00 0a 97 74 32 ed 24 1f a8 6f 75 d5 2e 48 71 85 7b Data Ascii: .t"Q.U2Ge< !rr4dqjRox:XTCBx^{{_s)\1,kTNF0W}:]<0^Bh\oCwL1X@>m6.6~&1dS@*bO\|\7Ojr]SOS`sdY)t2$ou.Hq{
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 37 c4 6c 73 e2 8c 88 07 d3 1b 5e bc fc fc 0f a2 8b 57 09 81 17 1f d1 17 0c e4 98 82 ea 15 b6 40 57 97 38 53 d3 86 91 6b 85 fd d0 aa a5 2d ca a4 a9 ef f1 bb 4c 87 62 68 85 32 6b d3 28 96 48 0d f2 da 49 36 5b a0 75 2a 74 6a 1a 88 14 97 84 4d 4c 5c bc d7 bc 6b 9d 84 23 3a e2 f9 d8 0c d2 9f b1 64 d8 5d 45 02 69 9e 78 ab 66 15 ba 6c d3 cd 6f fa 00 2c b7 48 51 b2 ff e2 eb 21 b3 59 b7 ea f4 77 25 fc 0d 4f 7d 90 85 4f 7b 3e c3 b8 3e 8a 43 8f 8d 8a a8 e6 76 a2 44 59 ce 84 85 46 c8 0f ea 45 35 70 ed 2c ed 03 fe b2 89 3c 98 f5 8f 6f 13 76 94 f0 d4 b0 1e 68 f2 bb 11 aa 21 59 95 8a 1f 7e e5 8f 59 6a 57 68 cb 46 34 64 8a c8 7d ef e6 42 86 6d 18 61 c6 15 52 13 ea e6 bc d8 b2 6d a9 d8 a6 30 43 76 6a 30 9a 9a 7d c5 49 4c 7f ec ad 77 bb c0 37 a9 e5 f7 1c 51 7f 23 97 51 4d Data Ascii: 7ls^W@W8Sk-Lbh2k(HI6[u*tjML\k#:d]Eixflo,HQ!Yw%O}O{>>CvDYFE5p,<ovh!Y~YjWhF4d}BmaRm0Cvj0}ILw7Q#QM
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 82 67 a9 89 1f 85 5c 29 28 29 0e 24 08 55 65 3f a5 db f4 e5 3f 7b 3d 14 f9 ce 8c b4 ff 35 24 a0 83 ba 3d 5c 4a 89 d2 1e d7 83 5a dc f7 bb f4 eb 0b 15 e4 8d 11 0d ff b9 3c 16 90 83 aa 5e 75 07 62 9c 9f 02 87 7b da a3 23 1e 62 8b c9 05 18 69 fe a8 f6 56 28 49 b5 4e 1a 7e 50 c7 96 38 5f d9 ec d2 e3 ff 14 66 8f 57 10 1a 31 bb aa c3 b1 b2 d8 c8 aa b7 e6 41 15 97 14 e7 f7 0f 8c 87 53 97 5e 13 99 ad 6e 90 93 74 52 36 96 3f 46 0c 23 bf 03 f9 94 65 d4 13 cb b5 24 3e 46 0c b1 c6 8d cb 23 f6 18 60 1f 20 0d 1d bf 54 da 83 df 5b 3c 54 d8 fc a6 79 b0 7d fe 76 50 3e 07 cf 0b 93 fc 3b bc 2c ea 1e 27 03 ac 46 de 5c b7 01 9c be c0 59 58 47 d6 64 1f 4e b4 65 17 fc 69 65 5b ff c6 fe 50 8a 5d eb 8d 4b 4b 65 11 28 be 2d 5b 4a 7f 0c 1a a8 87 31 d6 65 0e ec 6a 61 37 f2 57 64 c5 Data Ascii: g\)()$Ue??{=5$=\JZ<^ub{#biV(IN~P8_fW1AS^ntR6?F#e$>F#` T[<Ty}vP>;,'F\YXGdNeie[P]KKe(-[J1eja7Wd
2024-10-14 12:20:23 UTC	716	IN	Data Raw: 7e 12 bd 67 3c 7b fe 18 a3 ff b5 fc 18 55 cc b7 31 ce 8c 01 e2 eb 79 67 50 91 7e 99 54 0c 06 a2 09 a3 3a 50 f3 bf 11 55 61 eb b5 f7 2d e3 10 6c 64 04 43 69 b0 40 3a e6 3c bb f7 88 6f 43 0c 20 10 6a 9b 34 4c c3 52 89 b8 51 fb ab 79 b6 c8 a5 d9 c1 6b 16 df b5 1b c0 bf 32 b9 68 46 0a 37 de 85 68 54 11 84 85 5c 69 38 5e 93 5a 43 25 23 87 ca ae ce cb 72 e7 43 3e eb 5c 9e 24 56 15 c9 a6 f4 c1 35 4e 8d 88 5f 63 3e d5 a8 2a 8a f9 97 ef 21 43 0b f7 d6 54 89 ff 59 99 a7 37 96 9f 85 fc 22 57 90 e7 93 77 7f 1f c4 33 2d e9 ba 07 0f 89 52 b6 66 e2 f8 c5 cd 63 3c 1a f4 74 a4 f0 81 d6 a4 f3 8d 92 d6 77 22 8e 9d 70 ee 23 17 22 48 e9 39 aa e2 c8 75 8b 2a ca e6 3d 94 a7 a6 00 24 00 b1 1e 43 aa f0 49 21 f8 bc b0 31 59 6d 4d d1 ab fc bb b2 29 c7 5a 1f e3 2d 21 23 60 1f 54 30 Data Ascii: ~g<{U1ygP~T:PUa-ldCi@:<oC j4LRQyk2hF7hT\i8^ZC%#rC>\$V5N_c>!CTY7"Ww3-Rfc<tw"p#"H9u=$CI!1YmM)Z-!#`T0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.11	49872	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:23 UTC	773	OUT	GET /uu/api/res/1.2/PawwvJdese9nx.y2dRiAjQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-08/2b090f10-59a3-11ef-bfdf-b3e37008c82b.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:23 UTC	1199	IN	HTTP/1.1 200 OK Content-Length: 13052 Content-Type: image/webp Content-Disposition: inline; filename="2b090f10-59a3-11ef-bfdf-b3e37008c82b.webp" Expiration: expiry-date="Mon, 10 Feb 2025 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 13 Aug 2024 18:41:12 GMT Date: Sat, 12 Oct 2024 18:46:15 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=1;cpu=0;start=2024-09-12T18:43:17.920Z;desc=hit,rtt;dur=91,content-info;desc="width=536,height=284,bytes=13052,owidth=5202,oheight=2926,obytes=989462,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 9a7fca9cdc8b14ef639b968feeebfc8c cld_id: 9a7fca9cdc8b14ef639b968feeebfc8c x-image-width: 536 x-image-height: 284 Referrer-Policy: no-referrer-when-downgrade Etag: "59b4fd7cbfa57dc473574bf7686c4f23" Age: 149648 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 52 49 46 46 f4 32 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFF2WEBPVP8X ICCP00ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 88 c1 24 20 7c 1d 1b c2 fb d0 30 1c ce 0d 2d db 1e 87 e1 99 97 cf eb fa 48 a2 4d a4 2f 01 48 a6 e7 31 0b 8d 96 19 cc 1d 39 98 d3 a3 e3 34 cd f1 64 ad 8e f5 23 d8 06 0b 7c ff 5c cb 43 8a 19 9b c1 ac 0a ec 3b eb 2b f8 4c 96 4c 4f f3 d5 fe 3c 07 00 d0 c8 45 90 3f 12 82 b2 75 a0 e8 2a 98 3e d5 ee 92 09 93 93 f0 c6 48 46 7a c2 0c ac 8f 67 d1 64 d5 78 2c c9 00 55 16 65 0c 7e 39 1e 1b 61 f0 56 f0 e2 76 d6 06 9f 91 3e 6e 94 e5 06 98 bc 4c 57 df ff be 55 85 35 0a 70 27 2d 57 fa 85 ee 60 89 14 90 e2 b6 15 73 5c 9a 78 1c dc 15 65 9d db 7a d3 49 93 bf d9 41 08 5c 92 e9 95 fd b6 5b c1 c9 d8 03 54 a8 2b 4b ba fe d1 c7 5e b4 8d 25 bb 15 00 1e a2 d8 64 e2 a5 ac 38 56 72 64 d1 6f 92 e4 4f 5a 00 16 69 f9 af 40 61 c3 6d e9 b8 d7 c9 af d1 dc fa e5 cf a0 cb 38 6b 9c 75 b0 d7 Data Ascii: $ \|0-HM/H194d#\|\C;+LLO<E?u*>HFzgdx,Ue~9aVv>nLWU5p'-W`s\xezIA\[T+K^%d8VrdoOZi@am8ku
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: ed 8d 27 0b 81 e6 db 20 1d ac b7 02 f0 a4 db 44 16 12 7a b0 f0 f7 9e 5e 0e f0 bc ba f2 4a c5 6c 26 79 24 24 85 c9 00 59 77 d0 2b 49 62 db ad 3e a6 21 24 96 d8 d1 4d ea 25 a5 4d fe f4 dd 73 35 a3 18 16 47 8c b5 67 7c 3a a8 c8 06 6b ca 0e 54 76 53 3b 9d 47 d3 9a 3e 27 d1 e7 7d c9 1b 61 e4 c3 5c ed a9 3a 54 c8 a3 2d 9d 0c eb 8c ea 5d 6c c5 91 42 60 21 e8 4a 5b 98 ff 2c 98 c2 50 35 e9 68 4c ea a6 19 38 04 c1 75 e4 32 4c 80 e8 0f f5 90 69 b4 55 e1 27 55 3b 85 64 4c f5 52 1e d9 a9 cb 48 6a 23 0a 61 9c 7d 06 6a 8b 9d 71 80 d8 ce 39 14 9b c7 9a 74 be 27 b0 f8 3a 90 ec 5f 3f 00 4e c2 97 ed 1a 1f 65 4c 76 36 a8 55 8c 57 6a 70 0a 75 c4 56 75 f5 30 a6 bc 26 b9 28 f1 f1 8b b4 64 94 51 59 ae a5 c3 ab b8 39 38 ac bc 14 6f 9d 58 5a dd 7e 2e 15 12 5a b8 46 72 3a b3 1a bd Data Ascii: ' Dz^Jl&y$$Yw+Ib>!$M%Ms5Gg\|:kTvS;G>'}a\:T-]lB`!J[,P5hL8u2LiU'U;dLRHj#a}jq9t':_?NeLv6UWjpuVu0&(dQY98oXZ~.ZFr:
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 7b 35 6d 1b 3d 07 70 9c e8 5c ba 5a e3 bf a6 64 5f 6b ce b1 f5 52 d0 3e 0e 4a e6 9e 65 1f 0c 62 1b a2 0a b1 49 7f 68 a6 39 eb 85 82 53 58 02 eb a9 b1 5a 11 14 9a 2b ef 0f 90 08 76 3c fa f9 8a 8e 17 2c 3f 0c 6c ef d6 54 f8 88 5f f7 9a 59 f4 66 da f9 06 df 51 67 0d b9 c6 6e 78 ce fc fd 60 6f ef 1d 2d d7 04 c6 d8 e2 ea b4 ce 04 0f 91 42 c5 71 fb 04 4f 77 5e 51 91 20 58 55 8f ee f0 09 d5 55 9c 23 ae 2e e3 b4 40 38 f6 7a ba 80 ca 6e 24 a6 c0 0b e3 c4 4c 84 66 dc 00 61 ca 35 62 03 98 94 72 f2 33 a9 e9 06 47 58 cf 10 b9 f3 a7 1b 76 07 cb 8b 33 48 b9 d0 9a e2 ea 51 02 b3 a5 1c 90 b2 e5 ad e8 35 7e dd 81 bc 1b c5 83 ba 3e b8 19 fe 11 68 34 cb a6 b2 e1 9c 47 97 c9 1c 57 b5 bc c3 f7 23 64 ff 8d dd 7b ef 6a 06 09 02 ac 02 80 dc d3 46 d1 a0 cd 23 7c f6 be 64 8f 80 2e Data Ascii: {5m=p\Zd_kR>JebIh9SXZ+v<,?lT_YfQgnx`o-BqOw^Q XUU#.@8zn$Lfa5br3GXv3HQ5~>h4GW#d{jF#\|d.
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 19 0b 66 86 5f 32 61 2b 62 f3 6e c9 b6 a6 84 aa ec 61 f2 43 aa 4e 4a 3a 6c 19 f6 58 e4 16 11 84 c2 4b 8a a0 4f f1 64 6d 5f 63 79 b4 1f 3a 11 74 76 fb 39 eb a3 3e 23 51 80 b4 ec 35 c5 cd 18 96 75 bb a3 33 bd 92 99 f9 bb 14 db a9 58 28 73 19 01 54 55 49 70 ea ce 9c f6 0c 9c b9 56 b7 c6 fc 94 9a da ab d2 6f f2 be 86 a4 ea e2 c1 e5 5f d9 9e 5f 92 6e b6 d7 38 ef b4 98 9c ff 05 ae 18 5e 0f 60 9c 23 59 ff 04 13 82 91 54 d1 84 6a 54 e1 29 e3 2e 1e 9c 87 50 bc 3b de 4d f9 fb 20 fb 9d 4a bb b1 85 ac 18 f1 f1 ae 11 a3 0d d0 ce 9a d1 ea fc f3 a8 58 fb 82 d5 ca 26 1b 72 c4 4a c0 fb 91 c1 c5 b3 f5 1d 98 0e 24 8d 11 dd 3f cc df 3a 8c 40 09 33 a2 71 f3 da 2a 84 28 ee 14 e8 4a 65 46 eb 47 2b b4 68 d6 a0 e4 9b 76 be 80 0b 01 73 64 42 9c 4d e2 78 8d a4 46 b8 7f bc 10 2d 85 Data Ascii: f_2a+bnaCNJ:lXKOdm_cy:tv9>#Q5u3X(sTUIpVo__n8^`#YTjT).P;M JX&rJ$?:@3q*(JeFG+hvsdBMxF-
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 10 51 63 7d 92 ce 3e 86 9a 8b 91 69 14 9b 61 50 91 a0 21 44 da ae 37 90 81 0c ba 61 0d 90 b0 03 f0 ad dc 1f 62 30 90 36 72 ec 19 d3 bc 90 56 29 1c 7e 82 ff ad d2 d7 a0 a8 be 70 81 50 95 74 e2 1a 03 6c 9e b1 9a ce 8e 7a b7 d9 4e f0 bc 74 42 ea 70 6f 4c f4 c5 be 1c 93 5d 48 39 85 52 fa dd 9d fd 39 4d c3 f6 6b e1 06 c7 b5 e8 ba a2 c0 63 a6 09 33 41 6d 12 66 af da 09 bb 01 da d9 cb aa e8 f0 2a 9a f3 f2 79 1b 72 99 e4 e1 3f 1e ab 28 d5 3c b4 54 0e 18 9e 41 ab 22 56 15 1e 3a 06 ad e2 0c 1e ef 20 89 7a 86 2b fc 17 44 8c 77 95 42 a5 69 a8 3a da 0c 29 36 9f a3 26 3e 4d 65 0c d1 81 a1 e9 d4 93 08 1c 5d 18 56 07 d6 2f 3b 3b 79 2f 55 4c 14 07 77 93 a6 1f 85 e4 a5 05 e5 55 7f d6 21 6c 68 24 21 82 06 9a 22 78 ba 9d 8a 39 22 a0 fc 57 ea 72 69 25 8b 38 17 b4 f6 67 a1 eb Data Ascii: Qc}>iaP!D7ab06rV)~pPtlzNtBpoL]H9R9Mkc3Amf*yr?(<TA"V: z+DwBi:)6&>Me]V/;;y/ULwU!lh$!"x9"Wri%8g
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 5f 8a 0f f2 e3 f1 5f d4 bd e1 b7 1c 1b 30 41 50 7b 31 dc ed cb c8 bc 3b 55 b2 6a f3 b8 71 8f d3 bd c6 14 64 fd 83 7b 18 50 a9 7a 39 be 16 06 ce b6 7e 13 90 f5 07 0b f7 4c 84 76 29 eb 83 c9 82 ef 86 ec d9 01 9e 7e 45 33 80 f0 79 a1 88 2f 58 74 10 e6 df 13 7f 47 26 95 ba 44 f3 87 0a 6e 51 fe 50 92 2e 11 db 79 06 ca bf 77 08 26 4e 31 8f e8 dd 29 29 64 ee 04 f7 73 36 14 bf fb fa 00 bf 8b 9e dc 6c c4 dc 4c 49 27 53 e5 0e 3d cf 74 b3 e5 3e 2b a5 c1 6b 4a 12 6b 55 5f eb cb de 5c 34 25 42 c3 3c b2 81 65 d5 fc bd 88 d8 14 0e 3e 77 b6 01 bb 36 76 d9 f4 f6 a2 59 50 10 65 e9 3d 94 18 b0 dd c2 39 76 52 ef ab 25 2a 8c 07 11 27 8a 18 ad e9 6d 34 8f 91 bf d6 69 aa 4e 75 14 74 90 80 4b 5b e4 12 a3 0b 06 70 5a 4c 8c 00 57 c3 09 17 6e 03 ae 82 3d b5 f9 af 8d ca 7a cb 92 69 Data Ascii: __0AP{1;Ujqd{Pz9~Lv)~E3y/XtG&DnQP.yw&N1))ds6lLI'S=t>+kJkU_\4%B<e>w6vYPe=9vR%*'m4iNutK[pZLWn=zi
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 58 84 31 fc a5 e0 65 67 fb ad c6 47 cf 1d f5 26 cf 80 d4 bf 64 5f 46 21 67 84 b8 20 21 06 8d 8f ac 7e 05 d3 6c 27 d8 1f a1 a1 9f 11 b6 cc 5f e8 7f c5 98 f3 60 08 cc 52 c7 e7 c8 f6 ae ea 49 0b d5 0e dc 1b fe 85 7a de 5b 2e 1e b4 53 ca 54 cf 85 47 47 d7 53 25 ab 5f c9 d5 fd 14 9a be 2a 76 24 3a ea 6c c4 f8 a3 ef 78 06 37 42 f5 eb 90 0c 4f 36 1f bf 32 44 fc 1a af e2 0f 45 18 8c b0 92 5e cc d6 eb d6 97 f0 76 d9 af 1b 4b fb 51 4d 36 a7 7e 45 d2 da 45 6b bc 1a 80 7b f0 69 76 c2 7f f8 28 84 77 ec e7 97 ab cb c8 0d 97 a9 69 c8 23 6d a6 8b 56 8e 0d dc e5 74 de 74 da 5b 50 8b da 41 57 c6 58 7a 25 08 8c 13 f2 28 f8 b1 c9 65 1e c4 69 6d 67 49 e1 6b 99 f3 50 c9 71 46 ae d0 34 d3 a3 d7 17 e9 e9 e0 14 5d f1 57 7d 00 f1 b0 ef 74 4d 24 d9 c8 ff 02 80 36 59 e5 ff 21 2a 1f Data Ascii: X1egG&d_F!g !~l'_`RIz[.STGGS%_v$:lx7BO62DE^vKQM6~EEk{iv(wi#mVtt[PAWXz%(eimgIkPqF4]W}tM$6Y!
