Edit tour

Windows Analysis Report
http://ebaumsworld.com

Overview

General Information

Sample URL:	http://ebaumsworld.com
Analysis ID:	1574004
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Executes massive DNS lookups (> 100)

HTML page contains hidden javascript code

HTML page contains string obfuscation

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2184,i,8306864304609640449,17475142728878979676,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ebaumsworld.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-12T19:58:38.847808+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50491	172.64.150.63	443	TCP
2024-12-12T19:58:39.158080+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50490	35.204.158.49	443	TCP
2024-12-12T19:58:41.220588+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50554	54.169.228.246	443	TCP
2024-12-12T19:58:42.498821+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50597	8.214.60.171	443	TCP
2024-12-12T19:58:43.612315+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50685	188.42.196.115	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://ebaumsworld.com/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The provided URL 'ebaumsworld.com' does not match the legitimate domain for Facebook., Ebaumsworld.com is a known entertainment and humor website, not associated with Facebook., The presence of input fields for 'Username' and 'Password' on a non-Facebook domain is suspicious and indicative of phishing. DOM: 1.5.pages.csv

Source: https://ebaumsworld.com/

HTTP Parser: Base64 decoded: a_becff2bd-36e9-49b1-9587-cead54221e8f

Source: https://secure.adnxs.com/bounce?%2Fttj%3Fid%3D33376366%26cb%3D%255BCACHEBUSTER%255D	HTTP Parser: Found new string: script !function(){function e(e,t){return"function"==typeof __an_obj_extend_thunk?__an_obj_extend_thunk(e,t):e}function t(e,t){"function"==typeof __an_err_thunk&&__an_err_thunk(e,t)}function n(e,t){if("function"==typeof __an_redirect_thunk)__an_redirect_thunk(e);else{var n=navigator.connection;navigator.__an_connection&&(n=navigator.__an_connection),window==window.top&&n&&n.downlinkMax<=.115&&"function"==typeof HTMLIFrameElement&&HTMLIFrameElement.prototype.hasOwnProperty("srcdoc")?(window.__an_resize=function(e,t,n){var r=e.frameElement;r&&"__an_if"==r.getAttribute("name")&&(t&&(r.style.width=t+"px"),n&&(r.style.height=n+"px"))},document.write('<iframe name="__an_if" style="width:0;height:0" srcdoc="<script type=\'text/javascript\' src=\''+e+"&"+t.bdfif+"=1'></sc"),document.write('ript>" frameborder="0" scrolling="no" marginheight=0 marginwidth=0 topmargin="0" leftmargin="0" allowtransparency="true"></iframe>')):document.write('<script language="javascript" src="'+e+'"></scr'+'ipt>')}};var r=function(e){this.rdPara...
Source: https://secure.adnxs.com/ttj?ttjb=1&bdc=1734029911&bdh=D6L-FxmycQk5WMqFw29p7S_N2nA.&&bdref=https%3A%2F%2Febaumsworld.com%2F&bdtop=true&bdifs=1&bstk=https%3A%2F%2Febaumsworld.com%2F,https%3A%2F%2Febaumsworld.com%2F&&id=33376366&cb=%5BCACHEBUSTER%5D	HTTP Parser: Found new string: script document.write("<!-- Creative 538972469 served by Member 1922 via AppNexus. -->");try{document.write('<!-- BIDGENCY GROUP / Banner / 300x250 / Medium Rectangle --><ins class=\"aso-zone\" data-zone=\"119892\"></ins><script data-cfasync=\"false\" async src=\"https://media.bidgx.com/js/code.min.js\"><\/script><!-- /BIDGENCY GROUP -->');document.write('<iframe src="https://acdn.adnxs.com/dmp/async_usersync.html?gdpr=0&seller_id=1922&pub_id=2492628" width="1" height="1" frameborder="0" scrolling="no" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0" style="position:absolute;overflow:hidden;clip:rect(0 0 0 0);height:1px;width:1px;margin:-1px;padding:0;border:0;"></iframe>');document.write('<img src="https://ams3-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Febaumsworld.com%2F&e=wqT_3QKKC6CKBQAAAwDWAAUBCNzk7LoGEO3r_Lzv0v7mSxiyvObgx6v2pHgqNglmZgECCPY_EQEHNGZm9j8ZAAAAIFyP9j8hERIAKREJADERG7Aw7pD1DziCD0CCD0gCULWigIECWMmMrwFgAGi17NIBeIn3BYABAYoBA1VTRJIFBvBPmAGsAqAB-gGoAQGwAQC4AQLAAQTIAQLQAQDYAQDgAQDwAQCKA...

Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon
Source: https://ebaumsworld.com/	HTTP Parser: No favicon

Source: global traffic

DNS traffic detected: number of DNS queries: 204

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50491 -> 172.64.150.63:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50554 -> 54.169.228.246:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50490 -> 35.204.158.49:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50597 -> 8.214.60.171:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50685 -> 188.42.196.115:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.152
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.100
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ebaumsworld.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/desktop/mainLogo.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /img/presstart.gif HTTP/1.1Host: ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /img/desktop/mainLogo.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /img/presstart.gif HTTP/1.1Host: ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /img/desktop/navGradient.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /img/desktop/navIcons.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /img/desktop/mediaFeedIcons.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/11/033346/87633082/inventionsbig_(1).jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/11/045014/87633215/inventions-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/11/040330/87633175/n11r-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /v2kisuUII5WA-HR5P71C6bUydvMwfMPJVUj8XMXHj3S_hHFVlFTAc9kA HTTP/1.1Host: memorizematch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1657353.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/desktop/modalClose.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/10/034340/87645737/line-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /img/desktop/navGradient.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /img/desktop/mediaFeedIcons.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /img/desktop/navIcons.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/11/045014/87633215/inventions-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/11/040330/87633175/n11r-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/10/094405/87645339/sanra.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/09/024708/87644924/pawnshops-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/10/012528/87645535/randoms-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
Source: global traffic	HTTP traffic detected: GET /v2kisuUII5WA-HR5P71C6bUydvMwfMPJVUj8XMXHj3S_hHFVlFTAc9kA HTTP/1.1Host: memorizematch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1657353.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/11/033346/87633082/inventionsbig_(1).jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/desktop/modalClose.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/09/024708/87644924/pawnshops-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/10/034340/87645737/line-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/10/094405/87645339/sanra.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
Source: global traffic	HTTP traffic detected: GET /js/chartbeat.js HTTP/1.1Host: static.chartbeat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chartbeat_mab_image.js HTTP/1.1Host: static.chartbeat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /galleryplayer.js HTTP/1.1Host: literally-media.videoplayerhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87634625-1731533401.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87634957-1731604399.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
Source: global traffic	HTTP traffic detected: GET /static/blogherads.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk/12/122/1226456/26278/header.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/init-398c0g22ym0ukn3detw.js HTTP/1.1Host: api.b2c.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?h=literally-media&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87634955-1731590260.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
Source: global traffic	HTTP traffic detected: GET /static/blogherads.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk/12/122/1226456/26278/header.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87635471-1731638253.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87635273-1731618848.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87634957-1731604399.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87634625-1731533401.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /js/chartbeat.js HTTP/1.1Host: static.chartbeat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chartbeat_mab_image.js HTTP/1.1Host: static.chartbeat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/init-398c0g22ym0ukn3detw.js HTTP/1.1Host: api.b2c.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/desktop/paginationArrows.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?h=literally-media&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/09/053029/87645244/heistbig.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87634955-1731590260.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87635273-1731618848.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /thumbs/mediaavatar/87635471-1731638253.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /px.gif HTTP/1.1Host: bt.dns-finder.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/desktop/paginationArrows.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/12/095024/87646647/santa.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/11/030516/87646246/wow.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/09/011657/87644961/wow.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
Source: global traffic	HTTP traffic detected: GET /beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/09/053029/87645244/heistbig.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?c=17207 HTTP/1.1Host: id.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid/97371.8/0/prebid?adunitid=$rs_300x250_$ri HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/12/095024/87646647/santa.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/11/030516/87646246/wow.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=bd7138c8-df01-7346-84c9-ca1f86d2a58d#1734029855191#1
Source: global traffic	HTTP traffic detected: GET /px.gif HTTP/1.1Host: bt.dns-finder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/09/011657/87644961/wow.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D
Source: global traffic	HTTP traffic detected: GET /user/login/ HTTP/1.1Host: ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/html, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; pbjs-unifiedid=%7B%22TDID%22%3A%22463397e6-b0c8-4b21-89c4-302650a8da7e%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-12-12T18%3A57%3A35%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /img/desktop/loaderGlobe50YellowWhite.gif HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /wl?pubid=156500 HTTP/1.1Host: t.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/desktop/checkboxInner.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /img/desktop/socialSignInIcons.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/09/055424/87645255/beforewar-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/10/093625/87645337/Untitled-1.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/11/031836/87646374/shape.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/login/ HTTP/1.1Host: ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; pbjs-unifiedid=%7B%22TDID%22%3A%22463397e6-b0c8-4b21-89c4-302650a8da7e%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-12-12T18%3A57%3A35%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /skeleton.gif?service=ad&adid=zshsa&adnum=189994 HTTP/1.1Host: static.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid/97371.8/0/prebid?adunitid=$rs_300x250_$ri HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/desktop/loaderGlobe50YellowWhite.gif HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/11/125806/87646013/WOW.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/13/013050/87634329/comics1.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /img/desktop/socialSignInIcons.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/05/035257/87643946/randoms-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /img/desktop/checkboxInner.png HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/v2/429.json HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=bd7138c8-df01-7346-84c9-ca1f86d2a58d#1734029855191#2
Source: global traffic	HTTP traffic detected: GET /modules.675199526fcb21f102e5.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/01/09/043149/87494120/cringe.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/09/055424/87645255/beforewar-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /skeleton.gif?service=ad&adid=zshsa&adnum=189994 HTTP/1.1Host: static.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-vitals@3/dist/web-vitals.iife.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/lightbox_inline.js HTTP/1.1Host: www.lightboxcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/ta.js HTTP/1.1Host: static.trueanthem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quant.js HTTP/1.1Host: secure.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframes/topics.html HTTP/1.1Host: postrelease.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor=0f1b092d-51f4-424e-bbfb-294743129f31; status=0
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/11/040543/87633123/skylabbig.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/10/093625/87645337/Untitled-1.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/08/045032/87632310/1968big.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/11/125806/87646013/WOW.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /u/f3815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2 HTTP/1.1Host: eagerknight.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/19/110355/87637163/dirt1.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/11/031836/87646374/shape.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0
Source: global traffic	HTTP traffic detected: GET /7778/amp.min.js HTTP/1.1Host: amp.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /web-vitals@3.5.2/dist/web-vitals.iife.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/13/013050/87634329/comics1.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/21/120458/87638488/timing-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
Source: global traffic	HTTP traffic detected: GET /vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/lightbox_inline.js HTTP/1.1Host: www.lightboxcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/12/05/035257/87643946/randoms-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0
Source: global traffic	HTTP traffic detected: GET /scripts/ta.js HTTP/1.1Host: static.trueanthem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/01/09/043149/87494120/cringe.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
Source: global traffic	HTTP traffic detected: GET /f2815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2 HTTP/1.1Host: eagerknight.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.675199526fcb21f102e5.js HTTP/1.1Host: script.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/813.d750b07ac83d91f0d8a7.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /skeleton.js?ab=1&zoneid=9402702_advertisement_ HTTP/1.1Host: static.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quant.js HTTP/1.1Host: secure.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/11/040543/87633123/skylabbig.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/08/045032/87632310/1968big.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0&x=0&m=0&y=7256&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&i=Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World&tz=300&_acct=anon&sn=1&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/6141.f311ade597f0537989f7.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-vitals@3.5.2/dist/web-vitals.iife.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/19/110355/87637163/dirt1.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga=GA1.1.1729578817.1734029844; _ga_V5XPPXMJTV=GS1.1.1734029863.1.0.1734029863.0.0.0
Source: global traffic	HTTP traffic detected: GET /thumbs/2024/11/21/120458/87638488/timing-thumb.jpg HTTP/1.1Host: cdn.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga=GA1.1.1729578817.1734029844; _ga_V5XPPXMJTV=GS1.1.1734029863.1.0.1734029863.0.0.0
Source: global traffic	HTTP traffic detected: GET /7778/amp.min.js HTTP/1.1Host: amp.ebaumsworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga=GA1.1.1729578817.1734029844; _ga_V5XPPXMJTV=GS1.1.1734029863.1.0.1734029863.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/chunks/8214.2ec0d8bed4b94798df9a.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /skeleton.js?ab=1&zoneid=9402702_advertisement_ HTTP/1.1Host: static.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/813.d750b07ac83d91f0d8a7.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.5390128062672437 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0&x=0&m=0&y=7256&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&i=Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World&tz=300&_acct=anon&sn=1&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadetect/px.gif?ch=2&rn=13334&bannnerid=9270018_advertisement_ HTTP/1.1Host: merequartz.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/880446388736817?v=2.9.178&r=stable&domain=ebaumsworld.com&hme=28abfdc7e582ae2a8fdd6ac5ebb406923cf601dc2ee488049b0628e75e0f6b36&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/6141.f311ade597f0537989f7.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.11&x=0&m=0&y=8341&o=1263&w=907&j=45&R=1&W=0&I=0&E=6&e=6&r=&KK=1052::0::DK-aFXBjjVtrBlS5nTp79XnDkccNH::::c::https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F::MpRAaQkDuVBF4EvXCbKOJdB8WD3c::&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=2&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b?c1=2&c2=15131799&cs_it=b9&cv=4.11.0%2B2412060957&ns__t=1734029852183&ns_c=UTF-8&cs_cfg=1001110&c7=https%3A%2F%2Febaumsworld.com%2F&c8=Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadetect/px.gif?ch=1&rn=13334&bannnerid=9949940_advertisement_ HTTP/1.1Host: merequartz.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.5390128062672437 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js?hash=a756ea03bb910a61270a7e2713496aa4 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ebaumsworld.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Lfws0YoAAAAAPSMaeJp4OOhL_KqUbBJLq1Mq5Ih&_=1734029857139 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/8214.2ec0d8bed4b94798df9a.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/cookiedetection.html HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country?o=5720980854931456 HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv?tid=Wrde5SBE-GZuEnSt8k-93bc3bb78b&w=5721439678234624&o=5720980854931456&cv=2.1.66&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Febaumsworld.com%2F&sid=sZuH7lKhCL-uXvzm0xR-93bc3bb78b&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadetect/px.gif?ch=2&rn=13334&bannnerid=9270018_advertisement_ HTTP/1.1Host: merequartz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.11&x=0&m=0&y=8341&o=1263&w=907&j=45&R=1&W=0&I=0&E=6&e=6&r=&KK=1052::0::DK-aFXBjjVtrBlS5nTp79XnDkccNH::::c::https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F::MpRAaQkDuVBF4EvXCbKOJdB8WD3c::&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=2&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2?c1=2&c2=15131799&cs_it=b9&cv=4.11.0%2B2412060957&ns__t=1734029852183&ns_c=UTF-8&cs_cfg=1001110&c7=https%3A%2F%2Febaumsworld.com%2F&c8=Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=125241a5281f3163f3969c91734029868; XID=125241a5281f3163f3969c91734029868
Source: global traffic	HTTP traffic detected: GET /aadetect/px.gif?ch=1&rn=13334&bannnerid=9949940_advertisement_ HTTP/1.1Host: merequartz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/880446388736817?v=2.9.178&r=stable&domain=ebaumsworld.com&hme=28abfdc7e582ae2a8fdd6ac5ebb406923cf601dc2ee488049b0628e75e0f6b36&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country?o=5720980854931456 HTTP/1.1Host: api.btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Lfws0YoAAAAAPSMaeJp4OOhL_KqUbBJLq1Mq5Ih&_=1734029857139 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js?hash=a756ea03bb910a61270a7e2713496aa4 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/1257.996dda76dbecc94991f0.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /rules-p-byLmeZUvD2jyq.js HTTP/1.1Host: rules.quantcount.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/ta.c34341.js HTTP/1.1Host: static.trueanthem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/lightbox.js?mb=1734029863354&lv=1 HTTP/1.1Host: www.lightboxcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.25&x=0&m=0&y=9425&o=1263&w=907&j=30&R=1&W=0&I=0&E=15&e=9&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=3&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/1257.996dda76dbecc94991f0.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /scripts/ta.c34341.js HTTP/1.1Host: static.trueanthem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/lightbox.js?mb=1734029863354&lv=1 HTTP/1.1Host: www.lightboxcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.25&x=0&m=0&y=9425&o=1263&w=907&j=30&R=1&W=0&I=0&E=15&e=9&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=3&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8d18f0c3-5d57-46dc-87b9-bf5d4f1f3f71-web.js HTTP/1.1Host: cdn.permutive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules-p-byLmeZUvD2jyq.js HTTP/1.1Host: rules.quantcount.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/4056.d55507c9d13f2691685c.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/9707.305843b00fb0ac8dfc09.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/8685.56146c4fa4e07f711feb.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk-literallymedia-ebaumsworld/op.js HTTP/1.1Host: tagan.adlightning.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oPS.js?cid=21 HTTP/1.1Host: d15kdpgjg3unno.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/9438.eb71170d198296a6f84d.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/9265.8b71bd2e8f4ba6e966b2.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/cached/apstag.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/9707.305843b00fb0ac8dfc09.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/8685.56146c4fa4e07f711feb.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/4056.d55507c9d13f2691685c.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/4932.82adddbd6331dd03c641.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/6860.72064c7fb60700a504ef.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /iasPET.1.js HTTP/1.1Host: cdn.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk-literallymedia-ebaumsworld/op.js HTTP/1.1Host: tagan.adlightning.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oPS.js?cid=21 HTTP/1.1Host: d15kdpgjg3unno.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/1553.a6557582851c912d627c.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/992.49eb43434b6f7d152e95.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/9438.eb71170d198296a6f84d.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/9265.8b71bd2e8f4ba6e966b2.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/4953.c3bb67ce2fa0dc1d4372.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/cached/apstag.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /8d18f0c3-5d57-46dc-87b9-bf5d4f1f3f71-web.js HTTP/1.1Host: cdn.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.0/pxid?k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: 3d2fb0bd-52fc-4b75-aaf5-2d436c172540.prmutv.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /models/v2/8d18f0c3-5d57-46dc-87b9-bf5d4f1f3f71-models.bin HTTP/1.1Host: cdn.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.0/geoip?include=geo&include=isp&include=ip_hash&k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /standard-audiences/v1/affinity?url=https://ebaumsworld.com&k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/4932.82adddbd6331dd03c641.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/6860.72064c7fb60700a504ef.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /getuidj HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/1553.a6557582851c912d627c.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/4953.c3bb67ce2fa0dc1d4372.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /iasPET.1.js HTTP/1.1Host: cdn.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/992.49eb43434b6f7d152e95.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/9982.48c3aeabf331cdd3e530.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /v2.0/watson?k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /standard-audiences/v1/affinity?url=https://ebaumsworld.com&k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.0/geoip?include=geo&include=isp&include=ip_hash&k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /models/v2/8d18f0c3-5d57-46dc-87b9-bf5d4f1f3f71-models.bin HTTP/1.1Host: cdn.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/SMC-default-button-LIFESTYLE.png HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/9982.48c3aeabf331cdd3e530.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-CGRZHQ8KQD&gacid=1729578817.1734029844&gtm=45je4cb0v889303370za200&dma=0&gcs=G1--&gcd=13l3l3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485&z=237489234 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/YAC_AdMarker_Icon_Only_19x15.png HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/YAC_AdMarker_Icon_Text_77x15.png HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /adv/v4/segment?k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1.0/state?fetch_unseen=false&k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b?c1=2&c2=15476338&cs_it=b9&cv=4.11.0%2B2412060957&ns__t=1734029867380&ns_c=UTF-8&cs_cfg=1001110&c7=https%3A%2F%2Febaumsworld.com%2F&c8=Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=125241a5281f3163f3969c91734029868; XID=125241a5281f3163f3969c91734029868
Source: global traffic	HTTP traffic detected: GET /static/SMC-default-button-LIFESTYLE.png HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /v2.0/batch/events?enrich=false&sdkp=true&k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/YAC_AdMarker_Icon_Only_19x15.png HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/YAC_AdMarker_Icon_Text_77x15.png HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=PageView&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029868745&sw=1280&sh=1024&v=2.9.178&r=stable&ec=0&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=PageView&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029868745&sw=1280&sh=1024&v=2.9.178&r=stable&ec=0&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.0/batch/events?enrich=false&sdkp=true&k=26009fee-1ff1-493d-ae23-88df000d9627 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=PageView&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029868745&sw=1280&sh=1024&v=2.9.178&r=stable&ec=0&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=PageView&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029868745&sw=1280&sh=1024&v=2.9.178&r=stable&ec=0&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/user.js?cb=638651880840709765 HTTP/1.1Host: www.lightboxcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /sync?px=1&src=prebid& HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk-literallymedia-ebaumsworld/b-bde0e05-116e0fe4.js HTTP/1.1Host: tagan.adlightning.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel;r=1174221283;source=gtm;rf=0;a=p-byLmeZUvD2jyq;url=https%3A%2F%2Febaumsworld.com%2F;ns=0;ce=1;qjs=1;qv=6cdb9339-20241109062824;ref=;dst=1;et=1734029873117;tzo=300;ogl=;ses=8a046ca0-73d6-44ce-9d61-a103eef7141b;d=ebaumsworld.com;uht=2;fpan=1;fpa=P0-1915660039-1734029873121;pbc=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950;gdpr=0;mdl= HTTP/1.1Host: pixel.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk-literallymedia-ebaumsworld/bl-9d706ea-4be5ce79.js HTTP/1.1Host: tagan.adlightning.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202412090101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Lfws0YoAAAAAPSMaeJp4OOhL_KqUbBJLq1Mq5Ih&co=aHR0cHM6Ly9lYmF1bXN3b3JsZC5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=mpwin9tgt6nh HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/bootstrap.js HTTP/1.1Host: cdn.browsiprod.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?px=1&src=prebid&&ld=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.5&x=0&m=0&y=9664&o=1263&w=907&j=30&R=1&W=0&I=0&E=30&e=15&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=4&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel;r=1174221283;source=gtm;rf=0;a=p-byLmeZUvD2jyq;url=https%3A%2F%2Febaumsworld.com%2F;ns=0;ce=1;qjs=1;qv=6cdb9339-20241109062824;ref=;dst=1;et=1734029873117;tzo=300;ogl=;ses=8a046ca0-73d6-44ce-9d61-a103eef7141b;d=ebaumsworld.com;uht=2;fpan=1;fpa=P0-1915660039-1734029873121;pbc=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950;gdpr=0;mdl= HTTP/1.1Host: pixel.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=675b3242-67d67-a3d4d-ca283
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029878933&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=1&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk-literallymedia-ebaumsworld/b-bde0e05-116e0fe4.js HTTP/1.1Host: tagan.adlightning.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fb_lightbox.2.1.5.css?cb=637988260257525591 HTTP/1.1Host: www.lightboxcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/user.js?cb=638651880840709765 HTTP/1.1Host: www.lightboxcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029878933&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=1&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk-literallymedia-ebaumsworld/bl-9d706ea-4be5ce79.js HTTP/1.1Host: tagan.adlightning.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.5&x=0&m=0&y=9664&o=1263&w=907&j=30&R=1&W=0&I=0&E=30&e=15&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=4&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029878933&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=1&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202412090101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /bootstrap/bootstrap.js HTTP/1.1Host: cdn.browsiprod.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /supply/v5?sk=d_mapping&pk=shemedia&url=https%3A%2F%2Febaumsworld.com%2F&bid=hwJwnJPG%23iKqpEqPfrXZ&at=Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World&sw=1280&sh=1024&pvid=eb374a40-9cb1-49db-bc94-3685b246e86d HTTP/1.1Host: yield-manager.browsiprod.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029878933&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=1&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=463397e6-b0c8-4b21-89c4-302650a8da7e&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=PermutiveSegmentEntry&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029881868&cd[segment_id]=105086&sw=1280&sh=1024&v=2.9.178&r=stable&ec=2&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=PermutiveSegmentEntry&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029881868&cd[segment_id]=105086&sw=1280&sh=1024&v=2.9.178&r=stable&ec=2&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=PermutiveSegmentEntry_105086&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029881870&sw=1280&sh=1024&v=2.9.178&r=stable&ec=3&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/2253.b2f10c13a8ac4c9c1314.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/5341.c2ad6c81fa789c61d03f.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/3774.e15e05431286c62e4764.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=PermutiveSegmentEntry_105086&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029881870&sw=1280&sh=1024&v=2.9.178&r=stable&ec=3&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /397719490216/Test_oPS_Script_Loads?Action=SendMessage&MessageBody=cid%3D21%26bt%3Dnull HTTP/1.1Host: sqs.us-east-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/3298.e0e830ed6559909cbcfa.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=463397e6-b0c8-4b21-89c4-302650a8da7e&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lfws0YoAAAAAPSMaeJp4OOhL_KqUbBJLq1Mq5Ih&co=aHR0cHM6Ly9lYmF1bXN3b3JsZC5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=mpwin9tgt6nhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/FsaNIYyPN76i0sL7d3myIoFfjMDAw8eHc9AJuLUrm7A.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lfws0YoAAAAAPSMaeJp4OOhL_KqUbBJLq1Mq5Ih&co=aHR0cHM6Ly9lYmF1bXN3b3JsZC5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=mpwin9tgt6nhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/5341.c2ad6c81fa789c61d03f.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/1197.c7dc0182d872791c81f6.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/5765.8b2f620f1d992a6ed884.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/5450.deed8836db6a553566ae.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/3774.e15e05431286c62e4764.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/6767.30d6b51b118829e41be3.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/2253.b2f10c13a8ac4c9c1314.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=PermutiveSegmentEntry&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029881868&cd[segment_id]=105086&sw=1280&sh=1024&v=2.9.178&r=stable&ec=2&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/3298.e0e830ed6559909cbcfa.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/8603.e5247fc1ea359db85497.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=PermutiveSegmentEntry_105086&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029881870&sw=1280&sh=1024&v=2.9.178&r=stable&ec=3&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029886838&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=4&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/7822.e74ebdee413f0e491725.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=PermutiveSegmentEntry&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029881868&cd[segment_id]=105086&sw=1280&sh=1024&v=2.9.178&r=stable&ec=2&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=PermutiveSegmentEntry_105086&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029881870&sw=1280&sh=1024&v=2.9.178&r=stable&ec=3&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/5450.deed8836db6a553566ae.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/1197.c7dc0182d872791c81f6.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029886838&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=4&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z9g/t.gif?c=1734029891070&h=ebaumsworld.com&e=p&u=40857 HTTP/1.1Host: www.lightboxcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /static/chunks/4987.d7441382d9932b79f0d8.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/1290.48b98045a91e9e07bab5.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/6767.30d6b51b118829e41be3.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /js/bg/FsaNIYyPN76i0sL7d3myIoFfjMDAw8eHc9AJuLUrm7A.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029886838&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=4&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chunks/7822.e74ebdee413f0e491725.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/8603.e5247fc1ea359db85497.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/5765.8b2f620f1d992a6ed884.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /z9g/t.gif?c=1734029891070&h=ebaumsworld.com&e=p&u=40857 HTTP/1.1Host: www.lightboxcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /static/chunks/4987.d7441382d9932b79f0d8.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /static/chunks/1290.48b98045a91e9e07bab5.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.75&x=0&m=0&y=10096&o=1263&w=907&j=30&R=1&W=0&I=0&E=45&e=15&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=5&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029897815&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=5&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029886838&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=4&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/identity/envelope?pid=13252 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/pub?anId=930203&slot=%7Bid:skm-ad-medrec-1,ss:%5B300.250%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-frame2,ss:%5B728.90,468.60,320.50,300.50,970.90,970.66%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-flexbanner,ss:%5B728.90,970.250,970.90,300.250,970.66,320.50,300.50,728.250,250.250,468.60%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-flexrec-1,ss:%5B300.250,300.600,160.600,120.600,300.420,250.250,300.300%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-flexrec-2,ss:%5B300.250,300.600,160.600,120.600,300.420,250.250,300.300%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&wr=1280.907&sr=1280.1024&sessionId=57230d9d-0817-9d10-84b6-159d6d82f85a&url=https%253A%252F%252Febaumsworld.com%252F HTTP/1.1Host: pixel.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029897815&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=5&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/did-005o/any?duid=06bd33e61c8e--01jey3rz0d2nhn7eenrjpyfbzk&did=did-005o&cd=.ebaumsworld.com&resolve=nonId&resolve=bidswitch&resolve=fpid&resolve=index&resolve=magnite&resolve=medianet&resolve=openx&resolve=pubmatic&resolve=sovrn&resolve=thetradedesk&resolve=uid2 HTTP/1.1Host: idx.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admantx/service?request=%7B%22key%22%3A%22dcde31e32d21f5432ab192ee50f9e0a8ef294bab4778ada95dfabeb949b2b9ce%22%2C%22filter%22%3A%5B%22default%22%5D%2C%22method%22%3A%22descriptor%22%2C%22mode%22%3A%22async%22%2C%22type%22%3A%22url%22%2C%22body%22%3A%22https%253A%252F%252Febaumsworld.com%252F%22%7D HTTP/1.1Host: async01.admantx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy-sandbox/topics-api.html?debug=true?bidder=ix HTTP/1.1Host: cdn.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3161&u=https%3A%2F%2Febaumsworld.com%2F&pid=g2yGZZA7KvOOE&cb=0&ws=1280x907&v=24.1105.2150&t=1450&slots=%5B%7B%22sd%22%3A%22skm-ad-medrec-1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22mrec%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-frame2%22%2C%22s%22%3A%5B%22728x90%22%2C%22320x50%22%2C%22300x50%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22frame2wide%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-flexbanner%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x250%22%2C%22970x90%22%2C%22300x250%22%2C%22320x50%22%2C%22300x50%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22flxban%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-flexrec-1%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22flxrec%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-flexrec-2%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22flxrec%22%5D%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22domain%22%3A%22ebaumsworld.com%22%2C%22ext%22%3A%7B%22data%22%3A%7B%22id%22%3A%5B%5D%7D%7D%7D%7D%7D&schain=1.0%2C1%21pmc.com%2C1226456%2C1%2C%2C%2C&gpp_sid=%5B-1%5D&sm=5f53b222-53df-47c6-93d2-e45275fcf89f&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=3161&u=https%3A%2F%2Febaumsworld.com HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1734029901333&did=did-005o&se=e30&duid=06bd33e61c8e--01jey3rz0d2nhn7eenrjpyfbzk&tv=8.46.0&pu=https%3A%2F%2Febaumsworld.com%2F&wpn=prebid&cd=.ebaumsworld.com HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spk-public/topics_frame.html?bidder=undertone HTTP/1.1Host: creative-p.undertone.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.75&x=0&m=0&y=10096&o=1263&w=907&j=30&R=1&W=0&I=0&E=45&e=15&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=5&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029897815&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=5&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029897815&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=5&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/pub?anId=930203&slot=%7Bid:skm-ad-medrec-1,ss:%5B300.250%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-frame2,ss:%5B728.90,468.60,320.50,300.50,970.90,970.66%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-flexbanner,ss:%5B728.90,970.250,970.90,300.250,970.66,320.50,300.50,728.250,250.250,468.60%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-flexrec-1,ss:%5B300.250,300.600,160.600,120.600,300.420,250.250,300.300%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-flexrec-2,ss:%5B300.250,300.600,160.600,120.600,300.420,250.250,300.300%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&wr=1280.907&sr=1280.1024&sessionId=57230d9d-0817-9d10-84b6-159d6d82f85a&url=https%253A%252F%252Febaumsworld.com%252F HTTP/1.1Host: pixel.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1734029901333&did=did-005o&se=e30&duid=06bd33e61c8e--01jey3rz0d2nhn7eenrjpyfbzk&tv=8.46.0&pu=https%3A%2F%2Febaumsworld.com%2F&wpn=prebid&cd=.ebaumsworld.com&n3pc=true HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=2ebc6092-f740-4c84-89da-37455b084d31
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=332503237018129&correlator=209065999177394&eid=31089309%2C95345000&output=ldjh&gdfp_req=1&vrg=202412090101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&gpp_sid=-1&iu_parts=8352%3A1019017%2Ca.ebaumsworld%2Centertainment&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F2%2C%2F0%2F1%2F2%2C%2F0%2F1%2F2%2C%2F0%2F1%2F2&prev_iu_szs=300x250%2C728x90%7C468x60%7C320x50%7C300x50%7C970x90%7C970x66%2C728x90%7C970x250%7C970x90%7C300x250%7C970x66%7C320x50%7C300x50%7C728x250%7C250x250%7C468x60%2C300x250%7C300x600%7C160x600%7C120x600%7C300x420%7C250x250%7C300x300%2C300x250%7C300x600%7C160x600%7C120x600%7C300x420%7C250x250%7C300x300&ifi=1&didk=1488415045~1348359464~2502044765~730653794~730653793&sfv=1-0-40&sc=1&cookie_enabled=1&abxe=1&dt=1734029903265&lmt=1734029903&adxs=901%2C-12245933%2C55%2C901%2C844&adys=605%2C-12245933%2C1992%2C2239%2C5636&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C-1%7C1%7C2%7C3&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=1&url=https%3A%2F%2Febaumsworld.com%2F&vis=1&psz=412x250%7C1263x-1%7C825x118%7C412x250%7C300x250&msz=412x250%7C0x-1%7C728x50%7C412x250%7C300x250&fws=4%2C640%2C4%2C4%2C4&ohw=1263%2C0%2C825%2C1263%2C1263&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmFqUklieWlUTGotTzhzb2ZDQ3JEQ2kyanRrUWdTUmkwU1JFd3ZoZUhlYmJpRmZrMW9hYVR0MmpvYVRLR1RaY2NYARI0CgpwdWJjaWQub3JnEiQ2ZDRiYmE5Yi1lZGE2LTQwZmQtYWY1NS04Y2Y2ZjdkMmU5NTBYARI2CgxhZHNlcnZlci5vcmcSJDQ2MzM5N2U2LWIwYzgtNGIyMS04OWM0LTMwMjY1MGE4ZGE3ZVgBEhYKB2V1aWQuZXUY9YTy4bsySABSAghkEhgKCXlhaG9vLmNvbRj1hPLhuzJIAFICCGQSGQoKdWlkYXBpLmNvbRj1hPLhuzJIAFICCGQSJgoXcGVybXV0aXZlLXNlY3VyZS1zaWduYWwY9YTy4bsySABSAghk&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1734029836152&idt=56229&ppid=059e2ab8-ae24-4110-a5f5-5d3f58ea3423&prev_scp=divid%3Dskm-ad-medrec-1%26st%3Dmrec%26inview%3Dtrue%26loc%3D1%26impuuid%3D52b3a1b6-de43-42cd-bebd-3dfa54e61460%26inst%3D1%26stinst%3D1%26optimera%3DNULL%26id%3D0fd6b8ce-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cst%3Dframe2wide%26divid%3Dskm-ad-frame2%26close_control%3Denabled%26inview%3Dtrue%26loc%3Dsticky%26impuuid%3Dda3d9e27-8f2f-4b89-9d82-f36ed4c0758a%26inst%3Ds1%26stinst%3Ds1%26optimera%3DNULL%26id%3D0fd6b8cf-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cdivid%3Dskm-ad-flexbanner%26st%3Dflxban%26inview%3Dfalse%26loc%3D2%26impuuid%3D53edc0bc-8011-47b6-8157-13e218421d48%26inst%3D2%26stinst%3D1%26optimera%3DNULL%26id%3D0fd6b8d0-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cdivid%3Dskm-ad-flexrec-1%26st%3Dflxrec%26inview%3Dfalse%26loc%3D3%26impu
Source: global traffic	HTTP traffic detected: GET /admantx/service?request=%7B%22key%22%3A%22dcde31e32d21f5432ab192ee50f9e0a8ef294bab4778ada95dfabeb949b2b9ce%22%2C%22filter%22%3A%5B%22default%22%5D%2C%22method%22%3A%22descriptor%22%2C%22mode%22%3A%22async%22%2C%22type%22%3A%22url%22%2C%22body%22%3A%22https%253A%252F%252Febaumsworld.com%252F%22%7D HTTP/1.1Host: async01.admantx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=3161&u=https%3A%2F%2Febaumsworld.com HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-minuteMedia_rx_n-acuityads_n-MediaNet_ox-db5_cnv_n-smaato_n-undertone_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3161&u=https%3A%2F%2Febaumsworld.com%2F&pid=g2yGZZA7KvOOE&cb=0&ws=1280x907&v=24.1105.2150&t=1450&slots=%5B%7B%22sd%22%3A%22skm-ad-medrec-1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22mrec%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-frame2%22%2C%22s%22%3A%5B%22728x90%22%2C%22320x50%22%2C%22300x50%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22frame2wide%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-flexbanner%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x250%22%2C%22970x90%22%2C%22300x250%22%2C%22320x50%22%2C%22300x50%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22flxban%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-flexrec-1%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22flxrec%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-flexrec-2%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22flxrec%22%5D%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22domain%22%3A%22ebaumsworld.com%22%2C%22ext%22%3A%7B%22data%22%3A%7B%22id%22%3A%5B%5D%7D%7D%7D%7D%7D&schain=1.0%2C1%21pmc.com%2C1226456%2C1%2C%2C%2C&gpp_sid=%5B-1%5D&sm=5f53b222-53df-47c6-93d2-e45275fcf89f&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/pandg-sdk.js HTTP/1.1Host: pghub.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1734029901333&did=did-005o&se=e30&duid=06bd33e61c8e--01jey3rz0d2nhn7eenrjpyfbzk&tv=8.46.0&pu=https%3A%2F%2Febaumsworld.com%2F&wpn=prebid&cd=.ebaumsworld.com&n3pc=true HTTP/1.1Host: rp.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=2ebc6092-f740-4c84-89da-37455b084d31; lidid=2ebc6092-f740-4c84-89da-37455b084d31
Source: global traffic	HTTP traffic detected: GET /pagead/js/car.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveAccept: application/javascriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ats.js HTTP/1.1Host: ats.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-minuteMedia_rx_n-acuityads_n-MediaNet_ox-db5_cnv_n-smaato_n-undertone_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA\|t
Source: global traffic	HTTP traffic detected: GET /static/postbid.js HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /js/infolinks_main.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvXt0PlLxiR47QbrBIIVHSt5qfCSm22n9s9liRQ-c5paVoCa6rNURzWgRfOhTkJYm5ZZLsaxcVLJfgFYDougnpF7IuW5PQNjEYJICBDWA07uCKwDKPzboPg5yZ0qF3Ph6KYHteG4ZfFKTVGBBoxjGOIyAPKcp2HDb5diB5klMsBIqrP4WpAjKjZ74Z02QSw8w8JmDHfFH6-WXrK2ZKVAY-6K2P0H4PWm9xPncQQAtJJ_Ql1hWBb-x_V6u1pfK6Ng-ZuS33QKKtdyobO0lFU1lugGso0KqIWTEMVoG7oK8rdLzNeRxHo3W1aw5IokD6uY-yPPjyRYwxyNz-qis8SpOQOEfCyueaNLt26CiNGfxnGiaYsxrJAEWo42YzLcc2IixzH5okXG_V4tttjsU4hWN_dlf0NhfBAGxfjOKE79EFrmSvC_QBbsxteWA0&sai=AMfl-YSUIhvUcfnK66L-u0ZM5Kyxdy7BDECTy8CFChkUCDwcqx2oRPjjJx7FItnC0y8k1AJCDvMuw7FxCAHFs3rOUgA9Qa9qIbEmHDUCralRgk18g_21K1udiOyx8gCRTpptVLrmDghCDP3p75MugcIX&sig=Cg0ArKJSzPRYoXWauPUUEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /js/pandg-sdk.js HTTP/1.1Host: pghub.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?gdpr=0&referrer_url=&page_url=https%3A%2F%2Febaumsworld.com%2F&owner=P%26G&bp_id=penskemedia&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&initiator=js&data=%7B%22category%22%3A%22entertainment%22%7D HTTP/1.1Host: feed.pghub.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttj?id=33376366&cb=%5BCACHEBUSTER%5D HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvmmJ0LesMzOH1teAJofsseFd8ouczjYwbG8Jge4ZCCizD8ktssP-j9qGrgXRqg8JBUF5ArobVQylwzmxuiDGzrhoJ7_FfBxaB_8aLM_3umlUTrdblEYnRoatjZ1FmfSS31Uj7p5O8T2lAZnqB_GDfEkgUUTHU5uyj45DvWyOzQSxEcUaCc-VO6Twjjf8TFCWKXtsx_Y7NFZf90YbAZJMoKUdoaesRq52jD-4ccr7KsyZN3JZpW5EDZeWo_PZx4d7PfAsoWPXtFtNM8QUWB3A6COkhiWtcrzoluLl1U4MfqN_GZHcZ4ecr0FS6BHfVRvvGp5aKVS3LKMQ8VY_qBjk6yUXRt3JDXpnIJE-z4qxszhcqalQsmBhMtmtGd-Zo1g2AlDbywpn8eJ6oTzPv9hUdpC_p2CClQBY4fBw48DyynQ2LkalHTZD9b33WbWOBAMpEJuqE5-EpEsA&sai=AMfl-YT2fgyEJ_nbmJf17_Js-jstKwc5TE70-2FhgIQN5zOjU_EpSrE2BVap0nyYVOiDqTQd_O2OYzGmYMuA9Cr5RQnS7MZB_FiVOlf0tavJkwWhYi6Q0vsB8dmccryHqbFFBuqhpX5Q6jvjXqIyImz2&sig=Cg0ArKJSzEU187o3iqELEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=332503237018129&correlator=209065999177394&eid=31089309%2C95345000&output=ldjh&gdfp_req=1&vrg=202412090101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&gpp_sid=-1&iu_parts=8352%3A1019017%2Ca.ebaumsworld%2Centertainment&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F2%2C%2F0%2F1%2F2%2C%2F0%2F1%2F2%2C%2F0%2F1%2F2&prev_iu_szs=300x250%2C728x90%7C468x60%7C320x50%7C300x50%7C970x90%7C970x66%2C728x90%7C970x250%7C970x90%7C300x250%7C970x66%7C320x50%7C300x50%7C728x250%7C250x250%7C468x60%2C300x250%7C300x600%7C160x600%7C120x600%7C300x420%7C250x250%7C300x300%2C300x250%7C300x600%7C160x600%7C120x600%7C300x420%7C250x250%7C300x300&ifi=1&didk=1488415045~1348359464~2502044765~730653794~730653793&sfv=1-0-40&sc=1&cookie_enabled=1&abxe=1&dt=1734029903265&lmt=1734029903&adxs=901%2C-12245933%2C55%2C901%2C844&adys=605%2C-12245933%2C1992%2C2239%2C5636&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C-1%7C1%7C2%7C3&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=1&url=https%3A%2F%2Febaumsworld.com%2F&vis=1&psz=412x250%7C1263x-1%7C825x118%7C412x250%7C300x250&msz=412x250%7C0x-1%7C728x50%7C412x250%7C300x250&fws=4%2C640%2C4%2C4%2C4&ohw=1263%2C0%2C825%2C1263%2C1263&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmFqUklieWlUTGotTzhzb2ZDQ3JEQ2kyanRrUWdTUmkwU1JFd3ZoZUhlYmJpRmZrMW9hYVR0MmpvYVRLR1RaY2NYARI0CgpwdWJjaWQub3JnEiQ2ZDRiYmE5Yi1lZGE2LTQwZmQtYWY1NS04Y2Y2ZjdkMmU5NTBYARI2CgxhZHNlcnZlci5vcmcSJDQ2MzM5N2U2LWIwYzgtNGIyMS04OWM0LTMwMjY1MGE4ZGE3ZVgBEhYKB2V1aWQuZXUY9YTy4bsySABSAghkEhgKCXlhaG9vLmNvbRj1hPLhuzJIAFICCGQSGQoKdWlkYXBpLmNvbRj1hPLhuzJIAFICCGQSJgoXcGVybXV0aXZlLXNlY3VyZS1zaWduYWwY9YTy4bsySABSAghk&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1734029836152&idt=56229&ppid=059e2ab8-ae24-4110-a5f5-5d3f58ea3423&prev_scp=divid%3Dskm-ad-medrec-1%26st%3Dmrec%26inview%3Dtrue%26loc%3D1%26impuuid%3D52b3a1b6-de43-42cd-bebd-3dfa54e61460%26inst%3D1%26stinst%3D1%26optimera%3DNULL%26id%3D0fd6b8ce-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cst%3Dframe2wide%26divid%3Dskm-ad-frame2%26close_control%3Denabled%26inview%3Dtrue%26loc%3Dsticky%26impuuid%3Dda3d9e27-8f2f-4b89-9d82-f36ed4c0758a%26inst%3Ds1%26stinst%3Ds1%26optimera%3DNULL%26id%3D0fd6b8cf-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cdivid%3Dskm-ad-flexbanner%26st%3Dflxban%26inview%3Dfalse%26loc%3D2%26impuuid%3D53edc0bc-8011-47b6-8157-13e218421d48%26inst%3D2%26stinst%3D1%26optimera%3DNULL%26id%3D0fd6b8d0-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cdivid%3Dskm-ad-flexrec-1%26st%3Dflxrec%26inview%3Dfalse%26loc%3D3%26impu
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssblhTjRCh9zLg5ERpekQPrpL9VI4VCHcEd9x0P_iPMsMN2Sz4MWEG8bn5bQFLmIRq3YGyj1XfmpubRrfV-pv-wK4fhBv3zsV_tjCSkFx0yZ2KkmPLuX0SZGjdwx0tWOfDo4-wcmfrDXpRA8LhVbUR34_i-iFTKm3R6M9WBx46QRr0m-9dLuiwozu00-g1kTMOzmRtWURZMXddCU-j0zFFKOAgack5-4-P1xV8Bpcwhm5peJ_P9StGSpC7w-4pL5U-HZEakkFI4sNtDB2b2iScXg3w3j0z_BwDPL50Qsze5VRpN42PZAxHqfDt03Rog8gGrtI0KTn7je5i-_cRRuPiCkz7WTAmpQqOT6vQ7Ie-sTiDsusDOnQ910tufxI8r9Pn4iRGQ4H4tfryhCKPiQ2j50PE46-ABILciY6UM-YccgKnhoGwU7RPVxp6G9Jt7DuBOWSnucALOPw&sai=AMfl-YT-tb6Xh5FajeX4-yA2jh0egrWEA4JM5hANU8UumVOHr2oji-fJSNipxIZYnjq-ds9-AP3Yv149UMMMKY1plpfmu835P_S5_ZiNk5CAjkNswL-wY5XjjQw8GjSNUbNDLYn7dKBAYEtRopSNHvDD&sig=Cg0ArKJSzOAhMkksfYACEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuTlLFf8YSIkUqMgv7plpaDPQc0x7Hbsm9Nm_JqTH_ZTAEhXfpyLzCyJpVLupGikyD0IqoMyZc43adG8O6_S1xgR20_h1dQZXQ6BufdaBkemvZLM2idm8o-ZBG8Gp0SGUpJoWMW1kvalUJOy6yKV6xnyIQqVAT3qIj-LZHgeaW7dxGEmADDZm-JKBvsVg5GdTl3Z800QJCVwvgquRJfluEzLIxPnhX3VwVgKbeO6XskUNy2okTeHn-amzRyCDjxR9QtC5DxcvZXKwobHJC5zxyFtDStALdEqHgXN3D4caMyHbZ3v2QmnFoE_rxPN-5AMx6vTnW4mR20UnI8yAFayTfandSRjcbLtNjCep764dJcJXWHbL2ulKKAY1uq6zMXswPmxyNh0Zmpw-uvyYTW-BMWjP5tgPZklgaeD0436mpPRuqOWw&sai=AMfl-YQXgi06PasUP1c3KEQYKprAiDa6RQ9wbkRGJlVroDEGQPVK2nhjX-T8YKhx6vSsIoO38DWBaNNdJyQxEsk5GF4Zwj2LygME1ncGo_avAX8SWywvsV2MVJA0vyYWzyn_zq7XHSE9invXt9Qn1UHx&sig=Cg0ArKJSzElkmgFGKMJqEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjst_oDXvx7-UOK_zYK9S8-8ahuAjDcFWEYn3732SGBqhjQtIGNj2WN9QH4m11Svd5r0uqMEd2CCP56n9xJI1Ci436bD4Z7kchS3UY64QGic7drVixeOrZtW0KHP9qD941Ki9Dcr8bPJWyCIxYB32nXewJ3ycvA1q4licGx1TxmISjeAbeTC5Ght9xQI0xJZD8saeFcohwiT6tWtlxaqdgF3_GVt5PwqFb_i8HgfsjWNmllUInvUZk29KNoteZuLEppF2KTgq4MpP5Z_ALt9Nhck9dCuWQJ1-c6ASFp2yWvkDlah6i4ng3RHgBFzwmXOk6NH5yNM5fHuiu8YCJzYVBf4iGksksQl1DcKwcIdop-w3zrP5FdKGsHE9yUN3FBiQG0xs523X1NArnTLSNMzkryepLBKrLwAxaKUqANYLOrobk1-vAg&sai=AMfl-YTCyKqGOpE94FVJqdTAMIjaVG6NHy3nFEo0bu2tUamd5-mZmDZRqpbR3knqnJ-BdWBiHS3csfoMCKR-rU88JX3ZcWdiqNedikr1M6AnmhmsJh7J7VGe3GoLqe2_X9XiYrL9Ybncs1Y_J6LMf4B5&sig=Cg0ArKJSzEOyMTPCp4LOEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /s/v3/pr?exlist=gg_n-index_n-minuteMedia_rx_n-acuityads_n-MediaNet_ox-db5_cnv_n-smaato_n-undertone_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-minuteMedia_rx_n-acuityads_n-MediaNet_ox-db5_cnv_n-smaato_n-undertone_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&dcc=tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fttj%3Fid%3D33376366%26cb%3D%255BCACHEBUSTER%255D HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=gstd6YZsUy6B0nDOyOf_ike6FBxuPQSCkY9q4WSbc_uOgn9QmOx6einyrL9Lh8Y1MMQL17yvd_a-tOhQtgK5EfrLikX3muGnC1ql-SVYoOg.; receive-cookie-deprecation=1; uuid2=8667697949093502514
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?gdpr=0&referrer_url=&page_url=https%3A%2F%2Febaumsworld.com%2F&owner=P%26G&bp_id=penskemedia&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&initiator=js&data=%7B%22category%22%3A%22entertainment%22%7D HTTP/1.1Host: pandg.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync? HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgkIOhCMtPHhuzI=; tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /js/infolinks_main.js HTTP/1.1Host: resources.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvXt0PlLxiR47QbrBIIVHSt5qfCSm22n9s9liRQ-c5paVoCa6rNURzWgRfOhTkJYm5ZZLsaxcVLJfgFYDougnpF7IuW5PQNjEYJICBDWA07uCKwDKPzboPg5yZ0qF3Ph6KYHteG4ZfFKTVGBBoxjGOIyAPKcp2HDb5diB5klMsBIqrP4WpAjKjZ74Z02QSw8w8JmDHfFH6-WXrK2ZKVAY-6K2P0H4PWm9xPncQQAtJJ_Ql1hWBb-x_V6u1pfK6Ng-ZuS33QKKtdyobO0lFU1lugGso0KqIWTEMVoG7oK8rdLzNeRxHo3W1aw5IokD6uY-yPPjyRYwxyNz-qis8SpOQOEfCyueaNLt26CiNGfxnGiaYsxrJAEWo42YzLcc2IixzH5okXG_V4tttjsU4hWN_dlf0NhfBAGxfjOKE79EFrmSvC_QBbsxteWA0&sai=AMfl-YSUIhvUcfnK66L-u0ZM5Kyxdy7BDECTy8CFChkUCDwcqx2oRPjjJx7FItnC0y8k1AJCDvMuw7FxCAHFs3rOUgA9Qa9qIbEmHDUCralRgk18g_21K1udiOyx8gCRTpptVLrmDghCDP3p75MugcIX&sig=Cg0ArKJSzPRYoXWauPUUEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvmmJ0LesMzOH1teAJofsseFd8ouczjYwbG8Jge4ZCCizD8ktssP-j9qGrgXRqg8JBUF5ArobVQylwzmxuiDGzrhoJ7_FfBxaB_8aLM_3umlUTrdblEYnRoatjZ1FmfSS31Uj7p5O8T2lAZnqB_GDfEkgUUTHU5uyj45DvWyOzQSxEcUaCc-VO6Twjjf8TFCWKXtsx_Y7NFZf90YbAZJMoKUdoaesRq52jD-4ccr7KsyZN3JZpW5EDZeWo_PZx4d7PfAsoWPXtFtNM8QUWB3A6COkhiWtcrzoluLl1U4MfqN_GZHcZ4ecr0FS6BHfVRvvGp5aKVS3LKMQ8VY_qBjk6yUXRt3JDXpnIJE-z4qxszhcqalQsmBhMtmtGd-Zo1g2AlDbywpn8eJ6oTzPv9hUdpC_p2CClQBY4fBw48DyynQ2LkalHTZD9b33WbWOBAMpEJuqE5-EpEsA&sai=AMfl-YT2fgyEJ_nbmJf17_Js-jstKwc5TE70-2FhgIQN5zOjU_EpSrE2BVap0nyYVOiDqTQd_O2OYzGmYMuA9Cr5RQnS7MZB_FiVOlf0tavJkwWhYi6Q0vsB8dmccryHqbFFBuqhpX5Q6jvjXqIyImz2&sig=Cg0ArKJSzEU187o3iqELEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /sk/12/122/1226456/26278/boomerang.json HTTP/1.1Host: ads.blogherads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ats.js HTTP/1.1Host: ats.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssblhTjRCh9zLg5ERpekQPrpL9VI4VCHcEd9x0P_iPMsMN2Sz4MWEG8bn5bQFLmIRq3YGyj1XfmpubRrfV-pv-wK4fhBv3zsV_tjCSkFx0yZ2KkmPLuX0SZGjdwx0tWOfDo4-wcmfrDXpRA8LhVbUR34_i-iFTKm3R6M9WBx46QRr0m-9dLuiwozu00-g1kTMOzmRtWURZMXddCU-j0zFFKOAgack5-4-P1xV8Bpcwhm5peJ_P9StGSpC7w-4pL5U-HZEakkFI4sNtDB2b2iScXg3w3j0z_BwDPL50Qsze5VRpN42PZAxHqfDt03Rog8gGrtI0KTn7je5i-_cRRuPiCkz7WTAmpQqOT6vQ7Ie-sTiDsusDOnQ910tufxI8r9Pn4iRGQ4H4tfryhCKPiQ2j50PE46-ABILciY6UM-YccgKnhoGwU7RPVxp6G9Jt7DuBOWSnucALOPw&sai=AMfl-YT-tb6Xh5FajeX4-yA2jh0egrWEA4JM5hANU8UumVOHr2oji-fJSNipxIZYnjq-ds9-AP3Yv149UMMMKY1plpfmu835P_S5_ZiNk5CAjkNswL-wY5XjjQw8GjSNUbNDLYn7dKBAYEtRopSNHvDD&sig=Cg0ArKJSzOAhMkksfYACEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuTlLFf8YSIkUqMgv7plpaDPQc0x7Hbsm9Nm_JqTH_ZTAEhXfpyLzCyJpVLupGikyD0IqoMyZc43adG8O6_S1xgR20_h1dQZXQ6BufdaBkemvZLM2idm8o-ZBG8Gp0SGUpJoWMW1kvalUJOy6yKV6xnyIQqVAT3qIj-LZHgeaW7dxGEmADDZm-JKBvsVg5GdTl3Z800QJCVwvgquRJfluEzLIxPnhX3VwVgKbeO6XskUNy2okTeHn-amzRyCDjxR9QtC5DxcvZXKwobHJC5zxyFtDStALdEqHgXN3D4caMyHbZ3v2QmnFoE_rxPN-5AMx6vTnW4mR20UnI8yAFayTfandSRjcbLtNjCep764dJcJXWHbL2ulKKAY1uq6zMXswPmxyNh0Zmpw-uvyYTW-BMWjP5tgPZklgaeD0436mpPRuqOWw&sai=AMfl-YQXgi06PasUP1c3KEQYKprAiDa6RQ9wbkRGJlVroDEGQPVK2nhjX-T8YKhx6vSsIoO38DWBaNNdJyQxEsk5GF4Zwj2LygME1ncGo_avAX8SWywvsV2MVJA0vyYWzyn_zq7XHSE9invXt9Qn1UHx&sig=Cg0ArKJSzElkmgFGKMJqEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjst_oDXvx7-UOK_zYK9S8-8ahuAjDcFWEYn3732SGBqhjQtIGNj2WN9QH4m11Svd5r0uqMEd2CCP56n9xJI1Ci436bD4Z7kchS3UY64QGic7drVixeOrZtW0KHP9qD941Ki9Dcr8bPJWyCIxYB32nXewJ3ycvA1q4licGx1TxmISjeAbeTC5Ght9xQI0xJZD8saeFcohwiT6tWtlxaqdgF3_GVt5PwqFb_i8HgfsjWNmllUInvUZk29KNoteZuLEppF2KTgq4MpP5Z_ALt9Nhck9dCuWQJ1-c6ASFp2yWvkDlah6i4ng3RHgBFzwmXOk6NH5yNM5fHuiu8YCJzYVBf4iGksksQl1DcKwcIdop-w3zrP5FdKGsHE9yUN3FBiQG0xs523X1NArnTLSNMzkryepLBKrLwAxaKUqANYLOrobk1-vAg&sai=AMfl-YTCyKqGOpE94FVJqdTAMIjaVG6NHy3nFEo0bu2tUamd5-mZmDZRqpbR3knqnJ-BdWBiHS3csfoMCKR-rU88JX3ZcWdiqNedikr1M6AnmhmsJh7J7VGe3GoLqe2_X9XiYrL9Ybncs1Y_J6LMf4B5&sig=Cg0ArKJSzEOyMTPCp4LOEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /static/postbid.js HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pmc_3pc_test=true
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: collector.sheknows.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync?cs=31&type=tam&redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E&gdpr=0 HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=113&callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=aps&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttj?ttjb=1&bdc=1734029911&bdh=D6L-FxmycQk5WMqFw29p7S_N2nA.&&bdref=https%3A%2F%2Febaumsworld.com%2F&bdtop=true&bdifs=1&bstk=https%3A%2F%2Febaumsworld.com%2F,https%3A%2F%2Febaumsworld.com%2F&&id=33376366&cb=%5BCACHEBUSTER%5D HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=gstd6YZsUy6B0nDOyOf_ike6FBxuPQSCkY9q4WSbc_uOgn9QmOx6einyrL9Lh8Y1MMQL17yvd_a-tOhQtgK5EfrLikX3muGnC1ql-SVYoOg.; receive-cookie-deprecation=1; uuid2=8667697949093502514
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIgAIQ-c_y4bsyCgoIoQEQ-c_y4bsyCgoI4gEQ-c_y4bsyCgoI5gEQ-c_y4bsyCgoIhwIQ-c_y4bsyCgkIOhCMtPHhuzIKCQgbEPnP8uG7MgoKCIwCEPnP8uG7MgoKCKwCEPnP8uG7MgoKCK0CEPnP8uG7MgoJCF8Q-c_y4bsy; tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /usermatch?s=192259&cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D&gdpr=0 HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=amazon&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D&gdpr=0 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /usync/amzns2s?r=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync-iframe?redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dminutemedia.com%26id%3D%7BpartnerId%7D&gdpr=0 HTTP/1.1Host: cs-tam.minutemedia-prebid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jwumXNuB/v1/?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dsharethrough.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e1edfb9aa2a9066a203a7fce17c3a388.gif?puid=%5BUID%5D&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dacuity.com%26id%3D%5BUID%5D&gdpr=0 HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=wPDIkOpnLshxJJ7dVjhj
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0&s=192259&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1syWUt3uV4AAD8mAyHR3wAA; CMPS=134; CMPRO=134
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=media.net&id=3770315136406147000V10 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid=%24UID&ex=appnexus.com&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=gstd6YZsUy6B0nDOyOf_ike6FBxuPQSCkY9q4WSbc_uOgn9QmOx6einyrL9Lh8Y1MMQL17yvd_a-tOhQtgK5EfrLikX3muGnC1ql-SVYoOg.; receive-cookie-deprecation=1; uuid2=8667697949093502514
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=gstd6YZsUy6B0nDOyOf_ike6FBxuPQSCkY9q4WSbc_uOgn9QmOx6einyrL9Lh8Y1MMQL17yvd_a-tOhQtgK5EfrLikX3muGnC1ql-SVYoOg.; receive-cookie-deprecation=1; uuid2=8667697949093502514
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=smaato.com&id=667bd0550d HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sk/12/122/1226456/26278/boomerang.json HTTP/1.1Host: ads.blogherads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D&gdpr=0 HTTP/1.1Host: u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2c75c6df-f482-040b-2474-ba85e1598fb3\|1734029914
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: collector.sheknows.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html?gdpr=0&seller_id=1922&pub_id=2492628 HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=gstd6YZsUy6B0nDOyOf_ike6FBxuPQSCkY9q4WSbc_uOgn9QmOx6einyrL9Lh8Y1MMQL17yvd_a-tOhQtgK5EfrLikX3muGnC1ql-SVYoOg.; receive-cookie-deprecation=1; uuid2=8667697949093502514; anj=dTM7k!M4/8CxrEQF']wIg2GVPoR]po!]tbP6j2F-XstGt!@Dxa%!M@2; icu=ChkI1JGYARAKGAEgASgBMNnk7LoGOAFAAUgBENnk7LoGGAA.
Source: global traffic	HTTP traffic detected: GET /tamptsync?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dym.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: sync-amz.ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync-iframe?redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drise.com%26id%3D%7BpartnerId%7D&gdpr=0 HTTP/1.1Host: cs-tam.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=YV9iZWNmZjJiZC0zNmU5LTQ5YjEtOTU4Ny1jZWFkNTQyMjFlOGY=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e; TDCPM=CAESFgoHc3Z4OXQ1MBILCJSG2O2eus09EAUYASABKAIyCwiU_NqatbrNPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fttj%3Fid%3D33376366%26cb%3D%255BCACHEBUSTER%255D HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8667697949093502514; anj=dTM7k!M4/8CxrEQF']wIg2GVPoR]po!]tbP6j2F-XstGt!@Dxa%!M@2; icu=ChkI1JGYARAKGAEgASgBMNnk7LoGOAFAAUgBENnk7LoGGAA.
Source: global traffic	HTTP traffic detected: GET /ttj?ttjb=1&bdc=1734029911&bdh=D6L-FxmycQk5WMqFw29p7S_N2nA.&&bdref=https%3A%2F%2Febaumsworld.com%2F&bdtop=true&bdifs=1&bstk=https%3A%2F%2Febaumsworld.com%2F,https%3A%2F%2Febaumsworld.com%2F&&id=33376366&cb=%5BCACHEBUSTER%5D HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8667697949093502514; anj=dTM7k!M4/8CxrEQF']wIg2GVPoR]po!]tbP6j2F-XstGt!@Dxa%!M@2; icu=ChkI1JGYARAKGAEgASgBMNnk7LoGOAFAAUgBENnk7LoGGAA.
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/4369796837305261558219?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEEdLIZGLHC3iGhftgLq_jaI&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=a_becff2bd-36e9-49b1-9587-cead54221e8f&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=wPDIkOpnLshxJJ7dVjhj
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=a_becff2bd-36e9-49b1-9587-cead54221e8f&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2c75c6df-f482-040b-2474-ba85e1598fb3\|1734029914
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=amazon&zcc=1&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D&cb=1734029914259 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-868ee356-7ed9-4c12-ac3d-a7279d0daa66-004%22%2C%22zdxidn%22%3A%222069.5%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=gstd6YZsUy6B0nDOyOf_ike6FBxuPQSCkY9q4WSbc_uOgn9QmOx6einyrL9Lh8Y1MMQL17yvd_a-tOhQtgK5EfrLikX3muGnC1ql-SVYoOg.; receive-cookie-deprecation=1; uuid2=8667697949093502514; anj=dTM7k!M4/8CxrEQF']wIg2GVPoR]po!]tbP6j2F-XstGt!@Dxa%!M@2; icu=ChkI1JGYARAKGAEgASgBMNnk7LoGOAFAAUgBENnk7LoGGAA.
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM2OTc5NjgzNzMwNTI2MTU1ODIxOQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=acuity.com&id=67fbd801-4ce4-417c-bb61-e8d0370dba8c HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=de43f698-b087-4cfa-a322-6d71889422aa%252C%252C%25257B%252522architecture%252522%25253A%252522x86%252522%25252C%252522bitness%252522%25253A%25252264%252522%25252C%252522brands%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252BChrome%252522%25252C%252522version%252522%25253A%252522117%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Not%25253BA%25253DBrand%252522%25252C%252522version%252522%25253A%2525228%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522117%252522%25257D%25255D%25252C%252522fullVersionList%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252BChrome%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Not%25253BA%25253DBrand%252522%25252C%252522version%252522%25253A%2525228.0.0.0%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25255D%25252C%252522mobile%252522%25253Afalse%25252C%252522model%252522%25253A%252522%252522%25252C%252522platform%252522%25253A%252522Windows%252522%25252C%252522platformVersion%252522%25253A%25252210.0.0%252522%25257D&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pandg.tapad.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e; TDCPM=CAESFgoHc3Z4OXQ1MBILCJSG2O2eus09EAUYASABKAIyCwiU_NqatbrNPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?id=8667697949093502514&ex=appnexus.com&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=3lift.com&id=4369796837305261558219 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=sharethrough.com&id=768b25b1-f025-42cd-a103-3cf5d0de65cf HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://match.sharethrough.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM2OTc5NjgzNzMwNTI2MTU1ODIxOQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=openx.com&id=a70f85fb-41af-8006-beac-f0faed4d77ae&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?pubid=11556&gdpr=[GDPR]&gdpr_consent=[USER_CONSENT]&redirect=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21511%26id%3D%7Bdevice_id%7D HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=29975467-6f1b-4e06-b545-920b22ea49b2&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21477%26rid%3D3mXMQBzrCp_mm%26id%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2c75c6df-f482-040b-2474-ba85e1598fb3\|1734029914; pd=v2\|1734029915\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-VLn0dGNE2oRajtlDYLhqeZX5jFfnnV76f9vU6baf6w--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/sharethrough?gdpr=0&gdpr_consent= HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://match.sharethrough.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/indexexchange?gdpr=&userId=Z1syWUt3uV4AAD8mAyHR3wAA%26134&gpp=&gpp_sid=&us_privacy=&gdpr_consent= HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=60154350&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1syWUt3uV4AAD8mAyHR3wAA; CMPS=134; CMPRO=134
Source: global traffic	HTTP traffic detected: GET /ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21485%26puid%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=cnv.com&id=AQAJNBtViWmy5QII-ptBAQEBAQEBAQCSvT24QAEBAJK9PbhA&expiration=1734116316&is_secure=true&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=a70f85fb-41af-8006-beac-f0faed4d77ae HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=Z1syWUt3uV4AAD8mAyHR3wAAAIYAAAIB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=sharethrough_ob&gdpr=0&gdpr_consent=&google_hm=NzY4YjI1YjEtZjAyNS00MmNkLWExMDMtM2NmNWQwZGU2NWNm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://match.sharethrough.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&cmp_cs=&redir=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21480%26rid%3D3mXMQBzrCp_mm%26id%3D$UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=1922&pub_id=2492628&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=gstd6YZsUy6B0nDOyOf_ike6FBxuPQSCkY9q4WSbc_uOgn9QmOx6einyrL9Lh8Y1MMQL17yvd_a-tOhQtgK5EfrLikX3muGnC1ql-SVYoOg.; receive-cookie-deprecation=1; uuid2=8667697949093502514; anj=dTM7k!M4/8CxrEQF']wIg2GVPoR]po!]tbP6j2F-XstGt!@Dxa%!M@2; icu=ChkI1JGYARAKGAEgASgBMNnk7LoGOAFAAUgBENnk7LoGGAA.
Source: global traffic	HTTP traffic detected: GET /sync/openx/6b1e9fc2-cda9-a9b5-4f75-64987a297107?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=outbrain.com&id=wPDIkOpnLshxJJ7dVjhj&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usersync?b=ttd&i=463397e6-b0c8-4b21-89c4-302650a8da7e HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=a_becff2bd-36e9-49b1-9587-cead54221e8f
Source: global traffic	HTTP traffic detected: GET /getuid?https://ads.yieldmo.com/v000/sync?extinit=0&userid=$UID&pn_id=an HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync-amz.ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=gstd6YZsUy6B0nDOyOf_ike6FBxuPQSCkY9q4WSbc_uOgn9QmOx6einyrL9Lh8Y1MMQL17yvd_a-tOhQtgK5EfrLikX3muGnC1ql-SVYoOg.; receive-cookie-deprecation=1; uuid2=8667697949093502514; anj=dTM7k!M4/8CxrEQF']wIg2GVPoR]po!]tbP6j2F-XstGt!@Dxa%!M@2; icu=ChkI1JGYARAKGAEgASgBMNnk7LoGOAFAAUgBENnk7LoGGAA.
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21488%26id%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://match.sharethrough.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e; TDCPM=CAESFgoHc3Z4OXQ1MBILCJSG2O2eus09EAUYASABKAIyCwiqp83qtrrNPRAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=7vMC7Ltp1U6MGjSeCr3m_1734029917957; ts=1734029917
Source: global traffic	HTTP traffic detected: GET /i.match?p=b20&redirect=https%3A%2F%2Fdsum-sec.casalemedia.com/crum%3Fcm_dsp_id%3D131%26external_user_id%3D%24TF_USER_ID_ENC%24&cm_callback_url=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum&cm_user_id=Z1syWUt3uV4AAD8mAyHR3wAA HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191503&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D88fcad54-174f-479a-8606-01042ba419fe%26bidder%3Dindex_rtb%26uid%3D HTTP/1.1Host: ssum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1syWUt3uV4AAD8mAyHR3wAA; CMPS=134; CMPRO=134
Source: global traffic	HTTP traffic detected: GET /sync/prebid?gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D88fcad54-174f-479a-8606-01042ba419fe%26bidder%3Dopenx%26uid%3D%24%7BUID%7D HTTP/1.1Host: rtb.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2c75c6df-f482-040b-2474-ba85e1598fb3\|1734029914; pd=v2\|1734029915\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=ffd9f986-5d05-3bfc-7ea2-726d857ebc4e&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e; TDCPM=CAESFgoHc3Z4OXQ1MBILCJSG2O2eus09EAUYASABKAIyCwiqp83qtrrNPRAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /s/ix?cm_dsp_id=18&us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirectuser?r=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21495%26id%3D$UID&partner=minutemedia HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEEdLIZGLHC3iGhftgLq_jaI&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=4369796837305261558219; tluidp=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=gumgum2&user_id=a_becff2bd-36e9-49b1-9587-cead54221e8f&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=d1f078d7-4106-4d3c-a1a3-bf82aba94f25; c=1734029916; tuuid_lu=1734029916
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=lrhR-Xu2Vn5xeulD3h3wrAgue70 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=a_becff2bd-36e9-49b1-9587-cead54221e8f
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e; TDCPM=CAESFgoHc3Z4OXQ1MBILCJSG2O2eus09EAUYASABKAIyCwiqp83qtrrNPRAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /u?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D88fcad54-174f-479a-8606-01042ba419fe%26bidder%3Damx_com%26uid%3D HTTP/1.1Host: id.a-mx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?pid=fc4e1fcf-7b7a-41b5-a689-0f1570fe8fea&src=www&type=100&sid=0&uid=VzzqSppjjLpaWmdf6yhn&cb=1734029916174&url={{REFERRER}}&gdpr=0&gdpr_consent= HTTP/1.1Host: wt.rqtrk.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync-amz.ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=161683&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21482%26id%3D%23PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=ZDNiNjJhNGMtOTQ3Mi02NTU4LTZiNDItMjhkNDRmOWM3MjJl HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=adaptmx&user_id=88fcad54-174f-479a-8606-01042ba419fe&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=5926d422&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_d8cd577e4792481584284; CDIPARTNERS=%7B%221%22%3A%2220241212%22%7D
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&redir=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D88fcad54-174f-479a-8606-01042ba419fe%26bidder%3Dsovrn%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=media.net&id=3770315136406147000V10 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=smaato.com&id=667bd0550d HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usersync?b=sus&i=Z1syXsCo8G4AALonysUAAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=a_becff2bd-36e9-49b1-9587-cead54221e8f
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=08e45df6-7510-03aa-19d9-62804d2ebd08 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=a_becff2bd-36e9-49b1-9587-cead54221e8f
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=158355&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D88fcad54-174f-479a-8606-01042ba419fe%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=index&google_cm&google_hm=Z1syWUt3uV4AAD8mAyHR3wAAAIYAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=yieldmo&ttd_tpi=1&ttd_puid=VzzqSppjjLpaWmdf6yhn HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync-amz.ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e; TDCPM=CAESFgoHc3Z4OXQ1MBILCJSG2O2eus09EAUYASABKAIyCwiqp83qtrrNPRAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=$UID HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8667697949093502514; receive-cookie-deprecation=1; XANDR_PANID=q60yaAm9by1XF-K_eMu7NatYrblLUgllLrF6yJngETh8LZtUo3Be47hAAGd3QA5B5QgPEEyy89EZcummh5G0uQxuZCHcVaj4A83IXLw65C0.; anj=dTM7k!M4/8CxrEQF']wIg2GVPoR]po!]tb)8bhzs#DIgl#Xsfb[@qw7; icu=ChkI1JGYARAKGAIgAigCMNzk7LoGOAJAAkgCENzk7LoGGAE.
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=45&id=RX-868ee356-7ed9-4c12-ac3d-a7279d0daa66-004&rndcb=2933301344 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=JtUJ5pa4En8qHwNR-Ei2JvlOO07ZNEO1mfDHikKiv4c&pi=gumgum&tc=1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=a_becff2bd-36e9-49b1-9587-cead54221e8f
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=ym.com&id=VzzqSppjjLpaWmdf6yhn&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync-amz.ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=463397e6-b0c8-4b21-89c4-302650a8da7e&ttd_puid=de43f698-b087-4cfa-a322-6d71889422aa%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pandg.tapad.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734029911934; TapAd_DID=de43f698-b087-4cfa-a322-6d71889422aa
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=8667697949093502514 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=a_becff2bd-36e9-49b1-9587-cead54221e8f
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=rise.com&id=hLdMQo-9C HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11584%26uid%3D$UID HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VzzqSppjjLpaWmdf6yhn%7C1733961600000%7C0; re_sync=rc%3D1205027%7Ct%3D1205027%7Cdv360%3D1205027%7Can%3D1205027%7Croqad%3D1205027
Source: global traffic	HTTP traffic detected: GET /api/v1/event/timeout?aid=42332cec-0dad-43ef-9e49-fe985b69d0b3&ato=1500 HTTP/1.1Host: krk2.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-96b851f9-7bb6-567e-717a-e943de1df0ac$ip$8.46.123.189&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=sharethrough.com&id=768b25b1-f025-42cd-a103-3cf5d0de65cf HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cksync?cs=82&type=mim&gdpr={GDPR}&gdpr_consent={GDPR_CONSENT}&redirect=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21519%26id%3D%3Cvsid%3E HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3770315136406147000V10
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDd5Oy6BjABOgT87-jmQgTXurSm.%2F1IgSkxL%2BJmuNlF0Xy88V4eB%2BvSWHbP69zv3uHRjrYw; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDd5Oy6BjABOgT87-jmQgTXurSm.%2F1IgSkxL%2BJmuNlF0Xy88V4eB%2BvSWHbP69zv3uHRjrYw
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDd5Oy6BjABOgT87-jmQgTXurSm.%2F1IgSkxL%2BJmuNlF0Xy88V4eB%2BvSWHbP69zv3uHRjrYw; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDd5Oy6BjABOgT87-jmQgTXurSm.%2F1IgSkxL%2BJmuNlF0Xy88V4eB%2BvSWHbP69zv3uHRjrYw
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=openx.com&id=a70f85fb-41af-8006-beac-f0faed4d77ae&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=index.com&id=Z1syWUt3uV4AAD8mAyHR3wAAAIYAAAIB HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J0hSAPZHDhSIilqWR42drw9X
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=rise HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=463397e6-b0c8-4b21-89c4-302650a8da7e&expiration=1736621918&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1syWUt3uV4AAD8mAyHR3wAA; CMPS=134; CMPRO=134
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=463397e6-b0c8-4b21-89c4-302650a8da7e&ttd_puid=ffd9f986-5d05-3bfc-7ea2-726d857ebc4e&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2c75c6df-f482-040b-2474-ba85e1598fb3\|1734029914; pd=v2\|1734029915\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /xuid?mid=6732&dongle=38F&xuid=AQAGray6xeuwNgJTAFliAQEBAQEBAQCSvT2-dAEBAJK9Pb50&expiration=1734116318&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4369796837305261558219; tluid=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yieldmo_dbm&google_hm=Vnp6cVNwcGpqTHBhV21kZjZ5aG4= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync-amz.ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-VLn0dGNE2oRajtlDYLhqeZX5jFfnnV76f9vU6baf6w--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=4369796837305261558219; tluidp=4369796837305261558219
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=a70f85fb-41af-8006-beac-f0faed4d77ae HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=Z1syWUt3uV4AAD8mAyHR3wAAAIYAAAIB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /21/ebaumsworld.com/.js HTTP/1.1Host: dyv1bugovvq1g.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=Z1syWUt3uV4AAD8mAyHR3wAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkGt4XmL_bT3PCe1KlPiMdJKo1PKbJat2tb0DGxYeL34y5R1kifuRDuFVruiuM
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1--- HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /configs/3161 HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwJF0ZJROkgunwFONHV2lIA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D6%26r%3DCid1YS1kNDQwMTNkZC1lMzM5LTNkYWEtODg5Ni1iZDhiZDE1MzMzMDYqWWh0dHBzOi8vY3MubWludXRlbWVkaWEtcHJlYmlkLmNvbS9jcz9haWQ9MjE0OTUmaWQ9dWEtZDQ0MDEzZGQtZTMzOS0zZGFhLTg4OTYtYmQ4YmQxNTMzMzA2MgIGDDgB%26buyeruid%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=88fcad54-174f-479a-8606-01042ba419fe; pamuid2=88fcad54-174f-479a-8606-01042ba419fe; psd_amuid2=88fcad54-174f-479a-8606-01042ba419fe; sd_amuid2=88fcad54-174f-479a-8606-01042ba419fe

Source: chromecache_332.2.dr, chromecache_305.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_257.2.dr, chromecache_421.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Bk:function(){e=nb()},Dd:function(){d()}}};var Vb=xa(["data-gtm-yt-inspected-"]),OD=["www.youtube.com","www.youtube-nocookie.com"],PD,QD=!1; equals www.youtube.com (Youtube)
Source: chromecache_257.2.dr, chromecache_421.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=uB(a,c,e);U(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return U(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},xB=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_257.2.dr, chromecache_421.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Gh:e,Eh:f,Fh:g,ji:k,ki:m,Ue:n,Jb:b},q=B.YT;if(q)return q.ready&&q.ready(d),b;var r=B.onYouTubeIframeAPIReady;B.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(ZD(w,"iframe_api")\|\|ZD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!QD&&XD(x[A],p.Ue))return mc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_288.2.dr, chromecache_513.2.dr, chromecache_356.2.dr, chromecache_556.2.dr	String found in binary or memory: return b}MD.F="internal.enableAutoEventOnTimer";var Vb=xa(["data-gtm-yt-inspected-"]),OD=["www.youtube.com","www.youtube-nocookie.com"],PD,QD=!1; equals www.youtube.com (Youtube)
Source: chromecache_294.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_294.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_294.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_257.2.dr, chromecache_421.2.dr	String found in binary or memory: var aD=function(a,b,c,d,e){var f=SA("fsl",c?"nv.mwt":"mwt",0),g;g=c?SA("fsl","nv.ids",[]):SA("fsl","ids",[]);if(!g.length)return!0;var k=XA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Dz(k,Fz(b, equals www.facebook.com (Facebook)
Source: chromecache_332.2.dr, chromecache_305.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (__fb_err) {var __fb_i = new Image();__fb_i.crossOrigin = 'anonymous';__fb_i.dataset.testid = 'fbSDKErrorReport';__fb_i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+__fb_err.name+'","line":"'+(__fb_err.lineNumber\|\|__fb_err.line)+'","script":"'+(__fb_err.fileName\|\|__fb_err.sourceURL\|\|__fb_err.script\|\|"sdk.js")+'","stack":"'+(__fb_err.stackTrace\|\|__fb_err.stack)+'","revision":"1018821596","namespace":"FB","message":"'+__fb_err.message+'"}}');document.body.appendChild(__fb_i);} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ebaumsworld.com
Source: global traffic	DNS traffic detected: DNS query: cdn.ebaumsworld.com
Source: global traffic	DNS traffic detected: DNS query: s.ntv.io
Source: global traffic	DNS traffic detected: DNS query: z-na.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: memorizematch.com
Source: global traffic	DNS traffic detected: DNS query: static.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: sdk.mrf.io
Source: global traffic	DNS traffic detected: DNS query: static.chartbeat.com
Source: global traffic	DNS traffic detected: DNS query: ads.blogherads.com
Source: global traffic	DNS traffic detected: DNS query: literally-media.videoplayerhub.com
Source: global traffic	DNS traffic detected: DNS query: api.b2c.com
Source: global traffic	DNS traffic detected: DNS query: btloader.com
Source: global traffic	DNS traffic detected: DNS query: mab.chartbeat.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: bt.dns-finder.com
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: id.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: t.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: aax.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: lb.eu-1-id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: eagerknight.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: secure.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: amp.ebaumsworld.com
Source: global traffic	DNS traffic detected: DNS query: www.lightboxcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.speedcurve.com
Source: global traffic	DNS traffic detected: DNS query: static.trueanthem.com
Source: global traffic	DNS traffic detected: DNS query: postrelease.com
Source: global traffic	DNS traffic detected: DNS query: ping.chartbeat.net
Source: global traffic	DNS traffic detected: DNS query: ad-delivery.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: merequartz.com
Source: global traffic	DNS traffic detected: DNS query: pubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads4.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: b.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: pghub.io
Source: global traffic	DNS traffic detected: DNS query: pandg.tapad.com
Source: global traffic	DNS traffic detected: DNS query: api.btloader.com
Source: global traffic	DNS traffic detected: DNS query: rules.quantcount.com
Source: global traffic	DNS traffic detected: DNS query: tlx.3lift.com
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: d15kdpgjg3unno.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: tagan.adlightning.com
Source: global traffic	DNS traffic detected: DNS query: cdn.permutive.com
Source: global traffic	DNS traffic detected: DNS query: cdn.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: 3d2fb0bd-52fc-4b75-aaf5-2d436c172540.prmutv.co
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: api.permutive.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: ntvcld-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: pixel.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: cdn.browsiprod.com
Source: global traffic	DNS traffic detected: DNS query: events.browsiprod.com
Source: global traffic	DNS traffic detected: DNS query: yield-manager.browsiprod.com
Source: global traffic	DNS traffic detected: DNS query: sqs.us-east-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: lightboxapi.azurewebsites.net
Source: global traffic	DNS traffic detected: DNS query: pixel.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: api.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: idx.liadm.com
Source: global traffic	DNS traffic detected: DNS query: async01.admantx.com
Source: global traffic	DNS traffic detected: DNS query: rp.liadm.com
Source: global traffic	DNS traffic detected: DNS query: prebid-server.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cdn.indexww.com
Source: global traffic	DNS traffic detected: DNS query: creative-p.undertone.com
Source: global traffic	DNS traffic detected: DNS query: prebid.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: krk2.kargo.com
Source: global traffic	DNS traffic detected: DNS query: htlb.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: g2.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: bidder.criteo.com
Source: global traffic	DNS traffic detected: DNS query: a.teads.tv
Source: global traffic	DNS traffic detected: DNS query: fastlane.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: 1x1.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: collector.sheknows.com
Source: global traffic	DNS traffic detected: DNS query: ats.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: resources.infolinks.com
Source: global traffic	DNS traffic detected: DNS query: feed.pghub.io
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: js-sec.indexww.com
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: geo.privacymanager.io
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io

Source: unknown

HTTP traffic detected: POST /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveContent-Length: 330sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://ebaumsworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebaumsworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 12 Dec 2024 18:58:03 GMTContent-Type: text/plain;charset=utf-8Server: PermutiveContent-Length: 9Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 12 Dec 2024 18:58:05 GMTContent-Type: text/plain;charset=utf-8Server: PermutiveContent-Length: 9Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 12 Dec 2024 18:58:05 GMTContent-Type: text/plain;charset=utf-8Content-Length: 9Server: Jetty(9.4.53.v20231009)Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 12 Dec 2024 18:58:06 GMTContent-Type: text/plain;charset=utf-8Server: PermutiveContent-Length: 9Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 12 Dec 2024 18:58:08 GMTContent-Type: text/plain;charset=utf-8Server: PermutiveContent-Length: 9Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 12 Dec 2024 18:58:33 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 12 Dec 2024 18:58:36 GMTContent-Length: 0Connection: close

Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: http://pieroxy.net/blog/pages/lz-string/testing.html
Source: chromecache_320.2.dr	String found in binary or memory: http://queue.amazonaws.com/doc/2012-11-05/
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: http://stackoverflow.com/questions/2504071/is-it-possible-to-combine-a-background-image-and-css3-gra
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: http://stackoverflow.com/questions/8253136/how-to-get-domain-name-only-using-javascript
Source: chromecache_580.2.dr, chromecache_273.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_580.2.dr, chromecache_273.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: http://www.wtfpl.net/
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://a.teads.tv/hb/bid-request
Source: chromecache_538.2.dr, chromecache_477.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-minuteMedi
Source: chromecache_421.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_407.2.dr, chromecache_391.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_288.2.dr, chromecache_257.2.dr, chromecache_513.2.dr, chromecache_356.2.dr, chromecache_556.2.dr, chromecache_421.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_264.2.dr, chromecache_461.2.dr	String found in binary or memory: https://cdn.browsiprod.com/bootstrap/bootstrap.js
Source: chromecache_299.2.dr, chromecache_399.2.dr	String found in binary or memory: https://cdn.hadronid.net/hadron.js
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://cdn.undertone.com/js/usersync.html
Source: chromecache_259.2.dr, chromecache_274.2.dr	String found in binary or memory: https://chartbeat.com
Source: chromecache_259.2.dr, chromecache_274.2.dr	String found in binary or memory: https://chartbeat.com/publishing/hud2/versioninfo/?host=
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_550.2.dr, chromecache_294.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_550.2.dr, chromecache_294.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Math/random
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://deviceatlas.com/device-data/explorer/#defined_property_values/19/4751724
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://e.serverbid.com/api/v2
Source: chromecache_569.2.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://exchange.postrelease.com/prebid
Source: chromecache_569.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://github.com/jaubourg/jquery-jsonp
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://github.com/joemingna/exit-intent-plugin/blob/master/js/exitPlugin.js
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://hb.undertone.com/hb
Source: chromecache_332.2.dr, chromecache_305.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: chromecache_370.2.dr, chromecache_301.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://jsapi-dev.lightboxcdn.com/Event/RedirectProxy?eplz=
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://jsapi.lightboxcdn.com/Event/RedirectProxy?eplz=
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://lgev.lightboxcdn.com/Keen/LgEv?u=
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://lightbox.blob.core.windows.net/static/jquery_selector_generator_close_btn.png
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://lightboxsubmit.azurewebsites.net/PostUpREST/UpdateRecipient?integration_id=
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://lightboxsubmit.azurewebsites.net/PostUpREST/UpdateUUID
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://lockerdome.com/ladbid/prebid
Source: chromecache_421.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_288.2.dr, chromecache_257.2.dr, chromecache_513.2.dr, chromecache_356.2.dr, chromecache_556.2.dr, chromecache_421.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_358.2.dr, chromecache_253.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=urind
Source: chromecache_358.2.dr, chromecache_253.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_526.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_332.2.dr, chromecache_305.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: chromecache_483.2.dr, chromecache_389.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_536.2.dr	String found in binary or memory: https://robbreport.winesavage.com/
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://robert.lightboxcdn.com/Keen/PostToKeenR2
Source: chromecache_365.2.dr	String found in binary or memory: https://s3.lightboxcdn.com/vendors/
Source: chromecache_288.2.dr, chromecache_356.2.dr	String found in binary or memory: https://secure.quantserve.com/quant.js
Source: chromecache_569.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_569.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_370.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_259.2.dr, chromecache_274.2.dr	String found in binary or memory: https://static.chartbeat.com/js/inpage.js
Source: chromecache_259.2.dr, chromecache_274.2.dr	String found in binary or memory: https://static2.chartbeat.com/frontend_ng/hud/hud-inpage/hud-inpage-
Source: chromecache_257.2.dr, chromecache_513.2.dr, chromecache_556.2.dr, chromecache_421.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_391.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://submit.lightboxcdn.com/Keen/PostToKeen2
Source: chromecache_362.2.dr, chromecache_365.2.dr	String found in binary or memory: https://submitcus.lightboxcdn.com/Keen/PostToKeen3
Source: chromecache_526.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://sync.serverbid.com/ss/
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://tag.1rx.io/rmp/
Source: chromecache_407.2.dr, chromecache_391.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_299.2.dr, chromecache_399.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://targeting.unrulymedia.com/unruly_prebid
Source: chromecache_288.2.dr, chromecache_257.2.dr, chromecache_513.2.dr, chromecache_356.2.dr, chromecache_556.2.dr, chromecache_421.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://udmserve.net/udm/img.fetch
Source: chromecache_356.2.dr	String found in binary or memory: https://unpkg.com/web-vitals
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://usr.undertone.com/userPixel/syncOne?id=1&of=2
Source: chromecache_534.2.dr, chromecache_296.2.dr	String found in binary or memory: https://usr.undertone.com/userPixel/syncOne?id=2&of=2
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/feature/black-branding-experts-7537/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/living/history-q-a-julie-des-jardins-31037/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/money/a-fair-race-fahad-khawaja-28664/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/money/a-fair-race-kendra-bracken-ferguson-28668/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/money/a-look-into-employee-resource-groups-28755/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/money/creating-workplaces-for-women-in-stem-30264/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/money/helping-employees-with-anxiety-28676/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/money/how-to-be-an-ally-in-the-workplace-24346/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/money/its-just-who-i-am-gender-expression-and-identity-28805/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/money/measuring-inclusion-silke-muenster-alexander-fleischmann-28736/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/money/normalizing-mental-health-in-the-workplace-28673/
Source: chromecache_536.2.dr	String found in binary or memory: https://www.blogher.com/sf/inclusive-future-pmi/
Source: chromecache_407.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_407.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_407.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_421.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_407.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr, chromecache_339.2.dr, chromecache_548.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_288.2.dr, chromecache_257.2.dr, chromecache_513.2.dr, chromecache_356.2.dr, chromecache_556.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_421.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_407.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.
Source: chromecache_321.2.dr, chromecache_398.2.dr, chromecache_339.2.dr, chromecache_548.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Source: chromecache_332.2.dr, chromecache_305.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_365.2.dr	String found in binary or memory: https://www.lightboxcdn.com
Source: chromecache_365.2.dr	String found in binary or memory: https://www.lightboxcdn.com/lclst/
Source: chromecache_257.2.dr, chromecache_513.2.dr, chromecache_556.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_416.2.dr, chromecache_376.2.dr	String found in binary or memory: https://www.quantcast.com/legal/license
Source: chromecache_257.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50857
Source: unknown	Network traffic detected: HTTP traffic on port 50749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 50601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 50555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50408
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50811
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50815
Source: unknown	Network traffic detected: HTTP traffic on port 50819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50827

Source: classification engine

Classification label: mal48.phis.win@48/484@668/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2184,i,8306864304609640449,17475142728878979676,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ebaumsworld.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2184,i,8306864304609640449,17475142728878979676,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://ebaumsworld.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://lgev.lightboxcdn.com/Keen/LgEv?u=	0%	Avira URL Cloud	safe
https://dyv1bugovvq1g.cloudfront.net/21/ebaumsworld.com/.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
z.ssl.fastly.net	199.232.193.131	true	false	high
securepubads.g.doubleclick.net	172.217.19.162	true	false	high
pugm-sin12.pubmnet.com	207.65.33.83	true	false	high
um.simpli.fi	35.204.158.49	true	false	high
static.nl3.vip.prod.criteo.net	178.250.1.3	true	false	high
d3tqyidpuy80xi.cloudfront.net	52.222.144.6	true	false	unknown
global.px.quantserve.com	91.228.74.166	true	false	high
sqs.us-east-1.amazonaws.com	3.239.232.41	true	false	high
ssum.casalemedia.com	104.18.26.193	true	false	high
id5-sync.com	162.19.138.116	true	false	high
cs.admanmedia.com	80.77.87.163	true	false	high
rtb.openx.net	35.227.252.103	true	false	high
stats.g.doubleclick.net	74.125.71.154	true	false	high
pandg.tapad.com	34.102.243.38	true	false	high
geo.privacymanager.io	13.226.2.102	true	false	high
syncelb-1292340544.ap-southeast-1.elb.amazonaws.com	52.76.241.35	true	false	high
cdn.hadronid.net	104.22.52.173	true	false	high
www.google.com	172.217.19.228	true	false	high
lb.eu-1-id5-sync.com	162.19.138.118	true	false	high
events.browsiprod.com	44.239.189.129	true	false	high
bcp.crwdcntrl.net	52.76.92.93	true	false	high
match.adsrvr.org	3.33.220.150	true	false	high
match.prod.bidr.io	52.17.25.220	true	false	high
pagead-googlehosted.l.google.com	172.217.17.33	true	false	high
creativecdn.com	185.184.8.90	true	false	high
googleads4.g.doubleclick.net	172.217.19.162	true	false	high
uip.semasio.net	77.243.51.122	true	false	high
zeta-ssp-385516103.us-east-1.elb.amazonaws.com	3.86.129.97	true	false	high
m.deepintent.com	169.197.150.7	true	false	high
pixel-sync.sitescout.com	34.36.216.150	true	false	high
d162h6x3rxav67.cloudfront.net	52.222.144.12	true	false	high
firewall-external-2134955858.eu-west-1.elb.amazonaws.com	52.214.250.15	true	false	high
d1ykf07e75w7ss.cloudfront.net	18.66.162.67	true	false	high
www.lightboxcdn.com	104.17.158.113	true	false	high
ssum-sec.casalemedia.com	104.18.26.193	true	false	high
googleads.g.doubleclick.net	142.250.181.2	true	false	high
presentation-ams1.turn.com	46.228.164.11	true	false	high
config.aps.amazon-adsystem.com	18.66.161.21	true	false	high
d18q3505w6wzgu.cloudfront.net	13.227.8.8	true	false	high
api.btloader.com	130.211.23.194	true	false	high
id.crwdcntrl.net	13.250.84.149	true	false	high
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	high
oa.openxcdn.net	34.102.146.192	true	false	high
spug-sg4c.pubmnet.com	67.199.150.85	true	false	high
cdn.browsiprod.com	18.66.161.2	true	false	high
d3f7zc5bbfci5.cloudfront.net	18.66.152.227	true	false	unknown
ping.chartbeat.net	44.214.102.204	true	false	high
pghub.io	35.241.45.217	true	false	high
scontent.xx.fbcdn.net	157.240.196.15	true	false	high
b.scorecardresearch.com	3.160.188.50	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
postrelease.com	52.36.224.135	true	false	high
script.hotjar.com	13.227.8.2	true	false	high
api.rlcdn.com	34.107.165.188	true	false	high
dyv1bugovvq1g.cloudfront.net	108.156.61.100	true	false	unknown
memorizematch.com	104.18.24.111	true	false	unknown
literally-media.videoplayerhub.com	172.67.74.207	true	false	unknown
id.a-mx.com	79.127.227.46	true	false	high
sync.srv.stackadapt.com	35.170.46.82	true	false	high
cdn.id5-sync.com	104.22.53.86	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
imgsync-sg4c.pubmnet.com	67.199.150.82	true	false	high
sgp-prebid.a-mx.net	131.153.206.101	true	false	high
ssp.ads.betweendigital.com	188.42.196.115	true	false	high
pippio.com	107.178.254.65	true	false	high
api.permutive.com	34.107.254.252	true	false	high
sync.ipredictive.com	34.197.8.73	true	false	high
ad.doubleclick.net	172.217.17.70	true	false	high
tagan.adlightning.com	3.160.196.69	true	false	high
tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com	44.236.143.72	true	false	high
s.amazon-adsystem.com	98.82.154.76	true	false	high
aax-eu.amazon-adsystem.com	52.94.222.140	true	false	high
pubads.g.doubleclick.net	142.250.181.2	true	false	high
ad-delivery.net	104.26.2.70	true	false	high
cs-tam.yellowblue.io	54.194.2.39	true	false	high
litmedia.s.llnwi.net	178.79.238.164	true	false	high
merequartz.com	104.18.24.111	true	false	high
analytics.google.com	172.217.19.238	true	false	high
feed.pghub.io	34.102.243.38	true	false	high
ib.anycast.adnxs.com	185.89.210.153	true	false	high
lb-ovh-bh.omnitagjs.com	152.228.215.159	true	false	high
d2eipinci0cqex.cloudfront.net	13.227.12.129	true	false	unknown
aorta.clickagy.com	54.236.77.108	true	false	high
uipus.semasio.net	50.57.31.206	true	false	high
d2avimlm6gq3h9.cloudfront.net	108.158.78.208	true	false	unknown
d2fashanjl7d9f.cloudfront.net	18.66.161.109	true	false	unknown
tr.blismedia.com	34.96.105.8	true	false	high
nginx-ingress.wunderkind.co	34.111.8.32	true	false	high
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
ebaumsworld.com	3.86.129.105	true	false	high
eu-eb2.3lift.com	13.248.245.213	true	false	high
1x1.a-mo.net	98.84.196.233	true	false	high
eagerknight.com	104.18.24.111	true	false	unknown
livepixel-production.bln.liveintent.com	3.82.168.197	true	false	high
sync.crwdcntrl.net	13.228.52.238	true	false	high
cm.g.doubleclick.net	142.250.181.130	true	false	high
eu-tlx.3lift.com	3.124.64.248	true	false	high
sync.1rx.io	74.118.186.107	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	54.76.91.170	true	false	high
d1402xccwihzsp.cloudfront.net	18.66.161.25	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aax-eu.amazon-adsystem.com/s/ecm3?id=M4LON48W-27-LVBL&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1---	false		high
https://ads.blogherads.com/static/chunks/1257.996dda76dbecc94991f0.js	false		high
https://www.google.com/js/bg/FsaNIYyPN76i0sL7d3myIoFfjMDAw8eHc9AJuLUrm7A.js	false		high
https://pixel.adsafeprotected.com/jload?anId=930203&campId=300x250&pubId=5646359508&chanId=21831793537&placementId=6765374128&pubCreative=138485039312&pubOrder=3572290799&cb=1156003258&adsafe_par&impId=0fd6b8ce-b8bb-11ef-bed9-f2865b187d00&custom2=mrec&custom3=1	false		high
https://sync.a-mo.net/setuid?A=88fcad54-174f-479a-8606-01042ba419fe&bidder=sovrn&uid=J0hSALZHl_avkARORMK6TPfR	false		high
https://usersync.gumgum.com/usersync?b=zem&i=wPDIkOpnLshxJJ7dVjhj&gdpr=0	false		high
https://www.facebook.com/tr/?id=880446388736817&ev=PageView&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029868745&sw=1280&sh=1024&v=2.9.178&r=stable&ec=0&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=GET	false		high
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-minuteMedia_rx_n-acuityads_n-MediaNet_ox-db5_cnv_n-smaato_n-undertone_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&dcc=t	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=463397e6-b0c8-4b21-89c4-302650a8da7e&gdpr=0&gdpr_consent=	false		high
https://cdn.id5-sync.com/api/1.0/id5-api.js	false		high
https://s.amazon-adsystem.com/ecm3?ex=rubiconprojectHMT&id=zb2cXOUtREmQZKIpwE31Bw&gdpr=0	false		high
https://sync.a-mo.net/setuid?A=88fcad54-174f-479a-8606-01042ba419fe&bidder=appnexus&uid=8667697949093502514	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	false		high
https://cdn.ebaumsworld.com/thumbs/2024/11/11/045014/87633215/inventions-thumb.jpg	false		high
https://usersync.gumgum.com/usersync?b=ttd&i=463397e6-b0c8-4b21-89c4-302650a8da7e	false		high
https://ads.blogherads.com/static/chunks/6767.30d6b51b118829e41be3.js	false		high
https://ads.yieldmo.com/v000/sync?extinit=0&userid=8667697949093502514&pn_id=an	false		high
https://creativecdn.com/cm-notify?pi=rise	false		high
https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc	false		high
https://www.lightboxcdn.com/static/fb_lightbox.2.1.5.css?cb=637988260257525591	false		high
https://ad-delivery.net/px.gif?ch=2	false		high
https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM2OTc5NjgzNzMwNTI2MTU1ODIxOQ%3D%3D	false		high
https://s.amazon-adsystem.com/dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1---	false		high
https://cdn.ebaumsworld.com/img/desktop/socialSignInIcons.png	false		high
https://cdn.ebaumsworld.com/thumbs/mediaavatar/87634625-1731533401.jpg	false		high
https://cdn.ebaumsworld.com/thumbs/2024/12/05/035257/87643946/randoms-thumb.jpg	false		high
https://cdn.ebaumsworld.com/thumbs/2024/12/10/093625/87645337/Untitled-1.jpg	false		high
https://cs.minutemedia-prebid.com/cs?aid=21485&puid=212915016014330	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=7F413619-12E0-46B6-B7BE-F467F2B38A8A	false		high
https://ats.rlcdn.com/ats.js	false		high
https://b1sync.zemanta.com/usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2	false		high
https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent=	false		high
https://tlx.3lift.com/header/auction?lib=prebid&v=8.46.0&referrer=https%3A%2F%2Febaumsworld.com%2F&tmax=1500&fledge=true	false		high
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=	false		high
https://oa.openxcdn.net/esp.js	false		high
https://ssum-sec.casalemedia.com/usermatchredir?s=196326&cb=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21476%26rid%3D3mXMQBzrCp_mm%26id%3D	false		high
https://www.facebook.com/tr/?id=880446388736817&ev=SubscribedButtonClick&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029878933&cd[buttonFeatures]=%7B%22classList%22%3A%22modalBtn%20loginBtn%22%2C%22destination%22%3A%22https%3A%2F%2Febaumsworld.com%2Fuser%2Fauth%2F%22%2C%22id%22%3A%22submitLoginBtn%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22SIGN%20IN%22%7D&cd[buttonText]=SIGN%20IN&cd[formFeatures]=%5B%7B%22id%22%3A%22%22%2C%22name%22%3A%22referer%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22input-username%22%2C%22name%22%3A%22uname%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Username%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22input-password%22%2C%22name%22%3A%22upass%22%2C%22tag%22%3A%22input%22%2C%22placeholder%22%3A%22Password%22%2C%22inputType%22%3A%22password%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22rememberMe%22%2C%22name%22%3A%22rememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World%22%7D&sw=1280&sh=1024&v=2.9.178&r=stable&ec=1&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&es=automatic&tm=3&rqm=GET	false		high
https://ping.chartbeat.net/ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.11&x=0&m=0&y=8341&o=1263&w=907&j=45&R=1&W=0&I=0&E=6&e=6&r=&KK=1052::0::DK-aFXBjjVtrBlS5nTp79XnDkccNH::::c::https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F::MpRAaQkDuVBF4EvXCbKOJdB8WD3c::&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=2&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_	false		high
https://cdn.adsafeprotected.com/iasPET.1.js	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=&gpp_sid=	false		high
https://connect.facebook.net/en_US/sdk.js?hash=a756ea03bb910a61270a7e2713496aa4	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=880446388736817&ev=PageView&dl=https%3A%2F%2Febaumsworld.com%2F&rl=&if=false&ts=1734029868745&sw=1280&sh=1024&v=2.9.178&r=stable&ec=0&o=4126&fbp=fb.1.1734029868744.65849182277686603&ler=empty&cdl=API_unavailable&it=1734029853233&coo=false&rqm=FGET	false		high
https://cdn.ebaumsworld.com/thumbs/2024/12/10/034340/87645737/line-thumb.jpg	false		high
https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=Vnp6cVNwcGpqTHBhV21kZjZ5aG4=	false		high
https://s.amazon-adsystem.com/ecm3?id=M4LON48W-27-LVBL&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1---	false		high
https://image8.pubmatic.com/AdServer/ImgSync?p=161683&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21482%26id%3D%23PMUID&rdf=1	false		high
https://tag.wknd.ai/5560/i.js	false		high
https://ads.blogherads.com/static/chunks/4056.d55507c9d13f2691685c.js	false		high
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=487E650B66EC4892A2B516B7EB781877	false		high
https://cdn.ebaumsworld.com/thumbs/2024/01/09/043149/87494120/cringe.jpg	false		high
https://ads.blogherads.com/static/chunks/8603.e5247fc1ea359db85497.js	false		high
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=smaato.com&id=667bd0550d	false		high
https://async01.admantx.com/admantx/service?request=%7B%22key%22%3A%22dcde31e32d21f5432ab192ee50f9e0a8ef294bab4778ada95dfabeb949b2b9ce%22%2C%22filter%22%3A%5B%22default%22%5D%2C%22method%22%3A%22descriptor%22%2C%22mode%22%3A%22async%22%2C%22type%22%3A%22url%22%2C%22body%22%3A%22https%253A%252F%252Febaumsworld.com%252F%22%7D	false		high
https://match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json	false		high
https://pr-bh.ybp.yahoo.com/sync/rubicon/2nT5r-gVjwo4o-DLsgcMpsn5EUdSAgOZEtemQ7w0kco?csrc=&gdpr=0&us_privacy=1---	false		high
https://b1sync.zemanta.com/usersync/gumgum/?puid=a_becff2bd-36e9-49b1-9587-cead54221e8f&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__	false		high
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=rise.com&id=hLdMQo-9C	false		high
https://ads.blogherads.com/static/chunks/5450.deed8836db6a553566ae.js	false		high
https://onetag-sys.com/match/?int_id=113&callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0	false		high
https://dyv1bugovvq1g.cloudfront.net/21/ebaumsworld.com/.js	false	Avira URL Cloud: safe	unknown
https://tagan.adlightning.com/sk-literallymedia-ebaumsworld/op.js	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://ads.blogherads.com/static/chunks/4932.82adddbd6331dd03c641.js	false		high
https://static.criteo.net/js/ld/publishertag.prebid.144.js	false		high
https://sync.a-mo.net/setuid?A=88fcad54-174f-479a-8606-01042ba419fe&bidder=index_rtb&uid=Z1syWUt3uV4AAD8mAyHR3wAA%26134	false		high
https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=7F413619-12E0-46B6-B7BE-F467F2B38A8A&gdpr=0&gdpr_consent=&ct=y	false		high
https://cm.g.doubleclick.net/pixel?google_nid=sharethrough_ob&gdpr=0&gdpr_consent=&google_hm=NzY4YjI1YjEtZjAyNS00MmNkLWExMDMtM2NmNWQwZGU2NWNm	false		high
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=media.net&id=3770315136406147000V10	false		high
https://ad.turn.com/r/cs?pid=45&id=RX-868ee356-7ed9-4c12-ac3d-a7279d0daa66-004&rndcb=2933301344	false		high
https://id.crwdcntrl.net/id?c=17207	false		high
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=gg.com&id=a_becff2bd-36e9-49b1-9587-cead54221e8f	false		high
https://ce.lijit.com/merge?pid=84&3pid=Z1syYq3VYuY7fOfYuexqNNmY	false		high
https://eb2.3lift.com/getuid?redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID&gdpr=0	false		high
https://api.permutive.com/v2.0/batch/events?enrich=false&sdkp=true&k=26009fee-1ff1-493d-ae23-88df000d9627	false		high
https://cs.media.net/cksync?cs=31&type=tam&redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E&gdpr=0	false		high
https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D	false		high
https://ssbsync.smartadserver.com/api/sync?callerId=146&gdpr={0,1}&gdpr_consent={consent_string}&gdpr=0&gdpr_consent=	false		high
https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&redir=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21480%26rid%3D3mXMQBzrCp_mm%26id%3D$UID	false		high
https://uipus.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=7F413619-12E0-46B6-B7BE-F467F2B38A8A&sInitiator=external&gdpr=0&gdpr_consent=	false		high
https://pixel.quantserve.com/pixel;r=1174221283;source=gtm;rf=0;a=p-byLmeZUvD2jyq;url=https%3A%2F%2Febaumsworld.com%2F;ns=0;ce=1;qjs=1;qv=6cdb9339-20241109062824;ref=;dst=1;et=1734029873117;tzo=300;ogl=;ses=8a046ca0-73d6-44ce-9d61-a103eef7141b;d=ebaumsworld.com;uht=2;fpan=1;fpa=P0-1915660039-1734029873121;pbc=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950;gdpr=0;mdl=	false		high
https://id.a-mx.com/u?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D88fcad54-174f-479a-8606-01042ba419fe%26bidder%3Damx_com%26uid%3D	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://hb.undertone.com/hb	chromecache_534.2.dr, chromecache_296.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_407.2.dr, chromecache_391.2.dr	false		high
https://submitcus.lightboxcdn.com/Keen/PostToKeen3	chromecache_362.2.dr, chromecache_365.2.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_332.2.dr, chromecache_305.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_362.2.dr, chromecache_365.2.dr	false		high
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_332.2.dr, chromecache_305.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	false		high
https://support.google.com/recaptcha	chromecache_526.2.dr	false		high
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_569.2.dr	false		high
https://sizzlejs.com/	chromecache_370.2.dr, chromecache_301.2.dr	false		high
https://submit.lightboxcdn.com/Keen/PostToKeen2	chromecache_362.2.dr, chromecache_365.2.dr	false		high
https://chartbeat.com/publishing/hud2/versioninfo/?host=	chromecache_259.2.dr, chromecache_274.2.dr	false		high
https://e.serverbid.com/api/v2	chromecache_534.2.dr, chromecache_296.2.dr	false		high
https://cdn.hadronid.net/hadron.js	chromecache_299.2.dr, chromecache_399.2.dr	false		high
https://unpkg.com/web-vitals	chromecache_356.2.dr	false		high
https://www.lightboxcdn.com	chromecache_365.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_569.2.dr	false		high
https://cloud.google.com/contact	chromecache_473.2.dr, chromecache_474.2.dr, chromecache_526.2.dr	false		high
https://lgev.lightboxcdn.com/Keen/LgEv?u=	chromecache_362.2.dr, chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.228	www.google.com	United States	15169	GOOGLEUS	false
52.221.5.68	krk2.kargo.com	United States	16509	AMAZON-02US	false
91.228.74.200	unknown	United Kingdom	27281	QUANTCASTUS	false
185.89.210.153	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
104.26.10.164	unknown	United States	13335	CLOUDFLARENETUS	false
130.211.23.194	api.btloader.com	United States	15169	GOOGLEUS	false
52.211.162.19	cs.yellowblue.io	United States	16509	AMAZON-02US	false
185.89.210.20	unknown	Germany	29990	ASN-APPNEXUS	false
34.197.8.73	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
8.214.60.171	bid-sin-ali.yeahtargeter.com	Singapore	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
52.77.178.59	rtb.gumgum.com	United States	16509	AMAZON-02US	false
13.227.8.8	d18q3505w6wzgu.cloudfront.net	United States	16509	AMAZON-02US	false
74.118.186.107	sync.1rx.io	United States	26120	RHYTHMONEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.227.8.2	script.hotjar.com	United States	16509	AMAZON-02US	false
67.199.150.82	imgsync-sg4c.pubmnet.com	United States	3257	GTT-BACKBONEGTTDE	false
3.82.168.197	livepixel-production.bln.liveintent.com	United States	14618	AMAZON-AESUS	false
18.161.111.43	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
104.18.24.18	js-sec.indexww.com	United States	13335	CLOUDFLARENETUS	false
18.165.220.126	ats.rlcdn.com	United States	3	MIT-GATEWAYSUS	false
172.67.74.207	literally-media.videoplayerhub.com	United States	13335	CLOUDFLARENETUS	false
52.214.250.15	firewall-external-2134955858.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
18.165.220.87	d1dkpjabnziobq.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
52.94.222.140	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
35.79.245.53	async01.admantx.com	United States	16509	AMAZON-02US	false
172.217.21.34	unknown	United States	15169	GOOGLEUS	false
185.89.210.46	unknown	Germany	29990	ASN-APPNEXUS	false
178.250.1.3	static.nl3.vip.prod.criteo.net	France	44788	ASN-CRITEO-EUROPEFR	false
52.211.253.103	cs.digbearings.com	United States	16509	AMAZON-02US	false
172.67.41.60	btloader.com	United States	13335	CLOUDFLARENETUS	false
104.17.108.19	cdn.permutive.com	United States	13335	CLOUDFLARENETUS	false
13.226.2.102	geo.privacymanager.io	United States	16509	AMAZON-02US	false
44.236.143.72	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.22.74.216	unknown	United States	13335	CLOUDFLARENETUS	false
51.75.86.98	onetag-sys.com	France	16276	OVHFR	false
162.19.138.118	lb.eu-1-id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
162.19.138.116	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
34.102.243.38	pandg.tapad.com	United States	15169	GOOGLEUS	false
91.228.74.244	unknown	United Kingdom	27281	QUANTCASTUS	false
18.66.161.128	unknown	United States	3	MIT-GATEWAYSUS	false
104.17.248.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
3.160.196.69	tagan.adlightning.com	United States	16509	AMAZON-02US	false
3.221.57.175	idx.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
142.250.181.132	unknown	United States	15169	GOOGLEUS	false
54.236.77.108	aorta.clickagy.com	United States	14618	AMAZON-AESUS	false
104.17.109.19	unknown	United States	13335	CLOUDFLARENETUS	false
3.86.129.97	zeta-ssp-385516103.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.66.161.25	d1402xccwihzsp.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
3.239.232.41	sqs.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.66.161.21	config.aps.amazon-adsystem.com	United States	3	MIT-GATEWAYSUS	false
3.124.64.248	eu-tlx.3lift.com	United States	16509	AMAZON-02US	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
52.222.144.12	d162h6x3rxav67.cloudfront.net	United States	16509	AMAZON-02US	false
104.22.64.220	unknown	United States	13335	CLOUDFLARENETUS	false
54.92.77.149	unknown	United States	16509	AMAZON-02US	false
178.250.1.56	in-ftd-65.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
104.26.11.164	static.trueanthem.com	United States	13335	CLOUDFLARENETUS	false
104.22.52.173	cdn.hadronid.net	United States	13335	CLOUDFLARENETUS	false
157.240.196.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
52.222.144.23	unknown	United States	16509	AMAZON-02US	false
44.214.102.204	ping.chartbeat.net	United States	14618	AMAZON-AESUS	false
35.241.9.51	3d2fb0bd-52fc-4b75-aaf5-2d436c172540.prmutv.co	United States	15169	GOOGLEUS	false
13.251.172.28	g2.gumgum.com	United States	16509	AMAZON-02US	false
205.251.222.44	d15kdpgjg3unno.cloudfront.net	United States	16509	AMAZON-02US	false
18.66.161.109	d2fashanjl7d9f.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
18.161.111.91	unknown	United States	3	MIT-GATEWAYSUS	false
98.82.154.76	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
34.96.105.8	tr.blismedia.com	United States	15169	GOOGLEUS	false
184.30.24.22	cs.media.net	United States	16625	AKAMAI-ASUS	false
108.139.78.212	d1jvc9b8z3vcjs.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.27.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
54.169.228.246	match-ap-southeast-1-ecs.sharethrough.com	United States	16509	AMAZON-02US	false
172.66.41.9	unknown	United States	13335	CLOUDFLARENETUS	false
57.129.18.109	unknown	Belgium	2686	ATGS-MMD-ASUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
67.220.226.234	unknown	United States	18450	WEBNXUS	false
34.102.146.192	oa.openxcdn.net	United States	15169	GOOGLEUS	false
35.241.45.217	pghub.io	United States	15169	GOOGLEUS	false
54.194.2.39	cs-tam.yellowblue.io	United States	16509	AMAZON-02US	false
91.228.74.166	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
108.158.78.208	d2avimlm6gq3h9.cloudfront.net	United States	16509	AMAZON-02US	false
34.96.70.87	invstatic101.creativecdn.com	United States	15169	GOOGLEUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
131.153.206.101	sgp-prebid.a-mx.net	United States	19437	SS-ASHUS	false
52.36.224.135	postrelease.com	United States	16509	AMAZON-02US	false
77.243.51.122	uip.semasio.net	Denmark	42697	NETIC-ASDK	false
172.217.19.194	unknown	United States	15169	GOOGLEUS	false
34.107.165.188	api.rlcdn.com	United States	15169	GOOGLEUS	false
57.129.18.111	wt.rqtrk.eu	Belgium	2686	ATGS-MMD-ASUS	false
104.26.2.70	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
52.76.241.35	syncelb-1292340544.ap-southeast-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.230.112.50	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
13.248.245.213	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
104.17.159.113	unknown	United States	13335	CLOUDFLARENETUS	false
124.146.153.152	unknown	Japan	2514	INFOSPHERENTTPCCommunicationsIncJP	false
13.226.2.71	unknown	United States	16509	AMAZON-02US	false
34.247.233.198	unknown	United States	16509	AMAZON-02US	false
178.250.1.11	gum.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
152.199.21.175	sni1gl.wpc.etacdn.net	United States	15133	EDGECASTUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1574004
Start date and time:	2024-12-12 19:56:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://ebaumsworld.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@48/484@668/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.17.78, 64.233.164.84, 172.217.17.46, 142.250.181.74, 104.126.36.137, 104.126.36.234, 216.58.208.232, 172.217.19.238, 172.217.21.42, 172.217.19.10, 172.217.19.170, 172.217.17.74, 142.250.181.10, 142.250.181.106, 142.250.181.138, 172.217.17.42, 172.217.19.234, 172.217.19.202, 199.232.214.172, 104.21.50.90, 172.67.159.162, 192.229.221.95, 142.250.181.142, 151.101.194.202, 151.101.130.202, 151.101.66.202, 151.101.2.202, 23.218.208.200, 172.217.21.33, 44.241.7.64, 44.239.49.12, 34.217.153.224, 44.229.70.138, 100.21.100.53, 54.191.117.1, 151.101.2.217, 151.101.66.217, 151.101.130.217, 151.101.194.217, 172.217.17.67, 142.250.181.131, 2.20.68.203, 2.20.68.202, 142.250.181.3, 172.217.17.66, 20.40.202.0, 69.173.158.92, 92.122.17.51, 69.173.156.139, 172.217.19.226, 2.20.41.60, 89.207.16.137, 2.16.228.190, 13.107.42.14, 13.107.21.237, 204.79.197.237, 64.158.223.137, 104.19.159.19, 104.19.158.19, 37.157.6.233, 37.157.6.237, 37.157.6.243, 37.157.6.254, 37.15
Excluded domains from analysis (whitelisted): uipglob.trafficmanager.net, secure2.cdn.fastclick.net.edgekey.net, slscr.update.microsoft.com, ebaumsworld.azureedge.net, wildcard.ntv.io.edgekey.net, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, a1162.d.akamai.net, track-eu.adformnet.akadns.net, e9957.b.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, ads.stickyadstv.com.edgesuite.net, update.googleapis.com, www.gstatic.com, www.google-analytics.com, waws-prod-dm1-175-kiwi.centralus.cloudapp.azure.com, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, ajax.googleapis.com, dualstack.f6.shared.global.fastly.net, c-bing-com.dual-a-0034.a-msedge.net, pagead2.googlesyndication.com, cidr1.ads.stickyadstv.com.akadns.net, edgedl.me.gvt1.com, a3.shared.global.fastly.net, c.bing.com, e6603.g.akamaiedge.net, eus.rubiconproject.com.edgekey.net, clients.l.google.com, h2.shared.global.fastly.net, ntvcld-a.akamaihd.net.edgesuite.net, pixel.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://ebaumsworld.com

Input	Output
URL: http://ebaumsworld.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://ebaumsworld.com
URL: https://881691cc3756a047a386f760a460b303.safeframe... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a part of the Closure Library, which is a well-known and widely used JavaScript library maintained by Google. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code seems to be focused on handling URLs and creating trusted types, which are common practices in modern web development. Overall, this script is likely benign and poses a low risk." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/ SPDX-License-Identifier: Apache-2.0 / var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={message:fa(v)};var c=void 0===c?{}:c;this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta=c};var w=function(a){w[" "](a);return a};w[" "]=function(){};var ia=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?#]\|$))?([^?#]+)?(?:\\?([^#]))?(?:#([\\s\\S]))?$");var ja=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)};var ka=RegExp("^https?://(\\w\|-)+\\.cdn\\.ampproject\\.(net\|org)(\\?\|/\|$)"),ma=function(){var a=la;this.g=x;this.h=a},na=function(a,b){this.url=a;this.j=!!b;this.depth=null};function oa(a){f.google_image_requests\|\|(f.google_image_requests=[]);var b=f.document;b=void 0===b?document:b;b=b.createElement("img");b.src=a;f.google_image_requests.push(b)};var y=function(){this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"string"==typeof c&&(c=c.split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(String(a))},sa=function(a){var b="https://pagead2.googlesyndication.com/pagead/gen_204?id=jserror&",c=ra(a)-27;if(0>c)return"";a.g.sort(function(za,Aa){return za-Aa});for(var d=null,e="",k=0;k<a.g.length;k++)for(var g=a.g[k],A=a.h[g],O=0;O<A.length;O++){if(!c){d=null==d?g:d;break}var q=qa(A[O],a.i,",$");if(q){q=e+q;if(c>=q.length){c-=q.length;b+=q;e=a.i;break}d=null==d?g:d}}a="";null!=d&&(a=e+"trn="+d);return b+a},ra=function(a){var b=1,c;for(c in a.h)b=c.length>b?c.length:b;return 3997-b-a.i.length-1};var ta=function(a){if(.01>Math.random())try{if(a instanceof y)var b=a;else b=new y,ja(a,function(d,e){var k=b,g=k.o++;d=z(e,d);k.g.push(g);k.h[g]=d});var c=sa(b);c&&oa(c)}catch(d){}};var fa=function(a){var b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n")}catch(e){b=c}}return b};({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js")));({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S])$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secureframe\.doubleclick\.net\|[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.usercontent\.goog)$/,wa=/^(pagead2\.googlesyndication\.com\|googleads\.g\.doubleclick\.net)$/;var xa=function(a){return function(b){var c=a.hostname,d=va.test(c)\|\|wa.test(c);c=[c];var e=r;r=void 0;if(!d){if(e)throw Error(e());if(c&&0<c.length)throw Error("["+c.map(String).join(",")+"]");throw Error(String(d));}b=(d=aa())?d
URL: https://memorizematch.com/v2kisuUII5WA-HR5P71C6bUy... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet appears to be a complex script that may have some potentially concerning behaviors, requiring further review. While it does not exhibit any clear high-risk indicators like dynamic code execution or data exfiltration, it does have some moderate-risk behaviors, such as external data transmission and the use of fallback domains. Additionally, the script is heavily obfuscated, which can make it difficult to fully understand its purpose and intent. Overall, the combination of these factors suggests a medium-risk level that warrants closer inspection." }
!(function(n){var t={};function r(i){if(t[i])return t[i].exports;var e=t[i]={i:i,l:!1,exports:{}};return n[i].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.m=n,r.c=t,r.d=function(n,t,i){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:i})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var e in n)r.d(i,e,(function(t){return n[t]}).bind(null,e));return i},r.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s=0)})([function(n,t,r){"use strict";r.r(t),r.d(t,"_reset",(function(){return fr}));var i="object";function e(n,t,r){if((r=typeof t)!==i)throw new Error("expected ".concat(i," got ").concat(r));for(var e in t)Object.prototype.hasOwnProperty.call(t,e)&&(n[e]=t[e]);return n}function o(n){for(var t=1;t<arguments.length&&arguments[t];t++)n=e(n,arguments[t]);return n}var u={u:"admiral",h:"A-630FDC80A600219EDFB0ACCC-2",k:"m",P:"4dm1r11545242527",$:30,C:['webcache'],S:['googlebot','mediapartners-google','adsbot-google','facebookexternalhit','bingbot','bingpreview','googleweblight','yandex','cxensebot','duckduckbot','archive.org_bot','baiduspider','slurp'],D:['googleweblight'],T:"en-US,en;q=0.9",A:"",I:"_awl",M:"_admrla",O:"admbenefits",R:"_alvd",N:34128000,j:0},a={L:"https://eagerknight.com/u/f3815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2",B:"",U:"https://eagerknight.com/u/f4815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2",F:false,H:false,W:false,V:"https://eagerknight.com/f7815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2",G:"post",J:0,X:"0",K:{'1':50,'2':25,'8':30,'512':30,'1024':0,'4096':20,'8192':25,'32768':10},Z:{'1':6,'2':4,'8':9,'512':0,'8192':4},Y:50,nn:10,tn:0,rn:0,en:0,on:true,un:"",an:"",cn:"r",sn:"tr",dn:"s",hn:"t",vn:"e",ln:"a",mn:10,wn:"ping",pn:"https://eagerknight.com/f2815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2",gn:"https://eagerknight.com/f9815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2",bn:25000,yn:"https://eagerknight.com/bundles/f0815bf33c6dc8/36021cf3063613d1664c1ab32af2",kn:["ph","pr","abd"],Pn:216e5,$n:"",_n:0,Cn:!1,Sn:0},c=o({},u,a);function s(n,t){return typeof n===t}function f(n){return s(n,"function")}function d(n){return s(n,"string")}function h(n){return s(n,"number")}var v=[];function l(n,t,r){for(var i=[],e=0,o=0;o<v.length;o++)v[o]&&f(v[o].func)&&(e=v[o].flag,!((c.tn&e)>0\|\|(c.rn&e)>0)\|\|(c.en&e)>0\|\|(function(e){try{i.push(e.func(n,t,r).catch((function(n){throw n})))}catch(n){}})(v[o]));return Promise.all(i)}var m=c.K,w=c.Z,p=(function(){function n(){!(function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")})(this,n),this.bids=[],this.dids=[],this.adbs=0,this.diss=0,this.hf=0,this.fbl=!1,this.fdis=!1,this.elb=!1}var t,r=n.prototype;return r.enabled=function(n){return m&&m.hasOwnProperty(n)},r.blocked=function(n,t){if(this.enabled(n)){var r=~~m[n];n&&this.bids.push(n),this.adbs+=r,t&&(this.elb=!0)}},r.disabled=function(n){var t=~~w[n];this.diss+=t,n&&this.dids.push(n)},r.blockerType=function(){return this.hasAdBlocker()?this.elb?1:2:0},r.hasAdBlocker=function(){return this.fbl\|\|this.adbs>=c.Y},r.hasDisabledAdBlocker=function(){return this.fdis\|\|!this.fbl&&this.diss>=c.nn},r.blockerFlags=function(){return this.bids.reduce((function(n,t){return t\|n}),0)\|\|0},r.disabledFlags=function(){return this.dids.reduce((function(n,t){return t\|n}),0)\|\|0},r.hasBlockerFlag=function(n){for(var t=0;t<this.bids.length;t++)if(this.bids[t]===n)return!0;return!1},r.hasDisabledFlag=function(n){for(var t=0;t<this.dids.length;t++)if(this.dids[t]===n)return!0;return!1},r.hacksFlags
URL: https://amp.ebaumsworld.com/7778/amp.min.js... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates several behaviors that raise moderate concerns, including external data transmission, fallback domains, and aggressive DOM manipulation. While some of the behaviors may be related to legitimate functionality like analytics or commenting, the use of obfuscated query strings and potential for redirects to unknown domains increases the overall risk. Further review is recommended to determine the script's true intent and ensure it does not pose a security threat." }
(function(){var e=location.search.slice(1).replace(/\?/g,"&");if(/^womp\|&womp/.test(e))try{var t=function(){var e=document.getElementById("wMask");e&&e.parentNode.removeChild(e)},o=function(){var e=document.querySelector("head"),t=document.createElement("style");t.id="wMask",t.type="text/css",t.innerHTML='html:after { background: #fff; bottom: 0; content: ". . . Loading . . ."; display: flex; font: 20px sans-serif; align-items: center; justify-content: center; position: fixed; left: 0; right: 0; top: 0; z-index: 9999999999!important;}',e.appendChild(t)},n=function(e){var t={},o=/([^&=]+)=?([^&]*)/g;e=decodeURIComponent(e.replace(/\+/g," "));for(var n=o.exec(e);n;)"null"===n[2]&&(n[2]=null),t[n[1]]=n[2],n=o.exec(e);return t},c=n(e),r=function(e){var t=/^womp/i,o=[];let n="";Object.keys(e).forEach(n=>{t.test(n)\|\|o.push(`${n}=${e[n]}`)}),Object.keys(o).length&&(n="?");var c=`https://${location.hostname}${location.pathname}${n}${o.join("&")}`;window.history.replaceState({},document.title,c)};r(c),setTimeout(o),setTimeout(t,5e3);var l=function(e,t,o){return new Promise(function(n,c){var r=!1;t=t\|\|"element",o=o\|\|2e4;var l=setTimeout(function(){clearInterval(m),c(Error("Element Not Found: "+e))},o),m=setInterval(function(){r="property"==t?!!window[e]:!!document.querySelector(e),r&&(clearInterval(m),clearTimeout(l),n("Element Found"))},250)})},m=function(e){var t=e.getBoundingClientRect(),o=window.pageXOffset\|\|document.documentElement.scrollLeft,n=window.pageYOffset\|\|document.documentElement.scrollTop;return{top:t.top+n,left:t.left+o}},i=function(e,t){t=t\|\|0,history.scrollRestoration="manual";var o=document.querySelector(e);if(o){var n=m(o).top-t;n&&window.scroll({left:0,top:n,behavior:"auto"})}},a=function(){c.wompShowComments&&setTimeout(function(){document.querySelector("#commentToggle").click(),l(".commentHeader","element").then(e=>{i("#commentSection"),t()})})};c.wompShowComments&&l("#commentToggle","element").then(e=>{var t=document.querySelector(".comments"),o=document.querySelector("#ebaumMedia");o.insertAdjacentElement("beforebegin",t)}),l("#commentToggle","element").then(e=>a()).catch(e=>console.log(e))}catch(e){console.error(e)}})();
URL: https://d15kdpgjg3unno.cloudfront.net/oPS.js?cid=2... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate security concerns. While it does not contain any high-risk indicators like dynamic code execution or data exfiltration, it demonstrates some potentially aggressive DOM manipulation and external data transmission without clear transparency. Additionally, the use of multiple fallback domains and the presence of obfuscated code/URLs contribute to the overall risk assessment. Further review may be necessary to determine the script's true intent and whether the behaviors are justified within the context of its functionality." }
window.otkjs=function(t){var o={};function i(n){if(o[n])return o[n].exports;var e=o[n]={i:n,l:!1,exports:{}};return t[n].call(e.exports,e,e.exports,i),e.l=!0,e.exports}return i.m=t,i.c=o,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"e",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&& e&&e.e)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var o in e)i.d(t,o,function(n){return e[n]}.bind(null,o));return t},i.n=function(n){var e=n&&n.e?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){n.exports=t(1)},function(n,e,t){t.r(e),t.d(e,"stickyLeaderboard",function(){return i}),t.d(e, "addRefresh",function(){return r}),t.d(e,"removeRefresh",function(){return d}),t.d(e,"setOpsState",function(){return l}),t.d(e,"adiv",function(){return g}),t.d(e,"adniv",function(){return w}),t.d(e,"test",function(){return b});function o(n,e){var t=e.indexOf(n);0<=t&&e.splice(t,1)}function h(n){c.a.includes(n)\|\|c.a.push(n),o(n,c.u)}function u(){return c}function a(n,e){var t=1<arguments.length&&void 0!==e?e:"defined";n.forEach(function(n){var o=n[0],i=n[1],r=n[2],a=n[3],c=n[4]?n[4]:"none",s="not-ready"; "defined"===t&&(googletag.pubads().getSlots().forEach(function(n){var e=n,t=n.getSlotElementId();o===t&&(Object.keys(f.f).includes(t)\|\|(f.f[t]=[e,i,r,c,s,a]))}),googletag.pubads().addEventListener("slotRequested",function(n){var e=n.slot,t=n.slot.getSlotElementId();o===t&&(Object.keys(f.f).includes(t)\|\|(f.f[t]=[e,i,r,c,s,a]))})),"all"===t&&(googletag.pubads().getSlots().forEach(function(n){var e=n,t=n.getSlotElementId();Object.keys(f.f).includes(t)\|\|(f.f[t]=[e,i,r,c,s,a])}),googletag.pubads().addEventListener("slotRequested", function(n){var e=n.slot,t=n.slot.getSlotElementId();Object.keys(f.f).includes(t)\|\|(f.f[t]=[e,i,r,c,s,a])}))})}function k(n,e){if("all"===(1<arguments.length&&void 0!==e?e:"defined")){f.g=!0;var t=n[0][1],o=n[0][2],i=n[0][3],r=n[0][4]?n[0][4]:"none";Object.keys(c.v.B);a([["all",t,o,i,r,"not-ready"]],"all")}else a(n);if(window.oDv&&"25"==window.oDv[0])setInterval(function(){try{var i=!1;Object.keys(f.f).forEach(function(n){var e=u();if(e.v.B[n]){var t=e.v.B[n][9]/1E3,o=e.v.B[n][7]/1E3;1.1<=t&&30<= o&&(i=!0)}}),i&&(Object.keys(f.f).forEach(function(e){var t=u(),n=f.f[e][5],o=f.f[e][0],i="na";o.getResponseInformation()&&o.getResponseInformation().lineItemId&&(i=o.getResponseInformation().lineItemId);var r=!1;n.map(function(n){n[1]==i&&(r=!0)}),r\|\|n.push(["refresh_insights",i]),null!=n&&0<n.length&&n.forEach(function(n){o.setTargeting(n[0],n[1]);try{"25"==window.oDv[0]&&t.u.includes(e)?o.setTargeting("opInView","true"):o.setTargeting("opInView","false")}catch(n){}}),oPageUnload(e)}),"www.medscape.com"== window.location.hostname&&f.w<4?(googletag.pubads().refresh(),f.w=f.w+1,console.log("refresh counter: ",f.w)):"www.webmd.com"==window.location.hostname&&f.w<11&&(googletag.pubads().refresh(),f.w=f.w+1,console.log("refresh counter: ",f.w)))}catch(n){}},1E3);else setInterval(function(){!function(){var l=[];try{Object.keys(f.f).forEach(function(n){var e=u();if(e.v.B[n]){var t=e.v.B[n][9]/1E3,o=e.v.B[n][7]/1E3,i=f.f[n][0],r=f.f[n][1],a=f.f[n][2],c=f.f[n][3],s=f.f[n][4],d=f.f[n][5];l.push([n,t,o,c,s,d]), "not-ready"===s&&r<=t&&a<=o&&(f.b[n]=[i,r,a,c,"ready",d],f.f[n][4]="refresh-pending")}})}catch(n){}}(),Object.keys(f.b).forEach(function(e){if(f.b[e]){var t=u(),o=f.b[e][0],n=f.b[e][1],i=f.b[e][2],r=f.b[e][3],a=f.b[e][4],c=f.b[e][5],s="na";o.getResponseInformation()&&o.getResponseInformation().lineItemId&&(s=o.getResponseInformation().lineItemId);var d=!1;if(c.map(function(n){n[1]==s&&(d=!0)}),d\|\|c.push(["refresh_insights",s
URL: https://ebaumsworld.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Start new game", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ebaumsworld.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in with Facebook", "prominent_button_name": "SIGN IN", "text_input_field_labels": [ "Username", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ebaumsworld.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://ebaumsworld.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in with Facebook", "prominent_button_name": "SIGN IN", "text_input_field_labels": [ "Username", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ebaumsworld.com/ Model: Joe Sandbox AI	{ "brands": [ "Facebook" ] }
	{ "brands": [ "Facebook" ] }
URL: https://ebaumsworld.com/ Model: Joe Sandbox AI	{ "brands": [ "Facebook" ] }
	{ "brands": [ "Facebook" ] }
URL: https://ebaumsworld.com/ Model: Joe Sandbox AI	```json{ "legit_domain": "facebook.com", "classification": "wellknown", "reasons": [ "The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'.", "The provided URL 'ebaumsworld.com' does not match the legitimate domain for Facebook.", "Ebaumsworld.com is a known entertainment and humor website, not associated with Facebook.", "The presence of input fields for 'Username' and 'Password' on a non-Facebook domain is suspicious and indicative of phishing." ], "riskscore": 9} Google indexed: False
URL: ebaumsworld.com Brands: Facebook Input Fields: Username, Password
URL: https://ebaumsworld.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "SIGN IN", "prominent_button_name": "SIGN IN", "text_input_field_labels": [ "Username", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ebaumsworld.com/ Model: Joe Sandbox AI	{ "brands": [ "Facebook" ] }
	{ "brands": [ "Facebook" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 12 17:57:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9814837747213536
Encrypted:	false
SSDEEP:	48:85ad4T8EwHpidAKZdA19ehwiZUklqehBy+3:855PK2y
MD5:	F980D74E34CAA4D5F849CB28DE4CFB9A
SHA1:	A9E08465A31000DD3A999195AFD6C5E1073DBCE5
SHA-256:	3EBF37976CA1C3447C0D3A0080123FDCAB7BA6BB2F633660D242AFDEC6B6C9D0
SHA-512:	6C50DB130B1791F092B8D131B72647B834A98A54703A30C1A9B9BC37DD9C96CA1312CB99E843279C487375649E37E0BD2FF6C72D302F45B51A1D92EAF3C9F352
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y...L..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y#.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y#.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y#.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y#............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y%............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............k......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 12 17:57:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.996029707467044
Encrypted:	false
SSDEEP:	48:8Yad4T8EwHpidAKZdA1weh/iZUkAQkqehmy+2:8Y5PA9QLy
MD5:	F2CBDFDA2E8689DFB41F9D24ACAA11E7
SHA1:	22BF8F27C62CFE842C38DC0BCAA934FC33EAA5B4
SHA-256:	06454098A8EA0276430728473677C8A56232F86C1828D8B93F1246B122E529A7
SHA-512:	6ECBAD58D910C48B783A849EF2D4F8CC7ECA2739CBB75F594DCD72F50CF5AE0619C93C4CC94BF3162ED98C5093C5A02721735E9C421A9EBE31A8860BDA1C1DCA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........L..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y#.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y#.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y#.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y#............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y%............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............k......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.009489241398777
Encrypted:	false
SSDEEP:	48:8xuad4T8EsHpidAKZdA14tseh7sFiZUkmgqeh7s4y+BX:8xu5P8nyy
MD5:	FE7E19502204E650EBE24B4114519735
SHA1:	B281E7E75A700CCEBB491B6A69AAB8F7DF2F40D5
SHA-256:	A3DDC53E5341DE5807501F79B1115CA9BF0B47EB5A6EA1F3C6AF7A59276B8344
SHA-512:	845EE63D4DB42309C85AB1270C31809793E6D1C26DE5228E126E0C3A15941F5A626E4D789511B9A3900632DAF631B06D87C413D9B631878353C3E87EAE158B10
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y#.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y#.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y#.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y#............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............k......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 12 17:57:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9952894408036643
Encrypted:	false
SSDEEP:	48:8Dad4T8EwHpidAKZdA1vehDiZUkwqehKy+R:8D5PLQy
MD5:	F0409D2982017E2D1F6CBFA2F9F143F1
SHA1:	AF5D775C1C9F8A92417E202FF6764B1D292D3B90
SHA-256:	2D5B4053D4833727D0A5D16D35A4094FC4D93719FFFA230F1783C3F12B8FE87E
SHA-512:	91E3B2DEFF639889F51978A53750F519E2A561075F2350265DDCC335D86F6A715129E2E8BDDA5A932A5E157F6D747FFACC80B1C20E9EBDB4AA064762C89EB22A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....p....L..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y#.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y#.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y#.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y#............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y%............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............k......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 12 17:57:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.985361559984885
Encrypted:	false
SSDEEP:	48:8mad4T8EwHpidAKZdA1hehBiZUk1W1qehEy+C:8m5PL9ky
MD5:	09E6045B180AEEED6C4510A4E0597751
SHA1:	3C83A9EB4D787A57FBD44300CA61DC81B7F32FE7
SHA-256:	C3E310B95BABEE63C953BFD45372361A6723BA43E1A75B5F78149CA7857CF107
SHA-512:	1543F5E0B49F030CBF7D8CB5C328F4A1F9D4C96C587A12FA5EE8172BBC4BD473B5F5C30F43B664DBFB1E1CB8E342079E2B451430571860CBBF93FDB2D72BB8B4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....^....L..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y#.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y#.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y#.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y#............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y%............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............k......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 12 17:57:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9932639379424333
Encrypted:	false
SSDEEP:	48:8pad4T8EwHpidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbyy+yT+:8p5PrT/TbxWOvTbyy7T
MD5:	5514C9F9AF76E82F90F1FC6780A53B00
SHA1:	B08655AD13D894456F922EE8849C8E28C6B8EC0D
SHA-256:	21932B106B8B2823D23B8B1ABDE3CD18AAD5EE29A33832FC35136EC24B328783
SHA-512:	522B9E423F111A54A38853A81A163704689DD3376237BE9DEA4D7ACC67A8515C417C6992B59B1DE151F285F6AF2C13EF9F6ACA18864A852BD8D3AFB31B54BA79
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....t....L..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y#.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y#.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y#.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y#............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y%............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............k......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1875)
Category:	downloaded
Size (bytes):	72278
Entropy (8bit):	5.573241049602318
Encrypted:	false
SSDEEP:	1536:dssMiMcts98trN1syHbJah7Ej+zfmmcTnwXo:9VMmrsyisTPnAo
MD5:	F3C0F9EB531B6217D268B46B70E91CC8
SHA1:	27458A91BAB7E297B44BFC356643B6AC271416E7
SHA-256:	610CBF5B89AACE167C3E085DC1EB2535625886C5A0CA5EF39F2D678F1EC576D1
SHA-512:	8C37047B83AAD7502350DF7F401EE2BB3D57C920B5F8BCAEE0A9000D0272F04E14EAE93540035BB170BAEAF6E594A83D141FAE3AEEE1B69040C1E69AB7D98A0C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/rum.js?fcd=true
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",p={},fa={};function r(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function t(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var d=e[0],f;!a&&d in p?f=p:f=da;for(d=0;d<e.length-1;d++){var h=e[d];if(!(h in f))break a;f=f[h]}e=e[e.length-1];c=ea&&c==="es6"?f[e]:null;b=b(c);b!=null&&(a?ba(p,e,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[e]==

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 126, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4428
Entropy (8bit):	7.823268362542753
Encrypted:	false
SSDEEP:	96:ntvnv4N8y3Ee8e15ZZYBi5qgFYZ6rwYYssIL+xs:tvnvkV/t5qgFY0rwYDvS6
MD5:	4884E7387D34802751BC50AED223D98E
SHA1:	BD5AE4E20D6FA334FA909AC1CF4D916040FC7C8B
SHA-256:	EC15B47E443A140E288487735C191D3430BB7B9E9059145E8D0B0169E4FBAB09
SHA-512:	E9FD4F16D1ABF6EB33A7FAF073C49F7ADEFBC705C28FFCC77B9E569C13047919BF0ECF8CDC69D846E0ED30794136E4FB48AD6AEE019B69184ED13BB93F35C195
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......~.....>......tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2ecfddcb-eca4-3b46-8bbd-685f9b01078d" xmpMM:DocumentID="xmp.did:15D77E8B6B9611E59B7CB148338E788D" xmpMM:InstanceID="xmp.iid:15D77E8A6B9611E59B7CB148338E788D" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ecfddcb-eca4-3b46-8bbd-685f9b01078d" stRef:documentID="xmp.did:2ecfddcb-eca4-3b46-8bbd-685f9b01078d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.W(....lIDATx..Z.tT....n...L2.m.....

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	174139
Entropy (8bit):	7.9789191404495226
Encrypted:	false
SSDEEP:	3072:C1iqc4Io8kJw/erpvUH2FAVKGzoJQ+Fm2p+84ouAyJVps4UxuTSmCo0:tRlTUvsKAfo2+FhALJVX+Ro0
MD5:	54DE3C18893F485ACD10B7CA48771032
SHA1:	3736FF50E207C4325A40CED120BDFC3A126936BE
SHA-256:	65B43BF4DE8F85132511EEBF8F74F5A5F51D8AD985C36F3D37E0360BB12EA86B
SHA-512:	A0EBA3AB1987DEB0D10451AB9D3001874B465657220E330AB58E2185DB0831678EA3A6CFEF6790C03495DFB68E829C0C08D07119DDABBE753A124DBBFF96D707
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/11/031836/87646374/shape.jpg
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:AC6DD1B2B01E11EF9A06853712F5DBE0" xmpMM:DocumentID="xmp.did:AC6DD1B3B01E11EF9A06853712F5DBE0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AC6DD1B0B01E11EF9A06853712F5DBE0" stRef:documentID="xmp.did:AC6DD1B1B01E11EF9A06853712F5DBE0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1575)
Category:	dropped
Size (bytes):	24339
Entropy (8bit):	5.521094158402678
Encrypted:	false
SSDEEP:	384:YZHk8fzwjQ69ZF2jNXS9LwRInHYHE/3/peBz4okGEIs3PA+M5mXTwRESsz042:IkVjT/2JoPHYkvpEzT9s/SNl
MD5:	23E0F4D2BB9C214E1682058F133BD258
SHA1:	C4A0409A1B85BB1EA2B0CE16CE1A57CE8E4EF49D
SHA-256:	28B614CC061632A0D8CB17953FC9342CE119EF471B3FF02C2379881A031A185B
SHA-512:	323B66D623AB5F5FD95EA144DDDEAC032B6E3E2C51BB7015B3172F1D0B021C31F99F157DD1332F2A7882A51AE1E8C7C6D14F2C3D45082EB6596C5030D2023F96
Malicious:	false
Reputation:	low
Preview:	(function(){var g=void 0,m=true,n=null,o=false,p=this;.function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"object";if(c=="[object Array]"\|\|typeof a.length=="number"&&typeof a.splice!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("splice"))return"array";if(c=="[object Function]"\|\|typeof a.call!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if(b=="function"&&typeof a.call=="undefined")return"object";return b};function ba(a){a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/"[^"\\\n\r\u2028\u2029\x00-\x08\x10-\x1f\x80-\x9f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]*\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	dropped
Size (bytes):	331041
Entropy (8bit):	5.573941142818875
Encrypted:	false
SSDEEP:	6144:UXgGUiz8zQFiZD9Wy9nnQyDy4rETqD4xgeT:UX3zCQSD5qiE
MD5:	10D0FA96D9DF8A35D5D8F89EFFCBAEA7
SHA1:	16373BE6FE630BCA68D5C36811F262DCDA3C701F
SHA-256:	4AFF33AE9A4FC89187457ADD418D5DA8BB511B14527FAAFD5BA7D4D688E11675
SHA-512:	CB189AD80761B8915578F22254E0E26914D12840BC8A4B2170105976FFA1E6331F01CE9435E8D0E20E4F52EC02A75A0C1EA019023B8BA11CFE245FF7BA407230
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":12,"vtp_value":false,"tag_id":10},{"function":"__ogt_dma","priority":12,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":12},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTO

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1319
Entropy (8bit):	6.671749213605672
Encrypted:	false
SSDEEP:	24:Pw1hpunQWwh82lYSKw6J1bGVPpT34yJ3VL06uG38oP+JLRrW4o73W:POitvnLBfGppfJ3lduc+fW4oa
MD5:	06500E222CB4C36F129C357FFEF7AD59
SHA1:	1BD74219C7467E46782C9F6D13797B7253E58D4B
SHA-256:	30C065C5189582302F1FC91EDD7F8C99956F6F8BD6C4B242081F41AB1C772B08
SHA-512:	256B3C5CA29A3BDB86CE1CA27DC2DFE78DE31B4593A3C6FFC040944F730615236FBDC865919A97E37816ABFF4E37B5C4AAB9B2086BED3F0BC72809D6BDC46877
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/YAC_AdMarker_Icon_Only_19x15.png
Preview:	.PNG........IHDR..............D.,....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0780117407206811871FA7837B3E38CD" xmpMM:DocumentID="xmp.did:CC1AFB850BC911E085A9DEB3B90B359F" xmpMM:InstanceID="xmp.iid:CC1AFB840BC911E085A9DEB3B90B359F" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0780117407206811871FA7837B3E38CD" stRef:documentID="xmp.did:0780117407206811871FA7837B3E38CD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......WIDATx.b....f.*..t..M...../...\C...[b.cB.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1789)
Category:	downloaded
Size (bytes):	39061
Entropy (8bit):	5.504548260755914
Encrypted:	false
SSDEEP:	768:sImuPiaCqUE/72mH1GAWnzxiCtMF4JVT+TeHHSoO3DW9:s5HqUE/72mH1GdMD4LT+TUTOK9
MD5:	F67B5223EB575F586066D2A5212C0942
SHA1:	F91D28FDCF08B35E011D4A8F50E5971525449CC3
SHA-256:	3A1F53A72A4FF3C23812F7A06CC3EF3EA1F188046F2C75D9C0B19E1CB2B652A9
SHA-512:	C6B468DE4FCCEFA003BA82F16B52ED8DDED7A1E32692EF349A2DE48493FA7A0DCFA995F92A4E2F066533F7F580334E7CDE5E477202A8D44938AC603EA83152BB
Malicious:	false
Reputation:	low
URL:	https://static.chartbeat.com/js/chartbeat.js
Preview:	(function(){var g=void 0,h=true,i=null,k=false,n,o=this;.function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"object";if(c=="[object Array]"\|\|typeof a.length=="number"&&typeof a.splice!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("splice"))return"array";if(c=="[object Function]"\|\|typeof a.call!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if(b=="function"&&typeof a.call=="undefined")return"object";return b}function ba(a,b){function c(){}c.prototype=b.prototype;a.M=b.prototype;a.prototype=new c;a.prototype.constructor=a};function ca(){}.function da(a,b,c){switch(typeof b){case "string":ea(b,c);break;case "number":c.push(isFinite(b)&&!isNaN(b)?b:"null");break;case "boolean":c.push(b);break;case "undefined":c.push("null");break;c

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	43618
Entropy (8bit):	7.9279053505209225
Encrypted:	false
SSDEEP:	768:x/BAmQwmtXceFXj5ZVV4uyDAwA0t38bEuRL/mAXLlKnGzKU2Oy2jhJgZdsqWyUwM:/ADthBj5ZVxYAwAk8RLzLlHNy2jh2j/w
MD5:	8E0E2506C17AA962BD9DE76846892C66
SHA1:	B3A59B0EA24E6CC37EFAF63F2E1F79D0AC07155A
SHA-256:	1773D61624BD777DA9C2C8BCAD1CD7886CEEE5C3C00F74D3FCF35F11A511B192
SHA-512:	525A3972BB3F643AF7F20BA623459E1294CEE32CB2D4B8A28AB29F71A1368B3B598C50282E758EA1228A26B88CF2BBFFB2827AB80E57685C2986BEAAFDFDC69F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:C7EBF73A989711EFBBC4D436F2AE3975" xmpMM:DocumentID="xmp.did:C7EBF73B989711EFBBC4D436F2AE3975"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C7EBF738989711EFBBC4D436F2AE3975" stRef:documentID="xmp.did:C7EBF739989711EFBBC4D436F2AE3975"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................'..'2&.&2.&&&&.>55555>DAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDDDDD.... . &..&6& &6D6++6DDDB5BDDDDDDDDDDDDDDDDDDDDD

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11813)
Category:	dropped
Size (bytes):	13128
Entropy (8bit):	5.400888743956193
Encrypted:	false
SSDEEP:	192:UhUbnLN5tmjHCR/UeHjXWb2pTOnstdo5CpcNNOWqRObyAzJ3ND:tbnLIjURHjXo2BtcCvOby0J3ND
MD5:	6A86B37509A032B2DF5809CAB9D2F2A8
SHA1:	A29480A2938D2D30F5BC74DE500EEF8207CCE915
SHA-256:	9B78A505D7A377B916E4EE5E963A2DED1572EC61585DBA7BA559261E03E26967
SHA-512:	8AB0C4B76A2928DF8F5B7BC4A76E6AFE65174814E97BB2EF939DF1A169B1FE205E9A8BC3D1FA6BA6159BAC4341757E0B36D3DD30E806DD5503B24FABD8A81A34
Malicious:	false
Reputation:	low
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1657353,"rec_value":7.999999995789153e-9,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","csq_theme","error_reporting","feedback.embeddable_widget","feedback.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18299)
Category:	downloaded
Size (bytes):	18917
Entropy (8bit):	5.662297931847443
Encrypted:	false
SSDEEP:	384:UTa2i7xh6t4uw7T5L4JUqeIQ9eKICdA2M22SGnaeGIvolgFig:Udaha9m8JUqeZ9oGA2M22SEaerTFig
MD5:	A0E7A179BFB0BF42B3D42A6D0E244277
SHA1:	D74A213F6229A985B68971695323A18C8D704C6D
SHA-256:	16C68D218C8F37BEA2D2C2FB7779B222815F8CC0C0C3C78773D009B8B52B9BB0
SHA-512:	DC28B66DBD91A62F8741CA1675B66C97B555F10DA0E653CA9ABD87663903D166652A4838AE333841CB480A8A49D7F006686098FF63839D8921DE367D8CDAF9AD
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/FsaNIYyPN76i0sL7d3myIoFfjMDAw8eHc9AJuLUrm7A.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var E=this\|\|self,e=function(q,b){if(b=(q=null,E).trustedTypes,!b\|\|!b.createPolicy)return q;try{q=b.createPolicy("bg",{createHTML:T,createScript:T,createScriptURL:T})}catch(v){E.console&&E.console.error(v.message)}return q},T=function(q){return q};(0,eval)(function(q,b){return(b=e())&&q.eval(b.createScript("1"))===1?function(v){return b.createScript(v)}:function(v){return""+v}}(E)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var S=function(b,q,v,T,e,G,d,c){if(!q.uF&&(d=void 0,v&&v[0]===O&&(b=v[1],d=v[2],v=void 0),G=l(q,354),G.length==0&&(e=l(q,416)>>3,G.push(b,e>>8&255,e&255),d!=void 0&&G.push(d&255)),b="",v&&(v.message&&(b+=v.message),v.stack&&(b+=":"+v.stack)),v=l(q,28),v[0]>3)){q.C=(v=(v[0]-=(b=b.slice(0,(v[0]\|0)-3),(b.length\|0)+3),b=qE(b),q.C),q);try{q.H8?(T=(T=l(q,462))&&T[T.length-1]\|\|95,(c=l(

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	121
Entropy (8bit):	3.959779598454751
Encrypted:	false
SSDEEP:	3:YE9Vrf4HNnNQpHHNzqJNVHHNJgNbeNrqJNAHJNwJNPIfV:YE91fKNnN6nNeJNVnNON6NGJNAHJNAN8
MD5:	1DD990ACF1870B64B8554BFC5D071A12
SHA1:	682366B57194DFAD0E543E776F34AF9A87D6AA6A
SHA-256:	81FD6BFDDAD6B7CA9E6DDA825863A45F84F1DD0396F3AE6BC20A1BB6E7F15053
SHA-512:	970866AB012E16DA97500FED9DC061343DBF8FB8F1AB437DDFC280C8A4311B57F8E1059D892B347B811EE190FA86EB2600F38C04D2CBF977314B0A76035E4BDD
Malicious:	false
Reputation:	low
URL:	https://api.permutive.com/standard-audiences/v1/affinity?url=https://ebaumsworld.com&k=26009fee-1ff1-493d-ae23-88df000d9627
Preview:	{"affinity_values":["bhih-ac","bhnn-ac","bhky-ac","bhin-ac","bhnf-ac","bhlp-ac","bhka-ac","bhik-ac","bhnd-ac","bhhx-ac"]}

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (559)
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	5.474492656142008
Encrypted:	false
SSDEEP:	12:UO789Dk1phQhJ+qhVqF6ZMhZfqSVwAbV5HkTKCTQW6jzp9whk:U+uObHbBnznwK
MD5:	B197852A2D113679CACA5254E813B191
SHA1:	9DD782EE13C2402959022BD8633313B1A3739D50
SHA-256:	B864C5FD2F4A601169D83A42B094C2A521CC32AA35CC7E4A1CA96D9C8B7F2DD0
SHA-512:	7F25A490BF6504330A5B7AA193351C4813BF1E6814E5CB33E81F4417D80F8223F004D94232B5D7FB338FADFDA0ED061ED7712D5FFF769795254981173037BF55
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/9265.8b71bd2e8f4ba6e966b2.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[9265],{69265:(s,t,e)=>{e.r(t),e.d(t,{default:()=>n});var _=e(40459),a=e(18269),o=e(81384),p=e(10057),r=e(21596),b=e(81257),i=e(13158);function n(){const s=a.A.get("browsi_site_key"),t=a.A.get("browsi_pub_key")\|\|"PMC";(0,i.vx)("browsi")&&!p.A.getInstance().getSponsored()&&!o.Ay.disabled("display")&&s&&r.A.vendorMeetsCriteria(_.Fk)&&(0,b.k0)("https://cdn.browsiprod.com/bootstrap/bootstrap.js",null,!1,"browsi-tag",null,{"data-pubKey":t,"data-siteKey":s})}}}]);

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32769)
Category:	dropped
Size (bytes):	89166
Entropy (8bit):	5.377053496449575
Encrypted:	false
SSDEEP:	1536:k5RKUpVgklsdbuLP/l+0fGzA8gmtasgx/c9Rzzi4yff8qeLvHHEjam7rSnmBn9gl:Ee8FbGzA81+xRRiN
MD5:	B166537FD0541B752CDA15EB8D705E39
SHA1:	AFD60FEA09537B38D1AA567F9EB5C9699E7DE1CA
SHA-256:	B17175A16AF50EE466ECD015E9E7474717774915FF9338E9779F59C45A18DE40
SHA-512:	6BC97141D27C5D8663A30C9D9758A8F4EA5487CC47C0DD698519BCAEFE4107FAA8D0E7BF1A6F403A6BFC6E269A69412DE9D3874D5BE4FF128B3FB8A724CE2A85
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.7.1 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cv(a){if(!ck[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){cl\|\|(cl=c.createElement("iframe"),cl.frameBorder=cl.width=cl.height=0),b.appendChild(cl);if(!cm\|\|!cl.createElement)cm=(cl.contentWindow\|\|cl.contentDocument).document,cm.write((c.compatMode==="CSS1Compat"?"<!doctype html>":"")+"<html><body>"),cm.close();d=cm.createElement(a),cm.body.appendChild(d),e=f.css(d,"display"),b.removeChild(cl)}ck[a]=e}return ck[a]}function cu(a,b){var c={};f.each(cq.concat.apply([],cq.slice(0,b)),function(){c[this]=a});return c}function ct(){cr=b}function cs(){setTimeout(ct,0);return cr=f.now()}function cj(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ci(){try{return new a.XMLHttpRequest}catch(b){}}function cc(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-CGRZHQ8KQD&gacid=1729578817.1734029844&gtm=45je4cb0v889303370za200&dma=0&gcs=G1--&gcd=13l3l3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485&z=237489234
Preview:	<html></html>

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 61, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.981467696635924
Encrypted:	false
SSDEEP:	24:sy1he91Wwjx82lY2T3ouVArZqxyJ3VpVXkV+GCBkFZF:swqQNn2xA0QJ3/VXQ+2F
MD5:	32218B318407F393F630DC362038F5C0
SHA1:	5F738ECE70C8BD5CE1579E37BF5AC9456E892A00
SHA-256:	8F5DC1376BFD127BC7AC2B076626002EF1FCC63FC87C879BBC4B717316DF4765
SHA-512:	85E10FE42E2117587F70AB079BBA9F65731F4BAAF98EC04059C046B6FA8D343587C139872A13BA95801386D9BEEB2EBB5F3155277F3E9162E9E2D65A60C8A034
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/img/desktop/navGradient.png
Preview:	.PNG........IHDR.......=.....l.._....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:39475F6A406011E5BF45F08EAF048086" xmpMM:DocumentID="xmp.did:39475F6B406011E5BF45F08EAF048086"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:39475F68406011E5BF45F08EAF048086" stRef:documentID="xmp.did:39475F69406011E5BF45F08EAF048086"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.T.z...UIDATx.b..Rfb.., ..Dp......".A. ....b B.D..y..."TA.&....3.`Aea..".A..<JXI3. ...o........5.@g....IEND.B`.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	156382
Entropy (8bit):	5.828375486527001
Encrypted:	false
SSDEEP:	1536:RI83g77hHXMXI83X1iXeI83H5ibCXdI838zaXrI83dFn9FXS:RIyGcXIyXIyob2IyzIy3y
MD5:	017B9DEA3292BFF64B0A8D20F214CE40
SHA1:	F622C3E6BF1539B5A8421FBAC01A94EC1D349D7B
SHA-256:	826781ADA77C5B39AA63588DB607300901FCEACC8FA7EA15884BB96690811F9D
SHA-512:	DF694BA37160B7917E217771853EC56DA5C38EDF5872D1A147F1B776D6983B5E7D205B3CD14D27E0E79362918306A8D0D958FD15CC49A15A97A3BCAB4E8C3C61
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=332503237018129&correlator=209065999177394&eid=31089309%2C95345000&output=ldjh&gdfp_req=1&vrg=202412090101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&gpp_sid=-1&iu_parts=8352%3A1019017%2Ca.ebaumsworld%2Centertainment&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F2%2C%2F0%2F1%2F2%2C%2F0%2F1%2F2%2C%2F0%2F1%2F2&prev_iu_szs=300x250%2C728x90%7C468x60%7C320x50%7C300x50%7C970x90%7C970x66%2C728x90%7C970x250%7C970x90%7C300x250%7C970x66%7C320x50%7C300x50%7C728x250%7C250x250%7C468x60%2C300x250%7C300x600%7C160x600%7C120x600%7C300x420%7C250x250%7C300x300%2C300x250%7C300x600%7C160x600%7C120x600%7C300x420%7C250x250%7C300x300&ifi=1&didk=1488415045~1348359464~2502044765~730653794~730653793&sfv=1-0-40&sc=1&cookie_enabled=1&abxe=1&dt=1734029903265&lmt=1734029903&adxs=901%2C-12245933%2C55%2C901%2C844&adys=605%2C-12245933%2C1992%2C2239%2C5636&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C-1%7C1%7C2%7C3&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=1&url=https%3A%2F%2Febaumsworld.com%2F&vis=1&psz=412x250%7C1263x-1%7C825x118%7C412x250%7C300x250&msz=412x250%7C0x-1%7C728x50%7C412x250%7C300x250&fws=4%2C640%2C4%2C4%2C4&ohw=1263%2C0%2C825%2C1263%2C1263&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmFqUklieWlUTGotTzhzb2ZDQ3JEQ2kyanRrUWdTUmkwU1JFd3ZoZUhlYmJpRmZrMW9hYVR0MmpvYVRLR1RaY2NYARI0CgpwdWJjaWQub3JnEiQ2ZDRiYmE5Yi1lZGE2LTQwZmQtYWY1NS04Y2Y2ZjdkMmU5NTBYARI2CgxhZHNlcnZlci5vcmcSJDQ2MzM5N2U2LWIwYzgtNGIyMS04OWM0LTMwMjY1MGE4ZGE3ZVgBEhYKB2V1aWQuZXUY9YTy4bsySABSAghkEhgKCXlhaG9vLmNvbRj1hPLhuzJIAFICCGQSGQoKdWlkYXBpLmNvbRj1hPLhuzJIAFICCGQSJgoXcGVybXV0aXZlLXNlY3VyZS1zaWduYWwY9YTy4bsySABSAghk&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1734029836152&idt=56229&ppid=059e2ab8-ae24-4110-a5f5-5d3f58ea3423&prev_scp=divid%3Dskm-ad-medrec-1%26st%3Dmrec%26inview%3Dtrue%26loc%3D1%26impuuid%3D52b3a1b6-de43-42cd-bebd-3dfa54e61460%26inst%3D1%26stinst%3D1%26optimera%3DNULL%26id%3D0fd6b8ce-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cst%3Dframe2wide%26divid%3Dskm-ad-frame2%26close_control%3Denabled%26inview%3Dtrue%26loc%3Dsticky%26impuuid%3Dda3d9e27-8f2f-4b89-9d82-f36ed4c0758a%26inst%3Ds1%26stinst%3Ds1%26optimera%3DNULL%26id%3D0fd6b8cf-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cdivid%3Dskm-ad-flexbanner%26st%3Dflxban%26inview%3Dfalse%26loc%3D2%26impuuid%3D53edc0bc-8011-47b6-8157-13e218421d48%26inst%3D2%26stinst%3D1%26optimera%3DNULL%26id%3D0fd6b8d0-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cdivid%3Dskm-ad-flexrec-1%26st%3Dflxrec%26inview%3Dfalse%26loc%3D3%26impuuid%3Deadf8e9d-96c7-4d83-abbe-d6fa77ee8e92%26inst%3D3%26stinst%3D1%26optimera%3DNULL%26id%3D0fd6b8d1-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%2C70%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0%7Cdivid%3Dskm-ad-flexrec-2%26st%3Dflxrec%26inview%3Dfalse%26loc%3D8%26impuuid%3Ddf276e76-9c3b-43f1-8d8d-440ebeb752d5%26inst%3D4%26stinst%3D2%26optimera%3DNULL%26id%3D0fd6b8d2-b8bb-11ef-bed9-f2865b187d00%26vw%3D40%2C50%2C60%26viewable%3Dyes%26amzniid%3D%26amznbid%3D1%26amznp%3D1%26amznsz%3D0x0&cust_params=permutive%3D105086%252C106672%252C109765%252C109993%252C116061%252C124918%252C137974%252C162486%252C21967%252C32638%252C32745%252C33093%252C33097%252C33495%252C33515%252C34895%252C38334%252C40524%252C40529%252C41522%252C61680%252C73308%252C74812%252C87946%252C90243%252Cadv%252Cbrrw%252Cbvdu%26puid%3D157dd11f-3e11-4df1-8753-75ca7ad4b96a%26ptime%3D1734029892389%26prmtvsdk%3Dweb%26amznbid%3D1%26amznp%3D1%26pvuuid%3D8ef64c13-ba91-4076-b002-fcd5e509ba20%26atlas%3Dy%26addir%3D%252Fsk%252F12%252F122%252F1226456%252F26278%26site%3Debaumsworld%26plat%3Ddesk%26pt%3D-%26schainv10%3D1.0%252C1!pmc.com%252C1226456%252C1%252C%252C%252C%26browser%3DChrome%26pageview%3D1%263pc_stat%3Dactive%26atlasfpc%3D059e2ab8-ae24-4110-a5f5-5d3ff5a3eb07%26refresh%3Dn%26domain%3Debaumsworld.com%26urlhash%3D177546%26ci%3Dfront%26li-module-enabled%3Dt1-e0%26experiments%3Dliveintent%26admants%3Dfail%252Cfail_timeout%26opti_page%3Dde_n%252Fa_n%252Fa_US_n%252Fa_n%252Fa_Chrome%26adt%3DveryLow%26alc%3DveryLow%26dlm%3DveryLow%26drg%3DveryLow%26hat%3DveryLow%26off%3Dlow%26vio%3DveryLow%26ias-kw%3DIAS_3005109_PG%252CIAS_3010449_PG%252CIAS_3007987_PG%252CIAS_1510285_PG%252CIAS_3010239_PG%26fr%3Dfalse%26batch%3D1%26boom_session%3D52994c0b4aa035&adks=593258508%2C2552345754%2C3619856587%2C2874822916%2C2874823035&frm=20&eoidce=1&td=1&egid=28299
Preview:	{"/8352/a.ebaumsworld/entertainment":["html",1,null,null,1,250,300,0,0,null,null,null,1,[["ID=a114a20155fe8142:T=1734029906:RT=1734029906:S=ALNI_MaCWxvbk3OhOvJYJhFgtEuuevglRQ",1767725906,"/","ebaumsworld.com",1],["UID=00000fbbbcad5772:T=1734029906:RT=1734029906:S=ALNI_MZOr91MrRTJk5zdfhGpDXrc9u76Zw",1767725906,"/","ebaumsworld.com",2]],[138485039312],[6765374128],[5646359508],[3572290799],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsmvYl1GI7PnkMR34uUoWs0wFjlNEOma-xPLMLFGDEt7mYcs3eAuuj6zHSOtIGHhAj9V2xLeUFLfvQP7sNULIvg","CKKk6uT0oooDFfckBgAdnA0sOg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qM_b1iXTQjlrcGdQh0bmWUv1gYf32O3vOCDLPm1XUAgJS_P0EWbWBzwppsmdk8ZWTWO-rbVzviUYw",null,null,1,null,null,null,[["ID=50f8a2da20ae5dd6:T=1734029906:RT=1734029906:S=AA-AfjapHyG6-sYTJqJLiwC9BeHH",1749581906,"/","ebaumsworld.com"]],[]]}.<script id='ias-1156003258'>\n (function() {\n

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 164821
Category:	downloaded
Size (bytes):	45565
Entropy (8bit):	7.991811227285949
Encrypted:	true
SSDEEP:	768:6YC454Ib64Wf0kT36NVJkk5fpXQzLft/ZV0cAxi0Kj80S7nR+VZq/H:6YC45jb64WxKFkKRgPp70zPKj8/nR6s
MD5:	F6B0430412766531C6573FA00A364173
SHA1:	A262E6ECFD3B4B3E963E7E974334EBDA571D6AE9
SHA-256:	DA0BFD5FFD43BCF2CC2DA4532A3943F2B67DEF49B291DBF27B7BA0E9775CB154
SHA-512:	4C6B1B9FA7BF8FCCF0F4548F47D10D6DD1F83A542D220A5442B59C6F7CA0698BDD12A8E7981688C3A58DE17A6D8AFA222DD97913E801E0D8C62F7869B98B5F6E
Malicious:	false
Reputation:	low
URL:	https://d15kdpgjg3unno.cloudfront.net/oPS.js?cid=21
Preview:	...........}.W.H.......{=.M.h.-.M..l..&1`c3\.6l...$......T.V[&$.Y.9/...Z.[uum].z.=..`....Tog...GG..\.....I2+6.1..-._y.L`E...@....~..;P.R!K}...r..x..l>/.;q.......VR.Y(K...XG}.ey...j.l.P}d.f.c.Y(b.m.$..r..YF...Y_..j....=[...Mw..;.....-.%.. W..L.<R...bj.......N.J~..?.....k.juS...y.93.I.....%.6..,.~.^FY/-D...z.m.6m1.jT.d~......-...(5..U.nY..Z.0.`..}1.K.,.9....l@G.z.!.n...Q..&.....pGB.....s..4....U,.fM:B>.OF..+.z..g.~!.aR...x..$..U..k}J_..yl..e..eJ....Q..,.Y._...H..i.G>...h.....<..:.E!...P.%}.J.^B.jD.............m./.-......B.C.......f...pR....T`...z...`C+:..g..Ye.N......d....a.2....2.}.d\|.p.gB..k{..xzK{...Q.`..S.6,:B<.L.M...Vcm.pf.........Y./.Tl..\.Y..#.....?j.x.Z^....I.:.m..SU......~p...z..}...zW.5.T.J.F..]...P.+....iR..Y..U.............0~z..c..1;.....;..3. .....H.....AuL......qo-B...e2TF...d]E..l. ..H.f.%.J:......c;.,..h*t..g.>....{.=.@p.!.'t.A..8.....W?....B.u.Y.V.=Y..-...~..a..[v...b......Y..&l...".......(..`......WW.;...t>.~...3K..-X.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 61, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	993
Entropy (8bit):	5.981467696635924
Encrypted:	false
SSDEEP:	24:sy1he91Wwjx82lY2T3ouVArZqxyJ3VpVXkV+GCBkFZF:swqQNn2xA0QJ3/VXQ+2F
MD5:	32218B318407F393F630DC362038F5C0
SHA1:	5F738ECE70C8BD5CE1579E37BF5AC9456E892A00
SHA-256:	8F5DC1376BFD127BC7AC2B076626002EF1FCC63FC87C879BBC4B717316DF4765
SHA-512:	85E10FE42E2117587F70AB079BBA9F65731F4BAAF98EC04059C046B6FA8D343587C139872A13BA95801386D9BEEB2EBB5F3155277F3E9162E9E2D65A60C8A034
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......=.....l.._....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:39475F6A406011E5BF45F08EAF048086" xmpMM:DocumentID="xmp.did:39475F6B406011E5BF45F08EAF048086"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:39475F68406011E5BF45F08EAF048086" stRef:documentID="xmp.did:39475F69406011E5BF45F08EAF048086"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.T.z...UIDATx.b..Rfb.., ..Dp......".A. ....b B.D..y..."TA.&....3.`Aea..".A..<JXI3. ...o........5.@g....IEND.B`.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	dropped
Size (bytes):	503867
Entropy (8bit):	5.512590647226025
Encrypted:	false
SSDEEP:	6144:VA+dtQf2iTXNrXIhgKQ0XCS77EDIFfuZBuXKl1T2EFi+B:qTfD6H/EauZBual1T2Ej
MD5:	14D570E2B18EDB45C60D292320C92D9F
SHA1:	F33FB3E83C6894F590C8C9348B11FAC2E6827EE8
SHA-256:	04D85FDAA240E9C6964C1B3AFE75B8802720A8D9A98E6C35F346F599B1113AF4
SHA-512:	43DD920A68256864EE489B222AC5823F5EB597071E7832D935257E1D484E84146C09BEEEEE384F38CEA25FCF489BED02AB76DE420CD66E9131AC445075F53A69
Malicious:	false
Reputation:	low
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ca,ea,ja,xa,za,Ea,Ga,