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: e9 8c 19 83 39 e8 13 c5 85 77 37 7c ac 1d 73 e3 31 98 f3 c0 6b 39 b6 bf d1 dc a9 ef 27 e6 a0 19 10 48 ce 72 15 ea e3 1b 40 b9 f1 88 fe dc 73 e7 4e 3e 7d f0 3e 5b 21 73 77 1e 7f 65 92 38 b2 ec 76 97 ee 5d 0a f3 0b a6 e6 de 02 64 d2 a0 50 c4 66 e0 4a 1d db c6 22 76 86 cc 4d f4 3e 3b 47 33 27 08 c5 4c 71 0f 6b 94 94 0f 63 73 af b1 8b fa f1 4e 46 3b 21 c5 c9 df 03 73 d3 e9 5f c3 85 e4 b5 eb b9 8f c2 42 45 0b 1c c9 a8 7b 58 83 98 43 a2 f7 fa f3 d6 ab 73 10 e7 0d b9 db 35 63 27 11 42 33 39 8c 50 62 93 4a db e5 16 63 9e aa ef a9 de 3d 52 84 c6 ea 37 d5 94 04 0e ac 86 02 b8 c7 f8 94 b5 0a 0b 07 d1 e5 c6 8a 54 5b c1 2f e2 1d 56 4e 16 22 ad 2a 79 bd 89 ae f1 de 81 1b eb 6e 41 80 5b 85 88 61 35 46 f3 ae 02 48 b1 f2 f2 c5 39 e2 d9 3c 27 d4 bb 2c a4 30 33 a1 91 ed 2c Data Ascii: 9w7\|s1k9'Hr@sN>}>[!swe8v]dPfJ"vM>;G3'LqkcsNF;!s_BE{XCs5c'B39PbJc=R7T[/VN"*ynA[a5FH9<',03,
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: a0 88 c0 00 1f ee 5c ce bc 52 37 ad e5 9a 8b ef 4c c3 88 43 45 e7 e4 59 da cd 3a 72 74 76 a7 d3 dc 6c 86 1e 9a e8 18 29 a4 97 40 b7 e9 32 a9 c6 0c 8c 9f 5e ec c8 4c f5 cf 30 af 49 2c 00 c7 6a 64 ab 32 4b f8 fe 88 ff ae 6c ac dd cc e4 68 69 89 23 30 e4 0d 42 f6 e7 76 1d e5 44 75 78 92 8e 2f 4f 0c 39 48 22 66 6d f5 00 64 7a b2 ae 43 ec da d7 f7 70 68 4f 1b 0e 68 93 58 a5 94 81 9e df b2 03 da 5c 70 ea 20 19 d9 14 d8 4f 85 1e f2 70 b3 2f 70 29 e5 9d ee 7b e9 26 ad c0 a5 e5 f1 82 f8 aa 8c 21 85 c5 46 fc 2a ad b3 8a 09 e3 9e cb 68 2c d6 5a 55 2a 46 b8 74 4a c9 35 6a e3 db 48 3c d3 51 0b a0 34 17 a6 76 52 da 01 5b b6 57 34 0c ca e4 64 20 bf 6b 02 70 00 eb 2e 0e 60 12 4c 08 be f4 54 37 bc 49 26 29 19 9a 18 ac a9 41 12 c1 a9 c6 51 6c fd 78 08 7a 0b 72 9f 55 10 3a Data Ascii: \R7LCEY:rtvl)@2^L0I,jd2Klhi#0BvDux/O9H"fmdzCphOhX\p Op/p){&!Fh,ZUFtJ5jH<Q4vR[W4d kp.`LT7I&)AQlxzrU:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.11	49871	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:23 UTC	577	OUT	GET /cv/apiv2/partner-portals/att/foreseev3/092123/gateway.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:23 UTC	733	IN	HTTP/1.1 200 OK x-amz-id-2: ZWAJmzmldYsB56VHbcy490ex8OVbUN6rYg6XCRpiPeCMIMTR4Trm6GYYaqJKtpY3QXymaeVWc18= x-amz-request-id: EQPZBMJGK5TA4BGF Date: Sun, 01 Sep 2024 08:32:25 GMT Last-Modified: Thu, 21 Sep 2023 07:08:23 GMT ETag: "54ba1e0d909a710667fcbd763770fd81" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript; charset=utf-8 Server: ATS Content-Length: 46081 Referrer-Policy: no-referrer-when-downgrade Age: 3728880 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin ATS-Carp-Promotion: 1
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 76 65 6e 64 6f 72 73 3a 7b 66 73 3a 7b 73 65 6c 66 48 6f 73 74 65 64 3a 21 30 2c 63 6f 64 65 56 65 72 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 73 69 74 65 4b 65 79 3a 22 6e 65 77 2d 61 74 74 2d 6e 65 74 22 2c 67 61 74 65 77 61 79 3a 22 67 61 74 65 77 61 79 2e 66 6f 72 65 73 65 65 2e 63 6f 6d 22 2c 63 6f 6e 66 69 67 4c 6f 63 61 74 69 6f 6e 3a 22 67 61 74 65 77 61 79 2e 66 6f 72 65 73 65 65 2e 63 6f 6d 2f 73 69 74 65 73 2f 6e 65 77 2d 61 74 74 2d 6e 65 74 22 2c 69 6e 74 65 67 72 69 74 79 48 61 73 68 4c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 7d 7d 7d 2c 74 3d 7b 66 73 3a 7b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 3f 74 5b 65 5d 5b 6e 5d 3a 76 6f 69 64 20 Data Ascii: !function(){var e={vendors:{fs:{selfHosted:!0,codeVer:"19.22.0-fs",siteKey:"new-att-net",gateway:"gateway.foresee.com",configLocation:"gateway.foresee.com/sites/new-att-net",integrityHashLocation:null}}},t={fs:{}};function n(e,n){return t[e]?t[e][n]:void
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 26 5d 2b 28 5b 5e 3d 26 5d 2b 29 3d 28 5b 5e 26 5d 2a 29 2f 67 69 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 74 5b 6e 5d 3d 72 7d 29 29 3b 76 61 72 20 6e 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 6e 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 3a 6e 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2c 6f 3d 72 5b 30 5d 7c 7c 7b 7d 2c 69 3d 31 2c 73 3d 72 2e 6c 65 6e 67 74 68 2c 61 3d 21 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 66 6f 72 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6f 26 26 Data Ascii: &]+([^=&]+)=([^&]*)/gi,(function(e,n,r){t[n]=r}));var n=t[e];return n?decodeURIComponent(n):n},k=function(e){return setTimeout(e,0)};function P(){var e,t,n,r=arguments,o=r[0]\|\|{},i=1,s=r.length,a=!1===arguments[arguments.length-1];for("object"!=typeof o&&
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 2e 61 74 74 61 63 68 45 76 65 6e 74 28 63 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 5e 63 2f 2e 74 65 73 74 28 72 5b 6c 5d 29 26 26 28 72 2e 64 65 74 61 63 68 45 76 65 6e 74 28 63 2c 74 29 2c 75 28 29 29 7d 29 2c 65 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 65 6c 66 21 3d 74 6f 70 3f 66 3f 74 28 29 3a 6e 2e 70 75 73 68 28 74 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6f 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 29 7d 29 2c 35 30 29 7d 74 28 29 7d 28 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 3f 65 28 29 3a 6e 2e 70 75 73 68 28 65 29 7d 7d 28 29 3b 76 61 72 20 49 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: .attachEvent(c,t=function(){/^c/.test(r[l])&&(r.detachEvent(c,t),u())}),e=i?function(t){self!=top?f?t():n.push(t):function(){try{o.doScroll("left")}catch(n){return setTimeout((function(){e(t)}),50)}t()}()}:function(e){f?e():n.push(e)}}();var I=function(e)
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 69 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 6b 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 68 61 6e 64 6c 65 64 7c 7c 74 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 28 65 2e 5f 76 61 6c 75 65 29 7d 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 6e 28 65 2c 65 2e 5f 64 65 66 65 72 72 65 64 73 5b 72 5d 29 3b 65 2e 5f 64 65 66 65 72 72 65 64 73 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b Data Ascii: ction o(e,t){e._state=2,e._value=t,i(e)}function i(e){2===e._state&&0===e._deferreds.length&&k((function(){e._handled\|\|t._unhandledRejectionFn(e._value)}));for(var r=0,o=e._deferreds.length;r<o;r++)n(e,e._deferreds[r]);e._deferreds=null}function s(e,t,n){
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 3f 65 3a 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 65 29 7d 29 29 7d 2c 74 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 6e 28 65 29 7d 29 29 7d 2c 74 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 65 5b 72 5d 2e 74 68 65 6e 28 74 2c 6e 29 7d 29 29 7d 2c 74 2e 5f 75 6e 68 61 6e Data Ascii: e=function(e){return e&&"object"==typeof e&&e.constructor===t?e:new t((function(t){t(e)}))},t.reject=function(e){return new t((function(t,n){n(e)}))},t.race=function(e){return new t((function(t,n){for(var r=0,o=e.length;r<o;r++)e[r].then(t,n)}))},t._unhan
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 74 51 75 61 6c 69 66 69 65 64 3a 6e 75 6c 6c 2c 6f 6e 50 72 6f 64 75 63 74 73 44 69 73 71 75 61 6c 69 66 69 65 64 3a 6e 75 6c 6c 2c 63 70 70 73 3a 6e 75 6c 6c 2c 71 61 6d 6f 64 65 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 63 6b 69 65 3a 6e 75 6c 6c 2c 74 72 69 67 67 65 72 3a 7b 7d 2c 66 65 65 64 62 61 63 6b 3a 7b 7d 7d 3b 76 61 72 20 74 65 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 6e 65 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 72 65 3d 22 66 73 72 51 41 43 6f 6e 66 69 67 22 2c 6f 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 64 65 63 3a 74 65 2c 65 6e 63 3a 6e 65 2c 51 41 5f 43 4f 4e 46 49 47 5f 4f 56 45 52 52 49 44 45 3a 72 65 2c 43 53 53 70 72 65 66 69 78 3a 22 76 65 Data Ascii: tQualified:null,onProductsDisqualified:null,cpps:null,qamodeCallback:null,ckie:null,trigger:{},feedback:{}};var te=decodeURIComponent,ne=encodeURIComponent,re="fsrQAConfig",oe=Object.freeze({__proto__:null,dec:te,enc:ne,QA_CONFIG_OVERRIDE:re,CSSprefix:"ve
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 61 73 73 65 74 4c 6f 63 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 2c 67 65 74 20 63 6f 64 65 4c 6f 63 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 67 65 74 20 65 6d 62 65 64 41 74 74 72 73 28 29 7b 72 65 74 75 72 6e 20 55 7d 2c 67 65 74 20 67 77 43 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 28 29 7b 72 65 74 75 72 6e 20 42 7d 2c 67 65 74 20 68 61 73 53 53 4c 28 29 7b 72 65 74 75 72 6e 20 54 7d 2c 67 65 74 20 68 6f 6d 65 28 29 7b 72 65 74 75 72 6e 20 71 7d 2c 67 65 74 20 69 73 50 72 6f 64 75 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 2c 67 65 74 20 69 73 53 65 6c 66 48 6f 73 74 65 64 28 29 7b 72 65 74 75 72 6e 20 51 7d 2c 67 65 74 20 6d 61 6b 65 41 73 73 65 74 55 52 49 28 29 7b 72 65 74 75 72 6e 20 4d 7d 2c 67 65 74 20 6d 61 6b 65 55 Data Ascii: assetLocation(){return D},get codeLocation(){return N},get embedAttrs(){return U},get gwConfigOverride(){return B},get hasSSL(){return T},get home(){return q},get isProduction(){return z},get isSelfHosted(){return Q},get makeAssetURI(){return M},get makeU
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7c 7c 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 65 2e 73 65 74 49 6e 74 65 72 76 61 6c 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 2c 6e 3d 21 30 3b 66 6f 72 28 74 20 69 6e 20 65 29 28 21 6e 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c Data Ascii: bject.prototype.toString.call(e)\|\|e.nodeType\|\|e.setInterval)return!1;if(e.constructor&&!hasOwnProperty.call(e,"constructor")&&!hasOwnProperty.call(e.constructor.prototype,"isPrototypeOf"))return!1;var t,n=!0;for(t in e)(!n\|\|void 0===t\|\|hasOwnProperty.call
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 66 2d 38 22 2c 74 2e 61 73 79 6e 63 3d 21 30 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 61 6d 65 22 2c 74 68 69 73 2e 6e 61 6d 65 29 2c 6e 65 77 20 4c 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 29 2c 6e 28 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 29 2c 72 28 6e 65 77 20 45 72 72 6f 72 28 22 46 6f 72 65 73 65 65 20 57 65 62 53 44 4b 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 3a 20 22 2b 65 2e 6e 61 6d 65 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6f 2c 21 31 29 2c 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 69 2c 21 Data Ascii: f-8",t.async=!0,t.setAttribute("data-name",this.name),new L((function(n,r){var o=function(){s(),n()},i=function(){s(),r(new Error("Foresee WebSDK failed to load: "+e.name))};function s(){t.removeEventListener("load",o,!1),t.removeEventListener("error",i,!
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 65 28 65 29 2e 72 65 73 6f 6c 76 65 28 74 29 7d 2c 74 2e 5f 72 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 70 70 6c 79 28 61 2c 74 29 3b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 73 74 61 72 74 75 70 26 26 6e 2e 73 74 61 72 74 75 70 28 29 2c 6e 7d 2c 74 2e 5f 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 65 2e 6c 6f 61 64 28 29 3b 6e 26 26 6e 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 69 73 52 65 73 6f 6c 76 65 64 28 29 7c 7c 74 2e 5f 6c 65 67 61 63 79 4c 6f 61 64 28 65 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 2e 6d 65 73 73 61 67 65 29 7d 29 29 7d 2c 74 2e 5f 6c 65 67 61 63 79 4c 6f 61 64 3d Data Ascii: e(e).resolve(t)},t._run=function(e,t){var n=e.apply(a,t);return n&&n.startup&&n.startup(),n},t._load=function(e){var t=this,n=e.load();n&&n.then((function(){e.isResolved()\|\|t._legacyLoad(e)})).catch((function(e){console.error(e.message)}))},t._legacyLoad=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.11	49870	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:23 UTC	547	OUT	GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:23 UTC	714	IN	HTTP/1.1 200 OK x-amz-id-2: x28o7XVOMyTjwTXDhs1WcuU7NjEm7x/SSDYDGMgAE75JEj4jKH4ApOE5l4dDYTdjjZuEx1YuIDY= x-amz-request-id: R6C8HZCC2EENATA5 Date: Mon, 14 Oct 2024 12:14:10 GMT Last-Modified: Mon, 14 Oct 2024 02:59:22 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: nW915sGuuw3ENdzj8BuPjDk.zBdTiy3D Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 175752 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "e14cef4adb91468980f0d54f569117f9" Age: 374 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 5b 27 76 76 44 71 27 2c 27 41 67 66 5a 71 4d 76 4c 42 4b 66 4a 44 67 4c 32 7a 71 3d 3d 27 2c 27 41 68 72 30 43 63 31 4c 43 78 76 50 44 47 3d 3d 27 2c 27 44 4d 66 53 44 77 75 3d 27 2c 27 43 4d 6a 56 45 61 3d 3d 27 2c 27 43 67 6a 51 43 57 3d 3d 27 2c 27 72 4e 76 55 79 33 72 50 42 32 34 3d 27 2c 27 43 32 48 50 7a 4e 71 3d 27 2c 27 79 78 65 54 45 77 48 49 27 2c 27 43 4d 76 57 42 67 66 4a 7a 75 6e 4f 41 77 58 4b 43 4d 76 55 27 2c 27 43 32 66 4d 7a 75 7a 59 79 77 31 4c 27 2c 27 7a 67 4c 5a 43 67 58 48 45 71 3d 3d 27 2c 27 71 76 76 65 73 75 38 3d 27 2c 27 79 32 39 55 79 32 66 30 27 2c 27 76 65 7a 67 27 2c 27 77 30 76 73 75 4c 39 6e 78 30 4c 65 77 66 30 3d 27 2c 27 71 75 72 67 27 2c 27 76 30 66 65 Data Ascii: (new function(){var c=['vvDq','AgfZqMvLBKfJDgL2zq==','Ahr0Cc1LCxvPDG==','DMfSDwu=','CMjVEa==','CgjQCW==','rNvUy3rPB24=','C2HPzNq=','yxeTEwHI','CMvWBgfJzunOAwXKCMvU','C2fMzuzYyw1L','zgLZCgXHEq==','qvvesu8=','y29Uy2f0','vezg','w0vsuL9nx0Lewf0=','qurg','v0fe