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1789)
Category:	dropped
Size (bytes):	39061
Entropy (8bit):	5.504548260755914
Encrypted:	false
SSDEEP:	768:sImuPiaCqUE/72mH1GAWnzxiCtMF4JVT+TeHHSoO3DW9:s5HqUE/72mH1GdMD4LT+TUTOK9
MD5:	F67B5223EB575F586066D2A5212C0942
SHA1:	F91D28FDCF08B35E011D4A8F50E5971525449CC3
SHA-256:	3A1F53A72A4FF3C23812F7A06CC3EF3EA1F188046F2C75D9C0B19E1CB2B652A9
SHA-512:	C6B468DE4FCCEFA003BA82F16B52ED8DDED7A1E32692EF349A2DE48493FA7A0DCFA995F92A4E2F066533F7F580334E7CDE5E477202A8D44938AC603EA83152BB
Malicious:	false
Reputation:	low
Preview:	(function(){var g=void 0,h=true,i=null,k=false,n,o=this;.function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"object";if(c=="[object Array]"\|\|typeof a.length=="number"&&typeof a.splice!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("splice"))return"array";if(c=="[object Function]"\|\|typeof a.call!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if(b=="function"&&typeof a.call=="undefined")return"object";return b}function ba(a,b){function c(){}c.prototype=b.prototype;a.M=b.prototype;a.prototype=new c;a.prototype.constructor=a};function ca(){}.function da(a,b,c){switch(typeof b){case "string":ea(b,c);break;case "number":c.push(isFinite(b)&&!isNaN(b)?b:"null");break;case "boolean":c.push(b);break;case "undefined":c.push("null");break;c

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	124775
Entropy (8bit):	7.97040645463538
Encrypted:	false
SSDEEP:	3072:Sj9/mMQQ45xAsOxHf66iAfNE5zOZ4YtoOmA1FF9U54Ph:2wMXVlPfIOZUQ3IAh
MD5:	027B5BA62FAC8B3D3C8C891342215533
SHA1:	C8E84EEDB3AD9E3A17029A6E2DB50D46435DB097
SHA-256:	0629B47F9481AFBDEDC0B98D08A00E5237AD9BD576A81547AEDCDD438B2F45A3
SHA-512:	3F6A5ED7F435FFF2C05CFA9899BF9A776EAFB0667E7FAA85C0A32E98CCDE129C1386BDEA8EECC6E8455503339DE201731B1B3CD6F95B0F848DADA4DC5A25E682
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/12/095024/87646647/santa.jpg
Preview:	......Exif..II*.................Ducky.......C......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92" xmpMM:DocumentID="xmp.did:081FFD5C93D311EF80FCF1785A390697" xmpMM:InstanceID="xmp.iid:081FFD5B93D311EF80FCF1785A390697" xmp:CreatorTool="Adobe Photoshop 25.11 (20240619.m.2671 4c88022) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92" stRef:documentID="xmp.did:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2210), with no line terminators
Category:	dropped
Size (bytes):	2210
Entropy (8bit):	5.210677842399443
Encrypted:	false
SSDEEP:	48:ThNEQ2A4VNVtkQYinTWoUP2psVrOy8vHGhTZnuPkjim0:ToHVtMinTWoHspduGvnrjG
MD5:	C8A708A589ACCEA7FACA1204C99A395B
SHA1:	7A6E5B658D176DDB8C3DB70DBEEE2B5330E4E2EC
SHA-256:	C19591DFB7F595D8A2C1392B26AAFAC5CF83B77DC4641D64D1BD8D67C6CC7ED0
SHA-512:	B2255417AA7690940FF3524FE16E6399403851D2FE7BF988A1E262D5BCCCD6B7178A5F251FA6271F9A82FDAECF8E2927EA2257388802CBA1E1C09BD9B84722A5
Malicious:	false
Reputation:	low
Preview:	(function(){var e=location.search.slice(1).replace(/\?/g,"&");if(/^womp\|&womp/.test(e))try{var t=function(){var e=document.getElementById("wMask");e&&e.parentNode.removeChild(e)},o=function(){var e=document.querySelector("head"),t=document.createElement("style");t.id="wMask",t.type="text/css",t.innerHTML='html:after { background: #fff; bottom: 0; content: ". . . Loading . . ."; display: flex; font: 20px sans-serif; align-items: center; justify-content: center; position: fixed; left: 0; right: 0; top: 0; z-index: 9999999999!important;}',e.appendChild(t)},n=function(e){var t={},o=/([^&=]+)=?([^&]*)/g;e=decodeURIComponent(e.replace(/\+/g," "));for(var n=o.exec(e);n;)"null"===n[2]&&(n[2]=null),t[n[1]]=n[2],n=o.exec(e);return t},c=n(e),r=function(e){var t=/^womp/i,o=[];let n="";Object.keys(e).forEach(n=>{t.test(n)\|\|o.push(`${n}=${e[n]}`)}),Object.keys(o).length&&(n="?");var c=`https://${location.hostname}${location.pathname}${n}${o.join("&")}`;window.hist

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (539), with no line terminators
Category:	dropped
Size (bytes):	539
Entropy (8bit):	4.598912011399093
Encrypted:	false
SSDEEP:	12:iWRSafoJfAAf/0HR8/JKAX8iyyyyyyyy9/yF5UFWRSy:iWSa7Af2tAvegy
MD5:	07DA4F027F7F12613DCAE4E26C25A6C5
SHA1:	CDB7051ABE6EEC8126CACE4503A1E94FBE53EA3B
SHA-256:	C25E9C93CD91E782F9FED1463383469EA2A23B80556A6DA6E97D0083170D30D8
SHA-512:	E542E97E814BA1266B55D51CFEFA69BACD2148B24A5AE12493422F2F46AAB4E2AE5C6908EB240E9BC27E764B9F2FBD9A96289F16B0F31F6997340061E7D4B4F9
Malicious:	false
Reputation:	low
Preview:	Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.FetchController.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.Long,java.lang.String,java.lang.String,java.util.List<java.lang.String>,jakarta.servlet.http.HttpServletRequest,jakarta.servlet.http.HttpServletResponse)

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65445)
Category:	downloaded
Size (bytes):	353229
Entropy (8bit):	5.283276710488191
Encrypted:	false
SSDEEP:	6144:qgLOc0CA7Ev6SXQ4DwPP02E4gtSOjtxT3Yg5FNj:qgLoCT6SXQ4DwP/EXtSatV5Fl
MD5:	812CEBA01127F3BF5AEDE260EADDCD29
SHA1:	4286D4DC8CE0C2A5AB4F71F291DE419F40910196
SHA-256:	3BF4F940A69CF7D1AF0797F0371DDAE937A8274190B22EBE165F0F7223B0E670
SHA-512:	101E3658670F994DD5957F973B191ABE573E630060EB51C2AB78DC8C5732157EDC715A4C50F6E72542EED9DBC0F5C2384A01BC13CD5612B7EDC8C3D5A8B09491
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/cached/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.1105.2150 - 2024-11-05 21:50:53 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};function e(e,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function o(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(o.prototype=n.prototype,new o)}var n=function(){return n=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},n.apply(this,arguments)};function o(t,e){var n={};for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&e.indexOf(o)<0&&(n[o]=t[o]);if(null!=t&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(o=Object.getOwnPropertySymbols(t);r<

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8582)
Category:	downloaded
Size (bytes):	8651
Entropy (8bit):	5.160317510208701
Encrypted:	false
SSDEEP:	192:9O+zpbnZZAnLlrq4dHBuk8+P1mL/yszItuJ:g+F7ApGuHnuJ
MD5:	1E96385C723F0E053D69519512737547
SHA1:	70CECA462D3C6C43B13AE7785173C9A794EFDC31
SHA-256:	84AF68610F4786EC7F925ACF58C66E01D22EB1CCF97ECD953111494D1E0AF871
SHA-512:	3D98F65948CE92DE6E234718B775638EE7A060E47A7BA09312373452183CAF5959833480BAF0DC68F8B7C778AE8720BA9C48C93EA788D8A10AE8D98A97AA0E0D
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/4932.82adddbd6331dd03c641.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */.(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[4932],{74932:()=>{window.optiCommon=function(t){var e={};function r(o){var n;return(e[o]\|\|(n=e[o]={i:o,l:!1,exports:{}},t[o].call(n.exports,n,n.exports,r),n.l=!0,n)).exports}return r.m=t,r.c=e,r.d=function(t,e,o){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:o})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"u",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.u)return t;var o=Object.create(null);if(r.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var n in t)r.d(o,n,function(e){return t[e]}.bind(null,n));return o},r.n=function(t){var e=t&&t.u?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){retu

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17488)
Category:	dropped
Size (bytes):	17555
Entropy (8bit):	5.229032755765398
Encrypted:	false
SSDEEP:	384:olYxko7mapOc5yzfwAh1P/+u76jGEC21v4HQfvqFtFkzd:olu7ma95+feXjGEC6v30kzd
MD5:	F484B4880B6E7F8F893DD1FA1549FAD7
SHA1:	2E3E9AE56B36A0CC7DE494EEFE81D87EB531DB4B
SHA-256:	0495037E10E24567A4819398AF4DC0F1454F2541B58DE3D2116C75998A02AC77
SHA-512:	9A11302C541E0511BC5D91A00FBB7C8DE727D0D282710F2DCF8364F06E47FC54D1CB342078FCC06763365E99FCFDFBBA85D343A250EE45DBDF6B81A29A23EF4B
Malicious:	false
Reputation:	low
Preview:	Math.random()*10<1&&(function(a,d,p){if(!p){__$PP=p=function(k,v){p.e(k,v)};p.w=[];p.q=[];p.e=function(k,v){p.q.push([k,v,0])};__$PP.e=function(){var e,n,t=0;function i(){return e\|\|((e=document.createElement("div")).style.position="absolute",e.style.width=e.style.height=e.style.border=e.style.padding=e.style.margin=0,e.style.overflow="hidden",document.body.appendChild(e)),n&&clearTimeout(n),t++,e}function r(){--t<=0&&(n=setTimeout(function(){e&&(document.body.removeChild(e),e=null)}))}function o(e){return"Error: "+e.name+": "+e.message}function a(e){try{return e()}catch(e){return o(e)}}function c(){if(!location.ancestorOrigins)return"n/a";for(var e=0,n=[];e<location.ancestorOrigins.length;e++)n[e]=location.ancestorOrigins[e];return n.join(" ")}__$PP.h=function(e){var n,t,o=2166136261;for(n=0,t=e.length;n<t;n++)o^=e.charCodeAt(n),o+=(o<<1)+(o<<4)+(o<<7)+(o<<8)+(o<<24);return("0000000"+(o>>>0).toString(16)).substr(-8)};var f=__$PP.h,u=window.requestAnimationFrame\|\|window.mozRequestAnimat

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64441)
Category:	downloaded
Size (bytes):	64510
Entropy (8bit):	5.604559632116108
Encrypted:	false
SSDEEP:	768:SCh8+lZ0SinLqubo/mv6znz41H8ty6k/2R7zLj2+qlCkqIcpgm1Luq:BplZwqubo+Qtmaj2+icVuq
MD5:	FE5BB91A5538AD97594ECACABC57C49C
SHA1:	F2806F4B0E9CC3B267C08DF6DA0418A4ECC402CC
SHA-256:	891EB3F24274F7805D1C8D5DA7BC4A0563966E290F9B571187DFC866CFAAD781
SHA-512:	23CB9A797E9D2F6964AD06FF43F68B000430601B35CFE0CEB7C08A3572BEA935AC5405BB0AB3EE9FE64BAEAA510899D82E7872A28C7B3CB6938C325AD81B8D51
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/992.49eb43434b6f7d152e95.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[992],{15112:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{var _babel_runtime_helpers_toConsumableArray__WEBPACK_IMPORTED_MODULE_11__=__webpack_require__(45458),_src_prebidGlobal_js__WEBPACK_IMPORTED_MODULE_14__=__webpack_require__(28880),_src_utils_js__WEBPACK_IMPORTED_MODULE_7__=__webpack_require__(2766),_src_utils_js__WEBPACK_IMPORTED_MODULE_8__=__webpack_require__(70433),_src_adloader_js__WEBPACK_IMPORTED_MODULE_6__=__webpack_require__(27677),_src_adapters_bidderFactory_js__WEBPACK_IMPORTED_MODULE_13__=__webpack_require__(56424),_src_config_js__WEBPACK_IMPORTED_MODULE_5__=__webpack_require__(70041),_src_mediaTypes_js__WEBPACK_IMPORTED_MODULE_3__=__webpack_require__(62774),criteo_direct_rsa_validate_build_verify_js__WEBPACK_IMPORTED_MODULE_0__=__webpack_require__(28507),_src_storageManager_js__WEBP

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (541)
Category:	dropped
Size (bytes):	610
Entropy (8bit):	5.469919066655723
Encrypted:	false
SSDEEP:	12:UO789Dk1phQhJ+iGLFqFO/FTeLn9kKHBRFeWkBmb6HVBByVDwZ2P2:U+lLFhFTeLn9kWRFeBmbeBBsDw8O
MD5:	E8C8439B9F13D2927FAE2D3B4DC6BE50
SHA1:	891C2128D6D894015376636375D406915060CA74
SHA-256:	71680E4B29A9565E08F490D5DAE43AAF9236F6E9209B8C9F951CC64D5512DC46
SHA-512:	812D2217B2DDEEF93C7FA0C1A00E89704535A27F250FFDC2E0B8CDE46495729586CBEB348EC91ACC298ACA63E1BF5E0C5D1CCA95D8C51DDF92BAA4959A9A0E32
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[6767],{86767:(e,d,_)=>{_.r(d),_.d(d,{default:()=>r});_(75765);var t=_(18269),i=_(13158);const s="indexex",a=`${s}_video`,p={preroll:"505860",outstream:"505861",midroll:"651756"},r={getBids:e=>{if(!(0,i.vx)(a))return{};const d=t.A.get(`indexex_video_${e.type}_site_id`)\|\|p[e.type];return d?{bidder:"ix",params:{siteId:d,video:{}}}:{}},prebidBidderCode:"ix",getBidderName:()=>a,defaultCpmAdjustment:100,defaultCpmAdjustmentIBV:50,sspName:s}}}]);

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8471)
Category:	dropped
Size (bytes):	8540
Entropy (8bit):	5.201592178334948
Encrypted:	false
SSDEEP:	96:k+pXmPEnoo3eTmUu93ndiwKAocNH8jTLiy9YZjTovAdTrqfxLxsbzKgp:1XmP6PeTmUS39KAZNcjiyIk4dCZmnKW
MD5:	7D38D5685916894E289416B19A67A2BF
SHA1:	0C8B48E8BB64C850AF861BA67C28F14A9A06352A
SHA-256:	E8AB22EB06BCA56C0089D27ADAF5C31169D73C7855FE42A632D0DBBCE95E9D7F
SHA-512:	05A3876D0CF51C8E77B131DEEF19C07A4D9F222214F5B6F3F713E3BB75D3CF47946F47714CD1ED0A5BB08F6DE55E81819E76CE941E05D8CDC69A307DA83CF8A3
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[9438],{6461:(n,a,t)=>{t.d(a,{A:()=>d});var r=t(31601),e=t.n(r),o=t(76314),i=t.n(o)()(e());i.push([n.id,":root {\n --blogherads-branding-background-color: white !important;\n --blogherads-branding-bhaheader-background-color: white !important;\n --blogherads-branding-privacy-color: #666 !important;\n}\n\n@media (prefers-color-scheme: dark) {\n .sk-branding-autodetect {\n --blogherads-branding-background-color: transparent !important;\n --blogherads-branding-bhaheader-background-color: transparent !important;\n --blogherads-branding-privacy-color: white !important;\n }\n}\n\n#blogherads-branding {\n position: relative !important;\n background: var(--blogherads-branding-background-color);\n}\n\n#blogherads-branding-container, .blogherads-branding-parent-container {\n max-height: 10

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8107)
Category:	dropped
Size (bytes):	237547
Entropy (8bit):	5.5613403095546685
Encrypted:	false
SSDEEP:	3072:C3ZFrjSUihzAxL0E6RKsRm1t6hTf/9q9bdTOmQyDy4WGQDa:6GUih85iZD989OmQyDy4+m
MD5:	695138F379FB937885DC2520CE55A298
SHA1:	95A5BA64DBC4A1547E44EA6A81B7450855B6DB31
SHA-256:	4980433890595AC4215D75DFEC9B5D3336562A62C1B8712E43BA2B02078AD3D6
SHA-512:	7B1824A944388A16AEA8AFD180B2B217FF003771CAC903D516772E71B794B055CCFF9D8E795526BDABD1326392CF47A3948A87D9C3C3F49A9ED238148512D9F4
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"57",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"loggedIn"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"author"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"bottomLevelCategory"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"moderatedStatus"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"pageSegment"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"publishDate"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_s

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22521), with no line terminators
Category:	downloaded
Size (bytes):	22521
Entropy (8bit):	5.286440087506929
Encrypted:	false
SSDEEP:	384:v0ArvPtcYTrC64NYDcnNMJWq7V/BISl7V6Cj0k08R7qq5mmlzm4WQYuJ1d3nvB2Q:JcKrDD2W7V/77V6k0kDR54u13nvBtjHv
MD5:	51636DE3CE868A2172F9E6996C2934E0
SHA1:	9B5DE9F2BE0AF95B03FC43F0B1BFB9F25F81A900
SHA-256:	2AFCABE2EB6314148DFD9DFDEC1333B973D97D0780CC08FDDAB8501AFBB013E9
SHA-512:	A01C26BE01E93F32DA42F1BA642D21F8E1F828F6475CC44B916D739C0679E977FD99A7B57FD3DBD2CA6E27524717362B054886F4131D7D90BBCF7CF442DAA9A2
Malicious:	false
Reputation:	low
URL:	https://cdn.adsafeprotected.com/iasPET.1.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=1)}([function(e,t){},function(e,t,n){"use strict";n.r(t);n(0);var r=function(e){return{width:

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474)
Category:	dropped
Size (bytes):	616505
Entropy (8bit):	5.4264322041954385
Encrypted:	false
SSDEEP:	12288:W3JiajiwC2+P0f21wafpdTUPFkGI7CkG3qhv:iJia36Q2pTUPFkGI9l
MD5:	CCAAD1B4551C0B2FB1D27CBA28BAE6EE
SHA1:	1D32B61ADF380C13C64E328B5A3AAAF75BD04AF7
SHA-256:	5ADE6DBBCC9824FDD0A9B98C67FE2FC9ED0F69A5BD906B99B163F1E26914240F
SHA-512:	349EF5211C89CE43AD7F981857597BFE89DA833FB25E9FA52DC0BF97A280243357931FC800A98CEB7C4AA405B3276287964648AFE21A40BBE3FD95CE6C361FC4
Malicious:	false
Reputation:	low
Preview:	/! For license information please see load.js.LICENSE.txt /.(()=>{var e={561:function(e,t){var n,i,r;i="undefined"!=typeof window?window:this,r=function(i,r){var s=[],o=s.slice,a=s.concat,l=s.push,c=s.indexOf,u={},d=u.toString,h=u.hasOwnProperty,p={},f=i.document,m="2.1.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseJSON,-ajax/parseXML,-ajax/script,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated,-effects,-effects/Tween,-effects/animatedSelector,-event-alias,-wrap",v=function(e,t){return new v.fn.init(e,t)},g=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,y=/^-ms-/,b=/-([\da-z])/gi,E=function(e,t){return t.toUpperCase()};function w(e){var t=e.length,n=v.type(e);return"function"!==n&&!v.isWindow(e)&&(!(1!==e.nodeType\|\|!t)\|\|"array"===n\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}v.fn=v.prototype={nquery:m,constructor:v,selector:"",length:0,get:function(e){return null!=e?e<0?this[e+this.length]:this[e]:o.call(this)},pushStack:function(e){var t=v.merge(this.constructor(),e);

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	3093
Entropy (8bit):	5.586182575950065
Encrypted:	false
SSDEEP:	48:S+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwNSDuExjGx:S+5AQHAray48f5JMYHIqNSDu9
MD5:	19096DADF27736BB4E0F7AC6862D07BA
SHA1:	4C8019CF9AE6AB649234C6CCC6527F1704E4D4ED
SHA-256:	4EE6D0DE92447CE6A5039799D22988EC9F0156CEA43AFA5C98CE57DA719F4BD8
SHA-512:	87BA0BCB1EF2B032AC066672B2BD8E3FC1924F8309168420C65F13E552E352B375F9EAF4F9043488B102EC89CE2F3BE0D9C5F8798AFE1F95FAE1310D2B8307AE
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js
Preview:	/1734029231,,JIT Construction: v1018821596,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1348
Entropy (8bit):	7.568179122942663
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX31+rtu5B1l7ll/4nfPoODj0IWL6Gd:5fh9YMLuERAD+CpnWoODA6vbm
MD5:	83A15E3F539D3B1A748108523B4405E4
SHA1:	8139C97733017E82A598B495210BA817CE87570D
SHA-256:	8DCAE681DB9813BF7F4BC0AA4DBED81174C746F5AB719AC53A2B4C26593FC123
SHA-512:	48F3CF8406C7C06DA49A9C360BCBA8847DEAD48365E4583FF903A36C74DA6B5BDD415C4CA6DED70CDF590588B7C05DA431376CC5FF64D64F7734285C7471F213
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..9..'.X.K;.U@.$..W.u>....q.,.........M.R....C.Y.....[...;F..a.E;z.RN?.u...._...d....\|.r..1R....Y_.....W......b..ub.#..~..;>..M.)x..~...o.,.) .Y..a....k.~7.7..]....,..R2?..^6+....YG..;h..E;.D...w%..eq..V....?Z.N..E:.......)....A.9l(.u=?R....8Y.v..... .Z.~$.i.....C..<..^..M.d..9.pY.....}p;~.....Q...*..

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 126, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4428
Entropy (8bit):	7.823268362542753
Encrypted:	false
SSDEEP:	96:ntvnv4N8y3Ee8e15ZZYBi5qgFYZ6rwYYssIL+xs:tvnvkV/t5qgFY0rwYDvS6
MD5:	4884E7387D34802751BC50AED223D98E
SHA1:	BD5AE4E20D6FA334FA909AC1CF4D916040FC7C8B
SHA-256:	EC15B47E443A140E288487735C191D3430BB7B9E9059145E8D0B0169E4FBAB09
SHA-512:	E9FD4F16D1ABF6EB33A7FAF073C49F7ADEFBC705C28FFCC77B9E569C13047919BF0ECF8CDC69D846E0ED30794136E4FB48AD6AEE019B69184ED13BB93F35C195
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/img/desktop/socialSignInIcons.png
Preview:	.PNG........IHDR.......~.....>......tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2ecfddcb-eca4-3b46-8bbd-685f9b01078d" xmpMM:DocumentID="xmp.did:15D77E8B6B9611E59B7CB148338E788D" xmpMM:InstanceID="xmp.iid:15D77E8A6B9611E59B7CB148338E788D" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ecfddcb-eca4-3b46-8bbd-685f9b01078d" stRef:documentID="xmp.did:2ecfddcb-eca4-3b46-8bbd-685f9b01078d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.W(....lIDATx..Z.tT....n...L2.m.....

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9251)
Category:	downloaded
Size (bytes):	244801
Entropy (8bit):	5.453841413977933
Encrypted:	false
SSDEEP:	3072:/FLeYH8SRWJ/37OeR8NteqZEbkxZNsucrl0xYurPK713cCq:/FLeYcYWJzH8NNfFcrHurPK713Rq
MD5:	C9C37DBE6B077A4AAEEEA29AF4857656
SHA1:	E9A790D720E436BA047D67C4D441E840D660433D
SHA-256:	C4EB49795F7A703429E7012CEC0A556E6FAF6F551F07CD337F66C5A1EC3A5847
SHA-512:	660F8CD397BAFA6D8F44BA4C2CD066AAF934A69B5E608D6CE63636240E339ACFF93AE9B72F6B01C4E29BF9C89B11A73C2D5D3F36EFEAD5194D138B38F7E0DFA4
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49985)
Category:	downloaded
Size (bytes):	388132
Entropy (8bit):	5.323210021166498
Encrypted:	false
SSDEEP:	3072:Svx87GSxs8r/kml1bzPagoM5vKpd9tHtItaOiPu5mLd5BifXp31Q7RT:17Lxsa3z3agPyr4iBLVifXp31Q7RT
MD5:	F3E9EA9058F13AF3C378C09010DB9552
SHA1:	26944688D3D8E533C967AC6D0DA5A415E997FFC7
SHA-256:	FF2A5FD50F4B23B6BD2FF55951F3830BFB5A76615F8310269FA88374D0E78070
SHA-512:	4EBC14E39EC37B3CE8094FD30FA0801CD491C83FAEC5C7AAD9896BED060756C44BFAF7EEA6BAC2A1E64239A5F27239E0262CB9B9DDA402C28364140455A80990
Malicious:	false
Reputation:	low
URL:	https://s.ntv.io/js/prebid5.js
Preview:	/* prebid.js v5.17.0-pre.Updated : 2021-10-07*/.!function(e){var t=window.ntvPbjsChunk;window.ntvPbjsChunk=function(n,o,a){for(var c,u,s,d=0,f=[];d<n.length;d++)u=n[d],r[u]&&f.push(r[u][0]),r[u]=0;for(c in o)Object.prototype.hasOwnProperty.call(o,c)&&(e[c]=o[c]);for(t&&t(n,o,a);f.length;)f.shift()();if(a)for(d=0;d<a.length;d++)s=i(i.s=a[d]);return s};var n={},r={367:0};function i(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=n,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i.oe=function(e){throw console.error(e),e},i(i.s=924)}({0:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),n.d(t,"internal",(function(){return w})),t.getPrebidInternal=fun

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2210), with no line terminators
Category:	downloaded
Size (bytes):	2210
Entropy (8bit):	5.210677842399443
Encrypted:	false
SSDEEP:	48:ThNEQ2A4VNVtkQYinTWoUP2psVrOy8vHGhTZnuPkjim0:ToHVtMinTWoHspduGvnrjG
MD5:	C8A708A589ACCEA7FACA1204C99A395B
SHA1:	7A6E5B658D176DDB8C3DB70DBEEE2B5330E4E2EC
SHA-256:	C19591DFB7F595D8A2C1392B26AAFAC5CF83B77DC4641D64D1BD8D67C6CC7ED0
SHA-512:	B2255417AA7690940FF3524FE16E6399403851D2FE7BF988A1E262D5BCCCD6B7178A5F251FA6271F9A82FDAECF8E2927EA2257388802CBA1E1C09BD9B84722A5
Malicious:	false
Reputation:	low
URL:	https://amp.ebaumsworld.com/7778/amp.min.js
Preview:	(function(){var e=location.search.slice(1).replace(/\?/g,"&");if(/^womp\|&womp/.test(e))try{var t=function(){var e=document.getElementById("wMask");e&&e.parentNode.removeChild(e)},o=function(){var e=document.querySelector("head"),t=document.createElement("style");t.id="wMask",t.type="text/css",t.innerHTML='html:after { background: #fff; bottom: 0; content: ". . . Loading . . ."; display: flex; font: 20px sans-serif; align-items: center; justify-content: center; position: fixed; left: 0; right: 0; top: 0; z-index: 9999999999!important;}',e.appendChild(t)},n=function(e){var t={},o=/([^&=]+)=?([^&]*)/g;e=decodeURIComponent(e.replace(/\+/g," "));for(var n=o.exec(e);n;)"null"===n[2]&&(n[2]=null),t[n[1]]=n[2],n=o.exec(e);return t},c=n(e),r=function(e){var t=/^womp/i,o=[];let n="";Object.keys(e).forEach(n=>{t.test(n)\|\|o.push(`${n}=${e[n]}`)}),Object.keys(o).length&&(n="?");var c=`https://${location.hostname}${location.pathname}${n}${o.join("&")}`;window.hist

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 77 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2219
Entropy (8bit):	7.462448488096014
Encrypted:	false
SSDEEP:	48:V6vnLDQ0YPnIJ3MQu52cLzbThxOlCxZu/uXzHKOJR1U:oGFUefHM/euwk
MD5:	8827E02454B5CD2F3032BB6B5F6A61D8
SHA1:	441A0F960A208561AE3CE5A04A22D8C0FEECE917
SHA-256:	21BC65F86E0CD8DFBE47D505C85430A1356B7285E09F10A5FE1EFF893DD27314
SHA-512:	B2CA0D45092B47468E307744D6C0C3BE9D5FE2EF128BB708B64992CB588785013E97EBA30E537F5C99D9014153DDA89E35A1D499D0CD3EB0FF87AC2B398ED97F
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/YAC_AdMarker_Icon_Text_77x15.png
Preview:	.PNG........IHDR...M...........B.....tEXtSoftware.Adobe ImageReadyq.e<...piTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3615B20F94206811871FA7837B3E38CD" xmpMM:DocumentID="xmp.did:B0950AFA4FB611E889AA9BEB0A159B79" xmpMM:InstanceID="xmp.iid:B0950AF94FB611E889AA9BEB0A159B79" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f2119e-9b4b-4b8e-a056-0a5572d2cc02" stRef:documentID="xmp.did:3615B20F94206811871FA7837B3E38CD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..."....IDATx..W]H[g...P...!zZ.\6...p.A3X.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2929
Entropy (8bit):	5.249516409672825
Encrypted:	false
SSDEEP:	48:YsedZtpraRKpXyvovNImZ2FZgWhjN+DWDsHbHwOzaDaKQpusB/DaAwUoL7WDZACJ:beBUgc0OmZkizDWDkcOzaDaTpXpDidLU
MD5:	372D8698D321585D4B6888B6030227AE
SHA1:	83B2A167A524A8FB47338698CBB762BE7FC08C69
SHA-256:	6CE3D7DC55C942B4A427962E47FB0266F8603A441BF513F10BC5FF4F17FCC597
SHA-512:	240D5C3D11C3B12036408B5FCC017680B5B60B288DA711B7BEDE09243F0405866578417AED527D4E5D9EF80F8F36DC6E0EE4EAB5419DEF7BC1B94A9AC6710593
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=3161&u=https%3A%2F%2Febaumsworld.com
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lotameClientId = '16576';\n\ninitLotame(lotameClientId);\ncreateLotameScript(lotameClientId);\n\nfunction initLotame(propertyId) {\n var lotameConfig = {};\n var namespace = window['lotame_sync_' + propertyId] = {};\n namespace.config = lotameConfig;\n namespace.data = {};\n namespace.cmd = namespace.cmd \|\| [];\n \n namespace.cmd.push(function() {\n namespace.sync();\n });\n};\n\nfunction createLotameScript(propertyId) {\n var lotameSyncUrl = \"https://tags.crwdcntrl.net/lt/c/\" + propertyId + \"/sync.min.js\";\n var lotameScriptTag = document.createElement('script');\n lotameScriptTag.src = lotameSyncUrl;\n document.head.appendChild(lotameScriptTag)

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7426)
Category:	dropped
Size (bytes):	7495
Entropy (8bit):	5.346818814780176
Encrypted:	false
SSDEEP:	192:02Zfgp9Nstj01DYJlooC+n6SlgJtvqk08Jrxbx:VKfNcNIRrxd
MD5:	3D3C38E76499FE30B425BF3CBEB94E43
SHA1:	AA825B7E82C3FEAAA7E21329EB9FE1DB3CA43491
SHA-256:	4ADAE85E223640A7718BE70C79BE5B00AE2AFAB84547CF23A18C88277AF5DF5E
SHA-512:	3BE540B4638BE82C1D3059A43BE51CAA7322EAF7250B6B6608489483FA3DDC6D2808FC254069B37DF82D1D30364BD35490CEB20600BFC81CAC60600E4EE02203
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[1290],{41290:(e,t,r)=>{r.r(t),r.d(t,{default:()=>u,getTripleLiftInventoryCode:()=>c,inventoryCodesSizeMapping:()=>l});r(26205);var n=r(18269),i=r(81257),o=r(64785),a=r(34828),d=r(13158);const s="triplelift",p=s,l={"300x250":"sheknows_RON_flexrec_small_HB","300x600":"sheknows_RON_flexrec_large_HB","970x250":"sheknows_RON_970x250_IAB_HB","320x50":{tinybanner:"",bottom:"sheknows_RON_320x50_sticky_HDX"}},c=(e,t)=>{if(n.A.get(`triplelift_${e}_disabled`)\|\|n.A.get(`triplelift_${e}_${t}_disabled`))return null;if(!l[e])return null;const r=n.A.get(`triplelift_${e}_inventory_code`)\|\|n.A.get(`triplelift_${e}_${t}_inventory_code`);if(r)return r;{const r=l[e];return"object"==typeof r?r[t]:r}},u={getBids:e=>{if(!(0,d.vx)(s))return{};const t=n.A.get("triplelift_id_mapping")\|\|null;return e.reduce(((e,r)=>{const n=!r.def\|\|(0,a.A)(r.def)?[]

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20220)
Category:	downloaded
Size (bytes):	20692
Entropy (8bit):	5.39423975379339
Encrypted:	false
SSDEEP:	384:n9K+4Lm2iiHGL/LOG4rXgJgm2KqFbxzbBlYJf5jVhUPtdSHZNkrop8lGGvRXPuko:sjiimDSG+XgJp2KqFbxzbBlYjxZ2mUvG
MD5:	693160DCC9002B7045CA69EA938CF1EE
SHA1:	70A97DF99FA61F566E17B70D169FCC1A9A110A95
SHA-256:	4F5DD52EC11427A918A270E42897177CE4E159334648D191189D93CAFDC96D0F
SHA-512:	4DC969D83762E74763243FA9A420AA81FB732A381A2DD49B64324E550E8AEBA60112130D4252346216CDE38911CC377647F5EAD624A68AB8A1A0B1A5342A10F4
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/4056.d55507c9d13f2691685c.js
Preview:	/! For license information please see 4056.d55507c9d13f2691685c.js.LICENSE.txt /./* Copyright 2024 Penske Media Corporation. All Rights Reserved. /.(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[4056],{64056:(e,t,n)=>{var r;./!. * Sizzle CSS Selector Engine v2.3.10. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://js.foundation/. . Date: 2023-02-14. /!function(o){var i,u,l,a,s,c,f,d,p,h,g,m,y,v,b,w,N,C,x,E="sizzle"+1new Date,A=o.document,S=0,D=0,T=de(),L=de(),q=de(),I=de(),B=function(e,t){return e===t&&(g=!0),0},R={}.hasOwnProperty,$=[],H=$.pop,_=$.push,k=$.push,M=$.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},F="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",z="[\\x20\\t\\r\\n\\f]",O="(?:\\\\[\\da-fA-F]{1,6}"+z+"?\|\\\\[^\\r\\n\\f]\|[\\w-]\|[^\0-\\x7f])+"

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	582
Entropy (8bit):	4.685934726568606
Encrypted:	false
SSDEEP:	12:G0XWATWnSGwVrhOC5/ety4eg7oekH2N+bfB4IQb:G0X7CnViX/e3oekfB4T
MD5:	EC22FDD2CD0CCF11C7761864EFA96C06
SHA1:	67A83E4F0CCEC1FE4CDC918F188E10A8F18D07CA
SHA-256:	65A68015B07C4112EF79E926647B1A4DC88ED4FC869D5D3BB4B57FD5E452F565
SHA-512:	98A3FF501E8498464339B50809E4D5B09CAA78E4DAD733734BF165D8592C1A1B05342639A06C7E97184438D0C9F426995A9424465ADA8FC9B839D6D846476259
Malicious:	false
Reputation:	low
URL:	https://postrelease.com/iframes/topics.html
Preview:	<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">.</head>..<body>. <script>. async function getTopics() {. try {. const topics = await document.browsingTopics();. const topicIds = topics.map(topic => topic.topic).join(',');. . // Target origin is unknown so '' is used for any origin. window.top.postMessage({ topicIds }, '');. } catch(error) {. console.error('An error occurred with the Topics API:', error);. } . }. getTopics();. </script>.</body>.</html>

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 266 x 61, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4411
Entropy (8bit):	7.937875199295409
Encrypted:	false
SSDEEP:	96:7IPNlfpq7yJoCcN2HTjrPXqEys4OHu/JezLiEesTlE78ST4Ei7Iyz:7Eg7SYkHTPlys4H/cHT484yz
MD5:	EE33B1ACFD43FE15700ABD543BB94F76
SHA1:	109ADA6C108FB78E79F1DAAEB3FA37B0F8448519
SHA-256:	D282FA206D9142DA28DED8F228BBC26E9FCEF13DA72839F2B1257E3DA2E90353
SHA-512:	90009A47F9A70A4580D469CEC0F48375D518112E1303F22C7D030161393988D3210F40BC8F20DB53CB8AEAD9FFA464F97A0E07BB9E4440326A06DA55A3790F99
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/SMC-default-button-LIFESTYLE.png
Preview:	.PNG........IHDR.......=.....U.'h....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..].S[.._lc;.......M.t...Lf2.H..t&..m_.1Ez.........{;\..3.A<d..L$.m.4...i.:q.....-.`L.u..YqX.Oq.X:......{.....s.~ ...`0.....`0.....`0.....`4..6Z......L.ej....tV&c...+h.B.Z._..Q.D!....Hi..._....M..!......I.....H<.?.e.Y...c...DFHXa...^I...n.s^.S.2.._.,7..9...).o...;....../.^9.X....$..@CH....NJ..x....I.I.4Z$1)........C...}.e.P.8!;...zl.P...oQ,+..Do.....xg.b\..Z..0.U}./.......q.AyG..K."&..uz...Q.X..G.. ..7!?[.4..R.]H.,......e.....l.325!1(K..\|wD...@I...$VK%..N.(.K..\|..jQ.h...A..C3..(~...$...F.$+.G..O.u{.......>..}..J.r.NQ.&.v...!\|Np.<.....z.........\|.Y..O~...O.E5..2... d....'.!0v.E..(. ..2......v.k6..@`.Ug 1.$.v@.C.n.xk...$..m.Y.!...L.#L.Y....<,....=.....a.5S.L..Z!=x.H..J....w.j!$..@...{..6s41WJ.n....L.....As..:f...E.M`..@7.H."#.A0.[~.@......r ..G.f}.0.>......I.q...6AK......GC..K...Q.y.MFe.F....D2(..S..G....R....H...V?%.$ E8..5T.5..o.!.A..Zc...`da0.#.2%...h%.#Y.....8.M....k..2x......~

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	972
Entropy (8bit):	4.090648832096855
Encrypted:	false
SSDEEP:	24:hYKCkR/MqfVHPJd7BxoUx+pPvaqiaIeZ+gstI:IkR/McvzOZYeUde
MD5:	2ED21866B333FC8DC51A2593FF2B95D7
SHA1:	A76B758BA7419DF0B07AEE40B6D5D098FE10A9CB
SHA-256:	6331A32D28A60BD81BC72BFF6DDE4A580A0FC2627234B415C496762D75D5E965
SHA-512:	4B7F8EE77052E92E69A7276D44D928FD6015D53F5695B3FFA6B4C4F39FB5BE23076A4E49AA95053D7045EFF27751D7949CFB3A76E158B17EEABED228814C8DC8
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/cookiedetection.html
Preview:	<!DOCTYPE html>.<html>. <head></head>. <body>. <script>. const label = 'pmc_3pc_test';. /*. Writes cookie.. * Note: Consent is verified by script that embeds this page.. /. document.cookie = `${label}=true; SameSite=None; Secure`;.. function send(data) {. const payload = {. type: 'SKMBoomerangMessageRequest',. requestId: 1,. data: data,. method: 'notify3pcCookieTestComplete'. };.. window.parent.postMessage(payload, '');. }.. const cookies = new Map(document.cookie.split(';').filter(item => item.trim()).map(item => item.split('=').map(val => val.trim())));.. if (cookies.has(label)) {. send('yes');. } else {. send('no');. }. </script>. </body>.</html>.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9122)
Category:	dropped
Size (bytes):	253689
Entropy (8bit):	5.460432284463978
Encrypted:	false
SSDEEP:	3072:3oVVPCQkGPQbolpc0QMp8A/yBNtaOR4JXc4AgI:wVPCQkGPhpcwj/yBNtFR4JXc4AgI
MD5:	093C7EE7F68061F46C0753E826EA0E57
SHA1:	23450E9373D71EA946AB432F4EAADDD3A8046514
SHA-256:	0EA1D3BE41E27E836A97FD60071C6EC46DBAFE5A8E3E22FB2C4C9D00F980772D
SHA-512:	1CF424F63F8D0E3C38967F6578A0EFA64D10BFF78601E4F5F3D90E2B448CAA6565D1EC9123AAF20249383DED70DD2D5B6583C0F3F198ACE7B100AF8F2AB691B8
Malicious:	false
Reputation:	low
Preview:	/1734029232,,JIT Construction: v1018821596,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 760, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15639
Entropy (8bit):	7.965085542159107
Encrypted:	false
SSDEEP:	384:lgTTl39E9ENULemB3CxyVfVimrycCG178ows:lwlNUL/EyV0mOcCGFfws
MD5:	5B649F535784CBDCA08918FE22DB4DBF
SHA1:	021831B64693C6F5AD3A0C4EBCF2CA0F3465B2A7
SHA-256:	19850A3C7F1186EDCA303A83C012A6EEC5B4FBD205EB72D72343CFA540F2F0DA
SHA-512:	33C8455203DE001A7E3991B066784CFB8E0F41722C416ACB0F9BD68986CE6047526A623D976DD2490941A5D9BD36F417167CE09F8DEBC5F747D26CD9093570F8
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/img/desktop/navIcons.png
Preview:	.PNG........IHDR...(.........._.k.. .IDATx..w..U..?.y7...0...B(a@...@.iRD@A..D@.E@.tE.DAD0 ... E~HU@.".....%...L....;..wf..}#>..y......wn9.\|.9..=..&...8.!0.X...T...t.y.q.a`..A..#.H...y`.`x..L.n...n).c..-./..`c.g..3.w.n`..#.s........-XD....O9.....x.....b9`.`<j.].....#..z+...\.........^......_...,....Axq....<.....J`m`b...L.N.........NK.RZ...\|.y..j.vb?..M#.A.~......F.......Y8.M.{.e..G.....pm....x4..&.Cse...F..c..d...y.9z_8..'.].#7............6........I......^.h>2.................R..-...l4A7#.}]...VF}.E.p.i....qJ.p._S..?......q..........=.....omZ..=Z..oZ. ........4Z..N..(.......M^..y....U`;...<_H.R.....q>.5.....b...h..C..p8..Z.....#.....U.l.....P..]..~....r...h...Y.V..Z....N`$.+._.gr.}-z.Z..Eo.o..bc..\E!..[.vO({.Z....Y.....i.K...%sI..F..U..X...B#t7.......gV.4......`/#u.S...3.....)U....Y..+.Wg#.a,.jw$0.....g....p...(:..,..).\|.....j.....(q1........Y.U.Z.c..f...=....`.G..>@....C.j.$...X5.$.[q..{..nC..4...9DV....8&z=.k......]...8..-......;. \..V..F.....S.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65385)
Category:	dropped
Size (bytes):	297617
Entropy (8bit):	5.329378042270177
Encrypted:	false
SSDEEP:	3072:yxUkht6TrJk0143PWA4DBWRhzLB98GO14zyYCsNH3t:06/JkBfWA0Oz8GO14zyCNH3t
MD5:	20CDC1E221884A76FE884CB6999A4866
SHA1:	E1940E9A07BBA7D89080CE515F2554555A9B8A57
SHA-256:	8631C59DE1FE89C94CB86F308AB3A3BA48053E039B4717159F148FAFA19979F0
SHA-512:	F6D66345ED9BB4B08326F6E874EB3F5C7F9D9CA3964649DABA1FF2D0E6E30F6E8B2B10DCF525A94BD78298B9694A40A03136A62926179A5BB6D1C82A9B003507
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 813.d750b07ac83d91f0d8a7.js.LICENSE.txt /./* Copyright 2024 Penske Media Corporation. All Rights Reserved. */.(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[813],{11762:(e,t,n)=>{"use strict";n.d(t,{F4:()=>d,Q0:()=>s,c5:()=>f,q4:()=>l});var r=n(64467),i=n(80296),o=n(45458),a=n(41364);function c(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function u(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?c(Object(n),!0).forEach((function(t){(0,r.A)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):c(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var s=0,d=1,l=2;function f(e){var t=e.apiName,n=e.apiVe

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7166)
Category:	downloaded
Size (bytes):	7167
Entropy (8bit):	5.190466201372114
Encrypted:	false
SSDEEP:	192:HA0hI++t++85Qfyq8SH2qA4qXOv77NTo6msdA:g0hIjjYq4ifNav
MD5:	A5451F021D9CF7B2205C27DA50B288DE
SHA1:	5C1B8DBAC95F648FD22F6C6E889AAABA6E3747D0
SHA-256:	8C0E1F95AA09754B10449FD8CD7F2E76D8F232D1038B6CF7454DB558AC79962E
SHA-512:	564F9F100775FDB6CE2987A7864D2300D600B9A3B88DCBF65A26AE5AE1F0C4B6D4928F55B0ABB0459C6183DA7D40DD7D36F8C11154BFC9546841E1139BF8C9BB
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/web-vitals@3.5.2/dist/web-vitals.iife.js
Preview:	var webVitals=function(e){"use strict";var n,t,r,i,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]},s=function(){var e=u();return e&&e.activationStart\|\|0},f=function(e,n){var t=u(),r="navigate";a>=0?r="back-forward-cache":t&&(document.prerendering\|\|s()>0?r="prerender":document.wasDiscarded?r="restore":t.type&&(r=t.type.replace(/_/g,"-")));return{name:e,value:void 0===n?-1:n,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},d=function(e,n,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var r=new PerformanceObserver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},t\|\|{})),r}}catch(e){}},l=function(e,n,t,r){var i,o;return function(a){n.value>=0&&(

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 636 x 333, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	190181
Entropy (8bit):	7.983903538975959
Encrypted:	false
SSDEEP:	3072:2VNsDP94lrdLzDH1h7pxAmFVlAPgOUF2mvTadv1wh/RlXnT9S5nqPYLUpParAZps:2x3DH7XALOFS+vTkFqP3JZZEkk
MD5:	D217C4D0400ED68D5CE18093A4D46620
SHA1:	E60031DA01566BF460425BF5B11146EC6AD35F3A
SHA-256:	FE067437FD5351956C6C09912A9F26AEBEB9EE8CC8122B0C6F42A9D6B388281C
SHA-512:	AF49E950039E49C56B33CBE3C58BD5F674E02ED60F8221A1B80AEA0F4EF0803A48CD4A048ACD93E2E620B2C09E2B2519A549984438195EEA10DCA8F667C3D82A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|...M......#......orNT..w.....IDATx...w.,Iv.."..:.\......C.!<..#`@R$%..AzZ..(>J..#Eq-......@. .Ix.f`....i.}.9.7i".....u.....8}..{.............`.....?............^.L...8..%..]....F...G.......ask...w...d{{.^......^..hL..Po.k.....V...B.(...[...s.H\|.......%J...J.F.A.Z..lP..)......<\|...}..&a.D...A...xRP.T.B.I.!.R...$M.Z..F)E....=.0D..Gc.V(..J.4(...+...."MS.V.!.B..@k...4h4......F..Z..!...DZ3...R.J#.@..J.KIC..Z.]...Dt._k..H.%...g..3.1=%.(.4.....lk..J....(@H3.@`..Uz.hM.R..G$ @..4Ai.2.1..@...Z...=..B...H...if..]..)..?.?.......`..`@.Tbaa.f.....$...2.L.V.,-/S.h4.....\|).... .....4MI......<<O..&N.D.....v.w...foo.v.M..#M.. dee.z...~a.V.E..`~a...9..V{.z..@.X...........}~.~.+.u0.Y.W!.....,..._.E.j...O.....T}k.Z..z..&).8...^...v....;..lmmqpp.......t.].8".}..&...8q.....;.....F.......C^x..&..KK.....h6..k..........$i.p0...f<...TM&1.R..G..0.....e...h.H.B[0f0.F...R...i....0D.@Qk. .....).X<..Ce;..\....JAK.N..#.2M)...m.V.).w.W...@..4..BPBs..y..X....

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://bt.dns-finder.com/px.gif
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
Preview:	{"bakers":[]}

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	107899
Entropy (8bit):	7.9869322071792315
Encrypted:	false
SSDEEP:	3072:qEJw8ZNdLtUMXCOjEZBGYr+UjCuxThl9L3THWBF:qEJw+XGMXCMUBGsjCuthl97iBF
MD5:	D84B74F97B6448A9A317DCB4B54988E6
SHA1:	FA4B01536DD2543DB3EA78AD9448CBD6D3B01C2A
SHA-256:	E3967595CC273BE28E96011CD622A603C660B7544EC1E43B7B19AA7CAB52A3E2
SHA-512:	7102F96F5E1C2CE42C264FD1BBB5BDE1F114E3CBFFB6ACF49F3F5FFCFDA3625FE9DEE82F748A384F5833704DB43A12BE5DB7D5700E8A256300727FA74ADB4E88
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/11/11/033346/87633082/inventionsbig_(1).jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........t...."..........4.................................................................L.j.`"..... ..Rd...@.."$.(...\|.3".I)(..!d.H....T.r.C<=1.ax..RZ........ ...KJ... ..@..........hP.%P24.@...h....,.....@..fD...[(...0..n.&...;;Tl.g.v.G..Hu..b5.\|...C.BY8;:..h....H.v.WmA.g5....m..6...>mm.t..mS@..a,,OT.F@.. .i1.F,H2.!..GZ......0AI.@.9....#...I.......-&.Zl5.Q.f..p.l..Z3...c...Iy.E6...+c..D....H.H0....... ..$..C..`4...a.a....3znc.........A.....,..w....z\.0..\.3L.r......H5D)..y..^..=.0.W^\|-...d.C..hj....N.k`U.......s...}Y.g0J5.....BV.$.....P. ........3......>u-..f<...a...EM4..........;...Q.......9..:P.....mRX...!.s.h..9.../t..U......t.e.t..H...........v<....0q.KK.-.....N.....]V..Z2....$..}^d=n^XC..b....,..DH?My..R.r.^...........Ad..^...O..V.x.CONy......G&..Av..N...N...Q..e.86's...4...(tOc.V.Q..._Z>.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:OFB:OFB
MD5:	9E076F5885F5CC16A4B5AEB8DE4ADFF5
SHA1:	475C848673A3F79FA778F01C2BD5A721D4C41707
SHA-256:	E3EBAA16DD9D9B9FC107C42183FB6CF9D22927E1AF03DBBDFA0CCC38E4E4AC31
SHA-512:	4D384838C78C74F56DE20DE3FE125B9FE4D40B7C9FB5D767B647F05AEDE6BF63431F4F08AC464E188E77B227BECC3AB4BA86272F30B53D91B15003D814E06D2E
Malicious:	false
Reputation:	low
Preview:	Not found

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 145 x 65, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19904
Entropy (8bit):	7.980346077350412
Encrypted:	false
SSDEEP:	384:YoF8wZuGdJQ9bU5dThniFWPzH9wtE9ejBi/+ledJDvaGjfk1tTugnZc3EB:Y1wZuGdK9GJhnikPOjVledJTa+Wbe8
MD5:	C98E6B73D8F927056E9006923E16BA4D
SHA1:	5C044CD159BBE3F39400F644A1D7306482E11175
SHA-256:	6DB2C3939DDF91C82E9BEFB5E195A78974EFA9B7F2B6C5C2C53F128CCDD8DDC4
SHA-512:	D302F20D5BCBCFF342F91313573BFFD5759C812A89097E2EE65ABDEA0E000A99678514A24018FD31FEBF50687B680850B214DE82F49C394E5FCE87E1BE753DFA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......A.......F.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:046D9341406711E5921ABD3E2C4C57FA" xmpMM:DocumentID="xmp.did:046D9342406711E5921ABD3E2C4C57FA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:046D933F406711E5921ABD3E2C4C57FA" stRef:documentID="xmp.did:046D9340406711E5921ABD3E2C4C57FA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.Wlu..J4IDATx.......?.L.^N/.B. . U..6.-j,o....hb....cM4o..Qc.[.,.6.. REz.......~...c......]Y.q..;3O....s..i....

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	280386
Entropy (8bit):	5.423542722990845
Encrypted:	false
SSDEEP:	3072:l1/ws6LicT+Rli2n14XrC3kAYVesUJT88lxE67v8vqC1DFV2B:l1/ws6+cT+riPfj7UJTfxEqEvXFV2B
MD5:	E5DA24ABE5FEBC38A6F819A4F2F6C845
SHA1:	02FDBD4BC94FA9D680E40ABC4507847B63F7A3F0
SHA-256:	1AA84D80ABA2BC14029F0E99721C199F51CDAEB06A66AA9433F2BC4977A79F67
SHA-512:	5725511825ACC5944EC9906AB33AA8523C6152D7EF5594828D2B534C9B6BA4B867D6113254D485508B0715749C9DCA0D4D6C1A4533D3C1F328037DCAAD3B43EC
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/pwt/156500/13793/pwt.js
Preview:	/* prebid.js v8.50.0Updated: 2024-07-15Modules: pubmaticIHAnalyticsAdapter, enrichmentFpdModule, userId, criteoIdSystem, id5IdSystem, lotamePanoramaIdSystem, sharedIdSystem, unifiedIdSystem /if(window.ihowpbjs&&window.ihowpbjs.libLoaded)try{window.ihowpbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'ihowpbjs' instance. Load aborted.")}catch(o){}else (function(){!function(){var t,n={20265:function(t,n,r){function e(t,n,r,e,o){for(n=n.split?n.split("."):n,e=0;e<n.length;e++)t=t?t[n[e]]:o;return t===o?r:t}r.d(n,{Z:function(){return e}})},81432:function(t){/* @license MIT* Fun Hooks v0.9.10* (c) @snapwich*/i.SYNC=1,i.ASYNC=2,i.QUEUE=4;var n=Object.freeze({useProxy:!0,ready:0}),r=new WeakMap,e="2,1,0"===[1].reduce((function(t,n,r){return[t,n,r]}),2).toString()?Array.prototype.reduce:function(t,n){var r,e=Object(this),o=e.length>>>0,u=0;if(n)r=n;else{for(;u<o&&!(u in e);)u++;r=e[u++]}for(;u<o;)u in e&&(r=t(r,e[u],u,e)),u++;return

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	282680
Entropy (8bit):	7.983827907838302
Encrypted:	false
SSDEEP:	6144:ohdAkTkbME7KWwj+Uv3sEhE/qQrGI2ijHDG4pT5ORK:ohSkYxwlv3sCE/Rygp15yK
MD5:	C2BCE59616FD95E9F83AA0A65871596F
SHA1:	A5458EDDC4820C874E528DF297ADA01F09E06515
SHA-256:	B7E58236366DB7D40B8DE1BA5ABE8587EDAE5C9FB3FD147DFBCCB7FA39F42D39
SHA-512:	F1DD37AC88C106538C461B195F9323BE7EFFB90977D1D6B17DBCDF6F714B420E4CE368F7F23BAF4EE27B3DA53E01A227D21CBA2E5E1DA68C9D2EEFBC6474B74F
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (378), with no line terminators
Category:	dropped
Size (bytes):	378
Entropy (8bit):	5.044354442599509
Encrypted:	false
SSDEEP:	6:TMVjPErAM7mfxdFcPErAZ7sUxuKgMY1QmKgeOpIGuKg0ni6ErAZ73FOUjENBX8t7:TMlPuAmkxd2uAZYqPgMYTq/9Ei6uAZzt
MD5:	AF38C71E093D7C46B283758B6B7E2825
SHA1:	52AFF8ADAA4CC13450A83E05F36EA9C92F48FC5E
SHA-256:	97852C2B3CBAEE1F3E346069DEBC4C73709203E9D37E423CDF31296AFBA7D472
SHA-512:	4612884ED1D0B78F3DFAF92A2B9B835612A108CCC498EA297343A481C1244816534CC1066A5020C42CB9C9864554A82BF7CBF9AE03F770CE24FC0A5DE31649C2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?><SendMessageResponse xmlns="http://queue.amazonaws.com/doc/2012-11-05/"><SendMessageResult><MessageId>91421e5e-87eb-4923-9c54-f78e1b816eaa</MessageId><MD5OfMessageBody>b5131f3aae02c7bc2a4f0d47f80cf0ae</MD5OfMessageBody></SendMessageResult><ResponseMetadata><RequestId>ad55c792-d2f4-5175-8d7c-9847e67d1e41</RequestId></ResponseMetadata></SendMessageResponse>

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	224461
Entropy (8bit):	7.97493054163192
Encrypted:	false
SSDEEP:	6144:TRvIza67TTj1ugwLcAJxQFI8J1KAyXUkVco9wM94C:TqzF7Tn1u/3YFIk1r5Wco9D
MD5:	1BBE8C5517B32A55FF85F54B12735411
SHA1:	5E8E73735C9B31AEA73EC08A854AA13BCAEAC47D
SHA-256:	ECF9F3945ADD94EA01E93B211AE2A99F3E1DB1A3B5E31CE3963CCE5E6F95B707
SHA-512:	F2ADBFA1A5994781F77111A4704CA5C99408D3BAA016919B7DDFCA6B8B62A2D4A7B37924B6489EE867B20335263653195CF4E3BF0873F5966F1FC886DE2362A2
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/09/011657/87644961/wow.jpg
Preview:	......Exif..II*.................Ducky.......C......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92" xmpMM:DocumentID="xmp.did:0B01C14A933411EF80FCF1785A390697" xmpMM:InstanceID="xmp.iid:0B01C149933411EF80FCF1785A390697" xmp:CreatorTool="Adobe Photoshop 25.11 (20240619.m.2671 4c88022) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92" stRef:documentID="xmp.did:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8582)
Category:	dropped
Size (bytes):	8651
Entropy (8bit):	5.160317510208701
Encrypted:	false
SSDEEP:	192:9O+zpbnZZAnLlrq4dHBuk8+P1mL/yszItuJ:g+F7ApGuHnuJ
MD5:	1E96385C723F0E053D69519512737547
SHA1:	70CECA462D3C6C43B13AE7785173C9A794EFDC31
SHA-256:	84AF68610F4786EC7F925ACF58C66E01D22EB1CCF97ECD953111494D1E0AF871
SHA-512:	3D98F65948CE92DE6E234718B775638EE7A060E47A7BA09312373452183CAF5959833480BAF0DC68F8B7C778AE8720BA9C48C93EA788D8A10AE8D98A97AA0E0D
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */.(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[4932],{74932:()=>{window.optiCommon=function(t){var e={};function r(o){var n;return(e[o]\|\|(n=e[o]={i:o,l:!1,exports:{}},t[o].call(n.exports,n,n.exports,r),n.l=!0,n)).exports}return r.m=t,r.c=e,r.d=function(t,e,o){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:o})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"u",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.u)return t;var o=Object.create(null);if(r.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var n in t)r.d(o,n,function(e){return t[e]}.bind(null,n));return o},r.n=function(t){var e=t&&t.u?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){retu

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (60079)
Category:	downloaded
Size (bytes):	60080
Entropy (8bit):	5.399777353121354
Encrypted:	false
SSDEEP:	768:bemBuCpdKkVSX4s/chtS1PK9YWRq2jtdz8QWrjCaYCrNIXRhC/9vxZ6w2w:zuMchytSkxWivoRxZgw
MD5:	B1E76BFB3E24EA1599B20AC8A9DF4974
SHA1:	5CBD3CB02F81F272E9EF6AF16C33D823EBEDC72F
SHA-256:	306A840EAB5B764F8AC438EB2B95894C0122B7C9B381787F3F4AD109202EC0C8
SHA-512:	4C60BBFEBFCFF01D138CF704F2C11F8572B6DE79904111C37E9F5C903812A341B40F39C569A43465263868B7431EAB0057BD8B893423BDEA800C546405613B42
Malicious:	false
Reputation:	low
URL:	https://btloader.com/tag?h=literally-media&upapi=true
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e,t,n,s){return new(n\|\|(n=Promise))((function(r,i){function o(e){try{c(s.next(e))}catch(e){i(e)}}function a(e){try{c(s.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,a)}c((s=s.apply(e,t\|\|[])).next())}))}function n(e,t){var n,s,r,i,o={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function a(i){return function(a){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.1961893998690174
Encrypted:	false
SSDEEP:	3:CUU0/wv/p/Hh/:S0+/
MD5:	45CF913E5D9D3C9B2058033056D3DD23
SHA1:	30CB5D44E276505B1D4C053C8B25525DA228DB30
SHA-256:	42B976597A2D977D0E300F6D06BC903DB389E5C112D33C1C8C249690A522D9F2
SHA-512:	16DD1560FDD43C3EEE7BCF622D940BE93E7E74DEE90286DA37992D69CEA844130911B97F41C71F8287B54F00BD3A388191112F490470CF27C374D524F49BA516
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/skeleton.gif?service=ad&adid=zshsa&adnum=189994
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 760, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15639
Entropy (8bit):	7.965085542159107
Encrypted:	false
SSDEEP:	384:lgTTl39E9ENULemB3CxyVfVimrycCG178ows:lwlNUL/EyV0mOcCGFfws
MD5:	5B649F535784CBDCA08918FE22DB4DBF
SHA1:	021831B64693C6F5AD3A0C4EBCF2CA0F3465B2A7
SHA-256:	19850A3C7F1186EDCA303A83C012A6EEC5B4FBD205EB72D72343CFA540F2F0DA
SHA-512:	33C8455203DE001A7E3991B066784CFB8E0F41722C416ACB0F9BD68986CE6047526A623D976DD2490941A5D9BD36F417167CE09F8DEBC5F747D26CD9093570F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(.........._.k.. .IDATx..w..U..?.y7...0...B(a@...@.iRD@A..D@.E@.tE.DAD0 ... E~HU@.".....%...L....;..wf..}#>..y......wn9.\|.9..=..&...8.!0.X...T...t.y.q.a`..A..#.H...y`.`x..L.n...n).c..-./..`c.g..3.w.n`..#.s........-XD....O9.....x.....b9`.`<j.].....#..z+...\.........^......_...,....Axq....<.....J`m`b...L.N.........NK.RZ...\|.y..j.vb?..M#.A.~......F.......Y8.M.{.e..G.....pm....x4..&.Cse...F..c..d...y.9z_8..'.].#7............6........I......^.h>2.................R..-...l4A7#.}]...VF}.E.p.i....qJ.p._S..?......q..........=.....omZ..=Z..oZ. ........4Z..N..(.......M^..y....U`;...<_H.R.....q>.5.....b...h..C..p8..Z.....#.....U.l.....P..]..~....r...h...Y.V..Z....N`$.+._.gr.}-z.Z..Eo.o..bc..\E!..[.vO({.Z....Y.....i.K...%sI..F..U..X...B#t7.......gV.4......`/#u.S...3.....)U....Y..+.Wg#.a,.jw$0.....g....p...(:..,..).\|.....j.....(q1........Y.U.Z.c..f...=....`.G..>@....C.j.$...X5.$.[q..{..nC..4...9DV....8&z=.k......]...8..-......;. \..V..F.....S.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020282308187139
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIQbkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	6AEC8CFD5D3A790339DC627F9F1229B5
SHA1:	B6C8CFFE38E1015DD8595F2DD1A92435E2795874
SHA-256:	80583FA3C83831A9E036EBA0500D1B9C0D30892D0701F1617E0FAFAF5AEAA2CA
SHA-512:	4279E479C860007D04CD6FF0B8C45131C18D87420CD5CEB5C727A7DDBFB4206D007069102D643DA97C3BF01D0B756A2EF4662C8E39B6969FC154DE3C763B1EFC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7576)
Category:	downloaded
Size (bytes):	7666
Entropy (8bit):	5.2677670324281065
Encrypted:	false
SSDEEP:	192:hPymTIDb0FDnCSgzZ9CFCEmoXCAtTYgg9oSMXb8zUK:hamTIDb05PgzZ9CF7moXCggUK
MD5:	F86EA7ED9A23794C8226A22E328E5A9D
SHA1:	48E9072FEA3DDB46B4858AD7CCCB462999BB4B72
SHA-256:	8F6FB4DC2C00DAEB3F3E1BC2B8B8BA6C86BFAE4B4A7384028DFB8314D7A8F588
SHA-512:	FF125A442D6932FE83BEA88B385F742C1DB45882F36C90538E5976DE503D28B2A325AA526F205C7758CBADE392896B3C4900D365A2CF0FEE891252E47DE93D00
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/sk/12/122/1226456/26278/header.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. 202412120103-5866609 */.var blogherads=blogherads\|\|{};!function(c,s){function t(){var t=window.performance;t&&t.mark&&t.mark("pmc-atlas-mg-config-loaded")}c.conf=c.conf\|\|{"dfp_account":8352,"positions":["bottom"],"dfp_targeting":{},"sk_affiliate":true,"prog_opt_in":["adlightning","appaudience_safari","browsi","justpremium","kargo","kargo_video","teads"],"prog_opt_out":["adlightning_ad_reporting","flipp","ias_video_viewability","openpath_display","openpath_video","rhombus","seedtag","appnexus_postbid","rubicon_display_postbid","sovrn_postbid"],"site_id":26278,"site_name":"eBaum's World","site_url":"https:\/\/www.ebaumsworld.com\/","addir":"\/sk\/12\/122\/1226456\/26278","adlightning_pub_id":"sk-literallymedia-ebaumsworld","appnexus_custom_pid_desktop":18856781,"appnexus_custom_pid_mobile":18856781,"appnexus_video_pid_desktop":21247984,"appnexus_video_pid_desktop_midroll":29989499,"appnexus_video_pid_desktop_preroll":21272

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23600, version 1.0
Category:	downloaded
Size (bytes):	23600
Entropy (8bit):	7.991619535252334
Encrypted:	true
SSDEEP:	384:1vvsHWv6DJ4os0r1cwWuib+GDnpJZMSfMeVfdyyzWLtgDVEqaTSEbN8g2UyAcgtV:1vEHWvoswcwy/HZn0I1yyzWaaTSYNvd5
MD5:	96535C146FFA5386AF6A241B26A3A6B4
SHA1:	23CD84C531D12B9EE5E2FA0D1DD7620F4D6CFF57
SHA-256:	5A993AB2E9326AB9A1D3F403ACF8EED16029F1113C786BCFEF3F5B529343AB81
SHA-512:	8266F7B86EECC3BBD7F9274C7C1A027A36BC7553941C9DE1AB682CCDA8EC3E61B8E1EAADB2459B7114E11032D6756BC95AE687FBC81C42E562B7648A46726B0B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/firasans/v16/va9B4kDNxMZdWfMOD5VnSKzeRhf6.woff2
Preview:	wOF2......\0..........[..............................f..4.`.....0........\........6.$..\|. ..\.....U..7P....\..Zmn.W[...j'Q.OE6m.8...e.CO.......&.i[pf8d.;.(....%.J...."..##.........Qn.](........Sg.......)..d..y.....o.d...dO.<\..Er...%G..\|.}....B9/.......^.K....4.....p..'....0...2..aJm..%s@...,8.\|...h.t.-.c.A.hc..(.Y.Y-.t.=....D\| 0..w...6..S....o&b..$...E...w..{"...S..U.g......Bv.A.P.t.68.`......u.F...-.n~..`nbMAa..b..Y'[...X4... .\...G.a%.,_........T.(...M.b...7.X.+.y...~rM...3.B..H[x0..>.;..dLZ..v.T..].../.....^JD.......4...%.PF...&.%G.i........x.\.&H../.E...K.R.]#.k..9....K2...u&Mcy...../..k..tkIEV.u@8~U.NOw...7(r..(..Z.8Q.(<.....x.....w..;.$K..?.........w......;.B]IE....l.....d.....tT.)ju...E..>..d...P../g)(R..0p..9&....iiV...l./.>..EU......f....!R(..j.E7:..A.RZ;..f.......6.%.X...2....KP........P..&&.Ke...6[.;%..N).]K;.\.I....o......-....o....#...-...d....{f6..B.....Rh......Z.....H...u6/;.[.>Bf"..p.>..k<q.*qM....h.!.....w....E....

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	71099
Entropy (8bit):	5.342304555498012
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicIWxE:RIT7Vs9ZVKBYj8wKcHIh
MD5:	32CA6B13500D72705B6C05FCA14012FC
SHA1:	430995DE4B65A355BE8DF1B7DB9383178A765227
SHA-256:	54096C9B836B087B2FDFD57A3682CD53CE7E593C965490348BFF36976BF0F670
SHA-512:	DF6B2CC72E862B3E6274F35EE1D83D2A0128764E2EAC0B0DCAE31187F8FA6BE65A52651ACBE93AC25FE118BC70EA10E0C99AD8CF76F57376EA6CEEF791D4F17E
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13970)
Category:	dropped
Size (bytes):	14039
Entropy (8bit):	5.414592749113838
Encrypted:	false
SSDEEP:	384:qZLyAy+qDrLHTy/5yryonyxy+GAIZZp9iy+Gy+dt8ui+y+Sy+11pzuC5xYaTiMSt:aOv+qXy/guoyY+sZNl+h+ULZ+1+7pKMO
MD5:	0545CF59352A4C2B497CE6CFDAB8D0BA
SHA1:	E87998D8A78F106765662ACF640B794FB317C619
SHA-256:	6DA9CB927A06033BA0AFD8E2BD2DC4A5697184013A32FDC7F101A44C626D6066
SHA-512:	9003D46919FDD63D33CDD11152C3F83B9A975A520367BBF9959F2022071D32C98A6C9CC7AD6D6A02D9ACEF13F2098FE5AB7F7E7794CE1696BC9EA8D600E9A658
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[9707],{43625:(e,t,i)=>{i.d(t,{A:()=>a});var n=i(40459),o=i(21596),r=i(7947),s=i(13158);function a(e){const t=document.getElementById(e);if(!t)return void(0,r.MD)("Remixd container not found on a page.");const i=(0,s.vx)("remixd");if(!i\|\|!o.A.vendorMeetsCriteria(n.AG))return(0,r.MD)(`Remixd is disabled on this site${i?" due to lack of consent":""}.`),void(t.style.display="none");if(document.querySelector("script#remixd-audio-player-script"))return(0,r.MD)("Remixd tag already exists on the page."),void(t.style.display="none");const a=document.createElement("script");a.type="text/javascript",a.async=!0,a.src="https://tags.remixd.com/player/v5/index.js",a.id="remixd-audio-player-script",a.charset="utf-8",t.appendChild(a),(0,r.MD)(`Remixd tag injected in: ${e}`)}},19707:(e,t,i)=>{i.r(t),i.d(t,{default:()=>k});var n=i(81257),o=

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9122)
Category:	downloaded
Size (bytes):	253689
Entropy (8bit):	5.460432284463978
Encrypted:	false
SSDEEP:	3072:3oVVPCQkGPQbolpc0QMp8A/yBNtaOR4JXc4AgI:wVPCQkGPhpcwj/yBNtFR4JXc4AgI
MD5:	093C7EE7F68061F46C0753E826EA0E57
SHA1:	23450E9373D71EA946AB432F4EAADDD3A8046514
SHA-256:	0EA1D3BE41E27E836A97FD60071C6EC46DBAFE5A8E3E22FB2C4C9D00F980772D
SHA-512:	1CF424F63F8D0E3C38967F6578A0EFA64D10BFF78601E4F5F3D90E2B448CAA6565D1EC9123AAF20249383DED70DD2D5B6583C0F3F198ACE7B100AF8F2AB691B8
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js?hash=a756ea03bb910a61270a7e2713496aa4
Preview:	/1734029232,,JIT Construction: v1018821596,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27167)
Category:	downloaded
Size (bytes):	27234
Entropy (8bit):	5.291349126173373
Encrypted:	false
SSDEEP:	384:SEeQjQu7Rjm2v1LhOwcKa8JvxdjSs9OEux51yhuRA7/cYW4lqKru6KqGylUowFZo:ug1LhUKnvXbKx51yhuRA7/cYHRj/k/g
MD5:	28B2DBDB03F096998A381F6126DDAC4C
SHA1:	19341E54053EA3B597AE7F2C2B4E9361EB92C99E
SHA-256:	469C3C3EBE581ECB1A3C893D20B642BBC014912693D13CC2BFD54DE246E12C1D
SHA-512:	822C62E2CC8924F35539C372792336606E296519A462350F76E3D5827C9C4FB222BEC96310EB671DFD0A1AB0A0F7FA61982C90BC67C950002176380216FABA26
Malicious:	false
Reputation:	low
URL:	https://static.trueanthem.com/scripts/ta.c34341.js
Preview:	/! For license information please see ta.c34341.js.LICENSE.txt /.(()=>{var t={531:(t,e,r)=>{"use strict";var n,o,i,s,a,c=r(362),u=r(293),h=r(472),f=[],l=window.document;function p(){}function d(t){f.push("responded "+JSON.stringify(t))}function y(t,e,r){var l,y,m,b,v,g=window!==window.top,w=window.location,_=a\|\|w.search;h.isBot()?f.push("is a bot page load"):h.is404NotFound()?f.push("is a custom 404 page"):n&&n===t?f.push("pushState did not change the location"):(n=t,_&&_.length>1&&"?"===_[0]&&(_=_.substring(1)),setTimeout((function(){i?(l=i(),m=l.canonical,y=l.meta\|\|{"og:url":l["og:url"],"og:type":l["og:type"]}):(m=c.canonical(),y=c.meta()),b=c.openGraphURL(y),v=y["og:type"],g&&(_=void 0,e=s),(o&&o(m,b,e,v,y)\|\|function(t,e,r,n,o){if(!t&&!e)return f.push("missing both canonical and og:url meta data"),!1;if(r){if(t&&0===r.indexOf(t))return f.push("reload with matching canonical"),!1;if(e&&0===r.indexOf(e))return f.push("reload with matching og:url"),!1}return c.isValidPageType(n)?!c.i

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	106753
Entropy (8bit):	7.971849580663439
Encrypted:	false
SSDEEP:	1536:306oGWMe2xrFVEDFaN+WgVd8i3dJKlEKyPEoVlu3MdPxv56jNr11SG9TqVN6qLpE:nFXVEwN+bdJKC/P5wM35ENr11SGZqq
MD5:	6FAD9E0A1ACEC38042FC344BFAB5763C
SHA1:	397E1C20B3F867D4CBBF7001B4CDA6C49C3543D5
SHA-256:	3498E3CFFE9578F7EDF4A87EE12ACDEE314E4BF6E25FDC880A8A34D49C1D6579
SHA-512:	39096EA736725FC3EBC8174C84D52EE53C8AFE4E345C0DBD3D73A62CEA58E0C760633B70EF7A35FECD89BDBD2614C0C284E21D7658E2E27D8B9FE6C0F8EB985B
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:67FD9779AF2811EFACB9B009DD857A73" xmpMM:DocumentID="xmp.did:67FD977AAF2811EFACB9B009DD857A73"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67FD9777AF2811EFACB9B009DD857A73" stRef:documentID="xmp.did:67FD9778AF2811EFACB9B009DD857A73"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	43317
Entropy (8bit):	7.923389986688266
Encrypted:	false
SSDEEP:	768:6tazhXPLAyxagcWZMbtPSH/9pUWK9I3Y6WIswD0Ko:4az98yxncWyS9GWK9QYh8Lo
MD5:	D7D23DF51093F6C6FFDA7BD3E3ED541D
SHA1:	16483F9EE20F7B57527302CC9D69AB5896245F94
SHA-256:	8920FB3296F3221439406C9F40B2CB81426EB50CA892C977746F88AD692A25F5
SHA-512:	204B0993E102C7911E74BB6E227C817689793491E7910557084F25612662E1D9F0A4EADB95BA41EC686B1FB119E6B2CBE82472D93ACB2CF20DAEF843E2F3EC74
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:4C22C995988F11EFBBC4D436F2AE3975" xmpMM:DocumentID="xmp.did:4C22C996988F11EFBBC4D436F2AE3975"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4C22C993988F11EFBBC4D436F2AE3975" stRef:documentID="xmp.did:4C22C994988F11EFBBC4D436F2AE3975"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................'..'2&.&2.&&&&.>55555>DAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDDDDD.... . &..&6& &6D6++6DDDB5BDDDDDDDDDDDDDDDDDDDDD

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 156, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1923
Entropy (8bit):	7.269456088156891
Encrypted:	false
SSDEEP:	48:81kvnLSVMEXM7BJ3S22C4M3PzdN9aj1xuonnjpkLA:h+V5ST2C4sd3aj1Vnjpz
MD5:	3B3DBAC17D8903A5BF3BDCC0918E7143
SHA1:	8C7DC7AF71807A12DA7233276C956ABB16C1D617
SHA-256:	0945A7C55AC8053108B3C9BFAF00797A9A78AD2B934277FE67246347A0B96130
SHA-512:	F0B8457C14AF758C6178541935C759248954AB4E53857E61C907CCAD2F65982E4A23905D9141B1FE978B337D2B97BEF5768B6F06656ADBEF781FE4A0C6A7914D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.+.....tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:39a047f9-a28f-6643-907a-5c00b97ef935" xmpMM:DocumentID="xmp.did:B0C341FE6D2911E5AD36F722C95E0B4B" xmpMM:InstanceID="xmp.iid:B0C341FD6D2911E5AD36F722C95E0B4B" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:665930bd-d0d2-1c40-b7f7-487539ba9722" stRef:documentID="xmp.did:39a047f9-a28f-6643-907a-5c00b97ef935"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>./>.....IDATx..AHUA...{>..2H\D.....

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	211043
Entropy (8bit):	7.976107145415733
Encrypted:	false
SSDEEP:	6144:PQTgfhva5fDEZ0L/4eDZZUKg0TsG150t9ac:4EvCt/Vd00TsG1OR
MD5:	256C47B1602F97DC5AA7228CAA9A48EC
SHA1:	CD08241BE25179663E2B9A5CCB92595AFFA82EF6
SHA-256:	12DB2CD42AF0887DA1E5E434BA95142D470E145B64E047AFC445D5E425B50A01
SHA-512:	59A3A754D690A4E697E25CB57EB9E25471BFD81D38EB5A71BCB904D93320CFE209441E14713A4B10E37320C2CBC8D6B66393735334AA5C7640ABFBB4282EE0F3
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/11/19/110355/87637163/dirt1.jpg
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.4 (Windows)" xmpMM:InstanceID="xmp.iid:AA2D34A3A68F11EF97ED9A39420FEB53" xmpMM:DocumentID="xmp.did:AA2D34A4A68F11EF97ED9A39420FEB53"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AA2D34A1A68F11EF97ED9A39420FEB53" stRef:documentID="xmp.did:AA2D34A2A68F11EF97ED9A39420FEB53"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ..................................