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 3d 27 2c 27 43 33 6a 4a 27 2c 27 79 33 76 59 43 4d 76 55 44 65 35 56 7a 67 75 3d 27 2c 27 7a 4d 7a 4a 7a 68 61 3d 27 2c 27 7a 32 76 30 75 4d 76 5a 43 67 39 55 43 32 76 6a 42 4d 7a 56 43 4d 31 48 44 67 4c 56 42 47 3d 3d 27 2c 27 7a 77 35 30 43 4d 4c 4c 43 57 3d 3d 27 2c 27 44 78 6e 4c 43 4b 66 4e 7a 77 35 30 27 2c 27 7a 67 39 4a 44 77 31 4c 42 4e 71 3d 27 2c 27 73 66 7a 62 72 61 3d 3d 27 2c 27 63 4d 44 53 42 32 6a 48 42 63 62 4a 42 32 72 4c 71 67 66 49 42 33 76 30 6f 4e 6e 59 79 32 72 56 79 5a 4f 3d 27 2c 27 42 32 35 30 42 33 76 4a 41 68 6e 30 79 78 6a 30 27 2c 27 73 66 72 6e 74 65 6a 48 43 32 76 66 42 67 76 54 7a 77 35 30 27 2c 27 7a 78 7a 30 6c 77 66 57 7a 57 3d 3d 27 2c 27 73 77 35 50 44 63 34 3d 27 2c 27 43 32 76 48 44 67 6a 50 7a 61 3d 3d 27 2c 27 43 Data Ascii: =','C3jJ','y3vYCMvUDe5Vzgu=','zMzJzha=','z2v0uMvZCg9UC2vjBMzVCM1HDgLVBG==','zw50CMLLCW==','DxnLCKfNzw50','zg9JDw1LBNq=','sfzbra==','cMDSB2jHBcbJB2rLqgfIB3v0oNnYy2rVyZO=','B250B3vJAhn0yxj0','sfrntejHC2vfBgvTzw50','zxz0lwfWzW==','sw5PDc4=','C2vHDgjPza==','C
2024-10-14 12:20:23 UTC	1002	IN	Data Raw: 6e 59 41 78 62 30 75 33 6a 4a 27 2c 27 43 32 72 4a 27 2c 27 79 32 7a 4e 6c 77 76 30 42 68 43 3d 27 2c 27 43 4e 76 55 76 67 66 59 7a 32 76 30 41 77 35 4e 71 76 62 6f 27 2c 27 7a 4e 6a 56 42 71 3d 3d 27 2c 27 43 32 39 54 7a 71 3d 3d 27 2c 27 44 4d 76 59 43 32 4c 56 42 47 3d 3d 27 2c 27 43 32 66 55 7a 67 6a 56 45 61 3d 3d 27 2c 27 69 68 57 47 43 33 72 48 79 32 53 36 69 61 3d 3d 27 2c 27 41 67 66 5a 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 43 32 58 50 79 32 75 3d 27 2c 27 76 4b 4c 65 72 75 38 3d 27 2c 27 43 4d 76 57 42 67 66 4a 7a 76 44 50 44 67 47 3d 27 2c 27 74 31 76 75 71 4c 6a 62 73 75 34 3d 27 2c 27 43 67 66 4e 7a 78 7a 50 7a 78 43 3d 27 2c 27 6b 67 35 4c 44 59 62 4d 44 77 35 4a 44 67 4c 56 42 49 61 3d 27 2c 27 77 65 48 73 73 61 3d 3d 27 2c 27 41 33 Data Ascii: nYAxb0u3jJ','C2rJ','y2zNlwv0BhC=','CNvUvgfYz2v0Aw5Nqvbo','zNjVBq==','C29Tzq==','DMvYC2LVBG==','C2fUzgjVEa==','ihWGC3rHy2S6ia==','AgfZqxr0CMLIDxrL','C2XPy2u=','vKLeru8=','CMvWBgfJzvDPDgG=','t1vuqLjbsu4=','CgfNzxzPzxC=','kg5LDYbMDw5JDgLVBIa=','weHssa==','A3
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 67 76 4a 42 32 72 4c 76 76 6a 6a 71 32 39 54 43 67 39 55 7a 77 35 30 6b 67 48 30 42 77 57 50 6b 74 53 47 7a 67 39 4a 44 77 31 4c 42 4e 71 55 79 32 58 56 43 32 75 4f 6b 74 53 47 46 74 53 47 44 33 6a 50 44 67 76 67 42 49 47 49 27 2c 27 43 33 72 48 79 32 53 3d 27 2c 27 70 67 39 49 42 4a 35 30 45 68 71 39 27 2c 27 75 31 72 7a 74 65 75 3d 27 2c 27 7a 67 76 4d 41 77 35 4c 75 68 6a 56 43 67 76 59 44 67 4c 4c 43 57 3d 3d 27 2c 27 7a 78 7a 30 6c 77 6e 52 41 4d 43 3d 27 2c 27 43 32 76 55 7a 65 6a 4c 79 77 6e 56 42 47 3d 3d 27 2c 27 44 67 66 4e 74 4d 66 54 7a 71 3d 3d 27 2c 27 6c 74 34 47 27 2c 27 79 78 6a 59 79 78 4c 63 44 77 7a 4d 7a 78 69 3d 27 2c 27 44 67 48 31 42 77 6a 55 79 77 4c 53 27 2c 27 79 77 58 53 27 2c 27 72 66 76 71 27 2c 27 74 76 6e 6a 72 71 3d 3d 27 Data Ascii: gvJB2rLvvjjq29TCg9Uzw50kgH0BwWPktSGzg9JDw1LBNqUy2XVC2uOktSGFtSGD3jPDgvgBIGI','C3rHy2S=','pg9IBJ50Ehq9','u1rzteu=','zgvMAw5LuhjVCgvYDgLLCW==','zxz0lwnRAMC=','C2vUzejLywnVBG==','DgfNtMfTzq==','lt4G','yxjYyxLcDwzMzxi=','DgH1BwjUywLS','ywXS','rfvq','tvnjrq=='
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 6d 36 27 2c 27 6b 73 4b 55 43 4e 76 55 6b 61 3d 3d 27 2c 27 41 77 35 5a 7a 78 6a 30 71 4d 76 4d 42 33 6a 4c 6f 49 61 3d 27 2c 27 73 77 35 50 44 67 4c 48 42 67 4c 36 79 78 72 50 42 32 35 67 79 77 4c 53 7a 77 71 3d 27 2c 27 42 4d 39 55 79 32 75 3d 27 2c 27 7a 32 76 30 75 68 6a 56 44 67 39 30 45 78 62 4c 74 32 79 3d 27 2c 27 76 32 76 49 72 30 57 59 75 4d 76 55 7a 67 76 59 41 77 35 4e 71 32 39 55 44 67 76 34 44 61 3d 3d 27 2c 27 44 67 6a 53 27 2c 27 79 33 6a 4c 79 78 72 4c 76 68 6a 4c 7a 76 44 48 42 67 54 4c 43 47 3d 3d 27 2c 27 72 4e 6a 48 42 77 75 3d 27 2c 27 63 49 61 47 69 63 62 48 44 63 62 48 79 4d 39 31 44 64 50 49 42 67 66 55 41 5a 4f 3d 27 2c 27 78 73 7a 48 43 68 62 6a 7a 64 31 71 77 66 62 6b 76 75 39 57 6e 65 54 72 27 2c 27 75 65 39 74 76 61 3d 3d 27 Data Ascii: m6','ksKUCNvUka==','Aw5Zzxj0qMvMB3jLoIa=','sw5PDgLHBgL6yxrPB25gywLSzwq=','BM9Uy2u=','z2v0uhjVDg90ExbLt2y=','v2vIr0WYuMvUzgvYAw5Nq29UDgv4Da==','DgjS','y3jLyxrLvhjLzvDHBgTLCG==','rNjHBwu=','cIaGicbHDcbHyM91DdPIBgfUAZO=','xszHChbjzd1qwfbkvu9WneTr','ue9tva=='
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 33 72 64 41 67 4c 53 7a 61 3d 3d 27 2c 27 7a 78 7a 30 6c 77 7a 49 42 68 69 3d 27 2c 27 71 76 65 54 75 65 6a 6b 75 57 3d 3d 27 2c 27 7a 67 76 30 79 77 4c 53 43 57 3d 3d 27 2c 27 7a 67 76 4c 43 67 76 5a 44 61 3d 3d 27 2c 27 7a 4d 39 59 72 77 66 4a 41 61 3d 3d 27 2c 27 79 33 6a 4c 79 78 72 4c 73 66 72 6e 74 65 72 56 79 33 76 54 7a 77 35 30 27 2c 27 79 78 76 30 42 33 62 53 79 78 4b 3d 27 2c 27 72 75 58 66 74 75 76 6f 76 66 39 6f 74 30 72 66 27 2c 27 77 30 76 46 71 31 6e 71 78 73 61 3d 27 2c 27 44 32 4c 55 7a 67 39 33 6c 47 3d 3d 27 2c 27 7a 78 7a 30 6c 77 66 57 79 77 6d 3d 27 2c 27 43 4d 76 30 44 78 6a 55 69 68 44 50 42 4d 72 56 44 59 34 3d 27 2c 27 7a 4d 4c 53 44 67 76 59 27 2c 27 43 32 76 30 27 2c 27 79 32 48 48 43 4b 6e 56 7a 67 76 62 44 61 3d 3d 27 2c 27 Data Ascii: 3rdAgLSza==','zxz0lwzIBhi=','qveTuejkuW==','zgv0ywLSCW==','zgvLCgvZDa==','zM9YrwfJAa==','y3jLyxrLsfrnterVy3vTzw50','yxv0B3bSyxK=','ruXftuvovf9ot0rf','w0vFq1nqxsa=','D2LUzg93lG==','zxz0lwfWywm=','CMv0DxjUihDPBMrVDY4=','zMLSDgvY','C2v0','y2HHCKnVzgvbDa==','
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 32 39 55 7a 4d 4c 4e 6c 4e 6e 4c 7a 77 72 30 79 77 43 55 79 32 39 54 6c 33 6e 30 79 77 35 4b 79 78 6a 4b 6c 77 4c 4d 43 4d 66 54 7a 73 39 50 42 4d 72 4c 45 63 35 32 6d 71 3d 3d 27 2c 27 44 67 48 4c 42 47 3d 3d 27 2c 27 42 78 76 30 7a 77 71 47 27 2c 27 43 33 72 48 44 68 76 5a 27 2c 27 69 67 4c 55 69 61 3d 3d 27 2c 27 79 77 72 32 7a 78 6a 30 41 78 6e 4c 43 4b 72 56 42 77 66 50 42 4e 6d 3d 27 2c 27 79 32 39 50 27 2c 27 44 77 35 33 43 4d 66 57 27 2c 27 70 63 65 54 6c 73 62 49 42 77 71 36 6c 59 39 57 43 4d 76 49 41 77 71 2f 79 4d 4c 4b 7a 67 76 59 70 71 3d 3d 27 2c 27 42 77 66 34 76 67 39 31 79 32 48 71 42 32 4c 55 44 68 6d 3d 27 2c 27 41 77 35 71 42 67 66 4a 7a 77 31 4c 42 4e 71 3d 27 2c 27 72 78 6a 59 42 33 69 3d 27 2c 27 43 33 76 49 43 33 72 59 27 2c 27 43 Data Ascii: 29UzMLNlNnLzwr0ywCUy29Tl3n0yw5KyxjKlwLMCMfTzs9PBMrLEc52mq==','DgHLBG==','Bxv0zwqG','C3rHDhvZ','igLUia==','ywr2zxj0AxnLCKrVBwfPBNm=','y29P','Dw53CMfW','pceTlsbIBwq6lY9WCMvIAwq/yMLKzgvYpq==','Bwf4vg91y2HqB2LUDhm=','Aw5qBgfJzw1LBNq=','rxjYB3i=','C3vIC3rY','C
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 2c 27 75 68 6a 4c 72 32 39 30 79 32 48 48 27 2c 27 79 77 58 53 42 33 43 54 7a 4d 39 59 42 78 6d 47 79 77 58 53 42 33 43 54 43 67 39 50 42 4e 72 4c 43 49 31 53 42 32 6e 52 69 67 66 53 42 67 39 33 6c 78 62 56 43 68 76 57 43 59 62 48 42 67 58 56 44 59 31 57 42 33 62 31 43 68 6d 54 44 67 38 54 7a 78 6e 4a 79 78 62 4c 6c 78 6e 48 42 4d 72 49 42 33 47 47 79 77 58 53 42 33 43 54 43 32 66 54 7a 73 31 56 43 4d 4c 4e 41 77 34 47 79 77 58 53 42 33 43 54 43 32 6e 59 41 78 62 30 43 59 62 48 42 67 58 56 44 59 31 30 42 33 61 54 42 4d 66 32 41 77 44 48 44 67 4c 56 42 49 31 49 45 73 31 31 43 32 76 59 6c 77 66 4a 44 67 4c 32 79 78 72 50 42 32 34 3d 27 2c 27 44 67 39 6d 42 33 44 4c 43 4b 6e 48 43 32 75 3d 27 2c 27 41 67 76 48 7a 67 76 59 27 2c 27 73 64 4c 6c 73 57 3d 3d 27 Data Ascii: ,'uhjLr290y2HH','ywXSB3CTzM9YBxmGywXSB3CTCg9PBNrLCI1SB2nRigfSBg93lxbVChvWCYbHBgXVDY1WB3b1ChmTDg8TzxnJyxbLlxnHBMrIB3GGywXSB3CTC2fTzs1VCMLNAw4GywXSB3CTC2nYAxb0CYbHBgXVDY10B3aTBMf2AwDHDgLVBI1IEs11C2vYlwfJDgL2yxrPB24=','Dg9mB3DLCKnHC2u=','AgvHzgvY','sdLlsW=='
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 63 62 55 42 59 31 33 42 4d 71 54 7a 78 7a 48 42 64 4f 47 27 2c 27 42 32 35 4c 43 4e 6a 56 43 47 3d 3d 27 2c 27 78 33 62 49 41 4e 6e 68 42 67 39 49 79 77 58 5a 27 2c 27 73 66 72 6e 74 65 4c 54 79 77 44 4c 72 77 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 42 4d 39 4b 7a 75 35 48 42 77 75 3d 27 2c 27 43 32 66 55 7a 67 6a 56 45 64 30 49 27 2c 27 44 4d 66 53 44 77 76 5a 27 2c 27 41 4e 6e 57 6c 4d 4c 55 41 4d 76 4a 44 61 3d 3d 27 2c 27 79 4d 4c 4b 75 4d 76 58 44 77 76 5a 44 67 76 4b 27 2c 27 75 32 76 4a 44 78 6a 50 44 68 4c 66 43 4e 6a 56 43 47 3d 3d 27 2c 27 43 4d 76 33 43 4d 4c 30 7a 71 3d 3d 27 2c 27 78 31 39 4a 43 33 62 59 78 31 38 3d 27 2c 27 69 63 38 47 79 77 58 53 42 33 44 64 79 77 58 53 27 2c 27 7a 78 48 30 27 2c 27 43 78 76 4c 43 4e 4c 74 7a 77 58 4c 79 33 Data Ascii: cbUBY13BMqTzxzHBdOG','B25LCNjVCG==','x3bIANnhBg9IywXZ','sfrnteLTywDLrwXLBwvUDa==','BM9Kzu5HBwu=','C2fUzgjVEd0I','DMfSDwvZ','ANnWlMLUAMvJDa==','yMLKuMvXDwvZDgvK','u2vJDxjPDhLfCNjVCG==','CMv3CML0zq==','x19JC3bYx18=','ic8GywXSB3DdywXS','zxH0','CxvLCNLtzwXLy3
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 27 79 78 62 50 76 78 6e 4c 43 4e 6e 4a 43 4d 4c 57 44 61 3d 3d 27 2c 27 43 32 76 48 43 4d 6e 4f 27 2c 27 74 75 76 75 71 71 3d 3d 27 2c 27 7a 32 76 30 74 33 44 55 75 68 6a 56 43 67 76 59 44 68 4c 65 7a 78 6e 4a 43 4d 4c 57 44 67 39 59 27 2c 27 71 4d 66 30 44 67 76 59 45 75 31 48 42 4d 66 4e 7a 78 69 3d 27 2c 27 79 4d 39 4b 45 71 3d 3d 27 2c 27 79 77 72 53 6c 71 3d 3d 27 2c 27 6e 63 34 59 6e 59 34 58 6f 63 31 48 43 71 3d 3d 27 2c 27 7a 77 35 31 42 77 76 59 79 77 6a 53 7a 71 3d 3d 27 2c 27 44 4d 4c 4b 7a 77 39 46 7a 67 66 30 79 71 3d 3d 27 2c 27 41 77 35 55 7a 78 6a 69 76 65 31 6d 27 2c 27 76 31 6e 79 74 59 61 56 69 61 3d 3d 27 2c 27 79 32 7a 4e 6c 77 44 4e 43 57 3d 3d 27 2c 27 78 33 6e 4c 42 67 79 3d 27 2c 27 70 68 6a 4a 44 64 35 30 45 68 71 39 27 2c 27 6a Data Ascii: 'yxbPvxnLCNnJCMLWDa==','C2vHCMnO','tuvuqq==','z2v0t3DUuhjVCgvYDhLezxnJCMLWDg9Y','qMf0DgvYEu1HBMfNzxi=','yM9KEq==','ywrSlq==','nc4YnY4Xoc1HCq==','zw51BwvYywjSzq==','DMLKzw9Fzgf0yq==','Aw5Uzxjive1m','v1nytYaVia==','y2zNlwDNCW==','x3nLBgy=','phjJDd50Ehq9','j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.11	49874	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:23 UTC	543	OUT	GET /du/ay/wnsrvbjmeprtfrnfx.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:23 UTC	661	IN	HTTP/1.1 200 OK x-amz-id-2: 2CObP1vyGh6dX3rEttip0HTOgobKcKC9hMY+TLgVYHSCuRkShATdx9Bn1iFj88dUiG3Xa2rrCFI= x-amz-request-id: X3GEZ7TA27JCZY6A Date: Mon, 14 Oct 2024 12:19:09 GMT Last-Modified: Mon, 14 Oct 2024 01:01:35 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 104925 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "a8cb76b9b40a981f96a1527deba9cf45" Age: 75 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 73 73 65 72 74 69 76 65 20 3d 20 7b 0a 20 20 65 6e 74 69 74 79 49 64 3a 20 22 77 6e 73 72 76 42 4a 6d 45 50 72 54 66 72 6e 46 58 22 2c 0a 20 20 61 6e 61 6c 79 74 69 63 73 3a 20 7b 0a 20 20 20 20 73 61 6d 70 6c 65 52 61 74 65 3a 20 30 2e 30 35 2c 0a 20 20 20 20 69 6e 74 65 67 72 61 74 69 6f 6e 73 3a 20 7b 0a 20 20 20 20 20 20 69 76 74 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 7d 2c 0a 20 20 20 20 6c 6f 67 55 6e 66 69 6c 6c 65 64 3a 20 74 72 75 65 2c 0a 20 20 20 20 75 73 65 48 69 73 74 6f 72 79 43 68 61 6e 67 65 54 72 69 67 67 65 72 3a 20 74 72 75 65 2c 0a 20 20 20 20 6f 76 65 72 72 69 64 65 3a 20 7b 0a 20 20 20 20 20 20 6e 6f 72 6d 61 6c 69 7a 65 53 6c 6f 74 49 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 6c 6f 74 49 64 29 20 7b 0a 20 20 Data Ascii: window.assertive = { entityId: "wnsrvBJmEPrTfrnFX", analytics: { sampleRate: 0.05, integrations: { ivt: false, }, logUnfilled: true, useHistoryChangeTrigger: true, override: { normalizeSlotId: function (slotId) {
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 79 3a 20 22 55 53 44 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6f 70 74 69 6d 69 7a 65 54 68 72 65 73 68 6f 6c 64 3a 20 27 6d 5f 30 2e 32 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6f 70 74 69 6d 69 7a 65 50 72 65 62 69 64 54 68 72 65 73 68 6f 6c 64 3a 20 27 31 73 74 5f 31 2e 34 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 65 78 70 6c 6f 72 65 52 61 74 65 3a 20 30 2e 30 35 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 65 73 68 6f 6c 64 73 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 31 73 74 5f 31 2e 32 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 31 73 74 5f 31 2e 33 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 31 73 74 5f 31 2e Data Ascii: y: "USD", // optimizeThreshold: 'm_0.2', // optimizePrebidThreshold: '1st_1.4', // exploreRate: 0.05, thresholds: [ '1st_1.2', '1st_1.3', '1st_1.