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	downloaded
Size (bytes):	1468
Entropy (8bit):	5.804423937504733
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAb2mj+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxp:VKEcJzKo7LmvtUjPKtX7ftD1INOLrwUG
MD5:	361B2F7632092F0E88C00C08F8FA9E9E
SHA1:	BD392149D4FCB1EABD64DAB59F60EE6EFA5A398C
SHA-256:	CE1E328DEED60BBE85DC1C8A88ED3BE717446651D15211F59B3B6D775E220896
SHA-512:	041EAC4305DE25E8AD1ABC4AE53A92BE127450EAF8356BFD8F1BF6624AEDADBA5AE453F03E299D0D5D0994091FE7010D63D303C634F216DB6EE309D35DE9540F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6Lfws0YoAAAAAPSMaeJp4OOhL_KqUbBJLq1Mq5Ih&_=1734029857139
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6Lfws0YoAAAAAPSMaeJp4OOhL_KqUbBJLq1Mq5Ih');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	50313
Entropy (8bit):	7.9472691490266865
Encrypted:	false
SSDEEP:	1536:fcfmdwZeX/w7KWwyxRr6m1s+y3gemgzLKaj+Xbm:0fmdw4Pw7ZwyxBBHy3DX9j9
MD5:	626163BDBE8EE9D89EA663AAB7D6BCD0
SHA1:	D30DB1B87F01D23C1BFEEE306B54529953D7BD52
SHA-256:	40BEA8FFCF167EFAC77D51D174EB254FD8160072C04BD9E2B81806726360EBCA
SHA-512:	0B1ED9A641CE559850E842E28621EF614A7A0BE0892D083C4B68868F22DF14BA8DC21E4B81CCF5AB77FD9046A44DBC4F6CC6FC6CCF1B015616E01BE4FC72F59D
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/09/055424/87645255/beforewar-thumb.jpg
Preview:	......Exif..II*.................Ducky.............2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:74168D3EAE9211EFA058DC3D23086757" xmpMM:DocumentID="xmp.did:74168D3FAE9211EFA058DC3D23086757"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:74168D3CAE9211EFA058DC3D23086757" stRef:documentID="xmp.did:74168D3DAE9211EFA058DC3D23086757"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................'..'2&.&2.&&&&.>55555>DAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDDDDD.... . &..&6& &6D6++6DDDB5BDDDDDDDDDDDDDDDDDDDDD

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1258)
Category:	dropped
Size (bytes):	1327
Entropy (8bit):	5.4768985604947735
Encrypted:	false
SSDEEP:	24:U+3XT1qOTFZoEUu2q0jvixSlrbb8QQJOYhp0FgiRDRFsWNSQ1tA1nlBBhO:UmB7ZoK2q0jKxSlrbQa5gmRFsWHEFl3E
MD5:	D90638DBFE7E0154793496B6C8F3CD03
SHA1:	DB7CB66AF6CDDE9BD89AE09EA4EF63B8BD90DAD8
SHA-256:	CDE62BEC72DA71BB34EAB326F4D7EE26A5CA768E5010FFFAD1B4021F2954FB0C
SHA-512:	52E67CEBC73FA916B30F9050FD8004223BEC4C7C86B801595F71ADF5F40EB836CFAEFD3B97A875D4D149F5509B3E1F25EA4AFA8D5FC0144E119F5E908C7B6078
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[1197],{71197:(e,t,n)=>{n.r(t),n.d(t,{buildInSlotIdsList:()=>f,default:()=>p,getInscreenId:()=>o});n(33298);var r=n(81257),s=n(18269),d=n(64785),u=n(18742),i=n(94805),m=n(34828),_=n(13158);const c="gumgum",g=c;const f=(e,t)=>{const{inslotId:n}=(0,d.A)(e,t)\|\|{};if("string"==typeof n)return[n];if(e)return[];if(!t.def\|\|(0,m.A)(t.def))return[];const u={"160x600":"47203","300x250":"47206","300x600":"47207","320x50":"47208","728x90":"47212","970x90":"47213"},i=Object.keys(u);return(0,r.v8)(t.def.wh).filter((e=>i.includes(e))).map((e=>s.A.get(`gumgum_id_${e}`)\|\|u[e]))},o=(e,t)=>{const{inscreenId:n}=(0,d.A)(e,t)\|\|{};return"string"==typeof n?n:!e&&(s.A.get("gumgum_id_inscreen")\|\|"uzmqbd8f")};(0,u.e)([c]);const p={getBids:function(e,t){if(!(0,_.vx)(c)\|\|t)return{};const n=s.A.get("gumgum_id_mapping")\|\|null;return e.reduce(((e,t)=>{if

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65467)
Category:	downloaded
Size (bytes):	291546
Entropy (8bit):	5.415956692199758
Encrypted:	false
SSDEEP:	6144:tUM7gICguVdhPBVRjJhxhFFaK7nGcirlmDu0StZNjyX33p:DWdhPBrjJh7biBD0StZNj4
MD5:	4163196A54A23F726AC15A2F9B2B5779
SHA1:	C78B71228D0CFE90309BC731135343A6D3D55A3A
SHA-256:	D8F0E4A250E495B9B07B65AA7880CB35B56BD66CB8DE3D5FE76311C54521C59A
SHA-512:	AB7D393CD25AAD1DB7CC7D263E9318C92C865B6E003DF67BD57E2CF51D0BCAB56CDC8E83000D4264269AE9DC3D72616BDE984EC573F2FDB4990FD119756472CC
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/8214.2ec0d8bed4b94798df9a.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[8214,3959],{53768:(e,t,i)=>{i.r(t),i.d(t,{Boomerang:()=>Zo,bootstrap:()=>er});var n=i(63622),s=i(18269),o=i(37816),r=i(82980);var a=i(7947),d=i(87037),l=i(72493),c=i(97788),u=i(81257),h=i(95343),p=i(70788);function f(e){const t=document.getElementById(e),n=[];if(!t)return void(0,a.vV)(`Unable to find element ${e}, unable to inject branding.`);if(s.A.get("cmp")&&(0,p.BJ)()){const e=`${"https:\/\/ads.blogherads.com"}/static/privacyoptions29x14.png`;n.push(`<button id="shemedia-ccpa-dns-button" style="display: none" class="blogherads-branding-privacy">Your Privacy Choices <img src="${e}" width="29" height="14" border="0" alt="California Consumer Privacy Act (CCPA) Opt-Out Icon" /></button>`)}(0,h.WN)(i.e(9438).then(i.bind(i,89438)),"AttachBranding styles",(e=>e.use()));const{icon:o,alt:r,className:d}=function(

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	280386
Entropy (8bit):	5.423542722990845
Encrypted:	false
SSDEEP:	3072:l1/ws6LicT+Rli2n14XrC3kAYVesUJT88lxE67v8vqC1DFV2B:l1/ws6+cT+riPfj7UJTfxEqEvXFV2B
MD5:	E5DA24ABE5FEBC38A6F819A4F2F6C845
SHA1:	02FDBD4BC94FA9D680E40ABC4507847B63F7A3F0
SHA-256:	1AA84D80ABA2BC14029F0E99721C199F51CDAEB06A66AA9433F2BC4977A79F67
SHA-512:	5725511825ACC5944EC9906AB33AA8523C6152D7EF5594828D2B534C9B6BA4B867D6113254D485508B0715749C9DCA0D4D6C1A4533D3C1F328037DCAAD3B43EC
Malicious:	false
Reputation:	low
Preview:	/* prebid.js v8.50.0Updated: 2024-07-15Modules: pubmaticIHAnalyticsAdapter, enrichmentFpdModule, userId, criteoIdSystem, id5IdSystem, lotamePanoramaIdSystem, sharedIdSystem, unifiedIdSystem /if(window.ihowpbjs&&window.ihowpbjs.libLoaded)try{window.ihowpbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'ihowpbjs' instance. Load aborted.")}catch(o){}else (function(){!function(){var t,n={20265:function(t,n,r){function e(t,n,r,e,o){for(n=n.split?n.split("."):n,e=0;e<n.length;e++)t=t?t[n[e]]:o;return t===o?r:t}r.d(n,{Z:function(){return e}})},81432:function(t){/* @license MIT* Fun Hooks v0.9.10* (c) @snapwich*/i.SYNC=1,i.ASYNC=2,i.QUEUE=4;var n=Object.freeze({useProxy:!0,ready:0}),r=new WeakMap,e="2,1,0"===[1].reduce((function(t,n,r){return[t,n,r]}),2).toString()?Array.prototype.reduce:function(t,n){var r,e=Object(this),o=e.length>>>0,u=0;if(n)r=n;else{for(;u<o&&!(u in e);)u++;r=e[u++]}for(;u<o;)u in e&&(r=t(r,e[u],u,e)),u++;return

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17484), with no line terminators
Category:	dropped
Size (bytes):	17484
Entropy (8bit):	5.223369162348979
Encrypted:	false
SSDEEP:	384:8Vrn5Fru8dqCDCl8J2RfyoJaOjtofZk1kC4cSWDTkZJwkXI/:8pa8dqCDCiJ+qooOKhIkCHSWDTWp4/
MD5:	230FE9426CA729314526F167679DA3C0
SHA1:	9F438FCC78C9C2405A962A9808FC5B7E1791C7D3
SHA-256:	27961AB8C37CDDAD89230364167C048C6377A80E38542A5FFBCA600FAF4098EA
SHA-512:	9699E84143E68BEE6B8B7C6A07F25BF2188658C47AF5284607F93135331FB929CE953956D9C6236A44B1CE4DB3564A97F568D7CCA6E9F6EE5E80EB9C8470D32E
Malicious:	false
Reputation:	low
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=0)}([function(t,e,n){"use strict";n.r(e);var r,o,a,i,u,c=Object({name:"P&G",pixelUrl:"https:/

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://881691cc3756a047a386f760a460b303.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7885)
Category:	dropped
Size (bytes):	7954
Entropy (8bit):	5.290748819762102
Encrypted:	false
SSDEEP:	96:RLlovlylj4ral3Sl3XZl3Pl3tl3Sl3X9Zl3Pl3El3Pll3ul3rl1l3WlQl3X4l1lQ:RylYuEDEJuNK2PlGQYQk4O8Z4g5MW
MD5:	0FC024CB809EA139854DEAE710B6117F
SHA1:	D9CD2E5B50604338D067A3BE44D37698746975DB
SHA-256:	9364FFA55CE1D4E97AB7575EA51A9857737A45B7DEE89019C062804EE42960B3
SHA-512:	60905762A6437F40A25885B17E4C19555710624436978EE84F19E31CA8C9333664682B6D6F42E70C8169E935BD4AFA1AFBCB0F6D7F8E706F73FBA55DF661E528
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[8685],{12478:(n,a,t)=>{t.d(a,{A:()=>s});var e=t(31601),o=t.n(e),r=t(76314),i=t.n(r)()(o());i.push([n.id,"#pmc-atlasmg-adhesion-bar {\n position: fixed;\n margin: 0;\n box-sizing: border-box;\n padding: 0;\n border: 0;\n color: #000;\n display: none;\n width: 100%;\n left: 0;\n background-color: #fff;\n justify-content: center;\n align-items: center;\n}\n\n#pmc-atlasmg-adhesion-bar #pmc-atlasmg-adhesion-close {\n font-size: 16px;\n font-family: arial, helvetica, sans-serif;\n font-weight: normal;\n position: absolute;\n top: 8px;\n right: 8px;\n display: block;\n margin: 0;\n padding: 2px;\n text-align: center;\n height: 32px;\n width: 32px;\n border-radius: 16px;\n cursor: pointer;\n line-height: 24px;\n box-sizing: border-box;\n text-d

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 720 x 90
Category:	dropped
Size (bytes):	12501
Entropy (8bit):	7.957167011097217
Encrypted:	false
SSDEEP:	384:BFFb/yyJi81zk+wK0rxdX5PeeqO4JsrElLsgL4:BFZyQPI5leS4JSmm
MD5:	8C5117DB12FD60CDC5AED717B1B0F758
SHA1:	C1C6850F5E1111B9A7B097787107FF51C7B28EF8
SHA-256:	A85CEF76FF3C079BEA7073A0EED8054049B02C0415A53F9E570543C19DC5C309
SHA-512:	FC753E8CE256BF69833D27008884928EB5D8F7CA4364A39398B10CABC8D93D996BF1ABD5B0539A67A7F24161B709470A63D6789AC9C924064D2B64B0576AF0A1
Malicious:	false
Reputation:	low
Preview:	GIF89a..Z....3..lm n....6..&.....$,m..#=..'/rU....0.$Q..4..3I.. &U"(\..B.....;.....<+5./:.F..X... G)3.!&Z-7.,...!H......%-u. D..@.#M..8#.....It.&.x:U.<k.'0\|;..#)e!(a."K...,6.4........n......7mn$.y.$*`..).I..$Ono(..ET...Z..!Iop,-8...%..& '_....;q..(..)..-..'..,..Cdm...(../=....>........,..?..4>Y...9..?.............~.....+6./........M... I.c.......F....Wa.8V.oq0pr4-8...&.)N..$0<......#...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:bb7ad699-382e-4ebe-af3c-ecce9533208a" xmpMM:DocumentID="xmp.did:B663C77A93B911EF8BDA8FECD011223A" xmpMM:InstanceID="xmp.iid:B

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 50 x 50
Category:	downloaded
Size (bytes):	63823
Entropy (8bit):	7.688070861660136
Encrypted:	false
SSDEEP:	1536:+JV+NJxAqAkcCNsd9Pd+Aj4JXv9cW4YWSf6p4be:5NbAqAkcL9V+L3cW6SCp4C
MD5:	9DF82CA753FB5004AC57D94B3A9FBD17
SHA1:	AF57CD0A76CA2CBD0916C9E986A3DF29A7C30623
SHA-256:	EDE84630CAB184E451F68C657910855AE50D952FD1D6147C6396CB294CCA5CF6
SHA-512:	46F0E043CBD8A105E765B0C40898902D873A5168D9A32A97F272383D0E11099CE65DAB7935AA7E3071A1CFFB406545F61150B9C5ECC54C43A51A70C19D8FD8C7
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/img/desktop/loaderGlobe50YellowWhite.gif
Preview:	GIF89a2.2.................U.......Y..=.......A..D..)........Q..I..m....f..-.....q..]..9..%.......M..i.....u..!.............1.............5.................................y...............................#.............b..............................a.............x.....\|.....J..~................4.............1..........................Q.........v...................7..f........=.....^..G.......................j...............................\|.............~..'..@..........................p../.....E..........................................................................................................................................................4..l..t...................... ..........................!..NETSCAPE2.0.....!.......,....2.2.@......H......*\(L...&.,`b....>....k...B..X...[..ih@+..Y(B\(.L..5.<.(..WBV4r%+E..Q..h..V!....D.P..B.#.j. ..).....L..)'rz.......F8.U+...p.....G^.t....U...v........!Up.Z...8..{.WN.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8471)
Category:	downloaded
Size (bytes):	8540
Entropy (8bit):	5.201592178334948
Encrypted:	false
SSDEEP:	96:k+pXmPEnoo3eTmUu93ndiwKAocNH8jTLiy9YZjTovAdTrqfxLxsbzKgp:1XmP6PeTmUS39KAZNcjiyIk4dCZmnKW
MD5:	7D38D5685916894E289416B19A67A2BF
SHA1:	0C8B48E8BB64C850AF861BA67C28F14A9A06352A
SHA-256:	E8AB22EB06BCA56C0089D27ADAF5C31169D73C7855FE42A632D0DBBCE95E9D7F
SHA-512:	05A3876D0CF51C8E77B131DEEF19C07A4D9F222214F5B6F3F713E3BB75D3CF47946F47714CD1ED0A5BB08F6DE55E81819E76CE941E05D8CDC69A307DA83CF8A3
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/9438.eb71170d198296a6f84d.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[9438],{6461:(n,a,t)=>{t.d(a,{A:()=>d});var r=t(31601),e=t.n(r),o=t(76314),i=t.n(o)()(e());i.push([n.id,":root {\n --blogherads-branding-background-color: white !important;\n --blogherads-branding-bhaheader-background-color: white !important;\n --blogherads-branding-privacy-color: #666 !important;\n}\n\n@media (prefers-color-scheme: dark) {\n .sk-branding-autodetect {\n --blogherads-branding-background-color: transparent !important;\n --blogherads-branding-bhaheader-background-color: transparent !important;\n --blogherads-branding-privacy-color: white !important;\n }\n}\n\n#blogherads-branding {\n position: relative !important;\n background: var(--blogherads-branding-background-color);\n}\n\n#blogherads-branding-container, .blogherads-branding-parent-container {\n max-height: 10

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45
Entropy (8bit):	4.70274698512241
Encrypted:	false
SSDEEP:	3:YJH/4EGXpoFVYn:YJ/4Zn
MD5:	E1E6068BFEF2F6C091A6C49533E65D97
SHA1:	DE4729A2F53EAF8624D1BD019111E6A534B92B16
SHA-256:	C5E62E5C2A4098C9296E4947DFEC248175BA4C584AE9EE9C0E7C4B2E9079C0BF
SHA-512:	B9B64C92612DA1C65618018832A6B61B4ACA201FE92145A05A88050EC86521DDD7224773291A5C2DDDC447F5C38BDAC017EF5AE55CB0117C30F18717CD426FF2
Malicious:	false
Reputation:	low
Preview:	{"lb":"nIswIUacJ4r4FukkRQGYhQ==","ttl":28800}

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	4.188522622093347
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHMgXHROfYY9:YGKed2pHRgn9
MD5:	C11BE4C9B4FD2C7B81B415559462D84A
SHA1:	AB2AA12AB8332E4A7F5B42742AB7A76998B12387
SHA-256:	B8F0CA68362CF245F891FC09DDFA50806D195E78E196CF96AC5D9CF72BE2577A
SHA-512:	15E2124EBD717AB8656D14EF748C4FD98B3569AB4BCA579F3FDED41B64D51FF47202914E8572E6F8AB5A40FECAC07F970EE932AE8240D0110ED4F22B821C0C5A
Malicious:	false
Reputation:	low
URL:	https://api.btloader.com/country?o=5720980854931456
Preview:	{"country":"US","isRestricted":false}

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	248724
Entropy (8bit):	6.549992729353676
Encrypted:	false
SSDEEP:	6144:MjYKFENHvjZQQw24sB9FZ4NnpWqr0+TEBOQ/su:MjRFEhFc24sRZ4NnpWqr0cEBLD
MD5:	4A318B2CD43CBA52A104E2B1B4D7C688
SHA1:	722586F55D61452A4ABF8F7709D2BC717DDC57D7
SHA-256:	8000FECD26AFC1A91566F67EACBA4215CB36F459646BCA2D0EF47DD316A5C3C8
SHA-512:	D01257936E54E96AC39DD76967A084B9A29185CD409A90D9E0BE97773BAE8C3B2CA2199069DE30F8D20F9BB0A16E4BF0CE2434BC4169EC261D5E2A7F94B337F8
Malicious:	false
Reputation:	low
Preview:	.W..C%L@.~.RDcJ.1.....?.pU..U.....W.K...W.lu..R.m....\n_..N......~s(....s4...EsF..l..u... .C..........Y..9......y.z..............}.........Xj................w..............dc......X...z."..g_.............-...$.;....`..0.....=.................T.....p.x.....$.....0...t.......?...~..........b....X......C.........Tu....b1.........F..V...P.i...?.....g..........~.....>....>.....U.....B................o....@..Z..C1..........]..M...K....gd.?...H..M.l...:...o(......X..~......s.....n..............f.....!........C....C...........L..............@......>.......}.....P.....'..W.....`....x..........ga....5.......2...>..............,.....#....M....=.q.....m..o$.R.....?...w.....2............y.........i.....4....o,.....}..........=.....p..............p.l..........O.....%...R.@........8..........>#.....Z.............Xk......z...R.u...r.q...,.[.....I..f.......+..W......\|.....I.....q....................... .....&...-.+...}.....W.8..."......q..X.....%d...

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1258)
Category:	downloaded
Size (bytes):	1327
Entropy (8bit):	5.4768985604947735
Encrypted:	false
SSDEEP:	24:U+3XT1qOTFZoEUu2q0jvixSlrbb8QQJOYhp0FgiRDRFsWNSQ1tA1nlBBhO:UmB7ZoK2q0jKxSlrbQa5gmRFsWHEFl3E
MD5:	D90638DBFE7E0154793496B6C8F3CD03
SHA1:	DB7CB66AF6CDDE9BD89AE09EA4EF63B8BD90DAD8
SHA-256:	CDE62BEC72DA71BB34EAB326F4D7EE26A5CA768E5010FFFAD1B4021F2954FB0C
SHA-512:	52E67CEBC73FA916B30F9050FD8004223BEC4C7C86B801595F71ADF5F40EB836CFAEFD3B97A875D4D149F5509B3E1F25EA4AFA8D5FC0144E119F5E908C7B6078
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/1197.c7dc0182d872791c81f6.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[1197],{71197:(e,t,n)=>{n.r(t),n.d(t,{buildInSlotIdsList:()=>f,default:()=>p,getInscreenId:()=>o});n(33298);var r=n(81257),s=n(18269),d=n(64785),u=n(18742),i=n(94805),m=n(34828),_=n(13158);const c="gumgum",g=c;const f=(e,t)=>{const{inslotId:n}=(0,d.A)(e,t)\|\|{};if("string"==typeof n)return[n];if(e)return[];if(!t.def\|\|(0,m.A)(t.def))return[];const u={"160x600":"47203","300x250":"47206","300x600":"47207","320x50":"47208","728x90":"47212","970x90":"47213"},i=Object.keys(u);return(0,r.v8)(t.def.wh).filter((e=>i.includes(e))).map((e=>s.A.get(`gumgum_id_${e}`)\|\|u[e]))},o=(e,t)=>{const{inscreenId:n}=(0,d.A)(e,t)\|\|{};return"string"==typeof n?n:!e&&(s.A.get("gumgum_id_inscreen")\|\|"uzmqbd8f")};(0,u.e)([c]);const p={getBids:function(e,t){if(!(0,_.vx)(c)\|\|t)return{};const n=s.A.get("gumgum_id_mapping")\|\|null;return e.reduce(((e,t)=>{if

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8107)
Category:	downloaded
Size (bytes):	237559
Entropy (8bit):	5.561425812527213
Encrypted:	false
SSDEEP:	3072:C3ZFrjSUihzAdL0E6RKsRm1t6hTf/9q9bdTOmQyDy4WGQDa:6GUih81iZD989OmQyDy4+m
MD5:	1DC68CDCAE323919081CDE6FC63C27F1
SHA1:	430CA8505E668851B79FD66690BD264E355FF74A
SHA-256:	94488871A1D080EC36ECDCF4833D79498B648C4FCA1C62A8AF9EDB88E9C0332A
SHA-512:	E6156D71832CEE9D1790854485C4622D526BAD897435D91DC34885F589162F82A90C32492826C09E17B9678941DEA44E137FD6F7EEF84F27708CB34AA1195186
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WQ8W78N
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"57",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"loggedIn"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"author"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"bottomLevelCategory"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"moderatedStatus"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"pageSegment"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"publishDate"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_s

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (618), with no line terminators
Category:	downloaded
Size (bytes):	618
Entropy (8bit):	4.908962548919313
Encrypted:	false
SSDEEP:	12:s+36Qn/nQnNJTCn8N0FWbCnyMFWfUn/j7Y3NV0DIwlG/ruq8hvhFUF8kVA3y:si6k/nknTSs0FySFFr77YsIww/Cq8hDS
MD5:	43C31858C9AAC81661D142577CB1FC68
SHA1:	8A736CFB2890869CCCA3A08A0FEE958DB9065E49
SHA-256:	8E41A8E6B02E146FE25FA71262A12A24C80EE7E0DEBFCAE0757A4FE6C67DE5A9
SHA-512:	4BCC09CE83E180CAA8D8BDF42070F2DB83D65D411FC67F1CC54D752BB769E60FCC19D6DD91C1E201B53D5C63FB7E83EB9C3A307F83AC705D34ACD7DEBFD46483
Malicious:	false
Reputation:	low
URL:	https://s.ntv.io/css/click-out-icon.css
Preview:	@font-face{font-family:click-out-icon;src:url(../font/click-out-icon.eot?sjshwd);src:url(../font/click-out-icon.eot?sjshwd#iefix) format('embedded-opentype'),url(../font/click-out-icon.ttf?sjshwd) format('truetype'),url(../font/click-out-icon.woff?sjshwd) format('woff'),url(../font/click-out-icon.svg?sjshwd#click-out-icon) format('svg');font-weight:400;font-style:normal}.ntv_clickout_icon:after{speak:none;font-style:normal;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;content:" \e900";font-family:click-out-icon!important;font-size:65%}

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1875)
Category:	dropped
Size (bytes):	72278
Entropy (8bit):	5.573241049602318
Encrypted:	false
SSDEEP:	1536:dssMiMcts98trN1syHbJah7Ej+zfmmcTnwXo:9VMmrsyisTPnAo
MD5:	F3C0F9EB531B6217D268B46B70E91CC8
SHA1:	27458A91BAB7E297B44BFC356643B6AC271416E7
SHA-256:	610CBF5B89AACE167C3E085DC1EB2535625886C5A0CA5EF39F2D678F1EC576D1
SHA-512:	8C37047B83AAD7502350DF7F401EE2BB3D57C920B5F8BCAEE0A9000D0272F04E14EAE93540035BB170BAEAF6E594A83D141FAE3AEEE1B69040C1E69AB7D98A0C
Malicious:	false
Reputation:	low
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",p={},fa={};function r(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function t(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var d=e[0],f;!a&&d in p?f=p:f=da;for(d=0;d<e.length-1;d++){var h=e[d];if(!(h in f))break a;f=f[h]}e=e[e.length-1];c=ea&&c==="es6"?f[e]:null;b=b(c);b!=null&&(a?ba(p,e,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[e]==

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7166)
Category:	dropped
Size (bytes):	7167
Entropy (8bit):	5.190466201372114
Encrypted:	false
SSDEEP:	192:HA0hI++t++85Qfyq8SH2qA4qXOv77NTo6msdA:g0hIjjYq4ifNav
MD5:	A5451F021D9CF7B2205C27DA50B288DE
SHA1:	5C1B8DBAC95F648FD22F6C6E889AAABA6E3747D0
SHA-256:	8C0E1F95AA09754B10449FD8CD7F2E76D8F232D1038B6CF7454DB558AC79962E
SHA-512:	564F9F100775FDB6CE2987A7864D2300D600B9A3B88DCBF65A26AE5AE1F0C4B6D4928F55B0ABB0459C6183DA7D40DD7D36F8C11154BFC9546841E1139BF8C9BB
Malicious:	false
Reputation:	low
Preview:	var webVitals=function(e){"use strict";var n,t,r,i,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]},s=function(){var e=u();return e&&e.activationStart\|\|0},f=function(e,n){var t=u(),r="navigate";a>=0?r="back-forward-cache":t&&(document.prerendering\|\|s()>0?r="prerender":document.wasDiscarded?r="restore":t.type&&(r=t.type.replace(/_/g,"-")));return{name:e,value:void 0===n?-1:n,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},d=function(e,n,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var r=new PerformanceObserver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},t\|\|{})),r}}catch(e){}},l=function(e,n,t,r){var i,o;return function(a){n.value>=0&&(

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	707
Entropy (8bit):	4.903386696110403
Encrypted:	false
SSDEEP:	12:YUjvsvWgpwJLeJ03qqeJ0STeJ0Kc1eJ0V4eJ0G20AJ4opCiz:Y6v4WewJL+yqq+XT+41+Q4+7omfC
MD5:	9120B47630D524C1117BB4C3C1B1A5E9
SHA1:	E1CC85A25B0B89CE6E65EE05D49426DC8B939C6A
SHA-256:	7CF050F0E30CF10644FB1BD4205EAD46DCF0BCC48DC6C15C4F8B64762B89CB63
SHA-512:	15E24005CC02E1F44115EE2A6C4905BF42BE148CFE8C61C898417BAE546A8ADB3E9ED04D824E528A1FB041775291BC00071BA1F9DC7D764CBBB970A0F5CF763F
Malicious:	false
Reputation:	low
Preview:	{"fr":"false","brandSafety":{"adt":"veryLow","alc":"veryLow","dlm":"veryLow","drg":"veryLow","hat":"veryLow","off":"low","vio":"veryLow"},"slots":{"skm-ad-flexbanner":{"id":"113adc49-b8bb-11ef-955c-ca7cff2d4076","vw":["40","50","60","70"]},"skm-ad-frame2":{"id":"113adc48-b8bb-11ef-955c-ca7cff2d4076","vw":["40","50","60","70"]},"skm-ad-flexrec-1":{"id":"113adc4a-b8bb-11ef-955c-ca7cff2d4076","vw":["40","50","60","70"]},"skm-ad-medrec-1":{"id":"113adc47-b8bb-11ef-955c-ca7cff2d4076","vw":["40","50","60","70"]},"skm-ad-flexrec-2":{"id":"113adc4b-b8bb-11ef-955c-ca7cff2d4076","vw":["40","50","60"]}},"custom":{"ias-kw":["IAS_3005109_PG","IAS_3010449_PG","IAS_3007987_PG","IAS_1510285_PG","IAS_3010239_PG"]}}

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64441)
Category:	dropped
Size (bytes):	64510
Entropy (8bit):	5.604559632116108
Encrypted:	false
SSDEEP:	768:SCh8+lZ0SinLqubo/mv6znz41H8ty6k/2R7zLj2+qlCkqIcpgm1Luq:BplZwqubo+Qtmaj2+icVuq
MD5:	FE5BB91A5538AD97594ECACABC57C49C
SHA1:	F2806F4B0E9CC3B267C08DF6DA0418A4ECC402CC
SHA-256:	891EB3F24274F7805D1C8D5DA7BC4A0563966E290F9B571187DFC866CFAAD781
SHA-512:	23CB9A797E9D2F6964AD06FF43F68B000430601B35CFE0CEB7C08A3572BEA935AC5405BB0AB3EE9FE64BAEAA510899D82E7872A28C7B3CB6938C325AD81B8D51
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[992],{15112:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{var _babel_runtime_helpers_toConsumableArray__WEBPACK_IMPORTED_MODULE_11__=__webpack_require__(45458),_src_prebidGlobal_js__WEBPACK_IMPORTED_MODULE_14__=__webpack_require__(28880),_src_utils_js__WEBPACK_IMPORTED_MODULE_7__=__webpack_require__(2766),_src_utils_js__WEBPACK_IMPORTED_MODULE_8__=__webpack_require__(70433),_src_adloader_js__WEBPACK_IMPORTED_MODULE_6__=__webpack_require__(27677),_src_adapters_bidderFactory_js__WEBPACK_IMPORTED_MODULE_13__=__webpack_require__(56424),_src_config_js__WEBPACK_IMPORTED_MODULE_5__=__webpack_require__(70041),_src_mediaTypes_js__WEBPACK_IMPORTED_MODULE_3__=__webpack_require__(62774),criteo_direct_rsa_validate_build_verify_js__WEBPACK_IMPORTED_MODULE_0__=__webpack_require__(28507),_src_storageManager_js__WEBP

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2044), with CRLF line terminators
Category:	downloaded
Size (bytes):	1191600
Entropy (8bit):	4.897995576879553
Encrypted:	false
SSDEEP:	6144:PSx8dwcpjpstVcou8yfwKRBHp3RikuSMmYd6EfxMvt0+28vaRR6pFWBE440HYNW5:Bjzou8yflkIEfWvlQeiyli7MSd
MD5:	DD4057893E0602081638A5A91937CD3C
SHA1:	1AE619B10CC8554AD419C69024920463A41FD815
SHA-256:	899F86F62D498D3D95B610D2079D17B83D29321026717BD89E9D22D76A278E36
SHA-512:	24181AE2F63F1E5C82AE514C846830A0953E9517B666C2CF0017F2C5D2673890C483AC8F59FA014A359883409DD17ECAEB86BE696DE058963C652BB53C0CBD85
Malicious:	false
Reputation:	low
URL:	https://www.lightboxcdn.com/vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/user.js?cb=638651880840709765
Preview:	var DIGIOH_API = {};..var DIGIOH_VARS = {};..var DIGIOH_CUSTOM_JS_GLOBAL = {};..var DIGIOH_CUSTOM_JS_SUPER = {};..var DIGIOH_CUSTOM_JS = {};....var DIGIOH_VENDOR_GUID = 'c4e51996-fae5-4bf6-a8df-737a5f5ef12c';....var DIGIOH_VENDOR_SHORT_ID = '40857';....var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

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (541)
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	5.469919066655723
Encrypted:	false
SSDEEP:	12:UO789Dk1phQhJ+iGLFqFO/FTeLn9kKHBRFeWkBmb6HVBByVDwZ2P2:U+lLFhFTeLn9kWRFeBmbeBBsDw8O
MD5:	E8C8439B9F13D2927FAE2D3B4DC6BE50
SHA1:	891C2128D6D894015376636375D406915060CA74
SHA-256:	71680E4B29A9565E08F490D5DAE43AAF9236F6E9209B8C9F951CC64D5512DC46
SHA-512:	812D2217B2DDEEF93C7FA0C1A00E89704535A27F250FFDC2E0B8CDE46495729586CBEB348EC91ACC298ACA63E1BF5E0C5D1CCA95D8C51DDF92BAA4959A9A0E32
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/6767.30d6b51b118829e41be3.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[6767],{86767:(e,d,_)=>{_.r(d),_.d(d,{default:()=>r});_(75765);var t=_(18269),i=_(13158);const s="indexex",a=`${s}_video`,p={preroll:"505860",outstream:"505861",midroll:"651756"},r={getBids:e=>{if(!(0,i.vx)(a))return{};const d=t.A.get(`indexex_video_${e.type}_site_id`)\|\|p[e.type];return d?{bidder:"ix",params:{siteId:d,video:{}}}:{}},prebidBidderCode:"ix",getBidderName:()=>a,defaultCpmAdjustment:100,defaultCpmAdjustmentIBV:50,sspName:s}}}]);

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	50313
Entropy (8bit):	7.9472691490266865
Encrypted:	false
SSDEEP:	1536:fcfmdwZeX/w7KWwyxRr6m1s+y3gemgzLKaj+Xbm:0fmdw4Pw7ZwyxBBHy3DX9j9
MD5:	626163BDBE8EE9D89EA663AAB7D6BCD0
SHA1:	D30DB1B87F01D23C1BFEEE306B54529953D7BD52
SHA-256:	40BEA8FFCF167EFAC77D51D174EB254FD8160072C04BD9E2B81806726360EBCA
SHA-512:	0B1ED9A641CE559850E842E28621EF614A7A0BE0892D083C4B68868F22DF14BA8DC21E4B81CCF5AB77FD9046A44DBC4F6CC6FC6CCF1B015616E01BE4FC72F59D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:74168D3EAE9211EFA058DC3D23086757" xmpMM:DocumentID="xmp.did:74168D3FAE9211EFA058DC3D23086757"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:74168D3CAE9211EFA058DC3D23086757" stRef:documentID="xmp.did:74168D3DAE9211EFA058DC3D23086757"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................'..'2&.&2.&&&&.>55555>DAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDDDDD.... . &..&6& &6D6++6DDDB5BDDDDDDDDDDDDDDDDDDDDD

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2044), with CRLF line terminators
Category:	dropped
Size (bytes):	1191600
Entropy (8bit):	4.897995576879553
Encrypted:	false
SSDEEP:	6144:PSx8dwcpjpstVcou8yfwKRBHp3RikuSMmYd6EfxMvt0+28vaRR6pFWBE440HYNW5:Bjzou8yflkIEfWvlQeiyli7MSd
MD5:	DD4057893E0602081638A5A91937CD3C
SHA1:	1AE619B10CC8554AD419C69024920463A41FD815
SHA-256:	899F86F62D498D3D95B610D2079D17B83D29321026717BD89E9D22D76A278E36
SHA-512:	24181AE2F63F1E5C82AE514C846830A0953E9517B666C2CF0017F2C5D2673890C483AC8F59FA014A359883409DD17ECAEB86BE696DE058963C652BB53C0CBD85
Malicious:	false
Reputation:	low
Preview:	var DIGIOH_API = {};..var DIGIOH_VARS = {};..var DIGIOH_CUSTOM_JS_GLOBAL = {};..var DIGIOH_CUSTOM_JS_SUPER = {};..var DIGIOH_CUSTOM_JS = {};....var DIGIOH_VENDOR_GUID = 'c4e51996-fae5-4bf6-a8df-737a5f5ef12c';....var DIGIOH_VENDOR_SHORT_ID = '40857';....var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

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Thu Dec 12 18:44:01 2024, max compression, original size modulo 2^32 228514
Category:	dropped
Size (bytes):	81460
Entropy (8bit):	7.996370633169542
Encrypted:	true
SSDEEP:	1536:hSUGuzbvCfW1JRhS59YxgF7MRRtQZlX9FdVUfhD18VLTc:0UHbvCfGS59jFgRRGl3dVUA5Tc
MD5:	A89511717415A51C954A684629014ADC
SHA1:	88803FC22E4E15BCC277FE1BF1ECD5720741CEDC
SHA-256:	69B46E3B396F34C5B497015E28317E8557CB7054ECDA433D8B561F5149BE7649
SHA-512:	3F2467EDB3FC5ABB500739A88364EE4254833E8E1F5B0C14C63A87B3FF8BDCC0885DAA15A6C8BE52F64E33481F8CFBD08906182AC6A9DC2BB7E19411BCDCDDB0
Malicious:	false
Reputation:	low
Preview:	......[g.....z.<.6z..z....Co....[66....oA.)A..w.u....,i-..%.1$R.......?.9..-....e..bk.(..c.f..T..e..........{..~mo...vz..:.?.....b.G..#.....^.[...#...i..R_0.\|.Y..x.H5..?V.......~.....~..n_.i.w...7w..;.jC.N........iM....Z.w...?....9..f.8...yz.[Wj1.....{b\...[~....._o%.G..p.n..Q.K.b.i.w.kO.;....Yh.b~/....b.zS.9<...5...\|...tX..L~_%....e.&^..0.V.... 3(.L......V..V.~.....[Q.Yd'.C.=j[-q..q/^...)....Y.......}45x.W.....u.b.6\|}.\1...Xx....I...6.;zp.......LL....Q.M..{....Y.k..0m..Z...bH...o}H..A....vx....a.rR.....a..'y.[...aT.....Xl....z....R0.2..o..#..j.Z..b..]...B../^.8...q.m~6..N...B.\..S..J....6_-_.%.'R...nD5...FN%(...............^..n.U....Vb..b.F.%.7.{.[jmo$...#.m...~..=..%]%.].Uf.k.H..d...._..#"W..."xc.......j...B.........^.Kl........ZlI...0..~.....R....K!?..........^.di..H.8-N..ch.?v....8.!..OJ\.s.....Q.L...@..bpP.X.Xj0#........V_.u..%.8...M._.....[.......`.I.cc..ZG.F."....=T...5..vZ..f..@...G.4.U>..7.....$.X.........*..'.....)..n2.{f..U...L....Q....

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	99278
Entropy (8bit):	7.980738813390559
Encrypted:	false
SSDEEP:	3072:UqmKB37pA1HJ1paXbZZB6P9UJRGIlROrbPXvUCWDEpWi:b/A1p1pM0SJbOrb3UCW2
MD5:	395F1EB776260B2BF3C244A678ABA02A
SHA1:	7BC625737EEBBF9C978ACE156F2E241950D28B8B
SHA-256:	9D4424EA838B9E0019478EA141F92A5FA16A84F5307623FC9856F8D9B13C966B
SHA-512:	1DF4E561ABEFB7CF2806F8BD3FE45B20A9CA35E64661B423A8FB3D2E7DC58D0D7D0AB8645A676C0421C98717D2D28A346C1329DC21B80E481BAA9D3B2EEB087F
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/11/125806/87646013/WOW.jpg
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:C0FE933CB00D11EF9A06853712F5DBE0" xmpMM:DocumentID="xmp.did:C0FE933DB00D11EF9A06853712F5DBE0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C0FE933AB00D11EF9A06853712F5DBE0" stRef:documentID="xmp.did:C0FE933BB00D11EF9A06853712F5DBE0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20220)
Category:	dropped
Size (bytes):	20692
Entropy (8bit):	5.39423975379339
Encrypted:	false
SSDEEP:	384:n9K+4Lm2iiHGL/LOG4rXgJgm2KqFbxzbBlYJf5jVhUPtdSHZNkrop8lGGvRXPuko:sjiimDSG+XgJp2KqFbxzbBlYjxZ2mUvG
MD5:	693160DCC9002B7045CA69EA938CF1EE
SHA1:	70A97DF99FA61F566E17B70D169FCC1A9A110A95
SHA-256:	4F5DD52EC11427A918A270E42897177CE4E159334648D191189D93CAFDC96D0F
SHA-512:	4DC969D83762E74763243FA9A420AA81FB732A381A2DD49B64324E550E8AEBA60112130D4252346216CDE38911CC377647F5EAD624A68AB8A1A0B1A5342A10F4
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 4056.d55507c9d13f2691685c.js.LICENSE.txt /./* Copyright 2024 Penske Media Corporation. All Rights Reserved. /.(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[4056],{64056:(e,t,n)=>{var r;./!. * Sizzle CSS Selector Engine v2.3.10. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://js.foundation/. . Date: 2023-02-14. /!function(o){var i,u,l,a,s,c,f,d,p,h,g,m,y,v,b,w,N,C,x,E="sizzle"+1new Date,A=o.document,S=0,D=0,T=de(),L=de(),q=de(),I=de(),B=function(e,t){return e===t&&(g=!0),0},R={}.hasOwnProperty,$=[],H=$.pop,_=$.push,k=$.push,M=$.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},F="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",z="[\\x20\\t\\r\\n\\f]",O="(?:\\\\[\\da-fA-F]{1,6}"+z+"?\|\\\\[^\\r\\n\\f]\|[\\w-]\|[^\0-\\x7f])+"

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65467)
Category:	dropped
Size (bytes):	291546
Entropy (8bit):	5.415956692199758
Encrypted:	false
SSDEEP:	6144:tUM7gICguVdhPBVRjJhxhFFaK7nGcirlmDu0StZNjyX33p:DWdhPBrjJh7biBD0StZNj4
MD5:	4163196A54A23F726AC15A2F9B2B5779
SHA1:	C78B71228D0CFE90309BC731135343A6D3D55A3A
SHA-256:	D8F0E4A250E495B9B07B65AA7880CB35B56BD66CB8DE3D5FE76311C54521C59A
SHA-512:	AB7D393CD25AAD1DB7CC7D263E9318C92C865B6E003DF67BD57E2CF51D0BCAB56CDC8E83000D4264269AE9DC3D72616BDE984EC573F2FDB4990FD119756472CC
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[8214,3959],{53768:(e,t,i)=>{i.r(t),i.d(t,{Boomerang:()=>Zo,bootstrap:()=>er});var n=i(63622),s=i(18269),o=i(37816),r=i(82980);var a=i(7947),d=i(87037),l=i(72493),c=i(97788),u=i(81257),h=i(95343),p=i(70788);function f(e){const t=document.getElementById(e),n=[];if(!t)return void(0,a.vV)(`Unable to find element ${e}, unable to inject branding.`);if(s.A.get("cmp")&&(0,p.BJ)()){const e=`${"https:\/\/ads.blogherads.com"}/static/privacyoptions29x14.png`;n.push(`<button id="shemedia-ccpa-dns-button" style="display: none" class="blogherads-branding-privacy">Your Privacy Choices <img src="${e}" width="29" height="14" border="0" alt="California Consumer Privacy Act (CCPA) Opt-Out Icon" /></button>`)}(0,h.WN)(i.e(9438).then(i.bind(i,89438)),"AttachBranding styles",(e=>e.use()));const{icon:o,alt:r,className:d}=function(

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	282680
Entropy (8bit):	7.983827907838302
Encrypted:	false
SSDEEP:	6144:ohdAkTkbME7KWwj+Uv3sEhE/qQrGI2ijHDG4pT5ORK:ohSkYxwlv3sCE/Rygp15yK
MD5:	C2BCE59616FD95E9F83AA0A65871596F
SHA1:	A5458EDDC4820C874E528DF297ADA01F09E06515
SHA-256:	B7E58236366DB7D40B8DE1BA5ABE8587EDAE5C9FB3FD147DFBCCB7FA39F42D39
SHA-512:	F1DD37AC88C106538C461B195F9323BE7EFFB90977D1D6B17DBCDF6F714B420E4CE368F7F23BAF4EE27B3DA53E01A227D21CBA2E5E1DA68C9D2EEFBC6474B74F
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/11/21/120458/87638488/timing-thumb.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3253
Entropy (8bit):	4.92360068271929
Encrypted:	false
SSDEEP:	96:mw8vhMb/rBsy3ctkQA4pNYyNMhNcYNsPMXo33N8UiO:mwmhMb/rBsy3ce/4Fsv2got/v
MD5:	1D62342A459E9ACEC1984D4473B00334
SHA1:	2DC33510A490E08BF46B6EBD469C216D832E60BC
SHA-256:	B290121F6F7D33FF2B48D44C3F63A3BBDE4923E8BD33E3AC6CBD9F4D8651A2E2
SHA-512:	B421B7B2DD215D9FEA098C727F54BDB17259FC29D0269FB03E5D631FC5D58F1029B80AAA8CF9A69280F8478029FBAF4327CA8A44C68CCCFCEF847394DF790289
Malicious:	false
Reputation:	low
Preview:	{"fetchingDelay":3900,"converter":"boilerpipe_article","version":"3.3.19","nwords":90,"url":"https:\/\/ebaumsworld.com\/","valid":"OK","delay":3,"entities":[{"score":5,"origin":"NORMAL","name":"funny","type":"MAINLEMMAS"},{"score":3,"origin":"NORMAL","name":"world","type":"MAINLEMMAS"},{"score":3,"origin":"NORMAL","name":"video","type":"MAINLEMMAS"},{"score":3,"origin":"NORMAL","name":"picture","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"YouTube","type":"ORGANIZATIONS"},{"score":1,"origin":"NORMAL","name":"Viumbe, LLC","type":"ORGANIZATIONS"},{"score":1,"origin":"NORMAL","name":"user","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"security camera","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"phone","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"meme","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"internet","type":"MAINLEMMAS"}],"admants":[{"score":100,"targeting":"Avoidance","unique_id":10955,"origin":"ADMANTS","name":"S_10955

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6280)
Category:	downloaded
Size (bytes):	6349
Entropy (8bit):	5.549750505697027
Encrypted:	false
SSDEEP:	192:XAvEumhTW9mxD9AE5DdcmqXBdx9fEItPLB1zBty5E:XAvEvyAxD9Aky3xWQLLz7
MD5:	E8CCD08B2D290991709ADEF5513B6331
SHA1:	A14E69AA41156826B74A3C3FADFA9408AEDD808F
SHA-256:	08D2CAB45E46491C1B772CABE4BF6E2B1820B4E274D4644BE549F78E4EE6906E
SHA-512:	E53DF811406B7DF2AC84D6A0ADBAF1F41D1DA62EBFC45E24A881E9B72593DBB539DC6769ABC7E1E03DABC8E474CBCA0569854AF9C4404829D12F086ACA20CC14
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/blogherads.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */.(()=>{"use strict";var e,a,o,r={82980:(e,a,o)=>{o.d(a,{A:()=>r}),window.blogherads=window.blogherads\|\|{adq:[]};const r=window.blogherads},7947:(e,a,o)=>{o.d(a,{JE:()=>s,MD:()=>l,vV:()=>i});let r="full",t=!1;const n=[];let d=null;const c=(e,a,o)=>{d?d[e](a,o):(n.push({log:e,message:a,obj:o}),t\|\|f())},f=async()=>{t=!0;await("lite"===r?Promise.all([o.e(1257),o.e(6470)]).then(o.bind(o,36470)):Promise.all([o.e(1257),o.e(3959)]).then(o.bind(o,23959))).then((e=>{d=e,t=!1;const a=({log:e,message:a,obj:o})=>{d[e](a,o)};n.forEach(a),n.push=a})).catch((e=>{t=!1,console.warn("Could not import logging module",e)}))},l=(e,a)=>{c("logDebug",e,a)},i=(e,a)=>{c("logError",e,a)},s=(e,a)=>{c("logWarn",e,a)}},37816:(e,a,o)=>{o.d(a,{Bs:()=>f,F3:()=>s,HW:()=>u,I6:()=>k,KY:()=>b,N9:()=>O,R8:()=>t,St:()=>y,Wb:()=>g,al:()=>E,e2:()=>m,fI:()=>l,gK:()=>c,gv:()=>p,hh:()=>v,p6:()=>i,qz:()=>A,t5:()=>w,uT:()=>h,xr:()=>_});var r=o(7947);const t="pmc-a

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23058), with escape sequences
Category:	downloaded
Size (bytes):	23145
Entropy (8bit):	5.430100666317915
Encrypted:	false
SSDEEP:	384:EqR0Zk8q33y4bTA8A6dEOQrhvLRvRx6ATF+G89MG64XM1A1JKwfc0/+ad:E7Zkb33yAdEXt6Em956ulKwJd
MD5:	98B62AEB5F2126845C5B50ABBA9AF639
SHA1:	241D7A81B371B10B5AF0FFA97C4FF9D9E3CCD250
SHA-256:	F43C3EFC0E4CD7AD886134A73546A826F85848D9A15AB89C47A9DC40A0BBAC85
SHA-512:	A436DEC81A933F115DF5874CD3B7A9D6E4EF875E748AC0729BD6E04FD3658AA9A51B7636E8783A634BD6F3009C64C64972941428CC06E1C0073B006AFEA81D9F
Malicious:	false
Reputation:	low
URL:	https://secure.quantserve.com/quant.js
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function a(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function i(){return Math.round(2147483647*Math.random())}var c=/qcdbgc=1$/.test(window.location.toString());function u(e,t){if("undefined"!=typeof console){var n="ERROR"===e?".[41m QuantJS .[0m":".[44m QuantJS .[0m";console.log.apply(console,[n].conca

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7426)
Category:	downloaded
Size (bytes):	7495
Entropy (8bit):	5.346818814780176
Encrypted:	false
SSDEEP:	192:02Zfgp9Nstj01DYJlooC+n6SlgJtvqk08Jrxbx:VKfNcNIRrxd
MD5:	3D3C38E76499FE30B425BF3CBEB94E43
SHA1:	AA825B7E82C3FEAAA7E21329EB9FE1DB3CA43491
SHA-256:	4ADAE85E223640A7718BE70C79BE5B00AE2AFAB84547CF23A18C88277AF5DF5E
SHA-512:	3BE540B4638BE82C1D3059A43BE51CAA7322EAF7250B6B6608489483FA3DDC6D2808FC254069B37DF82D1D30364BD35490CEB20600BFC81CAC60600E4EE02203
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/1290.48b98045a91e9e07bab5.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[1290],{41290:(e,t,r)=>{r.r(t),r.d(t,{default:()=>u,getTripleLiftInventoryCode:()=>c,inventoryCodesSizeMapping:()=>l});r(26205);var n=r(18269),i=r(81257),o=r(64785),a=r(34828),d=r(13158);const s="triplelift",p=s,l={"300x250":"sheknows_RON_flexrec_small_HB","300x600":"sheknows_RON_flexrec_large_HB","970x250":"sheknows_RON_970x250_IAB_HB","320x50":{tinybanner:"",bottom:"sheknows_RON_320x50_sticky_HDX"}},c=(e,t)=>{if(n.A.get(`triplelift_${e}_disabled`)\|\|n.A.get(`triplelift_${e}_${t}_disabled`))return null;if(!l[e])return null;const r=n.A.get(`triplelift_${e}_inventory_code`)\|\|n.A.get(`triplelift_${e}_${t}_inventory_code`);if(r)return r;{const r=l[e];return"object"==typeof r?r[t]:r}},u={getBids:e=>{if(!(0,d.vx)(s))return{};const t=n.A.get("triplelift_id_mapping")\|\|null;return e.reduce(((e,r)=>{const n=!r.def\|\|(0,a.A)(r.def)?[]

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	124775
Entropy (8bit):	7.97040645463538
Encrypted:	false
SSDEEP:	3072:Sj9/mMQQ45xAsOxHf66iAfNE5zOZ4YtoOmA1FF9U54Ph:2wMXVlPfIOZUQ3IAh
MD5:	027B5BA62FAC8B3D3C8C891342215533
SHA1:	C8E84EEDB3AD9E3A17029A6E2DB50D46435DB097
SHA-256:	0629B47F9481AFBDEDC0B98D08A00E5237AD9BD576A81547AEDCDD438B2F45A3
SHA-512:	3F6A5ED7F435FFF2C05CFA9899BF9A776EAFB0667E7FAA85C0A32E98CCDE129C1386BDEA8EECC6E8455503339DE201731B1B3CD6F95B0F848DADA4DC5A25E682
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......C......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92" xmpMM:DocumentID="xmp.did:081FFD5C93D311EF80FCF1785A390697" xmpMM:InstanceID="xmp.iid:081FFD5B93D311EF80FCF1785A390697" xmp:CreatorTool="Adobe Photoshop 25.11 (20240619.m.2671 4c88022) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92" stRef:documentID="xmp.did:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 77 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2219
Entropy (8bit):	7.462448488096014
Encrypted:	false
SSDEEP:	48:V6vnLDQ0YPnIJ3MQu52cLzbThxOlCxZu/uXzHKOJR1U:oGFUefHM/euwk
MD5:	8827E02454B5CD2F3032BB6B5F6A61D8
SHA1:	441A0F960A208561AE3CE5A04A22D8C0FEECE917
SHA-256:	21BC65F86E0CD8DFBE47D505C85430A1356B7285E09F10A5FE1EFF893DD27314
SHA-512:	B2CA0D45092B47468E307744D6C0C3BE9D5FE2EF128BB708B64992CB588785013E97EBA30E537F5C99D9014153DDA89E35A1D499D0CD3EB0FF87AC2B398ED97F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...M...........B.....tEXtSoftware.Adobe ImageReadyq.e<...piTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3615B20F94206811871FA7837B3E38CD" xmpMM:DocumentID="xmp.did:B0950AFA4FB611E889AA9BEB0A159B79" xmpMM:InstanceID="xmp.iid:B0950AF94FB611E889AA9BEB0A159B79" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f2119e-9b4b-4b8e-a056-0a5572d2cc02" stRef:documentID="xmp.did:3615B20F94206811871FA7837B3E38CD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..."....IDATx..W]H[g...P...!zZ.\6...p.A3X.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (510), with no line terminators
Category:	downloaded
Size (bytes):	510
Entropy (8bit):	5.333054743827518
Encrypted:	false
SSDEEP:	12:2QO/1J+6SyU+h3NKQOmxqGVCp4BDsKc3OtW1s2VJoRWUkEOWe:2QO/3vU+hUI+Q5tWuxRWUnOWe
MD5:	892F57D94E655933D96587955182EBFA
SHA1:	5D4FA2B0691A819D4EBC7B432031BBF6C8A7DB55
SHA-256:	0357A15FFCA29B22C99DB6AAD032A841843D7D5C7D03BC786821F3D59CA9C24E
SHA-512:	8AB1B4F9E88CB348C45B4B0FA53FC8EDA45B14B89697FBBE6026B6DC836A1043C4CE5831FBD9D8DDF25992E9CC159780B5F8EA50CC075693682B69CECF3E9264
Malicious:	false
Reputation:	low
URL:	https://www.lightboxcdn.com/vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/lightbox.js?mb=1734029863354&lv=1
Preview:	(function(){if(window.location.href.indexOf('boxqamode')>0){window.sessionStorage.setItem('xdibx_boxqamode', 1);}var a=document,b=a.createElement('script');b.type='text/javascript';b.async=!0;b.src=(a.location.protocol.toString().indexOf('http') === 0 ? '' : 'https:') + '//www.lightboxcdn.com/vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/user'+((window.sessionStorage.getItem('xdibx_boxqamode')==1)?'_qa':'')+'.js?cb=638651880840709765';a=a.getElementsByTagName('script')[0];a.parentNode.insertBefore(b,a)})();

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.4992275471326932
Encrypted:	false
SSDEEP:	3:IvOKPUe:IvNUe
MD5:	53FAB767ECBD3BF07990B10246BEFBD4
SHA1:	49044085BB137D175D261B5FB9617C6F0F302C49
SHA-256:	BDEED1E1C0751610C8F3DC2A5C78C93F841C366B36A7F7A54F5E6752C2656C05
SHA-512:	B77C74696CD64C96E177CC32890BA8B666E13578C038BE4E4E5D4AB0438CB8E2B7B3539AD4089F9AD987C1BD53926B279EF7ADD30C690DC2592C5C4239465559
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/skeleton.js?ab=1&zoneid=9402702_advertisement_
Preview:	"ad placeholder";

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	160
Entropy (8bit):	5.228990963209054
Encrypted:	false
SSDEEP:	3:U3yGqItEsRGD0twQyGnyaDgeDQggp6ngQjMHZehfGpRf:U3yGqIt7DtwjGnyac8gUMo+pl
MD5:	1896AA5BB9A79F92C8800C8E6D27DFD3
SHA1:	FF9FD794CBDBA34D4F802D7F990E495C9DB174CC
SHA-256:	D4500D459D73502983DF85699B87D4F65EC8E026447066DA7A492360A28CC99F
SHA-512:	C2840AED9A4C2B6FD04B329A2ADE304275B9177F4704F57E821D42E89CD7EF171071D2B61BF4EDD1603CDF5952C17BFFB143F51D00880085D6DF520E65D54E11
Malicious:	false
Reputation:	low
Preview:	/. Quantcast measurement tag. Copyright (c) 2008-2022, Quantcast Corp../.'use strict';(function(a,b,c){__qc("rules",[a])})("p-byLmeZUvD2jyq",window,document);

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1247
Entropy (8bit):	6.701701144387247
Encrypted:	false
SSDEEP:	24:HYy1he91Wwjx82lY2T3ouVuMaKV/yJ3VHXxMKHzEGNBT5Kx/4kAKoS6:4wqQNn2x9kJ3to216AfKl6
MD5:	8C43D5C5B37D64342AA20BDC6CB9FF14
SHA1:	7C64B036CFA4068D5341CFBA87FF29B4E0225519
SHA-256:	8D6EF1FCD4076E06BD58B6B81AED92091DE7219BEF0D74DC9DC929906A3C6724
SHA-512:	FFC708FEE0440873CEDBB79793AAE746B1F43ED00AB1AF7E1690261BEC79717B6D3D2D538D42AC31AF69DEF4418DEA6BFCDC28FECFDA22828994771DFF7D92FE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............sO/....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B9C5175B485D11E5B9D0D23D567692E7" xmpMM:DocumentID="xmp.did:B9C5175C485D11E5B9D0D23D567692E7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B9C51759485D11E5B9D0D23D567692E7" stRef:documentID="xmp.did:B9C5175A485D11E5B9D0D23D567692E7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.^f....SIDATx..K(Dq...;w..........a...ll.kc%YX(....aa.d.(J."J.(e/.IY.c!Yx\|O...v.;..3...s......3......ON.O.;........d..

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	92672
Entropy (8bit):	7.982053771017523
Encrypted:	false
SSDEEP:	1536:qE0VnGFNeMW8OvYEI7573FBgncNfgL5XFHp742+BlHnEB4XTBgjukWGglf4Z74Eh:qE0lGFNeoY83gnFLTG9TEOdg6rGg2436
MD5:	4460FE86671F07EC4C80CBAAEF3B8FFD
SHA1:	28D191492B08FE1D5F6D68DBFAD274C29ACDC887
SHA-256:	55E8FA7F749B7959AB127C1086FDBB4946801DEA71E429462A420B6A24F6D7CB
SHA-512:	A6A1E131DD810D66CE2BCE04CB3149FEF9A4F1766A6A5B18FC0A47D104DC6B2E87DEC34009593615789EEABEFE68AEBB80440E94BB51EBDF73823ECB41844F70
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/11/08/045032/87632310/1968big.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........t...."..........5...................................................................f<:J...hb..d..MGL..-J....c...QHg=.G..i.:~.b....W.7......F...F.....zt4......+.N0..'z..tE0.2$evz. D..@..X:/.(.x....Y...q.3...F...L+.(.....]w,.AMbh..qt...N..!..M...n..G.....D/...c8o]..vG.....?.....!........W...E.K.....:.E.{d%..V=T.6...+5...-5I..8 ....b.[.p.......-~~.l.N.mz...dwP.. ..@N..=(..w......p..D.<.0.f.X\|.y.....$.VI<.v."..#....f."?4H......_1m....+q.l..4Z....8Hd.H......N.Q. "1.L..z.....'...E.=..".@.Z..j)T.FQOa..8..,...<.......3..nE....C.b..1..!.[.x1.7:s....{...........U!C].)..........=(....&Qs..Yb.....q.W.^yR....I...6.,}TnIBG..+.evK.T,.5..E..f1....=.....i..B.....5.v....f.~x......$n..c.g....~........K..&..!..x-T......:.....K...~)........dXM].%\."@..m.@:o.#..#X."%.(,..4j.!..w...<....6.v..c......M.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11071)
Category:	dropped
Size (bytes):	11140
Entropy (8bit):	5.364381510612079
Encrypted:	false
SSDEEP:	192:1pRlBeRnYTUf0MvZLkW19ErcMFhssxxxiTi9u4FR6da/JH+qmipsNco:PX4lfNZLzDxsxxxe4GNqix
MD5:	13F2337EEF60DD4C034963898FED216D
SHA1:	DA95731ED280C62B99ED018DB1202218EE62328B
SHA-256:	9A3DACDCC0324F8500154D17EDDC6EC109BBADA307E480621BB01BDDE92621AC
SHA-512:	63D0BACC152FEEC30351F2675849B12E8C526E0C8F7548EC34861234468ED5F899A9B850948EF11BBEC78EF86D1B967BD614EA7420B0E0B447F077867156FBE9
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. /."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[1553],{91500:(e,n,t)=>{var r=t(64467),a=t(82284),i=t(28880),o=t(56424),u=t(62774),s=t(2766),c=t(70433),d=t(70041),l=t(26511),p=t(36133);function m(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}function f(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?m(Object(t),!0).forEach((function(n){(0,r.A)(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):m(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}var g=(0,l.vM)({bidderCode:"amx"}),b=/\.com?\.\w{2,4}$/,h=/^\s<\??(?:vast\|xml)/i,v="https://1x1.a-mo.net/",y=v+"hbx

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	43576
Entropy (8bit):	7.937586884944373
Encrypted:	false
SSDEEP:	768:0gJE+lxCe5RT70MKnd3Bors2f4jcO0ITcY4TGBGMqLeTTFLXyD4NYd4bM00y:0GNxB57Cd3Gdf4oIgYlBGMC8xieYd4bN
MD5:	D339885841838020FCDE8F0D5E44F590
SHA1:	79F5B5B18E4A34710E4C8EC1EAB91C7ABE37952B
SHA-256:	FD9050BB4EF3D82619124D4953E9AA17CFF784AE8F4B71BD092F854835D1DB90
SHA-512:	EE8A15329CA1B5DDB6C57C50F8BD56153ABDEA2F1587C0974C7708E8199CBC4776C765D1EE3965F0948887D7790190C9E65BE93CB460A50D5C59B71C7B5DAA24
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:98E947E0AE7211EFA058DC3D23086757" xmpMM:DocumentID="xmp.did:98E947E1AE7211EFA058DC3D23086757"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:98E947DEAE7211EFA058DC3D23086757" stRef:documentID="xmp.did:98E947DFAE7211EFA058DC3D23086757"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................'..'2&.&2.&&&&.>55555>DAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDDDDD.... . &..&6& &6D6++6DDDB5BDDDDDDDDDDDDDDDDDDDDD

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27839)
Category:	dropped
Size (bytes):	103863
Entropy (8bit):	5.410694570012382
Encrypted:	false
SSDEEP:	1536:btsoQlKEfURm14q9mvzl4RZNYtn3h4WBjTSdKLGqF0gsjLdegQKIgGc4DIYzC:psfIzl00nqWNTtCqFhSd/zIbc4D2
MD5:	E86A1232B1711558647C3FE2CCA656FF
SHA1:	B33D763A4D929954D53D49F6D311506D4DC56DF6
SHA-256:	331FE4983E06DBA281B5CC2FCF997414D93DB61C60DCE556077DEAD1FC631E2A
SHA-512:	3201758D23B1A4FF4D23FCC45AE3846F1C0F7BFF971111B6E05AEB75B23EC9C0282F2695C25E16C5BC081983B38B4B6FA9DE162401694EC4621E61B2D920F767
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 6141.f311ade597f0537989f7.js.LICENSE.txt /./* Copyright 2024 Penske Media Corporation. All Rights Reserved. /.(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[6141],{83749:(t,e,r)=>{"use strict";r.d(e,{A:()=>s});const n=function(){var t=[],e=this;this.length=0;var r=function(){e.length=t.length};this.enqueue=function(e){t.push(e),r()},this.dequeue=function(e){if(e){var n=t.splice(0,e);return r(),n}}};const o=function(t){t=t\|\|{};var e=new XMLHttpRequest,r=t.headers\|\|{};return e.open(t.method,t.url,!0),Object.keys(r).forEach((function(t){e.setRequestHeader(t,r[t])})),e};const i={uuid:function(){var t,e,r="";for(t=0;t<32;t++)e=16Math.random()\|0,8!==t&&12!==t&&16!==t&&20!==t\|\|(r+="-"),r+=(12===t?4:16===t?3&e\|8:e).toString(16);return r},getXhrOptions:function(t){return{method:t.method\|\|"POST",url:t.url,headers:t.headers\|\|{"Content-type":"application/json; charset=utf-8"}}},getMeta:function(t){return{id:this.uuid(

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Thu Dec 12 18:44:01 2024, max compression, original size modulo 2^32 228514
Category:	downloaded
Size (bytes):	81460
Entropy (8bit):	7.996370633169542
Encrypted:	true
SSDEEP:	1536:hSUGuzbvCfW1JRhS59YxgF7MRRtQZlX9FdVUfhD18VLTc:0UHbvCfGS59jFgRRGl3dVUA5Tc
MD5:	A89511717415A51C954A684629014ADC
SHA1:	88803FC22E4E15BCC277FE1BF1ECD5720741CEDC
SHA-256:	69B46E3B396F34C5B497015E28317E8557CB7054ECDA433D8B561F5149BE7649
SHA-512:	3F2467EDB3FC5ABB500739A88364EE4254833E8E1F5B0C14C63A87B3FF8BDCC0885DAA15A6C8BE52F64E33481F8CFBD08906182AC6A9DC2BB7E19411BCDCDDB0
Malicious:	false
Reputation:	low
URL:	https://tagan.adlightning.com/sk-literallymedia-ebaumsworld/bl-9d706ea-4be5ce79.js
Preview:	......[g.....z.<.6z..z....Co....[66....oA.)A..w.u....,i-..%.1$R.......?.9..-....e..bk.(..c.f..T..e..........{..~mo...vz..:.?.....b.G..#.....^.[...#...i..R_0.\|.Y..x.H5..?V.......~.....~..n_.i.w...7w..;.jC.N........iM....Z.w...?....9..f.8...yz.[Wj1.....{b\...[~....._o%.G..p.n..Q.K.b.i.w.kO.;....Yh.b~/....b.zS.9<...5...\|...tX..L~_%....e.&^..0.V.... 3(.L......V..V.~.....[Q.Yd'.C.=j[-q..q/^...)....Y.......}45x.W.....u.b.6\|}.\1...Xx....I...6.;zp.......LL....Q.M..{....Y.k..0m..Z...bH...o}H..A....vx....a.rR.....a..'y.[...aT.....Xl....z....R0.2..o..#..j.Z..b..]...B../^.8...q.m~6..N...B.\..S..J....6_-_.%.'R...nD5...FN%(...............^..n.U....Vb..b.F.%.7.{.[jmo$...#.m...~..=..%]%.].Uf.k.H..d...._..#"W..."xc.......j...B.........^.Kl........ZlI...0..~.....R....K!?..........^.di..H.8-N..ch.?v....8.!..OJ\.s.....Q.L...@..bpP.X.Xj0#........V_.u..%.8...M._.....[.......`.I.cc..ZG.F."....=T...5..vZ..f..@...G.4.U>..7.....$.X.........*..'.....)..n2.{f..U...L....Q....

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=2
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	192415
Entropy (8bit):	7.982185453315069
Encrypted:	false
SSDEEP:	3072:4aSCG0ebopo8thIBK8ABFlgkZE6O7JuEtbPGCYxztiiSA2UMKppMnI4g+DMpHluo:FSH0e0po8ABDOAkNOVuEtbPrazt12Ujf
MD5:	A6263E6A480AD9E95FDDA4C34EF8E3EE
SHA1:	DD0C1B0356E6C4F19B3CD9F9A4F964DE62275243
SHA-256:	BF27C6D79FF5A5D3C779726C3F1AA8B949EF7A458B8B6A5C6310A09A55941777
SHA-512:	04A83FA0E7D86B246DE813833A5B0ADD225EE1189451E7CE173CC26AD5B10045AFEC208C2A4B1DA6A30D8838F21F45B2C64612463969666A450366202782ECE8
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/10/012528/87645535/randoms-thumb.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (731), with no line terminators
Category:	dropped
Size (bytes):	731
Entropy (8bit):	5.394830221064571
Encrypted:	false
SSDEEP:	12:9sgXVDxVOM/ovcq/ypzVg9ZyC4o0axRWZXHnd53h0K7+8IlDoBfCfOrxOERfY6Ks:9rn/ox/WzSvyCfRWZXHb3h0KBIGfCf6F
MD5:	2D510096AC78A0FF3A40EDAE5D9C0C92
SHA1:	5D24DB2CC2EEDDDE5101E84402E535C45714A069
SHA-256:	89BD39B2A848D8EF9910066B7C39E9742CC47BD2CF700C273E026C3F60D213D2
SHA-512:	2C6C8BE6D261717125E57DD75464576DFFC562284C89D2B89DF8BE25E82C12B9337DFE953A87DEB5ECCA9273514296E6F60400DCA841F308ECB856A8EA6B871C
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={726:e=>{e.exports={URL_ROOT:"//b.trueanthem.com",PAGE_SOCIAL_SDK_ROOT:"//static.trueanthem.com/scripts"}}},t={};function n(r){var a=t[r];if(void 0!==a)return a.exports;var o=t[r]={exports:{}};return e[r](o,o.exports,n),o.exports}n.h=()=>"c3434175d2100fcf147d",(()=>{"use strict";const e=n.h().substring(0,6);var t=n(726).PAGE_SOCIAL_SDK_ROOT;!function(n,r){var a=r.getElementsByTagName("script")[0],o=r.createElement("script");o.src=t+"/ta.".concat(e,".js"),a.parentNode.insertBefore(o,a);var c=function(){window.TRUE_ANTHEM.configure()};o.addEventListener?o.addEventListener("load",c,!1):o.onreadystatechange=function(){o.readyState in{loaded:1,complete:1}&&(o.onreadystatechange=null,c())}}(window,document)})()})();

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	106753
Entropy (8bit):	7.971849580663439
Encrypted:	false
SSDEEP:	1536:306oGWMe2xrFVEDFaN+WgVd8i3dJKlEKyPEoVlu3MdPxv56jNr11SG9TqVN6qLpE:nFXVEwN+bdJKC/P5wM35ENr11SGZqq
MD5:	6FAD9E0A1ACEC38042FC344BFAB5763C
SHA1:	397E1C20B3F867D4CBBF7001B4CDA6C49C3543D5
SHA-256:	3498E3CFFE9578F7EDF4A87EE12ACDEE314E4BF6E25FDC880A8A34D49C1D6579
SHA-512:	39096EA736725FC3EBC8174C84D52EE53C8AFE4E345C0DBD3D73A62CEA58E0C760633B70EF7A35FECD89BDBD2614C0C284E21D7658E2E27D8B9FE6C0F8EB985B
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/10/093625/87645337/Untitled-1.jpg
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:67FD9779AF2811EFACB9B009DD857A73" xmpMM:DocumentID="xmp.did:67FD977AAF2811EFACB9B009DD857A73"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67FD9777AF2811EFACB9B009DD857A73" stRef:documentID="xmp.did:67FD9778AF2811EFACB9B009DD857A73"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2929
Entropy (8bit):	5.249516409672825
Encrypted:	false
SSDEEP:	48:YsedZtpraRKpXyvovNImZ2FZgWhjN+DWDsHbHwOzaDaKQpusB/DaAwUoL7WDZACJ:beBUgc0OmZkizDWDkcOzaDaTpXpDidLU
MD5:	372D8698D321585D4B6888B6030227AE
SHA1:	83B2A167A524A8FB47338698CBB762BE7FC08C69
SHA-256:	6CE3D7DC55C942B4A427962E47FB0266F8603A441BF513F10BC5FF4F17FCC597
SHA-512:	240D5C3D11C3B12036408B5FCC017680B5B60B288DA711B7BEDE09243F0405866578417AED527D4E5D9EF80F8F36DC6E0EE4EAB5419DEF7BC1B94A9AC6710593
Malicious:	false
Reputation:	low
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lotameClientId = '16576';\n\ninitLotame(lotameClientId);\ncreateLotameScript(lotameClientId);\n\nfunction initLotame(propertyId) {\n var lotameConfig = {};\n var namespace = window['lotame_sync_' + propertyId] = {};\n namespace.config = lotameConfig;\n namespace.data = {};\n namespace.cmd = namespace.cmd \|\| [];\n \n namespace.cmd.push(function() {\n namespace.sync();\n });\n};\n\nfunction createLotameScript(propertyId) {\n var lotameSyncUrl = \"https://tags.crwdcntrl.net/lt/c/\" + propertyId + \"/sync.min.js\";\n var lotameScriptTag = document.createElement('script');\n lotameScriptTag.src = lotameSyncUrl;\n document.head.appendChild(lotameScriptTag)

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1607
Entropy (8bit):	7.654645411111336
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX30ctMwX/1PZ0ZSSSJH/de5SVvvlgr:5fh9YMLuERAnt1tGZSSSfe5GtgH8A
MD5:	3947BB24CCA3E187FBC161906686C2EC
SHA1:	3085AD8129279C8E23AA114A1FFDF2A7932A5613
SHA-256:	CDE8F9F698518D204365896375D68FF0858450411BEE28CCFA251CCF47BDF471
SHA-512:	BFBA95352EC868843B9012EA6DCD6AF3A5B6155C1742B6FBA1DB6E3E2A297806C2359762387BCDAAC7B59E012A0EC38DBC425054EDD7A5A697ECFB348049A863
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......B..>....x.}...&.....v.+../.j.~....!.....9..cQj.9......@..Q~..=XJ.;.E_s....g#G..J.X..G....o.]N.),.......y.w...g..yc......}0...._.qf...4.c.@y....Q.W....q..f...g. .fY"...9U1.q.L.]7....%....)..s.:`u...B.Re..;.(.Q\x..~........s.y..-......rx<.......C....+x.....x.?..;...$D.,28-.......l.mY.0.}.z

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32138)
Category:	dropped
Size (bytes):	105956
Entropy (8bit):	5.6047602556273395
Encrypted:	false
SSDEEP:	1536:NZOfIApQCjPBY7crnrhtnywq9Av6LJ0hAPqrCv2b:WIAB4dRv2b
MD5:	5254941ED6978DDC63F1AB719BA23F46
SHA1:	C54CCB67B2762C4232C3A8AF57D78A07E5BEAF96
SHA-256:	78F3D9C2E92BA0708A5EFF3941A99BE6514C6545060CFC09320E8A6DFA559765
SHA-512:	CB8C3DAB74CA870503D3BB05AC405F9556C41FFF32FCF2811543873ABC24ECF09D611FD7D53039CF51C32D32B53E1DCD5C122E1D15745C60A8D7457F0AC019D0
Malicious:	false
Reputation:	low
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},u=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.5390128062672437
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18651)
Category:	dropped
Size (bytes):	18720
Entropy (8bit):	5.434605699349851
Encrypted:	false
SSDEEP:	384:ExZZytAd/VpglurHgZ5m9BUdZ5Ez8TlKWF14sYTb9ieGohJ1ieRvbL2oIPLSop0o:ExzytAd/VmlQHwcM5Ez8TlKW1yTb9vZY
MD5:	1BEC9E0B4A5C5B56245B5D7850E1A7A8
SHA1:	69DE7457236359B9BA689C1C14D292BC6F0F0F31
SHA-256:	543A1B3E383B71D8C37B73117B6CBBB05F1F2BDB70545887A32B2485E7377E9A
SHA-512:	6C2EABDE5E7BF2C45599AAF48373B734CE788E0D9C6A9813E258C1FA23E896B6ADA83CD2EB51B236712A42B61358689EDAEC1BA668B94FE9830AE397D074F6C0
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[9982],{59080:(e,t,d)=>{d.d(t,{Dn:()=>o,I5:()=>l,aM:()=>s,gj:()=>u});var i=d(18007),n=d(18269),r=d(72327);const a="",o="mgnipbs";var s;!function(e){e.POST_BID="postbid",e.NO_VALUE=""}(s\|\|(s={}));const p=()=>{const e=n.A.get(`${o}_ad_unit_param`)\|\|"includeSiteAdUnit";let t=`/${n.A.get("dfp_account")}`;return"includeSiteAdUnit"===e?t=`${t}/${(0,i.Np)()}`:"fullAdUnitPath"===e&&(t=(0,i.iQ)("",!1)),t};function l(){return{adUnitCode:p(),env:s.NO_VALUE,platform:r.A?"mobile":"desktop",pos:a,slotType:a,videoType:a}}function u(e,t="default"){var d,i;const r=null!==(d=n.A.get(`${o}_cpm_adjustments`))&&void 0!==d?d:{"undertone_video_server":{"ibv":50},"grid_video_server":{"ibv":50},"rubicon_video_server":{"ibv":50},"ix_video_server":{"ibv":50},"triplelift_video_server":{"ibv":50},"sovrn_video_server":{"ibv":50},"pubmatic_video_server"

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	13619
Entropy (8bit):	7.965631266290454
Encrypted:	false
SSDEEP:	384:rDMaIlXR4xLWjDua3WOIt4WynC7JfSy+vq:8hlmw33NIKWynCJdqq
MD5:	F04FDB95DEC7A92BC76C8ACFB387E974
SHA1:	94DC1E0BA3582515ECA5B329A37ED955442C8863
SHA-256:	246D61C616191945789F28C3401C4F5F87E98A04102DDDB5F15DF0F338FD587B
SHA-512:	FEC6A40609627167EF33497CF097401A0CCF6B887B7252B5265E3DDD6A0CF10934EEA0B6FB0E9A19DE5F0F057BE91C51AF142C389E60E7518FA71927F342F332
Malicious:	false
Reputation:	low
URL:	"https://ntvcld-a.akamaihd.net/image/upload/w_636,h_333,c_fill,g_auto:text,f_auto,fl_lossy,e_sharpen:70/assets/2CA74CAE696C4D0A83454DE2F3599C93.png"
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...........................D......../....8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......\|...M....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......\|...M....pixi............ipma..........................iref........auxl........3.mdat.....f'.c..2......P...=#l......k............>\| .b.K.....h.....A.L-..\|(L...];4.$.5W.*ug^Z...._.f....'(`.5t.C.&h.C..c.L].v.l..!-...:4.y.[t...2....-..Q.G........_..5..p.(< ...`K.<99...h..M;.N%.....g?...V..u.j....o.?...Y..>.H..3d..JY.`u.....m..I...d...ie...DX.....)../.p.u.8}...W..e^E"Y..Ug..."...pMa..IiY.... ...lC.U^.....<Z.X.........W.2G.A"...A,.. .Y......P..........T.DQXu..5..~;.....,..=..{\|.B .@T..5.o"9x(..2/...J...~T.3..#.h.`.5.:J..f`C...G....N.RsV........`..6.\2...<.o<,.V..B.....\..jP............,...6xX...7L.7H...,..X8...d.o.p.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (60079)
Category:	dropped
Size (bytes):	60080
Entropy (8bit):	5.399777353121354
Encrypted:	false
SSDEEP:	768:bemBuCpdKkVSX4s/chtS1PK9YWRq2jtdz8QWrjCaYCrNIXRhC/9vxZ6w2w:zuMchytSkxWivoRxZgw
MD5:	B1E76BFB3E24EA1599B20AC8A9DF4974
SHA1:	5CBD3CB02F81F272E9EF6AF16C33D823EBEDC72F
SHA-256:	306A840EAB5B764F8AC438EB2B95894C0122B7C9B381787F3F4AD109202EC0C8
SHA-512:	4C60BBFEBFCFF01D138CF704F2C11F8572B6DE79904111C37E9F5C903812A341B40F39C569A43465263868B7431EAB0057BD8B893423BDEA800C546405613B42
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e,t,n,s){return new(n\|\|(n=Promise))((function(r,i){function o(e){try{c(s.next(e))}catch(e){i(e)}}function a(e){try{c(s.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,a)}c((s=s.apply(e,t\|\|[])).next())}))}function n(e,t){var n,s,r,i,o={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function a(i){return function(a){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	98409
Entropy (8bit):	7.9720785610626335
Encrypted:	false
SSDEEP:	3072:zB26sARyVvJHzbd6IxsKtUAlxnQ/bJKLO:F26so0hHnpUAlxnQ/2O
MD5:	2D77A3D2EC910525834272DDBD6F0057
SHA1:	0C65A8F2B129BE9FA8B4F611E817BA955BF9DE34
SHA-256:	A7BDF682591A865265529B2E80524238687B3595BEA10D295ACCBF1FF47F19F5
SHA-512:	97DBFFA7CA1936BF51D1FDE41E3CCC8ADFE1A0AD516B9083D2E1BA2185BF7CF0EF884010373B64286DC07B9172D097EF47B985540C75A177EE161126E96018F2
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/10/094405/87645339/sanra.jpg
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:02E72A16AF2911EFACB9B009DD857A73" xmpMM:DocumentID="xmp.did:02E72A17AF2911EFACB9B009DD857A73"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:02E72A14AF2911EFACB9B009DD857A73" stRef:documentID="xmp.did:02E72A15AF2911EFACB9B009DD857A73"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	dropped
Size (bytes):	227718
Entropy (8bit):	5.378254721995947
Encrypted:	false
SSDEEP:	1536:JwovhwvwV3sMwH+0G+ZBTr9ix6HeTX0XLDDDbGw5wyPybFkK8yraIG+UNM3VBYG3:FhwvwV8Mw9ZXixont8Fk9oRUytxYScY7
MD5:	ACB4D2A336AF2D9EAE3DEB70E89CB560
SHA1:	00CCDA75158E13D914E10FCF64DBA268F221E46D
SHA-256:	E61C3520C8110A709D981083DDC93CF042C2D2BA25A21903B5DF270EDB3A05C5
SHA-512:	68D16669A0E5DC1409AE983852E44B31E655D16A7FC85E6779813F0325B09240321E530AFCE21BA1CDDA3A4687D64CDCC0FF234668E0451D81856620ED7877ED
Malicious:	false
Reputation:	low
Preview:	/! For license information please see modules.675199526fcb21f102e5.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6016
Entropy (8bit):	4.9150227540096205
Encrypted:	false
SSDEEP:	96:nMJMjM+MBMmMrMlMPM7fMdMmdM8FdVMemMlM8Ma/MMZdMwfnk/MjGEFpbMtpyMFC:nMJMjM+MBMmMrMlMPM7fMdMmdMCMemMP
MD5:	AB8078C58268670C7D8A4B7DE28D6708
SHA1:	53F531DF9A4BF6783CD8E83FCB797C4DE4BD5410
SHA-256:	A49DFD789B77DCD098F654713E6A71C8C4D6D033C181DE56B3AC74E5735EA359
SHA-512:	EC331CE5E5F4130E94B165A763136F9B0A46273954C73B5BCF4FE07F341623B73ABC780250F31A1C8DF5A04A0A75965F4C36E0262CE4FBDA02DB6F667907FDB2
Malicious:	false
Reputation:	low
URL:	https://www.lightboxcdn.com/static/fb_lightbox.2.1.5.css?cb=637988260257525591
Preview:	..fb_lightbox-wrap,...fb_lightbox-skin,...fb_lightbox-outer,...fb_lightbox-inner,...fb_lightbox-image,...fb_lightbox-wrap iframe,...fb_lightbox-wrap object,...fb_lightbox-nav,...fb_lightbox-nav span,...fb_lightbox-tmp {.. padding: 0;.. margin: 0;.. border: 0;.. outline: none;.. vertical-align: top;..}.....fb_lightbox-wrap {.. position: absolute;.. top: 0;.. left: 0;.. z-index: 9948020;..}.....fb_lightbox-skin {.. position: relative;.. background: #f9f9f9;.. color: #444;.. text-shadow: none;.. -webkit-border-radius: 4px;.. -moz-border-radius: 4px;.. border-radius: 4px;.. background-color: transparent !important;.. box-shadow: 0 0 0 rgba(0, 0, 0, 0) !important;..}.....fb_lightbox-opened {.. z-index: 9948030;..}.... .fb_lightbox-opened .fb_lightbox-skin {.. -webkit-box-shadow: 0 10px 25px rgba(0, 0, 0, 0.5);.. -moz-box-shadow: 0 10px 25px rgba(0, 0, 0, 0.5);.. box-shadow: 0 10px 25px rgba(0, 0, 0, 0.5);..