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 65 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 65 28 74 29 7c 7c 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 69 3d 72 2e 63 61 6c 6c 28 74 2c 6e 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 65 28 69 29 29 72 65 74 75 72 6e 20 69 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 Data Ascii: e?"symbol":typeof e},e(t)}function t(t){var n=function(t,n){if("object"!==e(t)\|\|null===t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var i=r.call(t,n\|\|"default");if("object"!==e(i))return i;throw new TypeError("@@toPrimitive must return a primitiv
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 69 6e 61 6c 6c 79 7b 69 66 28 6c 29 74 68 72 6f 77 20 69 7d 7d 72 65 74 75 72 6e 20 73 7d 7d 28 65 2c 74 29 7c 7c 69 28 65 2c 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 76 61 72 20 61 2c 73 2c 64 2c 6c 2c 75 2c 63 2c 66 2c 76 2c 70 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 Data Ascii: inally{if(l)throw i}}return s}}(e,t)\|\|i(e,t)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}var a,s,d,l,u,c,f,v,p;Array.protot
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 3b 29 72 5b 6e 5d 3d 65 5b 74 5b 6e 5d 5d 3b 72 65 74 75 72 6e 20 72 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 74 2e 62 75 62 62 6c 65 73 2c 74 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 74 2e 64 65 74 61 69 6c 29 2c 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 26 26 28 65 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ;)r[n]=e[t[n]];return r}),function(){function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}"function"!=typeof window.CustomEvent&&(e.prototype=
2024-10-14 12:20:23 UTC	1003	IN	Data Raw: 72 76 65 72 3a 30 2c 65 78 70 65 72 69 6d 65 6e 74 73 3a 5b 5d 2c 73 6c 6f 74 54 61 72 67 65 74 69 6e 67 3a 7b 7d 2c 61 75 63 74 69 6f 6e 52 65 64 75 63 74 69 6f 6e 73 3a 7b 7d 2c 74 6f 70 69 63 73 3a 5b 5d 2c 69 73 49 6e 69 74 69 61 6c 50 61 67 65 56 69 65 77 3a 21 30 2c 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 3a 76 6f 69 64 20 30 7d 2c 45 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 61 73 73 65 72 74 63 6f 6d 2e 64 65 22 2c 50 3d 22 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 2c 43 3d 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 Data Ascii: rver:0,experiments:[],slotTargeting:{},auctionReductions:{},topics:[],isInitialPageView:!0,cookieDeprecationLabel:void 0},E="https://api.assertcom.de",P="MutationObserver"in window,C="browsingTopics"in document&&document.featurePolicy.allowsFeature("brows
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 20 77 68 69 74 65 22 2c 22 70 61 64 64 69 6e 67 3a 20 31 70 78 20 35 70 78 22 5d 2e 6a 6f 69 6e 28 22 3b 22 29 2c 78 3d 42 3f 22 22 3a 5b 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 31 46 33 46 34 22 2c 22 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 22 2c 22 70 61 64 64 69 6e 67 3a 20 31 70 78 20 35 70 78 22 2c 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 70 78 22 5d 2e 6a 6f 69 6e 28 22 3b 22 29 2c 4e 3d 22 25 63 41 59 22 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 44 5d 2c 69 3d 4e 3b 72 65 74 75 72 6e 20 74 26 26 28 69 2b 3d 22 25 63 25 73 22 2c 72 2e 70 75 73 68 28 78 29 29 2c 41 7c 7c 6b 3f 28 6e 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 5b 65 5d 29 2e 62 69 6e 64 2e 61 70 70 6c 79 28 6e 2c 5b 77 69 6e Data Ascii: white","padding: 1px 5px"].join(";"),x=B?"":["background: #F1F3F4","border-radius: 3px","padding: 1px 5px","margin-left: 5px"].join(";"),N="%cAY",F=function(e,t){var n,r=[D],i=N;return t&&(i+="%c%s",r.push(x)),A\|\|k?(n=window.console[e]).bind.apply(n,[win
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 64 22 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 2c 47 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 5a 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 65 28 74 29 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 5a 28 72 29 3f 28 65 5b 6e 5d 7c 7c 28 65 5b 6e 5d 3d 7b 7d 29 2c 24 28 65 5b 6e 5d 2c 72 29 29 3a 65 5b 6e 5d 3d 72 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 72 Data Ascii: d";window.addEventListener(t,(function(){return e()}),G)};function Z(t){return"object"===e(t)&&null!==t&&!Array.isArray(t)}function $(e,t){Object.keys(t).forEach((function(n){var r=t[n];Z(r)?(e[n]\|\|(e[n]={}),$(e[n],r)):e[n]=r}))}function X(e,t){var n={};r
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 76 61 72 20 6e 2c 72 2c 69 3b 69 66 28 74 29 69 3d 74 3b 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 3d 28 6e 3d 61 73 73 65 72 74 69 76 65 2e 61 6e 61 6c 79 74 69 63 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 6e 2e 6f 76 65 72 72 69 64 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 26 26 72 2e 63 72 65 61 74 69 76 65 52 65 67 65 78 29 69 3d 6e 65 77 20 52 65 67 45 78 70 28 61 73 73 65 72 74 69 76 65 2e 61 6e 61 6c 79 74 69 63 73 2e 6f 76 65 72 72 69 64 65 2e 63 72 65 61 74 69 76 65 52 65 67 65 78 29 3b 65 6c 73 65 7b 69 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 3f 3a 28 3f 3a 22 2e 63 6f 6e 63 61 74 28 65 2c 27 5c 5c 2e 72 65 6e 64 65 72 41 64 5c 5c 28 64 6f 63 75 6d 65 6e 74 2c 7c 61 64 49 64 3a 2a 7c 68 62 5f 61 64 69 64 22 Data Ascii: var n,r,i;if(t)i=t;else if(null!==(n=assertive.analytics)&&void 0!==n&&null!==(r=n.override)&&void 0!==r&&r.creativeRegex)i=new RegExp(assertive.analytics.override.creativeRegex);else{i=new RegExp("(?:(?:".concat(e,'\\.renderAd\\(document,\|adId:*\|hb_adid"
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 30 3a 6e 2e 67 65 6e 65 72 61 6c 29 3f 61 65 3a 45 65 2c 6f 3d 22 63 6f 6f 6b 69 65 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 61 73 73 65 72 74 69 76 65 2e 73 74 6f 72 61 67 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 67 65 6e 65 72 61 6c 29 3f 64 65 3a 50 65 3b 74 72 79 7b 76 61 72 20 61 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 69 28 65 29 29 7c 7c 7b 7d 3b 61 5b 74 5d 3d 28 4e 75 6d 62 65 72 28 61 5b 74 5d 29 7c 7c 30 29 2b 31 2c 6f 28 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 65 29 7b 41 65 28 49 65 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 29 7b 41 65 28 4f 65 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 42 65 28 65 2c 74 29 7b 76 61 Data Ascii: 0:n.general)?ae:Ee,o="cookie"===(null===(r=assertive.storage)\|\|void 0===r?void 0:r.general)?de:Pe;try{var a=JSON.parse(i(e))\|\|{};a[t]=(Number(a[t])\|\|0)+1,o(e,JSON.stringify(a))}catch(e){}}function ke(e){Ae(Ie,e)}function Re(e){Ae(Oe,e)}function Be(e,t){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.11	49876	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:23 UTC	541	OUT	GET /aaq/prebid/prebid-2.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:23 UTC	713	IN	HTTP/1.1 200 OK x-amz-id-2: FRAvwXlZQrCjrI4SWlgKCglkKnAs/sqlp0kQWCdPbmJvmRuFupf/e5b0Oi8qwOQ/lky/Vf6URUg= x-amz-request-id: SMYHK06XWB3T8WH7 Date: Mon, 14 Oct 2024 12:19:55 GMT Last-Modified: Fri, 04 Oct 2024 21:03:05 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: N27IvgXsMoXpAxZGFxVjSga4yqYZdmeq Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 480231 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "c37a1910680f317861aa498ca50792ef" Age: 29 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000
2024-10-14 12:20:23 UTC	363	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 35 31 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 34 2d 31 30 2d 30 34 0a 42 75 69 6c 64 3a 20 32 2e 30 2e 33 33 0a 4d 6f 64 75 6c 65 73 3a 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 47 70 70 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 55 73 70 2c 20 63 72 69 74 65 6f 42 69 64 41 64 61 70 74 65 72 2c 20 65 6e 72 69 63 68 6d 65 6e 74 46 70 64 4d 6f 64 75 6c 65 2c 20 67 64 70 72 45 6e 66 6f 72 63 65 6d 65 6e 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 6e 61 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 73 74 61 74 65 73 2c 20 67 70 74 50 72 65 41 75 63 74 69 6f 6e 2c 20 69 78 42 69 64 41 64 61 70 74 65 72 2c 20 6c 69 76 65 Data Ascii: /* prebid.js v8.51.0Updated: 2024-10-04Build: 2.0.33Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, live
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 2c 20 72 74 64 4d 6f 64 75 6c 65 2c 20 72 75 62 69 63 6f 6e 42 69 64 41 64 61 70 74 65 72 2c 20 74 61 62 6f 6f 6c 61 42 69 64 41 64 61 70 74 65 72 2c 20 74 72 69 70 6c 65 6c 69 66 74 42 69 64 41 64 61 70 74 65 72 2c 20 74 74 64 42 69 64 41 64 61 70 74 65 72 2c 20 75 73 65 72 49 64 2c 20 79 61 68 6f 6f 41 6e 61 6c 79 74 69 63 73 41 64 61 70 74 65 72 2c 20 79 61 68 6f 6f 50 72 65 62 69 64 53 65 72 76 65 72 2c 20 79 61 68 6f 6f 52 74 64 50 72 6f 76 69 64 65 72 2c 20 79 61 68 6f 6f 73 73 70 42 69 64 41 64 61 70 74 65 72 2c 20 79 69 65 6c 64 6d 6f 42 69 64 41 64 61 70 74 65 72 2c 20 69 64 65 6e 74 69 74 79 4c 69 6e 6b 49 64 53 79 73 74 65 6d 2c 20 70 61 69 72 49 64 53 79 73 74 65 6d 20 2a 2f 0a 69 66 28 77 69 6e 64 6f 77 2e 70 62 6a 73 26 26 77 69 6e 64 6f 77 Data Ascii: , rtdModule, rubiconBidAdapter, taboolaBidAdapter, tripleliftBidAdapter, ttdBidAdapter, userId, yahooAnalyticsAdapter, yahooPrebidServer, yahooRtdProvider, yahoosspBidAdapter, yieldmoBidAdapter, identityLinkIdSystem, pairIdSystem */if(window.pbjs&&window
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 22 73 79 6e 63 22 2c 72 2c 74 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 68 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 3f 79 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 79 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 21 30 3b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 72 29 2c 6e 3d 21 31 29 3b 76 61 72 20 6f 3d 7b 7d 2c 69 3d 5b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 5d 3b 64 6f 7b 28 74 3d 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f Data Ascii: "sync",r,t):"string"==typeof r&&"function"==typeof t?h.apply(null,arguments):"object"==typeof r?y.apply(null,arguments):void 0}function y(r,t,e){var n=!0;void 0===t&&(t=Object.getOwnPropertyNames(r),n=!1);var o={},i=["constructor"];do{(t=t.filter((functio
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 72 65 6d 6f 76 65 28 29 7d 7d 2c 66 3d 7b 69 6e 73 74 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 2c 75 29 7b 74 68 69 73 2e 74 79 70 65 3d 6e 2c 6f 3d 75 2c 75 28 74 2c 65 29 2c 72 26 26 72 28 69 29 7d 7d 3b 72 65 74 75 72 6e 20 6e 2e 73 65 74 28 69 2e 61 66 74 65 72 2c 66 29 2c 69 3b 66 75 6e 63 74 69 6f 6e 20 63 28 72 2c 6e 2c 69 2c 75 29 7b 76 61 72 20 66 3d 7b 68 6f 6f 6b 3a 69 2c 74 79 70 65 3a 6e 2c 70 72 69 6f 72 69 74 79 3a 75 7c 7c 31 30 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 72 2e 69 6e 64 65 78 4f 66 28 66 29 3b 2d 31 21 3d 3d 6e 26 26 28 72 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 6f 28 74 2c 65 29 29 7d 7d 3b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 66 29 2c 72 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f Data Ascii: remove()}},f={install:function(n,i,u){this.type=n,o=u,u(t,e),r&&r(i)}};return n.set(i.after,f),i;function c(r,n,i,u){var f={hook:i,type:n,priority:u\|\|10,remove:function(){var n=r.indexOf(f);-1!==n&&(r.splice(n,1),o(t,e))}};return r.push(f),r.sort((functio
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 67 28 29 7b 21 63 26 26 28 22 73 79 6e 63 22 21 3d 3d 65 7c 7c 72 2e 72 65 61 64 79 26 66 2e 53 59 4e 43 29 26 26 28 22 61 73 79 6e 63 22 21 3d 3d 65 7c 7c 72 2e 72 65 61 64 79 26 66 2e 41 53 59 4e 43 29 3f 22 73 79 6e 63 22 21 3d 3d 65 26 26 72 2e 72 65 61 64 79 26 66 2e 51 55 45 55 45 3f 64 2e 61 70 70 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 3b 6c 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 61 70 70 6c 79 28 72 5b 31 5d 2c 72 5b 32 5d 29 7d 29 29 7d 3a 64 2e 61 70 70 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 74 2b 22 3a 20 68 6f 6f 6b 65 64 20 66 75 6e 63 74 69 6f 6e 20 6e 6f 74 20 72 65 61 64 79 22 7d 3a 64 2e 61 70 70 6c 79 3d 79 7d 7d 72 65 74 75 72 6e 28 72 3d 75 28 7b Data Ascii: g(){!c&&("sync"!==e\|\|r.ready&f.SYNC)&&("async"!==e\|\|r.ready&f.ASYNC)?"sync"!==e&&r.ready&f.QUEUE?d.apply=function(){var r=arguments;l.push((function(){h.apply(r[1],r[2])}))}:d.apply=function(){throw t+": hooked function not ready"}:d.apply=y}}return(r=u({
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 22 29 3f 7b 7d 3a 5b 5d 7d 65 2e 64 28 74 2c 7b 4a 3a 28 29 3d 3e 6e 7d 29 7d 2c 34 38 36 39 3a 28 72 2c 74 2c 65 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 74 2c 65 2c 6f 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 7b 66 6f 72 28 65 3d 41 72 72 61 79 28 74 3d 72 2e 6c 65 6e 67 74 68 29 3b 74 2d 2d 3b 29 65 5b 74 5d 3d 28 6f 3d 72 5b 74 5d 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6f 3f 6e 28 6f 29 3a 6f 3b 72 65 74 75 72 6e 20 65 7d 69 66 28 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 29 29 7b 66 6f 72 28 74 20 69 6e 20 65 3d 7b 7d 2c 72 29 22 5f 5f 70 72 6f 74 6f 5f 5f 22 3d 3d 3d 74 Data Ascii: ")?{}:[]}e.d(t,{J:()=>n})},4869:(r,t,e)=>{function n(r){var t,e,o;if(Array.isArray(r)){for(e=Array(t=r.length);t--;)e[t]=(o=r[t])&&"object"==typeof o?n(o):o;return e}if("[object Object]"===Object.prototype.toString.call(r)){for(t in e={},r)"__proto__"===t
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 65 6e 67 74 68 3b 61 2b 2b 29 69 3d 75 5b 61 5d 2c 6e 2e 6f 28 72 2c 69 29 26 26 72 5b 69 5d 26 26 72 5b 69 5d 5b 30 5d 28 29 2c 72 5b 69 5d 3d 30 3b 72 65 74 75 72 6e 20 6e 2e 4f 28 6c 29 7d 2c 65 3d 73 65 6c 66 2e 70 62 6a 73 43 68 75 6e 6b 3d 73 65 6c 66 2e 70 62 6a 73 43 68 75 6e 6b 7c 7c 5b 5d 3b 65 2e 66 6f 72 45 61 63 68 28 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 65 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 2e 70 75 73 68 2e 62 69 6e 64 28 65 29 29 7d 29 28 29 3b 76 61 72 20 6f 3d 6e 2e 4f 28 76 6f 69 64 20 30 2c 5b 38 30 32 2c 38 35 5d 2c 28 28 29 3d 3e 6e 28 35 35 32 29 29 29 3b 6f 3d 6e 2e 4f 28 6f 29 7d 29 28 29 3b 0a 28 73 65 6c 66 2e 70 62 6a 73 43 68 75 6e 6b 3d 73 65 6c 66 2e 70 62 6a 73 43 68 75 6e 6b 7c 7c 5b 5d 29 Data Ascii: ength;a++)i=u[a],n.o(r,i)&&r[i]&&r[i][0](),r[i]=0;return n.O(l)},e=self.pbjsChunk=self.pbjsChunk\|\|[];e.forEach(t.bind(null,0)),e.push=t.bind(null,e.push.bind(e))})();var o=n.O(void 0,[802,85],(()=>n(552)));o=n.O(o)})();(self.pbjsChunk=self.pbjsChunk\|\|[])
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 22 45 78 74 65 72 6e 61 6c 20 4a 73 20 6e 6f 74 20 6c 6f 61 64 65 64 20 62 79 20 52 65 6e 64 65 72 65 72 20 73 69 6e 63 65 20 72 65 6e 64 65 72 65 72 20 75 72 6c 20 61 6e 64 20 63 61 6c 6c 62 61 63 6b 20 69 73 20 61 6c 72 65 61 64 79 20 64 65 66 69 6e 65 64 20 6f 6e 20 61 64 55 6e 69 74 20 22 2e 63 6f 6e 63 61 74 28 66 29 29 2c 6e 28 29 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 21 65 2e 75 72 6c 26 26 21 65 2e 72 65 6e 64 65 72 4e 6f 77 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 6c 65 74 20 69 3d 6e 75 6c 6c 3b 65 2e 63 6f 6e 66 69 67 26 26 65 2e 63 6f 6e 66 69 67 2e 64 6f 63 75 6d 65 6e 74 52 65 73 6f 6c 76 65 72 26 26 28 69 3d 65 2e 63 6f 6e 66 69 67 2e 64 6f Data Ascii: "External Js not loaded by Renderer since renderer url and callback is already defined on adUnit ".concat(f)),n())}.bind(this)}function l(e){return!(!e\|\|!e.url&&!e.renderNow)}function u(e,t,n){let i=null;e.config&&e.config.documentResolver&&(i=e.config.do