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	1093
Entropy (8bit):	6.699800607777281
Encrypted:	false
SSDEEP:	24:Jal1hpunQWwjx82lY2T32HEVWuajiyJ3Vq+GY8W:KitNn2VkJ3dL8W
MD5:	9BB2DEBEB9232E93A3881B3DD71A36E0
SHA1:	0D1ABBCC99E9DD33A95A4DD94D8989915BC0FCD1
SHA-256:	28665E051F37AF822412621EE6E505D1CDCBAAEF67ACCDA830A319DC337B995D
SHA-512:	9B755A61C9850B7BA86B9C867D36643EE8AC3E3A2CB7F8849680BE40E9852FDA3FE7D45CB2AB0DA735EC64AA973C939BEA414D8C7F864E7B1782D7F801F84631
Malicious:	false
Reputation:	low
URL:	https://s.ntv.io/img/blank_logo.gif
Preview:	GIF89a.............!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:8701B31ACB9511DFB304F5EEC2EADAEC" xmpMM:DocumentID="xmp.did:8701B31BCB9511DFB304F5EEC2EADAEC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8701B318CB9511DFB304F5EEC2EADAEC" stRef:documentID="xmp.did:8701B319CB9511DFB304F5EEC2EADAEC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFED

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18651)
Category:	downloaded
Size (bytes):	18720
Entropy (8bit):	5.434605699349851
Encrypted:	false
SSDEEP:	384:ExZZytAd/VpglurHgZ5m9BUdZ5Ez8TlKWF14sYTb9ieGohJ1ieRvbL2oIPLSop0o:ExzytAd/VmlQHwcM5Ez8TlKW1yTb9vZY
MD5:	1BEC9E0B4A5C5B56245B5D7850E1A7A8
SHA1:	69DE7457236359B9BA689C1C14D292BC6F0F0F31
SHA-256:	543A1B3E383B71D8C37B73117B6CBBB05F1F2BDB70545887A32B2485E7377E9A
SHA-512:	6C2EABDE5E7BF2C45599AAF48373B734CE788E0D9C6A9813E258C1FA23E896B6ADA83CD2EB51B236712A42B61358689EDAEC1BA668B94FE9830AE397D074F6C0
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/9982.48c3aeabf331cdd3e530.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[9982],{59080:(e,t,d)=>{d.d(t,{Dn:()=>o,I5:()=>l,aM:()=>s,gj:()=>u});var i=d(18007),n=d(18269),r=d(72327);const a="",o="mgnipbs";var s;!function(e){e.POST_BID="postbid",e.NO_VALUE=""}(s\|\|(s={}));const p=()=>{const e=n.A.get(`${o}_ad_unit_param`)\|\|"includeSiteAdUnit";let t=`/${n.A.get("dfp_account")}`;return"includeSiteAdUnit"===e?t=`${t}/${(0,i.Np)()}`:"fullAdUnitPath"===e&&(t=(0,i.iQ)("",!1)),t};function l(){return{adUnitCode:p(),env:s.NO_VALUE,platform:r.A?"mobile":"desktop",pos:a,slotType:a,videoType:a}}function u(e,t="default"){var d,i;const r=null!==(d=n.A.get(`${o}_cpm_adjustments`))&&void 0!==d?d:{"undertone_video_server":{"ibv":50},"grid_video_server":{"ibv":50},"rubicon_video_server":{"ibv":50},"ix_video_server":{"ibv":50},"triplelift_video_server":{"ibv":50},"sovrn_video_server":{"ibv":50},"pubmatic_video_server"

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8628)
Category:	downloaded
Size (bytes):	8697
Entropy (8bit):	5.440897914679565
Encrypted:	false
SSDEEP:	192:XCt7mjji1Wb+rP91051MkYzajVzkvIhXNtH4rjpbIz:XCto2oSL8ozajVzvFNz
MD5:	FB4B4D793CBE9F40989B81F2996B7645
SHA1:	ED6696E3A8571CD382980171BD620DFA132C4CF2
SHA-256:	19BBF76B2E0011400C770F5261E64FA6712F75208361D15DDCC84F6ADDEF2B63
SHA-512:	93942ACF23426289D26AFBDA32C94DC0974361187A2D270C4B7EEC839E0D588507D53ECFAD0ACA4AE8D90CA71179EB7F4467E21911A21669E279B4D35CF4F5D6
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/3298.e0e830ed6559909cbcfa.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[3298],{33298:(e,n,t)=>{var i=t(64467),r=t(82284),o=t(80296),a=t(28880),c=t(62774),d=t(2766),p=t(70433),s=t(70041),u=t(26511),l=t(81936),m=t(56424);function g(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);n&&(i=i.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,i)}return t}function f(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?g(Object(t),!0).forEach((function(n){(0,i.A)(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):g(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}var v="gumgum",b=(0,u.vM)({bidderCode:v}),y={t:0,rq:8,pbv:"8.46.0"},h=[c.D4,c.G_],I=["dac.co.jp","audigen

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23058), with escape sequences
Category:	dropped
Size (bytes):	23145
Entropy (8bit):	5.430100666317915
Encrypted:	false
SSDEEP:	384:EqR0Zk8q33y4bTA8A6dEOQrhvLRvRx6ATF+G89MG64XM1A1JKwfc0/+ad:E7Zkb33yAdEXt6Em956ulKwJd
MD5:	98B62AEB5F2126845C5B50ABBA9AF639
SHA1:	241D7A81B371B10B5AF0FFA97C4FF9D9E3CCD250
SHA-256:	F43C3EFC0E4CD7AD886134A73546A826F85848D9A15AB89C47A9DC40A0BBAC85
SHA-512:	A436DEC81A933F115DF5874CD3B7A9D6E4EF875E748AC0729BD6E04FD3658AA9A51B7636E8783A634BD6F3009C64C64972941428CC06E1C0073B006AFEA81D9F
Malicious:	false
Reputation:	low
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function a(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function i(){return Math.round(2147483647*Math.random())}var c=/qcdbgc=1$/.test(window.location.toString());function u(e,t){if("undefined"!=typeof console){var n="ERROR"===e?".[41m QuantJS .[0m":".[44m QuantJS .[0m";console.log.apply(console,[n].conca

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	99278
Entropy (8bit):	7.980738813390559
Encrypted:	false
SSDEEP:	3072:UqmKB37pA1HJ1paXbZZB6P9UJRGIlROrbPXvUCWDEpWi:b/A1p1pM0SJbOrb3UCW2
MD5:	395F1EB776260B2BF3C244A678ABA02A
SHA1:	7BC625737EEBBF9C978ACE156F2E241950D28B8B
SHA-256:	9D4424EA838B9E0019478EA141F92A5FA16A84F5307623FC9856F8D9B13C966B
SHA-512:	1DF4E561ABEFB7CF2806F8BD3FE45B20A9CA35E64661B423A8FB3D2E7DC58D0D7D0AB8645A676C0421C98717D2D28A346C1329DC21B80E481BAA9D3B2EEB087F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:C0FE933CB00D11EF9A06853712F5DBE0" xmpMM:DocumentID="xmp.did:C0FE933DB00D11EF9A06853712F5DBE0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C0FE933AB00D11EF9A06853712F5DBE0" stRef:documentID="xmp.did:C0FE933BB00D11EF9A06853712F5DBE0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48468), with no line terminators
Category:	downloaded
Size (bytes):	48468
Entropy (8bit):	5.256608917438722
Encrypted:	false
SSDEEP:	768:TzbELiSyPX+zBWhJ8nuX+1S36jKF46ieH9QEjsuS0aszXMaSdtGz7cae:LQBbu4G4U3jsuS0aQotk41
MD5:	9A337D104A0A5BB31DB2AFE061F720CD
SHA1:	70F05D0AF8BD8EF177D18C61AC693DDB542D1843
SHA-256:	3FB37649DB4D634DDF23EFE4F3054DFF925887BABD612A22F12DC6D28336D8CC
SHA-512:	9D0D736024F37DDE569BB7545A6C7B1B7C896779C4E6F18732FE17F8190D06E57D165AC7D37AB692B3100EE1D8F67166FA268FFED8E007C484F68C065FA9761B
Malicious:	false
Reputation:	low
URL:	https://cdn.browsiprod.com/bootstrap/bootstrap.js
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var o=n[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=0)}([function(t,e,n){t.exports=n(1)},function(module,exports){!function(t){function e(i){if(n[i])return n[i].exports;var o=n[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=8)}([function(t,e,n){"use

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18299)
Category:	dropped
Size (bytes):	18917
Entropy (8bit):	5.662297931847443
Encrypted:	false
SSDEEP:	384:UTa2i7xh6t4uw7T5L4JUqeIQ9eKICdA2M22SGnaeGIvolgFig:Udaha9m8JUqeZ9oGA2M22SEaerTFig
MD5:	A0E7A179BFB0BF42B3D42A6D0E244277
SHA1:	D74A213F6229A985B68971695323A18C8D704C6D
SHA-256:	16C68D218C8F37BEA2D2C2FB7779B222815F8CC0C0C3C78773D009B8B52B9BB0
SHA-512:	DC28B66DBD91A62F8741CA1675B66C97B555F10DA0E653CA9ABD87663903D166652A4838AE333841CB480A8A49D7F006686098FF63839D8921DE367D8CDAF9AD
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var E=this\|\|self,e=function(q,b){if(b=(q=null,E).trustedTypes,!b\|\|!b.createPolicy)return q;try{q=b.createPolicy("bg",{createHTML:T,createScript:T,createScriptURL:T})}catch(v){E.console&&E.console.error(v.message)}return q},T=function(q){return q};(0,eval)(function(q,b){return(b=e())&&q.eval(b.createScript("1"))===1?function(v){return b.createScript(v)}:function(v){return""+v}}(E)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var S=function(b,q,v,T,e,G,d,c){if(!q.uF&&(d=void 0,v&&v[0]===O&&(b=v[1],d=v[2],v=void 0),G=l(q,354),G.length==0&&(e=l(q,416)>>3,G.push(b,e>>8&255,e&255),d!=void 0&&G.push(d&255)),b="",v&&(v.message&&(b+=v.message),v.stack&&(b+=":"+v.stack)),v=l(q,28),v[0]>3)){q.C=(v=(v[0]-=(b=b.slice(0,(v[0]\|0)-3),(b.length\|0)+3),b=qE(b),q.C),q);try{q.H8?(T=(T=l(q,462))&&T[T.length-1]\|\|95,(c=l(

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	121
Entropy (8bit):	3.959779598454751
Encrypted:	false
SSDEEP:	3:YE9Vrf4HNnNQpHHNzqJNVHHNJgNbeNrqJNAHJNwJNPIfV:YE91fKNnN6nNeJNVnNON6NGJNAHJNAN8
MD5:	1DD990ACF1870B64B8554BFC5D071A12
SHA1:	682366B57194DFAD0E543E776F34AF9A87D6AA6A
SHA-256:	81FD6BFDDAD6B7CA9E6DDA825863A45F84F1DD0396F3AE6BC20A1BB6E7F15053
SHA-512:	970866AB012E16DA97500FED9DC061343DBF8FB8F1AB437DDFC280C8A4311B57F8E1059D892B347B811EE190FA86EB2600F38C04D2CBF977314B0A76035E4BDD
Malicious:	false
Reputation:	low
Preview:	{"affinity_values":["bhih-ac","bhnn-ac","bhky-ac","bhin-ac","bhnf-ac","bhlp-ac","bhka-ac","bhik-ac","bhnd-ac","bhhx-ac"]}

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	downloaded
Size (bytes):	331041
Entropy (8bit):	5.573941142818875
Encrypted:	false
SSDEEP:	6144:UXgGUiz8zQFiZD9Wy9nnQyDy4rETqD4xgeT:UX3zCQSD5qiE
MD5:	10D0FA96D9DF8A35D5D8F89EFFCBAEA7
SHA1:	16373BE6FE630BCA68D5C36811F262DCDA3C701F
SHA-256:	4AFF33AE9A4FC89187457ADD418D5DA8BB511B14527FAAFD5BA7D4D688E11675
SHA-512:	CB189AD80761B8915578F22254E0E26914D12840BC8A4B2170105976FFA1E6331F01CE9435E8D0E20E4F52EC02A75A0C1EA019023B8BA11CFE245FF7BA407230
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-V5XPPXMJTV&l=dataLayer&cx=c&gtm=45He4cb0v79243709za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":12,"vtp_value":false,"tag_id":10},{"function":"__ogt_dma","priority":12,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":12},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTO

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22592, version 1.0
Category:	downloaded
Size (bytes):	22592
Entropy (8bit):	7.991606368635536
Encrypted:	true
SSDEEP:	384:h358oDKsljniHmIBauUR/AstAMwjHmIpc8zYvXWpZgy9gs21e5xA2b703N:h358yKslDiHmmaL/AGAMwj1cYUmpul1b
MD5:	4528524C7142B4E2D5C0438763223328
SHA1:	D439D881FD8C4F41E77C2FB07678E53FCE3E331A
SHA-256:	EA03BD5D723C75F6D0A9419D4F9651AFD78EA2A4ABFCEE7F926CBDE0681A2671
SHA-512:	6C0328E994BDEAE9A1618B8603E788B3D3672BCFF31C0C1E890439013063435D565840A4AAE319756A57606C6F1805E5CD58A585ED73C9B7AFB1E56D56C0B984
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/firasans/v16/va9E4kDNxMZdWfMOD5Vvl4jL.woff2
Preview:	wOF2......X@..........W..............................f..4.`.....0........@..q.....6.$..\|. ..h.....U...5l.F...B.....c;JoVf....G".....o....$.C6....VAp...J...@...1.=...y;...L.......0wg.T7.....`g......F.....(8.....')!.it..AF.ceD.).......?.?.8..f...q0..p....{-...Y...3.m.Or..\|.r....8&k..T..K..W....m...(.R@.G.Q...[.t.s.U..,.e-..m....6+@.Q".;".IA,...Ve.....~...>......&.Q1,.....>...~....Y.<J.5F...S.}..B...p..9.r..,....e."..?D..?.D\f)H(..D....f...^wAW..$...D...Vk{.....S.(w......#.}..f...)..A....2..>Yf...lP.z.I.!...@...?.}...O..W.;Y,....3h.).t....a.<M^.....5....).L..@.....=C>.<B...m....~nq.'.......>?../X...!.J..+.p..>.7,[.M5Ur...\x.......\|....SR<5#"..0v[.LD/[..u...b....O.!..F... ...~.@....J..gc.8..`....%7..P...B.%..%.PT....F!.o.....A.wO\..C~=.i...Rng...._....J...A..OH.O...3h..p!.S.......c.]..[w.].M..BjK.+?w...i%..;)i3M..`..X....n.tf4I].MI...~)t..)9..l6.9dh.lB\|....2SS.....Z+.{...^..dn....G...,uu....;c"......ge..Y[H..!5zc.."...i.....Z..uZ.".....>..}.\|0.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?dtstmp=1734029901333&did=did-005o&se=e30&duid=06bd33e61c8e--01jey3rz0d2nhn7eenrjpyfbzk&tv=8.46.0&pu=https%3A%2F%2Febaumsworld.com%2F&wpn=prebid&cd=.ebaumsworld.com&n3pc=true
Preview:	{"bakers":[]}

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HXtiCkY:3tinY
MD5:	D32B12B47DAAFB5D17B8DA9F0BDB4A04
SHA1:	B44E0D246E09964916D7F573B26035B875972FA7
SHA-256:	A5C81482A34CC48CCD379B4E60D1526DC8977D70DD2794ABC239E479F7D24579
SHA-512:	FD99E11E055A3F5BB7DDBB366D501FC52093F77FF57B29AB3C11DEFBD858B7329108CF8846D0B1962B0A204781531960F083C1D02E1401564838980119EB26C2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm5E1TGGxH2ixIFDX6VgUc=?alt=proto
Preview:	CgkKBw1+lYFHGgA=

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65445)
Category:	dropped
Size (bytes):	353229
Entropy (8bit):	5.283276710488191
Encrypted:	false
SSDEEP:	6144:qgLOc0CA7Ev6SXQ4DwPP02E4gtSOjtxT3Yg5FNj:qgLoCT6SXQ4DwP/EXtSatV5Fl
MD5:	812CEBA01127F3BF5AEDE260EADDCD29
SHA1:	4286D4DC8CE0C2A5AB4F71F291DE419F40910196
SHA-256:	3BF4F940A69CF7D1AF0797F0371DDAE937A8274190B22EBE165F0F7223B0E670
SHA-512:	101E3658670F994DD5957F973B191ABE573E630060EB51C2AB78DC8C5732157EDC715A4C50F6E72542EED9DBC0F5C2384A01BC13CD5612B7EDC8C3D5A8B09491
Malicious:	false
Reputation:	low
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.1105.2150 - 2024-11-05 21:50:53 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};function e(e,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function o(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(o.prototype=n.prototype,new o)}var n=function(){return n=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},n.apply(this,arguments)};function o(t,e){var n={};for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&e.indexOf(o)<0&&(n[o]=t[o]);if(null!=t&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(o=Object.getOwnPropertySymbols(t);r<

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1575)
Category:	downloaded
Size (bytes):	24339
Entropy (8bit):	5.521094158402678
Encrypted:	false
SSDEEP:	384:YZHk8fzwjQ69ZF2jNXS9LwRInHYHE/3/peBz4okGEIs3PA+M5mXTwRESsz042:IkVjT/2JoPHYkvpEzT9s/SNl
MD5:	23E0F4D2BB9C214E1682058F133BD258
SHA1:	C4A0409A1B85BB1EA2B0CE16CE1A57CE8E4EF49D
SHA-256:	28B614CC061632A0D8CB17953FC9342CE119EF471B3FF02C2379881A031A185B
SHA-512:	323B66D623AB5F5FD95EA144DDDEAC032B6E3E2C51BB7015B3172F1D0B021C31F99F157DD1332F2A7882A51AE1E8C7C6D14F2C3D45082EB6596C5030D2023F96
Malicious:	false
Reputation:	low
URL:	https://static.chartbeat.com/js/chartbeat_mab_image.js
Preview:	(function(){var g=void 0,m=true,n=null,o=false,p=this;.function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"object";if(c=="[object Array]"\|\|typeof a.length=="number"&&typeof a.splice!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("splice"))return"array";if(c=="[object Function]"\|\|typeof a.call!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if(b=="function"&&typeof a.call=="undefined")return"object";return b};function ba(a){a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/"[^"\\\n\r\u2028\u2029\x00-\x08\x10-\x1f\x80-\x9f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]*\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	227718
Entropy (8bit):	5.378254721995947
Encrypted:	false
SSDEEP:	1536:JwovhwvwV3sMwH+0G+ZBTr9ix6HeTX0XLDDDbGw5wyPybFkK8yraIG+UNM3VBYG3:FhwvwV8Mw9ZXixont8Fk9oRUytxYScY7
MD5:	ACB4D2A336AF2D9EAE3DEB70E89CB560
SHA1:	00CCDA75158E13D914E10FCF64DBA268F221E46D
SHA-256:	E61C3520C8110A709D981083DDC93CF042C2D2BA25A21903B5DF270EDB3A05C5
SHA-512:	68D16669A0E5DC1409AE983852E44B31E655D16A7FC85E6779813F0325B09240321E530AFCE21BA1CDDA3A4687D64CDCC0FF234668E0451D81856620ED7877ED
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.675199526fcb21f102e5.js
Preview:	/! For license information please see modules.675199526fcb21f102e5.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1464)
Category:	downloaded
Size (bytes):	1533
Entropy (8bit):	5.491946675382982
Encrypted:	false
SSDEEP:	24:U+2hCDzl0VL5yFrzKLbAKsBn45aqFGqHJYJ3DZaBoRFsc3Nb9VMNXBb8GEzN5PB+:UXMz+IXKyqF+3FlRFsINRCX4D33Mjbjn
MD5:	252313E3F85771974AA18C2916FD6266
SHA1:	50F0359A4C3EDFB9C902564D6A037B18018964AD
SHA-256:	894554C545AB6A0BEE47EC36BA3C5191476F7569A1D736B31390078A91B0FDBD
SHA-512:	0C75CAB73E6DD6DC96BF2462F4C98547CAA6251D1601D540BC991A122E8308B114557B1ED80FE18F4C43F04124C7447427477DA73366A9B57470894A721088BF
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/3774.e15e05431286c62e4764.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[3774],{56505:(e,t,n)=>{n.r(t),n.d(t,{default:()=>o,getAppNexusPlacementID:()=>g});n(82253);var s=n(18269),a=n(83904),r=n(64785),p=n(47516),i=n(66426),u=n(72327),_=n(13158),d=n(60118);const c="appnexus";function g(){let e=(0,p.qz)("sk_appnexus_placement_id");if(e\|\|(e=function(){const e="appnexus_custom_pid_",t=`${e}mobile`,n=`${e}desktop`,a="_coppa";return(0,i.Kw)()?u.A?s.A.get(`${t}${a}`):s.A.get(`${n}${a}`):u.A?s.A.get(t):s.A.get(n)}()),e)return e;const t=s.A.get("sk_owned"),n=s.A.get("sk_affiliate");return(0,i.Kw)()?t?16813336:n?16813334:16813335:t?9872823:n?9872893:9802904}function l(e=!1){return e?`${c}_postbid`:c}const o={getBids:function(e,t=!1){if(!(0,_.vx)(l(t)))return{};const n=g(),p=s.A.get("appnexus_id_mapping")\|\|null;return n\|\|p?e.reduce(((e,t)=>{let i;if(p){i=((0,r.A)(p,t)\|\|{}).placementId}else i=n;return i&&

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1607
Entropy (8bit):	7.654645411111336
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX30ctMwX/1PZ0ZSSSJH/de5SVvvlgr:5fh9YMLuERAnt1tGZSSSfe5GtgH8A
MD5:	3947BB24CCA3E187FBC161906686C2EC
SHA1:	3085AD8129279C8E23AA114A1FFDF2A7932A5613
SHA-256:	CDE8F9F698518D204365896375D68FF0858450411BEE28CCFA251CCF47BDF471
SHA-512:	BFBA95352EC868843B9012EA6DCD6AF3A5B6155C1742B6FBA1DB6E3E2A297806C2359762387BCDAAC7B59E012A0EC38DBC425054EDD7A5A697ECFB348049A863
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/mediaavatar/87635273-1731618848.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......B..>....x.}...&.....v.+../.j.~....!.....9..cQj.9......@..Q~..=XJ.;.E_s....g#G..J.X..G....o.]N.),.......y.w...g..yc......}0...._.qf...4.c.@y....Q.W....q..f...g. .fY"...9U1.q.L.]7....%....)..s.:`u...B.Re..;.(.Q\x..~........s.y..-......rx<.......C....+x.....x.?..;...$D.,28-.......l.mY.0.}.z

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	255243
Entropy (8bit):	7.962794728785358
Encrypted:	false
SSDEEP:	6144:+niORMqGOylVlG/ZhFho+b3upPCoLuioGzG6B+onNJ/:EaOyn6ZhF93uJPLsGlV
MD5:	753D1E06FAEE4F5FCA468B0347EFF1DD
SHA1:	2D54E30F9CBAD765E9E98F982B8F1E0DF381351A
SHA-256:	1EE28823885E5E6DBA44BED9C25C1840EC14690BA5253402D41CCDA776C87FE9
SHA-512:	B549CBF245EEAFFCB8E76264B8BE1A6834BE7D726CDC3F3ED264C50F5947C92E7707DEF5B605244F99CDDE75686FC99AEBBB82960DBE19CC2EF124558CD97625
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.4 (Windows)" xmpMM:InstanceID="xmp.iid:4A518330A1ED11EFBF35A8C1CE8182AB" xmpMM:DocumentID="xmp.did:4A518331A1ED11EFBF35A8C1CE8182AB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4A51832EA1ED11EFBF35A8C1CE8182AB" stRef:documentID="xmp.did:4A51832FA1ED11EFBF35A8C1CE8182AB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ..................................

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1348
Entropy (8bit):	7.568179122942663
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX31+rtu5B1l7ll/4nfPoODj0IWL6Gd:5fh9YMLuERAD+CpnWoODA6vbm
MD5:	83A15E3F539D3B1A748108523B4405E4
SHA1:	8139C97733017E82A598B495210BA817CE87570D
SHA-256:	8DCAE681DB9813BF7F4BC0AA4DBED81174C746F5AB719AC53A2B4C26593FC123
SHA-512:	48F3CF8406C7C06DA49A9C360BCBA8847DEAD48365E4583FF903A36C74DA6B5BDD415C4CA6DED70CDF590588B7C05DA431376CC5FF64D64F7734285C7471F213
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..9..'.X.K;.U@.$..W.u>....q.,.........M.R....C.Y.....[...;F..a.E;z.RN?.u...._...d....\|.r..1R....Y_.....W......b..ub.#..~..;>..M.)x..~...o.,.) .Y..a....k.~7.7..]....,..R2?..^6+....YG..;h..E;.D...w%..eq..V....?Z.N..E:.......)....A.9l(.u=?R....8Y.v..... .Z.~$.i.....C..<..^..M.d..9.pY.....}p;~.....Q...*..

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 360, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.925259334935471
Encrypted:	false
SSDEEP:	96:ayQZM8U0VJeiuO3B78yZehcnrw4osnyzPTfVw5Cd6VTtW4727gfXBlPSnN1c8FEj:ayt5iehcnr3bA7fcCoXX5XSntFEd+gB
MD5:	47CD6D0023F44A99D0663D5B0808356F
SHA1:	E88BC29564D179C343ACC4E7E638237CBE41EDCE
SHA-256:	9C5535D32AC07089D0BCAD366DEBDB68B94A8AF1769AB9718E20117F8DB021E8
SHA-512:	DDD992F2A5F03A554C464690AB1578CAF9132A7B0C00F6901CF1408B9479C15F5D7A377F6C1F62F14183256FD7F80AEBB77AA558D9ACB6CF797589F06E927D7F
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/img/desktop/mediaFeedIcons.png
Preview:	.PNG........IHDR.......h.....M";.....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2AE4B77E7547E511903D87871EA849BB" xmpMM:DocumentID="xmp.did:7150E314479311E5B0DC9C59436C09C9" xmpMM:InstanceID="xmp.iid:7150E313479311E5B0DC9C59436C09C9" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2DE4B77E7547E511903D87871EA849BB" stRef:documentID="xmp.did:2AE4B77E7547E511903D87871EA849BB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>h.*.....IDATx....TE.._.4.00.......T0#..Q1 b..aw..?

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	82872
Entropy (8bit):	7.987566804845979
Encrypted:	false
SSDEEP:	1536:qELOEUInhFcYR8J16nG0DoKR3NQM70ygGbXJ7dW64jyuqD9z1z3hISv+OjwHZ:qEDhFcV4j7i+jgG7JR54mRB9InZ
MD5:	13DE9EE6B6D82049D574F43FEEB94D6A
SHA1:	ED04040389FC7F42D6B087740C7A0B046F6A541A
SHA-256:	05079CA4700F7830AB58A861F1440AA5F25A464A85C4AA2F7D42CBE44DCE2691
SHA-512:	19F77A4D8628F8836FC5282BDA59B856116C5AD8524813687C7A2FC9E411C3B8A62BFCE29C55D919017B6CA97247B3A54498AC43A5773938F51DA7F35808B46D
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/11/11/040543/87633123/skylabbig.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........t...."..........4..................................................................K...-"..d..%.e....X.K.Yj..h...'+.N{.eB .+.`,..[.{C}dh..E.gT..uY.>....., /E..q-..B......e..h}?.Pm.r....Pz....i@.Ro5..e..!.P.4.I.y...........Y..<oXL0..J.3...N...j...mWJ.o....m..n.../.r.D...?5.......q.7.z.u....:.06.9....>....Z.../<...._9t.4[..T...jdg.!!...M..I./.@)b...Pk.Pn.(.....y..e.0..;y.f.... ......i.yD..P...T\|.....U.&.5.......r9.A#..CX....#.,s.........%D....)...?.z.;=....5...^..m.].o..+n.....29...y..#,v.5...;...........J..._w.w..9.7..x..r..3...f.....U..F.cgCj._.-O.......$F...g..p.l..?H.OD...L.zY..>...,.s.md....p>..=....>...q-.5.S..mh.......C...'..p.....4...D.......uZ...lj.,.......\|.,.ER.%L..b....N(I5 ...K..;.I.P...(..z..j. ....!E...3.h~u....C..4....c......}....X....<."...h.;)0.......e(...QRC\..0...9...M

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	45
Entropy (8bit):	4.6583025406779655
Encrypted:	false
SSDEEP:	3:YJH/u/GSpyqJHRvFVYn:YJ/uFfon
MD5:	82F603BEA02B859C658BE09589B6AE1D
SHA1:	6DC2225478A050A4ABFC361D2F39CB3A6AA5F702
SHA-256:	132A04C9ADE63B7D5E4432B07DD26B365384BE987AA2D27AE453050BD7C5AFA1
SHA-512:	5A83FA3F9E61E87A4DECB5D0A2F611781EA7927D391A525C895BE1803B043273369A6CE3DA24C7B5D6A8FF46C95C4A9028478CEF2495BB08C87D7E8144A4A3EF
Malicious:	false
Reputation:	low
URL:	https://lb.eu-1-id5-sync.com/lb/v1
Preview:	{"lb":"/RhJZ39GJoJJPvTDCGc1sA==","ttl":28800}

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 360, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7884
Entropy (8bit):	7.925259334935471
Encrypted:	false
SSDEEP:	96:ayQZM8U0VJeiuO3B78yZehcnrw4osnyzPTfVw5Cd6VTtW4727gfXBlPSnN1c8FEj:ayt5iehcnr3bA7fcCoXX5XSntFEd+gB
MD5:	47CD6D0023F44A99D0663D5B0808356F
SHA1:	E88BC29564D179C343ACC4E7E638237CBE41EDCE
SHA-256:	9C5535D32AC07089D0BCAD366DEBDB68B94A8AF1769AB9718E20117F8DB021E8
SHA-512:	DDD992F2A5F03A554C464690AB1578CAF9132A7B0C00F6901CF1408B9479C15F5D7A377F6C1F62F14183256FD7F80AEBB77AA558D9ACB6CF797589F06E927D7F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......h.....M";.....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2AE4B77E7547E511903D87871EA849BB" xmpMM:DocumentID="xmp.did:7150E314479311E5B0DC9C59436C09C9" xmpMM:InstanceID="xmp.iid:7150E313479311E5B0DC9C59436C09C9" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2DE4B77E7547E511903D87871EA849BB" stRef:documentID="xmp.did:2AE4B77E7547E511903D87871EA849BB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>h.*.....IDATx....TE.._.4.00.......T0#..Q1 b..aw..?

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2593)
Category:	dropped
Size (bytes):	2662
Entropy (8bit):	5.434769447218296
Encrypted:	false
SSDEEP:	48:USPc9JJFGsEF59XAeCFj8fJ9+MpwoRFczTRF8c8436XHP3QUKh9ybApZ:8Jya94jOHb89XPVAH
MD5:	CBA064207111AD66A0CFDBA12702E16C
SHA1:	30FC197712CD43549A705848CBCD8ED886CDACFC
SHA-256:	487719C8CF31F60D3B6D47AF673839B93FEE1EAB305251862D72DE7AA6C8B11D
SHA-512:	86021DA446827BF2AF26940C3781AA5456262360AB44B354BBE0A950C7C3AACD667BC0D8C6F4ECCCEADDB3C0524CF1A09B5B78A78EBB7116AB905B113433EA28
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[5341],{51334:(e,o,t)=>{t.r(o),t.d(o,{default:()=>u});t(82253);var l=t(18269),_=t(83904),r=t(66426),i=t(72327),a=t(7947),p=t(13158),n=t(60118);const s="appnexus",d=`${s}_video`;function m(e){if(!["preroll","outstream","midroll"].includes(e))return null;const o=function(e){const o=i.A?"mobile":"desktop",t=(0,r.Kw)()?"_coppa":"";return"outstream"===e?l.A.get(`appnexus_video_pid_${o}${t}`):l.A.get(`appnexus_video_pid_${o}_${e}${t}`)}(e);if(o)return o;const t=l.A.get("sk_affiliate"),_=l.A.get("sk_owned");return{mobile_affiliate_preroll:15937432,mobile_affiliate_preroll_coppa:16831681,mobile_affiliate_outstream:13227730,mobile_affiliate_outstream_coppa:16831679,"mobile_nonO&O_preroll":15937203,"mobile_nonO&O_preroll_coppa":16855858,"mobile_nonO&O_outstream":13227728,"mobile_nonO&O_outstream_coppa":16855851,desktop_affiliate_pre

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (705), with no line terminators
Category:	dropped
Size (bytes):	705
Entropy (8bit):	5.3766798582901005
Encrypted:	false
SSDEEP:	12:pJZsPCYF9Zo25DB0VPMrg7HoWDSuEqGHDc9Oil9zrXMp1wpHJc2sVkeWFHaaNm6F:F/i7td+ErSoWDSuB9Oc/XbHa20kecH/j
MD5:	A54065376C66C962ADC80C6F5751053A
SHA1:	65F15020B92A5778D0F7E1B1A3EEB4C16EF3ECDB
SHA-256:	5A35A3A803ACCA8C9AC36A58B375E2EEEDE0105D2A563994CC0FF3DDC97D662D
SHA-512:	040C4994AB32BF75BB2C6BEDF4502E59CB629F10175D312940ECF4A0078E29834794A60C645E651839B1C215E091CD1D49DBF507F3E455A58A5ABBA59927DFFD
Malicious:	false
Reputation:	low
Preview:	jQuery171049290950456684124_1734029891058({"success":true,"ts":1734029905150.0,"da":"p~ag~u~partialIdentificationceq~dsbccbae~bzz\|Blink%primarySoftwareType\|Browser%dnaa~cly\|Windows 10%bibmac~e~h\|NT 10.0%bldbcucxddj~f~d~m\|117.0.0.0%budcb~cki~c~bgt~cq$0^bd~w~dhabad\|Desktop%bqcdbabtccdfr~dqbpcraf~bkg~s~cnl~brbhcp$0^dgchn\|Chrome%deciah~a~dl$0^bs*v\|-","rand":834551,"geo":{"latitude":40.7123,"time_zone":"America/New_York","continent_name":"North America","metro_code":501,"region_name":"New York","country_code":"US","longitude":-74.0068,"ip":"8.46.123.189","country_name":"United States","city":"New York","region_code":"NY","continent_code":"NA","zipcode":"10118"}});

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 156, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1923
Entropy (8bit):	7.269456088156891
Encrypted:	false
SSDEEP:	48:81kvnLSVMEXM7BJ3S22C4M3PzdN9aj1xuonnjpkLA:h+V5ST2C4sd3aj1Vnjpz
MD5:	3B3DBAC17D8903A5BF3BDCC0918E7143
SHA1:	8C7DC7AF71807A12DA7233276C956ABB16C1D617
SHA-256:	0945A7C55AC8053108B3C9BFAF00797A9A78AD2B934277FE67246347A0B96130
SHA-512:	F0B8457C14AF758C6178541935C759248954AB4E53857E61C907CCAD2F65982E4A23905D9141B1FE978B337D2B97BEF5768B6F06656ADBEF781FE4A0C6A7914D
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/img/desktop/paginationArrows.png
Preview:	.PNG........IHDR.............v.+.....tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:39a047f9-a28f-6643-907a-5c00b97ef935" xmpMM:DocumentID="xmp.did:B0C341FE6D2911E5AD36F722C95E0B4B" xmpMM:InstanceID="xmp.iid:B0C341FD6D2911E5AD36F722C95E0B4B" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:665930bd-d0d2-1c40-b7f7-487539ba9722" stRef:documentID="xmp.did:39a047f9-a28f-6643-907a-5c00b97ef935"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>./>.....IDATx..AHUA...{>..2H\D.....

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Thu Dec 12 18:44:15 2024, max compression, original size modulo 2^32 33035
Category:	dropped
Size (bytes):	14685
Entropy (8bit):	7.986121058694582
Encrypted:	false
SSDEEP:	384:11ZqZfdl/470vJPWLRNwMKg/UQx2geWPk:4ZfrKfbKKUD9
MD5:	2BB077DF7F9ED3C4BBE431A98838214A
SHA1:	E038296916038F6D11D101357C8D1CE02F9F091A
SHA-256:	CBDA0C87DF34D081F6D9597D0C348F4350A66F90A883E7AA9C435CCAF6A7FA6E
SHA-512:	75CF84082426F857AB796124C3AA94E51942C65D4BE5CA2A76E32AA7DA2891E54C2522FAA10ADB2D33E5E2F68531419918573A80226C607EDED464E72D4E33EF
Malicious:	false
Reputation:	low
Preview:	......[g...}kw..u......n.#v....(6..IP..\|.HI$eE. .....x.....L.8.sr6.u.x7...I..dw...k.I>.O.g2..{o.@....{}.......[.]U....[..{5u.HucJ..r%s..#%/c.....iA..mB.....>e..9.}....uV.b...Sk..gm.:..9..j....d..%..#..h4.........e;..\..BQ(...+.Xo4[/....n..r\|2.>8<....c.....$,.1.u.'Ymf...c.l.e....S......H2.6s.......}.$.2....L.x.>.d....Do..../:....T.)j.]Jq ..^..h.n....M.AKh..5....?.AS....vy......K.U7.bt...A.n<.&D.@...:W.D5..........@....c......e.;;...W.=....86.E.D. B...........Y.8..g.j.1.j..Z..Be.k9I(9..:Shb%.-.{.]]g. .c..@.:1....zN....xO.Kno....e.t..O..9.i%h.x.-...`q.$..I+......r.(...1T.mK..d.....iXG......%...1..'.."UL.<.wk..........~..y. ...XY.9.g.j.D.b.ve2ho.H..0.;S...<.......D...V-\..o-p<....m.!...(e.C..U..P.]..N...3..vk.p%...D.......^k...2..kk...}h....(..t..X...ld....vP&v[....cu...5g..6o....t.w.....{..8.\K;.{....JnW.b.x.E!W.Q'...S.i.E....-..._..c\.}.uE..s..`..V.=...8qR.......F.P7[+^c.^.\|R7...h.J.)A.ZPy!\B......g.B...3....<.-$u...C7%H..e...d...3......./.

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Mon Nov 4 15:35:04 2024, max compression, original size modulo 2^32 66654
Category:	dropped
Size (bytes):	24876
Entropy (8bit):	7.989990425248897
Encrypted:	false
SSDEEP:	768:EYOL69XPIaZTJ4IZTvppJw7iZ23Nq45Def5/FDhnx5D:I69ZTJnppJw7ig5Dy9Dd
MD5:	7CE91A86146AD6636C85DD879519E02D
SHA1:	30DD0927D190FD81E1A2E056C34BBF7098293A01
SHA-256:	3F5F785866D91750A853C6B054FD65A7EC4D0DB15A2D531FE8686280C5BC4B99
SHA-512:	126C4BF538887E51FACEAD4852D24BF7793F057BCD3A560A1DC2AB3BC5DF8C099E0137C3CD2BDA55DDCC37316D7CA124A1DAACC3957AAF6166145AAB9204CB12
Malicious:	false
Reputation:	low
Preview:	......(g...._...(...>g.....cF4.. #>F\|....H.8!`.@P...TU?.8..>..w...I....^]]..M.n...g......5.f..v.-#0...?....Y_o?.Q0.B.9...i.Q&.e./..]...)d..ww)...^...?2.K9.....g.r.]...j.......M.....d.{.L._Vz)~.Q..JF.ub.Lh.f]....s..Bg-hk.I8..2.+....~...{...LM.....{...h._../..`_.......{f[[....i..[\,^............JaQ\<Cb4.._..yR...zA.7...&..9...(.Of.N....f..q..9.=g....w2.v.8.;.o.7...Z...+.......n...j.y...m..].9.../..?+.f~1i.P.4?.q...[..1...'PjVxZX.P....`........Qc.x..X..N....."V..`.7...KTx.^..8p&.F..#.k>.)..?.NO.....l....).8..I~.%..B..o..:.....h.g2.<]...8.q..f18......F............@.X...s^.^.6./OM..;]L...Y..]..n...K.wR).],...2_=.H..Z.^c'_9.^.=..s...Y.;....&...:O;...9)<./.Bg.....m....a.V......!..s]....w....I.8..............^....G<....b.\.V....~..h.sW9....Vm..}.<.3......j.Mv.^/....Y.............}.=..n>5...N....G/...F..u.o.[.....r..v;?..'L..8)..L~...j'.k.....x...*..X.m.S.]s2x........._..^....9N...s~.....n....N{{..4x.....o.i..Xm-^......W.<.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22521), with no line terminators
Category:	dropped
Size (bytes):	22521
Entropy (8bit):	5.286440087506929
Encrypted:	false
SSDEEP:	384:v0ArvPtcYTrC64NYDcnNMJWq7V/BISl7V6Cj0k08R7qq5mmlzm4WQYuJ1d3nvB2Q:JcKrDD2W7V/77V6k0kDR54u13nvBtjHv
MD5:	51636DE3CE868A2172F9E6996C2934E0
SHA1:	9B5DE9F2BE0AF95B03FC43F0B1BFB9F25F81A900
SHA-256:	2AFCABE2EB6314148DFD9DFDEC1333B973D97D0780CC08FDDAB8501AFBB013E9
SHA-512:	A01C26BE01E93F32DA42F1BA642D21F8E1F828F6475CC44B916D739C0679E977FD99A7B57FD3DBD2CA6E27524717362B054886F4131D7D90BBCF7CF442DAA9A2
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=1)}([function(e,t){},function(e,t,n){"use strict";n.r(t);n(0);var r=function(e){return{width:

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6280)
Category:	dropped
Size (bytes):	6349
Entropy (8bit):	5.549750505697027
Encrypted:	false
SSDEEP:	192:XAvEumhTW9mxD9AE5DdcmqXBdx9fEItPLB1zBty5E:XAvEvyAxD9Aky3xWQLLz7
MD5:	E8CCD08B2D290991709ADEF5513B6331
SHA1:	A14E69AA41156826B74A3C3FADFA9408AEDD808F
SHA-256:	08D2CAB45E46491C1B772CABE4BF6E2B1820B4E274D4644BE549F78E4EE6906E
SHA-512:	E53DF811406B7DF2AC84D6A0ADBAF1F41D1DA62EBFC45E24A881E9B72593DBB539DC6769ABC7E1E03DABC8E474CBCA0569854AF9C4404829D12F086ACA20CC14
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */.(()=>{"use strict";var e,a,o,r={82980:(e,a,o)=>{o.d(a,{A:()=>r}),window.blogherads=window.blogherads\|\|{adq:[]};const r=window.blogherads},7947:(e,a,o)=>{o.d(a,{JE:()=>s,MD:()=>l,vV:()=>i});let r="full",t=!1;const n=[];let d=null;const c=(e,a,o)=>{d?d[e](a,o):(n.push({log:e,message:a,obj:o}),t\|\|f())},f=async()=>{t=!0;await("lite"===r?Promise.all([o.e(1257),o.e(6470)]).then(o.bind(o,36470)):Promise.all([o.e(1257),o.e(3959)]).then(o.bind(o,23959))).then((e=>{d=e,t=!1;const a=({log:e,message:a,obj:o})=>{d[e](a,o)};n.forEach(a),n.push=a})).catch((e=>{t=!1,console.warn("Could not import logging module",e)}))},l=(e,a)=>{c("logDebug",e,a)},i=(e,a)=>{c("logError",e,a)},s=(e,a)=>{c("logWarn",e,a)}},37816:(e,a,o)=>{o.d(a,{Bs:()=>f,F3:()=>s,HW:()=>u,I6:()=>k,KY:()=>b,N9:()=>O,R8:()=>t,St:()=>y,Wb:()=>g,al:()=>E,e2:()=>m,fI:()=>l,gK:()=>c,gv:()=>p,hh:()=>v,p6:()=>i,qz:()=>A,t5:()=>w,uT:()=>h,xr:()=>_});var r=o(7947);const t="pmc-a

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	407615
Entropy (8bit):	7.987047193014191
Encrypted:	false
SSDEEP:	6144:52mf92vnelO3TJnJJAC4qrgM3FJJGi/I+1OqXdqs1/52gzWs2hbE60XY50M:5rsPAO3KqrgwBOEqs1sgzWs2hbpCW0M
MD5:	0920FE1F5E485D986123FB70E58F49D2
SHA1:	F11BB9EDFFBB6F0D6703EF6BDF626105CDBFC873
SHA-256:	DC3DB9C488F209876098CF2F39BDA008FC8EAE60F330C7B30146EA27D2D7DD29
SHA-512:	64320B1641E4E6E48166223ABA1373207C795B3F1E10067FAC0EEDE4D84B59D37B525633513E2FE344467534A33396D8CBFFA60149D3F819FF422E23E58F125B
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/05/035257/87643946/randoms-thumb.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	174139
Entropy (8bit):	7.9789191404495226
Encrypted:	false
SSDEEP:	3072:C1iqc4Io8kJw/erpvUH2FAVKGzoJQ+Fm2p+84ouAyJVps4UxuTSmCo0:tRlTUvsKAfo2+FhALJVX+Ro0
MD5:	54DE3C18893F485ACD10B7CA48771032
SHA1:	3736FF50E207C4325A40CED120BDFC3A126936BE
SHA-256:	65B43BF4DE8F85132511EEBF8F74F5A5F51D8AD985C36F3D37E0360BB12EA86B
SHA-512:	A0EBA3AB1987DEB0D10451AB9D3001874B465657220E330AB58E2185DB0831678EA3A6CFEF6790C03495DFB68E829C0C08D07119DDABBE753A124DBBFF96D707
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:AC6DD1B2B01E11EF9A06853712F5DBE0" xmpMM:DocumentID="xmp.did:AC6DD1B3B01E11EF9A06853712F5DBE0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AC6DD1B0B01E11EF9A06853712F5DBE0" stRef:documentID="xmp.did:AC6DD1B1B01E11EF9A06853712F5DBE0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	43317
Entropy (8bit):	7.923389986688266
Encrypted:	false
SSDEEP:	768:6tazhXPLAyxagcWZMbtPSH/9pUWK9I3Y6WIswD0Ko:4az98yxncWyS9GWK9QYh8Lo
MD5:	D7D23DF51093F6C6FFDA7BD3E3ED541D
SHA1:	16483F9EE20F7B57527302CC9D69AB5896245F94
SHA-256:	8920FB3296F3221439406C9F40B2CB81426EB50CA892C977746F88AD692A25F5
SHA-512:	204B0993E102C7911E74BB6E227C817689793491E7910557084F25612662E1D9F0A4EADB95BA41EC686B1FB119E6B2CBE82472D93ACB2CF20DAEF843E2F3EC74
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/11/11/040330/87633175/n11r-thumb.jpg
Preview:	......Exif..II*.................Ducky.............2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:4C22C995988F11EFBBC4D436F2AE3975" xmpMM:DocumentID="xmp.did:4C22C996988F11EFBBC4D436F2AE3975"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4C22C993988F11EFBBC4D436F2AE3975" stRef:documentID="xmp.did:4C22C994988F11EFBBC4D436F2AE3975"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................'..'2&.&2.&&&&.>55555>DAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDDDDD.... . &..&6& &6D6++6DDDB5BDDDDDDDDDDDDDDDDDDDDD

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1176)
Category:	dropped
Size (bytes):	1245
Entropy (8bit):	5.4317221389342825
Encrypted:	false
SSDEEP:	24:U+DRCdDEFWrXg/UgU4DRDxgPsJfWVxqnuBf7vDKDl2y/K8XM+ZKN5MBBAIGEi:UUCdAuXg/t5JunsQ7vDKDc6XM943ALEi
MD5:	100F8F2F2BCD0D9F3318B1FA391995BF
SHA1:	B71EFFA53E722400C8932339820E66484824DEC9
SHA-256:	2B0020059A0E0B448546C771D058D16727AA2F5D056F4A38079CD92CE800ABE4
SHA-512:	CFCC33665F0BFF30365BFFDA11AD370EF6CD57653039011A82826E45C34600CB7766AA25D3EC9134AFB89A84D157313D43D5958BFF89068CAE07B0EAD9DCB98A
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[7822],{87822:(e,t,i)=>{i.r(t),i.d(t,{default:()=>p});i(65714);var n=i(18269),r=i(83904),o=i(81257),d=i(72327),a=i(7947),s=i(13158),_=i(60118);const c="rubicon",u=`${c}_video`,l=c;const p={getBids:function(e){let t;if(!(0,s.vx)(u))return{};try{t=function(e){const t={preroll:201,interstitial:202,outstream:203,midroll:204,postroll:205}[e];if(void 0===t)throw new Error(`Unknown video ad type requested from Rubicon: ${e}`);return t}(e.type)}catch(e){return(0,a.vV)("Unable to determine VideoJob type",e),{}}const i={bidder:l,params:{accountId:n.A.get("rubicon_account_id")\|\|"10278",siteId:n.A.get("rubicon_video_site_id")\|\|"164712",zoneId:n.A.get("rubicon_video_zid_"+(d.A?"mobile":"desktop"))\|\|"1422764",position:"atf",video:{size_id:t,language:"en"},inventory:{}}},c={};return Object.keys(e.targeting).forEach((t=>{c[t]=(0,o.pw)(e.t

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1079
Entropy (8bit):	6.067314342427195
Encrypted:	false
SSDEEP:	24:C1hnBWwh82lYSKwqydTUnjVK4T3eyJ3VKYqySGYgv8:A1kvnLg0jw4BJ3c4SOk
MD5:	5AD1F80732710D0093DAD42B0C434971
SHA1:	F6BC904217FCA2F341F40682F1B1456BA862A096
SHA-256:	A86104E416A305F45FE951D7BA260D8DAB1EE766E6FBB55D1CD06D0E30EC4437
SHA-512:	8FC4193830D8B3008F9EB42A13B121827F1CCD3A484F6B0F329A0743E96235C878E8835B7AD5D1AE08932E9EAFB969F4401108E93B7F89358CAC29ED8F9EEF06
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b3531b36-e33c-8448-b59b-507c3edf9c75" xmpMM:DocumentID="xmp.did:D2E86B4B63CA11E5A935E2AF8437B632" xmpMM:InstanceID="xmp.iid:D2E86B4A63CA11E5A935E2AF8437B632" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b3531b36-e33c-8448-b59b-507c3edf9c75" stRef:documentID="xmp.did:b3531b36-e33c-8448-b59b-507c3edf9c75"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......WIDATx.b...?.5.......d....J.)

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	102807
Entropy (8bit):	7.984173109685569
Encrypted:	false
SSDEEP:	3072:qE58l2P0U9YZqxNA3i5l/xAY3+2foDuOTnyJxS6aEtk7:qE2VU9UF3wgpKQ4tQ
MD5:	43B958C8CA1A6FB3E13325F2C19F1EEC
SHA1:	8E57EE099A807B83F9F935047563C1C4F445C3AB
SHA-256:	B70D00F2D3D53F8177B24B84D03431F354D612ED4C2BCC39017BF8107410CE4D
SHA-512:	449A77EDFB32CE3630228BAADD3BAE457E53ECE1717CD134F9C4EDEDE44583DD4376E0CF3E1C5C9DC05597D2B359F380A833C57C1BA0A08A8A39D508B5F44431
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........t...."..........5..................................................................mc..[x..kM.\|a.+Nn.tZ]..^.k%M...V..pM.6..vi..+6...~.....f...uw......D..............QSDwZL.....^.!d...r.O..z..&v.JM.6MR%H.6/..]D.....T.G[..;.....j..._6..5e.s.G.D7..HLp>.]...mq..Q.U9P.P.........A.. %a. .q..B..).h.!%I.Z@ip....B#H......[2......`.!@,.C..:5..c.d.......5i.\...j....\g..{n{.b5ho......."...D....M..q..V...W...{.........A.................E..>....NxVhl....y.1.....IqH.....fw5.......N..:3."..-.......d.....B..(q...e2.0RL...Ek.. ..V..P.N. .....@mf4...U.......%.k@.^!....,q!bA.4..%.....@.....Md$.....0.F:..9....j.....U.F.\j%.ZoX;:':.,4Y...+n)...z...o.W.Z....._.....D.d.......s..3..w.............k...}..>sv.FvU...[M.6....x.w..,.DCS`O..cEe5...."]'@.....Y:lM)....V..W0@X.C.2.[....(.....l- ..B.IS`I..N..s.Y..<....C.S8...I.

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	112204
Entropy (8bit):	5.490709919344628
Encrypted:	false
SSDEEP:	1536:kB6Wl2DCcDDV6BYr+imdunekzizMiwi0Gbn9s360rAfGGDZEfI0bSVXgpDi2hUk3:ATcbr+i8zMiK8DRhS8Pe
MD5:	B248CC9D0FDEB36BDEB7EFABAD1132EE
SHA1:	1DD76E251409388C3708453ABEB7FED717D5A72B
SHA-256:	A2AA2577C105DAB138246B4E0A1F575B3C92C30D5ACED108D3F73897BD46823F
SHA-512:	95DF8427C66E9F84B01659CAB471278EE86F6FF7A2ACD7491007E43AE4EB3ECB2ABC395AC501FE7F005A0033933A5BA4998A1202C92B039097D6FD480B260E0A
Malicious:	false
Reputation:	low
URL:	https://ats.rlcdn.com/ats.js
Preview:	window.ats=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=106)}([function(e,t,n){"use strict";(function(t){var n=function(e){return e&

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1345
Entropy (8bit):	7.577084358901242
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX3C/TPGKUJ0ToHU7/QriXB9J8A:5fh9YMLuERAITGKG0MHEYiXB9T
MD5:	9B5CC4FF71EFD30DD5619D262B918020
SHA1:	F1DB90DDDE6F068A8DF220FD13A33D5493CBF470
SHA-256:	E18A7C35B73BDD45978801C3169EE4FBD619FFBD66AA3F615272E41D9CCEAB4D
SHA-512:	CFBF39D7CD8E5C7831B712ED0C1969F603F9A2747D86E549EA3D793411B01E6D0DD29EC11F9C38A2F198AE48596EEE16123962F555FF119DD92C77D225031761
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...@.U=[U.G...........\.-..J..C+..k..4..b..=...>.2.K.{.......We.kV...tiS.*zg..NPq....s...+KS...2......j.c..M.T...`;..'.;.M........?.J.A.i...[....p{..2.cW.Y.Q.z...5..i(..H8'?.t.....r..L1..].\|.............\[}....L...:E.sX^>.{.....%\|n.N.....$mQ.6:....HO.xv....../...F......?.)5M4.L....(....?.....5.O..

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (510), with no line terminators
Category:	dropped
Size (bytes):	510
Entropy (8bit):	5.333054743827518
Encrypted:	false
SSDEEP:	12:2QO/1J+6SyU+h3NKQOmxqGVCp4BDsKc3OtW1s2VJoRWUkEOWe:2QO/3vU+hUI+Q5tWuxRWUnOWe
MD5:	892F57D94E655933D96587955182EBFA
SHA1:	5D4FA2B0691A819D4EBC7B432031BBF6C8A7DB55
SHA-256:	0357A15FFCA29B22C99DB6AAD032A841843D7D5C7D03BC786821F3D59CA9C24E
SHA-512:	8AB1B4F9E88CB348C45B4B0FA53FC8EDA45B14B89697FBBE6026B6DC836A1043C4CE5831FBD9D8DDF25992E9CC159780B5F8EA50CC075693682B69CECF3E9264
Malicious:	false
Reputation:	low
Preview:	(function(){if(window.location.href.indexOf('boxqamode')>0){window.sessionStorage.setItem('xdibx_boxqamode', 1);}var a=document,b=a.createElement('script');b.type='text/javascript';b.async=!0;b.src=(a.location.protocol.toString().indexOf('http') === 0 ? '' : 'https:') + '//www.lightboxcdn.com/vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/user'+((window.sessionStorage.getItem('xdibx_boxqamode')==1)?'_qa':'')+'.js?cb=638651880840709765';a=a.getElementsByTagName('script')[0];a.parentNode.insertBefore(b,a)})();

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 720 x 90
Category:	downloaded
Size (bytes):	12501
Entropy (8bit):	7.957167011097217
Encrypted:	false
SSDEEP:	384:BFFb/yyJi81zk+wK0rxdX5PeeqO4JsrElLsgL4:BFZyQPI5leS4JSmm
MD5:	8C5117DB12FD60CDC5AED717B1B0F758
SHA1:	C1C6850F5E1111B9A7B097787107FF51C7B28EF8
SHA-256:	A85CEF76FF3C079BEA7073A0EED8054049B02C0415A53F9E570543C19DC5C309
SHA-512:	FC753E8CE256BF69833D27008884928EB5D8F7CA4364A39398B10CABC8D93D996BF1ABD5B0539A67A7F24161B709470A63D6789AC9C924064D2B64B0576AF0A1
Malicious:	false
Reputation:	low
URL:	https://ebaumsworld.com/img/presstart.gif
Preview:	GIF89a..Z....3..lm n....6..&.....$,m..#=..'/rU....0.$Q..4..3I.. &U"(\..B.....;.....<+5./:.F..X... G)3.!&Z-7.,...!H......%-u. D..@.#M..8#.....It.&.x:U.<k.'0\|;..#)e!(a."K...,6.4........n......7mn$.y.$*`..).I..$Ono(..ET...Z..!Iop,-8...%..& '_....;q..(..)..-..'..,..Cdm...(../=....>........,..?..4>Y...9..?.............~.....+6./........M... I.c.......F....Wa.8V.oq0pr4-8...&.)N..$0<......#...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:bb7ad699-382e-4ebe-af3c-ecce9533208a" xmpMM:DocumentID="xmp.did:B663C77A93B911EF8BDA8FECD011223A" xmpMM:InstanceID="xmp.iid:B

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	105414
Entropy (8bit):	7.980467728914014
Encrypted:	false
SSDEEP:	3072:qTUpeZKa1PoCOwQhWtEy3Hqhul8LbldLx:deZKa2CxQ8H3HqhyoN
MD5:	3264854ED9DA1B814D3D0E811998F09D
SHA1:	D81877B87489E62D9863392D11E4D67A1F9A6DE6
SHA-256:	50022606C1343BCB0A94257BAAFE095C568F7DB7B9324D149E7D3C52F343F39F
SHA-512:	CDE5AA0DAAAAC15E8CD4CDF084D2C9FD060A50884CCED7BC27400EB1ADB42E49C7C2473167EA43EEACE82DBBB4FB2BF386A47857B2EDCD88424F0A76D8AB9208
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/11/030516/87646246/wow.jpg
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:AC6DD1AEB01E11EF9A06853712F5DBE0" xmpMM:DocumentID="xmp.did:AC6DD1AFB01E11EF9A06853712F5DBE0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B19686F9B01C11EF9A06853712F5DBE0" stRef:documentID="xmp.did:B19686FAB01C11EF9A06853712F5DBE0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (704), with no line terminators
Category:	downloaded
Size (bytes):	704
Entropy (8bit):	5.376304703662921
Encrypted:	false
SSDEEP:	12:pJ1uusVFMm9SEHaaNmdL69zD9ilV6wpH6B0xXMKWdZtLGK23YX/Wve0Zc6UffPb5:P02m9SEH/NML+lSH7X3wDLo3YX/2ufb5
MD5:	5B925E71F89698171C7081F838136DA9
SHA1:	4B6CBE489BEE5557C30AEAD8B73EB50AC895A351
SHA-256:	0E682C6375F3CC0FE72A3286818537EE46A1ED0C7FA75D59A3D484B352C357EF
SHA-512:	177348552A08C9867F189F2890ECE74C1AAA4C46F8500F4B43494E95CE5412337685B079F92A55B435176C8F123364E78FD537608066658560C2CC019E0C448E
Malicious:	false
Reputation:	low
URL:	https://lightboxapi.azurewebsites.net/z9gd/40857/ebaumsworld.com/jsonp/z?cb=1734029891081&callback=jQuery171049290950456684124_1734029891058&_=1734029891082
Preview:	jQuery171049290950456684124_1734029891058({"geo":{"longitude":-74.0068,"zipcode":"10118","latitude":40.7123,"country_name":"United States","continent_name":"North America","region_name":"New York","time_zone":"America/New_York","continent_code":"NA","country_code":"US","city":"New York","metro_code":501,"region_code":"NY","ip":"8.46.123.189"},"success":true,"ts":1734029902687.0,"rand":31342,"da":"dddbs~bgcq$0^l~dse~a~ad\|Desktop%bqpartialIdentificationdeaa~w~dgbabpag~v~cechcndfcbprimarySoftwareType\|Browser%af~i~p~cp$0^b~m\|117.0.0.0%dct~ah~cuc~buu~bmcidqz\|Blink%btbd~bkq~dhac~clbzd~r~f~ae~g~cddnbrccdl$0^blj~abbsbhy\|Windows 10%crn\|Chrome%ckbcbih\|NT 10.0%cx\|_"});

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	102807
Entropy (8bit):	7.984173109685569
Encrypted:	false
SSDEEP:	3072:qE58l2P0U9YZqxNA3i5l/xAY3+2foDuOTnyJxS6aEtk7:qE2VU9UF3wgpKQ4tQ
MD5:	43B958C8CA1A6FB3E13325F2C19F1EEC
SHA1:	8E57EE099A807B83F9F935047563C1C4F445C3AB
SHA-256:	B70D00F2D3D53F8177B24B84D03431F354D612ED4C2BCC39017BF8107410CE4D
SHA-512:	449A77EDFB32CE3630228BAADD3BAE457E53ECE1717CD134F9C4EDEDE44583DD4376E0CF3E1C5C9DC05597D2B359F380A833C57C1BA0A08A8A39D508B5F44431
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/09/053029/87645244/heistbig.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........t...."..........5..................................................................mc..[x..kM.\|a.+Nn.tZ]..^.k%M...V..pM.6..vi..+6...~.....f...uw......D..............QSDwZL.....^.!d...r.O..z..&v.JM.6MR%H.6/..]D.....T.G[..;.....j..._6..5e.s.G.D7..HLp>.]...mq..Q.U9P.P.........A.. %a. .q..B..).h.!%I.Z@ip....B#H......[2......`.!@,.C..:5..c.d.......5i.\...j....\g..{n{.b5ho......."...D....M..q..V...W...{.........A.................E..>....NxVhl....y.1.....IqH.....fw5.......N..:3."..-.......d.....B..(q...e2.0RL...Ek.. ..V..P.N. .....@mf4...U.......%.k@.^!....,q!bA.4..%.....@.....Md$.....0.F:..9....j.....U.F.\j%.ZoX;:':.,4Y...+n)...z...o.W.Z....._.....D.d.......s..3..w.............k...}..>sv.FvU...[M.6....x.w..,.DCS`O..cEe5...."]'@.....Y:lM)....V..W0@X.C.2.[....(.....l- ..B.IS`I..N..s.Y..<....C.S8...I.

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (559)
Category:	dropped
Size (bytes):	628
Entropy (8bit):	5.474492656142008
Encrypted:	false
SSDEEP:	12:UO789Dk1phQhJ+qhVqF6ZMhZfqSVwAbV5HkTKCTQW6jzp9whk:U+uObHbBnznwK
MD5:	B197852A2D113679CACA5254E813B191
SHA1:	9DD782EE13C2402959022BD8633313B1A3739D50
SHA-256:	B864C5FD2F4A601169D83A42B094C2A521CC32AA35CC7E4A1CA96D9C8B7F2DD0
SHA-512:	7F25A490BF6504330A5B7AA193351C4813BF1E6814E5CB33E81F4417D80F8223F004D94232B5D7FB338FADFDA0ED061ED7712D5FFF769795254981173037BF55
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[9265],{69265:(s,t,e)=>{e.r(t),e.d(t,{default:()=>n});var _=e(40459),a=e(18269),o=e(81384),p=e(10057),r=e(21596),b=e(81257),i=e(13158);function n(){const s=a.A.get("browsi_site_key"),t=a.A.get("browsi_pub_key")\|\|"PMC";(0,i.vx)("browsi")&&!p.A.getInstance().getSponsored()&&!o.Ay.disabled("display")&&s&&r.A.vendorMeetsCriteria(_.Fk)&&(0,b.k0)("https://cdn.browsiprod.com/bootstrap/bootstrap.js",null,!1,"browsi-tag",null,{"data-pubKey":t,"data-siteKey":s})}}}]);

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 164821
Category:	dropped
Size (bytes):	45565
Entropy (8bit):	7.991811227285949
Encrypted:	true
SSDEEP:	768:6YC454Ib64Wf0kT36NVJkk5fpXQzLft/ZV0cAxi0Kj80S7nR+VZq/H:6YC45jb64WxKFkKRgPp70zPKj8/nR6s
MD5:	F6B0430412766531C6573FA00A364173
SHA1:	A262E6ECFD3B4B3E963E7E974334EBDA571D6AE9
SHA-256:	DA0BFD5FFD43BCF2CC2DA4532A3943F2B67DEF49B291DBF27B7BA0E9775CB154
SHA-512:	4C6B1B9FA7BF8FCCF0F4548F47D10D6DD1F83A542D220A5442B59C6F7CA0698BDD12A8E7981688C3A58DE17A6D8AFA222DD97913E801E0D8C62F7869B98B5F6E
Malicious:	false
Reputation:	low
Preview:	...........}.W.H.......{=.M.h.-.M..l..&1`c3\.6l...$......T.V[&$.Y.9/...Z.[uum].z.=..`....Tog...GG..\.....I2+6.1..-._y.L`E...@....~..;P.R!K}...r..x..l>/.;q.......VR.Y(K...XG}.ey...j.l.P}d.f.c.Y(b.m.$..r..YF...Y_..j....=[...Mw..;.....-.%.. W..L.<R...bj.......N.J~..?.....k.juS...y.93.I.....%.6..,.~.^FY/-D...z.m.6m1.jT.d~......-...(5..U.nY..Z.0.`..}1.K.,.9....l@G.z.!.n...Q..&.....pGB.....s..4....U,.fM:B>.OF..+.z..g.~!.aR...x..$..U..k}J_..yl..e..eJ....Q..,.Y._...H..i.G>...h.....<..:.E!...P.%}.J.^B.jD.............m./.-......B.C.......f...pR....T`...z...`C+:..g..Ye.N......d....a.2....2.}.d\|.p.gB..k{..xzK{...Q.`..S.6,:B<.L.M...Vcm.pf.........Y./.Tl..\.Y..#.....?j.x.Z^....I.:.m..SU......~p...z..}...zW.5.T.J.F..]...P.+....iR..Y..U.............0~z..c..1;.....;..3. .....H.....AuL......qo-B...e2TF...d]E..l. ..H.f.%.J:......c;.,..h*t..g.>....{.=.@p.!.'t.A..8.....W?....B.u.Y.V.=Y..-...~..a..[v...b......Y..&l...".......(..`......WW.;...t>.~...3K..-X.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://merequartz.com/aadetect/px.gif?ch=1&rn=13334&bannnerid=9949940_advertisement_
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (27242)
Category:	downloaded
Size (bytes):	104733
Entropy (8bit):	5.487119823691443
Encrypted:	false
SSDEEP:	1536:YPlv5j/cGJLEYrU0KYaAE0Oh1kHli7cn58xWIiqIqenoOWKJzXnH+:yN+AEHA47ceViqI/oJ
MD5:	CBA97A5BEA05BF02B95AA622B131ADDA
SHA1:	1DB790D2727445545A5B2A92C16EA193069E3EF1
SHA-256:	984B974BD3C1593BB050FCC0BA6E5596EDEA3E53947F2BEFA682510BE2B7AAEC
SHA-512:	38A35CBF4F21C4599E742C8D7E92C7D8865A6B5BE340E677DF604DE4F9BB714E3D4BFF85F2ECF5C3EE8A23018CB06A907786A9944070FED06C11A0C1A76790E9
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65385)
Category:	downloaded
Size (bytes):	297617
Entropy (8bit):	5.329378042270177
Encrypted:	false
SSDEEP:	3072:yxUkht6TrJk0143PWA4DBWRhzLB98GO14zyYCsNH3t:06/JkBfWA0Oz8GO14zyCNH3t
MD5:	20CDC1E221884A76FE884CB6999A4866
SHA1:	E1940E9A07BBA7D89080CE515F2554555A9B8A57
SHA-256:	8631C59DE1FE89C94CB86F308AB3A3BA48053E039B4717159F148FAFA19979F0
SHA-512:	F6D66345ED9BB4B08326F6E874EB3F5C7F9D9CA3964649DABA1FF2D0E6E30F6E8B2B10DCF525A94BD78298B9694A40A03136A62926179A5BB6D1C82A9B003507
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/813.d750b07ac83d91f0d8a7.js
Preview:	/! For license information please see 813.d750b07ac83d91f0d8a7.js.LICENSE.txt /./* Copyright 2024 Penske Media Corporation. All Rights Reserved. */.(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[813],{11762:(e,t,n)=>{"use strict";n.d(t,{F4:()=>d,Q0:()=>s,c5:()=>f,q4:()=>l});var r=n(64467),i=n(80296),o=n(45458),a=n(41364);function c(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function u(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?c(Object(n),!0).forEach((function(t){(0,r.A)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):c(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var s=0,d=1,l=2;function f(e){var t=e.apiName,n=e.apiVe

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1248), with CRLF line terminators
Category:	downloaded
Size (bytes):	2379
Entropy (8bit):	5.20932657458598
Encrypted:	false
SSDEEP:	48:0Br8PZ5in1MDeEq75vwCpfOdxjwOJmYigFrQDk2WgsB7Ad1:0B4um2CiwrQDzWgicv
MD5:	5AE40DD654CDC43832DFADE9E6977A60
SHA1:	D8B52D4B4F01ED0D68E13BC9FD91FFD2119AC187
SHA-256:	2A14007193BDD0522017AAB5E06453C5538822E9D685AE8ACCE733506E340A89
SHA-512:	645B78FFA4DD028AD41DBF1F8E8335DCF152657BB2B938C0C1A473CC9AA53D9F16E516492EA67D4FCD70B751980C6CBC86E62D3A8C6D0D33B48B174C45D2D8B8
Malicious:	false
Reputation:	low
URL:	https://www.lightboxcdn.com/vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/lightbox_inline.js
Preview:	window.lightboxjs \|\| function (c) { function g(b, d) { d && (d += (/\?/.test(d) ? "&" : "?") + "lv=1"); c[b] \|\| function () { var i = window, h = document, j = b, g = h.location.protocol, l = "load", k = 0; (function () { function b() { a.P(l); a.w = 1; c[j]("_load") } c[j] = function () { function m() { m.id = e; return c[j].apply(m, arguments) } var b, e = ++k; b = this && this != i ? this.id \|\| 0 : 0; (a.s = a.s \|\| []).push([e, b, arguments]); m.then = function (b, c, h) { var d = a.fh[e] = a.fh[e] \|\| [], j = a.eh[e] = a.eh[e] \|\| [], f = a.ph[e] = a.ph[e] \|\| []; b && d.push(b); c && j.push(c); h && f.push(h); return m }; return m }; var a = c[j]._ = {}; a.fh = {}; a.eh = {}; a.ph = {}; a.l = d ? d.replace(/^\/\//, (g == "https:" ? g : "http:") + "//") : d; a.p = { 0: +new Date }; a.P = function (b) { a.p[b] = new Date - a.p[0] }; a.w && b(); i.addEventListener ? i.addEventListener(l, b, !1) : i.attachEvent("on" + l, b); var q = function () { function b() { return ["<head></head><",

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1079
Entropy (8bit):	6.067314342427195
Encrypted:	false
SSDEEP:	24:C1hnBWwh82lYSKwqydTUnjVK4T3eyJ3VKYqySGYgv8:A1kvnLg0jw4BJ3c4SOk
MD5:	5AD1F80732710D0093DAD42B0C434971
SHA1:	F6BC904217FCA2F341F40682F1B1456BA862A096
SHA-256:	A86104E416A305F45FE951D7BA260D8DAB1EE766E6FBB55D1CD06D0E30EC4437
SHA-512:	8FC4193830D8B3008F9EB42A13B121827F1CCD3A484F6B0F329A0743E96235C878E8835B7AD5D1AE08932E9EAFB969F4401108E93B7F89358CAC29ED8F9EEF06
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/img/desktop/checkboxInner.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b3531b36-e33c-8448-b59b-507c3edf9c75" xmpMM:DocumentID="xmp.did:D2E86B4B63CA11E5A935E2AF8437B632" xmpMM:InstanceID="xmp.iid:D2E86B4A63CA11E5A935E2AF8437B632" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b3531b36-e33c-8448-b59b-507c3edf9c75" stRef:documentID="xmp.did:b3531b36-e33c-8448-b59b-507c3edf9c75"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......WIDATx.b...?.5.......d....J.)

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:PwtiCkQICkY:PwtinUkY
MD5:	22BCD450DF660F0348A6F26358C163CC
SHA1:	C6B692BC6E7DA7C9490FB2B241B0774D2BAB989E
SHA-256:	5952EF35417CFD4E1DF3652520F35804D4AB5A11C0CE27D427F93D3BEC928054
SHA-512:	1BF079F412F1F6FFAEC2C61D94B3D51C5B11EB36C2561665CDF70C8DB94B4E24C76F48682EBC62518536663B3BE55602D79761DA7CF8BB645B515D1159CDBDFD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnbpNNjBeXvrhIFDX6VgUcSBQ1TWkfF?alt=proto
Preview:	ChIKBw1+lYFHGgAKBw1TWkfFGgA=

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	98409
Entropy (8bit):	7.9720785610626335
Encrypted:	false
SSDEEP:	3072:zB26sARyVvJHzbd6IxsKtUAlxnQ/bJKLO:F26so0hHnpUAlxnQ/2O
MD5:	2D77A3D2EC910525834272DDBD6F0057
SHA1:	0C65A8F2B129BE9FA8B4F611E817BA955BF9DE34
SHA-256:	A7BDF682591A865265529B2E80524238687B3595BEA10D295ACCBF1FF47F19F5
SHA-512:	97DBFFA7CA1936BF51D1FDE41E3CCC8ADFE1A0AD516B9083D2E1BA2185BF7CF0EF884010373B64286DC07B9172D097EF47B985540C75A177EE161126E96018F2
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:02E72A16AF2911EFACB9B009DD857A73" xmpMM:DocumentID="xmp.did:02E72A17AF2911EFACB9B009DD857A73"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:02E72A14AF2911EFACB9B009DD857A73" stRef:documentID="xmp.did:02E72A15AF2911EFACB9B009DD857A73"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1301
Entropy (8bit):	7.568569085501947
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX3zh72ON5TiSXWT8odXmpd7RTG:5fh9YMLuERAhddN5+goN0d1q
MD5:	1F6751C82D17443F5BD0721739C53728
SHA1:	CCD649434F1AEB434464A1C24AA3D62E2A481C11
SHA-256:	9C56224CB0AA13EC3B7049C0291C24DC6BF15524B48B686D4EC8CA39CB880BBD
SHA-512:	D0A070C0166B4EB9C2C4639DF8BFCA4FC865E9DF8EEBC8F00C98729B606D620D48D0202BA108DF3ACD0ACAC3E3515E397B7E997DDD8E9CFD595D0F8F42A42D0E
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/mediaavatar/87635471-1731638253.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...y.~O.Ki..p..pk9.$.Fj&..?.....Mr{.mY..S.Vh.m..nH..}.^+;yF..A.2.u...#..a.Kn@f$zW%l..zl......t...A..~.....#..h...P.,...j..m... ....3.&.3....,.O.7.(..`.G.......#.]....Q.=+....M.t..+....o..^..Z[r......L..............v.GZ..y....YY......<j..e.......r..[-J[0..m.6.n....Z....i.mwy.m;..Q.A8...\.q$O.x..s..

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32138)
Category:	downloaded
Size (bytes):	109758
Entropy (8bit):	5.616656133438206
Encrypted:	false
SSDEEP:	1536:NZOfIApQCjPBY7crnrhtnywq9Av6LJ0hAPqrCv2Db0h:WIAB4dRv2i
MD5:	A0AB13DD412B784080323117C7BF5EC7
SHA1:	BAAAE5ADBF5B52B0A9922FE3E09DD84B965197C2
SHA-256:	8C5B0CDD858CDD0B5CEB91F974E64D67C05E3F6B099BD247A0B20949B609E61F
SHA-512:	589FB6CC991F31547AB4D31488FFABB95CD94E334C7729103989AC17C1F3D9A9211AE8593CB7FE7FE5563C1FF769B952B44AE0BE8774391BE772873A1A18DECE
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},u=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 50 x 50
Category:	dropped
Size (bytes):	63823
Entropy (8bit):	7.688070861660136
Encrypted:	false
SSDEEP:	1536:+JV+NJxAqAkcCNsd9Pd+Aj4JXv9cW4YWSf6p4be:5NbAqAkcL9V+L3cW6SCp4C
MD5:	9DF82CA753FB5004AC57D94B3A9FBD17
SHA1:	AF57CD0A76CA2CBD0916C9E986A3DF29A7C30623
SHA-256:	EDE84630CAB184E451F68C657910855AE50D952FD1D6147C6396CB294CCA5CF6
SHA-512:	46F0E043CBD8A105E765B0C40898902D873A5168D9A32A97F272383D0E11099CE65DAB7935AA7E3071A1CFFB406545F61150B9C5ECC54C43A51A70C19D8FD8C7
Malicious:	false
Reputation:	low
Preview:	GIF89a2.2.................U.......Y..=.......A..D..)........Q..I..m....f..-.....q..]..9..%.......M..i.....u..!.............1.............5.................................y...............................#.............b..............................a.............x.....\|.....J..~................4.............1..........................Q.........v...................7..f........=.....^..G.......................j...............................\|.............~..'..@..........................p../.....E..........................................................................................................................................................4..l..t...................... ..........................!..NETSCAPE2.0.....!.......,....2.2.@......H......*\(L...&.,`b....>....k...B..X...[..ih@+..Y(B\(.L..5.<.(..WBV4r%+E..Q..h..V!....D.P..B.#.j. ..).....L..)'rz.......F8.U+...p.....G^.t....U...v........!Up.Z...8..{.WN.

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	dropped
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	520
Entropy (8bit):	4.32383914546961
Encrypted:	false
SSDEEP:	6:ArM0DlTm5cvu4I11kGAyEWf2Qz9W0gMG3LyDTpQegBWyENhZ:QzD9m5cvo11kG9DG3NBHEXZ
MD5:	648E4917BC5F4C8FE5498014930E83B9
SHA1:	17AAFFE3FB76E9A91E5AFBD0D199CF6C744313F9
SHA-256:	6BCB0B26C3CF3602FEED634AEC703CE4E8433DA448BC01D60BE783D066858C5B
SHA-512:	78F700585AB0726E46D371D90C6686A6AE129826DCDCA43D6296A38D517624FDF75F4B48B77990B7C8361B83DC70EF48AD62203A8874D7849D69C37840FCF41D
Malicious:	false
Reputation:	low
Preview:	console.log("SpeedCurve RUM error 200: The SpeedCurve account linked to the `id` parameter is not active.");LUX = (function () {. return {. addData: function () {},. cmd: function () {},. doUpdate: function () {},. forceSample: function () {},. getDebug: function () {},. getSessionId: function () {},. init: function () {},. mark: function () {},. markLoadTime: function () {},. measure: function () {},. send: function () {}. };.})();.

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13970)
Category:	downloaded
Size (bytes):	14039
Entropy (8bit):	5.414592749113838
Encrypted:	false
SSDEEP:	384:qZLyAy+qDrLHTy/5yryonyxy+GAIZZp9iy+Gy+dt8ui+y+Sy+11pzuC5xYaTiMSt:aOv+qXy/guoyY+sZNl+h+ULZ+1+7pKMO
MD5:	0545CF59352A4C2B497CE6CFDAB8D0BA
SHA1:	E87998D8A78F106765662ACF640B794FB317C619
SHA-256:	6DA9CB927A06033BA0AFD8E2BD2DC4A5697184013A32FDC7F101A44C626D6066
SHA-512:	9003D46919FDD63D33CDD11152C3F83B9A975A520367BBF9959F2022071D32C98A6C9CC7AD6D6A02D9ACEF13F2098FE5AB7F7E7794CE1696BC9EA8D600E9A658
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/9707.305843b00fb0ac8dfc09.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[9707],{43625:(e,t,i)=>{i.d(t,{A:()=>a});var n=i(40459),o=i(21596),r=i(7947),s=i(13158);function a(e){const t=document.getElementById(e);if(!t)return void(0,r.MD)("Remixd container not found on a page.");const i=(0,s.vx)("remixd");if(!i\|\|!o.A.vendorMeetsCriteria(n.AG))return(0,r.MD)(`Remixd is disabled on this site${i?" due to lack of consent":""}.`),void(t.style.display="none");if(document.querySelector("script#remixd-audio-player-script"))return(0,r.MD)("Remixd tag already exists on the page."),void(t.style.display="none");const a=document.createElement("script");a.type="text/javascript",a.async=!0,a.src="https://tags.remixd.com/player/v5/index.js",a.id="remixd-audio-player-script",a.charset="utf-8",t.appendChild(a),(0,r.MD)(`Remixd tag injected in: ${e}`)}},19707:(e,t,i)=>{i.r(t),i.d(t,{default:()=>k});var n=i(81257),o=

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (316), with no line terminators
Category:	downloaded
Size (bytes):	316
Entropy (8bit):	5.145490527630992
Encrypted:	false
SSDEEP:	6:8WiIUem/32p0kHRTFHPbfCYKpY4DCVeUNEssRZ8ok63RMUX6jFGJpoeX:8DIG20OBFvbfCYKpEePssRZjKUlJieX
MD5:	FCD4C9ADF69BAD485D4710618836EF9D
SHA1:	48E331A2043B334B5E14CA88C22FC01DBB1BF3C1
SHA-256:	0A6565936097A31587A9C9D3FA331DD3F0DADF188E829B8905025BFDF950E4E6
SHA-512:	2795C187CE3A1966D6D67E6E47032234D38E867566785F54E83680450773332F0486051A456749251AB78BAFED41113694E2B007446CDDF3D7719B56EF811376
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3161&u=https%3A%2F%2Febaumsworld.com%2F&pid=g2yGZZA7KvOOE&cb=0&ws=1280x907&v=24.1105.2150&t=1450&slots=%5B%7B%22sd%22%3A%22skm-ad-medrec-1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22mrec%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-frame2%22%2C%22s%22%3A%5B%22728x90%22%2C%22320x50%22%2C%22300x50%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22frame2wide%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-flexbanner%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x250%22%2C%22970x90%22%2C%22300x250%22%2C%22320x50%22%2C%22300x50%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22flxban%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-flexrec-1%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22flxrec%22%5D%7D%7D%2C%7B%22sd%22%3A%22skm-ad-flexrec-2%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F8352%2C1019017%2Fa.ebaumsworld%2Fentertainment%22%2C%22kv%22%3A%7B%22st%22%3A%5B%22flxrec%22%5D%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22domain%22%3A%22ebaumsworld.com%22%2C%22ext%22%3A%7B%22data%22%3A%7B%22id%22%3A%5B%5D%7D%7D%7D%7D%7D&schain=1.0%2C1%21pmc.com%2C1226456%2C1%2C%2C%2C&gpp_sid=%5B-1%5D&sm=5f53b222-53df-47c6-93d2-e45275fcf89f&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
Preview:	apstag.punt({"cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-minuteMedia_rx_n-acuityads_n-MediaNet_ox-db5_cnv_n-smaato_n-undertone_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1348
Entropy (8bit):	7.568179122942663
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX31+rtu5B1l7ll/4nfPoODj0IWL6Gd:5fh9YMLuERAD+CpnWoODA6vbm
MD5:	83A15E3F539D3B1A748108523B4405E4
SHA1:	8139C97733017E82A598B495210BA817CE87570D
SHA-256:	8DCAE681DB9813BF7F4BC0AA4DBED81174C746F5AB719AC53A2B4C26593FC123
SHA-512:	48F3CF8406C7C06DA49A9C360BCBA8847DEAD48365E4583FF903A36C74DA6B5BDD415C4CA6DED70CDF590588B7C05DA431376CC5FF64D64F7734285C7471F213
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/mediaavatar/87634957-1731604399.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..9..'.X.K;.U@.$..W.u>....q.,.........M.R....C.Y.....[...;F..a.E;z.RN?.u...._...d....\|.r..1R....Y_.....W......b..ub.#..~..;>..M.)x..~...o.,.) .Y..a....k.~7.7..]....,..R2?..^6+....YG..;h..E;.D...w%..eq..V....?Z.N..E:.......)....A.9l(.u=?R....8Y.v..... .Z.~$.i.....C..<..^..M.d..9.pY.....}p;~.....Q...*..

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	255243
Entropy (8bit):	7.962794728785358
Encrypted:	false
SSDEEP:	6144:+niORMqGOylVlG/ZhFho+b3upPCoLuioGzG6B+onNJ/:EaOyn6ZhF93uJPLsGlV
MD5:	753D1E06FAEE4F5FCA468B0347EFF1DD
SHA1:	2D54E30F9CBAD765E9E98F982B8F1E0DF381351A
SHA-256:	1EE28823885E5E6DBA44BED9C25C1840EC14690BA5253402D41CCDA776C87FE9
SHA-512:	B549CBF245EEAFFCB8E76264B8BE1A6834BE7D726CDC3F3ED264C50F5947C92E7707DEF5B605244F99CDDE75686FC99AEBBB82960DBE19CC2EF124558CD97625
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/11/13/013050/87634329/comics1.jpg
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.4 (Windows)" xmpMM:InstanceID="xmp.iid:4A518330A1ED11EFBF35A8C1CE8182AB" xmpMM:DocumentID="xmp.did:4A518331A1ED11EFBF35A8C1CE8182AB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4A51832EA1ED11EFBF35A8C1CE8182AB" stRef:documentID="xmp.did:4A51832FA1ED11EFBF35A8C1CE8182AB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ..................................

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://merequartz.com/aadetect/px.gif?ch=2&rn=13334&bannnerid=9270018_advertisement_
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://www.lightboxcdn.com/z9g/t.gif?c=1734029891070&h=ebaumsworld.com&e=p&u=40857
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1345
Entropy (8bit):	7.577084358901242
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX3C/TPGKUJ0ToHU7/QriXB9J8A:5fh9YMLuERAITGKG0MHEYiXB9T
MD5:	9B5CC4FF71EFD30DD5619D262B918020
SHA1:	F1DB90DDDE6F068A8DF220FD13A33D5493CBF470
SHA-256:	E18A7C35B73BDD45978801C3169EE4FBD619FFBD66AA3F615272E41D9CCEAB4D
SHA-512:	CFBF39D7CD8E5C7831B712ED0C1969F603F9A2747D86E549EA3D793411B01E6D0DD29EC11F9C38A2F198AE48596EEE16123962F555FF119DD92C77D225031761
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/mediaavatar/87634955-1731590260.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...@.U=[U.G...........\.-..J..C+..k..4..b..=...>.2.K.{.......We.kV...tiS.*zg..NPq....s...+KS...2......j.c..M.T...`;..'.;.M........?.J.A.i...[....p{..2.cW.Y.Q.z...5..i(..H8'?.t.....r..L1..].\|.............\[}....L...:E.sX^>.{.....%\|n.N.....$mQ.6:....HO.xv....../...F......?.)5M4.L....(....?.....5.O..

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27839)
Category:	downloaded
Size (bytes):	103863
Entropy (8bit):	5.410694570012382
Encrypted:	false
SSDEEP:	1536:btsoQlKEfURm14q9mvzl4RZNYtn3h4WBjTSdKLGqF0gsjLdegQKIgGc4DIYzC:psfIzl00nqWNTtCqFhSd/zIbc4D2
MD5:	E86A1232B1711558647C3FE2CCA656FF
SHA1:	B33D763A4D929954D53D49F6D311506D4DC56DF6
SHA-256:	331FE4983E06DBA281B5CC2FCF997414D93DB61C60DCE556077DEAD1FC631E2A
SHA-512:	3201758D23B1A4FF4D23FCC45AE3846F1C0F7BFF971111B6E05AEB75B23EC9C0282F2695C25E16C5BC081983B38B4B6FA9DE162401694EC4621E61B2D920F767
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/6141.f311ade597f0537989f7.js
Preview:	/! For license information please see 6141.f311ade597f0537989f7.js.LICENSE.txt /./* Copyright 2024 Penske Media Corporation. All Rights Reserved. /.(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[6141],{83749:(t,e,r)=>{"use strict";r.d(e,{A:()=>s});const n=function(){var t=[],e=this;this.length=0;var r=function(){e.length=t.length};this.enqueue=function(e){t.push(e),r()},this.dequeue=function(e){if(e){var n=t.splice(0,e);return r(),n}}};const o=function(t){t=t\|\|{};var e=new XMLHttpRequest,r=t.headers\|\|{};return e.open(t.method,t.url,!0),Object.keys(r).forEach((function(t){e.setRequestHeader(t,r[t])})),e};const i={uuid:function(){var t,e,r="";for(t=0;t<32;t++)e=16Math.random()\|0,8!==t&&12!==t&&16!==t&&20!==t\|\|(r+="-"),r+=(12===t?4:16===t?3&e\|8:e).toString(16);return r},getXhrOptions:function(t){return{method:t.method\|\|"POST",url:t.url,headers:t.headers\|\|{"Content-type":"application/json; charset=utf-8"}}},getMeta:function(t){return{id:this.uuid(

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	211043
Entropy (8bit):	7.976107145415733
Encrypted:	false
SSDEEP:	6144:PQTgfhva5fDEZ0L/4eDZZUKg0TsG150t9ac:4EvCt/Vd00TsG1OR
MD5:	256C47B1602F97DC5AA7228CAA9A48EC
SHA1:	CD08241BE25179663E2B9A5CCB92595AFFA82EF6
SHA-256:	12DB2CD42AF0887DA1E5E434BA95142D470E145B64E047AFC445D5E425B50A01
SHA-512:	59A3A754D690A4E697E25CB57EB9E25471BFD81D38EB5A71BCB904D93320CFE209441E14713A4B10E37320C2CBC8D6B66393735334AA5C7640ABFBB4282EE0F3
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.4 (Windows)" xmpMM:InstanceID="xmp.iid:AA2D34A3A68F11EF97ED9A39420FEB53" xmpMM:DocumentID="xmp.did:AA2D34A4A68F11EF97ED9A39420FEB53"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AA2D34A1A68F11EF97ED9A39420FEB53" stRef:documentID="xmp.did:AA2D34A2A68F11EF97ED9A39420FEB53"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ..................................

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8511)
Category:	dropped
Size (bytes):	8580
Entropy (8bit):	5.401932099099946
Encrypted:	false
SSDEEP:	192:oBKQiP80kSu6+hhN3UFdVPFhDHETLoBQ0b:oE80WhbUtthDHILo
MD5:	B8FF222870A9B07B84BC4C2BDD8A957C
SHA1:	326189D36C081641E62595D308CBA102B96A5A04
SHA-256:	ECB44B8A4D4AD72A86963289FC5954220DAE6A0BCD0DED63F7C175C661CD68DB
SHA-512:	77021DDD9BE878049DC8C6DA546BC41E32B58973AD0BDDCC8992E2CBD37F8CA8E6B5613D545E93E82249730ABE985E9D43B5D86F1BD80D67822013646EE0DDE8
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[4987],{94987:(e,r,t)=>{t.r(r),t.d(r,{default:()=>y,getSovrnTagID:()=>f});t(5486);var n=t(18269),i=t(81257),o=t(66426),s=t(72327),a=t(34828),u=t(13158);const d="sovrn",p=d,c={"728x90":{"1st":{mobile:571677,desktop:345994},"2nd":{mobile:571678,desktop:346084}},"300x250":{"1st":{mobile:571674,desktop:345992},"2nd":{mobile:571676,desktop:346082}},"300x600":{"1st":{mobile:571681,desktop:345993},"2nd":{mobile:571682,desktop:346083}},"970x250":{"1st":{desktop:346087}},"320x50":{"1st":{mobile:346089},"2nd":{mobile:346090}},"160x600":{"1st":{mobile:571679,desktop:346086},"2nd":{mobile:571680,desktop:346085}}},l={"728x90":{mobile:661692,desktop:661694},"300x250":{mobile:661682,desktop:661688},"300x600":{mobile:661678,desktop:661680},"970x250":{desktop:661696},"320x50":{mobile:661690},"160x600":{mobile:661664,desktop:661676}};functi

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	dropped
Size (bytes):	1264
Entropy (8bit):	5.397822610338706
Encrypted:	false
SSDEEP:	24:U+HMeI8Fy8B+JN6MtC12sO2oNN5YzTtCHiVlj15MkktPgMWMBBs:UqMeIUIJMMtW2mukgHi/atPgMP3s
MD5:	52A2994151CB13B78F9EEFCABEEE05AF
SHA1:	B41CD385031E7D3D5C5B0CFFFAE82026DE3B5CBF
SHA-256:	5A231B8ADEAF7DCFF36D0E651059A108C47B991778D1602DBEC5104007AA476E
SHA-512:	598A49942EE56CF8D7FADEDB534E9BE8C75A238E115CFF56828120313282B5C2B630C3E3B39D253E5F2109B42C022AEDA800AF6676BFE137C0F74AB192F5D0CB
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[8603],{68603:(e,t,n)=>{n.r(t),n.d(t,{default:()=>g,getRubiconSiteZoneIDs:()=>u});n(65714);var i=n(18269),s=n(83904),a=n(64785),d=n(13158),r=n(60118);const o="rubicon",c=`${o}_display`,_=o;function u(){return{siteId:i.A.get("rubicon_site_id")\|\|"76058",zoneId:i.A.get("rubicon_zone_id")\|\|"359030"}}function p(e){return e?`${c}_postbid`:c}const g={getBids:function(e,t){return(0,d.vx)(p(t))?e.reduce(((e,t)=>{const n=u(),d={...s.A.getAllTargeting(),...t.getAllTargeting(),...(0,r.z)(t.subAdUnitPath\|\|i.A.get("vertical")).getAllTargeting(),bidtype:["pre"]},o=i.A.get("rubicon_id_mapping")\|\|null,c={bidder:_,params:{accountId:i.A.get("rubicon_account_id")\|\|"10278",inventory:d}};if(o){const{siteId:e,zoneId:n}=(0,a.A)(o,t)\|\|{};e&&n&&(c.params.siteId=e,c.params.zoneId=n)}else c.params.siteId=n.siteId.toString(),c.params.zoneId=n.zoneId.t

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	73363
Entropy (8bit):	5.268443331791804
Encrypted:	false
SSDEEP:	768:f+HZMY/XJYs7Ag3J8/CIIpLDmQB70gXK1fYHtvhAoskwQ5aP+qn9aLRtQYf096kU:255/6/CI4jQg5hAoaQVqmRtP0IHvh
MD5:	86A40B045D6F41E54104665B07995B33
SHA1:	DAE783EE0624DEA7C4C167904CED916AD9598195
SHA-256:	1719C1018052EE854E2A6AAF1B5E00DA79A69B522E2A6264418E04520A9C93FE
SHA-512:	3612C04D66008C2C326D8B7798329171C068242BA1FF738C0A827A55CDBACCBE2DC8511B73C1188288BA148AEE5843317C406EF29E44CB59A61DFC6A27993407
Malicious:	false
Reputation:	low
Preview:	!(function(n){var t={};function r(i){if(t[i])return t[i].exports;var e=t[i]={i:i,l:!1,exports:{}};return n[i].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.m=n,r.c=t,r.d=function(n,t,i){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:i})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var e in n)r.d(i,e,(function(t){return n[t]}).bind(null,e));return i},r.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s=0)})([function(n,t,r){"use strict";r.r(t),r.d(t,"_reset",(function(){return fr}));var i="o

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (731), with no line terminators
Category:	downloaded
Size (bytes):	731
Entropy (8bit):	5.394830221064571
Encrypted:	false
SSDEEP:	12:9sgXVDxVOM/ovcq/ypzVg9ZyC4o0axRWZXHnd53h0K7+8IlDoBfCfOrxOERfY6Ks:9rn/ox/WzSvyCfRWZXHb3h0KBIGfCf6F
MD5:	2D510096AC78A0FF3A40EDAE5D9C0C92
SHA1:	5D24DB2CC2EEDDDE5101E84402E535C45714A069
SHA-256:	89BD39B2A848D8EF9910066B7C39E9742CC47BD2CF700C273E026C3F60D213D2
SHA-512:	2C6C8BE6D261717125E57DD75464576DFFC562284C89D2B89DF8BE25E82C12B9337DFE953A87DEB5ECCA9273514296E6F60400DCA841F308ECB856A8EA6B871C
Malicious:	false
Reputation:	low
URL:	https://static.trueanthem.com/scripts/ta.js
Preview:	(()=>{var e={726:e=>{e.exports={URL_ROOT:"//b.trueanthem.com",PAGE_SOCIAL_SDK_ROOT:"//static.trueanthem.com/scripts"}}},t={};function n(r){var a=t[r];if(void 0!==a)return a.exports;var o=t[r]={exports:{}};return e[r](o,o.exports,n),o.exports}n.h=()=>"c3434175d2100fcf147d",(()=>{"use strict";const e=n.h().substring(0,6);var t=n(726).PAGE_SOCIAL_SDK_ROOT;!function(n,r){var a=r.getElementsByTagName("script")[0],o=r.createElement("script");o.src=t+"/ta.".concat(e,".js"),a.parentNode.insertBefore(o,a);var c=function(){window.TRUE_ANTHEM.configure()};o.addEventListener?o.addEventListener("load",c,!1):o.onreadystatechange=function(){o.readyState in{loaded:1,complete:1}&&(o.onreadystatechange=null,c())}}(window,document)})()})();

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	92672
Entropy (8bit):	7.982053771017523
Encrypted:	false
SSDEEP:	1536:qE0VnGFNeMW8OvYEI7573FBgncNfgL5XFHp742+BlHnEB4XTBgjukWGglf4Z74Eh:qE0lGFNeoY83gnFLTG9TEOdg6rGg2436
MD5:	4460FE86671F07EC4C80CBAAEF3B8FFD
SHA1:	28D191492B08FE1D5F6D68DBFAD274C29ACDC887
SHA-256:	55E8FA7F749B7959AB127C1086FDBB4946801DEA71E429462A420B6A24F6D7CB
SHA-512:	A6A1E131DD810D66CE2BCE04CB3149FEF9A4F1766A6A5B18FC0A47D104DC6B2E87DEC34009593615789EEABEFE68AEBB80440E94BB51EBDF73823ECB41844F70
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........t...."..........5...................................................................f<:J...hb..d..MGL..-J....c...QHg=.G..i.:~.b....W.7......F...F.....zt4......+.N0..'z..tE0.2$evz. D..@..X:/.(.x....Y...q.3...F...L+.(.....]w,.AMbh..qt...N..!..M...n..G.....D/...c8o]..vG.....?.....!........W...E.K.....:.E.{d%..V=T.6...+5...-5I..8 ....b.[.p.......-~~.l.N.mz...dwP.. ..@N..=(..w......p..D.<.0.f.X\|.y.....$.VI<.v."..#....f."?4H......_1m....+q.l..4Z....8Hd.H......N.Q. "1.L..z.....'...E.=..".@.Z..j)T.FQOa..8..,...<.......3..nE....C.b..1..!.[.x1.7:s....{...........U!C].)..........=(....&Qs..Yb.....q.W.^yR....I...6.,}TnIBG..+.evK.T,.5..E..f1....=.....i..B.....5.v....f.~x......$n..c.g....~........K..&..!..x-T......:.....K...~)........dXM].%\."@..m.@:o.#..#X."%.(,..4j.!..w...<....6.v..c......M.

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	218671
Entropy (8bit):	7.969361864450024
Encrypted:	false
SSDEEP:	6144:bFo9FRVz4M2oV3GGuHOTSrPtCqJeaXFiywBF:RyFRpv2E3GG8oSrPt/e5yu
MD5:	413B674CA74F319C22D7096829C2032C
SHA1:	136D9964FA0C9CF841D870A20E43CE77AA6C10BD
SHA-256:	58FBBCDCACB19633B802109950CB69AD905A23E46334BE9B4CA5E75A379641BD
SHA-512:	D74837B94A79B4F167D7C2B651F997CBE1DA42C29365585ABE1238E759B1EB1BB94F92D6199F2AB05F7D111312E7BCE045898FE759B23E52572DA268069A93DB
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/01/09/043149/87494120/cringe.jpg
Preview:	......Exif..II*.................Ducky.......U...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:2E023AEEA75711EEA0B699FA1BCA8E9B" xmpMM:DocumentID="xmp.did:2E023AEFA75711EEA0B699FA1BCA8E9B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2E023AECA75711EEA0B699FA1BCA8E9B" stRef:documentID="xmp.did:2E023AEDA75711EEA0B699FA1BCA8E9B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1248), with CRLF line terminators
Category:	dropped
Size (bytes):	2379
Entropy (8bit):	5.20932657458598
Encrypted:	false
SSDEEP:	48:0Br8PZ5in1MDeEq75vwCpfOdxjwOJmYigFrQDk2WgsB7Ad1:0B4um2CiwrQDzWgicv
MD5:	5AE40DD654CDC43832DFADE9E6977A60
SHA1:	D8B52D4B4F01ED0D68E13BC9FD91FFD2119AC187
SHA-256:	2A14007193BDD0522017AAB5E06453C5538822E9D685AE8ACCE733506E340A89
SHA-512:	645B78FFA4DD028AD41DBF1F8E8335DCF152657BB2B938C0C1A473CC9AA53D9F16E516492EA67D4FCD70B751980C6CBC86E62D3A8C6D0D33B48B174C45D2D8B8
Malicious:	false
Reputation:	low
Preview:	window.lightboxjs \|\| function (c) { function g(b, d) { d && (d += (/\?/.test(d) ? "&" : "?") + "lv=1"); c[b] \|\| function () { var i = window, h = document, j = b, g = h.location.protocol, l = "load", k = 0; (function () { function b() { a.P(l); a.w = 1; c[j]("_load") } c[j] = function () { function m() { m.id = e; return c[j].apply(m, arguments) } var b, e = ++k; b = this && this != i ? this.id \|\| 0 : 0; (a.s = a.s \|\| []).push([e, b, arguments]); m.then = function (b, c, h) { var d = a.fh[e] = a.fh[e] \|\| [], j = a.eh[e] = a.eh[e] \|\| [], f = a.ph[e] = a.ph[e] \|\| []; b && d.push(b); c && j.push(c); h && f.push(h); return m }; return m }; var a = c[j]._ = {}; a.fh = {}; a.eh = {}; a.ph = {}; a.l = d ? d.replace(/^\/\//, (g == "https:" ? g : "http:") + "//") : d; a.p = { 0: +new Date }; a.P = function (b) { a.p[b] = new Date - a.p[0] }; a.w && b(); i.addEventListener ? i.addEventListener(l, b, !1) : i.attachEvent("on" + l, b); var q = function () { function b() { return ["<head></head><",

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12685)
Category:	downloaded
Size (bytes):	12754
Entropy (8bit):	5.422846372305548
Encrypted:	false
SSDEEP:	384:9KICR2F9XBKM/d0NUhWKEwBosb30p17dtOj9H6OqyHgB:9KIU23XBX/dY5KEwBom0p1BtvOqyAB
MD5:	936EE703CEBDDE5D8FE3859C416FC3DE
SHA1:	667D9D19E504791A71C658EA51B87288707D116F
SHA-256:	7BD53F86CB031638F6599FA3ABB22C1048FDFD25F8FD7258491CCA6C8C00F0DF
SHA-512:	32E83108AC72FC130DA8677CBE32319FBC09272797ED45811FA4E2579288CF8BFA17C67470C8C4977365D135E67453ACEA9848AE65DB4E1301D3B710E83E0576
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/4953.c3bb67ce2fa0dc1d4372.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[4953],{11687:(e,i,t)=>{t.d(i,{A:()=>b});t(75413),t(65714);var n=t(59080),d=t(7947),r=t(5633),o=t(18269),a=t(81257),s=t(40992),p=t(18742),l=t(90609),u=t(13158);const c=`${n.Dn}_display`,_=n.Dn,m=(e,i)=>{var t,d;const r={pos:{default:[],override:`${n.Dn}_pos_values`},st:{default:["mrec","medrecnativemini","medrecnativecontent","mobileincontent","mobileincontentnativecontent","recipe","flxrec","wideincontent","widestincontent","ban","frame2","frame1","flxban","970x250","widebanner","300x50","320x50","bottom","tban","300x600","sky","frame2wide","frame1wide"],override:`${n.Dn}_slot_types`}},a=e.getTargeting(i);if(null==a\|\|!a.length)return null;const s=o.A.get(null===(t=r[i])\|\|void 0===t?void 0:t.override)\|\|(null===(d=r[i])\|\|void 0===d?void 0:d.default);return null!=s&&s.length?s.find((e=>a.includes(e))):a[0]},$=e=>e.replace(/[

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11813)
Category:	downloaded
Size (bytes):	13128
Entropy (8bit):	5.400888743956193
Encrypted:	false
SSDEEP:	192:UhUbnLN5tmjHCR/UeHjXWb2pTOnstdo5CpcNNOWqRObyAzJ3ND:tbnLIjURHjXo2BtcCvOby0J3ND
MD5:	6A86B37509A032B2DF5809CAB9D2F2A8
SHA1:	A29480A2938D2D30F5BC74DE500EEF8207CCE915
SHA-256:	9B78A505D7A377B916E4EE5E963A2DED1572EC61585DBA7BA559261E03E26967
SHA-512:	8AB0C4B76A2928DF8F5B7BC4A76E6AFE65174814E97BB2EF939DF1A169B1FE205E9A8BC3D1FA6BA6159BAC4341757E0B36D3DD30E806DD5503B24FABD8A81A34
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-1657353.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1657353,"rec_value":7.999999995789153e-9,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","csq_theme","error_reporting","feedback.embeddable_widget","feedback.

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3253
Entropy (8bit):	4.923646607248813
Encrypted:	false
SSDEEP:	96:mw8vhMb/rBsy3ctkQA4pNYyNMhNcYNsPMXo33N8Uic:mwmhMb/rBsy3ce/4Fsv2got/J
MD5:	132E15360104E13587D90041C4FE7879
SHA1:	F8E7C522B052150093960C000CC649E9C6A2A638
SHA-256:	266FE1C4A8145138363C0A0736792C0B74642995D433D4F78DB7FF96BBD93ED1
SHA-512:	14A098194F9761900C6A800CDC3FB5C49A833B21C13ECFD954245BE46B1F1C168BA524CDF32B5D1A2A4CFEF24342184E1C93614015B0313010F7AE73798F149B
Malicious:	false
Reputation:	low
URL:	https://async01.admantx.com/admantx/service?request=%7B%22key%22%3A%22dcde31e32d21f5432ab192ee50f9e0a8ef294bab4778ada95dfabeb949b2b9ce%22%2C%22filter%22%3A%5B%22default%22%5D%2C%22method%22%3A%22descriptor%22%2C%22mode%22%3A%22async%22%2C%22type%22%3A%22url%22%2C%22body%22%3A%22https%253A%252F%252Febaumsworld.com%252F%22%7D
Preview:	{"fetchingDelay":3900,"converter":"boilerpipe_article","version":"3.3.19","nwords":90,"url":"https:\/\/ebaumsworld.com\/","valid":"OK","delay":3,"entities":[{"score":5,"origin":"NORMAL","name":"funny","type":"MAINLEMMAS"},{"score":3,"origin":"NORMAL","name":"world","type":"MAINLEMMAS"},{"score":3,"origin":"NORMAL","name":"video","type":"MAINLEMMAS"},{"score":3,"origin":"NORMAL","name":"picture","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"YouTube","type":"ORGANIZATIONS"},{"score":1,"origin":"NORMAL","name":"Viumbe, LLC","type":"ORGANIZATIONS"},{"score":1,"origin":"NORMAL","name":"user","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"security camera","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"phone","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"meme","type":"MAINLEMMAS"},{"score":1,"origin":"NORMAL","name":"internet","type":"MAINLEMMAS"}],"admants":[{"score":100,"targeting":"Avoidance","unique_id":10955,"origin":"ADMANTS","name":"S_10955

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48468), with no line terminators
Category:	dropped
Size (bytes):	48468
Entropy (8bit):	5.256608917438722
Encrypted:	false
SSDEEP:	768:TzbELiSyPX+zBWhJ8nuX+1S36jKF46ieH9QEjsuS0aszXMaSdtGz7cae:LQBbu4G4U3jsuS0aQotk41
MD5:	9A337D104A0A5BB31DB2AFE061F720CD
SHA1:	70F05D0AF8BD8EF177D18C61AC693DDB542D1843
SHA-256:	3FB37649DB4D634DDF23EFE4F3054DFF925887BABD612A22F12DC6D28336D8CC
SHA-512:	9D0D736024F37DDE569BB7545A6C7B1B7C896779C4E6F18732FE17F8190D06E57D165AC7D37AB692B3100EE1D8F67166FA268FFED8E007C484F68C065FA9761B
Malicious:	false
Reputation:	low
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var o=n[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=0)}([function(t,e,n){t.exports=n(1)},function(module,exports){!function(t){function e(i){if(n[i])return n[i].exports;var o=n[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=8)}([function(t,e,n){"use

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	266
Entropy (8bit):	4.745771283843039
Encrypted:	false
SSDEEP:	6:YCAFKs7X+xaNmb+Bkdxtke/gAVj1dEL1nJrRE3a0nOH1:YCjIOxaNm6B8f5pj1cLFEqBH1
MD5:	65DD10954D0252006E59C8006B1547E2
SHA1:	56FE5A69599C9337704573991FFCD0AE85EA45F4
SHA-256:	46DCCDCA482CF30DF3CAFC2DC11D672FBFA9EEB7E49677B6E363C8989C65F05E
SHA-512:	9268CF9F2FC330C08164A2A1CC53C59CCDC68BD76F5CBC24862E36DFBD1480ED9C54BBB64CBD935B1D1AEB2280F6D58CFB428D411A86AEFFC3C6F42515B5F46F
Malicious:	false
Reputation:	low
Preview:	{"geo_info":{"continent":"North America","country":"United States","city":"New York","province":"New York","postal_code":"10118"},"isp_info":{"isp":"CenturyLink","organization":"CenturyLink","autonomous_system_number":3356,"autonomous_system_organization":"LEVEL3"}}

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8628)
Category:	dropped
Size (bytes):	8697
Entropy (8bit):	5.440897914679565
Encrypted:	false
SSDEEP:	192:XCt7mjji1Wb+rP91051MkYzajVzkvIhXNtH4rjpbIz:XCto2oSL8ozajVzvFNz
MD5:	FB4B4D793CBE9F40989B81F2996B7645
SHA1:	ED6696E3A8571CD382980171BD620DFA132C4CF2
SHA-256:	19BBF76B2E0011400C770F5261E64FA6712F75208361D15DDCC84F6ADDEF2B63
SHA-512:	93942ACF23426289D26AFBDA32C94DC0974361187A2D270C4B7EEC839E0D588507D53ECFAD0ACA4AE8D90CA71179EB7F4467E21911A21669E279B4D35CF4F5D6
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[3298],{33298:(e,n,t)=>{var i=t(64467),r=t(82284),o=t(80296),a=t(28880),c=t(62774),d=t(2766),p=t(70433),s=t(70041),u=t(26511),l=t(81936),m=t(56424);function g(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);n&&(i=i.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,i)}return t}function f(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?g(Object(t),!0).forEach((function(n){(0,i.A)(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):g(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}var v="gumgum",b=(0,u.vM)({bidderCode:v}),y={t:0,rq:8,pbv:"8.46.0"},h=[c.D4,c.G_],I=["dac.co.jp","audigen

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1135), with no line terminators
Category:	downloaded
Size (bytes):	1135
Entropy (8bit):	5.579402169632557
Encrypted:	false
SSDEEP:	24:hL9U6wzBzgplgFwJI1XAjsavG8g80hHHiIqi7gNWEMQiPNa+Itnb:jUXxgpPJOXAjsavLg80DuNO9o+i
MD5:	9F0771ACD787B3B1F9B828EB3DB2B181
SHA1:	6741A4C7C85B2940DA33CB172667F55607F1E84C
SHA-256:	C058015FAC87A278D8427579284176A381352252055A2F39F02D514AD0E18DE7
SHA-512:	B92448B687324973354975F9CA4E6BB1D363FB689E0AF4EBFB9850A0BE61EFF1B00CF204077A763B077B51EA12A9803DEEA8322C858A19807598D2058D444A90
Malicious:	false
Reputation:	low
URL:	https://cdn.indexww.com/privacy-sandbox/topics-api.html?debug=true?bidder=ix
Preview:	<!DOCTYPE html> <html lang="en"> <head> <title>Index Exchange Topics</title> <meta charset="utf-8"> <meta http-equiv="origin-trial" content="Ar42nsbjCX0+hmIKQktsqzt3YtmRXSj4yuUJVYGHDFm/mwAUP7P3DXcLF6eG4p81mp5GC91/sytYsiwG9i4dFAMAAABteyJvcmlnaW4iOiJodHRwczovL2luZGV4d3cuY29tOjQ0MyIsImZlYXR1cmUiOiJQcml2YWN5U2FuZGJveEFkc0FQSXMiLCJleHBpcnkiOjE2OTUxNjc5OTksImlzU3ViZG9tYWluIjp0cnVlfQ=="> <script>const debugFlag="true"===new URLSearchParams(window.location.search).get("debug");function log(...o){debugFlag&&console.log(...o)}async function getTopics(){try{if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")){const o=await document.browsingTopics();return log("Called iframe:",window.location.hostname,"Hostname:",window.location.hostname,"Topics:",o,"Number of topics:",o.length),Promise.resolve(o)}log("document.browsingTopics() not supported")}catch(o){log("Topics API Error:",o)}}!async function(){const o=await getTopics(),n=JSON.stringify({segment:{domain:windo

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:OFB:OFB
MD5:	9E076F5885F5CC16A4B5AEB8DE4ADFF5
SHA1:	475C848673A3F79FA778F01C2BD5A721D4C41707
SHA-256:	E3EBAA16DD9D9B9FC107C42183FB6CF9D22927E1AF03DBBDFA0CCC38E4E4AC31
SHA-512:	4D384838C78C74F56DE20DE3FE125B9FE4D40B7C9FB5D767B647F05AEDE6BF63431F4F08AC464E188E77B227BECC3AB4BA86272F30B53D91B15003D814E06D2E
Malicious:	false
Reputation:	low
Preview:	Not found

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17488)
Category:	downloaded
Size (bytes):	17555
Entropy (8bit):	5.229032755765398
Encrypted:	false
SSDEEP:	384:olYxko7mapOc5yzfwAh1P/+u76jGEC21v4HQfvqFtFkzd:olu7ma95+feXjGEC6v30kzd
MD5:	F484B4880B6E7F8F893DD1FA1549FAD7
SHA1:	2E3E9AE56B36A0CC7DE494EEFE81D87EB531DB4B
SHA-256:	0495037E10E24567A4819398AF4DC0F1454F2541B58DE3D2116C75998A02AC77
SHA-512:	9A11302C541E0511BC5D91A00FBB7C8DE727D0D282710F2DCF8364F06E47FC54D1CB342078FCC06763365E99FCFDFBBA85D343A250EE45DBDF6B81A29A23EF4B
Malicious:	false
Reputation:	low
URL:	https://api.b2c.com/api/init-398c0g22ym0ukn3detw.js
Preview:	Math.random()*10<1&&(function(a,d,p){if(!p){__$PP=p=function(k,v){p.e(k,v)};p.w=[];p.q=[];p.e=function(k,v){p.q.push([k,v,0])};__$PP.e=function(){var e,n,t=0;function i(){return e\|\|((e=document.createElement("div")).style.position="absolute",e.style.width=e.style.height=e.style.border=e.style.padding=e.style.margin=0,e.style.overflow="hidden",document.body.appendChild(e)),n&&clearTimeout(n),t++,e}function r(){--t<=0&&(n=setTimeout(function(){e&&(document.body.removeChild(e),e=null)}))}function o(e){return"Error: "+e.name+": "+e.message}function a(e){try{return e()}catch(e){return o(e)}}function c(){if(!location.ancestorOrigins)return"n/a";for(var e=0,n=[];e<location.ancestorOrigins.length;e++)n[e]=location.ancestorOrigins[e];return n.join(" ")}__$PP.h=function(e){var n,t,o=2166136261;for(n=0,t=e.length;n<t;n++)o^=e.charCodeAt(n),o+=(o<<1)+(o<<4)+(o<<7)+(o<<8)+(o<<24);return("0000000"+(o>>>0).toString(16)).substr(-8)};var f=__$PP.h,u=window.requestAnimationFrame\|\|window.mozRequestAnimat

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62151)
Category:	downloaded
Size (bytes):	62220
Entropy (8bit):	5.3774350263096045
Encrypted:	false
SSDEEP:	768:WZygoANvYrrOunuCNzRrpuG2/p0yMuKr7aKLBDqCF+FEKxM4JpRX:SgXOunhzVp3263e60CAF7pRX
MD5:	568ABCECF93CC8E7E152F404AF14593E
SHA1:	BC54697E82827E9985C8321DC71D8578E8C0A1A7
SHA-256:	05E3F79FDCC0A930CA774DFCDC4793D5C56F9345562366472641DA3619855AC5
SHA-512:	E4C746E39BBDFCC96AE6B1CC1FB059498DFAFA7D69E66E5C5BCE6FFAA762FA855272DA454CB2CC61549C64CA9403218B9C13DC78A12985369AE767EC9D62343E
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/6860.72064c7fb60700a504ef.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. /."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[6860],{18055:(e,t,n)=>{n.d(t,{D:()=>d});var r=n(45458),i=n(46813),o=n(70433),a=["user.keywords"].concat(i.Dy.flatMap((function(e){return["keywords","content.keywords"].map((function(t){return"".concat(e,".").concat(t)}))})));function s(){for(var e=new Set,t=arguments.length,n=new Array(t),r=0;r<t;r++)n[r]=arguments[r];return n.filter((function(e){return e})).flatMap((function(e){return Array.isArray(e)?e:e.split(",")})).map((function(e){return e.replace(/^\s/,"").replace(/\s*$/,"")})).filter((function(e){return e})).forEach((function(t){return e.add(t)})),Array.from(e.keys())}function d(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];return s.apply(void 0,(0,r.A)(a.map((function(t){return(0,o.A)(e,t)}))).concat(n))}},67803:(e,t,n)=>{n.d(t,{T:()=>y,A:()=>g});var r=n(80296),i=new WeakMa

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H4odiCR:YogCR
MD5:	2032CF7ED43ACB4F0C25A3718F801C2E
SHA1:	5725FA3191874049D5A10E3979C04B4AE5E78FCE
SHA-256:	B3CCF5C3327410C25240E59228CFA4C1DCA503E56ABD34414CB6ADA8CE777D0F
SHA-512:	30A762E2664E189CB9DF6AAF92D97DD4C95499B710B0E46BCD356F564F9E60EAF04F7774294CDA013FC1E476BD247C8FD945C099814C47DB78F88B82FED7088F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmYgq-fQ6suuRIFDZMyrT0=?alt=proto
Preview:	CgkKBw2TMq09GgA=

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	17
Entropy (8bit):	3.4992275471326932
Encrypted:	false
SSDEEP:	3:IvOKPUe:IvNUe
MD5:	53FAB767ECBD3BF07990B10246BEFBD4
SHA1:	49044085BB137D175D261B5FB9617C6F0F302C49
SHA-256:	BDEED1E1C0751610C8F3DC2A5C78C93F841C366B36A7F7A54F5E6752C2656C05
SHA-512:	B77C74696CD64C96E177CC32890BA8B666E13578C038BE4E4E5D4AB0438CB8E2B7B3539AD4089F9AD987C1BD53926B279EF7ADD30C690DC2592C5C4239465559
Malicious:	false
Reputation:	low
Preview:	"ad placeholder";

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73375
Entropy (8bit):	5.267788417034109
Encrypted:	false
SSDEEP:	768:feHZMY/XJYs7Ag3J8/CIIpLDmQB70gXK1fYHtvhAoskwQ5aP+qn9aLRJQqf096kU:255/6/CI4jQg5hAoaQVqmRJz0IHvh
MD5:	5C5C79BBCDDD3AB61DC00116A2BC4667
SHA1:	6CF5E25DAF84C1DE8A960759BB993C8DC9BCB6FA
SHA-256:	2D9A44D959A4EEDB16D598E4B6CF1E90414BF5A24F1EEF8A845C002236E63A7B
SHA-512:	9926ADDD39D7A056F46B9CCF3EE3BD2D85F6957E3651F48FFF655E27B55351D7603BEA612B590D81DE62652B506EB0EB8F00655EDE537579B09F829D5EFA2F0B
Malicious:	false
Reputation:	low
URL:	https://memorizematch.com/v2kisuUII5WA-HR5P71C6bUydvMwfMPJVUj8XMXHj3S_hHFVlFTAc9kA
Preview:	!(function(n){var t={};function r(i){if(t[i])return t[i].exports;var e=t[i]={i:i,l:!1,exports:{}};return n[i].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.m=n,r.c=t,r.d=function(n,t,i){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:i})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var e in n)r.d(i,e,(function(t){return n[t]}).bind(null,e));return i},r.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s=0)})([function(n,t,r){"use strict";r.r(t),r.d(t,"_reset",(function(){return fr}));var i="o

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21838)
Category:	dropped
Size (bytes):	21907
Entropy (8bit):	5.453164844376592
Encrypted:	false
SSDEEP:	384:T5KB3y5bdbQhocjPRqFK0or8c+mKyKQnMbEBtF+fY/UAj0ft:d44GhocbRMG9lnKEBB0F
MD5:	A101845338F961709A428B9A157E39BC
SHA1:	7DDA1CDBDC17DFF356CA36D00A2F6EF9A5CFF5A8
SHA-256:	77E5D364ADB79BEA0334DDCBAB488690C9097B381A13FA070260516F3C433A81
SHA-512:	655EC84D6A430199EC909EB2558BE80770B4BC6C68B44656617AA6AA146214C84E8CB0747F956FC580097743627CE3631D02F977BDEBE6D4C57B1584D41741B6
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[2253],{82253:(e,r,a)=>{var n=a(82284),t=a(45458),i=a(28880),o=a(2766),s=a(70433),d=a(35548),p=a(70041),c=a(56424),u=a(62774),l=a(81936),m=a(30416),f=a(26511),v=a(88848),_=a(67324),g=a(63456),b={1:"IAB20-3",2:"IAB18-5",3:"IAB10-1",4:"IAB2-3",5:"IAB19-8",6:"IAB22-1",7:"IAB18-1",8:"IAB12-3",9:"IAB5-1",10:"IAB4-5",11:"IAB13-4",12:"IAB8-7",13:"IAB9-7",14:"IAB7-1",15:"IAB20-18",16:"IAB10-7",17:"IAB19-18",18:"IAB13-6",19:"IAB18-4",20:"IAB1-5",21:"IAB1-6",22:"IAB3-4",23:"IAB19-13",24:"IAB22-2",25:"IAB3-9",26:"IAB17-18",27:"IAB19-6",28:"IAB1-7",29:"IAB9-30",30:"IAB20-7",31:"IAB20-17",32:"IAB7-32",33:"IAB16-5",34:"IAB19-34",35:"IAB11-5",36:"IAB12-3",37:"IAB11-4",38:"IAB12-3",39:"IAB9-30",41:"IAB7-44",42:"IAB7-1",43:"IAB7-30",50:"IAB19-30",51:"IAB17-12",52:"IAB19-30",53:"IAB3-1",55:"IAB13-2",56:"IAB19-30",57:"IAB19-30",58:"IAB7-39",

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11983)
Category:	downloaded
Size (bytes):	12052
Entropy (8bit):	5.287461251660678
Encrypted:	false
SSDEEP:	192:KHm4GLXR4JHn2/qTA3TgRTouJvLH6WLen8y1mO+mK3EObX1rAsNOQlcsiMZN7qMx:KHmJSJW3DAvLaWLe8y1RlOZAsNOQlcsV
MD5:	06DCFCAED0332148FC971835E2721716
SHA1:	9D304253B2BFB5F735FC80E53385667432416BC8
SHA-256:	A8CBF52118486A27E66609A533DEE6DCAF93366013E58D7B886603CA2CA6490F
SHA-512:	E2AF4E6FFB8E9F2F4EE8518FCBF951996C07364E088C405568EC57FFEEE4FD0F01BF7984002AC5D292EC672F4004E7A781EDE95A2CE6A5C0164AE22FB1A17A66
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/1257.996dda76dbecc94991f0.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[1257],{18269:(t,e,n)=>{n.d(e,{A:()=>b});var o=n(47516),r=n(47069),c=n(91938);const i=window,u=new Map,a=new Map;let s=[],l=!1;function f(t,...e){i.console.error("%cP%cM%cC Atlas MG","padding: 2px 1px 2px 10px; border-radius: 7px 0 0 7px; background-color: black; color: white;","padding: 2px 1px; background-color: black; color: #ed1c24;","padding: 2px 10px 2px 1px; border-radius: 0 7px 7px 0; background-color: black; color: white;",t,...e)}function d(t,e){l\|\|f(`Attempted to ${t} config for ${e} before config was hydrated.`)}function p(t){if("string"!=typeof t\|\|!t)throw new Error("Invalid configuration key provided.");if(t.startsWith("_"))throw new Error("Attempted to access a private configuration.");return t}function h(t){return d("get",t),a.get(t)}function m(t,e){d("set",t);const n=u.get(t);n&&(e=n(e)),a.set(t,e),t.start

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1348
Entropy (8bit):	7.568179122942663
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX31+rtu5B1l7ll/4nfPoODj0IWL6Gd:5fh9YMLuERAD+CpnWoODA6vbm
MD5:	83A15E3F539D3B1A748108523B4405E4
SHA1:	8139C97733017E82A598B495210BA817CE87570D
SHA-256:	8DCAE681DB9813BF7F4BC0AA4DBED81174C746F5AB719AC53A2B4C26593FC123
SHA-512:	48F3CF8406C7C06DA49A9C360BCBA8847DEAD48365E4583FF903A36C74DA6B5BDD415C4CA6DED70CDF590588B7C05DA431376CC5FF64D64F7734285C7471F213
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/mediaavatar/87634625-1731533401.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..9..'.X.K;.U@.$..W.u>....q.,.........M.R....C.Y.....[...;F..a.E;z.RN?.u...._...d....\|.r..1R....Y_.....W......b..ub.#..~..;>..M.)x..~...o.,.) .Y..a....k.~7.7..]....,..R2?..^6+....YG..;h..E;.D...w%..eq..V....?Z.N..E:.......)....A.9l(.u=?R....8Y.v..... .Z.~$.i.....C..<..^..M.d..9.pY.....}p;~.....Q...*..

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	82872
Entropy (8bit):	7.987566804845979
Encrypted:	false
SSDEEP:	1536:qELOEUInhFcYR8J16nG0DoKR3NQM70ygGbXJ7dW64jyuqD9z1z3hISv+OjwHZ:qEDhFcV4j7i+jgG7JR54mRB9InZ
MD5:	13DE9EE6B6D82049D574F43FEEB94D6A
SHA1:	ED04040389FC7F42D6B087740C7A0B046F6A541A
SHA-256:	05079CA4700F7830AB58A861F1440AA5F25A464A85C4AA2F7D42CBE44DCE2691
SHA-512:	19F77A4D8628F8836FC5282BDA59B856116C5AD8524813687C7A2FC9E411C3B8A62BFCE29C55D919017B6CA97247B3A54498AC43A5773938F51DA7F35808B46D
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........t...."..........4..................................................................K...-"..d..%.e....X.K.Yj..h...'+.N{.eB .+.`,..[.{C}dh..E.gT..uY.>....., /E..q-..B......e..h}?.Pm.r....Pz....i@.Ro5..e..!.P.4.I.y...........Y..<oXL0..J.3...N...j...mWJ.o....m..n.../.r.D...?5.......q.7.z.u....:.06.9....>....Z.../<...._9t.4[..T...jdg.!!...M..I./.@)b...Pk.Pn.(.....y..e.0..;y.f.... ......i.yD..P...T\|.....U.&.5.......r9.A#..CX....#.,s.........%D....)...?.z.;=....5...^..m.].o..+n.....29...y..#,v.5...;...........J..._w.w..9.7..x..r..3...f.....U..F.cgCj._.-O.......$F...g..p.l..?H.OD...L.zY..>...,.s.md....p>..=....>...q-.5.S..mh.......C...'..p.....4...D.......uZ...lj.,.......\|.,.ER.%L..b....N(I5 ...K..;.I.P...(..z..j. ....!E...3.h~u....C..4....c......}....X....<."...h.;)0.......e(...QRC\..0...9...M

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.5251270918749356
Encrypted:	false
SSDEEP:	3:n9m6QiFL4:nVm
MD5:	B205296F7C49C67BAF5B78E8163061A7
SHA1:	828DED5C881601F44CE02CCB9E8B98D214B5E9AA
SHA-256:	281A6CECFF9B473286243BDC58329C1D8141B979E8985EA968D7D975F3A50E05
SHA-512:	ABBB243E84448F153F337C61919C36F68F2503F14F7301A903ED76B5A321C60C09C5E5D1174E77EBE3199A1F7A900A0668555B729F008547DD26A00937FF7B5B
Malicious:	false
Reputation:	low
Preview:	partner parameter must not be null

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:OFB:OFB
MD5:	9E076F5885F5CC16A4B5AEB8DE4ADFF5
SHA1:	475C848673A3F79FA778F01C2BD5A721D4C41707
SHA-256:	E3EBAA16DD9D9B9FC107C42183FB6CF9D22927E1AF03DBBDFA0CCC38E4E4AC31
SHA-512:	4D384838C78C74F56DE20DE3FE125B9FE4D40B7C9FB5D767B647F05AEDE6BF63431F4F08AC464E188E77B227BECC3AB4BA86272F30B53D91B15003D814E06D2E
Malicious:	false
Reputation:	low
Preview:	Not found

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	107899
Entropy (8bit):	7.9869322071792315
Encrypted:	false
SSDEEP:	3072:qEJw8ZNdLtUMXCOjEZBGYr+UjCuxThl9L3THWBF:qEJw+XGMXCMUBGsjCuthl97iBF
MD5:	D84B74F97B6448A9A317DCB4B54988E6
SHA1:	FA4B01536DD2543DB3EA78AD9448CBD6D3B01C2A
SHA-256:	E3967595CC273BE28E96011CD622A603C660B7544EC1E43B7B19AA7CAB52A3E2
SHA-512:	7102F96F5E1C2CE42C264FD1BBB5BDE1F114E3CBFFB6ACF49F3F5FFCFDA3625FE9DEE82F748A384F5833704DB43A12BE5DB7D5700E8A256300727FA74ADB4E88
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........t...."..........4.................................................................L.j.`"..... ..Rd...@.."$.(...\|.3".I)(..!d.H....T.r.C<=1.ax..RZ........ ...KJ... ..@..........hP.%P24.@...h....,.....@..fD...[(...0..n.&...;;Tl.g.v.G..Hu..b5.\|...C.BY8;:..h....H.v.WmA.g5....m..6...>mm.t..mS@..a,,OT.F@.. .i1.F,H2.!..GZ......0AI.@.9....#...I.......-&.Zl5.Q.f..p.l..Z3...c...Iy.E6...+c..D....H.H0....... ..$..C..`4...a.a....3znc.........A.....,..w....z\.0..\.3L.r......H5D)..y..^..=.0.W^\|-...d.C..hj....N.k`U.......s...}Y.g0J5.....BV.$.....P. ........3......>u-..f<...a...EM4..........;...Q.......9..:P.....mRX...!.s.h..9.../t..U......t.e.t..H...........v<....0q.KK.-.....N.....]V..Z2....$..}^d=n^XC..b....,..DH?My..R.r.^...........Ad..^...O..V.x.CONy......G&..Av..N...N...Q..e.86's...4...(tOc.V.Q..._Z>.

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	5.228990963209054
Encrypted:	false
SSDEEP:	3:U3yGqItEsRGD0twQyGnyaDgeDQggp6ngQjMHZehfGpRf:U3yGqIt7DtwjGnyac8gUMo+pl
MD5:	1896AA5BB9A79F92C8800C8E6D27DFD3
SHA1:	FF9FD794CBDBA34D4F802D7F990E495C9DB174CC
SHA-256:	D4500D459D73502983DF85699B87D4F65EC8E026447066DA7A492360A28CC99F
SHA-512:	C2840AED9A4C2B6FD04B329A2ADE304275B9177F4704F57E821D42E89CD7EF171071D2B61BF4EDD1603CDF5952C17BFFB143F51D00880085D6DF520E65D54E11
Malicious:	false
Reputation:	low
URL:	https://rules.quantcount.com/rules-p-byLmeZUvD2jyq.js
Preview:	/. Quantcast measurement tag. Copyright (c) 2008-2022, Quantcast Corp../.'use strict';(function(a,b,c){__qc("rules",[a])})("p-byLmeZUvD2jyq",window,document);

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	285488
Entropy (8bit):	5.584360495218439
Encrypted:	false
SSDEEP:	6144:9O+GUiz8zQWiZD91p9OIQyDy4HEPD4xgeP:k9zCQjDp64
MD5:	129A26FFCC4151298E738F9D29AB57F2
SHA1:	060ACC239401CBD4B89AA1FC659989E5A9121D1E
SHA-256:	B2ED64C3C3F2E2E523A733CDB95970FE07EBC258AC065588EA9FF1EC5B5BD9CD
SHA-512:	71F38D5A0FD17384E8251BAFA7330CF65FAE7711DEAE5615C08DE866047A38712242B48182BE896CB942FA67FA52B3ED1A296E72C59F9E2CC08DD6C63EBD8CC0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-CGRZHQ8KQD&l=pmc_atlasmg_ga4_datalayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":17,"tag_id":10},{"function":"__ogt_auto_events","priority":17,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":12},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":13},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CS

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8511)
Category:	downloaded
Size (bytes):	8580
Entropy (8bit):	5.401932099099946
Encrypted:	false
SSDEEP:	192:oBKQiP80kSu6+hhN3UFdVPFhDHETLoBQ0b:oE80WhbUtthDHILo
MD5:	B8FF222870A9B07B84BC4C2BDD8A957C
SHA1:	326189D36C081641E62595D308CBA102B96A5A04
SHA-256:	ECB44B8A4D4AD72A86963289FC5954220DAE6A0BCD0DED63F7C175C661CD68DB
SHA-512:	77021DDD9BE878049DC8C6DA546BC41E32B58973AD0BDDCC8992E2CBD37F8CA8E6B5613D545E93E82249730ABE985E9D43B5D86F1BD80D67822013646EE0DDE8
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/4987.d7441382d9932b79f0d8.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[4987],{94987:(e,r,t)=>{t.r(r),t.d(r,{default:()=>y,getSovrnTagID:()=>f});t(5486);var n=t(18269),i=t(81257),o=t(66426),s=t(72327),a=t(34828),u=t(13158);const d="sovrn",p=d,c={"728x90":{"1st":{mobile:571677,desktop:345994},"2nd":{mobile:571678,desktop:346084}},"300x250":{"1st":{mobile:571674,desktop:345992},"2nd":{mobile:571676,desktop:346082}},"300x600":{"1st":{mobile:571681,desktop:345993},"2nd":{mobile:571682,desktop:346083}},"970x250":{"1st":{desktop:346087}},"320x50":{"1st":{mobile:346089},"2nd":{mobile:346090}},"160x600":{"1st":{mobile:571679,desktop:346086},"2nd":{mobile:571680,desktop:346085}}},l={"728x90":{mobile:661692,desktop:661694},"300x250":{mobile:661682,desktop:661688},"300x600":{mobile:661678,desktop:661680},"970x250":{desktop:661696},"320x50":{mobile:661690},"160x600":{mobile:661664,desktop:661676}};functi

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	707
Entropy (8bit):	4.8494864807943365
Encrypted:	false
SSDEEP:	12:YUjvsvWgpwgV03iV0sV0KTV0PFAV0G20AJ4opCiz:Y6v4WewgVyiV/VnVw6V7omfC
MD5:	27D9188BDCA50F4820F5DE4FD6BA1434
SHA1:	815BE1578705888A12AAEDFDE323694459982305
SHA-256:	80099E6E4EC7B3A0D72AE5058B225201CA2762D74270E8094E078B3D8A33DDBD
SHA-512:	971227062B121EFFA00345A207281C01C6589E6F866BF25B10BA6A7ECF7723451BD48F67BA9281ABF250C68A40DEB48FC72F077CB16DD5B8DCFAAA8E574B499F
Malicious:	false
Reputation:	low
URL:	"https://pixel.adsafeprotected.com/services/pub?anId=930203&slot=%7Bid:skm-ad-medrec-1,ss:%5B300.250%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-frame2,ss:%5B728.90,468.60,320.50,300.50,970.90,970.66%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-flexbanner,ss:%5B728.90,970.250,970.90,300.250,970.66,320.50,300.50,728.250,250.250,468.60%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-flexrec-1,ss:%5B300.250,300.600,160.600,120.600,300.420,250.250,300.300%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&slot=%7Bid:skm-ad-flexrec-2,ss:%5B300.250,300.600,160.600,120.600,300.420,250.250,300.300%5D,p:/83521019017/a.ebaumsworld/entertainment,t:display%7D&wr=1280.907&sr=1280.1024&sessionId=57230d9d-0817-9d10-84b6-159d6d82f85a&url=https%253A%252F%252Febaumsworld.com%252F"
Preview:	{"fr":"false","brandSafety":{"adt":"veryLow","alc":"veryLow","dlm":"veryLow","drg":"veryLow","hat":"veryLow","off":"low","vio":"veryLow"},"slots":{"skm-ad-flexbanner":{"id":"0fd6b8d0-b8bb-11ef-bed9-f2865b187d00","vw":["40","50","60","70"]},"skm-ad-frame2":{"id":"0fd6b8cf-b8bb-11ef-bed9-f2865b187d00","vw":["40","50","60","70"]},"skm-ad-flexrec-1":{"id":"0fd6b8d1-b8bb-11ef-bed9-f2865b187d00","vw":["40","50","60","70"]},"skm-ad-medrec-1":{"id":"0fd6b8ce-b8bb-11ef-bed9-f2865b187d00","vw":["40","50","60","70"]},"skm-ad-flexrec-2":{"id":"0fd6b8d2-b8bb-11ef-bed9-f2865b187d00","vw":["40","50","60"]}},"custom":{"ias-kw":["IAS_3005109_PG","IAS_3010449_PG","IAS_3007987_PG","IAS_1510285_PG","IAS_3010239_PG"]}}

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	1093
Entropy (8bit):	6.699800607777281
Encrypted:	false
SSDEEP:	24:Jal1hpunQWwjx82lY2T32HEVWuajiyJ3Vq+GY8W:KitNn2VkJ3dL8W
MD5:	9BB2DEBEB9232E93A3881B3DD71A36E0
SHA1:	0D1ABBCC99E9DD33A95A4DD94D8989915BC0FCD1
SHA-256:	28665E051F37AF822412621EE6E505D1CDCBAAEF67ACCDA830A319DC337B995D
SHA-512:	9B755A61C9850B7BA86B9C867D36643EE8AC3E3A2CB7F8849680BE40E9852FDA3FE7D45CB2AB0DA735EC64AA973C939BEA414D8C7F864E7B1782D7F801F84631
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:8701B31ACB9511DFB304F5EEC2EADAEC" xmpMM:DocumentID="xmp.did:8701B31BCB9511DFB304F5EEC2EADAEC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8701B318CB9511DFB304F5EEC2EADAEC" stRef:documentID="xmp.did:8701B319CB9511DFB304F5EEC2EADAEC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFED

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	37
Entropy (8bit):	4.188522622093347
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHMgXHROfYY9:YGKed2pHRgn9
MD5:	C11BE4C9B4FD2C7B81B415559462D84A
SHA1:	AB2AA12AB8332E4A7F5B42742AB7A76998B12387
SHA-256:	B8F0CA68362CF245F891FC09DDFA50806D195E78E196CF96AC5D9CF72BE2577A
SHA-512:	15E2124EBD717AB8656D14EF748C4FD98B3569AB4BCA579F3FDED41B64D51FF47202914E8572E6F8AB5A40FECAC07F970EE932AE8240D0110ED4F22B821C0C5A
Malicious:	false
Reputation:	low
Preview:	{"country":"US","isRestricted":false}

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	218671
Entropy (8bit):	7.969361864450024
Encrypted:	false
SSDEEP:	6144:bFo9FRVz4M2oV3GGuHOTSrPtCqJeaXFiywBF:RyFRpv2E3GG8oSrPt/e5yu
MD5:	413B674CA74F319C22D7096829C2032C
SHA1:	136D9964FA0C9CF841D870A20E43CE77AA6C10BD
SHA-256:	58FBBCDCACB19633B802109950CB69AD905A23E46334BE9B4CA5E75A379641BD
SHA-512:	D74837B94A79B4F167D7C2B651F997CBE1DA42C29365585ABE1238E759B1EB1BB94F92D6199F2AB05F7D111312E7BCE045898FE759B23E52572DA268069A93DB
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......U...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:2E023AEEA75711EEA0B699FA1BCA8E9B" xmpMM:DocumentID="xmp.did:2E023AEFA75711EEA0B699FA1BCA8E9B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2E023AECA75711EEA0B699FA1BCA8E9B" stRef:documentID="xmp.did:2E023AEDA75711EEA0B699FA1BCA8E9B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	407615
Entropy (8bit):	7.987047193014191
Encrypted:	false
SSDEEP:	6144:52mf92vnelO3TJnJJAC4qrgM3FJJGi/I+1OqXdqs1/52gzWs2hbE60XY50M:5rsPAO3KqrgwBOEqs1sgzWs2hbpCW0M
MD5:	0920FE1F5E485D986123FB70E58F49D2
SHA1:	F11BB9EDFFBB6F0D6703EF6BDF626105CDBFC873
SHA-256:	DC3DB9C488F209876098CF2F39BDA008FC8EAE60F330C7B30146EA27D2D7DD29
SHA-512:	64320B1641E4E6E48166223ABA1373207C795B3F1E10067FAC0EEDE4D84B59D37B525633513E2FE344467534A33396D8CBFFA60149D3F819FF422E23E58F125B
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17484), with no line terminators
Category:	downloaded
Size (bytes):	17484
Entropy (8bit):	5.223369162348979
Encrypted:	false
SSDEEP:	384:8Vrn5Fru8dqCDCl8J2RfyoJaOjtofZk1kC4cSWDTkZJwkXI/:8pa8dqCDCiJ+qooOKhIkCHSWDTWp4/
MD5:	230FE9426CA729314526F167679DA3C0
SHA1:	9F438FCC78C9C2405A962A9808FC5B7E1791C7D3
SHA-256:	27961AB8C37CDDAD89230364167C048C6377A80E38542A5FFBCA600FAF4098EA
SHA-512:	9699E84143E68BEE6B8B7C6A07F25BF2188658C47AF5284607F93135331FB929CE953956D9C6236A44B1CE4DB3564A97F568D7CCA6E9F6EE5E80EB9C8470D32E
Malicious:	false
Reputation:	low
URL:	https://pghub.io/js/pandg-sdk.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=0)}([function(t,e,n){"use strict";n.r(e);var r,o,a,i,u,c=Object({name:"P&G",pixelUrl:"https:/

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11071)
Category:	downloaded
Size (bytes):	11140
Entropy (8bit):	5.364381510612079
Encrypted:	false
SSDEEP:	192:1pRlBeRnYTUf0MvZLkW19ErcMFhssxxxiTi9u4FR6da/JH+qmipsNco:PX4lfNZLzDxsxxxe4GNqix
MD5:	13F2337EEF60DD4C034963898FED216D
SHA1:	DA95731ED280C62B99ED018DB1202218EE62328B
SHA-256:	9A3DACDCC0324F8500154D17EDDC6EC109BBADA307E480621BB01BDDE92621AC
SHA-512:	63D0BACC152FEEC30351F2675849B12E8C526E0C8F7548EC34861234468ED5F899A9B850948EF11BBEC78EF86D1B967BD614EA7420B0E0B447F077867156FBE9
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/1553.a6557582851c912d627c.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. /."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[1553],{91500:(e,n,t)=>{var r=t(64467),a=t(82284),i=t(28880),o=t(56424),u=t(62774),s=t(2766),c=t(70433),d=t(70041),l=t(26511),p=t(36133);function m(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}function f(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?m(Object(t),!0).forEach((function(n){(0,r.A)(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):m(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}var g=(0,l.vM)({bidderCode:"amx"}),b=/\.com?\.\w{2,4}$/,h=/^\s<\??(?:vast\|xml)/i,v="https://1x1.a-mo.net/",y=v+"hbx

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.1961893998690174
Encrypted:	false
SSDEEP:	3:CUU0/wv/p/Hh/:S0+/
MD5:	45CF913E5D9D3C9B2058033056D3DD23
SHA1:	30CB5D44E276505B1D4C053C8B25525DA228DB30
SHA-256:	42B976597A2D977D0E300F6D06BC903DB389E5C112D33C1C8C249690A522D9F2
SHA-512:	16DD1560FDD43C3EEE7BCF622D940BE93E7E74DEE90286DA37992D69CEA844130911B97F41C71F8287B54F00BD3A388191112F490470CF27C374D524F49BA516
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Thu Dec 12 18:44:15 2024, max compression, original size modulo 2^32 33035
Category:	downloaded
Size (bytes):	14685
Entropy (8bit):	7.986121058694582
Encrypted:	false
SSDEEP:	384:11ZqZfdl/470vJPWLRNwMKg/UQx2geWPk:4ZfrKfbKKUD9
MD5:	2BB077DF7F9ED3C4BBE431A98838214A
SHA1:	E038296916038F6D11D101357C8D1CE02F9F091A
SHA-256:	CBDA0C87DF34D081F6D9597D0C348F4350A66F90A883E7AA9C435CCAF6A7FA6E
SHA-512:	75CF84082426F857AB796124C3AA94E51942C65D4BE5CA2A76E32AA7DA2891E54C2522FAA10ADB2D33E5E2F68531419918573A80226C607EDED464E72D4E33EF
Malicious:	false
Reputation:	low
URL:	https://tagan.adlightning.com/sk-literallymedia-ebaumsworld/op.js
Preview:	......[g...}kw..u......n.#v....(6..IP..\|.HI$eE. .....x.....L.8.sr6.u.x7...I..dw...k.I>.O.g2..{o.@....{}.......[.]U....[..{5u.HucJ..r%s..#%/c.....iA..mB.....>e..9.}....uV.b...Sk..gm.:..9..j....d..%..#..h4.........e;..\..BQ(...+.Xo4[/....n..r\|2.>8<....c.....$,.1.u.'Ymf...c.l.e....S......H2.6s.......}.$.2....L.x.>.d....Do..../:....T.)j.]Jq ..^..h.n....M.AKh..5....?.AS....vy......K.U7.bt...A.n<.&D.@...:W.D5..........@....c......e.;;...W.=....86.E.D. B...........Y.8..g.j.1.j..Z..Be.k9I(9..:Shb%.-.{.]]g. .c..@.:1....zN....xO.Kno....e.t..O..9.i%h.x.-...`q.$..I+......r.(...1T.mK..d.....iXG......%...1..'.."UL.<.wk..........~..y. ...XY.9.g.j.D.b.ve2ho.H..0.;S...<.......D...V-\..o-p<....m.!...(e.C..U..P.]..N...3..vk.p%...D.......^k...2..kk...}h....(..t..X...ld....vP&v[....cu...5g..6o....t.w.....{..8.\K;.{....JnW.b.x.E!W.Q'...S.i.E....-..._..c\.}.uE..s..`..V.=...8qR.......F.P7[+^c.^.\|R7...h.J.)A.ZPy!\B......g.B...3....<.-$u...C7%H..e...d...3......./.

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Mon Nov 4 15:35:04 2024, max compression, original size modulo 2^32 66654
Category:	downloaded
Size (bytes):	24876
Entropy (8bit):	7.989990425248897
Encrypted:	false
SSDEEP:	768:EYOL69XPIaZTJ4IZTvppJw7iZ23Nq45Def5/FDhnx5D:I69ZTJnppJw7ig5Dy9Dd
MD5:	7CE91A86146AD6636C85DD879519E02D
SHA1:	30DD0927D190FD81E1A2E056C34BBF7098293A01
SHA-256:	3F5F785866D91750A853C6B054FD65A7EC4D0DB15A2D531FE8686280C5BC4B99
SHA-512:	126C4BF538887E51FACEAD4852D24BF7793F057BCD3A560A1DC2AB3BC5DF8C099E0137C3CD2BDA55DDCC37316D7CA124A1DAACC3957AAF6166145AAB9204CB12
Malicious:	false
Reputation:	low
URL:	https://tagan.adlightning.com/sk-literallymedia-ebaumsworld/b-bde0e05-116e0fe4.js
Preview:	......(g...._...(...>g.....cF4.. #>F\|....H.8!`.@P...TU?.8..>..w...I....^]]..M.n...g......5.f..v.-#0...?....Y_o?.Q0.B.9...i.Q&.e./..]...)d..ww)...^...?2.K9.....g.r.]...j.......M.....d.{.L._Vz)~.Q..JF.ub.Lh.f]....s..Bg-hk.I8..2.+....~...{...LM.....{...h._../..`_.......{f[[....i..[\,^............JaQ\<Cb4.._..yR...zA.7...&..9...(.Of.N....f..q..9.=g....w2.v.8.;.o.7...Z...+.......n...j.y...m..].9.../..?+.f~1i.P.4?.q...[..1...'PjVxZX.P....`........Qc.x..X..N....."V..`.7...KTx.^..8p&.F..#.k>.)..?.NO.....l....).8..I~.%..B..o..:.....h.g2.<]...8.q..f18......F............@.X...s^.^.6./OM..;]L...Y..]..n...K.wR).],...2_=.H..Z.^c'_9.^.=..s...Y.;....&...:O;...9)<./.Bg.....m....a.V......!..s]....w....I.8..............^....G<....b.\.V....~..h.sW9....Vm..}.<.3......j.Mv.^/....Y.............}.=..n>5...N....G/...F..u.o.[.....r..v;?..'L..8)..L~...j'.k.....x...*..X.m.S.]s2x........._..^....9N...s~.....n....N{{..4x.....o.i..Xm-^......W.<.

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	248724
Entropy (8bit):	6.549992729353676
Encrypted:	false
SSDEEP:	6144:MjYKFENHvjZQQw24sB9FZ4NnpWqr0+TEBOQ/su:MjRFEhFc24sRZ4NnpWqr0cEBLD
MD5:	4A318B2CD43CBA52A104E2B1B4D7C688
SHA1:	722586F55D61452A4ABF8F7709D2BC717DDC57D7
SHA-256:	8000FECD26AFC1A91566F67EACBA4215CB36F459646BCA2D0EF47DD316A5C3C8
SHA-512:	D01257936E54E96AC39DD76967A084B9A29185CD409A90D9E0BE97773BAE8C3B2CA2199069DE30F8D20F9BB0A16E4BF0CE2434BC4169EC261D5E2A7F94B337F8
Malicious:	false
Reputation:	low
URL:	https://cdn.permutive.com/models/v2/8d18f0c3-5d57-46dc-87b9-bf5d4f1f3f71-models.bin
Preview:	.W..C%L@.~.RDcJ.1.....?.pU..U.....W.K...W.lu..R.m....\n_..N......~s(....s4...EsF..l..u... .C..........Y..9......y.z..............}.........Xj................w..............dc......X...z."..g_.............-...$.;....`..0.....=.................T.....p.x.....$.....0...t.......?...~..........b....X......C.........Tu....b1.........F..V...P.i...?.....g..........~.....>....>.....U.....B................o....@..Z..C1..........]..M...K....gd.?...H..M.l...:...o(......X..~......s.....n..............f.....!........C....C...........L..............@......>.......}.....P.....'..W.....`....x..........ga....5.......2...>..............,.....#....M....=.q.....m..o$.R.....?...w.....2............y.........i.....4....o,.....}..........=.....p..............p.l..........O.....%...R.@........8..........>#.....Z.............Xk......z...R.u...r.q...,.[.....I..f.......+..W......\|.....I.....q....................... .....&...-.+...}.....W.8..."......q..X.....%d...

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1176)
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.4317221389342825
Encrypted:	false
SSDEEP:	24:U+DRCdDEFWrXg/UgU4DRDxgPsJfWVxqnuBf7vDKDl2y/K8XM+ZKN5MBBAIGEi:UUCdAuXg/t5JunsQ7vDKDc6XM943ALEi
MD5:	100F8F2F2BCD0D9F3318B1FA391995BF
SHA1:	B71EFFA53E722400C8932339820E66484824DEC9
SHA-256:	2B0020059A0E0B448546C771D058D16727AA2F5D056F4A38079CD92CE800ABE4
SHA-512:	CFCC33665F0BFF30365BFFDA11AD370EF6CD57653039011A82826E45C34600CB7766AA25D3EC9134AFB89A84D157313D43D5958BFF89068CAE07B0EAD9DCB98A
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/7822.e74ebdee413f0e491725.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[7822],{87822:(e,t,i)=>{i.r(t),i.d(t,{default:()=>p});i(65714);var n=i(18269),r=i(83904),o=i(81257),d=i(72327),a=i(7947),s=i(13158),_=i(60118);const c="rubicon",u=`${c}_video`,l=c;const p={getBids:function(e){let t;if(!(0,s.vx)(u))return{};try{t=function(e){const t={preroll:201,interstitial:202,outstream:203,midroll:204,postroll:205}[e];if(void 0===t)throw new Error(`Unknown video ad type requested from Rubicon: ${e}`);return t}(e.type)}catch(e){return(0,a.vV)("Unable to determine VideoJob type",e),{}}const i={bidder:l,params:{accountId:n.A.get("rubicon_account_id")\|\|"10278",siteId:n.A.get("rubicon_video_site_id")\|\|"164712",zoneId:n.A.get("rubicon_video_zid_"+(d.A?"mobile":"desktop"))\|\|"1422764",position:"atf",video:{size_id:t,language:"en"},inventory:{}}},c={};return Object.keys(e.targeting).forEach((t=>{c[t]=(0,o.pw)(e.t

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32769)
Category:	downloaded
Size (bytes):	93868
Entropy (8bit):	5.372204012865564
Encrypted:	false
SSDEEP:	1536:k5RKUpVgklsdbuLP/l+0fGzA8gmtasgx/c9Rzzi4yff8qeLvHHEjam7rSnmBn9gn:Ee8FbGzA81+xRRi1Z3
MD5:	DDB84C1587287B2DF08966081EF063BF
SHA1:	9EB9AC595E9B5544E2DC79FFF7CD2D0B4B5EF71F
SHA-256:	88171413FC76DDA23AB32BAA17B11E4FFF89141C633ECE737852445F1BA6C1BD
SHA-512:	0640605A22F437F10521B2D96064E06E4B0A1B96D2E8FB709D6BD593781C72FF8A86D2BFE3090BC4244687E91E94A897C7B132E237D369B2E0DC01083C2EC434
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
Preview:	/! jQuery v1.7.1 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cv(a){if(!ck[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){cl\|\|(cl=c.createElement("iframe"),cl.frameBorder=cl.width=cl.height=0),b.appendChild(cl);if(!cm\|\|!cl.createElement)cm=(cl.contentWindow\|\|cl.contentDocument).document,cm.write((c.compatMode==="CSS1Compat"?"<!doctype html>":"")+"<html><body>"),cm.close();d=cm.createElement(a),cm.body.appendChild(d),e=f.css(d,"display"),b.removeChild(cl)}ck[a]=e}return ck[a]}function cu(a,b){var c={};f.each(cq.concat.apply([],cq.slice(0,b)),function(){c[this]=a});return c}function ct(){cr=b}function cs(){setTimeout(ct,0);return cr=f.now()}function cj(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ci(){try{return new a.XMLHttpRequest}catch(b){}}function cc(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62151)
Category:	dropped
Size (bytes):	62220
Entropy (8bit):	5.3774350263096045
Encrypted:	false
SSDEEP:	768:WZygoANvYrrOunuCNzRrpuG2/p0yMuKr7aKLBDqCF+FEKxM4JpRX:SgXOunhzVp3263e60CAF7pRX
MD5:	568ABCECF93CC8E7E152F404AF14593E
SHA1:	BC54697E82827E9985C8321DC71D8578E8C0A1A7
SHA-256:	05E3F79FDCC0A930CA774DFCDC4793D5C56F9345562366472641DA3619855AC5
SHA-512:	E4C746E39BBDFCC96AE6B1CC1FB059498DFAFA7D69E66E5C5BCE6FFAA762FA855272DA454CB2CC61549C64CA9403218B9C13DC78A12985369AE767EC9D62343E
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. /."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[6860],{18055:(e,t,n)=>{n.d(t,{D:()=>d});var r=n(45458),i=n(46813),o=n(70433),a=["user.keywords"].concat(i.Dy.flatMap((function(e){return["keywords","content.keywords"].map((function(t){return"".concat(e,".").concat(t)}))})));function s(){for(var e=new Set,t=arguments.length,n=new Array(t),r=0;r<t;r++)n[r]=arguments[r];return n.filter((function(e){return e})).flatMap((function(e){return Array.isArray(e)?e:e.split(",")})).map((function(e){return e.replace(/^\s/,"").replace(/\s*$/,"")})).filter((function(e){return e})).forEach((function(t){return e.add(t)})),Array.from(e.keys())}function d(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];return s.apply(void 0,(0,r.A)(a.map((function(t){return(0,o.A)(e,t)}))).concat(n))}},67803:(e,t,n)=>{n.d(t,{T:()=>y,A:()=>g});var r=n(80296),i=new WeakMa

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7576)
Category:	dropped
Size (bytes):	7666
Entropy (8bit):	5.2677670324281065
Encrypted:	false
SSDEEP:	192:hPymTIDb0FDnCSgzZ9CFCEmoXCAtTYgg9oSMXb8zUK:hamTIDb05PgzZ9CF7moXCggUK
MD5:	F86EA7ED9A23794C8226A22E328E5A9D
SHA1:	48E9072FEA3DDB46B4858AD7CCCB462999BB4B72
SHA-256:	8F6FB4DC2C00DAEB3F3E1BC2B8B8BA6C86BFAE4B4A7384028DFB8314D7A8F588
SHA-512:	FF125A442D6932FE83BEA88B385F742C1DB45882F36C90538E5976DE503D28B2A325AA526F205C7758CBADE392896B3C4900D365A2CF0FEE891252E47DE93D00
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. 202412120103-5866609 */.var blogherads=blogherads\|\|{};!function(c,s){function t(){var t=window.performance;t&&t.mark&&t.mark("pmc-atlas-mg-config-loaded")}c.conf=c.conf\|\|{"dfp_account":8352,"positions":["bottom"],"dfp_targeting":{},"sk_affiliate":true,"prog_opt_in":["adlightning","appaudience_safari","browsi","justpremium","kargo","kargo_video","teads"],"prog_opt_out":["adlightning_ad_reporting","flipp","ias_video_viewability","openpath_display","openpath_video","rhombus","seedtag","appnexus_postbid","rubicon_display_postbid","sovrn_postbid"],"site_id":26278,"site_name":"eBaum's World","site_url":"https:\/\/www.ebaumsworld.com\/","addir":"\/sk\/12\/122\/1226456\/26278","adlightning_pub_id":"sk-literallymedia-ebaumsworld","appnexus_custom_pid_desktop":18856781,"appnexus_custom_pid_mobile":18856781,"appnexus_video_pid_desktop":21247984,"appnexus_video_pid_desktop_midroll":29989499,"appnexus_video_pid_desktop_preroll":21272

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21838)
Category:	downloaded
Size (bytes):	21907
Entropy (8bit):	5.453164844376592
Encrypted:	false
SSDEEP:	384:T5KB3y5bdbQhocjPRqFK0or8c+mKyKQnMbEBtF+fY/UAj0ft:d44GhocbRMG9lnKEBB0F
MD5:	A101845338F961709A428B9A157E39BC
SHA1:	7DDA1CDBDC17DFF356CA36D00A2F6EF9A5CFF5A8
SHA-256:	77E5D364ADB79BEA0334DDCBAB488690C9097B381A13FA070260516F3C433A81
SHA-512:	655EC84D6A430199EC909EB2558BE80770B4BC6C68B44656617AA6AA146214C84E8CB0747F956FC580097743627CE3631D02F977BDEBE6D4C57B1584D41741B6
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/2253.b2f10c13a8ac4c9c1314.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[2253],{82253:(e,r,a)=>{var n=a(82284),t=a(45458),i=a(28880),o=a(2766),s=a(70433),d=a(35548),p=a(70041),c=a(56424),u=a(62774),l=a(81936),m=a(30416),f=a(26511),v=a(88848),_=a(67324),g=a(63456),b={1:"IAB20-3",2:"IAB18-5",3:"IAB10-1",4:"IAB2-3",5:"IAB19-8",6:"IAB22-1",7:"IAB18-1",8:"IAB12-3",9:"IAB5-1",10:"IAB4-5",11:"IAB13-4",12:"IAB8-7",13:"IAB9-7",14:"IAB7-1",15:"IAB20-18",16:"IAB10-7",17:"IAB19-18",18:"IAB13-6",19:"IAB18-4",20:"IAB1-5",21:"IAB1-6",22:"IAB3-4",23:"IAB19-13",24:"IAB22-2",25:"IAB3-9",26:"IAB17-18",27:"IAB19-6",28:"IAB1-7",29:"IAB9-30",30:"IAB20-7",31:"IAB20-17",32:"IAB7-32",33:"IAB16-5",34:"IAB19-34",35:"IAB11-5",36:"IAB12-3",37:"IAB11-4",38:"IAB12-3",39:"IAB9-30",41:"IAB7-44",42:"IAB7-1",43:"IAB7-30",50:"IAB19-30",51:"IAB17-12",52:"IAB19-30",53:"IAB3-1",55:"IAB13-2",56:"IAB19-30",57:"IAB19-30",58:"IAB7-39",

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49985)
Category:	dropped
Size (bytes):	388132
Entropy (8bit):	5.323210021166498
Encrypted:	false
SSDEEP:	3072:Svx87GSxs8r/kml1bzPagoM5vKpd9tHtItaOiPu5mLd5BifXp31Q7RT:17Lxsa3z3agPyr4iBLVifXp31Q7RT
MD5:	F3E9EA9058F13AF3C378C09010DB9552
SHA1:	26944688D3D8E533C967AC6D0DA5A415E997FFC7
SHA-256:	FF2A5FD50F4B23B6BD2FF55951F3830BFB5A76615F8310269FA88374D0E78070
SHA-512:	4EBC14E39EC37B3CE8094FD30FA0801CD491C83FAEC5C7AAD9896BED060756C44BFAF7EEA6BAC2A1E64239A5F27239E0262CB9B9DDA402C28364140455A80990
Malicious:	false
Reputation:	low
Preview:	/* prebid.js v5.17.0-pre.Updated : 2021-10-07*/.!function(e){var t=window.ntvPbjsChunk;window.ntvPbjsChunk=function(n,o,a){for(var c,u,s,d=0,f=[];d<n.length;d++)u=n[d],r[u]&&f.push(r[u][0]),r[u]=0;for(c in o)Object.prototype.hasOwnProperty.call(o,c)&&(e[c]=o[c]);for(t&&t(n,o,a);f.length;)f.shift()();if(a)for(d=0;d<a.length;d++)s=i(i.s=a[d]);return s};var n={},r={367:0};function i(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=n,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i.oe=function(e){throw console.error(e),e},i(i.s=924)}({0:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),n.d(t,"internal",(function(){return w})),t.getPrebidInternal=fun

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11983)
Category:	dropped
Size (bytes):	12052
Entropy (8bit):	5.287461251660678
Encrypted:	false
SSDEEP:	192:KHm4GLXR4JHn2/qTA3TgRTouJvLH6WLen8y1mO+mK3EObX1rAsNOQlcsiMZN7qMx:KHmJSJW3DAvLaWLe8y1RlOZAsNOQlcsV
MD5:	06DCFCAED0332148FC971835E2721716
SHA1:	9D304253B2BFB5F735FC80E53385667432416BC8
SHA-256:	A8CBF52118486A27E66609A533DEE6DCAF93366013E58D7B886603CA2CA6490F
SHA-512:	E2AF4E6FFB8E9F2F4EE8518FCBF951996C07364E088C405568EC57FFEEE4FD0F01BF7984002AC5D292EC672F4004E7A781EDE95A2CE6A5C0164AE22FB1A17A66
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[1257],{18269:(t,e,n)=>{n.d(e,{A:()=>b});var o=n(47516),r=n(47069),c=n(91938);const i=window,u=new Map,a=new Map;let s=[],l=!1;function f(t,...e){i.console.error("%cP%cM%cC Atlas MG","padding: 2px 1px 2px 10px; border-radius: 7px 0 0 7px; background-color: black; color: white;","padding: 2px 1px; background-color: black; color: #ed1c24;","padding: 2px 10px 2px 1px; border-radius: 0 7px 7px 0; background-color: black; color: white;",t,...e)}function d(t,e){l\|\|f(`Attempted to ${t} config for ${e} before config was hydrated.`)}function p(t){if("string"!=typeof t\|\|!t)throw new Error("Invalid configuration key provided.");if(t.startsWith("_"))throw new Error("Attempted to access a private configuration.");return t}function h(t){return d("get",t),a.get(t)}function m(t,e){d("set",t);const n=u.get(t);n&&(e=n(e)),a.set(t,e),t.start

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1448788
Entropy (8bit):	5.469432453808999
Encrypted:	false
SSDEEP:	24576:ts97UB8DFpr8xD48T/BnS/aD6xnB5Or591dUigdoaAs0KbOX5QKrQ3khNFxeMhfg:e97m8DPr8xD48TNS/aD6D5q59nsviJQ7
MD5:	0A6C88AC0C6705875D71EC3A7585B05D
SHA1:	F5233A4F4B08E0A9935A10B927D80DD5EFAD4DEA
SHA-256:	8678E7884ACFA14204BA7E1C2242ADE0F8CF099FC7EAB08DCE888CB669E9B3C8
SHA-512:	35A9A8C6E6A2D05277665CA479C7D99EDBA04134B554284BCC29E72792F4402FE2E9FABD80E7F214B3F3D099731761D4FF9A5D9BFEEE0858422152D44D5549CB
Malicious:	false
Reputation:	low
URL:	https://cdn.permutive.com/8d18f0c3-5d57-46dc-87b9-bf5d4f1f3f71-web.js
Preview:	/! @permutive/javascript-sdk v20.26.0 (web) (built 2024-12-12T17:52:01.587Z) /(()=>{"use strict";var __webpack_modules__={2865:(t,e,r)=>{function s(t){return t instanceof Error?t:new Error("string"==typeof t?t:JSON.stringify(t))}r.d(e,{w:()=>s})},3939:(t,e,r)=>{r.d(e,{A:()=>i});var s=r(2275),a=r(9727);function i(t){return(0,s.zG)((0,a.Y3)((()=>JSON.parse(t))),(0,a.fS)(s.gn))}},502:(t,e,r)=>{r.r(e),r.d(e,{CleanRoomAddon:()=>g,load:()=>h});var s=r(1578),a=r(2865),i=r(366),n=r(1385),o=r(2275),c=r(9727),l=r(9246),_=r(2846),d=r(704),m=r(109),u=r(7145);class p{prefix="[clean_room]";api;sessionManager;permutive;logger;clientContext;viewId;async putOrResetUnprocessed(t){return(0,o.zG)(t,c.g_((()=>l.Y3((()=>this.unprocessedPrebidAuctions.reset()),a.w)),(t=>l.Y3((()=>this.unprocessedPrebidAuctions.put(t)),a.w))),l.vx((t=>(this.reportError(`Unprocessed auctions failed to put. Got ${t}`),l.F2((0,o.Q1)())))),(t=>t()))}unprocessedPrebidAuctions;debouncedPutOrResetUnprocessed=this.setupUnprocessedP

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 266 x 61, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4411
Entropy (8bit):	7.937875199295409
Encrypted:	false
SSDEEP:	96:7IPNlfpq7yJoCcN2HTjrPXqEys4OHu/JezLiEesTlE78ST4Ei7Iyz:7Eg7SYkHTPlys4H/cHT484yz
MD5:	EE33B1ACFD43FE15700ABD543BB94F76
SHA1:	109ADA6C108FB78E79F1DAAEB3FA37B0F8448519
SHA-256:	D282FA206D9142DA28DED8F228BBC26E9FCEF13DA72839F2B1257E3DA2E90353
SHA-512:	90009A47F9A70A4580D469CEC0F48375D518112E1303F22C7D030161393988D3210F40BC8F20DB53CB8AEAD9FFA464F97A0E07BB9E4440326A06DA55A3790F99
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......=.....U.'h....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..].S[.._lc;.......M.t...Lf2.H..t&..m_.1Ez.........{;\..3.A<d..L$.m.4...i.:q.....-.`L.u..YqX.Oq.X:......{.....s.~ ...`0.....`0.....`0.....`4..6Z......L.ej....tV&c...+h.B.Z._..Q.D!....Hi..._....M..!......I.....H<.?.e.Y...c...DFHXa...^I...n.s^.S.2.._.,7..9...).o...;....../.^9.X....$..@CH....NJ..x....I.I.4Z$1)........C...}.e.P.8!;...zl.P...oQ,+..Do.....xg.b\..Z..0.U}./.......q.AyG..K."&..uz...Q.X..G.. ..7!?[.4..R.]H.,......e.....l.325!1(K..\|wD...@I...$VK%..N.(.K..\|..jQ.h...A..C3..(~...$...F.$+.G..O.u{.......>..}..J.r.NQ.&.v...!\|Np.<.....z.........\|.Y..O~...O.E5..2... d....'.!0v.E..(. ..2......v.k6..@`.Ug 1.$.v@.C.n.xk...$..m.Y.!...L.#L.Y....<,....=.....a.5S.L..Z!=x.H..J....w.j!$..@...{..6s41WJ.n....L.....As..:f...E.M`..@7.H."#.A0.[~.@......r ..G.f}.0.>......I.q...6AK......GC..K...Q.y.MFe.F....D2(..S..G....R....H...V?%.$ E8..5T.5..o.!.A..Zc...`da0.#.2%...h%.#Y.....8.M....k..2x......~

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (316), with no line terminators
Category:	dropped
Size (bytes):	316
Entropy (8bit):	5.145490527630992
Encrypted:	false
SSDEEP:	6:8WiIUem/32p0kHRTFHPbfCYKpY4DCVeUNEssRZ8ok63RMUX6jFGJpoeX:8DIG20OBFvbfCYKpEePssRZjKUlJieX
MD5:	FCD4C9ADF69BAD485D4710618836EF9D
SHA1:	48E331A2043B334B5E14CA88C22FC01DBB1BF3C1
SHA-256:	0A6565936097A31587A9C9D3FA331DD3F0DADF188E829B8905025BFDF950E4E6
SHA-512:	2795C187CE3A1966D6D67E6E47032234D38E867566785F54E83680450773332F0486051A456749251AB78BAFED41113694E2B007446CDDF3D7719B56EF811376
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-minuteMedia_rx_n-acuityads_n-MediaNet_ox-db5_cnv_n-smaato_n-undertone_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 145 x 65, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19904
Entropy (8bit):	7.980346077350412
Encrypted:	false
SSDEEP:	384:YoF8wZuGdJQ9bU5dThniFWPzH9wtE9ejBi/+ledJDvaGjfk1tTugnZc3EB:Y1wZuGdK9GJhnikPOjVledJTa+Wbe8
MD5:	C98E6B73D8F927056E9006923E16BA4D
SHA1:	5C044CD159BBE3F39400F644A1D7306482E11175
SHA-256:	6DB2C3939DDF91C82E9BEFB5E195A78974EFA9B7F2B6C5C2C53F128CCDD8DDC4
SHA-512:	D302F20D5BCBCFF342F91313573BFFD5759C812A89097E2EE65ABDEA0E000A99678514A24018FD31FEBF50687B680850B214DE82F49C394E5FCE87E1BE753DFA
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/img/desktop/mainLogo.png
Preview:	.PNG........IHDR.......A.......F.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:046D9341406711E5921ABD3E2C4C57FA" xmpMM:DocumentID="xmp.did:046D9342406711E5921ABD3E2C4C57FA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:046D933F406711E5921ABD3E2C4C57FA" stRef:documentID="xmp.did:046D9340406711E5921ABD3E2C4C57FA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.Wlu..J4IDATx.......?.L.^N/.B. . U..6.-j,o....hb....cM4o..Qc.[.,.6.. REz.......~...c......]Y.q..;3O....s..i....