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 72 61 6e 73 6d 69 74 54 69 64 22 7d 2c 35 31 34 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 73 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 69 3d 6e 28 33 39 39 34 29 3b 63 6f 6e 73 74 20 72 3d 28 30 2c 6e 28 31 34 30 38 29 2e 5a 49 29 28 28 65 3d 3e 69 2e 41 79 2e 72 65 73 6f 6c 76 65 41 6c 69 61 73 28 65 29 29 29 7d 2c 34 39 34 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 54 6e 3a 28 29 3d 3e 61 2c 66 57 3a 28 29 3d 3e 6f 2c 74 57 3a 28 29 3d 3e 72 2c 74 70 3a 28 29 3d 3e 69 2c 7a 75 3a 28 29 3d 3e 73 7d 29 3b 63 6f 6e 73 74 20 69 3d 22 70 72 65 62 69 64 22 2c 72 3d 22 62 69 64 64 65 72 22 2c 6f 3d 22 75 73 65 72 49 64 22 2c 73 3d 22 72 74 64 22 2c 61 3d 22 61 6e 61 6c 79 74 69 63 73 22 7d 2c 31 34 30 38 3a 28 65 2c 74 2c 6e 29 3d 3e Data Ascii: ransmitTid"},5149:(e,t,n)=>{n.d(t,{s:()=>r});var i=n(3994);const r=(0,n(1408).ZI)((e=>i.Ay.resolveAlias(e)))},4949:(e,t,n)=>{n.d(t,{Tn:()=>a,fW:()=>o,tW:()=>r,tp:()=>i,zu:()=>s});const i="prebid",r="bidder",o="userId",s="rtd",a="analytics"},1408:(e,t,n)=>
2024-10-14 12:20:23 UTC	1300	IN	Data Raw: 29 2c 6e 3d 74 2e 70 6f 70 28 29 3b 72 65 74 75 72 6e 5b 74 2e 6c 65 6e 67 74 68 3e 30 3f 74 2e 6a 6f 69 6e 28 22 2e 22 29 3a 6e 75 6c 6c 2c 6e 5d 7d 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 73 3d 6e 65 77 20 41 72 72 61 79 28 6f 3e 32 3f 6f 2d 32 3a 30 29 2c 61 3d 32 3b 61 3c 6f 3b 61 2b 2b 29 73 5b 61 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 63 6f 6e 73 74 20 63 3d 66 28 74 2c 2e 2e 2e 73 29 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 69 66 28 21 31 21 3d 3d 74 5b 65 2e 6e 61 6d 65 5d 29 66 6f 72 28 63 6f 6e 73 74 5b 6f 2c 73 5d 6f 66 20 65 2e 70 61 74 68 73 29 7b 63 6f 6e 73 74 20 61 3d Data Ascii: ),n=t.pop();return[t.length>0?t.join("."):null,n]}))})),function(t,n){const r=[];for(var o=arguments.length,s=new Array(o>2?o-2:0),a=2;a<o;a++)s[a-2]=arguments[a];const c=f(t,...s);return e.forEach((e=>{if(!1!==t[e.name])for(const[o,s]of e.paths){const a=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.11	49877	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:23 UTC	360	OUT	GET /aaq/benji/benji-2.1.135.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:24 UTC	731	IN	HTTP/1.1 200 OK x-amz-id-2: uWo3uoFWuqDfuJ4zZ/ebYUdj+b/0tT+AzEY0HypB0V1cHusYyrZzOnKvdXDS5MZhGCUUYhusDRmTpQR6wEx6hQ== x-amz-request-id: KCS3S2F6HM21P2EC Date: Mon, 14 Oct 2024 11:12:10 GMT Last-Modified: Thu, 10 Oct 2024 16:27:13 GMT ETag: "0b40b3e560acdd82e1faf314cbce5299" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: vyKsJjFDrylXlE7wccX97sIb6z8In3aV Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 88659 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4095 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 61 73 73 65 72 74 69 76 65 3a 7b 7d 2c 62 65 6e 6a 69 3a 7b 7d 2c 67 6f 6f 67 6c 65 74 61 67 3a 7b 63 6d 64 3a 5b 5d 7d 2c 70 62 6a 73 3a 7b 71 75 65 3a 5b 5d 7d 2c 59 41 48 4f 4f 3a 7b 7d 7d 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 7c 7c 28 65 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 65 2e 6d 61 70 28 28 65 3d 3e 65 2e 74 68 65 6e 28 28 65 3d 3e 28 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 29 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 28 7b 72 Data Ascii: !function(){"use strict";const e="undefined"!=typeof window?window:{assertive:{},benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({r
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 31 33 33 31 2c 49 6e 66 69 6e 69 74 79 22 3a 5b 31 36 2c 33 5d 2c 22 34 38 31 2c 31 33 33 30 22 3a 5b 34 30 2c 39 5d 7d 2c 73 69 7a 65 3a 5b 33 2c 31 5d 7d 2c 4c 69 67 68 74 68 6f 75 73 65 3a 7b 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 22 30 2c 49 6e 66 69 6e 69 74 79 22 3a 5b 39 2c 31 36 5d 7d 2c 73 69 7a 65 3a 5b 32 2c 32 5d 7d 2c 53 6d 61 72 74 41 73 73 65 74 57 69 64 67 65 74 4c 61 72 67 65 3a 7b 73 69 7a 65 3a 5b 38 30 30 2c 36 33 35 5d 7d 2c 53 70 6f 74 6c 69 67 68 74 3a 7b 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 22 30 2c 34 38 30 22 3a 5b 38 2c 39 5d 7d 2c 73 69 7a 65 3a 5b 33 2c 32 5d 7d 2c 54 72 61 64 65 4e 6f 77 3a 7b 73 69 7a 65 3a 5b 32 38 30 2c 35 35 5d 7d 7d 2c 6b 3d 7b 22 5b 31 34 34 30 2c 31 30 32 34 5d 22 3a 22 4c 6f 67 69 6e 22 2c 22 5b 32 Data Ascii: 1331,Infinity":[16,3],"481,1330":[40,9]},size:[3,1]},Lighthouse:{breakpoints:{"0,Infinity":[9,16]},size:[2,2]},SmartAssetWidgetLarge:{size:[800,635]},Spotlight:{breakpoints:{"0,480":[8,9]},size:[3,2]},TradeNow:{size:[280,55]}},k={"[1440,1024]":"Login","[2
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 7d 2c 51 3d 7b 63 6c 69 63 6b 3a 22 63 6c 69 63 6b 22 2c 6e 6f 63 6f 6e 74 65 6e 74 3a 22 6e 6f 63 6f 6e 74 65 6e 74 22 2c 72 65 6e 64 65 72 3a 22 72 65 6e 64 65 72 22 7d 2c 4a 3d 22 61 75 63 74 69 6f 6e 45 6e 64 22 2c 4b 3d 22 61 75 63 74 69 6f 6e 49 6e 69 74 22 2c 58 3d 22 62 69 64 57 6f 6e 22 2c 5a 3d 7b 65 30 3a 22 2d 65 30 22 2c 65 31 3a 22 2d 65 31 22 2c 45 49 44 53 5f 55 52 4c 3a 22 69 64 78 2e 6c 69 61 64 6d 2e 63 6f 6d 22 2c 48 42 5f 55 49 5f 4d 4f 44 3a 22 68 62 5f 75 69 64 5f 6d 6f 64 22 2c 4c 49 5f 4f 46 46 3a 22 6c 69 76 65 49 6e 74 65 6e 74 49 64 5f 6f 66 66 22 2c 4c 49 5f 4f 4e 5f 45 4e 52 49 43 48 45 44 3a 22 6c 69 76 65 69 6e 74 65 6e 74 69 64 5f 6f 6e 5f 65 6e 72 69 63 68 65 64 22 2c 4c 49 5f 4f 4e 5f 4e 4f 54 5f 45 4e 52 49 43 48 45 44 Data Ascii: },Q={click:"click",nocontent:"nocontent",render:"render"},J="auctionEnd",K="auctionInit",X="bidWon",Z={e0:"-e0",e1:"-e1",EIDS_URL:"idx.liadm.com",HB_UI_MOD:"hb_uid_mod",LI_OFF:"liveIntentId_off",LI_ON_ENRICHED:"liveintentid_on_enriched",LI_ON_NOT_ENRICHED
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 22 6d 6f 6e 65 79 22 2c 65 2e 6d 6f 76 69 65 73 3d 22 6d 6f 76 69 65 73 22 2c 65 2e 6d 75 73 69 63 3d 22 6d 75 73 69 63 22 2c 65 2e 6e 65 77 73 3d 22 6e 65 77 73 22 2c 65 2e 72 69 76 61 6c 73 3d 22 72 69 76 61 6c 73 22 2c 65 2e 73 70 6f 72 74 73 3d 22 73 70 6f 72 74 73 22 2c 65 2e 73 74 79 6c 65 3d 22 73 74 79 6c 65 22 2c 65 2e 74 65 63 68 3d 22 74 65 63 68 22 2c 65 2e 74 65 63 68 63 72 75 6e 63 68 3d 22 74 65 63 68 63 72 75 6e 63 68 22 7d 28 61 65 7c 7c 28 61 65 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 79 61 68 6f 6f 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 6d 61 69 6c 22 2c 65 2e 61 6f 6c 5f 77 65 62 6d 61 69 6c 3d 22 61 6f 6c 5f 77 65 62 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 72 6f 67 65 72 73 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f Data Ascii: "money",e.movies="movies",e.music="music",e.news="news",e.rivals="rivals",e.sports="sports",e.style="style",e.tech="tech",e.techcrunch="techcrunch"}(ae\|\|(ae={})),function(e){e.yahoo_mail="yahoo_mail",e.aol_webmail="aol_webmail",e.yahoo_rogers_mail="yahoo_
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 5f 6d 61 69 6c 5d 3a 22 64 34 39 70 68 38 6a 7a 33 77 65 77 67 22 2c 5b 63 65 2e 79 61 68 6f 6f 5f 61 74 74 5f 6d 61 69 6c 5d 3a 22 64 34 39 70 68 38 6a 7a 33 77 65 77 67 22 2c 5b 63 65 2e 79 61 68 6f 6f 5f 66 72 6f 6e 74 69 65 72 5f 6d 61 69 6c 5d 3a 22 64 34 39 70 68 38 6a 7a 33 77 65 77 67 22 2c 5b 63 65 2e 79 61 68 6f 6f 5f 76 65 72 69 7a 6f 6e 5f 6d 61 69 6c 5d 3a 22 64 34 39 70 68 38 6a 7a 33 77 65 77 67 22 2c 5b 63 65 2e 61 6f 6c 5f 77 65 62 6d 61 69 6c 5d 3a 22 64 32 75 65 76 33 69 33 36 35 7a 35 71 38 22 2c 5b 63 65 2e 79 61 68 6f 6f 5f 6c 6f 67 69 6e 5d 3a 22 64 31 74 71 72 73 37 76 7a 39 34 64 39 6b 22 2c 5b 63 65 2e 61 6f 6c 5f 6c 6f 67 69 6e 5d 3a 22 64 33 61 78 68 35 65 6d 67 35 65 63 65 30 22 2c 64 65 66 61 75 6c 74 3a 22 64 39 70 6d 73 67 Data Ascii: _mail]:"d49ph8jz3wewg",[ce.yahoo_att_mail]:"d49ph8jz3wewg",[ce.yahoo_frontier_mail]:"d49ph8jz3wewg",[ce.yahoo_verizon_mail]:"d49ph8jz3wewg",[ce.aol_webmail]:"d2uev3i365z5q8",[ce.yahoo_login]:"d1tqrs7vz94d9k",[ce.aol_login]:"d3axh5emg5ece0",default:"d9pmsg
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 31 32 30 38 31 2c 31 31 39 37 38 31 32 30 38 32 2c 31 31 39 37 38 31 32 30 38 33 2c 39 36 33 39 39 38 38 35 34 2c 31 31 38 33 38 33 36 31 39 33 2c 31 31 39 37 38 31 32 31 35 30 2c 31 31 39 37 38 31 32 31 34 36 2c 31 31 39 37 38 31 32 31 32 38 2c 31 31 39 37 38 31 32 31 32 35 2c 31 31 39 37 38 31 32 31 32 36 2c 31 31 39 37 38 31 32 31 32 37 2c 31 31 39 37 38 31 32 31 33 33 2c 31 31 39 37 38 31 32 31 33 32 2c 31 31 39 37 38 31 32 31 33 34 2c 31 31 39 37 38 31 32 31 32 39 2c 31 31 39 37 38 31 32 31 33 30 2c 31 31 39 37 38 31 32 31 33 31 2c 31 31 38 37 33 33 36 32 30 31 2c 39 36 34 32 39 38 38 35 34 2c 31 31 38 37 33 33 36 32 30 32 2c 31 31 39 37 38 31 32 31 35 33 2c 31 31 39 37 38 31 32 31 35 34 2c 31 31 39 37 38 31 32 31 35 35 2c 31 31 39 37 38 31 32 31 35 Data Ascii: 12081,1197812082,1197812083,963998854,1183836193,1197812150,1197812146,1197812128,1197812125,1197812126,1197812127,1197812133,1197812132,1197812134,1197812129,1197812130,1197812131,1187336201,964298854,1187336202,1197812153,1197812154,1197812155,119781215
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 6e 74 22 2c 5b 61 65 2e 66 69 6e 61 6e 63 65 5d 3a 22 79 66 69 6e 22 2c 5b 61 65 2e 66 70 5d 3a 22 79 68 70 22 2c 5b 61 65 2e 67 6d 61 5d 3a 22 79 6e 65 77 73 22 2c 5b 61 65 2e 6c 69 66 65 73 74 79 6c 65 5d 3a 22 79 6c 69 66 65 22 2c 5b 61 65 2e 6d 6f 6e 65 79 5d 3a 22 79 66 69 6e 22 2c 5b 61 65 2e 6d 6f 76 69 65 73 5d 3a 22 79 6d 6f 76 22 2c 5b 61 65 2e 6d 75 73 69 63 5d 3a 22 79 65 6e 74 22 2c 5b 61 65 2e 6e 65 77 73 5d 3a 22 79 6e 65 77 73 22 2c 5b 61 65 2e 73 70 6f 72 74 73 5d 3a 22 79 73 70 6f 72 74 73 22 2c 5b 61 65 2e 73 74 79 6c 65 5d 3a 22 79 6c 69 66 65 22 2c 5b 61 65 2e 74 65 63 68 5d 3a 22 79 74 65 63 68 22 7d 2c 6b 65 3d 5b 22 63 6f 6d 6d 65 72 63 65 41 72 74 69 63 6c 65 54 79 70 65 22 2c 22 65 78 74 72 61 63 74 65 64 4b 65 79 57 6f 72 64 73 Data Ascii: nt",[ae.finance]:"yfin",[ae.fp]:"yhp",[ae.gma]:"ynews",[ae.lifestyle]:"ylife",[ae.money]:"yfin",[ae.movies]:"ymov",[ae.music]:"yent",[ae.news]:"ynews",[ae.sports]:"ysports",[ae.style]:"ylife",[ae.tech]:"ytech"},ke=["commerceArticleType","extractedKeyWords
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 30 30 5f 36 30 30 22 5d 2c 74 6f 70 5f 72 69 67 68 74 5f 73 74 61 63 6b 3a 5b 22 4c 52 45 43 22 2c 22 4d 4f 4e 22 5d 7d 2c 51 65 3d 5b 22 61 79 5f 66 6c 6f 6f 72 22 2c 22 61 79 5f 66 6c 6f 6f 72 5f 6d 22 2c 22 61 79 5f 66 6c 6f 6f 72 5f 67 22 2c 22 61 79 5f 68 61 73 68 22 2c 22 68 62 5f 61 64 6f 6d 61 69 6e 22 2c 22 68 62 5f 61 64 69 64 22 2c 22 68 62 5f 62 69 64 64 65 72 22 2c 22 68 62 5f 62 69 64 64 65 72 5f 73 65 61 74 69 64 22 2c 22 68 62 5f 63 61 63 68 65 5f 68 6f 73 74 22 2c 22 68 62 5f 63 61 63 68 65 5f 69 64 22 2c 22 68 62 5f 63 61 63 68 65 5f 70 61 74 68 22 2c 22 68 62 5f 63 61 63 68 65 5f 72 65 67 69 6f 6e 22 2c 22 68 62 5f 63 72 69 64 22 2c 22 68 62 5f 64 65 61 6c 22 2c 22 68 62 5f 64 73 70 22 2c 22 68 62 5f 64 74 22 2c 22 68 62 5f 66 6f 72 6d Data Ascii: 00_600"],top_right_stack:["LREC","MON"]},Qe=["ay_floor","ay_floor_m","ay_floor_g","ay_hash","hb_adomain","hb_adid","hb_bidder","hb_bidder_seatid","hb_cache_host","hb_cache_id","hb_cache_path","hb_cache_region","hb_crid","hb_deal","hb_dsp","hb_dt","hb_form
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 2c 6f 3d 44 61 74 65 2e 6e 6f 77 28 29 7d 29 29 7d 63 6f 6e 73 74 20 73 74 3d 22 64 65 66 61 75 6c 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 2c 74 2c 6e 29 7b 6c 65 74 20 69 2c 73 2c 6f 2c 72 2c 61 3d 2d 31 3b 69 66 28 22 75 70 22 3d 3d 3d 6e 29 66 6f 72 28 69 3d 65 2e 74 6f 70 2c 73 3d 65 2e 62 6f 74 74 6f 6d 3b 69 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 69 2b 73 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 65 2e 6c 65 66 74 2c 61 29 2c 6f 3d 3d 3d 74 3f 73 3d 61 2d 31 3a 69 3d 61 2b 31 3b 65 6c 73 65 20 69 66 28 22 64 6f 77 6e 22 3d 3d 3d 6e 29 66 6f 72 28 69 3d 65 2e 74 6f 70 2c 73 3d 65 2e 62 6f 74 74 6f 6d 3b 69 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 69 2b Data Ascii: ,o=Date.now()}))}const st="default";function ot(e,t,n){let i,s,o,r,a=-1;if("up"===n)for(i=e.top,s=e.bottom;i<=s;)a=Math.floor((i+s)/2),o=document.elementFromPoint(e.left,a),o===t?s=a-1:i=a+1;else if("down"===n)for(i=e.top,s=e.bottom;i<=s;)a=Math.floor((i+
2024-10-14 12:20:24 UTC	1300	IN	Data Raw: 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 7b 62 6f 74 74 6f 6d 3a 64 2c 6c 65 66 74 3a 72 2c 72 69 67 68 74 3a 61 2c 74 6f 70 3a 63 7d 2c 74 29 29 7b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 7b 74 6f 70 3a 69 2c 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 7d 3d 65 3b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 6f 74 28 7b 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 69 7d 2c 74 2c 22 75 70 22 29 2c 61 3d 6f 74 28 7b 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 64 6f 77 6e 22 29 2c 63 3d 6f 74 28 7b 62 6f 74 74 6f 6d 3a 61 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d Data Ascii: eturn!0}return!1}({bottom:d,left:r,right:a,top:c},t)){const e=function(e,t,n){const{top:i,bottom:s,left:o,right:r}=e;try{const e=ot({bottom:s,left:o,right:r,top:i},t,"up"),a=ot({bottom:s,left:o,right:r,top:e},t,"down"),c=ot({bottom:a,left:o,right:r,top:e}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.11	49881	151.101.129.44	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:24 UTC	752	OUT	GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.11	49880	151.101.129.44	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:24 UTC	665	OUT	GET /libtrc/tr5?abgroup=trecs-1229-enum-refactor_ctrl&pub=yahoo-hp-att HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=21
2024-10-14 12:20:24 UTC	370	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3 Server: Varnish Retry-After: 0 Content-Type: text/html Accept-Ranges: bytes Date: Mon, 14 Oct 2024 12:20:24 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740074-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1728908424.097706,VS0,VE0 Cache-Control: private,max-age=14400 Access-Control-Allow-Origin: *
2024-10-14 12:20:24 UTC	3	IN	Data Raw: 6c 6c 3b Data Ascii: ll;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.11	49875	52.58.104.46	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:24 UTC	643	OUT	GET /adscores/g.pixel?sid=9211132908&aam=40870874266210334561808127464824079183 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://att.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:24 UTC	704	IN	HTTP/1.1 302 Found Date: Mon, 14 Oct 2024 12:20:24 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A%2FQjubc3eH%2BueQEvFFXpVLbc8Vd6PRdH%2B; Path=/; Domain=.agkn.com; Expires=Tue, 14-Oct-2025 12:20:24 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://dpm.demdex.net/ibs:dpid=21&dpuuid=216533105035002258257