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16664)
Category:	dropped
Size (bytes):	16665
Entropy (8bit):	5.302009001245546
Encrypted:	false
SSDEEP:	192:GU1krNwY44Xg68CU2dS8kcygRQOeukl0banlxyC0SXIHGGuGqY+AAUgdgKTGvcox:FkGx6VCFAG1GbjjD1AoYy6He/yq/9F
MD5:	F938E5CF59280E13F9597C828FB3B891
SHA1:	39808CA50F57D21E51F0464BB5DA627E743B7CA2
SHA-256:	04DE103E0254B5AC670FAEE52A061486BFBCF2F97946776F6917CE261B18F7C3
SHA-512:	1C0779D569B3F77B4345468361554E4511673FBBD9F31F96173942BB6BAEBE2E354FCC86EA9E0DE65EEFF88D76C4CC26A8E1625D9275DC1AE3AC43080AE42EE3
Malicious:	false
Reputation:	low
Preview:	var COMSCORE=function(n){var t=function(){return t=Object.assign\|\|function(n){for(var t,e=1,r=arguments.length;e<r;e++)for(var i in t=arguments[e])Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i]);return n},t.apply(this,arguments)};"function"==typeof SuppressedError&&SuppressedError;var e=["co.uk","com.br","com.ar","com.tw","com.mx","co.jp","com.au","com.my","gob.mx","co.id","com.hk","mus.br","com.co","com.sg","com.tr","co.in","net.tw","com.pe","com.ve","co.es"];function r(n,t,e){-1==n.indexOf("?")&&(n+="?");var r=!1;(-1!=n.indexOf("&")\|\|n.length-1>n.indexOf("?"))&&(r=!0);for(var i=0;i<t.length;++i){var o=t[i];for(var u in o)r&&(n+="&"),r=!0,n+=u+"="+c(o[u]+"")}return n=function(n,t){if(n.length>t){var e=n.substring(0,t-8).lastIndexOf("&");n=(n=n.substring(0,e)+"&ns_cut="+c(n.substring(e+1))).substring(0,t)}return n}(n,e),n}function i(n,t){for(var e in t){var r=t[e];r!=undefined&&(n[e]=r)}}var c="undefined"!=typeof encodeURIComponent?encodeURIComponent:escape,o="undefined"!=typeof

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	43618
Entropy (8bit):	7.9279053505209225
Encrypted:	false
SSDEEP:	768:x/BAmQwmtXceFXj5ZVV4uyDAwA0t38bEuRL/mAXLlKnGzKU2Oy2jhJgZdsqWyUwM:/ADthBj5ZVxYAwAk8RLzLlHNy2jh2j/w
MD5:	8E0E2506C17AA962BD9DE76846892C66
SHA1:	B3A59B0EA24E6CC37EFAF63F2E1F79D0AC07155A
SHA-256:	1773D61624BD777DA9C2C8BCAD1CD7886CEEE5C3C00F74D3FCF35F11A511B192
SHA-512:	525A3972BB3F643AF7F20BA623459E1294CEE32CB2D4B8A28AB29F71A1368B3B598C50282E758EA1228A26B88CF2BBFFB2827AB80E57685C2986BEAAFDFDC69F
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/11/11/045014/87633215/inventions-thumb.jpg
Preview:	......Exif..II*.................Ducky.............2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:C7EBF73A989711EFBBC4D436F2AE3975" xmpMM:DocumentID="xmp.did:C7EBF73B989711EFBBC4D436F2AE3975"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C7EBF738989711EFBBC4D436F2AE3975" stRef:documentID="xmp.did:C7EBF739989711EFBBC4D436F2AE3975"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................'..'2&.&2.&&&&.>55555>DAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDDDDD.... . &..&6& &6D6++6DDDB5BDDDDDDDDDDDDDDDDDDDDD

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2738)
Category:	downloaded
Size (bytes):	2807
Entropy (8bit):	5.4339040262679426
Encrypted:	false
SSDEEP:	48:UWiLQPxez1gnlDMjWNJT/jjLhF2vVpFZRF/QrbzD5SY7rbt5jj3i:diLWugl5fuvVV/Qrbn5SwrbzjjS
MD5:	1D279F05FD422B4622A908CF3CAFCC47
SHA1:	DE363BB3B844D2B161EACBE087692B3E938A6D8B
SHA-256:	38A3C87A22AF224F21AEF8445164606EADC3CE7EBF181E5029D5461D3F097960
SHA-512:	0821C73212FF7124A18EABA25E544186099D72F4CC7A188E9AC7A34F8130E4C0709503E2EBEF0F3DFFAA3A244B13025E6FB59EE9ED87FC28BAD0A98BDB601E84
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/5450.deed8836db6a553566ae.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[5450],{5450:(e,t,o)=>{o.r(t),o.d(t,{default:()=>k,getIndexExSiteID:()=>c});o(75765);var d=o(18269),s=o(81257),i=o(64785),p=o(66426),l=o(72327),n=o(34828),m=o(13158);const b="indexex",r=b,a="ix",x={"728x90":{coppa:{"1st":{mobile:384741,desktop:384740},"2nd":{mobile:384751,desktop:384750}},default:{"1st":{mobile:211442,desktop:211441},"2nd":{mobile:211452,desktop:211451}}},"300x250":{coppa:{"1st":{mobile:384743,desktop:384742},"2nd":{mobile:384753,desktop:384752}},default:{"1st":{mobile:211444,desktop:211443},"2nd":{mobile:211454,desktop:211453}}},"300x600":{coppa:{"1st":{mobile:384745,desktop:384744},"2nd":{mobile:384755,desktop:384754}},default:{"1st":{mobile:211446,desktop:211445},"2nd":{mobile:211456,desktop:211455}}},"970x250":{coppa:{"1st":{desktop:384746}},default:{"1st":{desktop:211447}}},"320x50":{coppa:{"1st":{mob

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	4.745771283843039
Encrypted:	false
SSDEEP:	6:YCAFKs7X+xaNmb+Bkdxtke/gAVj1dEL1nJrRE3a0nOH1:YCjIOxaNm6B8f5pj1cLFEqBH1
MD5:	65DD10954D0252006E59C8006B1547E2
SHA1:	56FE5A69599C9337704573991FFCD0AE85EA45F4
SHA-256:	46DCCDCA482CF30DF3CAFC2DC11D672FBFA9EEB7E49677B6E363C8989C65F05E
SHA-512:	9268CF9F2FC330C08164A2A1CC53C59CCDC68BD76F5CBC24862E36DFBD1480ED9C54BBB64CBD935B1D1AEB2280F6D58CFB428D411A86AEFFC3C6F42515B5F46F
Malicious:	false
Reputation:	low
URL:	https://api.permutive.com/v2.0/geoip?include=geo&include=isp&include=ip_hash&k=26009fee-1ff1-493d-ae23-88df000d9627
Preview:	{"geo_info":{"continent":"North America","country":"United States","city":"New York","province":"New York","postal_code":"10118"},"isp_info":{"isp":"CenturyLink","organization":"CenturyLink","autonomous_system_number":3356,"autonomous_system_organization":"LEVEL3"}}

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	1264
Entropy (8bit):	5.397822610338706
Encrypted:	false
SSDEEP:	24:U+HMeI8Fy8B+JN6MtC12sO2oNN5YzTtCHiVlj15MkktPgMWMBBs:UqMeIUIJMMtW2mukgHi/atPgMP3s
MD5:	52A2994151CB13B78F9EEFCABEEE05AF
SHA1:	B41CD385031E7D3D5C5B0CFFFAE82026DE3B5CBF
SHA-256:	5A231B8ADEAF7DCFF36D0E651059A108C47B991778D1602DBEC5104007AA476E
SHA-512:	598A49942EE56CF8D7FADEDB534E9BE8C75A238E115CFF56828120313282B5C2B630C3E3B39D253E5F2109B42C022AEDA800AF6676BFE137C0F74AB192F5D0CB
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/8603.e5247fc1ea359db85497.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[8603],{68603:(e,t,n)=>{n.r(t),n.d(t,{default:()=>g,getRubiconSiteZoneIDs:()=>u});n(65714);var i=n(18269),s=n(83904),a=n(64785),d=n(13158),r=n(60118);const o="rubicon",c=`${o}_display`,_=o;function u(){return{siteId:i.A.get("rubicon_site_id")\|\|"76058",zoneId:i.A.get("rubicon_zone_id")\|\|"359030"}}function p(e){return e?`${c}_postbid`:c}const g={getBids:function(e,t){return(0,d.vx)(p(t))?e.reduce(((e,t)=>{const n=u(),d={...s.A.getAllTargeting(),...t.getAllTargeting(),...(0,r.z)(t.subAdUnitPath\|\|i.A.get("vertical")).getAllTargeting(),bidtype:["pre"]},o=i.A.get("rubicon_id_mapping")\|\|null,c={bidder:_,params:{accountId:i.A.get("rubicon_account_id")\|\|"10278",inventory:d}};if(o){const{siteId:e,zoneId:n}=(0,a.A)(o,t)\|\|{};e&&n&&(c.params.siteId=e,c.params.zoneId=n)}else c.params.siteId=n.siteId.toString(),c.params.zoneId=n.zoneId.t

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:OFB:OFB
MD5:	9E076F5885F5CC16A4B5AEB8DE4ADFF5
SHA1:	475C848673A3F79FA778F01C2BD5A721D4C41707
SHA-256:	E3EBAA16DD9D9B9FC107C42183FB6CF9D22927E1AF03DBBDFA0CCC38E4E4AC31
SHA-512:	4D384838C78C74F56DE20DE3FE125B9FE4D40B7C9FB5D767B647F05AEDE6BF63431F4F08AC464E188E77B227BECC3AB4BA86272F30B53D91B15003D814E06D2E
Malicious:	false
Reputation:	low
Preview:	Not found

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12685)
Category:	dropped
Size (bytes):	12754
Entropy (8bit):	5.422846372305548
Encrypted:	false
SSDEEP:	384:9KICR2F9XBKM/d0NUhWKEwBosb30p17dtOj9H6OqyHgB:9KIU23XBX/dY5KEwBom0p1BtvOqyAB
MD5:	936EE703CEBDDE5D8FE3859C416FC3DE
SHA1:	667D9D19E504791A71C658EA51B87288707D116F
SHA-256:	7BD53F86CB031638F6599FA3ABB22C1048FDFD25F8FD7258491CCA6C8C00F0DF
SHA-512:	32E83108AC72FC130DA8677CBE32319FBC09272797ED45811FA4E2579288CF8BFA17C67470C8C4977365D135E67453ACEA9848AE65DB4E1301D3B710E83E0576
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[4953],{11687:(e,i,t)=>{t.d(i,{A:()=>b});t(75413),t(65714);var n=t(59080),d=t(7947),r=t(5633),o=t(18269),a=t(81257),s=t(40992),p=t(18742),l=t(90609),u=t(13158);const c=`${n.Dn}_display`,_=n.Dn,m=(e,i)=>{var t,d;const r={pos:{default:[],override:`${n.Dn}_pos_values`},st:{default:["mrec","medrecnativemini","medrecnativecontent","mobileincontent","mobileincontentnativecontent","recipe","flxrec","wideincontent","widestincontent","ban","frame2","frame1","flxban","970x250","widebanner","300x50","320x50","bottom","tban","300x600","sky","frame2wide","frame1wide"],override:`${n.Dn}_slot_types`}},a=e.getTargeting(i);if(null==a\|\|!a.length)return null;const s=o.A.get(null===(t=r[i])\|\|void 0===t?void 0:t.override)\|\|(null===(d=r[i])\|\|void 0===d?void 0:d.default);return null!=s&&s.length?s.find((e=>a.includes(e))):a[0]},$=e=>e.replace(/[

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474)
Category:	downloaded
Size (bytes):	616505
Entropy (8bit):	5.4264322041954385
Encrypted:	false
SSDEEP:	12288:W3JiajiwC2+P0f21wafpdTUPFkGI7CkG3qhv:iJia36Q2pTUPFkGI9l
MD5:	CCAAD1B4551C0B2FB1D27CBA28BAE6EE
SHA1:	1D32B61ADF380C13C64E328B5A3AAAF75BD04AF7
SHA-256:	5ADE6DBBCC9824FDD0A9B98C67FE2FC9ED0F69A5BD906B99B163F1E26914240F
SHA-512:	349EF5211C89CE43AD7F981857597BFE89DA833FB25E9FA52DC0BF97A280243357931FC800A98CEB7C4AA405B3276287964648AFE21A40BBE3FD95CE6C361FC4
Malicious:	false
Reputation:	low
URL:	https://s.ntv.io/serve/load.js
Preview:	/! For license information please see load.js.LICENSE.txt /.(()=>{var e={561:function(e,t){var n,i,r;i="undefined"!=typeof window?window:this,r=function(i,r){var s=[],o=s.slice,a=s.concat,l=s.push,c=s.indexOf,u={},d=u.toString,h=u.hasOwnProperty,p={},f=i.document,m="2.1.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseJSON,-ajax/parseXML,-ajax/script,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated,-effects,-effects/Tween,-effects/animatedSelector,-event-alias,-wrap",v=function(e,t){return new v.fn.init(e,t)},g=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,y=/^-ms-/,b=/-([\da-z])/gi,E=function(e,t){return t.toUpperCase()};function w(e){var t=e.length,n=v.type(e);return"function"!==n&&!v.isWindow(e)&&(!(1!==e.nodeType\|\|!t)\|\|"array"===n\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}v.fn=v.prototype={nquery:m,constructor:v,selector:"",length:0,get:function(e){return null!=e?e<0?this[e+this.length]:this[e]:o.call(this)},pushStack:function(e){var t=v.merge(this.constructor(),e);

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	dropped
Size (bytes):	1468
Entropy (8bit):	5.804423937504733
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAb2mj+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxp:VKEcJzKo7LmvtUjPKtX7ftD1INOLrwUG
MD5:	361B2F7632092F0E88C00C08F8FA9E9E
SHA1:	BD392149D4FCB1EABD64DAB59F60EE6EFA5A398C
SHA-256:	CE1E328DEED60BBE85DC1C8A88ED3BE717446651D15211F59B3B6D775E220896
SHA-512:	041EAC4305DE25E8AD1ABC4AE53A92BE127450EAF8356BFD8F1BF6624AEDADBA5AE453F03E299D0D5D0994091FE7010D63D303C634F216DB6EE309D35DE9540F
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6Lfws0YoAAAAAPSMaeJp4OOhL_KqUbBJLq1Mq5Ih');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.721611723969903
Encrypted:	false
SSDEEP:	3:h4rtrsn:exs
MD5:	865261967AFE3D535CEA1A6F3C9B8E9F
SHA1:	4199F34CE97E1E5089BE2E9ADB10555691B0029C
SHA-256:	A1246500E54878521C20EACA060CDBFF39B403619B4751D39BF8828246D51309
SHA-512:	A09DBDB09704D24C3C10E01341D5B6AA63152D37BBC82F2AC62BFE6E8E518608F951C154A7C933AF92074F87188AF1F9E4A27AE135EBA009FFB8DD669303A0D3
Malicious:	false
Reputation:	low
Preview:	amznads.aaxPunt({})

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9251)
Category:	dropped
Size (bytes):	244801
Entropy (8bit):	5.453841413977933
Encrypted:	false
SSDEEP:	3072:/FLeYH8SRWJ/37OeR8NteqZEbkxZNsucrl0xYurPK713cCq:/FLeYcYWJzH8NNfFcrHurPK713Rq
MD5:	C9C37DBE6B077A4AAEEEA29AF4857656
SHA1:	E9A790D720E436BA047D67C4D441E840D660433D
SHA-256:	C4EB49795F7A703429E7012CEC0A556E6FAF6F551F07CD337F66C5A1EC3A5847
SHA-512:	660F8CD397BAFA6D8F44BA4C2CD066AAF934A69B5E608D6CE63636240E339ACFF93AE9B72F6B01C4E29BF9C89B11A73C2D5D3F36EFEAD5194D138B38F7E0DFA4
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	dropped
Size (bytes):	3093
Entropy (8bit):	5.586182575950065
Encrypted:	false
SSDEEP:	48:S+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwNSDuExjGx:S+5AQHAray48f5JMYHIqNSDu9
MD5:	19096DADF27736BB4E0F7AC6862D07BA
SHA1:	4C8019CF9AE6AB649234C6CCC6527F1704E4D4ED
SHA-256:	4EE6D0DE92447CE6A5039799D22988EC9F0156CEA43AFA5C98CE57DA719F4BD8
SHA-512:	87BA0BCB1EF2B032AC066672B2BD8E3FC1924F8309168420C65F13E552E352B375F9EAF4F9043488B102EC89CE2F3BE0D9C5F8798AFE1F95FAE1310D2B8307AE
Malicious:	false
Reputation:	low
Preview:	/1734029231,,JIT Construction: v1018821596,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	304252
Entropy (8bit):	7.982025669231412
Encrypted:	false
SSDEEP:	6144:3ej2aVMQ8XX7jO7fanAowfj5/6Tw2BZGj0otokYmlC0FKh1M0XszZllUiDE3f0Sb:3epVoXXoMAffj5/FSRoto8CwKhzXsdrG
MD5:	7874E2F117BD09579EDA4F8129364C2A
SHA1:	5DF2E6101FAB6B60C94B803B51AF6B4EDEC84844
SHA-256:	25E1FF3C9C2D99C35FFE93A79D73F55A6427A0E8025EC797F213153FA84978AB
SHA-512:	99DF2EDC034B94779BDF73ED150211EAD4E5D9911A5FE1018637B8EBBA8CBEE1D351410D429043CBCA656DB721C918374ACE6E4314513808DB3CC1C05641EB9A
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7885)
Category:	downloaded
Size (bytes):	7954
Entropy (8bit):	5.290748819762102
Encrypted:	false
SSDEEP:	96:RLlovlylj4ral3Sl3XZl3Pl3tl3Sl3X9Zl3Pl3El3Pll3ul3rl1l3WlQl3X4l1lQ:RylYuEDEJuNK2PlGQYQk4O8Z4g5MW
MD5:	0FC024CB809EA139854DEAE710B6117F
SHA1:	D9CD2E5B50604338D067A3BE44D37698746975DB
SHA-256:	9364FFA55CE1D4E97AB7575EA51A9857737A45B7DEE89019C062804EE42960B3
SHA-512:	60905762A6437F40A25885B17E4C19555710624436978EE84F19E31CA8C9333664682B6D6F42E70C8169E935BD4AFA1AFBCB0F6D7F8E706F73FBA55DF661E528
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/8685.56146c4fa4e07f711feb.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[8685],{12478:(n,a,t)=>{t.d(a,{A:()=>s});var e=t(31601),o=t.n(e),r=t(76314),i=t.n(r)()(o());i.push([n.id,"#pmc-atlasmg-adhesion-bar {\n position: fixed;\n margin: 0;\n box-sizing: border-box;\n padding: 0;\n border: 0;\n color: #000;\n display: none;\n width: 100%;\n left: 0;\n background-color: #fff;\n justify-content: center;\n align-items: center;\n}\n\n#pmc-atlasmg-adhesion-bar #pmc-atlasmg-adhesion-close {\n font-size: 16px;\n font-family: arial, helvetica, sans-serif;\n font-weight: normal;\n position: absolute;\n top: 8px;\n right: 8px;\n display: block;\n margin: 0;\n padding: 2px;\n text-align: center;\n height: 32px;\n width: 32px;\n border-radius: 16px;\n cursor: pointer;\n line-height: 24px;\n box-sizing: border-box;\n text-d

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29998)
Category:	dropped
Size (bytes):	30067
Entropy (8bit):	5.330889575394809
Encrypted:	false
SSDEEP:	384:6uGCa8fF9iPwVYv2v9/O31oRIIvQZ88WZhmse08AYbjPZCMarl:6tCa6es/G1kLvK88WZe08RbjPZCHh
MD5:	73FB9C1EC3529257764A5DFA18CB8CC6
SHA1:	0A25A4F5367F5996DC97FE4ACF7A7A17518FB88B
SHA-256:	D8DEE7DE9EA6642344745E905D3342D7525D1CF833D144FDA04769C1C5C602DF
SHA-512:	44CFE7298FEAE06409F4039AAFF465A30B997956EAB610EF5F85D4EAB012138006AE29EE4A12EA529B6F7C15CC2E648A82F15E0E0066826DEB68640346A2C64D
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[5765],{95206:(e,t,r)=>{r.d(t,{$:()=>n});var i=r(2766);function n(e,t){return Object.keys(e).forEach((function(r){var n,a;t[r]&&((0,i.fp)(e[r])?t[r]=e[r](t[r]):t[r]=(n=e[r],a=t[r],"string"===n?a&&a.toString():"number"===n?Number(a):a),isNaN(t[r])&&delete t.key)})),t}},75765:(e,t,r)=>{var i=r(80296),n=r(45458),a=r(64467),o=r(82284),d=r(28880),s=r(70433),p=r(2766),u=r(63172),c=r(62774),l=r(70041),f=r(39990),m=r(26511),v=r(95314),g=r(81936),b=r(56424),y=r(30416),x=r(35548),h=r(50399),I=r(95206);function A(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,i)}return r}function O(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?A(Object(r),!0).forE

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	278875
Entropy (8bit):	5.583323937272904
Encrypted:	false
SSDEEP:	6144:9O+GUiz8zXziZD91F9OmQyDy4iEPD4xgej:k9zCXMDFZw
MD5:	A662162FFF7ED7C92752E6B90D5D05AE
SHA1:	B86DF206944C87F8D3ED781F598A76C4790450D3
SHA-256:	5F6F2F5E8FDEFD1CA86C1AF4AD385B43DF752B70644C886E95AB4C279E1C004D
SHA-512:	4FCC37E7258E9BD1809EC26C7F58AACA48A97D9191E0AC112A701DEE9A9AAB6371D79FA51269CD53BFF6A826E4D8F85060BF29C4B6A12BCFB176D96978DDE5C0
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":17,"tag_id":10},{"function":"__ogt_auto_events","priority":17,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":12},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":13},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CS

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29998)
Category:	downloaded
Size (bytes):	30067
Entropy (8bit):	5.330889575394809
Encrypted:	false
SSDEEP:	384:6uGCa8fF9iPwVYv2v9/O31oRIIvQZ88WZhmse08AYbjPZCMarl:6tCa6es/G1kLvK88WZe08RbjPZCHh
MD5:	73FB9C1EC3529257764A5DFA18CB8CC6
SHA1:	0A25A4F5367F5996DC97FE4ACF7A7A17518FB88B
SHA-256:	D8DEE7DE9EA6642344745E905D3342D7525D1CF833D144FDA04769C1C5C602DF
SHA-512:	44CFE7298FEAE06409F4039AAFF465A30B997956EAB610EF5F85D4EAB012138006AE29EE4A12EA529B6F7C15CC2E648A82F15E0E0066826DEB68640346A2C64D
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/5765.8b2f620f1d992a6ed884.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[5765],{95206:(e,t,r)=>{r.d(t,{$:()=>n});var i=r(2766);function n(e,t){return Object.keys(e).forEach((function(r){var n,a;t[r]&&((0,i.fp)(e[r])?t[r]=e[r](t[r]):t[r]=(n=e[r],a=t[r],"string"===n?a&&a.toString():"number"===n?Number(a):a),isNaN(t[r])&&delete t.key)})),t}},75765:(e,t,r)=>{var i=r(80296),n=r(45458),a=r(64467),o=r(82284),d=r(28880),s=r(70433),p=r(2766),u=r(63172),c=r(62774),l=r(70041),f=r(39990),m=r(26511),v=r(95314),g=r(81936),b=r(56424),y=r(30416),x=r(35548),h=r(50399),I=r(95206);function A(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,i)}return r}function O(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?A(Object(r),!0).forE

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	105414
Entropy (8bit):	7.980467728914014
Encrypted:	false
SSDEEP:	3072:qTUpeZKa1PoCOwQhWtEy3Hqhul8LbldLx:deZKa2CxQ8H3HqhyoN
MD5:	3264854ED9DA1B814D3D0E811998F09D
SHA1:	D81877B87489E62D9863392D11E4D67A1F9A6DE6
SHA-256:	50022606C1343BCB0A94257BAAFE095C568F7DB7B9324D149E7D3C52F343F39F
SHA-512:	CDE5AA0DAAAAC15E8CD4CDF084D2C9FD060A50884CCED7BC27400EB1ADB42E49C7C2473167EA43EEACE82DBBB4FB2BF386A47857B2EDCD88424F0A76D8AB9208
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.12 (Macintosh)" xmpMM:InstanceID="xmp.iid:AC6DD1AEB01E11EF9A06853712F5DBE0" xmpMM:DocumentID="xmp.did:AC6DD1AFB01E11EF9A06853712F5DBE0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B19686F9B01C11EF9A06853712F5DBE0" stRef:documentID="xmp.did:B19686FAB01C11EF9A06853712F5DBE0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1319
Entropy (8bit):	6.671749213605672
Encrypted:	false
SSDEEP:	24:Pw1hpunQWwh82lYSKw6J1bGVPpT34yJ3VL06uG38oP+JLRrW4o73W:POitvnLBfGppfJ3lduc+fW4oa
MD5:	06500E222CB4C36F129C357FFEF7AD59
SHA1:	1BD74219C7467E46782C9F6D13797B7253E58D4B
SHA-256:	30C065C5189582302F1FC91EDD7F8C99956F6F8BD6C4B242081F41AB1C772B08
SHA-512:	256B3C5CA29A3BDB86CE1CA27DC2DFE78DE31B4593A3C6FFC040944F730615236FBDC865919A97E37816ABFF4E37B5C4AAB9B2086BED3F0BC72809D6BDC46877
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............D.,....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0780117407206811871FA7837B3E38CD" xmpMM:DocumentID="xmp.did:CC1AFB850BC911E085A9DEB3B90B359F" xmpMM:InstanceID="xmp.iid:CC1AFB840BC911E085A9DEB3B90B359F" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0780117407206811871FA7837B3E38CD" stRef:documentID="xmp.did:0780117407206811871FA7837B3E38CD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......WIDATx.b....f.*..t..M...../...\C...[b.cB.

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1392
Entropy (8bit):	4.545780963441986
Encrypted:	false
SSDEEP:	24:hYkCn0Xi53WnyfdWiaM/Njv3igeHa/UfbJijCV6/MBggE4NkIM:BnSUfM/N7JZ/UfdijCY/MB53N5M
MD5:	DA9AD7EE298E6DB286CAD67335082336
SHA1:	9CD10B3C3838D22F110566148A3F51B5D481AA6E
SHA-256:	ECF032983DAB5A976D41E2DF74B6CD6A2DF03343AB6A18F28F36474746646B7B
SHA-512:	E21D8BE1B3961E9FFB3B289B1F40964E1E846FA86F6F47A191AA93ADB9A1729E7D430F76BF333E691FB6D4CF4FADB22109C68813149E144DEC0AA8B43C97BEA7
Malicious:	false
Reputation:	low
URL:	https://creative-p.undertone.com/spk-public/topics_frame.html?bidder=undertone
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <title>Topics demo</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1">. <link href="favicon.ico" rel="shortcut icon">. <script>. async function getTopics() {. try {. if (. "browsingTopics" in document &&. document.featurePolicy.allowsFeature("browsing-topics"). ) {. const topics = await document.browsingTopics();. console.log(. "Called iframe:",. window.location.hostname,. topics,. "\nNumber of topics: ",. topics.length. );. return Promise.resolve(topics);. } else {. console.log("document.browsingTopics() not supported");. }. } catch (error) {. console.log("Error:", error);. }. }.. (async function () {. const topics = await getTopics();. const url = ne

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16664)
Category:	downloaded
Size (bytes):	16665
Entropy (8bit):	5.302009001245546
Encrypted:	false
SSDEEP:	192:GU1krNwY44Xg68CU2dS8kcygRQOeukl0banlxyC0SXIHGGuGqY+AAUgdgKTGvcox:FkGx6VCFAG1GbjjD1AoYy6He/yq/9F
MD5:	F938E5CF59280E13F9597C828FB3B891
SHA1:	39808CA50F57D21E51F0464BB5DA627E743B7CA2
SHA-256:	04DE103E0254B5AC670FAEE52A061486BFBCF2F97946776F6917CE261B18F7C3
SHA-512:	1C0779D569B3F77B4345468361554E4511673FBBD9F31F96173942BB6BAEBE2E354FCC86EA9E0DE65EEFF88D76C4CC26A8E1625D9275DC1AE3AC43080AE42EE3
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/beacon.js
Preview:	var COMSCORE=function(n){var t=function(){return t=Object.assign\|\|function(n){for(var t,e=1,r=arguments.length;e<r;e++)for(var i in t=arguments[e])Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i]);return n},t.apply(this,arguments)};"function"==typeof SuppressedError&&SuppressedError;var e=["co.uk","com.br","com.ar","com.tw","com.mx","co.jp","com.au","com.my","gob.mx","co.id","com.hk","mus.br","com.co","com.sg","com.tr","co.in","net.tw","com.pe","com.ve","co.es"];function r(n,t,e){-1==n.indexOf("?")&&(n+="?");var r=!1;(-1!=n.indexOf("&")\|\|n.length-1>n.indexOf("?"))&&(r=!0);for(var i=0;i<t.length;++i){var o=t[i];for(var u in o)r&&(n+="&"),r=!0,n+=u+"="+c(o[u]+"")}return n=function(n,t){if(n.length>t){var e=n.substring(0,t-8).lastIndexOf("&");n=(n=n.substring(0,e)+"&ns_cut="+c(n.substring(e+1))).substring(0,t)}return n}(n,e),n}function i(n,t){for(var e in t){var r=t[e];r!=undefined&&(n[e]=r)}}var c="undefined"!=typeof encodeURIComponent?encodeURIComponent:escape,o="undefined"!=typeof

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9052, version 1.0
Category:	downloaded
Size (bytes):	9052
Entropy (8bit):	7.976719549027786
Encrypted:	false
SSDEEP:	192:mRpN9NDMyb1e3kgRz3jDhUHbbDoFTVYaMiHU2cSXX8Dyna:mRbHoYylDqHXUFTfZ0u8ea
MD5:	20887D9F20E98DDD041297560BC42E6A
SHA1:	33B3140D7CF72B66D2373635445CF7BE73D18358
SHA-256:	4E37A620FA30DCACE16366B88AD6E85C0BBC8DA22EC7EBF54E692743D87D2F17
SHA-512:	41305D6CDAFC4A00F88D2268A8FC32027C7C74C079DFE1A49932F942EDC7FC05C2C503FA42728F72E3EE41E3176BA9F043953D119A1164BD84C9361F8106E7CD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/leaguegothic/v6/qFdR35CBi4tvBz81xy7WG7ep-BQAY7Krj7feObpH_9ahg9U.woff2
Preview:	wOF2......#\......K\.."..............................,..T.`?STAT@..V....,....V..6.$..$. ..~. ...W=..n.Z. ...g.u...A....1.d.(.h.....G....c.nOwV...y..-....v.r..F...._....{f7H....evd..P...9v.c...n5.....AB.!..-TI.!.@)..Z:%..j..v.T..bkX.<..q.s.r.r....P.:.,4g.z6....^]..H.7..c..c\/..,..[.M..."....{.L...#.,...5....`.Hm...).R.3.D.......?.ei..n..5..k..A..$...zT.K%.......Y...fL..z..d`.....@Ar.....].\...;?.}.HW...f.. .0..Z....C..+..z...Cv.X.p........./.l.m`P . ~"@p.Ab.@.. R. .. m....}......?. 0."....[..lD.B...g..?.d....oZ.BA7_.@....I.J.e.wV.....lW...ZjZh..;.teM.e&.r(...,4+ff.X./.w..0....&.-`.........d...#..._.T.g..B.......G...G.~.=J.0.......%0.};.5...........).F......x.$.d.4...2..T.]/...F..I.# ..;^.c..p...\..T*..M..mq8.r.......n[..a......?I...3...:.f^....j..H..5&+..........d6..p.......7.....hjz....NQ......V...^;......O....n(..j...,.W......~.(ZvL.&......f..M......A....!HA..(!.. .5.Jp.%..%OueP..K..n....HX.sva.g.@.....\........e.x....5.w.!...\...]....t..\..!l

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.776361897036138
Encrypted:	false
SSDEEP:	3:YxhA9RcSvH8udcqUE/AihCNNpAcANQDxPmvEfQsVHYn:YnevH8udJIihWAcANQtPpN4n
MD5:	F62F76328E2E3E841059E093AEEC14C0
SHA1:	C6C45825264D3B717DCB563B60D053D0EABB8900
SHA-256:	D1E81C95FA8CC66BBBB3D4859154BD26E2A2084E59736A4C909BA18778422499
SHA-512:	E71D641333B4BAA343595254C27525C7C5FAF0F32375DC71F8FD20442521CB6FFA8563BBC51868BE06AF36E844976EFBA6D5DED6ED3C9E412564E09AED7F7836
Malicious:	false
Reputation:	low
Preview:	{"TDID":"463397e6-b0c8-4b21-89c4-302650a8da7e","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-11-12T18:57:37"}

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	148
Entropy (8bit):	5.009364920866637
Encrypted:	false
SSDEEP:	3:klV1QeykMKscklHKKK2fkqiSNcBxz2Tcy9RwRACQsE4iMVEk+:kbyDFlHKmfkqL+zBdAJsUdk+
MD5:	EC73CC43FCDBF30FDA094DBFFBBE9999
SHA1:	2A324745060BE4C38F4D54BCAF7974DCDD497109
SHA-256:	101FF8CAF200C8D6C2C99A33721BC3F1E0C27C71ADDCF6C9F98A14590F3626E1
SHA-512:	61C9A8F7C8E53EF955845E25C04FE5E8D75D78F5E0A127505FAF865F09C5B455A33CB0F38990EFDF0EDF8345C3F77E7A32BC6C8BF540E667E50D8C95FA814CD3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkifSGhMfkcphIFDc8jKv8SBQ2ailBYEiUJmijajE4Bzn8SBQ3njUAOEgUNzkFMehIFDTBC6yISBQ2DqFs9?alt=proto
Preview:	CisKCw3PIyr/GgQIVhgCChwNmopQWBoECEsYAioPCApSCwoBQBABGP////8PCj4KCw3njUAOGgQIVhgCCh0NzkFMehoECEwYAioQCApSDAoCQCMQARj/////DwoHDTBC6yIaAAoHDYOoWz0aAA==

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4422)
Category:	downloaded
Size (bytes):	4423
Entropy (8bit):	5.790622210643764
Encrypted:	false
SSDEEP:	96:LQpifVWeNroly6ZKL+p9h6VFwy4vrrmte4vIC1v8MOR:ZEo6wM+Pm4vICVCR
MD5:	7E9A189699299E4AAF235333BF0EE814
SHA1:	E9439A17160CEF14882F6E82379DF00C389AA125
SHA-256:	AE02A2C83066BA3B5027B064E548B3BDD367BFE4386C64118D0BB1F4B0588088
SHA-512:	F4313C112A342BEC60BD4E14BE1FADC895F3B4A54F71EF84177B9F1518957EBD2FE4DAEE369F8EDA7F94ACE1B2D5BCC8CE4B3DF4FD654E92577E6830CB09A091
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/infolinks_main.js
Preview:	eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('(10(){5(3.1J){y}3.1J=19;6 K=7.1O("3l");6 U=L("2C");5(U&&U===3A&&13.1j()>=0.4){y}5(3.1a.3h=="34-20-1W.1e"){h();y}6 W=3;6 X=1x;1d{5(3.z&&3.z.1a&&3.z.7&&3.z.7.1b&&3.1u!==3.z){W=3.z}}1i(o){5(3.$1Z&&3.$1Z.2k){W=3.1u;X=19}9{1A.1y("1g 1U 2X 1f 1W 2i 2P 2R 1U 2m 2L.");y}}6 g=2u.2p.2q(),Y=10(q){12(6 r=0,e=q.x;r<e;r++){5(g.1C(q[r])!=-1){y 19}}y 1x},R=Y(["2G","2I","2O","2v","2x 2y","2t 2z","2A"])?"2B":"",Z="29"+R+".17",C=3["2o"];6 p=L("2E");5(p&&R){y}6 B=L("2F");5(B&&!R){y}10 b(){1d{y 3.1u!==3.z}1i(i){y 19}}10 L(e){y 3[C+"2h"+e]\|\|3["1I"+e]\|\|3["2J"+e]\|\|(3["w"]&&3["w"][e])\|\|1F}10 P(t){6 s=t.1S(/[&]/);12(6 r=0;r<s.x;r++){6 e=s[r].1S("=");5(!e\|\|e.x!=2){2N}6 q=1T(e[0]);6 u=1T(e

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1464)
Category:	dropped
Size (bytes):	1533
Entropy (8bit):	5.491946675382982
Encrypted:	false
SSDEEP:	24:U+2hCDzl0VL5yFrzKLbAKsBn45aqFGqHJYJ3DZaBoRFsc3Nb9VMNXBb8GEzN5PB+:UXMz+IXKyqF+3FlRFsINRCX4D33Mjbjn
MD5:	252313E3F85771974AA18C2916FD6266
SHA1:	50F0359A4C3EDFB9C902564D6A037B18018964AD
SHA-256:	894554C545AB6A0BEE47EC36BA3C5191476F7569A1D736B31390078A91B0FDBD
SHA-512:	0C75CAB73E6DD6DC96BF2462F4C98547CAA6251D1601D540BC991A122E8308B114557B1ED80FE18F4C43F04124C7447427477DA73366A9B57470894A721088BF
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[3774],{56505:(e,t,n)=>{n.r(t),n.d(t,{default:()=>o,getAppNexusPlacementID:()=>g});n(82253);var s=n(18269),a=n(83904),r=n(64785),p=n(47516),i=n(66426),u=n(72327),_=n(13158),d=n(60118);const c="appnexus";function g(){let e=(0,p.qz)("sk_appnexus_placement_id");if(e\|\|(e=function(){const e="appnexus_custom_pid_",t=`${e}mobile`,n=`${e}desktop`,a="_coppa";return(0,i.Kw)()?u.A?s.A.get(`${t}${a}`):s.A.get(`${n}${a}`):u.A?s.A.get(t):s.A.get(n)}()),e)return e;const t=s.A.get("sk_owned"),n=s.A.get("sk_affiliate");return(0,i.Kw)()?t?16813336:n?16813334:16813335:t?9872823:n?9872893:9802904}function l(e=!1){return e?`${c}_postbid`:c}const o={getBids:function(e,t=!1){if(!(0,_.vx)(l(t)))return{};const n=g(),p=s.A.get("appnexus_id_mapping")\|\|null;return n\|\|p?e.reduce(((e,t)=>{let i;if(p){i=((0,r.A)(p,t)\|\|{}).placementId}else i=n;return i&&

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1748)
Category:	downloaded
Size (bytes):	3596
Entropy (8bit):	5.444209745064718
Encrypted:	false
SSDEEP:	96:YY7YNYR1m5ABePKTBxj6kDxx12yS1M9O84itGGyBoirdxM6j:t86+A4STflDp9B4YL8oi5xM6j
MD5:	D92FD68178888768C733A4365A56FC3D
SHA1:	55916ED75FD5C9DF0A7447298E2BCA559CC9583A
SHA-256:	E573D7D4E3679F1D578E544C5B807AA4FF21E208BAF12E48AA0D09B2B3938F04
SHA-512:	37CAEE932A7038636D84720960420E701C7659C873188CA400EE0196868D9C5A09BB31F566699ACF54DB0F0FC42BD769F1A141A213C2127C38CE839DACCA8BE5
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self;/ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 .*/ .var f={};function g(){if(f!==f)throw Error("Bad secret");};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function k(a){return a.toString().indexOf("`")===-1}const l=k(a=>a``)\|\|k(a=>a`\0`)\|\|k(a=>a`\n`)\|\|k(a=>a`\u0000`),m=h``&&h`\0`&&h`\n`&&h`\u0000`;let n=globalThis.trustedTypes,p;function q(){let a=null;if(!n)return a;try{const b=d=>d;a=n.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(b){throw b;}return a};var r=class{constructor(a){g();this.g=a}toString(){return this.g+""}};function t(a){p===void 0&&(p=q());var b=p;return new r(b?b.createScriptURL(a):a)};var v=class{constructor(a){g();this.h=a}toString(){return this.h}};new v("about:blank");new v("about:invalid#zClosurez");const w=[];var x=a=>{console.warn(`A URL with content '${a}' was sanitized away.`)};w.ind

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27167)
Category:	dropped
Size (bytes):	27234
Entropy (8bit):	5.291349126173373
Encrypted:	false
SSDEEP:	384:SEeQjQu7Rjm2v1LhOwcKa8JvxdjSs9OEux51yhuRA7/cYW4lqKru6KqGylUowFZo:ug1LhUKnvXbKx51yhuRA7/cYHRj/k/g
MD5:	28B2DBDB03F096998A381F6126DDAC4C
SHA1:	19341E54053EA3B597AE7F2C2B4E9361EB92C99E
SHA-256:	469C3C3EBE581ECB1A3C893D20B642BBC014912693D13CC2BFD54DE246E12C1D
SHA-512:	822C62E2CC8924F35539C372792336606E296519A462350F76E3D5827C9C4FB222BEC96310EB671DFD0A1AB0A0F7FA61982C90BC67C950002176380216FABA26
Malicious:	false
Reputation:	low
Preview:	/! For license information please see ta.c34341.js.LICENSE.txt /.(()=>{var t={531:(t,e,r)=>{"use strict";var n,o,i,s,a,c=r(362),u=r(293),h=r(472),f=[],l=window.document;function p(){}function d(t){f.push("responded "+JSON.stringify(t))}function y(t,e,r){var l,y,m,b,v,g=window!==window.top,w=window.location,_=a\|\|w.search;h.isBot()?f.push("is a bot page load"):h.is404NotFound()?f.push("is a custom 404 page"):n&&n===t?f.push("pushState did not change the location"):(n=t,_&&_.length>1&&"?"===_[0]&&(_=_.substring(1)),setTimeout((function(){i?(l=i(),m=l.canonical,y=l.meta\|\|{"og:url":l["og:url"],"og:type":l["og:type"]}):(m=c.canonical(),y=c.meta()),b=c.openGraphURL(y),v=y["og:type"],g&&(_=void 0,e=s),(o&&o(m,b,e,v,y)\|\|function(t,e,r,n,o){if(!t&&!e)return f.push("missing both canonical and og:url meta data"),!1;if(r){if(t&&0===r.indexOf(t))return f.push("reload with matching canonical"),!1;if(e&&0===r.indexOf(e))return f.push("reload with matching og:url"),!1}return c.isValidPageType(n)?!c.i

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	224461
Entropy (8bit):	7.97493054163192
Encrypted:	false
SSDEEP:	6144:TRvIza67TTj1ugwLcAJxQFI8J1KAyXUkVco9wM94C:TqzF7Tn1u/3YFIk1r5Wco9D
MD5:	1BBE8C5517B32A55FF85F54B12735411
SHA1:	5E8E73735C9B31AEA73EC08A854AA13BCAEAC47D
SHA-256:	ECF9F3945ADD94EA01E93B211AE2A99F3E1DB1A3B5E31CE3963CCE5E6F95B707
SHA-512:	F2ADBFA1A5994781F77111A4704CA5C99408D3BAA016919B7DDFCA6B8B62A2D4A7B37924B6489EE867B20335263653195CF4E3BF0873F5966F1FC886DE2362A2
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......C......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92" xmpMM:DocumentID="xmp.did:0B01C14A933411EF80FCF1785A390697" xmpMM:InstanceID="xmp.iid:0B01C149933411EF80FCF1785A390697" xmp:CreatorTool="Adobe Photoshop 25.11 (20240619.m.2671 4c88022) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92" stRef:documentID="xmp.did:e2ea2f3b-1bab-4bbf-80bb-947b33ffec92"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	304252
Entropy (8bit):	7.982025669231412
Encrypted:	false
SSDEEP:	6144:3ej2aVMQ8XX7jO7fanAowfj5/6Tw2BZGj0otokYmlC0FKh1M0XszZllUiDE3f0Sb:3epVoXXoMAffj5/FSRoto8CwKhzXsdrG
MD5:	7874E2F117BD09579EDA4F8129364C2A
SHA1:	5DF2E6101FAB6B60C94B803B51AF6B4EDEC84844
SHA-256:	25E1FF3C9C2D99C35FFE93A79D73F55A6427A0E8025EC797F213153FA84978AB
SHA-512:	99DF2EDC034B94779BDF73ED150211EAD4E5D9911A5FE1018637B8EBBA8CBEE1D351410D429043CBCA656DB721C918374ACE6E4314513808DB3CC1C05641EB9A
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/10/034340/87645737/line-thumb.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.840714485642807
Encrypted:	false
SSDEEP:	3:YxhA9RcSvH8udcqUE/AihCNN7kYCiNQDxPluQsXHY:YnevH8udJIihEkYCiNQtPluP4
MD5:	F6FF163078FAB83357B1FB133AEF0106
SHA1:	74C3EDC5453C0DDF23C63AA97F622F3B48C38DAC
SHA-256:	D20DFFE2F9F058500F7BBEEAC6C81DB649233A9E512B0BFA6D1BC8B1619B03CE
SHA-512:	38D1C0AD63ECC4E6760D802302459F048BD535060C6F2C40414CE9B22FA5CEFA4FA750A135B1715D9642A1C857985672CBD1E988EB50FE1D43680389766ED04E
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
Preview:	{"TDID":"463397e6-b0c8-4b21-89c4-302650a8da7e","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-12-12T18:57:35"}

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1247
Entropy (8bit):	6.701701144387247
Encrypted:	false
SSDEEP:	24:HYy1he91Wwjx82lY2T3ouVuMaKV/yJ3VHXxMKHzEGNBT5Kx/4kAKoS6:4wqQNn2x9kJ3to216AfKl6
MD5:	8C43D5C5B37D64342AA20BDC6CB9FF14
SHA1:	7C64B036CFA4068D5341CFBA87FF29B4E0225519
SHA-256:	8D6EF1FCD4076E06BD58B6B81AED92091DE7219BEF0D74DC9DC929906A3C6724
SHA-512:	FFC708FEE0440873CEDBB79793AAE746B1F43ED00AB1AF7E1690261BEC79717B6D3D2D538D42AC31AF69DEF4418DEA6BFCDC28FECFDA22828994771DFF7D92FE
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/img/desktop/modalClose.png
Preview:	.PNG........IHDR..............sO/....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B9C5175B485D11E5B9D0D23D567692E7" xmpMM:DocumentID="xmp.did:B9C5175C485D11E5B9D0D23D567692E7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B9C51759485D11E5B9D0D23D567692E7" stRef:documentID="xmp.did:B9C5175A485D11E5B9D0D23D567692E7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.^f....SIDATx..K(Dq...;w..........a...ll.kc%YX(....aa.d.(J."J.(e/.IY.c!Yx\|O...v.;..3...s......3......ON.O.;........d..

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	71099
Entropy (8bit):	5.342304555498012
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicIWxE:RIT7Vs9ZVKBYj8wKcHIh
MD5:	32CA6B13500D72705B6C05FCA14012FC
SHA1:	430995DE4B65A355BE8DF1B7DB9383178A765227
SHA-256:	54096C9B836B087B2FDFD57A3682CD53CE7E593C965490348BFF36976BF0F670
SHA-512:	DF6B2CC72E862B3E6274F35EE1D83D2A0128764E2EAC0B0DCAE31187F8FA6BE65A52651ACBE93AC25FE118BC70EA10E0C99AD8CF76F57376EA6CEEF791D4F17E
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/880446388736817?v=2.9.178&r=stable&domain=ebaumsworld.com&hme=28abfdc7e582ae2a8fdd6ac5ebb406923cf601dc2ee488049b0628e75e0f6b36&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2738)
Category:	dropped
Size (bytes):	2807
Entropy (8bit):	5.4339040262679426
Encrypted:	false
SSDEEP:	48:UWiLQPxez1gnlDMjWNJT/jjLhF2vVpFZRF/QrbzD5SY7rbt5jj3i:diLWugl5fuvVV/Qrbn5SwrbzjjS
MD5:	1D279F05FD422B4622A908CF3CAFCC47
SHA1:	DE363BB3B844D2B161EACBE087692B3E938A6D8B
SHA-256:	38A3C87A22AF224F21AEF8445164606EADC3CE7EBF181E5029D5461D3F097960
SHA-512:	0821C73212FF7124A18EABA25E544186099D72F4CC7A188E9AC7A34F8130E4C0709503E2EBEF0F3DFFAA3A244B13025E6FB59EE9ED87FC28BAD0A98BDB601E84
Malicious:	false
Reputation:	low
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[5450],{5450:(e,t,o)=>{o.r(t),o.d(t,{default:()=>k,getIndexExSiteID:()=>c});o(75765);var d=o(18269),s=o(81257),i=o(64785),p=o(66426),l=o(72327),n=o(34828),m=o(13158);const b="indexex",r=b,a="ix",x={"728x90":{coppa:{"1st":{mobile:384741,desktop:384740},"2nd":{mobile:384751,desktop:384750}},default:{"1st":{mobile:211442,desktop:211441},"2nd":{mobile:211452,desktop:211451}}},"300x250":{coppa:{"1st":{mobile:384743,desktop:384742},"2nd":{mobile:384753,desktop:384752}},default:{"1st":{mobile:211444,desktop:211443},"2nd":{mobile:211454,desktop:211453}}},"300x600":{coppa:{"1st":{mobile:384745,desktop:384744},"2nd":{mobile:384755,desktop:384754}},default:{"1st":{mobile:211446,desktop:211445},"2nd":{mobile:211456,desktop:211455}}},"970x250":{coppa:{"1st":{desktop:384746}},default:{"1st":{desktop:211447}}},"320x50":{coppa:{"1st":{mob

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	520
Entropy (8bit):	4.32383914546961
Encrypted:	false
SSDEEP:	6:ArM0DlTm5cvu4I11kGAyEWf2Qz9W0gMG3LyDTpQegBWyENhZ:QzD9m5cvo11kG9DG3NBHEXZ
MD5:	648E4917BC5F4C8FE5498014930E83B9
SHA1:	17AAFFE3FB76E9A91E5AFBD0D199CF6C744313F9
SHA-256:	6BCB0B26C3CF3602FEED634AEC703CE4E8433DA448BC01D60BE783D066858C5B
SHA-512:	78F700585AB0726E46D371D90C6686A6AE129826DCDCA43D6296A38D517624FDF75F4B48B77990B7C8361B83DC70EF48AD62203A8874D7849D69C37840FCF41D
Malicious:	false
Reputation:	low
URL:	https://cdn.speedcurve.com/js/lux.js?id=780806559
Preview:	console.log("SpeedCurve RUM error 200: The SpeedCurve account linked to the `id` parameter is not active.");LUX = (function () {. return {. addData: function () {},. cmd: function () {},. doUpdate: function () {},. forceSample: function () {},. getDebug: function () {},. getSessionId: function () {},. init: function () {},. mark: function () {},. markLoadTime: function () {},. measure: function () {},. send: function () {}. };.})();.

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5647)
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	5.546604696057645
Encrypted:	false
SSDEEP:	96:euWaCmmku4wh5Wjg4bfIX5jch828cInOhfYzVAexeZCp+xPvF1zj:NjS4i50TfIXeh8vef4VAe8a+FNJj
MD5:	94918A2321B72368FDFE5B171AA653CD
SHA1:	98B7880B6C2A5FED14B55458E175424D34FDCD69
SHA-256:	E86479D6E54449D1085C2149E190A615C6BEAD407B20BACBCF5852B5D65F1FEE
SHA-512:	9C9616CCBC9765F4E825F6B57FBA35E57B97B5EF5F51E88A5FE6D44BF22EDBEE1A52975F3311FE25D2CA65837B34DCB51CC2E00F02410C54A3AEEE6A2C17E255
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-37/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){var n=this\|\|self;var w={};var y=function(a){y[" "](a);return a};y[" "]=function(){};var B=null,G=function(a){var b=a.length,c=3b/4;c%3?c=Math.floor(c):-1!="=.".indexOf(a[b-1])&&(c=-1!="=.".indexOf(a[b-2])?c-2:c-1);var d=new Uint8Array(c),f=0;C(a,function(g){d[f++]=g});return d.subarray(0,f)},C=function(a,b){function c(q){for(;d<a.length;){var e=a.charAt(d++),k=B[e];if(null!=k)return k;if(!/^[\s\xa0]$/.test(e))throw Error("Unknown base64 encoding at char: "+e);}return q}H();for(var d=0;;){var f=c(-1),g=c(0),h=c(64),p=c(64);if(64===p&&-1===f)break;b(f<<2\|g>>4);64!=h&&(b(g<<4&240\|h>>2),64!=p&&b(h<<6&192\|p))}},H=function(){if(!B){B={};for(var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),b=["+/=","+/","-_=","-_.","-_"],c=0;5>c;c++)for(var d=a.concat(b[c].split("")),f=0;f<d.length;f++){var g=d[f];void 0===B[g]&&(B[g]=f)}}};var I=function

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	downloaded
Size (bytes):	503867
Entropy (8bit):	5.512590647226025
Encrypted:	false
SSDEEP:	6144:VA+dtQf2iTXNrXIhgKQ0XCS77EDIFfuZBuXKl1T2EFi+B:qTfD6H/EauZBual1T2Ej
MD5:	14D570E2B18EDB45C60D292320C92D9F
SHA1:	F33FB3E83C6894F590C8C9348B11FAC2E6827EE8
SHA-256:	04D85FDAA240E9C6964C1B3AFE75B8802720A8D9A98E6C35F346F599B1113AF4
SHA-512:	43DD920A68256864EE489B222AC5823F5EB597071E7832D935257E1D484E84146C09BEEEEE384F38CEA25FCF489BED02AB76DE420CD66E9131AC445075F53A69
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202412090101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ca,ea,ja,xa,za,Ea,Ga,

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.721611723969903
Encrypted:	false
SSDEEP:	3:h4rtrsn:exs
MD5:	865261967AFE3D535CEA1A6F3C9B8E9F
SHA1:	4199F34CE97E1E5089BE2E9ADB10555691B0029C
SHA-256:	A1246500E54878521C20EACA060CDBFF39B403619B4751D39BF8828246D51309
SHA-512:	A09DBDB09704D24C3C10E01341D5B6AA63152D37BBC82F2AC62BFE6E8E518608F951C154A7C933AF92074F87188AF1F9E4A27AE135EBA009FFB8DD669303A0D3
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid/97371.8/0/prebid?adunitid=$rs_300x250_$ri
Preview:	amznads.aaxPunt({})

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2593)
Category:	downloaded
Size (bytes):	2662
Entropy (8bit):	5.434769447218296
Encrypted:	false
SSDEEP:	48:USPc9JJFGsEF59XAeCFj8fJ9+MpwoRFczTRF8c8436XHP3QUKh9ybApZ:8Jya94jOHb89XPVAH
MD5:	CBA064207111AD66A0CFDBA12702E16C
SHA1:	30FC197712CD43549A705848CBCD8ED886CDACFC
SHA-256:	487719C8CF31F60D3B6D47AF673839B93FEE1EAB305251862D72DE7AA6C8B11D
SHA-512:	86021DA446827BF2AF26940C3781AA5456262360AB44B354BBE0A950C7C3AACD667BC0D8C6F4ECCCEADDB3C0524CF1A09B5B78A78EBB7116AB905B113433EA28
Malicious:	false
Reputation:	low
URL:	https://ads.blogherads.com/static/chunks/5341.c2ad6c81fa789c61d03f.js
Preview:	/* Copyright 2024 Penske Media Corporation. All Rights Reserved. */."use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[5341],{51334:(e,o,t)=>{t.r(o),t.d(o,{default:()=>u});t(82253);var l=t(18269),_=t(83904),r=t(66426),i=t(72327),a=t(7947),p=t(13158),n=t(60118);const s="appnexus",d=`${s}_video`;function m(e){if(!["preroll","outstream","midroll"].includes(e))return null;const o=function(e){const o=i.A?"mobile":"desktop",t=(0,r.Kw)()?"_coppa":"";return"outstream"===e?l.A.get(`appnexus_video_pid_${o}${t}`):l.A.get(`appnexus_video_pid_${o}_${e}${t}`)}(e);if(o)return o;const t=l.A.get("sk_affiliate"),_=l.A.get("sk_owned");return{mobile_affiliate_preroll:15937432,mobile_affiliate_preroll_coppa:16831681,mobile_affiliate_outstream:13227730,mobile_affiliate_outstream_coppa:16831679,"mobile_nonO&O_preroll":15937203,"mobile_nonO&O_preroll_coppa":16855858,"mobile_nonO&O_outstream":13227728,"mobile_nonO&O_outstream_coppa":16855851,desktop_affiliate_pre

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	43576
Entropy (8bit):	7.937586884944373
Encrypted:	false
SSDEEP:	768:0gJE+lxCe5RT70MKnd3Bors2f4jcO0ITcY4TGBGMqLeTTFLXyD4NYd4bM00y:0GNxB57Cd3Gdf4oIgYlBGMC8xieYd4bN
MD5:	D339885841838020FCDE8F0D5E44F590
SHA1:	79F5B5B18E4A34710E4C8EC1EAB91C7ABE37952B
SHA-256:	FD9050BB4EF3D82619124D4953E9AA17CFF784AE8F4B71BD092F854835D1DB90
SHA-512:	EE8A15329CA1B5DDB6C57C50F8BD56153ABDEA2F1587C0974C7708E8199CBC4776C765D1EE3965F0948887D7790190C9E65BE93CB460A50D5C59B71C7B5DAA24
Malicious:	false
Reputation:	low
URL:	https://cdn.ebaumsworld.com/thumbs/2024/12/09/024708/87644924/pawnshops-thumb.jpg
Preview:	......Exif..II*.................Ducky.............2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:98E947E0AE7211EFA058DC3D23086757" xmpMM:DocumentID="xmp.did:98E947E1AE7211EFA058DC3D23086757"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:98E947DEAE7211EFA058DC3D23086757" stRef:documentID="xmp.did:98E947DFAE7211EFA058DC3D23086757"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................'..'2&.&2.&&&&.>55555>DAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDDDDD.... . &..&6& &6D6++6DDDB5BDDDDDDDDDDDDDDDDDDDDD

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1301
Entropy (8bit):	7.568569085501947
Encrypted:	false
SSDEEP:	24:5f+U9YMWjo0XxDuLHeOWXG4OZ7DAJuLHenX3zh72ON5TiSXWT8odXmpd7RTG:5fh9YMLuERAhddN5+goN0d1q
MD5:	1F6751C82D17443F5BD0721739C53728
SHA1:	CCD649434F1AEB434464A1C24AA3D62E2A481C11
SHA-256:	9C56224CB0AA13EC3B7049C0291C24DC6BF15524B48B686D4EC8CA39CB880BBD
SHA-512:	D0A070C0166B4EB9C2C4639DF8BFCA4FC865E9DF8EEBC8F00C98729B606D620D48D0202BA108DF3ACD0ACAC3E3515E397B7E997DDD8E9CFD595D0F8F42A42D0E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...y.~O.Ki..p..pk9.$.Fj&..?.....Mr{.mY..S.Vh.m..nH..}.^+;yF..A.2.u...#..a.Kn@f$zW%l..zl......t...A..~.....#..h...P.,...j..m... ....3.&.3....,.O.7.(..`.G.......#.]....Q.=+....M.t..+....o..^..Z[r......L..............v.GZ..y....YY......<j..e.......r..[-J[0..m.6.n....Z....i.mwy.m;..Q.A8...\.q$O.x..s..