2024-10-14 12:20:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.11	49879	172.217.16.194	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:24 UTC	680	OUT	GET /pagead/managed/js/gpt/m202410080101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:24 UTC	746	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 493694 X-XSS-Protection: 0 Date: Mon, 14 Oct 2024 11:54:22 GMT Expires: Tue, 14 Oct 2025 11:54:22 GMT Cache-Control: public, immutable, max-age=31536000 Age: 1562 ETag: 16473538103295901464 Content-Type: text/javascript; charset=ISO-8859-1 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 12:20:24 UTC	644	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and
2024-10-14 12:20:24 UTC	1390	IN	Data Raw: 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 4d 61 74 68 2e 75 75 69 64 2e 6a 73 20 28 76 31 2e 34 29 20 0a 68 74 74 70 3a 2f 2f 77 77 77 2e 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 6d 61 69 6c 74 6f 3a 72 6f 62 65 72 74 40 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 43 6f 70 79 72 69 67 68 74 20 Data Ascii: ANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. / / Math.uuid.js (v1.4) http://www.broofa.com mailto:robert@broofa.com Copyright
2024-10-14 12:20:24 UTC	1390	IN	Data Raw: 6f 2c 73 6f 2c 75 6f 2c 79 6f 2c 7a 6f 2c 45 6f 2c 47 6f 2c 48 6f 2c 4a 6f 2c 4b 6f 2c 50 6f 2c 51 6f 2c 52 6f 2c 56 6f 2c 4f 6f 2c 58 6f 2c 59 6f 2c 5a 6f 2c 61 70 2c 64 70 2c 66 70 2c 67 70 2c 68 70 2c 69 70 2c 6b 70 2c 6d 70 2c 6e 70 2c 70 70 2c 71 70 2c 72 70 2c 73 70 2c 74 70 2c 76 70 2c 45 70 2c 47 70 2c 50 70 2c 52 70 2c 54 70 2c 57 70 2c 56 70 2c 55 70 2c 68 71 2c 6b 71 2c 73 71 2c 74 71 2c 76 71 2c 77 71 2c 78 71 2c 7a 71 2c 41 71 2c 42 71 2c 44 71 2c 45 71 2c 47 71 2c 46 71 2c 49 71 2c 4c 71 2c 4b 71 2c 4d 71 2c 4f 71 2c 50 71 2c 53 71 2c 54 71 2c 55 71 2c 58 71 2c 24 71 2c 5a 71 2c 62 72 2c 63 72 2c 64 72 2c 69 72 2c 6a 72 2c 6c 72 2c 6e 72 2c 6f 72 2c 71 72 2c 70 72 2c 74 72 2c 78 72 2c 7a 72 2c 4d 72 2c 50 72 2c 57 72 2c 24 72 2c 61 73 2c 6b Data Ascii: o,so,uo,yo,zo,Eo,Go,Ho,Jo,Ko,Po,Qo,Ro,Vo,Oo,Xo,Yo,Zo,ap,dp,fp,gp,hp,ip,kp,mp,np,pp,qp,rp,sp,tp,vp,Ep,Gp,Pp,Rp,Tp,Wp,Vp,Up,hq,kq,sq,tq,vq,wq,xq,zq,Aq,Bq,Dq,Eq,Gq,Fq,Iq,Lq,Kq,Mq,Oq,Pq,Sq,Tq,Uq,Xq,$q,Zq,br,cr,dr,ir,jr,lr,nr,or,qr,pr,tr,xr,zr,Mr,Pr,Wr,$r,as,k
2024-10-14 12:20:24 UTC	1390	IN	Data Raw: 3b 5f 2e 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 61 28 29 3f 6a 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 6c 61 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 6c 61 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 5f 2e 6e 61 28 29 3f 30 3a 5f 2e 6c 61 28 22 45 64 67 65 22 29 29 7c 7c 5f 2e 6c 61 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6c 61 28 22 41 6e 64 72 6f 69 64 22 29 26 26 21 28 5f 2e 73 61 28 29 7c 7c 5f 2e 72 61 28 29 7c 7c 5f 2e 6f 61 28 29 7c 7c 5f 2e 6c 61 28 22 53 69 6c 6b 22 29 29 7d 3b 78 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 76 61 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 76 61 7d 3b 7a 61 3d 66 75 6e 63 Data Ascii: ;_.sa=function(){return _.na()?ja("Chromium"):(_.la("Chrome")\|\|_.la("CriOS"))&&!(_.na()?0:_.la("Edge"))\|\|_.la("Silk")};_.ua=function(){return _.la("Android")&&!(_.sa()\|\|_.ra()\|\|_.oa()\|\|_.la("Silk"))};xa=function(){va===void 0&&(va=null);return va};za=func
2024-10-14 12:20:24 UTC	1390	IN	Data Raw: 2c 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d 22 29 3b 28 62 3d 63 3d 3d 6e 75 6c 6c 3f 22 22 3a 63 2e 6e 6f 6e 63 65 7c 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 22 22 29 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 53 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 72 63 3d 5f 2e 41 61 28 62 29 3b 52 61 28 61 29 7d 3b 5f 2e 56 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 54 61 29 72 65 74 75 72 6e 20 61 2e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 57 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 62 3e 3d 30 29 26 26 41 72 72 61 79 2e 70 Data Ascii: ,"script[nonce]");(b=c==null?"":c.nonce\|\|c.getAttribute("nonce")\|\|"")&&a.setAttribute("nonce",b)};Sa=function(a,b){a.src=_.Aa(b);Ra(a)};_.Va=function(a){if(a instanceof _.Ta)return a.g;throw Error("");};Xa=function(a,b){b=_.Wa(a,b);var c;(c=b>=0)&&Array.p
2024-10-14 12:20:24 UTC	1390	IN	Data Raw: 74 68 3b 65 2b 3d 38 31 39 32 29 66 6f 72 28 76 61 72 20 66 3d 6c 62 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5a 61 28 64 2c 65 2c 65 2b 38 31 39 32 29 29 2c 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 3b 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 6d 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 7d 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 7d 3b 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b Data Ascii: th;e+=8192)for(var f=lb.apply(null,Za(d,e,e+8192)),g=0;g<f.length;g++)b.push(f[g]);else b.push(d)}return b};mb=function(a){a=a(function(b){b.stack=Error().stack});a.prototype=Object.create(Error.prototype);a.prototype.constructor=a};nb=function(a){var b={
2024-10-14 12:20:24 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 74 62 29 72 65 74 75 72 6e 20 75 62 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 7d 3b 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 78 62 5b 61 5d 7c 7c 22 22 7d 3b 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 7a 62 26 Data Ascii: unction(a){if(!tb)return ub(a);for(var b="",c=0,d=a.length-10240;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)};yb=function(a){return xb[a]\|\|""};Ab=function(a){return zb&
2024-10-14 12:20:24 UTC	1390	IN	Data Raw: 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 61 7d 3b 24 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 3f 21 31 3a 28 30 2c 5f 2e 5a 62 29 28 61 29 26 31 3f 21 30 3a 21 31 7d 3b 5f 2e 62 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 26 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 7d 3b 64 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 63 63 3b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 28 29 3a 62 29 7c 7c 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 65 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 71 72 3d 21 30 3b 72 65 74 75 72 6e 20 61 7d 3b 66 63 3d 66 75 Data Ascii: oid 0}return a};$b=function(a){return!Array.isArray(a)\|\|a.length?!1:(0,_.Zb)(a)&1?!0:!1};_.bc=function(a){if(a&2)throw Error();};dc=function(a){var b=_.cc;if(!a)throw Error((typeof b==="function"?b():b)\|\|String(a));};ec=function(a){a.qr=!0;return a};fc=fu
2024-10-14 12:20:24 UTC	1390	IN	Data Raw: 5b 63 5d 3b 69 66 28 64 3e 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 64 3c 65 29 72 65 74 75 72 6e 21 30 7d 7d 3b 42 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 3e 3e 3e 30 3b 7a 63 3d 62 3b 41 63 3d 28 61 2d 62 29 2f 34 32 39 34 39 36 37 32 39 36 3e 3e 3e 30 7d 3b 44 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3c 30 29 7b 42 63 28 2d 61 29 3b 76 61 72 20 62 3d 5f 2e 41 28 43 63 28 7a 63 2c 41 63 29 29 3b 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 7a 63 3d 61 3e 3e 3e 30 3b 41 63 3d 62 3e 3e 3e 30 7d 65 6c 73 65 20 42 63 28 61 29 7d 3b 46 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3e 3e 3e 3d 30 3b 61 3e 3e 3e 3d 30 3b 69 66 28 62 3c 3d 32 30 39 37 31 35 31 29 Data Ascii: [c];if(d>e)return!1;if(d<e)return!0}};Bc=function(a){var b=a>>>0;zc=b;Ac=(a-b)/4294967296>>>0};Dc=function(a){if(a<0){Bc(-a);var b=_.A(Cc(zc,Ac));a=b.next().value;b=b.next().value;zc=a>>>0;Ac=b>>>0}else Bc(a)};Fc=function(a,b){b>>>=0;a>>>=0;if(b<=2097151)
2024-10-14 12:20:24 UTC	1390	IN	Data Raw: 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 61 3d 3d 3d 22 4e 61 4e 22 7c 7c 61 3d 3d 3d 22 49 6e 66 69 6e 69 74 79 22 7c 7c 61 3d 3d 3d 22 2d 49 6e 66 69 6e 69 74 79 22 29 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 61 29 7d 3b 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 22 2b 4b 63 28 61 29 2b 22 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 4d 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 61 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 72 65 74 75 72 6e 20 61 3b 69 66 Data Ascii: typeof a==="number")return a;if(a==="NaN"\|\|a==="Infinity"\|\|a==="-Infinity")return Number(a)};Lc=function(a){if(typeof a!=="boolean")throw Error("Expected boolean but got "+Kc(a)+": "+a);return a};Mc=function(a){if(a==null\|\|typeof a==="boolean")return a;if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.11	49878	188.125.72.139	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:24 UTC	2610	OUT	POST /c?s=1197744451&t=PRVi6ppubJA21Mpf,0.32756962472212026&_I=&_AO=0&_NOL=0&_R=&_K=3.54.3%05_a1s%03d%3DAQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA%26S%3DAQAAAj8FLfMHI7YC4LmHoLStMx8%04_pl%031%04A_v%033.54.3%04A_cn%03ANALYTICS-VERSIONED-PROD%04test%03900%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03iTNqR9y843l4ACq9%04_w%03currently.att.yahoo.com%2F%04_rid%034vh116tjgq33s%04abk%03%04colo%03ir2%04mrkt%03us%04p_sec%03default%04partner%03att%04site%03fp%04uh_vw%030%04cbe%03att-partner%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQRQSVBDAgQAwrk2AwQAJYXrBAQAwBkeBQQBeOibBwQAI9JHCAQBZW_R%04dmi_consent%03false%04_ts%031728908416%04_ms%03698%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031&_C=elm%03signin%04subsec%03settings%04itc%032%04sec%03ybar%04slk%03sign-in%04_p%03undefined HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://currently.att.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; s_sess=%20SC_LINKS%3Dnet%257Ccurrently%257Cdesktop%255E%255ESign%2520in%255E%255Enet%257Ccurrently%257Cdesktop%2520%257C%2520Sign%2520in%255E%255EHeader%255E%255E%3B; s_pers=%20s_nr%3D1728908421125-New%7C1731500421125%3B%20s_vnum%3D1730433600129%2526vn%253D1%7C1730433600129%3B%20s_invisit%3Dtrue%7C1728910221129%3B%20s_lv%3D1728908421132%7C1823516421132%3B%20s_lv_s%3DFirst%2520Visit%7C1728910221132%3B%20gpv_v17%3Dnet%257Ccurrently%257Cdesktop%7C1728910221136%3B; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513218%7C6%7CMCAAMB-1729513218%7C6G [TRUNCATED]
2024-10-14 12:20:24 UTC	1129	IN	HTTP/1.1 200 OK date: Mon, 14 Oct 2024 12:20:24 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: AMCVS_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:24 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCVS_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:24 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:24 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:24 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-10-14 12:20:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.11	49883	188.125.72.139	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:24 UTC	2749	OUT	POST /c?s=1197744451&t=bxJ1sSoKuzUP4Vu7,0.9938601277217702&_I=&_AO=0&_NOL=0&_R=&_K=3.54.3%05_a1s%03d%3DAQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA%26S%3DAQAAAj8FLfMHI7YC4LmHoLStMx8%04_pl%031%04A_v%033.54.3%04A_cn%03ANALYTICS-VERSIONED-PROD%04test%03900%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03iTNqR9y843l4ACq9%04_w%03currently.att.yahoo.com%2F%04_rid%034vh116tjgq33s%04abk%03%04colo%03ir2%04mrkt%03us%04p_sec%03default%04partner%03att%04site%03fp%04uh_vw%030%04cbe%03att-partner%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQRQSVBDAgQAwrk2AwQAJYXrBAQAwBkeBQQBeOibBwQAI9JHCAQBZW_R%04dmi_consent%03false%04etag%03dwell%2Cstop%04usergenf%031%04A_prets%031728908415%04A_prems%03829%04_ts%031728908416%04_ms%03781%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031&_C=sec%03ybar%04_p%0311%04A_lv%031%04slk%03sign-in%04elm%03signin%04subsec%03settings%04itc%030%04tar%03login.yahoo.com%04tar_uri%03%2F%04A_xy% [TRUNCATED] Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://currently.att.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; s_sess=%20SC_LINKS%3Dnet%257Ccurrently%257Cdesktop%255E%255ESign%2520in%255E%255Enet%257Ccurrently%257Cdesktop%2520%257C%2520Sign%2520in%255E%255EHeader%255E%255E%3B; s_pers=%20s_nr%3D1728908421125-New%7C1731500421125%3B%20s_vnum%3D1730433600129%2526vn%253D1%7C1730433600129%3B%20s_invisit%3Dtrue%7C1728910221129%3B%20s_lv%3D1728908421132%7C1823516421132%3B%20s_lv_s%3DFirst%2520Visit%7C1728910221132%3B%20gpv_v17%3Dnet%257Ccurrently%257Cdesktop%7C1728910221136%3B; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513218%7C6%7CMCAAMB-1729513218%7C6G [TRUNCATED]
2024-10-14 12:20:24 UTC	1129	IN	HTTP/1.1 200 OK date: Mon, 14 Oct 2024 12:20:24 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: AMCVS_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:24 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCVS_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:24 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:24 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:24 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-10-14 12:20:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.11	49882	152.199.23.180	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:25 UTC	1681	OUT	GET /tag/opus.js HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; s_sess=%20SC_LINKS%3Dnet%257Ccurrently%257Cdesktop%255E%255ESign%2520in%255E%255Enet%257Ccurrently%257Cdesktop%2520%257C%2520Sign%2520in%255E%255EHeader%255E%255E%3B; s_pers=%20s_nr%3D1728908421125-New%7C1731500421125%3B%20s_vnum%3D1730433600129%2526vn%253D1%7C1730433600129%3B%20s_invisit%3Dtrue%7C1728910221129%3B%20s_lv%3D1728908421132%7C1823516421132%3B%20s_lv_s%3DFirst%2520Visit%7C1728910221132%3B%20gpv_v17%3Dnet%257Ccurrently%257Cdesktop%7C1728910221136%3B; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513218%7C6%7CMCAAMB-1729513218%7C6G [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.11	49886	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:25 UTC	356	OUT	GET /g/images/spaceball.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:25 UTC	729	IN	HTTP/1.1 200 OK x-amz-id-2: 3sxtJTfROdI85Y6sAnfJZATOb9NEuaUv5cZ6hPdqu+cwD2qcuHdLzyGq69g1deDKQAdlOc4yRDM= x-amz-request-id: A5QVA36H1434EH7M Date: Wed, 02 Oct 2024 17:09:47 GMT Last-Modified: Wed, 24 Feb 2021 23:21:03 GMT ETag: "325472601571f31e1bf00674c368d335" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: KAUQOG5o0gBSJgl4c2JS9bVGo5z87pfq Accept-Ranges: bytes Content-Type: image/gif Content-Length: 43 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1019439 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-10-14 12:20:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.11	49887	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:25 UTC	507	OUT	GET /uu/api/res/1.2/IKm1uI6ofoB8D8CcUqetHw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/71168fc52590d31ed26a2a8e925c20f6.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:25 UTC	1078	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Disposition: inline; filename="71168fc52590d31ed26a2a8e925c20f6.webp" Etag: "ffd20ba807556587d642d14f5f18e8b6" Last-Modified: Sun, 13 Oct 2024 00:20:13 GMT Date: Sun, 13 Oct 2024 00:57:15 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=2;cpu=1;start=2024-10-13T00:57:15.266Z;desc=hit,rtt;dur=89,content-info;desc="width=536,height=284,bytes=20728,owidth=5226,oheight=3484,obytes=3172051,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: 97db377a3556bb7b6a802712714e10fc Age: 127390 cld_id: 97db377a3556bb7b6a802712714e10fc x-image-width: 536 x-image-height: 284 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 53870 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 8d 6f 7f f4 3a ea fa c3 84 9d e3 da 96 09 39 24 e7 9f 2e 64 d6 2c fa f8 d7 28 d3 a5 89 ce 68 3c de ba e2 9a 92 14 35 fd eb ff 00 99 5f f1 ae 46 65 15 e0 f7 58 34 31 4e 08 70 df 10 b8 b0 d1 fd 1e bd bb 72 f5 7c 9a cd 68 b6 5d 2f 1a 15 47 13 78 c2 cb 8a 5a 35 e5 c0 ee f2 52 81 fc 2a 5a 2a 97 4c c7 f6 1d 35 c6 0e 34 b2 41 46 ba 97 91 fb c9 42 bf 0a 96 85 fc af 1f c8 f1 ae 3b 71 d1 9f a3 ad dc 3f 18 ed 9f ee d1 b4 4f ca b1 b4 3d 8f da 13 8f a8 c6 dd 6a 9f 9c 46 bf 85 0b 42 fe 4b 89 8f 1b ed 2b da 11 a1 84 eb 26 48 f7 c1 6b f8 54 b0 fe 47 8b ec 3a 6f b4 ff 00 68 9f 69 12 9a d5 51 4a fb be ef c5 05 a3 cb cf ca a5 a0 7e 49 8b f8 84 91 da d7 b4 ab 58 4f e5 eb 62 b1 fb d6 e6 ff 00 0a 36 07 d1 31 7f 11 f3 1d b0 bb 4a b2 3f f2 b5 a1 5e e3 6e 45 4b 2b 7d 0f 1f d8 7a Data Ascii: o:9$.d,(h<5_FeX41Npr\|h]/GxZ5RZL54AFB;q?O=jFBK+&HkTG:ohiQJ~IXOb61J?^nEK+}z
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: af ae 40 fb e1 b6 7f 1a 8f 5e d7 ee 19 7e 27 92 f3 13 2e 7f 27 dd ac 72 6f 88 b2 c7 fc e4 14 1f ef d5 4f 5d ff 00 22 c5 f8 a1 7c c0 49 5f c9 f7 14 e7 67 12 16 9f 8d b5 27 ee 5d 0f 6f ff 00 f4 59 1f c5 31 5f f6 ff 00 e4 49 df e4 ff 00 69 86 56 fb bc 48 01 09 e5 ce d8 4e 4f a7 eb 2a 2c 1d bf 25 8b f1 54 7f f1 96 9f 07 38 4e e7 07 f4 93 9a 45 57 71 72 22 6b d2 83 e1 92 d6 43 98 38 da 49 e9 f1 ab 94 68 f3 9d 43 63 de e4 f5 49 ab cd 9c 72 e7 44 c1 e4 61 25 a3 e4 2a 05 02 e4 b4 48 e9 50 64 ac 15 31 a5 0c 2b 1c ba 54 6a c8 9d 00 a7 46 71 4e 15 01 48 d0 08 fd c2 22 c3 84 04 f2 23 35 5b b0 80 26 c2 73 f7 69 82 9b 64 72 e3 09 dd c7 90 e9 50 50 0c c8 4e 60 72 14 52 b0 a7 40 39 51 1c 49 3e 1a 03 bf 00 79 51 9c cf d0 fb 69 64 57 40 b7 e3 b9 9c e2 80 e9 0c 5f 6d 7d 36 Data Ascii: @^~'.'roO]"\|I_g']oY1_IiVHNO,%T8NEWqr"kC8IhCcIrDa%HPd1+TjFqNH"#5[&sidrPPN`rR@9QI>yQidW@_m}6
2024-10-14 12:20:25 UTC	1092	IN	Data Raw: 32 7e 09 23 93 75 11 01 e9 80 f3 92 d0 1b 45 00 13 0b 4d a7 bb 4a 54 a4 67 15 02 4a 21 47 db 80 94 81 f0 a8 40 a3 4c 28 e0 e3 ed a1 60 1d 21 8e 5c 85 29 05 92 c9 a8 43 29 67 27 00 7d b5 08 79 4c 1e 98 c7 ce 85 8c 95 9a 98 64 f4 00 7c e8 8c 4a a3 36 02 93 5a 0a 42 cd b7 96 16 3d 41 15 08 12 b6 a0 77 0d 7f 51 3f 75 40 20 dc 36 c6 13 50 64 1c 8f f4 53 50 21 b8 bf aa 4d 42 05 62 fd 11 50 81 36 55 cc 11 50 0c 25 18 e4 0a 80 1e b4 a0 08 27 ca a1 12 b1 d2 15 cb a5 41 85 92 af 75 40 33 e7 ef 6f b8 4b 6f 8a 50 a4 30 9c 07 61 24 9f b2 b7 6b 3e 4a e4 8e 70 65 ce fe 36 c2 40 51 e4 73 e7 5d 35 ca 2b 6e 8b 0a c0 8e 17 bd c3 fb bc 9b d3 93 11 a9 1b 5a 7d 85 84 2b f4 6a 4a 7c f3 83 8c 95 91 8c 92 76 f2 22 84 89 12 9e d4 d2 99 b8 3e d3 e8 e9 b7 69 4e 7a 62 b0 cf c8 c9 d0 Data Ascii: 2~#uEMJTgJ!G@L(`!\)C)g'}yLd\|J6ZB=AwQ?u@ 6PdSP!MBbP6UP%'Au@3oKoP0a$k>Jpe6@Qs]5+nZ}+jJ\|v">iNzb
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 02 60 37 ab 6c 32 87 57 e3 29 27 e5 8a d9 ae 24 8e 72 e1 ee a8 b4 68 ed 4c c5 e6 f5 60 45 e2 2b 40 e6 2a b9 6e 56 39 1c f3 c6 0f 3c fb ab a6 9d 99 a4 6a b7 5e be 3b 77 be db ac af 31 6f 62 49 5a 92 86 f0 88 e8 5a 95 b1 27 07 d1 27 ea 34 5b b0 95 ac 87 5a 95 36 4c 86 5a 43 6d ad c2 a0 00 c7 5f fc 2b 14 fc 8d 66 8b 94 96 41 dc 42 bc 82 50 2a 90 9b ae e0 b9 aa 42 10 d3 6c 32 84 e0 6e 18 cd 0a 19 3b 1f c5 8a ea 9a 0f 21 d6 d6 9f 72 a8 86 e8 5e 15 be 75 f2 e7 12 c9 6a 8a 64 cd 9a f2 58 61 b4 1e aa 27 1c cf 90 e7 9c fa 0a 49 cf b1 5b 1a 09 e6 97 6a 0a f1 53 87 b7 1d 05 79 62 cd 22 ef 12 74 94 b5 b5 f4 c6 dd 86 56 31 94 92 7a f5 aa 75 b6 7d c7 06 cd 9d 4f 6c 8f 47 b3 3f 61 83 19 12 9a da ec 86 c3 a4 fa 8f 23 5d 9d 7a ed 76 60 ab 3e cf 58 35 8e 98 54 18 72 5b be Data Ascii: `7l2W)'$rhL`E+@nV9<j^;w1obIZZ''4[Z6LZCm_+fABPBl2n;!r^ujdXa'I[jSyb"tV1zu}OlG?a#]zv`>X5Tr[
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 4e dc b5 de a5 8b a6 2c 49 6c c9 96 ad a8 2e 2c 25 38 f3 eb d4 e3 9e 3d c6 ba 71 45 4c 39 13 88 7a df 41 59 f5 07 0d 8f b3 b7 1e 7a 94 cc e6 ce 54 a4 2c 61 24 25 61 5c be 89 c8 f3 c9 cd 09 f0 80 53 ad 16 d8 7c c9 79 7b 56 e3 c5 b2 c8 1c 93 8f 4a c5 27 64 08 4c 8d 1d c4 25 c6 53 87 16 40 e5 d1 22 ab a2 c4 6d f9 36 3b 29 fe 74 ea 5c fe 82 4d 2d 8c 9a 63 29 73 8b 7b e3 c4 6d 48 4a 46 69 a8 8b 92 d7 ec a7 6b 9e e7 13 22 5e 64 30 85 b7 15 87 5f 6d 4a 1f 45 61 24 02 3e ba c3 bf 37 0c 7c 1d 8e 99 ab 79 3d 42 cd e3 67 0e a3 cb d3 0a d4 6c b6 4c b3 3f 3b c8 20 e5 47 9e 47 cc 7d 55 83 5e 5d bc 9b 7a 8c 3b 89 7e 9d d0 1a 53 51 e9 4d 3f 60 9b 6d 6a 45 de ea ea da 52 94 a5 12 84 8e 61 58 09 1b 47 52 46 4e 4d 74 fd d3 aa 47 27 3a 5d c8 a7 ef d0 e1 d8 af f7 3b 3d b9 f4 Data Ascii: N,Il.,%8=qEL9zAYzT,a$%a\S\|y{VJ'dL%S@"m6;)t\M-c)s{mHJFik"^d0_mJEa$>7\|y=BglL?; GG}U^]z;~SQM?`mjERaXGRFNMtG':];=
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: d9 fa c7 c7 fe b5 3f ea 26 8b 1c 34 c7 d3 14 94 40 9b 3f 44 51 00 5a 02 89 6c 82 7a 54 20 46 32 bc 43 95 42 04 59 57 21 ca a1 02 ac 39 c8 54 20 f1 b5 e4 03 50 82 e9 57 ba a1 05 db 57 3c 62 a1 0e 43 fe 50 58 ad bd 6a b0 2d cf d9 59 20 fa f5 1f 8d 6d d4 e5 89 35 5e 4e 2d 8d 73 93 6e 71 32 2d 12 dd 88 fb 67 28 79 95 94 2d 27 04 72 20 82 39 13 5d 6a af 26 66 48 34 ed 8e 2e a6 89 71 b9 5d 6e 4f a2 62 87 b4 ef 2d 05 21 60 af 6b 81 47 3b b7 12 41 18 e5 d7 27 a5 66 d8 d9 a7 e9 04 12 ef 0c d9 51 42 e1 ce 50 50 39 ca d1 bb 1f 6d 64 72 a1 e3 4b c8 f9 7c 2b d4 d2 23 97 ac e9 6a 62 90 37 2d 01 41 2a c7 ae 0d 57 29 d1 a5 62 f5 7f 61 19 9f a2 f5 40 96 86 e4 5b d6 c3 a0 63 9f 9d 56 b2 ab 17 db 49 12 5d 2f c3 0b b5 fa 5a 60 3f 11 c8 72 d6 06 d5 2d b5 16 5c 1f 10 39 52 66 Data Ascii: ?&4@?DQZlzT F2CBYW!9T PWW<bCPXj-Y m5^N-snq2-g(y-'r 9]j&fH4.q]nOb-!`kG;A'fQBPP9mdrK\|+#jb7-A*W)ba@[cVI]/Z`?r-\9Rf
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: a2 a7 75 96 46 23 f3 ad b5 73 ac b2 f2 6f 2d 36 56 d3 6a 3d c3 09 db 95 24 1e 5b 86 7c f1 f1 06 ad 8e 4a f2 1e d3 68 da c7 55 85 38 5d bb c8 7c a9 a5 84 ed 69 b1 b0 ed 38 56 36 f4 ce 33 ee cd 23 cb 62 57 20 97 6f da 8d e4 10 ab fc b2 a5 75 29 58 03 ec a5 73 b1 94 4b 15 8e a9 ae dc 4c 01 06 3e 80 cd 32 56 41 c4 1f 0c 97 92 7f c6 28 2d 3f 0d a0 7d e0 d0 1c 33 1c e5 42 92 48 8c 24 ca b6 80 29 02 d0 52 1b 9f a3 3f 1a 64 00 8c 65 67 ca 88 02 4c 2b c2 39 54 20 49 85 9d a2 a1 07 8c af 18 cf 4a 84 1d 21 5c ba 54 21 e9 53 e1 5b a3 39 36 e1 21 b8 f1 da 1b 9c 75 c5 04 a5 23 df 9a 7f 4d be 05 94 fb 39 38 7f b6 0e bf 3c 41 b5 48 7a d8 80 6d 96 89 6c a2 22 ca 48 53 a8 39 de b3 cb a1 51 00 7b 85 6b d5 5e 94 b9 32 fa eb 2b a4 73 df 0a 23 69 59 9a 9b 1a c6 de fc ab 6b 6c Data Ascii: uF#so-6Vj=$[\|JhU8]\|i8V63#bW ou)XsKL>2VA(-?}3BH$)R?degL+9T IJ!\T!S[96!u#M98<AHzml"HS9Q{k^2+s#iYkl
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 70 21 f7 15 cc a8 f3 24 9a 5a a0 0f 64 16 de b7 3c a4 ab 3b 9b 52 4f d5 50 34 62 01 ff 00 79 99 20 73 0d 0e 7f 0e 55 1b 6b 86 2b 60 87 e7 ad 1e 15 ba b4 e7 91 28 3c f1 e6 2a 50 10 e6 dd 31 97 1c 43 08 2a 38 fd ef 3a 2d 0c 9d 17 03 1f 44 57 7d 9c f1 fc 7f a1 f3 a1 64 16 8d 8f 6e f8 32 3f d6 34 a3 58 62 3a 8e e1 ca a1 2c 7e 85 74 e5 49 63 26 15 84 bc 36 79 54 b0 0f e3 b9 e2 e9 52 c8 82 51 d5 bb 02 a5 91 04 da 56 30 2a 59 10 f1 95 72 4f 2f 5a 96 46 38 53 bd db 4a 73 19 c7 95 44 c8 df 07 2a 71 0b 5b 5f b5 84 e3 36 5b ab 6e d2 fb ce b5 0e 2e e3 80 96 d5 82 b2 3c d4 4f ed 1c f4 3c bd 7d 06 b2 4a 27 95 ea 7b 59 ee 90 32 e1 60 d1 da 9a 0c 6d 27 ad ee 2b 87 6d f6 04 49 51 61 d0 1c 49 5b ae 3a 92 41 49 20 94 a9 07 03 35 9e 74 9f 06 ed 24 eb 92 a2 95 a6 34 a6 95 96 Data Ascii: p!$Zd<;ROP4by sUk+`(<P1C8:-DW}dn2?4Xb:,~tIc&6yTRQV0YrO/ZF8SJsDq[_6[n.<O<}J'{Y2`m'+mIQaI[:AI 5t$4
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 42 90 f3 8a c0 ee c6 39 1c 75 23 3c be 75 1f 81 5b b2 53 b8 75 42 1c 50 3c c1 0d ab 9f d9 54 b4 28 ce e2 a9 5e c8 e2 59 8a f2 d4 47 40 83 f8 d5 84 34 82 f5 d9 e6 13 ed 36 e5 a1 40 0c 78 71 b8 63 ad 2b ff 00 01 46 ef 8b 82 d3 b5 ab 72 d4 a3 d0 6e 4f f1 a4 f2 3a 2a 5e 29 e8 fd 67 a9 82 63 33 6f 41 53 6e 82 3f 48 84 84 a4 0f 3c 9a e8 6b 49 26 53 94 d7 80 71 e6 c0 d4 17 4b 53 c1 2a 76 3c 65 87 0a 14 48 18 52 72 79 1e 83 35 7e c7 2b 82 a4 d5 17 45 9b 4c 9b b6 a9 b5 31 72 3d fc 67 a5 a1 0e b4 1c 28 dc 09 c6 32 39 8a a3 0f 90 bf 05 dc e7 0d f4 0d ad f5 45 6f 41 c6 76 48 52 52 3b e9 4e af ae 7a e7 19 e7 81 f3 af 40 b5 30 d1 c6 7b 39 ae 8a f7 5e c6 91 a2 f5 8c c4 43 81 01 b8 65 21 49 86 a8 c1 4c 8d c8 03 90 24 9c 8f 5c d7 17 66 b5 f3 70 74 f5 9b 78 79 22 9a 2e 35 Data Ascii: B9u#<u[SuBP<T(^YG@46@xqc+FrnO:^)gc3oASn?H<kI&SqKSv<eHRry5~+EL1r=g(29EoAvHRR;Nz@0{9^Ce!IL$\fptxy".5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.11	49884	188.125.72.139	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:25 UTC	2078	OUT	POST /p?s=1197744451&t=1728908419930&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=att&lang=en-US&region=US&device=desktop&colo=ir2&bucket=900%2Cseamless&rid=4vh116tjgq33s&limitedAds=false&NPA=false&pd=unknown&pt=unknown&usercountry=US&benjiVersion=2.1.135&prebidVersion=unknown&yahooPrebidVersion=unknown&type=PREBID_SESSION_START HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://currently.att.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://currently.att.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A3=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; A1S=d=AQABBHwMDWcCEDaTSHKPXnuTNbUvINGA1cIFEgEBAQFdDmcWZ9xH0iMA_eMAAA&S=AQAAAj8FLfMHI7YC4LmHoLStMx8; IU=d=YT2bIoMebZhu9TIypRUnMDwDQ8Fk&v=1; s_sess=%20SC_LINKS%3Dnet%257Ccurrently%257Cdesktop%255E%255ESign%2520in%255E%255Enet%257Ccurrently%257Cdesktop%2520%257C%2520Sign%2520in%255E%255EHeader%255E%255E%3B; s_pers=%20s_nr%3D1728908421125-New%7C1731500421125%3B%20s_vnum%3D1730433600129%2526vn%253D1%7C1730433600129%3B%20s_invisit%3Dtrue%7C1728910221129%3B%20s_lv%3D1728908421132%7C1823516421132%3B%20s_lv_s%3DFirst%2520Visit%7C1728910221132%3B%20gpv_v17%3Dnet%257Ccurrently%257Cdesktop%7C1728910221136%3B; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; AMCV_55633F7A534535110A490D44%40AdobeOrg=-1124106680%7CMCIDTS%7C20011%7CMCMID%7C40967056688482462261834634231440381293%7CMCAAMLH-1729513218%7C6%7CMCAAMB-1729513218%7C6G [TRUNCATED]
2024-10-14 12:20:25 UTC	1129	IN	HTTP/1.1 200 OK date: Mon, 14 Oct 2024 12:20:25 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: AMCVS_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:25 GMT; Max-Age=0; Domain=noa.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCVS_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:25 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:25 GMT; Max-Age=0; Domain=noa.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: AMCV_55633F7A534535110A490D44%40AdobeOrg=DELETE; Expires=Mon, 14 Oct 2024 12:10:25 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-10-14 12:20:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.11	49895	142.250.185.194	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:25 UTC	460	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiWocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:25 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Mon, 14 Oct 2024 12:20:25 GMT Expires: Mon, 14 Oct 2024 12:20:25 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 496 / 20010 / m202410080101 / config-hash: 652310961389071086 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 106775 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 12:20:25 UTC	605	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=type
2024-10-14 12:20:25 UTC	1390	IN	Data Raw: 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 66 61 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 66 61 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 2c 77 3d 66 75 6e 63 74 Data Ascii: c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=funct
2024-10-14 12:20:25 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 76 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 61 2c 61 29 7d 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 Data Ascii: unction(){return ha(aa(this))}})}return a},"es6");var ha=function(a){a={next:a};a[v(t.Symbol,"iterator")]=function(){return this};return a},ja=function(a){return ia(a,a)},ia=function(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a
2024-10-14 12:20:25 UTC	1390	IN	Data Raw: 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 79 62 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 75 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 Data Ascii: or(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.yb=b.prototype},ua=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c
2024-10-14 12:20:25 UTC	1390	IN	Data Raw: 67 29 3f 64 65 6c 65 74 65 20 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 66 7d 2c 22 65 73 36 22 29 3b 77 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 76 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 78 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b Data Ascii: g)?delete g[d][this.g]:!1};return f},"es6");w("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!v(a.prototype,"entries")\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(x([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k
2024-10-14 12:20:25 UTC	1390	IN	Data Raw: 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 76 28 74 68 69 73 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 71 3b 21 28 71 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 71 3d 71 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 71 5b 31 5d 2c 71 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: urn e(this,function(h){return h.key})};c.prototype.values=function(){return e(this,function(h){return h.value})};c.prototype.forEach=function(h,k){for(var l=v(this,"entries").call(this),q;!(q=l.next()).done;)q=q.value,h.call(k,q[1],q[0],this)};c.prototype
2024-10-14 12:20:25 UTC	1390	IN	Data Raw: 2e 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 63 3d 3d 3d 30 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 63 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e Data Ascii: .done;)this.add(d.value)}this.size=this.g.size};b.prototype.add=function(c){c=c===0?0:c;this.g.set(c,c);this.size=this.g.size;return this};b.prototype.delete=function(c){c=this.g.delete(c);this.size=this.g.size;return c};b.prototype.clear=function(){this.
2024-10-14 12:20:25 UTC	1390	IN	Data Raw: 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 76 61 28 74 68 69 73 2c 62 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 21 3d 3d 2d 31 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d Data Ascii: lar expression");return a+""};w("String.prototype.includes",function(a){return a?a:function(b,c){return va(this,b,"includes").indexOf(b,c\|\|0)!==-1}},"es6");w("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var e=[],f=
2024-10-14 12:20:25 UTC	1390	IN	Data Raw: 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 76 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 Data Ascii: urn!1;return g>=f}},"es6");var wa=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[v(t.Symbol,"iterator")]=function(){return e};re
2024-10-14 12:20:25 UTC	1390	IN	Data Raw: 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 7a 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 7a 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 63 3d 63 7c 7c 7a 3b 61 5b 30 5d 69 6e 20 63 7c 7c 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 Data Ascii: ure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var z=this\|\|self,xa=function(a){a=a.split(".");for(var b=z,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},ya=function(a,b,c){a=a.split(".");c=c\|\|z;a[0]in c\|\|typeof c.execScript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.11	49894	185.89.210.90	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:25 UTC	642	OUT	GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://att.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:25 UTC	1492	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Mon, 14 Oct 2024 12:20:25 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID AN-X-Request-Uuid: cb6ac45e-944a-41d5-827b-defb240b8257 Set-Cookie: XANDR_PANID=MNBcDgol9apmnjSmivCAdaWqO6in5ChnZrBt4PMh-nsBNGVkf0w6HcMtaC-E4FXiivsSAzh7vFjFl-f7fmfxTbwjWFCDL45miq72UAHIEJQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 12-Jan-2025 12:20:25 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 02-Oct-2034 12:20:25 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822259202556322614; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 12-Jan-2025 12:20:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.11	49889	87.248.119.252	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 12:20:25 UTC	535	OUT	GET /uu/api/res/1.2/f1365fOmnZ.4elatJGgP8Q--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/wpix_new_york_city_ny_articles_672/0499bb6503b1adc9da306296f5b6156a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 12:20:25 UTC	1098	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Disposition: inline; filename="0499bb6503b1adc9da306296f5b6156a.webp" Etag: "f635da6dce787c8447e043cf0819517b" Last-Modified: Sat, 12 Oct 2024 18:53:02 GMT Date: Sun, 13 Oct 2024 01:13:06 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: public, max-age=2592000 Server-Timing: cld-fastly;mitm=po;dur=2;cpu=1;start=2024-10-13T01:13:06.784Z;desc=hit,rtt;dur=88,content-info;desc="width=536,height=284,bytes=20440,owidth=900,oheight=506,obytes=101452,ef=(1,13,17,23,30)" Server: ATS Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Access-Control-Expose-Headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options x-request-id: ea5d426236dd17b7694060dbfd06760f Age: 126439 cld_id: ea5d426236dd17b7694060dbfd06760f x-image-width: 536 x-image-height: 284 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 48620 ATS-Carp-Promotion: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Connection: close ATS-Carp-Promotion: 1
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 04 05 03 06 02 07 08 01 09 00 0a ff c4 00 48 10 00 01 03 03 03 02 05 01 07 02 03 05 05 07 05 01 01 02 03 04 00 05 11 06 12 21 31 41 07 13 22 51 61 14 08 23 32 42 71 81 a1 Data Ascii: JFIFCCH!1A"Qa#2Bq
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 4f 20 52 74 e1 34 64 c9 4a 07 34 b6 d6 4d a0 75 2a 2f 79 c9 19 00 73 52 a4 0a 73 72 ba 50 36 06 52 c0 74 e4 55 44 5f 45 33 24 10 17 b5 40 55 46 57 d9 6c c7 9a 0c 1f 55 5c 2f 44 8f c9 6b ca 3e aa bc 51 96 50 9a 4b c8 23 20 f4 ad 71 8c 32 57 67 4b f2 de 3c ed cd 5c 9a 73 65 7b 21 ba dc f6 67 d7 9c 57 67 04 e9 86 5d 3b 3a bd 57 ca b0 3c 8c 52 a7 1c 89 f6 e1 d0 46 45 99 8d 57 16 3f aa 1a c1 71 43 ae d2 40 35 ea 78 39 df 4e 0f 27 1d c6 ab fb 1f 6b cf f6 77 5c 22 d5 21 c2 23 cb c2 08 ec 6b 4f 37 0e b6 e7 e0 ba 7d 02 af 2b 5d 3d 2c 2e e3 3a ce b5 93 4f d5 4a 78 48 c5 05 6a 25 f5 a7 11 66 e2 27 38 c5 5c 67 71 ec 33 a7 1d aa a2 60 37 95 93 d2 9c 5e 9d 11 f6 56 8b 2a 16 9c be 6a 28 f0 54 f2 9d 94 dc 75 02 9f fe 18 4f 24 1e f8 df 92 3e 2a 9c bc d3 6e 81 0d 5b 35 04 Data Ascii: O Rt4dJ4Mu/ysRsrP6RtUD_E3$@UFWlU\/Dk>QPK# q2WgK<\se{!gWg];:W<RFEW?qC@5x9N'kw\"!#kO7}+]=,.:OJxHj%f'8\gq3`7^Vj(TuO$>*n[5
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: eb c3 bf d3 1c ee db 1f e9 e0 4b 53 72 22 4b 16 db 81 74 6f 8e 8f 4e f0 15 bd 27 1d cf 4c 9f da a6 f5 3f 6b 2d 76 65 12 fe f3 0f 96 2f 30 c4 5d ca f2 d2 bd b8 4b 84 77 fd 39 e2 b0 dd b7 fe 43 b3 a3 18 2f 40 b9 c7 44 c5 25 25 2a c9 6f 70 ce 0f bd 76 cc 65 9d 33 b9 5c 7d 14 ce d3 76 c1 29 c7 9b 8e fb 60 90 af 31 27 f0 1c 82 76 81 cf 38 f6 ac 72 f1 f5 dc 54 e6 fe cb 9a b7 c9 6d ef 32 1e a0 32 1d 47 e1 0b e5 bf d0 7b 67 fd 2b 1d 5c 7d 0f 6f 66 49 d4 31 96 a9 72 19 8f 2c 14 14 2a 3b 20 94 85 1f c3 b8 75 c1 e7 27 1d 85 4e f3 ad 35 4b ae 17 29 51 4a 9c b9 da da 55 a5 f0 59 6d 82 9e 77 ab a6 ef 62 46 46 6a 6c 83 1b 03 c9 99 12 3a 43 37 2b 02 5a b7 ba 3c a6 0a 88 2a 2b 24 75 57 e2 ce 32 79 c0 f4 f0 3a d4 69 78 82 bf 4b b1 c6 79 b6 ee d6 62 dc 36 50 7e 99 c2 30 51 Data Ascii: KSr"KtoN'L?k-ve/0]Kw9C/@D%%opve3\}v)`1'v8rTm22G{g+\}ofI1r,; u'N5K)QJUYmwbFFjl:C7+Z<*+$uW2y:ixKyb6P~0Q
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 73 3c 3f 14 86 ff 00 fe d0 13 31 96 ad e6 5a 24 85 35 e6 b5 b5 65 b5 95 a4 1d fb b8 c6 01 ed c1 e7 b7 38 df bb be d7 1a cf 56 27 53 cb 89 72 86 98 6c 27 cd 59 4b 73 02 b7 87 40 3b 9b 4a 54 00 24 92 92 31 8e 8a 3f bd e3 2f e5 5b 73 17 8b 72 6e d2 af 30 51 22 41 4b 18 28 0c b4 02 d4 36 ad 5c 29 28 fc 24 02 0e 09 fc d5 d1 8c 35 4d 47 6a b1 8f ef 5a ce 92 06 fb 6b 45 ea d8 f4 25 60 29 69 21 2a 3d 8d 74 78 bc ff 00 6b 95 c5 e5 70 4b 36 d5 0d 4b 93 0e 43 da 77 51 32 94 a5 2a 28 61 cc 70 7f 7f 6a fa ae 3e 49 9c dc 7c f7 26 1f 1b a2 1b be 9a 7e df 35 2b 8f f7 8d 2c 6e 18 ed 5b 39 6a b9 72 65 0a 7c a5 00 a5 43 a8 a0 8b 5f f4 02 07 5a 04 a5 32 56 9c 80 ac 9a ce b4 85 52 d2 82 3d 00 d4 56 98 16 be 8c 8e 2a 2b 48 11 4d 24 f2 69 2e 23 52 00 38 14 2e 31 20 85 63 14 1a Data Ascii: s<?1Z$5e8V'Srl'YKs@;JT$1?/[srn0Q"AK(6\)($5MGjZkE%`)i!=txkpK6KCwQ2(apj>I\|&~5+,n[9jre\|C_Z2VR=V*+HM$i.#R8.1 c
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 51 5b e2 09 f4 24 7e 1a 8a 72 68 0b be 95 52 69 88 7f cc 4f bd 0d 23 24 81 9c 91 41 a5 f4 a4 0f 8a 03 02 e7 52 47 4a 0b 40 dc 53 92 5e f2 58 c1 27 8a 0e 43 cb 0d 95 50 26 22 4c bd 8e 3c 9f 52 10 0f 43 ef 44 d1 f2 7f 85 fe 5a a4 39 15 99 ae b6 94 a4 8d a3 68 ef 5b 62 e1 e6 08 54 a7 00 21 35 71 32 c0 ef b4 54 47 1c d5 22 30 0c 29 27 3f cd 07 b8 cc b2 e8 57 98 d8 04 f7 14 10 eb 73 ac 2c ec 53 9b 54 3b 1f 7a ac 53 91 ba a0 82 d2 5d 6c 7a 8f 5a d3 14 54 89 6d b4 47 52 0b 79 34 cf 10 aa b7 37 36 6c 38 cc b4 37 b8 e8 c5 65 63 5c 6e d8 5c 6c 57 79 57 62 21 85 49 29 e7 95 74 1e f5 9e 7d 3a 31 ec df 41 5a 6f 33 f5 3a e0 dc 6d ae 36 88 a8 0b 5a c9 ca 49 3d 12 38 e7 38 3f a5 78 1f 56 f3 3f 4f c3 a7 b7 f4 8f 0e f9 1c f2 ba 12 d3 0d 2d a1 2a 29 e0 57 e7 fe 4e 5f 2e df Data Ascii: Q[$~rhRiO#$ARGJ@S^X'CP&"L<RCDZ9h[bT!5q2TG"0)'?Ws,ST;zS]lzZTmGRy476l87ec\n\lWyWb!I)t}:1AZo3:m6ZI=88?xV?O-*)WN_.
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 92 52 78 3d 6a f1 18 9a 59 21 32 6f d6 f5 38 90 12 16 ac 9f 6f 49 a9 9e fb 54 e9 b3 fe cb de 1b db 7c 4a f1 a2 34 0b 9a 94 ab 6c 77 c8 9a d9 e0 79 68 f5 10 af 82 52 13 fb d7 9d e6 f3 cc 5d 9e 3f 6e 91 fb 43 7d 9e a6 69 db ba b5 e6 99 b4 46 4d a9 d6 f6 3c c4 46 52 92 ce ce ae 10 90 06 d3 b8 63 d8 03 ec 4d 7c 8f d5 3e 5e 4c e9 f7 9f 48 f2 38 31 d3 52 c4 88 76 84 a7 8c 57 c9 72 ee 7b 7d 7e 17 73 a3 b8 51 94 80 36 8e 7b 9a c7 5d 3a 31 c4 e5 b6 76 a4 15 75 35 9d 6d 8c d3 21 c1 e2 a6 cd b7 c7 1d 3c 53 bd 28 93 45 b0 32 a4 29 4a 50 27 a7 02 aa 0b e8 b2 42 82 5b 27 35 71 96 d5 f9 73 16 e2 d4 95 1f d2 ae 4d 95 01 22 69 6d b5 73 83 4f e2 ca db b2 a3 25 4e b8 54 4f 15 72 a2 d2 bb 8c e6 c8 f2 52 4e 47 39 15 a6 13 6c f2 aa ed c2 59 52 8e e5 70 3b 57 4e 18 ed 8e 57 6a Data Ascii: Rx=jY!2o8oIT\|J4lwyhR]?nC}iFM<FRcM\|>^LH81RvWr{}~sQ6{]:1vu5m!<S(E2)JP'B['5qsM"imsO%NTOrRNG9lYRp;WNWj
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 53 34 ca 9f 74 29 0f 33 e5 e3 20 84 e4 1e 79 04 1c 11 d0 d7 9d fa 8e b5 5d d3 93 e3 dc 69 8f 19 be cc b1 50 99 5a b7 c3 f6 f0 a2 77 b9 6b 6d b5 1d ea e7 3e 50 19 c2 89 cf a7 81 fa 77 e4 f2 3c 59 e4 f7 1e ef 85 f5 8b 8f 55 a0 24 5a e5 d9 e5 b9 06 e5 09 f8 d2 59 3b 56 cb ed 94 2d 07 e4 1e 95 e3 79 1c 17 87 a7 d5 78 be 56 3c f1 91 50 c7 23 1e d5 c3 dd 76 7c a6 2c 14 e8 e8 05 55 9b 69 39 25 09 21 ed 9f ad 29 34 9d 94 49 94 a0 a2 3b 1e a6 9c 9b 3d ca 5d 26 6a 56 14 d8 39 fd ea a4 d1 52 67 94 02 8f 23 fb d6 98 cd 33 ca 94 cb 75 2a 24 03 9a 34 c3 2f 64 f7 09 2a 42 76 b7 81 5a e2 8c b2 28 92 b2 47 98 2b 6c 18 67 92 bb 74 90 42 89 2a c6 6b a3 09 b6 79 e5 22 83 aa ae a5 08 31 5b 5f de 38 39 39 e8 2b d2 e0 c5 e0 f9 de 4e ba 8a b3 48 20 e3 3c d7 a9 8f 51 e2 e5 7e 5d Data Ascii: S4t)3 y]iPZwkm>Pw<YU$ZY;V-yxV<P#v\|,Ui9%!)4I;=]&jV9Rg#3u$4/dBvZ(G+lgtB*ky"1[_899+NH <Q~]
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 96 b2 0e 14 39 c6 41 39 e7 af 4a db 2c 38 7c 99 dc ed d9 e3 79 7c be 37 7f 87 2f 6b ff 00 01 b5 b6 8f 61 eb b3 10 8c eb 4b 4f 38 84 ba d2 b7 ba 86 53 9c 38 e2 00 e0 1c 76 e3 f4 af 17 c9 fa 7e bf 8b e9 bc 3f ac e1 cb d5 6a c5 3c 53 93 8c e2 bc 9b c7 f1 7b 98 72 cc a6 f1 2e 93 2b 2a 3b 8d 47 e5 a7 c8 a2 e3 30 6c 3e 59 e7 bd 54 9b 39 6d 2a 2f 67 be 0d 3f 8a 72 b4 ba 5b e0 05 1c 9c 1e 95 51 95 c8 b2 43 ed 11 f8 ab 4c 53 69 45 c1 c0 13 b8 1c d6 b8 e3 b6 59 de 95 e9 f3 5c 09 57 6a d7 1e 1d b9 2e 7d a9 7a 8e f4 98 8c a9 d7 5c c1 e8 8f 93 5e 87 8d c1 2d 71 79 1c fa e9 af 56 f3 92 1e 53 ce 2c 95 28 e7 26 bd ac 78 a6 33 a7 cf f3 e5 f2 a2 59 19 ef 4f 5a 73 fe 05 34 d9 34 24 7b 2d fe 1e 3b 50 6f a3 c4 11 f1 5e 63 d2 62 b1 91 40 a1 dc 4f 34 e0 88 54 a2 91 9c d5 43 2a Data Ascii: 9A9J,8\|y\|7/kaKO8S8v~?j<S{r.+;G0l>YT9m/g?r[QCLSiEY\Wj.}z\^-qyVS,(&x3YOZs44${-;Po^cb@O4TC*
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: 5a ef c5 1f b3 f6 95 d5 da 7d 0f 68 9b 74 4b 6d d9 09 6d 88 a5 80 23 b2 50 16 9d e5 c0 91 ea c2 73 f2 49 c7 c8 db f4 9c 1e 44 db ab c5 fa a7 3f 8b 7b 73 0e be f0 3b c4 cd 0a fa 11 73 b2 99 ec 3e ea da 65 fb 70 53 e1 61 09 2a 52 b6 81 bd 20 01 d4 80 3e 6b c0 f2 be 99 71 bb 8f ab f1 3e ad c3 e4 46 ad 79 41 40 e3 a0 ae 5f b5 78 e7 6f 62 65 8e 73 78 96 3e f8 41 c0 e6 a3 7b 63 95 2e 9a f1 57 39 eb c5 56 35 17 22 99 44 0c 73 5a 44 65 4a 27 ca c2 08 c8 c6 33 5b e2 cf 3c ba 55 6e 77 10 12 a2 b5 84 81 c9 35 d9 c7 8e e3 83 93 39 8c 6b 0d 45 73 55 ce 76 d4 67 c8 6f f0 83 dc fb d7 b3 e3 f0 49 36 f0 7c 9e 7e ec 80 1a 46 4f 35 d3 7f a7 06 57 63 98 6c f0 31 9a 8d a4 c5 86 b8 19 4f f3 40 1e d3 44 01 e9 fe 69 07 d0 b7 ee 90 93 8d ce 62 bc ed 3d 28 8c 5d e1 1e 8e d3 f8 9b Data Ascii: Z}htKmm#PsID?{s;s>epSa*R >kq>FyA@_xobesx>A{c.W9V5"DsZDeJ'3[<Unw59kEsUvgoI6\|~FO5Wcl1O@Dib=(]
2024-10-14 12:20:25 UTC	1300	IN	Data Raw: f6 77 8e 0f 8f 3e cf 72 97 16 6c 37 12 d0 d8 54 7c 91 b4 2f 3e ff 00 a6 3f 9a 7f 29 58 e7 8d 86 17 2b 1d 9e e4 a7 66 4b 80 87 1d 7d 95 27 7a b8 4a 52 9e 83 e3 af eb 57 a9 a1 85 b3 a5 3d 9b 55 fa cb 0d 6b b6 3f 18 31 13 72 83 6e 05 b8 a0 d0 38 49 2a fd 8f 6a 5d e0 da 59 66 87 a7 54 5b ee f2 5b 89 25 f4 a0 b9 96 83 44 14 8f 56 30 49 50 ce e3 8e 87 9f d2 94 e7 fc 54 fd 9b 2e e5 69 ef 12 7e ca fa 2b 58 4d 99 72 d2 f7 37 6c b7 37 d2 d2 1b 6d b6 10 63 a8 8c a9 6b 52 73 92 54 0e 33 90 06 33 8f 7c 79 7c 79 cd 76 f4 f8 3e a3 cb e3 ce ef 4e 46 d6 fe 0c 78 b9 a1 5e 92 e6 a8 d1 ce a2 de d1 4f 91 3a 32 d2 f3 6f 25 47 09 3b 51 95 20 9e 3d 24 77 af 3b 9b c1 b3 d3 d7 f1 be ad c7 cf d5 6b f9 7b db 52 9a 75 0b 42 d1 c2 92 a1 82 0f b1 15 84 f1 ee 31 ea cc f1 cb b9 49 e7 af Data Ascii: w>rl7T\|/>?)X+fK}'zJRW=Uk?1rn8I*j]YfT[[%DV0IPT.i~+XMr7l7mckRsT33\|y\|yv>NFx^O:2o%G;Q =$w;k{RuB1I

Target ID:	0
Start time:	08:19:37
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:19:40
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1920,i,5304051130138597637,11614032298971796059,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:19:43
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://att-mail-987654.weebly.com/"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://att-mail-987654.weebly.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Windows Analysis Report
https://att-mail-987654.weebly.com/