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 12, 2024 19:57:11.908405066 CET	192.168.2.5	1.1.1.1	0xf855	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:11.908545017 CET	192.168.2.5	1.1.1.1	0x51b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:12.768548012 CET	192.168.2.5	1.1.1.1	0x1218	Standard query (0)	ebaumsworld.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:12.768717051 CET	192.168.2.5	1.1.1.1	0xd226	Standard query (0)	ebaumsworld.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:14.448014021 CET	192.168.2.5	1.1.1.1	0x6f05	Standard query (0)	ebaumsworld.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:14.448131084 CET	192.168.2.5	1.1.1.1	0xe635	Standard query (0)	ebaumsworld.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:17.026774883 CET	192.168.2.5	1.1.1.1	0x3377	Standard query (0)	cdn.ebaumsworld.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:17.027014017 CET	192.168.2.5	1.1.1.1	0xc493	Standard query (0)	cdn.ebaumsworld.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:17.758836031 CET	192.168.2.5	1.1.1.1	0x8475	Standard query (0)	s.ntv.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:17.758977890 CET	192.168.2.5	1.1.1.1	0xdeac	Standard query (0)	s.ntv.io	65	IN (0x0001)	false
Dec 12, 2024 19:57:20.412103891 CET	192.168.2.5	1.1.1.1	0x9f4f	Standard query (0)	z-na.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:20.412103891 CET	192.168.2.5	1.1.1.1	0x691b	Standard query (0)	z-na.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:20.413542032 CET	192.168.2.5	1.1.1.1	0x1d19	Standard query (0)	cdn.ebaumsworld.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:20.413666964 CET	192.168.2.5	1.1.1.1	0x97c8	Standard query (0)	cdn.ebaumsworld.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:20.773818016 CET	192.168.2.5	1.1.1.1	0x3081	Standard query (0)	z-na.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.606838942 CET	192.168.2.5	1.1.1.1	0x4ca6	Standard query (0)	ebaumsworld.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.606952906 CET	192.168.2.5	1.1.1.1	0x45dc	Standard query (0)	ebaumsworld.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:21.667318106 CET	192.168.2.5	1.1.1.1	0xac31	Standard query (0)	s.ntv.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.667318106 CET	192.168.2.5	1.1.1.1	0x446	Standard query (0)	s.ntv.io	65	IN (0x0001)	false
Dec 12, 2024 19:57:21.668746948 CET	192.168.2.5	1.1.1.1	0x45a1	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.668876886 CET	192.168.2.5	1.1.1.1	0xcca1	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:21.731976986 CET	192.168.2.5	1.1.1.1	0x3ce4	Standard query (0)	memorizematch.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.732115030 CET	192.168.2.5	1.1.1.1	0x93c9	Standard query (0)	memorizematch.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:24.056160927 CET	192.168.2.5	1.1.1.1	0xa61f	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:24.056162119 CET	192.168.2.5	1.1.1.1	0x1d2f	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.264053106 CET	192.168.2.5	1.1.1.1	0xe896	Standard query (0)	static.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.264053106 CET	192.168.2.5	1.1.1.1	0x18d7	Standard query (0)	static.adsafeprotected.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:24.271915913 CET	192.168.2.5	1.1.1.1	0xbd69	Standard query (0)	memorizematch.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:24.271915913 CET	192.168.2.5	1.1.1.1	0xd50e	Standard query (0)	memorizematch.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:25.292515993 CET	192.168.2.5	1.1.1.1	0xd314	Standard query (0)	sdk.mrf.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:25.292515993 CET	192.168.2.5	1.1.1.1	0xda5e	Standard query (0)	sdk.mrf.io	65	IN (0x0001)	false
Dec 12, 2024 19:57:26.470418930 CET	192.168.2.5	1.1.1.1	0x6acb	Standard query (0)	static.chartbeat.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:26.470541000 CET	192.168.2.5	1.1.1.1	0x1955	Standard query (0)	static.chartbeat.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:27.273901939 CET	192.168.2.5	1.1.1.1	0x1f5c	Standard query (0)	ads.blogherads.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:27.274099112 CET	192.168.2.5	1.1.1.1	0xed19	Standard query (0)	ads.blogherads.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:27.275118113 CET	192.168.2.5	1.1.1.1	0x6fda	Standard query (0)	literally-media.videoplayerhub.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:27.275245905 CET	192.168.2.5	1.1.1.1	0x613f	Standard query (0)	literally-media.videoplayerhub.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:27.884632111 CET	192.168.2.5	1.1.1.1	0xac0e	Standard query (0)	api.b2c.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:27.884990931 CET	192.168.2.5	1.1.1.1	0x3a30	Standard query (0)	api.b2c.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:29.105330944 CET	192.168.2.5	1.1.1.1	0x4b8f	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.105483055 CET	192.168.2.5	1.1.1.1	0xa91d	Standard query (0)	btloader.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:29.393996000 CET	192.168.2.5	1.1.1.1	0xb996	Standard query (0)	static.chartbeat.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.394175053 CET	192.168.2.5	1.1.1.1	0x6f99	Standard query (0)	static.chartbeat.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:29.586930037 CET	192.168.2.5	1.1.1.1	0x15e5	Standard query (0)	mab.chartbeat.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.587038040 CET	192.168.2.5	1.1.1.1	0xb93f	Standard query (0)	mab.chartbeat.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:29.610214949 CET	192.168.2.5	1.1.1.1	0x1db7	Standard query (0)	ads.blogherads.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.610333920 CET	192.168.2.5	1.1.1.1	0xa553	Standard query (0)	ads.blogherads.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:30.149094105 CET	192.168.2.5	1.1.1.1	0x9a33	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.149265051 CET	192.168.2.5	1.1.1.1	0x437	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:30.149669886 CET	192.168.2.5	1.1.1.1	0x8a3a	Standard query (0)	api.b2c.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.149669886 CET	192.168.2.5	1.1.1.1	0xd656	Standard query (0)	api.b2c.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:30.716274977 CET	192.168.2.5	1.1.1.1	0xdd51	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:30.716274977 CET	192.168.2.5	1.1.1.1	0x644f	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.730458021 CET	192.168.2.5	1.1.1.1	0xbea	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.730458021 CET	192.168.2.5	1.1.1.1	0xf09b	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:31.386656046 CET	192.168.2.5	1.1.1.1	0x260a	Standard query (0)	bt.dns-finder.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:31.386909962 CET	192.168.2.5	1.1.1.1	0xba6e	Standard query (0)	bt.dns-finder.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:31.410218954 CET	192.168.2.5	1.1.1.1	0x94ce	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:31.410482883 CET	192.168.2.5	1.1.1.1	0x5d68	Standard query (0)	btloader.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:33.050237894 CET	192.168.2.5	1.1.1.1	0x1c0c	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.050772905 CET	192.168.2.5	1.1.1.1	0xdde0	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:33.314230919 CET	192.168.2.5	1.1.1.1	0x3c0e	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.314506054 CET	192.168.2.5	1.1.1.1	0x1377	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:33.323586941 CET	192.168.2.5	1.1.1.1	0x9112	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.323846102 CET	192.168.2.5	1.1.1.1	0xbf4c	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:33.325544119 CET	192.168.2.5	1.1.1.1	0x876e	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.325825930 CET	192.168.2.5	1.1.1.1	0xa48a	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:33.330166101 CET	192.168.2.5	1.1.1.1	0xefed	Standard query (0)	id.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.330429077 CET	192.168.2.5	1.1.1.1	0x8f2e	Standard query (0)	id.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:33.333383083 CET	192.168.2.5	1.1.1.1	0x838c	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.333720922 CET	192.168.2.5	1.1.1.1	0x3657	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 12, 2024 19:57:33.440853119 CET	192.168.2.5	1.1.1.1	0xc444	Standard query (0)	t.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.440854073 CET	192.168.2.5	1.1.1.1	0x3682	Standard query (0)	t.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:34.076489925 CET	192.168.2.5	1.1.1.1	0x8e88	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:34.076489925 CET	192.168.2.5	1.1.1.1	0x4d7f	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:34.297009945 CET	192.168.2.5	1.1.1.1	0x3497	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:34.297182083 CET	192.168.2.5	1.1.1.1	0xf3ad	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:34.450141907 CET	192.168.2.5	1.1.1.1	0xc20e	Standard query (0)	bt.dns-finder.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:34.450299025 CET	192.168.2.5	1.1.1.1	0x2a87	Standard query (0)	bt.dns-finder.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:35.394783020 CET	192.168.2.5	1.1.1.1	0x2899	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.394922972 CET	192.168.2.5	1.1.1.1	0x7bed	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:35.395389080 CET	192.168.2.5	1.1.1.1	0x6798	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.395534039 CET	192.168.2.5	1.1.1.1	0xf090	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:35.427777052 CET	192.168.2.5	1.1.1.1	0xf4c1	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.427917957 CET	192.168.2.5	1.1.1.1	0x4ae9	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 12, 2024 19:57:36.221929073 CET	192.168.2.5	1.1.1.1	0xed29	Standard query (0)	t.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:36.222063065 CET	192.168.2.5	1.1.1.1	0x9c7b	Standard query (0)	t.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:37.459955931 CET	192.168.2.5	1.1.1.1	0x3b50	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.460109949 CET	192.168.2.5	1.1.1.1	0x41ac	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:37.461606979 CET	192.168.2.5	1.1.1.1	0x3ba4	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.461728096 CET	192.168.2.5	1.1.1.1	0xc1ad	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:37.776712894 CET	192.168.2.5	1.1.1.1	0x7f28	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.776833057 CET	192.168.2.5	1.1.1.1	0x64bc	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:39.279093981 CET	192.168.2.5	1.1.1.1	0xe722	Standard query (0)	eagerknight.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.279303074 CET	192.168.2.5	1.1.1.1	0xffa5	Standard query (0)	eagerknight.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:39.389621019 CET	192.168.2.5	1.1.1.1	0x1c9e	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.389982939 CET	192.168.2.5	1.1.1.1	0xf0ad	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:39.806670904 CET	192.168.2.5	1.1.1.1	0xa286	Standard query (0)	static.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.806920052 CET	192.168.2.5	1.1.1.1	0x894f	Standard query (0)	static.adsafeprotected.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:40.399607897 CET	192.168.2.5	1.1.1.1	0xd948	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.399863958 CET	192.168.2.5	1.1.1.1	0xf79c	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:40.400983095 CET	192.168.2.5	1.1.1.1	0x8769	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.401135921 CET	192.168.2.5	1.1.1.1	0xf3b8	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:40.401633024 CET	192.168.2.5	1.1.1.1	0xedcf	Standard query (0)	amp.ebaumsworld.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.401829958 CET	192.168.2.5	1.1.1.1	0x328e	Standard query (0)	amp.ebaumsworld.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:40.402371883 CET	192.168.2.5	1.1.1.1	0x931	Standard query (0)	www.lightboxcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.402585983 CET	192.168.2.5	1.1.1.1	0x159a	Standard query (0)	www.lightboxcdn.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:40.403100014 CET	192.168.2.5	1.1.1.1	0x6eec	Standard query (0)	cdn.speedcurve.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.403347969 CET	192.168.2.5	1.1.1.1	0xf512	Standard query (0)	cdn.speedcurve.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:40.403742075 CET	192.168.2.5	1.1.1.1	0x4071	Standard query (0)	static.trueanthem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.403918982 CET	192.168.2.5	1.1.1.1	0xc3d9	Standard query (0)	static.trueanthem.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:40.405431032 CET	192.168.2.5	1.1.1.1	0x8e60	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.405556917 CET	192.168.2.5	1.1.1.1	0xf676	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:40.442207098 CET	192.168.2.5	1.1.1.1	0xc841	Standard query (0)	postrelease.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.442388058 CET	192.168.2.5	1.1.1.1	0x9d75	Standard query (0)	postrelease.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:41.148412943 CET	192.168.2.5	1.1.1.1	0xffde	Standard query (0)	amp.ebaumsworld.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:41.148516893 CET	192.168.2.5	1.1.1.1	0x3c1f	Standard query (0)	amp.ebaumsworld.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:41.749447107 CET	192.168.2.5	1.1.1.1	0x606f	Standard query (0)	eagerknight.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:41.749716043 CET	192.168.2.5	1.1.1.1	0x1574	Standard query (0)	eagerknight.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:42.230406046 CET	192.168.2.5	1.1.1.1	0x220e	Standard query (0)	www.lightboxcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.230596066 CET	192.168.2.5	1.1.1.1	0x9f30	Standard query (0)	www.lightboxcdn.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:42.392226934 CET	192.168.2.5	1.1.1.1	0x842c	Standard query (0)	static.trueanthem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.392334938 CET	192.168.2.5	1.1.1.1	0x962	Standard query (0)	static.trueanthem.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:42.728064060 CET	192.168.2.5	1.1.1.1	0xd0dc	Standard query (0)	cdn.speedcurve.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.728184938 CET	192.168.2.5	1.1.1.1	0x6445	Standard query (0)	cdn.speedcurve.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:42.809745073 CET	192.168.2.5	1.1.1.1	0x6afe	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.809987068 CET	192.168.2.5	1.1.1.1	0x4571	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:42.976459980 CET	192.168.2.5	1.1.1.1	0x8b24	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.976571083 CET	192.168.2.5	1.1.1.1	0x5c81	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:43.514820099 CET	192.168.2.5	1.1.1.1	0xcd23	Standard query (0)	ping.chartbeat.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.514916897 CET	192.168.2.5	1.1.1.1	0x27e6	Standard query (0)	ping.chartbeat.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:44.243367910 CET	192.168.2.5	1.1.1.1	0x4c0d	Standard query (0)	amp.ebaumsworld.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:44.243477106 CET	192.168.2.5	1.1.1.1	0xbc3c	Standard query (0)	amp.ebaumsworld.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:44.245394945 CET	192.168.2.5	1.1.1.1	0x7148	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:44.245510101 CET	192.168.2.5	1.1.1.1	0x6106	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:45.428369045 CET	192.168.2.5	1.1.1.1	0x1150	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:45.428641081 CET	192.168.2.5	1.1.1.1	0x637a	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:45.900321007 CET	192.168.2.5	1.1.1.1	0x9373	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:45.900321007 CET	192.168.2.5	1.1.1.1	0x81c0	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:45.902766943 CET	192.168.2.5	1.1.1.1	0xfd13	Standard query (0)	ping.chartbeat.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:45.902890921 CET	192.168.2.5	1.1.1.1	0x5377	Standard query (0)	ping.chartbeat.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:46.929548025 CET	192.168.2.5	1.1.1.1	0xcb2	Standard query (0)	merequartz.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:46.929790020 CET	192.168.2.5	1.1.1.1	0x9471	Standard query (0)	merequartz.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:47.378742933 CET	192.168.2.5	1.1.1.1	0x7279	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.378860950 CET	192.168.2.5	1.1.1.1	0xc34	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:47.380791903 CET	192.168.2.5	1.1.1.1	0x8404	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.381082058 CET	192.168.2.5	1.1.1.1	0xce0b	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:47.859601974 CET	192.168.2.5	1.1.1.1	0x58dc	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.859879971 CET	192.168.2.5	1.1.1.1	0x42e1	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:47.861614943 CET	192.168.2.5	1.1.1.1	0xe9ef	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.861788034 CET	192.168.2.5	1.1.1.1	0xd159	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:47.862394094 CET	192.168.2.5	1.1.1.1	0x6d74	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.862600088 CET	192.168.2.5	1.1.1.1	0x7ccd	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:47.998923063 CET	192.168.2.5	1.1.1.1	0xdefa	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.999228001 CET	192.168.2.5	1.1.1.1	0x2872	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:47.999911070 CET	192.168.2.5	1.1.1.1	0xfeca	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.000128031 CET	192.168.2.5	1.1.1.1	0xef21	Standard query (0)	googleads4.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:48.001781940 CET	192.168.2.5	1.1.1.1	0x93e1	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.002190113 CET	192.168.2.5	1.1.1.1	0x6432	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:48.231101036 CET	192.168.2.5	1.1.1.1	0xc6cf	Standard query (0)	b.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.231245995 CET	192.168.2.5	1.1.1.1	0xb96a	Standard query (0)	b.scorecardresearch.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:48.231812000 CET	192.168.2.5	1.1.1.1	0xd79c	Standard query (0)	pghub.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.232086897 CET	192.168.2.5	1.1.1.1	0xad65	Standard query (0)	pghub.io	65	IN (0x0001)	false
Dec 12, 2024 19:57:48.232848883 CET	192.168.2.5	1.1.1.1	0x245c	Standard query (0)	pandg.tapad.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.232983112 CET	192.168.2.5	1.1.1.1	0x3249	Standard query (0)	pandg.tapad.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:48.273238897 CET	192.168.2.5	1.1.1.1	0x537a	Standard query (0)	ads.blogherads.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.273364067 CET	192.168.2.5	1.1.1.1	0xa8b	Standard query (0)	ads.blogherads.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:48.563231945 CET	192.168.2.5	1.1.1.1	0x5a40	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.563405037 CET	192.168.2.5	1.1.1.1	0xe966	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:48.565706968 CET	192.168.2.5	1.1.1.1	0x3d70	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.565831900 CET	192.168.2.5	1.1.1.1	0xada6	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:48.794754028 CET	192.168.2.5	1.1.1.1	0x5240	Standard query (0)	merequartz.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.794878006 CET	192.168.2.5	1.1.1.1	0xf06	Standard query (0)	merequartz.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:50.165517092 CET	192.168.2.5	1.1.1.1	0xa50d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.165647030 CET	192.168.2.5	1.1.1.1	0x54c4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:50.428975105 CET	192.168.2.5	1.1.1.1	0xa410	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.429143906 CET	192.168.2.5	1.1.1.1	0x3aa4	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:50.679553032 CET	192.168.2.5	1.1.1.1	0xbfe1	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.679845095 CET	192.168.2.5	1.1.1.1	0x46cf	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:51.517649889 CET	192.168.2.5	1.1.1.1	0xa680	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:51.517793894 CET	192.168.2.5	1.1.1.1	0xece2	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:53.993297100 CET	192.168.2.5	1.1.1.1	0xb8e	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:53.993617058 CET	192.168.2.5	1.1.1.1	0x8a8a	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:54.423403978 CET	192.168.2.5	1.1.1.1	0x7d9a	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.423546076 CET	192.168.2.5	1.1.1.1	0x4258	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:54.424014091 CET	192.168.2.5	1.1.1.1	0x15fc	Standard query (0)	d15kdpgjg3unno.cloudfront.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.424115896 CET	192.168.2.5	1.1.1.1	0x6a4b	Standard query (0)	d15kdpgjg3unno.cloudfront.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:54.424474001 CET	192.168.2.5	1.1.1.1	0x6f26	Standard query (0)	tagan.adlightning.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.424474001 CET	192.168.2.5	1.1.1.1	0xf4be	Standard query (0)	tagan.adlightning.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:54.466562986 CET	192.168.2.5	1.1.1.1	0x7f24	Standard query (0)	cdn.permutive.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.466774940 CET	192.168.2.5	1.1.1.1	0x7c80	Standard query (0)	cdn.permutive.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:57.121385098 CET	192.168.2.5	1.1.1.1	0x9f7b	Standard query (0)	cdn.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.121516943 CET	192.168.2.5	1.1.1.1	0xfe77	Standard query (0)	cdn.adsafeprotected.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:57.124413967 CET	192.168.2.5	1.1.1.1	0xce63	Standard query (0)	tagan.adlightning.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.124610901 CET	192.168.2.5	1.1.1.1	0x9b4	Standard query (0)	tagan.adlightning.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:57.438462019 CET	192.168.2.5	1.1.1.1	0x512e	Standard query (0)	d15kdpgjg3unno.cloudfront.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.438812971 CET	192.168.2.5	1.1.1.1	0x4621	Standard query (0)	d15kdpgjg3unno.cloudfront.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:57.746618032 CET	192.168.2.5	1.1.1.1	0x53f7	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.746741056 CET	192.168.2.5	1.1.1.1	0x2397	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:57:57.986757040 CET	192.168.2.5	1.1.1.1	0x79f6	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.986757040 CET	192.168.2.5	1.1.1.1	0xcdf8	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:59.088498116 CET	192.168.2.5	1.1.1.1	0xb1b8	Standard query (0)	3d2fb0bd-52fc-4b75-aaf5-2d436c172540.prmutv.co	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.088598967 CET	192.168.2.5	1.1.1.1	0x845c	Standard query (0)	3d2fb0bd-52fc-4b75-aaf5-2d436c172540.prmutv.co	65	IN (0x0001)	false
Dec 12, 2024 19:57:59.089176893 CET	192.168.2.5	1.1.1.1	0xf467	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.089178085 CET	192.168.2.5	1.1.1.1	0x7907	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:59.095344067 CET	192.168.2.5	1.1.1.1	0xcb36	Standard query (0)	cdn.permutive.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.095643044 CET	192.168.2.5	1.1.1.1	0x7b1	Standard query (0)	cdn.permutive.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:59.181181908 CET	192.168.2.5	1.1.1.1	0xefe7	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.181284904 CET	192.168.2.5	1.1.1.1	0x4d40	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:59.188890934 CET	192.168.2.5	1.1.1.1	0x83fe	Standard query (0)	api.permutive.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.189003944 CET	192.168.2.5	1.1.1.1	0xe652	Standard query (0)	api.permutive.com	65	IN (0x0001)	false
Dec 12, 2024 19:57:59.684874058 CET	192.168.2.5	1.1.1.1	0xacbb	Standard query (0)	cdn.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.685117960 CET	192.168.2.5	1.1.1.1	0x26bc	Standard query (0)	cdn.adsafeprotected.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:01.735546112 CET	192.168.2.5	1.1.1.1	0xa365	Standard query (0)	api.permutive.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:01.735671043 CET	192.168.2.5	1.1.1.1	0x75d	Standard query (0)	api.permutive.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:02.151407957 CET	192.168.2.5	1.1.1.1	0xc280	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:02.151510954 CET	192.168.2.5	1.1.1.1	0xdbed	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:02.486144066 CET	192.168.2.5	1.1.1.1	0xa5ff	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:02.486277103 CET	192.168.2.5	1.1.1.1	0x9da7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:02.504986048 CET	192.168.2.5	1.1.1.1	0xa924	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:02.505116940 CET	192.168.2.5	1.1.1.1	0x974c	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:05.113368034 CET	192.168.2.5	1.1.1.1	0x3ce4	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:05.113487005 CET	192.168.2.5	1.1.1.1	0x2d65	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:07.229316950 CET	192.168.2.5	1.1.1.1	0xc76c	Standard query (0)	ntvcld-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:07.229624033 CET	192.168.2.5	1.1.1.1	0x4195	Standard query (0)	ntvcld-a.akamaihd.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:07.230489969 CET	192.168.2.5	1.1.1.1	0xb876	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:07.230623960 CET	192.168.2.5	1.1.1.1	0xbb1f	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:08.227912903 CET	192.168.2.5	1.1.1.1	0x40ec	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:08.228230000 CET	192.168.2.5	1.1.1.1	0xa7dd	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:08.443559885 CET	192.168.2.5	1.1.1.1	0x1fae	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:08.443672895 CET	192.168.2.5	1.1.1.1	0x7bbb	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:09.311153889 CET	192.168.2.5	1.1.1.1	0x94f6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:09.311290026 CET	192.168.2.5	1.1.1.1	0x4b0f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:09.834275961 CET	192.168.2.5	1.1.1.1	0xf83e	Standard query (0)	cdn.browsiprod.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:09.834470987 CET	192.168.2.5	1.1.1.1	0x767a	Standard query (0)	cdn.browsiprod.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:09.842395067 CET	192.168.2.5	1.1.1.1	0xa824	Standard query (0)	ntvcld-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:09.842552900 CET	192.168.2.5	1.1.1.1	0xdec9	Standard query (0)	ntvcld-a.akamaihd.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:10.636312008 CET	192.168.2.5	1.1.1.1	0xbde5	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:10.636763096 CET	192.168.2.5	1.1.1.1	0xc0b5	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:13.217516899 CET	192.168.2.5	1.1.1.1	0xdb2f	Standard query (0)	events.browsiprod.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.217966080 CET	192.168.2.5	1.1.1.1	0x5bb3	Standard query (0)	events.browsiprod.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:13.220009089 CET	192.168.2.5	1.1.1.1	0xa832	Standard query (0)	yield-manager.browsiprod.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.220140934 CET	192.168.2.5	1.1.1.1	0x4776	Standard query (0)	yield-manager.browsiprod.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:13.277292967 CET	192.168.2.5	1.1.1.1	0x22ec	Standard query (0)	cdn.browsiprod.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.277447939 CET	192.168.2.5	1.1.1.1	0x79cd	Standard query (0)	cdn.browsiprod.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:13.294913054 CET	192.168.2.5	1.1.1.1	0x837d	Standard query (0)	sqs.us-east-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.295084953 CET	192.168.2.5	1.1.1.1	0xb800	Standard query (0)	sqs.us-east-1.amazonaws.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:15.719264984 CET	192.168.2.5	1.1.1.1	0xf1d9	Standard query (0)	sqs.us-east-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:15.719497919 CET	192.168.2.5	1.1.1.1	0xa17a	Standard query (0)	sqs.us-east-1.amazonaws.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:16.439918041 CET	192.168.2.5	1.1.1.1	0x8c2a	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:16.440049887 CET	192.168.2.5	1.1.1.1	0x7d86	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:19.737670898 CET	192.168.2.5	1.1.1.1	0x2f5	Standard query (0)	lightboxapi.azurewebsites.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:19.737871885 CET	192.168.2.5	1.1.1.1	0x566a	Standard query (0)	lightboxapi.azurewebsites.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:21.664736032 CET	192.168.2.5	1.1.1.1	0xfe3b	Standard query (0)	pixel.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.664920092 CET	192.168.2.5	1.1.1.1	0xa987	Standard query (0)	pixel.adsafeprotected.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:21.699791908 CET	192.168.2.5	1.1.1.1	0x6664	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.700098991 CET	192.168.2.5	1.1.1.1	0xbea9	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:21.701581001 CET	192.168.2.5	1.1.1.1	0x27e7	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.701762915 CET	192.168.2.5	1.1.1.1	0xfceb	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:21.706031084 CET	192.168.2.5	1.1.1.1	0xa19b	Standard query (0)	async01.admantx.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.706269979 CET	192.168.2.5	1.1.1.1	0xe8a6	Standard query (0)	async01.admantx.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.198987961 CET	192.168.2.5	1.1.1.1	0x6168	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.199165106 CET	192.168.2.5	1.1.1.1	0x9328	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.587145090 CET	192.168.2.5	1.1.1.1	0x53c1	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.587435961 CET	192.168.2.5	1.1.1.1	0xf06a	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.594333887 CET	192.168.2.5	1.1.1.1	0x65c3	Standard query (0)	cdn.indexww.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.594592094 CET	192.168.2.5	1.1.1.1	0xe14b	Standard query (0)	cdn.indexww.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.596553087 CET	192.168.2.5	1.1.1.1	0xb50f	Standard query (0)	creative-p.undertone.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.596816063 CET	192.168.2.5	1.1.1.1	0xe097	Standard query (0)	creative-p.undertone.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.601881027 CET	192.168.2.5	1.1.1.1	0x15a8	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.602102995 CET	192.168.2.5	1.1.1.1	0x77a1	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.609395027 CET	192.168.2.5	1.1.1.1	0xccaf	Standard query (0)	krk2.kargo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.609615088 CET	192.168.2.5	1.1.1.1	0xae4e	Standard query (0)	krk2.kargo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.618052006 CET	192.168.2.5	1.1.1.1	0x1760	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.618275881 CET	192.168.2.5	1.1.1.1	0xdbac	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.620810986 CET	192.168.2.5	1.1.1.1	0x3387	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.621062994 CET	192.168.2.5	1.1.1.1	0x924	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.635011911 CET	192.168.2.5	1.1.1.1	0xe1af	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.635339975 CET	192.168.2.5	1.1.1.1	0xa712	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.677865982 CET	192.168.2.5	1.1.1.1	0xa38b	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.678273916 CET	192.168.2.5	1.1.1.1	0xfb36	Standard query (0)	bidder.criteo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.683865070 CET	192.168.2.5	1.1.1.1	0x8ecc	Standard query (0)	a.teads.tv	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.684751987 CET	192.168.2.5	1.1.1.1	0xe5a7	Standard query (0)	a.teads.tv	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.698237896 CET	192.168.2.5	1.1.1.1	0x440e	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.698421955 CET	192.168.2.5	1.1.1.1	0xd48d	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:22.877732038 CET	192.168.2.5	1.1.1.1	0xb731	Standard query (0)	lightboxapi.azurewebsites.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.877959013 CET	192.168.2.5	1.1.1.1	0xe2c2	Standard query (0)	lightboxapi.azurewebsites.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:23.315663099 CET	192.168.2.5	1.1.1.1	0xef6d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:23.315848112 CET	192.168.2.5	1.1.1.1	0x9968	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:23.861895084 CET	192.168.2.5	1.1.1.1	0x5538	Standard query (0)	pixel.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:23.862073898 CET	192.168.2.5	1.1.1.1	0x495e	Standard query (0)	pixel.adsafeprotected.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:24.096955061 CET	192.168.2.5	1.1.1.1	0xc7b0	Standard query (0)	1x1.a-mo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.097126961 CET	192.168.2.5	1.1.1.1	0xe961	Standard query (0)	1x1.a-mo.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:24.432539940 CET	192.168.2.5	1.1.1.1	0xc0e9	Standard query (0)	async01.admantx.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.432683945 CET	192.168.2.5	1.1.1.1	0xeec3	Standard query (0)	async01.admantx.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:25.511162996 CET	192.168.2.5	1.1.1.1	0x7909	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:25.511382103 CET	192.168.2.5	1.1.1.1	0x1951	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:26.113396883 CET	192.168.2.5	1.1.1.1	0x6e45	Standard query (0)	collector.sheknows.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.113535881 CET	192.168.2.5	1.1.1.1	0xaf50	Standard query (0)	collector.sheknows.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:26.257961035 CET	192.168.2.5	1.1.1.1	0x7ed7	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.258095026 CET	192.168.2.5	1.1.1.1	0xecf3	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:26.527565956 CET	192.168.2.5	1.1.1.1	0xd429	Standard query (0)	ats.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.527626038 CET	192.168.2.5	1.1.1.1	0xe8e9	Standard query (0)	ats.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:27.889821053 CET	192.168.2.5	1.1.1.1	0x5ecd	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:27.889987946 CET	192.168.2.5	1.1.1.1	0xa51d	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:27.929663897 CET	192.168.2.5	1.1.1.1	0x507	Standard query (0)	resources.infolinks.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:27.929794073 CET	192.168.2.5	1.1.1.1	0x5a13	Standard query (0)	resources.infolinks.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:28.071268082 CET	192.168.2.5	1.1.1.1	0xd23a	Standard query (0)	ads.blogherads.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.071389914 CET	192.168.2.5	1.1.1.1	0x339e	Standard query (0)	ads.blogherads.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:28.400691986 CET	192.168.2.5	1.1.1.1	0x8a69	Standard query (0)	pghub.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.400813103 CET	192.168.2.5	1.1.1.1	0x8ca6	Standard query (0)	pghub.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:28.401449919 CET	192.168.2.5	1.1.1.1	0xa57a	Standard query (0)	feed.pghub.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.401781082 CET	192.168.2.5	1.1.1.1	0x32cd	Standard query (0)	feed.pghub.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:30.114974022 CET	192.168.2.5	1.1.1.1	0xf2e9	Standard query (0)	resources.infolinks.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.115459919 CET	192.168.2.5	1.1.1.1	0xce71	Standard query (0)	resources.infolinks.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:30.237009048 CET	192.168.2.5	1.1.1.1	0xabef	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.237164974 CET	192.168.2.5	1.1.1.1	0x3309	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:30.237771034 CET	192.168.2.5	1.1.1.1	0x2a1	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.238007069 CET	192.168.2.5	1.1.1.1	0x9d93	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:30.238529921 CET	192.168.2.5	1.1.1.1	0x2b06	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.238944054 CET	192.168.2.5	1.1.1.1	0x351	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:30.248753071 CET	192.168.2.5	1.1.1.1	0xd51	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.248914003 CET	192.168.2.5	1.1.1.1	0x9485	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:30.249361038 CET	192.168.2.5	1.1.1.1	0x61dc	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.249500990 CET	192.168.2.5	1.1.1.1	0x8bc9	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:30.252299070 CET	192.168.2.5	1.1.1.1	0xeb45	Standard query (0)	pandg.tapad.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.252430916 CET	192.168.2.5	1.1.1.1	0x482c	Standard query (0)	pandg.tapad.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:30.446887970 CET	192.168.2.5	1.1.1.1	0xc1b9	Standard query (0)	geo.privacymanager.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.447037935 CET	192.168.2.5	1.1.1.1	0xbf7d	Standard query (0)	geo.privacymanager.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:30.574574947 CET	192.168.2.5	1.1.1.1	0x136b	Standard query (0)	ats.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.574716091 CET	192.168.2.5	1.1.1.1	0x58d7	Standard query (0)	ats.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:31.046657085 CET	192.168.2.5	1.1.1.1	0xb51f	Standard query (0)	collector.sheknows.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.046927929 CET	192.168.2.5	1.1.1.1	0xd26a	Standard query (0)	collector.sheknows.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:31.560945988 CET	192.168.2.5	1.1.1.1	0xca84	Standard query (0)	ads.blogherads.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.561095953 CET	192.168.2.5	1.1.1.1	0xf8ff	Standard query (0)	ads.blogherads.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:31.616014004 CET	192.168.2.5	1.1.1.1	0x1ef2	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.616161108 CET	192.168.2.5	1.1.1.1	0xf2fb	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:31.616694927 CET	192.168.2.5	1.1.1.1	0x512a	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.616942883 CET	192.168.2.5	1.1.1.1	0xbd26	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:31.627541065 CET	192.168.2.5	1.1.1.1	0x99f5	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.628087997 CET	192.168.2.5	1.1.1.1	0xe0b5	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:31.628859043 CET	192.168.2.5	1.1.1.1	0x6113	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.629219055 CET	192.168.2.5	1.1.1.1	0x29a5	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:31.631619930 CET	192.168.2.5	1.1.1.1	0xec96	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.631969929 CET	192.168.2.5	1.1.1.1	0xaeec	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:31.689199924 CET	192.168.2.5	1.1.1.1	0x6ea7	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.689534903 CET	192.168.2.5	1.1.1.1	0xa631	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:32.305452108 CET	192.168.2.5	1.1.1.1	0xd592	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.305629969 CET	192.168.2.5	1.1.1.1	0x1329	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:32.305948973 CET	192.168.2.5	1.1.1.1	0x68e0	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.306118965 CET	192.168.2.5	1.1.1.1	0xf3b4	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:32.416692972 CET	192.168.2.5	1.1.1.1	0xf012	Standard query (0)	cs-tam.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.416693926 CET	192.168.2.5	1.1.1.1	0x2f29	Standard query (0)	cs-tam.minutemedia-prebid.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:32.510492086 CET	192.168.2.5	1.1.1.1	0x4a06	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.511353970 CET	192.168.2.5	1.1.1.1	0x6dbc	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:32.611685991 CET	192.168.2.5	1.1.1.1	0x9773	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.611845016 CET	192.168.2.5	1.1.1.1	0x7c7a	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:32.655163050 CET	192.168.2.5	1.1.1.1	0x9fd5	Standard query (0)	amazon-tam-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.655519009 CET	192.168.2.5	1.1.1.1	0xf7e3	Standard query (0)	amazon-tam-match.dotomi.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:32.772207975 CET	192.168.2.5	1.1.1.1	0x1ea6	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.772278070 CET	192.168.2.5	1.1.1.1	0xf898	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:32.863826990 CET	192.168.2.5	1.1.1.1	0x15ea	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:32.863826990 CET	192.168.2.5	1.1.1.1	0xac5b	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.981178045 CET	192.168.2.5	1.1.1.1	0x73a5	Standard query (0)	sync-amz.ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.981309891 CET	192.168.2.5	1.1.1.1	0xae7e	Standard query (0)	sync-amz.ads.yieldmo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:33.510627031 CET	192.168.2.5	1.1.1.1	0x9a36	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.510977030 CET	192.168.2.5	1.1.1.1	0x7d8a	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:33.559793949 CET	192.168.2.5	1.1.1.1	0x1aa7	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.560834885 CET	192.168.2.5	1.1.1.1	0xaf6b	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:33.811068058 CET	192.168.2.5	1.1.1.1	0x5e0c	Standard query (0)	cs-tam.yellowblue.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.811220884 CET	192.168.2.5	1.1.1.1	0x5c46	Standard query (0)	cs-tam.yellowblue.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.041604042 CET	192.168.2.5	1.1.1.1	0x1314	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.042088985 CET	192.168.2.5	1.1.1.1	0x3434	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.043106079 CET	192.168.2.5	1.1.1.1	0xfb75	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.043541908 CET	192.168.2.5	1.1.1.1	0x2b51	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.047672033 CET	192.168.2.5	1.1.1.1	0x43de	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.048475981 CET	192.168.2.5	1.1.1.1	0x48de	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.049424887 CET	192.168.2.5	1.1.1.1	0x16dc	Standard query (0)	triplelift-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.049870014 CET	192.168.2.5	1.1.1.1	0xe32b	Standard query (0)	triplelift-match.dotomi.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.339806080 CET	192.168.2.5	1.1.1.1	0xef19	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.340394020 CET	192.168.2.5	1.1.1.1	0x5e71	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.345659018 CET	192.168.2.5	1.1.1.1	0x6a3a	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.346041918 CET	192.168.2.5	1.1.1.1	0x909	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.378568888 CET	192.168.2.5	1.1.1.1	0xddf9	Standard query (0)	assets.a-mo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.378751040 CET	192.168.2.5	1.1.1.1	0xeee0	Standard query (0)	assets.a-mo.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.421627045 CET	192.168.2.5	1.1.1.1	0x6962	Standard query (0)	geo.privacymanager.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.421627045 CET	192.168.2.5	1.1.1.1	0xebf	Standard query (0)	geo.privacymanager.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.956582069 CET	192.168.2.5	1.1.1.1	0x8547	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.956775904 CET	192.168.2.5	1.1.1.1	0xa48b	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:34.962084055 CET	192.168.2.5	1.1.1.1	0x848e	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.962657928 CET	192.168.2.5	1.1.1.1	0x474f	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:35.183784962 CET	192.168.2.5	1.1.1.1	0x9cb6	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.184113026 CET	192.168.2.5	1.1.1.1	0xf774	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:35.186824083 CET	192.168.2.5	1.1.1.1	0x2d2e	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.187099934 CET	192.168.2.5	1.1.1.1	0xf20d	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:35.189157963 CET	192.168.2.5	1.1.1.1	0x7378	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.190435886 CET	192.168.2.5	1.1.1.1	0xba6c	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:35.413605928 CET	192.168.2.5	1.1.1.1	0x6d20	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.413707972 CET	192.168.2.5	1.1.1.1	0x42ad	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:35.780194044 CET	192.168.2.5	1.1.1.1	0x239a	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.780447006 CET	192.168.2.5	1.1.1.1	0x231b	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:35.954546928 CET	192.168.2.5	1.1.1.1	0xa451	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.954756021 CET	192.168.2.5	1.1.1.1	0xb876	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:35.988136053 CET	192.168.2.5	1.1.1.1	0xfd1	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.988136053 CET	192.168.2.5	1.1.1.1	0x16d6	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.048964024 CET	192.168.2.5	1.1.1.1	0x732a	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.048964024 CET	192.168.2.5	1.1.1.1	0x404a	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.071026087 CET	192.168.2.5	1.1.1.1	0x6065	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.071026087 CET	192.168.2.5	1.1.1.1	0x2612	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.085612059 CET	192.168.2.5	1.1.1.1	0xb1eb	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.085947990 CET	192.168.2.5	1.1.1.1	0xc72a	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.149329901 CET	192.168.2.5	1.1.1.1	0xdadf	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.149760008 CET	192.168.2.5	1.1.1.1	0x1656	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.150836945 CET	192.168.2.5	1.1.1.1	0x9f1a	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.150837898 CET	192.168.2.5	1.1.1.1	0xe1f3	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.363492966 CET	192.168.2.5	1.1.1.1	0x76ea	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.363492966 CET	192.168.2.5	1.1.1.1	0xd345	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.525015116 CET	192.168.2.5	1.1.1.1	0x1b83	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.526071072 CET	192.168.2.5	1.1.1.1	0xd52f	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.527925014 CET	192.168.2.5	1.1.1.1	0x3f77	Standard query (0)	stx-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.528255939 CET	192.168.2.5	1.1.1.1	0xd48e	Standard query (0)	stx-match.dotomi.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.534503937 CET	192.168.2.5	1.1.1.1	0x7371	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.535373926 CET	192.168.2.5	1.1.1.1	0xd10	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.538517952 CET	192.168.2.5	1.1.1.1	0xc6bf	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.538777113 CET	192.168.2.5	1.1.1.1	0xb66	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.539874077 CET	192.168.2.5	1.1.1.1	0x9501	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.540189981 CET	192.168.2.5	1.1.1.1	0x6ee9	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.561384916 CET	192.168.2.5	1.1.1.1	0x8e7a	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.561543941 CET	192.168.2.5	1.1.1.1	0xce1c	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.583595037 CET	192.168.2.5	1.1.1.1	0x41d7	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.583862066 CET	192.168.2.5	1.1.1.1	0xb184	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.654865980 CET	192.168.2.5	1.1.1.1	0x6d10	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.654865980 CET	192.168.2.5	1.1.1.1	0x5018	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.657350063 CET	192.168.2.5	1.1.1.1	0xe8be	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.657440901 CET	192.168.2.5	1.1.1.1	0x5caf	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.659589052 CET	192.168.2.5	1.1.1.1	0xf23	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.660126925 CET	192.168.2.5	1.1.1.1	0xf9f0	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.682873964 CET	192.168.2.5	1.1.1.1	0x83f0	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.682873964 CET	192.168.2.5	1.1.1.1	0x840e	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.700436115 CET	192.168.2.5	1.1.1.1	0x4ad	Standard query (0)	pixel-us-apac.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.700436115 CET	192.168.2.5	1.1.1.1	0xe07	Standard query (0)	pixel-us-apac.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.763323069 CET	192.168.2.5	1.1.1.1	0xa92e	Standard query (0)	wt.rqtrk.eu	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.763623953 CET	192.168.2.5	1.1.1.1	0x65c5	Standard query (0)	wt.rqtrk.eu	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.836504936 CET	192.168.2.5	1.1.1.1	0xcb52	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.836504936 CET	192.168.2.5	1.1.1.1	0x9d5f	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.840653896 CET	192.168.2.5	1.1.1.1	0x94db	Standard query (0)	id.a-mx.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.841685057 CET	192.168.2.5	1.1.1.1	0x2610	Standard query (0)	id.a-mx.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.844214916 CET	192.168.2.5	1.1.1.1	0xb73c	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.844214916 CET	192.168.2.5	1.1.1.1	0x8a09	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.845144987 CET	192.168.2.5	1.1.1.1	0x361	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.845144987 CET	192.168.2.5	1.1.1.1	0x6e62	Standard query (0)	cm.adform.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.846045971 CET	192.168.2.5	1.1.1.1	0xa786	Standard query (0)	ssum.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.846184969 CET	192.168.2.5	1.1.1.1	0xb69b	Standard query (0)	ssum.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.846184969 CET	192.168.2.5	1.1.1.1	0xab12	Standard query (0)	pixel-us-apac.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.929696083 CET	192.168.2.5	1.1.1.1	0x89b7	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.929696083 CET	192.168.2.5	1.1.1.1	0x3830	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.975425959 CET	192.168.2.5	1.1.1.1	0x3004	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.975627899 CET	192.168.2.5	1.1.1.1	0x617b	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.978420019 CET	192.168.2.5	1.1.1.1	0x2443	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.978614092 CET	192.168.2.5	1.1.1.1	0xd5fe	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.984282017 CET	192.168.2.5	1.1.1.1	0x2083	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.984532118 CET	192.168.2.5	1.1.1.1	0xad4f	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.989718914 CET	192.168.2.5	1.1.1.1	0xd078	Standard query (0)	assets.a-mo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.989860058 CET	192.168.2.5	1.1.1.1	0x44f6	Standard query (0)	assets.a-mo.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:37.010605097 CET	192.168.2.5	1.1.1.1	0xbe90	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.010802984 CET	192.168.2.5	1.1.1.1	0x84b0	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:37.090864897 CET	192.168.2.5	1.1.1.1	0xefd7	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.091000080 CET	192.168.2.5	1.1.1.1	0xf673	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:37.380577087 CET	192.168.2.5	1.1.1.1	0xb507	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.380717039 CET	192.168.2.5	1.1.1.1	0x43a	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:37.765000105 CET	192.168.2.5	1.1.1.1	0xb3fa	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.765250921 CET	192.168.2.5	1.1.1.1	0xa67f	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:38.273330927 CET	192.168.2.5	1.1.1.1	0xf6f9	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.273574114 CET	192.168.2.5	1.1.1.1	0xb610	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:38.286746025 CET	192.168.2.5	1.1.1.1	0x959b	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.287162066 CET	192.168.2.5	1.1.1.1	0xcc37	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:38.290708065 CET	192.168.2.5	1.1.1.1	0xbd1b	Standard query (0)	dyv1bugovvq1g.cloudfront.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.290878057 CET	192.168.2.5	1.1.1.1	0x1727	Standard query (0)	dyv1bugovvq1g.cloudfront.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:38.301069021 CET	192.168.2.5	1.1.1.1	0x766d	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.301417112 CET	192.168.2.5	1.1.1.1	0x7a07	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:38.303169012 CET	192.168.2.5	1.1.1.1	0x1983	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.303395033 CET	192.168.2.5	1.1.1.1	0x78ee	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:38.611000061 CET	192.168.2.5	1.1.1.1	0x3cf6	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.611542940 CET	192.168.2.5	1.1.1.1	0xbcf	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:38.875849009 CET	192.168.2.5	1.1.1.1	0x5364	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.876826048 CET	192.168.2.5	1.1.1.1	0xcb0e	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:38.919464111 CET	192.168.2.5	1.1.1.1	0x97d6	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.920730114 CET	192.168.2.5	1.1.1.1	0x370a	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.195274115 CET	192.168.2.5	1.1.1.1	0x6eb7	Standard query (0)	sync.a-mo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.195447922 CET	192.168.2.5	1.1.1.1	0x7e27	Standard query (0)	sync.a-mo.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.513045073 CET	192.168.2.5	1.1.1.1	0x6f59	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.513277054 CET	192.168.2.5	1.1.1.1	0x87ad	Standard query (0)	gw-iad-bid.ymmobi.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.528175116 CET	192.168.2.5	1.1.1.1	0xcb	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.528397083 CET	192.168.2.5	1.1.1.1	0x7757	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.614228964 CET	192.168.2.5	1.1.1.1	0xc4c3	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.614523888 CET	192.168.2.5	1.1.1.1	0xe644	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.615433931 CET	192.168.2.5	1.1.1.1	0x7d76	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.615598917 CET	192.168.2.5	1.1.1.1	0xb3bc	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.616094112 CET	192.168.2.5	1.1.1.1	0x7e46	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.616281033 CET	192.168.2.5	1.1.1.1	0xeb0c	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.616650105 CET	192.168.2.5	1.1.1.1	0xef39	Standard query (0)	wt.rqtrk.eu	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.616816998 CET	192.168.2.5	1.1.1.1	0xc70f	Standard query (0)	wt.rqtrk.eu	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.640456915 CET	192.168.2.5	1.1.1.1	0x944	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.640631914 CET	192.168.2.5	1.1.1.1	0x300f	Standard query (0)	cm.adform.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.647731066 CET	192.168.2.5	1.1.1.1	0xa542	Standard query (0)	cdn.prod.uidapi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.648284912 CET	192.168.2.5	1.1.1.1	0x6968	Standard query (0)	cdn.prod.uidapi.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.648897886 CET	192.168.2.5	1.1.1.1	0x61a3	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.649053097 CET	192.168.2.5	1.1.1.1	0x7de3	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.649549007 CET	192.168.2.5	1.1.1.1	0x2f47	Standard query (0)	cdn.prod.euid.eu	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.649918079 CET	192.168.2.5	1.1.1.1	0x179b	Standard query (0)	cdn.prod.euid.eu	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.650902987 CET	192.168.2.5	1.1.1.1	0x2a11	Standard query (0)	invstatic101.creativecdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.651070118 CET	192.168.2.5	1.1.1.1	0xa726	Standard query (0)	invstatic101.creativecdn.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.651436090 CET	192.168.2.5	1.1.1.1	0xaa98	Standard query (0)	cdn-ima.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.651707888 CET	192.168.2.5	1.1.1.1	0xdcef	Standard query (0)	cdn-ima.33across.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.652719975 CET	192.168.2.5	1.1.1.1	0xc0fc	Standard query (0)	connectid.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.653426886 CET	192.168.2.5	1.1.1.1	0x5b82	Standard query (0)	connectid.analytics.yahoo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.654706001 CET	192.168.2.5	1.1.1.1	0x34a5	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.655097961 CET	192.168.2.5	1.1.1.1	0xcb04	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.775624990 CET	192.168.2.5	1.1.1.1	0x8cfe	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.775798082 CET	192.168.2.5	1.1.1.1	0xb7a1	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.832425117 CET	192.168.2.5	1.1.1.1	0x5a11	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.832592964 CET	192.168.2.5	1.1.1.1	0x7efc	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:39.892143011 CET	192.168.2.5	1.1.1.1	0x5a64	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.892296076 CET	192.168.2.5	1.1.1.1	0xa40f	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.008886099 CET	192.168.2.5	1.1.1.1	0xef3	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.008997917 CET	192.168.2.5	1.1.1.1	0x1a3d	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.014605045 CET	192.168.2.5	1.1.1.1	0x2aac	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.014785051 CET	192.168.2.5	1.1.1.1	0xfd8e	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.015202999 CET	192.168.2.5	1.1.1.1	0xdd	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.015394926 CET	192.168.2.5	1.1.1.1	0xe3ca	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.289175987 CET	192.168.2.5	1.1.1.1	0x2ddb	Standard query (0)	secure.cdn.fastclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.289750099 CET	192.168.2.5	1.1.1.1	0xc1a8	Standard query (0)	secure.cdn.fastclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.291161060 CET	192.168.2.5	1.1.1.1	0xa365	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.291448116 CET	192.168.2.5	1.1.1.1	0xed9c	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.291917086 CET	192.168.2.5	1.1.1.1	0xec8b	Standard query (0)	tag.wknd.ai	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.292233944 CET	192.168.2.5	1.1.1.1	0xa384	Standard query (0)	tag.wknd.ai	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.292781115 CET	192.168.2.5	1.1.1.1	0x3819	Standard query (0)	cdn.hadronid.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.292913914 CET	192.168.2.5	1.1.1.1	0xd9f9	Standard query (0)	cdn.hadronid.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.293154955 CET	192.168.2.5	1.1.1.1	0xd559	Standard query (0)	cdn.id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.293354988 CET	192.168.2.5	1.1.1.1	0xb0c8	Standard query (0)	cdn.id5-sync.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.294121027 CET	192.168.2.5	1.1.1.1	0x1620	Standard query (0)	krk2.kargo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.294404984 CET	192.168.2.5	1.1.1.1	0x36b7	Standard query (0)	krk2.kargo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.384788036 CET	192.168.2.5	1.1.1.1	0xa0e5	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.385472059 CET	192.168.2.5	1.1.1.1	0xc248	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.389301062 CET	192.168.2.5	1.1.1.1	0xbdfb	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.389705896 CET	192.168.2.5	1.1.1.1	0x62fc	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.837855101 CET	192.168.2.5	1.1.1.1	0xcf64	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.837997913 CET	192.168.2.5	1.1.1.1	0x63be	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.839513063 CET	192.168.2.5	1.1.1.1	0x66dd	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.839670897 CET	192.168.2.5	1.1.1.1	0xd5af	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:40.985347033 CET	192.168.2.5	1.1.1.1	0x6fd6	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.985567093 CET	192.168.2.5	1.1.1.1	0xfef7	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.018676043 CET	192.168.2.5	1.1.1.1	0x395c	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.018826962 CET	192.168.2.5	1.1.1.1	0x3ddc	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.135663986 CET	192.168.2.5	1.1.1.1	0x437f	Standard query (0)	dyv1bugovvq1g.cloudfront.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.135864019 CET	192.168.2.5	1.1.1.1	0x321	Standard query (0)	dyv1bugovvq1g.cloudfront.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.233620882 CET	192.168.2.5	1.1.1.1	0x5080	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.234311104 CET	192.168.2.5	1.1.1.1	0x49f	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.287338018 CET	192.168.2.5	1.1.1.1	0x9f53	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.287786007 CET	192.168.2.5	1.1.1.1	0xc8c4	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.458950043 CET	192.168.2.5	1.1.1.1	0x207c	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.459064960 CET	192.168.2.5	1.1.1.1	0x45bc	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.539129972 CET	192.168.2.5	1.1.1.1	0x21c2	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.539267063 CET	192.168.2.5	1.1.1.1	0xb61b	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.539592981 CET	192.168.2.5	1.1.1.1	0x94af	Standard query (0)	cdn-ima.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.539741993 CET	192.168.2.5	1.1.1.1	0x884c	Standard query (0)	cdn-ima.33across.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.543517113 CET	192.168.2.5	1.1.1.1	0x11ba	Standard query (0)	invstatic101.creativecdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.543632030 CET	192.168.2.5	1.1.1.1	0x6aa0	Standard query (0)	invstatic101.creativecdn.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.793883085 CET	192.168.2.5	1.1.1.1	0x346d	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.794115067 CET	192.168.2.5	1.1.1.1	0x233d	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.795114040 CET	192.168.2.5	1.1.1.1	0x1c77	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.795288086 CET	192.168.2.5	1.1.1.1	0xd583	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.860126019 CET	192.168.2.5	1.1.1.1	0xc358	Standard query (0)	id.a-mx.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.860275984 CET	192.168.2.5	1.1.1.1	0xaf21	Standard query (0)	id.a-mx.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.920859098 CET	192.168.2.5	1.1.1.1	0xa746	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.921000957 CET	192.168.2.5	1.1.1.1	0xacd0	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.976847887 CET	192.168.2.5	1.1.1.1	0x182a	Standard query (0)	sync.a-mo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.977045059 CET	192.168.2.5	1.1.1.1	0x23a5	Standard query (0)	sync.a-mo.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:41.994551897 CET	192.168.2.5	1.1.1.1	0x901a	Standard query (0)	prebid.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.994714022 CET	192.168.2.5	1.1.1.1	0x3c53	Standard query (0)	prebid.adnxs.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.012943029 CET	192.168.2.5	1.1.1.1	0x78a2	Standard query (0)	ow.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.013269901 CET	192.168.2.5	1.1.1.1	0x2df8	Standard query (0)	ow.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.021060944 CET	192.168.2.5	1.1.1.1	0xa402	Standard query (0)	id.rtb.mx	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.021199942 CET	192.168.2.5	1.1.1.1	0x38b	Standard query (0)	id.rtb.mx	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.066145897 CET	192.168.2.5	1.1.1.1	0xa764	Standard query (0)	cs-tam.yellowblue.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.066447020 CET	192.168.2.5	1.1.1.1	0x38e6	Standard query (0)	cs-tam.yellowblue.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.072536945 CET	192.168.2.5	1.1.1.1	0x62	Standard query (0)	cdn.prod.uidapi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.072761059 CET	192.168.2.5	1.1.1.1	0xd256	Standard query (0)	cdn.prod.uidapi.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.087127924 CET	192.168.2.5	1.1.1.1	0xa603	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.087383986 CET	192.168.2.5	1.1.1.1	0x22ed	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.092349052 CET	192.168.2.5	1.1.1.1	0x5931	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.092768908 CET	192.168.2.5	1.1.1.1	0x26ed	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.123168945 CET	192.168.2.5	1.1.1.1	0x4b49	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.123676062 CET	192.168.2.5	1.1.1.1	0xdb7e	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.289202929 CET	192.168.2.5	1.1.1.1	0xd3ab	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.289319038 CET	192.168.2.5	1.1.1.1	0xc237	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.290149927 CET	192.168.2.5	1.1.1.1	0x345d	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.290261030 CET	192.168.2.5	1.1.1.1	0x1e54	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.290715933 CET	192.168.2.5	1.1.1.1	0xee71	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.290832043 CET	192.168.2.5	1.1.1.1	0xc58f	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.291101933 CET	192.168.2.5	1.1.1.1	0xb35	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.291210890 CET	192.168.2.5	1.1.1.1	0x8ab	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.291501045 CET	192.168.2.5	1.1.1.1	0xf9bb	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.291620016 CET	192.168.2.5	1.1.1.1	0xd503	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.324749947 CET	192.168.2.5	1.1.1.1	0x1d0b	Standard query (0)	assets.bounceexchange.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.324906111 CET	192.168.2.5	1.1.1.1	0xe3d5	Standard query (0)	assets.bounceexchange.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.325305939 CET	192.168.2.5	1.1.1.1	0x8d35	Standard query (0)	events.bouncex.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.325412035 CET	192.168.2.5	1.1.1.1	0xa375	Standard query (0)	events.bouncex.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.325603008 CET	192.168.2.5	1.1.1.1	0xbfee	Standard query (0)	api.bounceexchange.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.325740099 CET	192.168.2.5	1.1.1.1	0xf98b	Standard query (0)	api.bounceexchange.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.367955923 CET	192.168.2.5	1.1.1.1	0xb89d	Standard query (0)	tag.wknd.ai	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.368061066 CET	192.168.2.5	1.1.1.1	0xa658	Standard query (0)	tag.wknd.ai	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.555228949 CET	192.168.2.5	1.1.1.1	0xf0a1	Standard query (0)	id.hadron.ad.gt	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.555476904 CET	192.168.2.5	1.1.1.1	0x8b15	Standard query (0)	id.hadron.ad.gt	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.572122097 CET	192.168.2.5	1.1.1.1	0xd71f	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.572335005 CET	192.168.2.5	1.1.1.1	0xde79	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.577588081 CET	192.168.2.5	1.1.1.1	0xe67b	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.577846050 CET	192.168.2.5	1.1.1.1	0xe24e	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.589546919 CET	192.168.2.5	1.1.1.1	0x99ec	Standard query (0)	cdn.hadronid.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.589816093 CET	192.168.2.5	1.1.1.1	0x7485	Standard query (0)	cdn.hadronid.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.791188955 CET	192.168.2.5	1.1.1.1	0xb3ab	Standard query (0)	cdn.id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.791431904 CET	192.168.2.5	1.1.1.1	0xd221	Standard query (0)	cdn.id5-sync.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.806171894 CET	192.168.2.5	1.1.1.1	0xdc41	Standard query (0)	secure.cdn.fastclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.806370020 CET	192.168.2.5	1.1.1.1	0x370f	Standard query (0)	secure.cdn.fastclick.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.902127981 CET	192.168.2.5	1.1.1.1	0x62f7	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.902937889 CET	192.168.2.5	1.1.1.1	0xbff7	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.989609957 CET	192.168.2.5	1.1.1.1	0x2490	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.989896059 CET	192.168.2.5	1.1.1.1	0x1d76	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:42.998744011 CET	192.168.2.5	1.1.1.1	0xab9e	Standard query (0)	connectid.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.998996019 CET	192.168.2.5	1.1.1.1	0x8644	Standard query (0)	connectid.analytics.yahoo.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:43.074263096 CET	192.168.2.5	1.1.1.1	0xb358	Standard query (0)	cdn.prod.euid.eu	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.074626923 CET	192.168.2.5	1.1.1.1	0x6dfa	Standard query (0)	cdn.prod.euid.eu	65	IN (0x0001)	false
Dec 12, 2024 19:58:43.274959087 CET	192.168.2.5	1.1.1.1	0xc656	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.275079012 CET	192.168.2.5	1.1.1.1	0x581	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:43.674880981 CET	192.168.2.5	1.1.1.1	0x74f7	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.675256014 CET	192.168.2.5	1.1.1.1	0xada5	Standard query (0)	pippio.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:43.815685034 CET	192.168.2.5	1.1.1.1	0x68b	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.815860987 CET	192.168.2.5	1.1.1.1	0x6880	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:43.887700081 CET	192.168.2.5	1.1.1.1	0xed94	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.887798071 CET	192.168.2.5	1.1.1.1	0xe5bb	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:44.231441975 CET	192.168.2.5	1.1.1.1	0x3dd7	Standard query (0)	cm.ambientdsp.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.231551886 CET	192.168.2.5	1.1.1.1	0xadff	Standard query (0)	cm.ambientdsp.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:44.231859922 CET	192.168.2.5	1.1.1.1	0x84ca	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.232096910 CET	192.168.2.5	1.1.1.1	0xd739	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:44.362046003 CET	192.168.2.5	1.1.1.1	0x2d55	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.362222910 CET	192.168.2.5	1.1.1.1	0x7b76	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:44.667074919 CET	192.168.2.5	1.1.1.1	0x62ed	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.667218924 CET	192.168.2.5	1.1.1.1	0x769e	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:44.737307072 CET	192.168.2.5	1.1.1.1	0x2b0b	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.737428904 CET	192.168.2.5	1.1.1.1	0x43cc	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:44.738378048 CET	192.168.2.5	1.1.1.1	0xa4b0	Standard query (0)	prebid.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.738497019 CET	192.168.2.5	1.1.1.1	0xad7	Standard query (0)	prebid.adnxs.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:44.744103909 CET	192.168.2.5	1.1.1.1	0x13f	Standard query (0)	ow.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.744275093 CET	192.168.2.5	1.1.1.1	0xa8a9	Standard query (0)	ow.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:44.758095980 CET	192.168.2.5	1.1.1.1	0x25b9	Standard query (0)	ping.chartbeat.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.758258104 CET	192.168.2.5	1.1.1.1	0xbfb2	Standard query (0)	ping.chartbeat.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:45.074489117 CET	192.168.2.5	1.1.1.1	0xd67	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.074593067 CET	192.168.2.5	1.1.1.1	0xafc	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:45.118201017 CET	192.168.2.5	1.1.1.1	0x1538	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.118307114 CET	192.168.2.5	1.1.1.1	0x8815	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:45.337079048 CET	192.168.2.5	1.1.1.1	0xe2a7	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.337177992 CET	192.168.2.5	1.1.1.1	0x1786	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Dec 12, 2024 19:58:45.804187059 CET	192.168.2.5	1.1.1.1	0xa989	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.804315090 CET	192.168.2.5	1.1.1.1	0xaf4c	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2024 19:58:46.172043085 CET	192.168.2.5	1.1.1.1	0x1d16	Standard query (0)	id.hadron.ad.gt	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:46.172445059 CET	192.168.2.5	1.1.1.1	0xceaa	Standard query (0)	id.hadron.ad.gt	65	IN (0x0001)	false
Dec 12, 2024 19:58:46.235196114 CET	192.168.2.5	1.1.1.1	0xf022	Standard query (0)	pool.admedo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:46.235357046 CET	192.168.2.5	1.1.1.1	0xfb9a	Standard query (0)	pool.admedo.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 12, 2024 19:57:12.045830011 CET	1.1.1.1	192.168.2.5	0xf855	No error (0)	www.google.com		172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:12.046216965 CET	1.1.1.1	192.168.2.5	0x51b	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:13.188334942 CET	1.1.1.1	192.168.2.5	0x1218	No error (0)	ebaumsworld.com		3.86.129.105	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:13.188334942 CET	1.1.1.1	192.168.2.5	0x1218	No error (0)	ebaumsworld.com		34.235.73.77	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:13.188334942 CET	1.1.1.1	192.168.2.5	0x1218	No error (0)	ebaumsworld.com		23.22.255.5	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:13.188334942 CET	1.1.1.1	192.168.2.5	0x1218	No error (0)	ebaumsworld.com		54.221.221.129	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:14.585381031 CET	1.1.1.1	192.168.2.5	0x6f05	No error (0)	ebaumsworld.com		3.86.129.105	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:14.585381031 CET	1.1.1.1	192.168.2.5	0x6f05	No error (0)	ebaumsworld.com		34.235.73.77	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:14.585381031 CET	1.1.1.1	192.168.2.5	0x6f05	No error (0)	ebaumsworld.com		23.22.255.5	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:14.585381031 CET	1.1.1.1	192.168.2.5	0x6f05	No error (0)	ebaumsworld.com		54.221.221.129	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:17.580260038 CET	1.1.1.1	192.168.2.5	0x3377	No error (0)	cdn.ebaumsworld.com	litmedia.s.llnwi.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:17.580260038 CET	1.1.1.1	192.168.2.5	0x3377	No error (0)	litmedia.s.llnwi.net		178.79.238.164	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:17.580754042 CET	1.1.1.1	192.168.2.5	0xc493	No error (0)	cdn.ebaumsworld.com	litmedia.s.llnwi.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:18.493756056 CET	1.1.1.1	192.168.2.5	0x8475	No error (0)	s.ntv.io	wildcard.ntv.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:18.493777037 CET	1.1.1.1	192.168.2.5	0xdeac	No error (0)	s.ntv.io	wildcard.ntv.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:20.554898024 CET	1.1.1.1	192.168.2.5	0x97c8	No error (0)	cdn.ebaumsworld.com	litmedia.s.llnwi.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:20.555013895 CET	1.1.1.1	192.168.2.5	0x1d19	No error (0)	cdn.ebaumsworld.com	litmedia.s.llnwi.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:20.555013895 CET	1.1.1.1	192.168.2.5	0x1d19	No error (0)	litmedia.s.llnwi.net		178.79.238.164	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:20.725625992 CET	1.1.1.1	192.168.2.5	0x9f4f	No error (0)	z-na.amazon-adsystem.com	d1s8ai9yok3amy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:20.773057938 CET	1.1.1.1	192.168.2.5	0x691b	No error (0)	z-na.amazon-adsystem.com	d1s8ai9yok3amy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:20.913402081 CET	1.1.1.1	192.168.2.5	0x3081	No error (0)	z-na.amazon-adsystem.com	d1s8ai9yok3amy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:21.745945930 CET	1.1.1.1	192.168.2.5	0x4ca6	No error (0)	ebaumsworld.com		3.86.129.105	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.745945930 CET	1.1.1.1	192.168.2.5	0x4ca6	No error (0)	ebaumsworld.com		34.235.73.77	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.745945930 CET	1.1.1.1	192.168.2.5	0x4ca6	No error (0)	ebaumsworld.com		23.22.255.5	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.745945930 CET	1.1.1.1	192.168.2.5	0x4ca6	No error (0)	ebaumsworld.com		54.221.221.129	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.805351019 CET	1.1.1.1	192.168.2.5	0x446	No error (0)	s.ntv.io	wildcard.ntv.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:21.805732965 CET	1.1.1.1	192.168.2.5	0xac31	No error (0)	s.ntv.io	wildcard.ntv.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:21.805747032 CET	1.1.1.1	192.168.2.5	0x45a1	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:21.805747032 CET	1.1.1.1	192.168.2.5	0x45a1	No error (0)	static-cdn.hotjar.com		18.161.111.43	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.805747032 CET	1.1.1.1	192.168.2.5	0x45a1	No error (0)	static-cdn.hotjar.com		18.161.111.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.805747032 CET	1.1.1.1	192.168.2.5	0x45a1	No error (0)	static-cdn.hotjar.com		18.161.111.91	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.805747032 CET	1.1.1.1	192.168.2.5	0x45a1	No error (0)	static-cdn.hotjar.com		18.161.111.39	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:21.807349920 CET	1.1.1.1	192.168.2.5	0xcca1	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:22.064896107 CET	1.1.1.1	192.168.2.5	0x3ce4	No error (0)	memorizematch.com		104.18.24.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:22.064896107 CET	1.1.1.1	192.168.2.5	0x3ce4	No error (0)	memorizematch.com		104.18.25.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.193209887 CET	1.1.1.1	192.168.2.5	0xa61f	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:24.194436073 CET	1.1.1.1	192.168.2.5	0x1d2f	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:24.194436073 CET	1.1.1.1	192.168.2.5	0x1d2f	No error (0)	static-cdn.hotjar.com		18.161.111.91	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.194436073 CET	1.1.1.1	192.168.2.5	0x1d2f	No error (0)	static-cdn.hotjar.com		18.161.111.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.194436073 CET	1.1.1.1	192.168.2.5	0x1d2f	No error (0)	static-cdn.hotjar.com		18.161.111.39	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.194436073 CET	1.1.1.1	192.168.2.5	0x1d2f	No error (0)	static-cdn.hotjar.com		18.161.111.43	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.407423019 CET	1.1.1.1	192.168.2.5	0xe896	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:24.407423019 CET	1.1.1.1	192.168.2.5	0xe896	No error (0)	d162h6x3rxav67.cloudfront.net		52.222.144.12	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.407423019 CET	1.1.1.1	192.168.2.5	0xe896	No error (0)	d162h6x3rxav67.cloudfront.net		52.222.144.63	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.407423019 CET	1.1.1.1	192.168.2.5	0xe896	No error (0)	d162h6x3rxav67.cloudfront.net		52.222.144.20	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.407423019 CET	1.1.1.1	192.168.2.5	0xe896	No error (0)	d162h6x3rxav67.cloudfront.net		52.222.144.112	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.408953905 CET	1.1.1.1	192.168.2.5	0x18d7	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:24.413831949 CET	1.1.1.1	192.168.2.5	0xd50e	No error (0)	memorizematch.com		104.18.24.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:24.413831949 CET	1.1.1.1	192.168.2.5	0xd50e	No error (0)	memorizematch.com		104.18.25.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:25.430322886 CET	1.1.1.1	192.168.2.5	0xd314	No error (0)	sdk.mrf.io	sdk.mrf.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:25.430732965 CET	1.1.1.1	192.168.2.5	0xda5e	No error (0)	sdk.mrf.io	sdk.mrf.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:26.608336926 CET	1.1.1.1	192.168.2.5	0x1955	No error (0)	static.chartbeat.com	d3f7zc5bbfci5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:26.608445883 CET	1.1.1.1	192.168.2.5	0x6acb	No error (0)	static.chartbeat.com	d3f7zc5bbfci5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:26.608445883 CET	1.1.1.1	192.168.2.5	0x6acb	No error (0)	d3f7zc5bbfci5.cloudfront.net		18.66.152.227	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:27.426362038 CET	1.1.1.1	192.168.2.5	0x6fda	No error (0)	literally-media.videoplayerhub.com		172.67.74.207	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:27.426362038 CET	1.1.1.1	192.168.2.5	0x6fda	No error (0)	literally-media.videoplayerhub.com		104.26.8.50	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:27.426362038 CET	1.1.1.1	192.168.2.5	0x6fda	No error (0)	literally-media.videoplayerhub.com		104.26.9.50	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:27.426651001 CET	1.1.1.1	192.168.2.5	0x613f	No error (0)	literally-media.videoplayerhub.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:27.660166025 CET	1.1.1.1	192.168.2.5	0x1f5c	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:27.660166025 CET	1.1.1.1	192.168.2.5	0x1f5c	No error (0)	z.ssl.fastly.net		199.232.193.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:27.660166025 CET	1.1.1.1	192.168.2.5	0x1f5c	No error (0)	z.ssl.fastly.net		199.232.197.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:27.660500050 CET	1.1.1.1	192.168.2.5	0xed19	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:28.121707916 CET	1.1.1.1	192.168.2.5	0xac0e	No error (0)	api.b2c.com		172.67.43.139	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:28.121707916 CET	1.1.1.1	192.168.2.5	0xac0e	No error (0)	api.b2c.com		104.22.64.220	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:28.121707916 CET	1.1.1.1	192.168.2.5	0xac0e	No error (0)	api.b2c.com		104.22.65.220	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:28.121867895 CET	1.1.1.1	192.168.2.5	0x3a30	No error (0)	api.b2c.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:29.242754936 CET	1.1.1.1	192.168.2.5	0x4b8f	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.242754936 CET	1.1.1.1	192.168.2.5	0x4b8f	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.242754936 CET	1.1.1.1	192.168.2.5	0x4b8f	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.244313955 CET	1.1.1.1	192.168.2.5	0xa91d	No error (0)	btloader.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:29.531749964 CET	1.1.1.1	192.168.2.5	0x6f99	No error (0)	static.chartbeat.com	d3f7zc5bbfci5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:29.532479048 CET	1.1.1.1	192.168.2.5	0xb996	No error (0)	static.chartbeat.com	d3f7zc5bbfci5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:29.532479048 CET	1.1.1.1	192.168.2.5	0xb996	No error (0)	d3f7zc5bbfci5.cloudfront.net		18.66.152.227	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.725384951 CET	1.1.1.1	192.168.2.5	0x15e5	No error (0)	mab.chartbeat.com	dualstack.f6.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:29.751107931 CET	1.1.1.1	192.168.2.5	0xa553	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:29.752603054 CET	1.1.1.1	192.168.2.5	0x1db7	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:29.752603054 CET	1.1.1.1	192.168.2.5	0x1db7	No error (0)	z.ssl.fastly.net		199.232.193.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.752603054 CET	1.1.1.1	192.168.2.5	0x1db7	No error (0)	z.ssl.fastly.net		199.232.197.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:29.801933050 CET	1.1.1.1	192.168.2.5	0xb93f	No error (0)	mab.chartbeat.com	dualstack.f6.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:30.286360025 CET	1.1.1.1	192.168.2.5	0x9a33	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:30.286390066 CET	1.1.1.1	192.168.2.5	0x437	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:30.288312912 CET	1.1.1.1	192.168.2.5	0xd656	No error (0)	api.b2c.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:30.289144993 CET	1.1.1.1	192.168.2.5	0x8a3a	No error (0)	api.b2c.com		104.22.64.220	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.289144993 CET	1.1.1.1	192.168.2.5	0x8a3a	No error (0)	api.b2c.com		104.22.65.220	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.289144993 CET	1.1.1.1	192.168.2.5	0x8a3a	No error (0)	api.b2c.com		172.67.43.139	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.853216887 CET	1.1.1.1	192.168.2.5	0x644f	No error (0)	sb.scorecardresearch.com		3.160.188.50	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.853216887 CET	1.1.1.1	192.168.2.5	0x644f	No error (0)	sb.scorecardresearch.com		3.160.188.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.853216887 CET	1.1.1.1	192.168.2.5	0x644f	No error (0)	sb.scorecardresearch.com		3.160.188.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.853216887 CET	1.1.1.1	192.168.2.5	0x644f	No error (0)	sb.scorecardresearch.com		3.160.188.68	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:30.867379904 CET	1.1.1.1	192.168.2.5	0xf09b	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:30.867379904 CET	1.1.1.1	192.168.2.5	0xf09b	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:30.867379904 CET	1.1.1.1	192.168.2.5	0xf09b	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:30.867415905 CET	1.1.1.1	192.168.2.5	0xbea	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:30.867415905 CET	1.1.1.1	192.168.2.5	0xbea	No error (0)	scontent.xx.fbcdn.net		157.240.196.15	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:31.523720980 CET	1.1.1.1	192.168.2.5	0x260a	No error (0)	bt.dns-finder.com		104.21.25.186	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:31.523720980 CET	1.1.1.1	192.168.2.5	0x260a	No error (0)	bt.dns-finder.com		172.67.134.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:31.524125099 CET	1.1.1.1	192.168.2.5	0xba6e	No error (0)	bt.dns-finder.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:31.548042059 CET	1.1.1.1	192.168.2.5	0x94ce	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:31.548042059 CET	1.1.1.1	192.168.2.5	0x94ce	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:31.548042059 CET	1.1.1.1	192.168.2.5	0x94ce	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:31.548243999 CET	1.1.1.1	192.168.2.5	0x5d68	No error (0)	btloader.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:33.198560953 CET	1.1.1.1	192.168.2.5	0x1c0c	No error (0)	sb.scorecardresearch.com		3.160.188.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.198560953 CET	1.1.1.1	192.168.2.5	0x1c0c	No error (0)	sb.scorecardresearch.com		3.160.188.50	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.198560953 CET	1.1.1.1	192.168.2.5	0x1c0c	No error (0)	sb.scorecardresearch.com		3.160.188.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.198560953 CET	1.1.1.1	192.168.2.5	0x1c0c	No error (0)	sb.scorecardresearch.com		3.160.188.68	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.451637983 CET	1.1.1.1	192.168.2.5	0x1377	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:33.451883078 CET	1.1.1.1	192.168.2.5	0x3c0e	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:33.461761951 CET	1.1.1.1	192.168.2.5	0xbf4c	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462244987 CET	1.1.1.1	192.168.2.5	0x9112	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462244987 CET	1.1.1.1	192.168.2.5	0x9112	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.462651968 CET	1.1.1.1	192.168.2.5	0x876e	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.468343019 CET	1.1.1.1	192.168.2.5	0xefed	No error (0)	id.crwdcntrl.net		13.250.84.149	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.468343019 CET	1.1.1.1	192.168.2.5	0xefed	No error (0)	id.crwdcntrl.net		13.228.52.238	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.468343019 CET	1.1.1.1	192.168.2.5	0xefed	No error (0)	id.crwdcntrl.net		13.228.141.68	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.468343019 CET	1.1.1.1	192.168.2.5	0xefed	No error (0)	id.crwdcntrl.net		3.1.88.234	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.468343019 CET	1.1.1.1	192.168.2.5	0xefed	No error (0)	id.crwdcntrl.net		18.141.252.181	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.468343019 CET	1.1.1.1	192.168.2.5	0xefed	No error (0)	id.crwdcntrl.net		52.220.45.219	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.468343019 CET	1.1.1.1	192.168.2.5	0xefed	No error (0)	id.crwdcntrl.net		52.76.92.93	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.468343019 CET	1.1.1.1	192.168.2.5	0xefed	No error (0)	id.crwdcntrl.net		13.228.48.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.470854044 CET	1.1.1.1	192.168.2.5	0x838c	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.470854044 CET	1.1.1.1	192.168.2.5	0x838c	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.470854044 CET	1.1.1.1	192.168.2.5	0x838c	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.470854044 CET	1.1.1.1	192.168.2.5	0x838c	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:33.712940931 CET	1.1.1.1	192.168.2.5	0x3682	No error (0)	t.pubmatic.com	tv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:33.712940931 CET	1.1.1.1	192.168.2.5	0x3682	No error (0)	tv2.pubmnet.com	t-sin12c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:33.716007948 CET	1.1.1.1	192.168.2.5	0xc444	No error (0)	t.pubmatic.com	tv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:33.716007948 CET	1.1.1.1	192.168.2.5	0xc444	No error (0)	tv2.pubmnet.com	t-sin12c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:33.716007948 CET	1.1.1.1	192.168.2.5	0xc444	No error (0)	t-sin12c.pubmnet.com		207.65.33.74	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:34.213654995 CET	1.1.1.1	192.168.2.5	0x8e88	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:34.213654995 CET	1.1.1.1	192.168.2.5	0x8e88	No error (0)	scontent.xx.fbcdn.net		157.240.196.15	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:34.213998079 CET	1.1.1.1	192.168.2.5	0x4d7f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:34.213998079 CET	1.1.1.1	192.168.2.5	0x4d7f	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:34.213998079 CET	1.1.1.1	192.168.2.5	0x4d7f	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:34.434015036 CET	1.1.1.1	192.168.2.5	0xf3ad	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:34.434015036 CET	1.1.1.1	192.168.2.5	0xf3ad	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:34.434015036 CET	1.1.1.1	192.168.2.5	0xf3ad	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:34.434282064 CET	1.1.1.1	192.168.2.5	0x3497	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:34.434282064 CET	1.1.1.1	192.168.2.5	0x3497	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:34.434282064 CET	1.1.1.1	192.168.2.5	0x3497	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:34.434282064 CET	1.1.1.1	192.168.2.5	0x3497	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		108.139.78.212	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:34.587178946 CET	1.1.1.1	192.168.2.5	0xc20e	No error (0)	bt.dns-finder.com		104.21.25.186	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:34.587178946 CET	1.1.1.1	192.168.2.5	0xc20e	No error (0)	bt.dns-finder.com		172.67.134.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:34.588080883 CET	1.1.1.1	192.168.2.5	0x2a87	No error (0)	bt.dns-finder.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.531675100 CET	1.1.1.1	192.168.2.5	0x2899	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.532351017 CET	1.1.1.1	192.168.2.5	0x6798	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.564909935 CET	1.1.1.1	192.168.2.5	0xf4c1	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.564909935 CET	1.1.1.1	192.168.2.5	0xf4c1	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.564909935 CET	1.1.1.1	192.168.2.5	0xf4c1	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:35.564909935 CET	1.1.1.1	192.168.2.5	0xf4c1	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:36.360580921 CET	1.1.1.1	192.168.2.5	0xed29	No error (0)	t.pubmatic.com	tv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:36.360580921 CET	1.1.1.1	192.168.2.5	0xed29	No error (0)	tv2.pubmnet.com	t-sin12c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:36.360580921 CET	1.1.1.1	192.168.2.5	0xed29	No error (0)	t-sin12c.pubmnet.com		207.65.33.74	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:36.361499071 CET	1.1.1.1	192.168.2.5	0x9c7b	No error (0)	t.pubmatic.com	tv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:36.361499071 CET	1.1.1.1	192.168.2.5	0x9c7b	No error (0)	tv2.pubmnet.com	t-sin12c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:37.596934080 CET	1.1.1.1	192.168.2.5	0x3b50	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:37.597476006 CET	1.1.1.1	192.168.2.5	0x41ac	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.598742962 CET	1.1.1.1	192.168.2.5	0x3ba4	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.914707899 CET	1.1.1.1	192.168.2.5	0x7f28	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:37.914707899 CET	1.1.1.1	192.168.2.5	0x7f28	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:37.914707899 CET	1.1.1.1	192.168.2.5	0x7f28	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:37.914707899 CET	1.1.1.1	192.168.2.5	0x7f28	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		108.139.78.212	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:37.915913105 CET	1.1.1.1	192.168.2.5	0x64bc	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:37.915913105 CET	1.1.1.1	192.168.2.5	0x64bc	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:37.915913105 CET	1.1.1.1	192.168.2.5	0x64bc	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:39.527399063 CET	1.1.1.1	192.168.2.5	0x1c9e	No error (0)	script.hotjar.com		13.227.8.2	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.527399063 CET	1.1.1.1	192.168.2.5	0x1c9e	No error (0)	script.hotjar.com		13.227.8.35	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.527399063 CET	1.1.1.1	192.168.2.5	0x1c9e	No error (0)	script.hotjar.com		13.227.8.16	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.527399063 CET	1.1.1.1	192.168.2.5	0x1c9e	No error (0)	script.hotjar.com		13.227.8.4	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.603343010 CET	1.1.1.1	192.168.2.5	0xe722	No error (0)	eagerknight.com		104.18.24.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.603343010 CET	1.1.1.1	192.168.2.5	0xe722	No error (0)	eagerknight.com		104.18.25.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.943994045 CET	1.1.1.1	192.168.2.5	0xa286	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:39.943994045 CET	1.1.1.1	192.168.2.5	0xa286	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.71	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.943994045 CET	1.1.1.1	192.168.2.5	0xa286	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.943994045 CET	1.1.1.1	192.168.2.5	0xa286	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.20	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.943994045 CET	1.1.1.1	192.168.2.5	0xa286	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.32	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:39.944178104 CET	1.1.1.1	192.168.2.5	0x894f	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539113045 CET	1.1.1.1	192.168.2.5	0xd948	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539113045 CET	1.1.1.1	192.168.2.5	0xd948	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539113045 CET	1.1.1.1	192.168.2.5	0xd948	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539113045 CET	1.1.1.1	192.168.2.5	0xd948	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539113045 CET	1.1.1.1	192.168.2.5	0xd948	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539113045 CET	1.1.1.1	192.168.2.5	0xd948	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539149046 CET	1.1.1.1	192.168.2.5	0xf3b8	No error (0)	unpkg.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:40.539165020 CET	1.1.1.1	192.168.2.5	0xf79c	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539165020 CET	1.1.1.1	192.168.2.5	0xf79c	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539516926 CET	1.1.1.1	192.168.2.5	0x8769	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539516926 CET	1.1.1.1	192.168.2.5	0x8769	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539516926 CET	1.1.1.1	192.168.2.5	0x8769	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539516926 CET	1.1.1.1	192.168.2.5	0x8769	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.539516926 CET	1.1.1.1	192.168.2.5	0x8769	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.543781996 CET	1.1.1.1	192.168.2.5	0x8e60	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:40.544416904 CET	1.1.1.1	192.168.2.5	0xf676	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:40.544758081 CET	1.1.1.1	192.168.2.5	0x931	No error (0)	www.lightboxcdn.com		104.17.158.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.544758081 CET	1.1.1.1	192.168.2.5	0x931	No error (0)	www.lightboxcdn.com		104.17.159.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.546343088 CET	1.1.1.1	192.168.2.5	0x159a	No error (0)	www.lightboxcdn.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:40.579621077 CET	1.1.1.1	192.168.2.5	0xc841	No error (0)	postrelease.com		52.36.224.135	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.604967117 CET	1.1.1.1	192.168.2.5	0xf512	No error (0)	cdn.speedcurve.com	a3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:40.714325905 CET	1.1.1.1	192.168.2.5	0xc3d9	No error (0)	static.trueanthem.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:40.714687109 CET	1.1.1.1	192.168.2.5	0x4071	No error (0)	static.trueanthem.com		104.26.11.164	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.714687109 CET	1.1.1.1	192.168.2.5	0x4071	No error (0)	static.trueanthem.com		104.26.10.164	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.714687109 CET	1.1.1.1	192.168.2.5	0x4071	No error (0)	static.trueanthem.com		172.67.72.135	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:40.818002939 CET	1.1.1.1	192.168.2.5	0x6eec	No error (0)	cdn.speedcurve.com	a3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:41.361829042 CET	1.1.1.1	192.168.2.5	0xffde	No error (0)	amp.ebaumsworld.com	ebaumsworld.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:41.361829042 CET	1.1.1.1	192.168.2.5	0xffde	No error (0)	scdn12ea6.wpc.92a94.etacdn.net	sni1gl.wpc.etacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:41.361829042 CET	1.1.1.1	192.168.2.5	0xffde	No error (0)	sni1gl.wpc.etacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:41.361963987 CET	1.1.1.1	192.168.2.5	0x328e	No error (0)	amp.ebaumsworld.com	ebaumsworld.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:41.361963987 CET	1.1.1.1	192.168.2.5	0x328e	No error (0)	scdn12ea6.wpc.92a94.etacdn.net	sni1gl.wpc.etacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:41.362138033 CET	1.1.1.1	192.168.2.5	0x3c1f	No error (0)	amp.ebaumsworld.com	ebaumsworld.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:41.362138033 CET	1.1.1.1	192.168.2.5	0x3c1f	No error (0)	scdn12ea6.wpc.92a94.etacdn.net	sni1gl.wpc.etacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:41.362270117 CET	1.1.1.1	192.168.2.5	0xedcf	No error (0)	amp.ebaumsworld.com	ebaumsworld.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:41.362270117 CET	1.1.1.1	192.168.2.5	0xedcf	No error (0)	scdn12ea6.wpc.92a94.etacdn.net	sni1gl.wpc.etacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:41.362270117 CET	1.1.1.1	192.168.2.5	0xedcf	No error (0)	sni1gl.wpc.etacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:41.886961937 CET	1.1.1.1	192.168.2.5	0x606f	No error (0)	eagerknight.com		104.18.24.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:41.886961937 CET	1.1.1.1	192.168.2.5	0x606f	No error (0)	eagerknight.com		104.18.25.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.371640921 CET	1.1.1.1	192.168.2.5	0x220e	No error (0)	www.lightboxcdn.com		104.17.159.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.371640921 CET	1.1.1.1	192.168.2.5	0x220e	No error (0)	www.lightboxcdn.com		104.17.158.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.372621059 CET	1.1.1.1	192.168.2.5	0x9f30	No error (0)	www.lightboxcdn.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:42.529431105 CET	1.1.1.1	192.168.2.5	0x962	No error (0)	static.trueanthem.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:42.530081034 CET	1.1.1.1	192.168.2.5	0x842c	No error (0)	static.trueanthem.com		104.26.10.164	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.530081034 CET	1.1.1.1	192.168.2.5	0x842c	No error (0)	static.trueanthem.com		104.26.11.164	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.530081034 CET	1.1.1.1	192.168.2.5	0x842c	No error (0)	static.trueanthem.com		172.67.72.135	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.866063118 CET	1.1.1.1	192.168.2.5	0xd0dc	No error (0)	cdn.speedcurve.com	a3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:42.866198063 CET	1.1.1.1	192.168.2.5	0x6445	No error (0)	cdn.speedcurve.com	a3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:42.948425055 CET	1.1.1.1	192.168.2.5	0x6afe	No error (0)	script.hotjar.com		13.227.8.2	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.948425055 CET	1.1.1.1	192.168.2.5	0x6afe	No error (0)	script.hotjar.com		13.227.8.16	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.948425055 CET	1.1.1.1	192.168.2.5	0x6afe	No error (0)	script.hotjar.com		13.227.8.4	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:42.948425055 CET	1.1.1.1	192.168.2.5	0x6afe	No error (0)	script.hotjar.com		13.227.8.35	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.114646912 CET	1.1.1.1	192.168.2.5	0x8b24	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:43.114646912 CET	1.1.1.1	192.168.2.5	0x8b24	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:43.114646912 CET	1.1.1.1	192.168.2.5	0x8b24	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.114646912 CET	1.1.1.1	192.168.2.5	0x8b24	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.114646912 CET	1.1.1.1	192.168.2.5	0x8b24	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.114646912 CET	1.1.1.1	192.168.2.5	0x8b24	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.124207020 CET	1.1.1.1	192.168.2.5	0x5c81	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:43.124207020 CET	1.1.1.1	192.168.2.5	0x5c81	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:43.653471947 CET	1.1.1.1	192.168.2.5	0xcd23	No error (0)	ping.chartbeat.net		44.214.102.204	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.653471947 CET	1.1.1.1	192.168.2.5	0xcd23	No error (0)	ping.chartbeat.net		52.20.175.174	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.653471947 CET	1.1.1.1	192.168.2.5	0xcd23	No error (0)	ping.chartbeat.net		54.163.224.76	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.653471947 CET	1.1.1.1	192.168.2.5	0xcd23	No error (0)	ping.chartbeat.net		54.165.216.67	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.653471947 CET	1.1.1.1	192.168.2.5	0xcd23	No error (0)	ping.chartbeat.net		44.208.199.202	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.653471947 CET	1.1.1.1	192.168.2.5	0xcd23	No error (0)	ping.chartbeat.net		54.173.235.4	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.653471947 CET	1.1.1.1	192.168.2.5	0xcd23	No error (0)	ping.chartbeat.net		44.215.100.99	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:43.653471947 CET	1.1.1.1	192.168.2.5	0xcd23	No error (0)	ping.chartbeat.net		34.195.200.218	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:44.381680965 CET	1.1.1.1	192.168.2.5	0x4c0d	No error (0)	amp.ebaumsworld.com	ebaumsworld.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:44.381680965 CET	1.1.1.1	192.168.2.5	0x4c0d	No error (0)	scdn12ea6.wpc.92a94.etacdn.net	sni1gl.wpc.etacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:44.381680965 CET	1.1.1.1	192.168.2.5	0x4c0d	No error (0)	sni1gl.wpc.etacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:44.381835938 CET	1.1.1.1	192.168.2.5	0xbc3c	No error (0)	amp.ebaumsworld.com	ebaumsworld.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:44.381835938 CET	1.1.1.1	192.168.2.5	0xbc3c	No error (0)	scdn12ea6.wpc.92a94.etacdn.net	sni1gl.wpc.etacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:44.382174015 CET	1.1.1.1	192.168.2.5	0x7148	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:44.382174015 CET	1.1.1.1	192.168.2.5	0x7148	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:44.382174015 CET	1.1.1.1	192.168.2.5	0x7148	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:44.382174015 CET	1.1.1.1	192.168.2.5	0x7148	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:44.382174015 CET	1.1.1.1	192.168.2.5	0x7148	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:44.382914066 CET	1.1.1.1	192.168.2.5	0x6106	No error (0)	unpkg.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:45.565463066 CET	1.1.1.1	192.168.2.5	0x1150	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:45.565463066 CET	1.1.1.1	192.168.2.5	0x1150	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:45.565463066 CET	1.1.1.1	192.168.2.5	0x1150	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:45.565521955 CET	1.1.1.1	192.168.2.5	0x637a	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:46.037995100 CET	1.1.1.1	192.168.2.5	0x81c0	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:46.038055897 CET	1.1.1.1	192.168.2.5	0x9373	No error (0)	ad.doubleclick.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:46.040328026 CET	1.1.1.1	192.168.2.5	0xfd13	No error (0)	ping.chartbeat.net		34.195.200.218	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:46.040328026 CET	1.1.1.1	192.168.2.5	0xfd13	No error (0)	ping.chartbeat.net		52.20.175.174	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:46.040328026 CET	1.1.1.1	192.168.2.5	0xfd13	No error (0)	ping.chartbeat.net		54.163.224.76	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:46.040328026 CET	1.1.1.1	192.168.2.5	0xfd13	No error (0)	ping.chartbeat.net		54.165.216.67	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:46.040328026 CET	1.1.1.1	192.168.2.5	0xfd13	No error (0)	ping.chartbeat.net		44.208.199.202	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:46.040328026 CET	1.1.1.1	192.168.2.5	0xfd13	No error (0)	ping.chartbeat.net		44.215.100.99	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:46.040328026 CET	1.1.1.1	192.168.2.5	0xfd13	No error (0)	ping.chartbeat.net		54.173.235.4	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:46.040328026 CET	1.1.1.1	192.168.2.5	0xfd13	No error (0)	ping.chartbeat.net		44.214.102.204	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.069257021 CET	1.1.1.1	192.168.2.5	0xcb2	No error (0)	merequartz.com		104.18.24.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.069257021 CET	1.1.1.1	192.168.2.5	0xcb2	No error (0)	merequartz.com		104.18.25.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.516680956 CET	1.1.1.1	192.168.2.5	0x7279	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.517640114 CET	1.1.1.1	192.168.2.5	0xc34	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:47.517668009 CET	1.1.1.1	192.168.2.5	0x8404	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.517668009 CET	1.1.1.1	192.168.2.5	0x8404	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.517668009 CET	1.1.1.1	192.168.2.5	0x8404	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.518404007 CET	1.1.1.1	192.168.2.5	0xce0b	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:47.996829987 CET	1.1.1.1	192.168.2.5	0x58dc	No error (0)	pubads.g.doubleclick.net		142.250.181.2	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.997101068 CET	1.1.1.1	192.168.2.5	0x42e1	No error (0)	pubads.g.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:47.998889923 CET	1.1.1.1	192.168.2.5	0xe9ef	No error (0)	securepubads.g.doubleclick.net		172.217.19.162	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:47.998899937 CET	1.1.1.1	192.168.2.5	0xd159	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:48.000426054 CET	1.1.1.1	192.168.2.5	0x6d74	No error (0)	stats.g.doubleclick.net		74.125.71.154	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.000426054 CET	1.1.1.1	192.168.2.5	0x6d74	No error (0)	stats.g.doubleclick.net		74.125.71.157	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.000426054 CET	1.1.1.1	192.168.2.5	0x6d74	No error (0)	stats.g.doubleclick.net		74.125.71.155	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.000426054 CET	1.1.1.1	192.168.2.5	0x6d74	No error (0)	stats.g.doubleclick.net		74.125.71.156	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.137175083 CET	1.1.1.1	192.168.2.5	0xfeca	No error (0)	googleads4.g.doubleclick.net		172.217.19.162	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.137305021 CET	1.1.1.1	192.168.2.5	0xdefa	No error (0)	cm.g.doubleclick.net		142.250.181.130	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.139355898 CET	1.1.1.1	192.168.2.5	0x93e1	No error (0)	googleads.g.doubleclick.net		142.250.181.2	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.140074015 CET	1.1.1.1	192.168.2.5	0x6432	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:48.371357918 CET	1.1.1.1	192.168.2.5	0xd79c	No error (0)	pghub.io		35.241.45.217	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.410746098 CET	1.1.1.1	192.168.2.5	0xa8b	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:48.411118984 CET	1.1.1.1	192.168.2.5	0x537a	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:48.411118984 CET	1.1.1.1	192.168.2.5	0x537a	No error (0)	z.ssl.fastly.net		199.232.193.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.411118984 CET	1.1.1.1	192.168.2.5	0x537a	No error (0)	z.ssl.fastly.net		199.232.197.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.453802109 CET	1.1.1.1	192.168.2.5	0x245c	No error (0)	pandg.tapad.com		34.102.243.38	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.459141016 CET	1.1.1.1	192.168.2.5	0xc6cf	No error (0)	b.scorecardresearch.com		3.160.188.50	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.459141016 CET	1.1.1.1	192.168.2.5	0xc6cf	No error (0)	b.scorecardresearch.com		3.160.188.68	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.459141016 CET	1.1.1.1	192.168.2.5	0xc6cf	No error (0)	b.scorecardresearch.com		3.160.188.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.459141016 CET	1.1.1.1	192.168.2.5	0xc6cf	No error (0)	b.scorecardresearch.com		3.160.188.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.703392029 CET	1.1.1.1	192.168.2.5	0x5a40	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.705250978 CET	1.1.1.1	192.168.2.5	0x3d70	No error (0)	ad.doubleclick.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.706177950 CET	1.1.1.1	192.168.2.5	0xada6	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:48.932533979 CET	1.1.1.1	192.168.2.5	0x5240	No error (0)	merequartz.com		104.18.24.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:48.932533979 CET	1.1.1.1	192.168.2.5	0x5240	No error (0)	merequartz.com		104.18.25.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.303085089 CET	1.1.1.1	192.168.2.5	0x54c4	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:50.303128958 CET	1.1.1.1	192.168.2.5	0xa50d	No error (0)	www.google.com		172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.565924883 CET	1.1.1.1	192.168.2.5	0xa410	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.816768885 CET	1.1.1.1	192.168.2.5	0xbfe1	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:50.816768885 CET	1.1.1.1	192.168.2.5	0xbfe1	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.161.109	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.816768885 CET	1.1.1.1	192.168.2.5	0xbfe1	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.161.91	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.816768885 CET	1.1.1.1	192.168.2.5	0xbfe1	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.161.77	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.816768885 CET	1.1.1.1	192.168.2.5	0xbfe1	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.161.54	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:50.817742109 CET	1.1.1.1	192.168.2.5	0x46cf	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:51.654685974 CET	1.1.1.1	192.168.2.5	0xa680	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:51.654685974 CET	1.1.1.1	192.168.2.5	0xa680	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:51.654685974 CET	1.1.1.1	192.168.2.5	0xa680	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:51.654685974 CET	1.1.1.1	192.168.2.5	0xa680	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:51.655435085 CET	1.1.1.1	192.168.2.5	0xece2	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:54.133050919 CET	1.1.1.1	192.168.2.5	0x8a8a	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:54.219535112 CET	1.1.1.1	192.168.2.5	0xb8e	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:54.219535112 CET	1.1.1.1	192.168.2.5	0xb8e	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.161.77	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.219535112 CET	1.1.1.1	192.168.2.5	0xb8e	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.161.91	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.219535112 CET	1.1.1.1	192.168.2.5	0xb8e	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.161.54	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.219535112 CET	1.1.1.1	192.168.2.5	0xb8e	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.161.109	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.560769081 CET	1.1.1.1	192.168.2.5	0x7d9a	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:54.560769081 CET	1.1.1.1	192.168.2.5	0x7d9a	No error (0)	www3.l.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.561949015 CET	1.1.1.1	192.168.2.5	0x4258	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:54.562684059 CET	1.1.1.1	192.168.2.5	0x6f26	No error (0)	tagan.adlightning.com		3.160.196.69	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.562684059 CET	1.1.1.1	192.168.2.5	0x6f26	No error (0)	tagan.adlightning.com		3.160.196.13	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.562684059 CET	1.1.1.1	192.168.2.5	0x6f26	No error (0)	tagan.adlightning.com		3.160.196.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.562684059 CET	1.1.1.1	192.168.2.5	0x6f26	No error (0)	tagan.adlightning.com		3.160.196.107	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.608095884 CET	1.1.1.1	192.168.2.5	0x7c80	No error (0)	cdn.permutive.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:54.609189034 CET	1.1.1.1	192.168.2.5	0x7f24	No error (0)	cdn.permutive.com		104.17.108.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.609189034 CET	1.1.1.1	192.168.2.5	0x7f24	No error (0)	cdn.permutive.com		104.17.109.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.719346046 CET	1.1.1.1	192.168.2.5	0x15fc	No error (0)	d15kdpgjg3unno.cloudfront.net		205.251.222.44	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.719346046 CET	1.1.1.1	192.168.2.5	0x15fc	No error (0)	d15kdpgjg3unno.cloudfront.net		205.251.222.2	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.719346046 CET	1.1.1.1	192.168.2.5	0x15fc	No error (0)	d15kdpgjg3unno.cloudfront.net		205.251.222.187	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:54.719346046 CET	1.1.1.1	192.168.2.5	0x15fc	No error (0)	d15kdpgjg3unno.cloudfront.net		205.251.222.62	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.259027004 CET	1.1.1.1	192.168.2.5	0xfe77	No error (0)	cdn.adsafeprotected.com	d3tqyidpuy80xi.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:57.262809992 CET	1.1.1.1	192.168.2.5	0xce63	No error (0)	tagan.adlightning.com		3.160.196.69	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.262809992 CET	1.1.1.1	192.168.2.5	0xce63	No error (0)	tagan.adlightning.com		3.160.196.13	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.262809992 CET	1.1.1.1	192.168.2.5	0xce63	No error (0)	tagan.adlightning.com		3.160.196.107	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.262809992 CET	1.1.1.1	192.168.2.5	0xce63	No error (0)	tagan.adlightning.com		3.160.196.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.346832991 CET	1.1.1.1	192.168.2.5	0x9f7b	No error (0)	cdn.adsafeprotected.com	d3tqyidpuy80xi.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:57.346832991 CET	1.1.1.1	192.168.2.5	0x9f7b	No error (0)	d3tqyidpuy80xi.cloudfront.net		52.222.144.6	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.346832991 CET	1.1.1.1	192.168.2.5	0x9f7b	No error (0)	d3tqyidpuy80xi.cloudfront.net		52.222.144.93	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.346832991 CET	1.1.1.1	192.168.2.5	0x9f7b	No error (0)	d3tqyidpuy80xi.cloudfront.net		52.222.144.88	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.346832991 CET	1.1.1.1	192.168.2.5	0x9f7b	No error (0)	d3tqyidpuy80xi.cloudfront.net		52.222.144.23	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.724423885 CET	1.1.1.1	192.168.2.5	0x512e	No error (0)	d15kdpgjg3unno.cloudfront.net		205.251.222.44	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.724423885 CET	1.1.1.1	192.168.2.5	0x512e	No error (0)	d15kdpgjg3unno.cloudfront.net		205.251.222.62	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.724423885 CET	1.1.1.1	192.168.2.5	0x512e	No error (0)	d15kdpgjg3unno.cloudfront.net		205.251.222.2	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.724423885 CET	1.1.1.1	192.168.2.5	0x512e	No error (0)	d15kdpgjg3unno.cloudfront.net		205.251.222.187	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.884434938 CET	1.1.1.1	192.168.2.5	0x53f7	No error (0)	securepubads.g.doubleclick.net		172.217.19.194	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:57.884521961 CET	1.1.1.1	192.168.2.5	0x2397	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2024 19:57:58.124100924 CET	1.1.1.1	192.168.2.5	0xcdf8	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:58.124357939 CET	1.1.1.1	192.168.2.5	0x79f6	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:58.124357939 CET	1.1.1.1	192.168.2.5	0x79f6	No error (0)	www3.l.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.226772070 CET	1.1.1.1	192.168.2.5	0xf467	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.233119011 CET	1.1.1.1	192.168.2.5	0xcb36	No error (0)	cdn.permutive.com		104.17.109.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.233119011 CET	1.1.1.1	192.168.2.5	0xcb36	No error (0)	cdn.permutive.com		104.17.108.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.233342886 CET	1.1.1.1	192.168.2.5	0x7b1	No error (0)	cdn.permutive.com			65	IN (0x0001)	false
Dec 12, 2024 19:57:59.319099903 CET	1.1.1.1	192.168.2.5	0x4d40	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:59.319262981 CET	1.1.1.1	192.168.2.5	0xefe7	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:59.319262981 CET	1.1.1.1	192.168.2.5	0xefe7	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.66.162.67	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.319413900 CET	1.1.1.1	192.168.2.5	0xb1b8	No error (0)	3d2fb0bd-52fc-4b75-aaf5-2d436c172540.prmutv.co		35.241.9.51	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.328269958 CET	1.1.1.1	192.168.2.5	0x83fe	No error (0)	api.permutive.com		34.107.254.252	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.825594902 CET	1.1.1.1	192.168.2.5	0x26bc	No error (0)	cdn.adsafeprotected.com	d3tqyidpuy80xi.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:59.826550961 CET	1.1.1.1	192.168.2.5	0xacbb	No error (0)	cdn.adsafeprotected.com	d3tqyidpuy80xi.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:57:59.826550961 CET	1.1.1.1	192.168.2.5	0xacbb	No error (0)	d3tqyidpuy80xi.cloudfront.net		52.222.144.23	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.826550961 CET	1.1.1.1	192.168.2.5	0xacbb	No error (0)	d3tqyidpuy80xi.cloudfront.net		52.222.144.88	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.826550961 CET	1.1.1.1	192.168.2.5	0xacbb	No error (0)	d3tqyidpuy80xi.cloudfront.net		52.222.144.93	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:57:59.826550961 CET	1.1.1.1	192.168.2.5	0xacbb	No error (0)	d3tqyidpuy80xi.cloudfront.net		52.222.144.6	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:01.879609108 CET	1.1.1.1	192.168.2.5	0xa365	No error (0)	api.permutive.com		34.107.254.252	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:02.288676977 CET	1.1.1.1	192.168.2.5	0xdbed	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:02.289516926 CET	1.1.1.1	192.168.2.5	0xc280	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:02.289516926 CET	1.1.1.1	192.168.2.5	0xc280	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.66.162.67	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:02.629111052 CET	1.1.1.1	192.168.2.5	0xa5ff	No error (0)	analytics.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:02.793323040 CET	1.1.1.1	192.168.2.5	0xa924	No error (0)	td.doubleclick.net		142.250.181.66	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:05.252955914 CET	1.1.1.1	192.168.2.5	0x2d65	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:05.252955914 CET	1.1.1.1	192.168.2.5	0x2d65	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:05.252955914 CET	1.1.1.1	192.168.2.5	0x2d65	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:05.262048960 CET	1.1.1.1	192.168.2.5	0x3ce4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:05.262048960 CET	1.1.1.1	192.168.2.5	0x3ce4	No error (0)	star-mini.c10r.facebook.com		157.240.196.35	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:07.367760897 CET	1.1.1.1	192.168.2.5	0xb876	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:07.367760897 CET	1.1.1.1	192.168.2.5	0xb876	No error (0)	star-mini.c10r.facebook.com		157.240.196.35	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:07.367813110 CET	1.1.1.1	192.168.2.5	0xbb1f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:07.367813110 CET	1.1.1.1	192.168.2.5	0xbb1f	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:07.367813110 CET	1.1.1.1	192.168.2.5	0xbb1f	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:07.734714985 CET	1.1.1.1	192.168.2.5	0xc76c	No error (0)	ntvcld-a.akamaihd.net	ntvcld-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:07.735158920 CET	1.1.1.1	192.168.2.5	0x4195	No error (0)	ntvcld-a.akamaihd.net	ntvcld-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:08.365259886 CET	1.1.1.1	192.168.2.5	0x40ec	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:08.365259886 CET	1.1.1.1	192.168.2.5	0x40ec	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:08.365259886 CET	1.1.1.1	192.168.2.5	0x40ec	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:08.365259886 CET	1.1.1.1	192.168.2.5	0x40ec	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:08.365259886 CET	1.1.1.1	192.168.2.5	0x40ec	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:08.365885019 CET	1.1.1.1	192.168.2.5	0xa7dd	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:08.580956936 CET	1.1.1.1	192.168.2.5	0x7bbb	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:08.581207991 CET	1.1.1.1	192.168.2.5	0x1fae	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:08.581207991 CET	1.1.1.1	192.168.2.5	0x1fae	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:08.581207991 CET	1.1.1.1	192.168.2.5	0x1fae	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:09.448419094 CET	1.1.1.1	192.168.2.5	0x4b0f	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:09.449229956 CET	1.1.1.1	192.168.2.5	0x94f6	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:09.980484962 CET	1.1.1.1	192.168.2.5	0xa824	No error (0)	ntvcld-a.akamaihd.net	ntvcld-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:09.980515003 CET	1.1.1.1	192.168.2.5	0xdec9	No error (0)	ntvcld-a.akamaihd.net	ntvcld-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:10.079240084 CET	1.1.1.1	192.168.2.5	0xf83e	No error (0)	cdn.browsiprod.com		18.66.161.2	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:10.079240084 CET	1.1.1.1	192.168.2.5	0xf83e	No error (0)	cdn.browsiprod.com		18.66.161.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:10.079240084 CET	1.1.1.1	192.168.2.5	0xf83e	No error (0)	cdn.browsiprod.com		18.66.161.42	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:10.079240084 CET	1.1.1.1	192.168.2.5	0xf83e	No error (0)	cdn.browsiprod.com		18.66.161.128	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:10.774488926 CET	1.1.1.1	192.168.2.5	0xbde5	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:10.774488926 CET	1.1.1.1	192.168.2.5	0xbde5	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:10.774488926 CET	1.1.1.1	192.168.2.5	0xbde5	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:10.774488926 CET	1.1.1.1	192.168.2.5	0xbde5	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:10.774488926 CET	1.1.1.1	192.168.2.5	0xbde5	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:10.775026083 CET	1.1.1.1	192.168.2.5	0xc0b5	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:13.413996935 CET	1.1.1.1	192.168.2.5	0x22ec	No error (0)	cdn.browsiprod.com		18.66.161.128	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.413996935 CET	1.1.1.1	192.168.2.5	0x22ec	No error (0)	cdn.browsiprod.com		18.66.161.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.413996935 CET	1.1.1.1	192.168.2.5	0x22ec	No error (0)	cdn.browsiprod.com		18.66.161.42	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.413996935 CET	1.1.1.1	192.168.2.5	0x22ec	No error (0)	cdn.browsiprod.com		18.66.161.2	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.432945967 CET	1.1.1.1	192.168.2.5	0x837d	No error (0)	sqs.us-east-1.amazonaws.com		3.239.232.41	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.454335928 CET	1.1.1.1	192.168.2.5	0xdb2f	No error (0)	events.browsiprod.com		44.239.189.129	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.454335928 CET	1.1.1.1	192.168.2.5	0xdb2f	No error (0)	events.browsiprod.com		44.227.243.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.454335928 CET	1.1.1.1	192.168.2.5	0xdb2f	No error (0)	events.browsiprod.com		54.148.54.250	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.454335928 CET	1.1.1.1	192.168.2.5	0xdb2f	No error (0)	events.browsiprod.com		35.167.123.208	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.454335928 CET	1.1.1.1	192.168.2.5	0xdb2f	No error (0)	events.browsiprod.com		35.160.22.211	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.454335928 CET	1.1.1.1	192.168.2.5	0xdb2f	No error (0)	events.browsiprod.com		54.149.76.249	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.456864119 CET	1.1.1.1	192.168.2.5	0xa832	No error (0)	yield-manager.browsiprod.com		13.227.8.39	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.456864119 CET	1.1.1.1	192.168.2.5	0xa832	No error (0)	yield-manager.browsiprod.com		13.227.8.94	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.456864119 CET	1.1.1.1	192.168.2.5	0xa832	No error (0)	yield-manager.browsiprod.com		13.227.8.63	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:13.456864119 CET	1.1.1.1	192.168.2.5	0xa832	No error (0)	yield-manager.browsiprod.com		13.227.8.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:15.859074116 CET	1.1.1.1	192.168.2.5	0xf1d9	No error (0)	sqs.us-east-1.amazonaws.com		3.239.232.41	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:16.577716112 CET	1.1.1.1	192.168.2.5	0x7d86	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:16.577847004 CET	1.1.1.1	192.168.2.5	0x8c2a	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:16.577847004 CET	1.1.1.1	192.168.2.5	0x8c2a	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:16.577847004 CET	1.1.1.1	192.168.2.5	0x8c2a	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:20.164716005 CET	1.1.1.1	192.168.2.5	0x2f5	No error (0)	lightboxapi.azurewebsites.net	waws-prod-dm1-175.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:20.164716005 CET	1.1.1.1	192.168.2.5	0x2f5	No error (0)	waws-prod-dm1-175.sip.azurewebsites.windows.net	waws-prod-dm1-175-kiwi.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:20.164952993 CET	1.1.1.1	192.168.2.5	0x566a	No error (0)	lightboxapi.azurewebsites.net	waws-prod-dm1-175.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:20.164952993 CET	1.1.1.1	192.168.2.5	0x566a	No error (0)	waws-prod-dm1-175.sip.azurewebsites.windows.net	waws-prod-dm1-175-kiwi.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	pixel.adsafeprotected.com	iepixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	iepixel.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.214.250.15	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.211.37.243	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		34.251.253.92	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.31.75.164	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.210.61.99	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.213.154.13	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.50.230.88	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.802268982 CET	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		18.202.207.48	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.803162098 CET	1.1.1.1	192.168.2.5	0xa987	No error (0)	pixel.adsafeprotected.com	iepixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:21.803162098 CET	1.1.1.1	192.168.2.5	0xa987	No error (0)	iepixel.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:21.838526964 CET	1.1.1.1	192.168.2.5	0xfceb	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:21.929224014 CET	1.1.1.1	192.168.2.5	0x27e7	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:21.929224014 CET	1.1.1.1	192.168.2.5	0x27e7	No error (0)	idx.cph.liveintent.com		3.221.57.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.929224014 CET	1.1.1.1	192.168.2.5	0x27e7	No error (0)	idx.cph.liveintent.com		34.194.178.247	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.929224014 CET	1.1.1.1	192.168.2.5	0x27e7	No error (0)	idx.cph.liveintent.com		34.238.92.28	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.929224014 CET	1.1.1.1	192.168.2.5	0x27e7	No error (0)	idx.cph.liveintent.com		54.164.90.29	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.929224014 CET	1.1.1.1	192.168.2.5	0x27e7	No error (0)	idx.cph.liveintent.com		18.210.235.203	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.929224014 CET	1.1.1.1	192.168.2.5	0x27e7	No error (0)	idx.cph.liveintent.com		44.220.97.187	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.933937073 CET	1.1.1.1	192.168.2.5	0x6664	No error (0)	api.rlcdn.com		34.107.165.188	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.943486929 CET	1.1.1.1	192.168.2.5	0xa19b	No error (0)	async01.admantx.com		35.79.245.53	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:21.943486929 CET	1.1.1.1	192.168.2.5	0xa19b	No error (0)	async01.admantx.com		54.92.77.149	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.336751938 CET	1.1.1.1	192.168.2.5	0x6168	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.336751938 CET	1.1.1.1	192.168.2.5	0x6168	No error (0)	livepixel-production.bln.liveintent.com		3.82.168.197	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.336751938 CET	1.1.1.1	192.168.2.5	0x6168	No error (0)	livepixel-production.bln.liveintent.com		3.214.107.21	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.336751938 CET	1.1.1.1	192.168.2.5	0x6168	No error (0)	livepixel-production.bln.liveintent.com		52.54.248.128	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.336751938 CET	1.1.1.1	192.168.2.5	0x6168	No error (0)	livepixel-production.bln.liveintent.com		44.195.149.119	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.336751938 CET	1.1.1.1	192.168.2.5	0x6168	No error (0)	livepixel-production.bln.liveintent.com		50.16.43.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.336751938 CET	1.1.1.1	192.168.2.5	0x6168	No error (0)	livepixel-production.bln.liveintent.com		3.94.72.4	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.336751938 CET	1.1.1.1	192.168.2.5	0x6168	No error (0)	livepixel-production.bln.liveintent.com		54.160.73.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.336751938 CET	1.1.1.1	192.168.2.5	0x6168	No error (0)	livepixel-production.bln.liveintent.com		34.231.219.101	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.529835939 CET	1.1.1.1	192.168.2.5	0x9328	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.728111029 CET	1.1.1.1	192.168.2.5	0x53c1	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.728630066 CET	1.1.1.1	192.168.2.5	0xf06a	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.736521006 CET	1.1.1.1	192.168.2.5	0xe14b	No error (0)	cdn.indexww.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:22.736949921 CET	1.1.1.1	192.168.2.5	0x65c3	No error (0)	cdn.indexww.com		104.18.25.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.736949921 CET	1.1.1.1	192.168.2.5	0x65c3	No error (0)	cdn.indexww.com		104.18.24.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.743423939 CET	1.1.1.1	192.168.2.5	0x15a8	No error (0)	prebid.a-mo.net	sgp-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.743423939 CET	1.1.1.1	192.168.2.5	0x15a8	No error (0)	sgp-prebid.a-mx.net		131.153.206.101	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.743423939 CET	1.1.1.1	192.168.2.5	0x15a8	No error (0)	sgp-prebid.a-mx.net		131.153.206.100	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.743423939 CET	1.1.1.1	192.168.2.5	0x15a8	No error (0)	sgp-prebid.a-mx.net		131.153.206.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.743423939 CET	1.1.1.1	192.168.2.5	0x15a8	No error (0)	sgp-prebid.a-mx.net		131.153.206.102	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.743861914 CET	1.1.1.1	192.168.2.5	0x77a1	No error (0)	prebid.a-mo.net	sgp-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.750515938 CET	1.1.1.1	192.168.2.5	0xccaf	No error (0)	krk2.kargo.com		52.221.5.68	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.750515938 CET	1.1.1.1	192.168.2.5	0xccaf	No error (0)	krk2.kargo.com		52.220.144.134	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.750515938 CET	1.1.1.1	192.168.2.5	0xccaf	No error (0)	krk2.kargo.com		18.136.161.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.759433985 CET	1.1.1.1	192.168.2.5	0x1760	No error (0)	htlb.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.759433985 CET	1.1.1.1	192.168.2.5	0x1760	No error (0)	htlb.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.760195971 CET	1.1.1.1	192.168.2.5	0xdbac	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.73.19.50	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		18.203.76.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.155.199.83	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.209.240.119	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.208.147.241	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.73.119.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.246.253.169	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.764626026 CET	1.1.1.1	192.168.2.5	0x3387	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		63.35.111.236	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.765552998 CET	1.1.1.1	192.168.2.5	0x924	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.765552998 CET	1.1.1.1	192.168.2.5	0x924	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.765552998 CET	1.1.1.1	192.168.2.5	0x924	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.765552998 CET	1.1.1.1	192.168.2.5	0x924	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.816113949 CET	1.1.1.1	192.168.2.5	0xa38b	No error (0)	bidder.criteo.com	in-ftd-65.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.816113949 CET	1.1.1.1	192.168.2.5	0xa38b	No error (0)	in-ftd-65.nl3.vip.prod.criteo.com		178.250.1.56	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.816397905 CET	1.1.1.1	192.168.2.5	0xfb36	No error (0)	bidder.criteo.com	in-ftd-65.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.818017960 CET	1.1.1.1	192.168.2.5	0xe097	No error (0)	creative-p.undertone.com	d1dkpjabnziobq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.822107077 CET	1.1.1.1	192.168.2.5	0x8ecc	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.822849989 CET	1.1.1.1	192.168.2.5	0xe5a7	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.824136972 CET	1.1.1.1	192.168.2.5	0xb50f	No error (0)	creative-p.undertone.com	d1dkpjabnziobq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.824136972 CET	1.1.1.1	192.168.2.5	0xb50f	No error (0)	d1dkpjabnziobq.cloudfront.net		18.165.220.87	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.824136972 CET	1.1.1.1	192.168.2.5	0xb50f	No error (0)	d1dkpjabnziobq.cloudfront.net		18.165.220.52	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.824136972 CET	1.1.1.1	192.168.2.5	0xb50f	No error (0)	d1dkpjabnziobq.cloudfront.net		18.165.220.90	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.824136972 CET	1.1.1.1	192.168.2.5	0xb50f	No error (0)	d1dkpjabnziobq.cloudfront.net		18.165.220.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.835402012 CET	1.1.1.1	192.168.2.5	0x440e	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.836330891 CET	1.1.1.1	192.168.2.5	0xd48d	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:22.856334925 CET	1.1.1.1	192.168.2.5	0xe1af	No error (0)	g2.gumgum.com		13.251.172.28	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.856334925 CET	1.1.1.1	192.168.2.5	0xe1af	No error (0)	g2.gumgum.com		52.77.178.59	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.856334925 CET	1.1.1.1	192.168.2.5	0xe1af	No error (0)	g2.gumgum.com		3.1.107.191	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.856334925 CET	1.1.1.1	192.168.2.5	0xe1af	No error (0)	g2.gumgum.com		52.74.190.151	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.856334925 CET	1.1.1.1	192.168.2.5	0xe1af	No error (0)	g2.gumgum.com		13.228.188.29	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:22.856334925 CET	1.1.1.1	192.168.2.5	0xe1af	No error (0)	g2.gumgum.com		3.1.142.102	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:23.015146017 CET	1.1.1.1	192.168.2.5	0xb731	No error (0)	lightboxapi.azurewebsites.net	waws-prod-dm1-175.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:23.015146017 CET	1.1.1.1	192.168.2.5	0xb731	No error (0)	waws-prod-dm1-175.sip.azurewebsites.windows.net	waws-prod-dm1-175-kiwi.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:23.016204119 CET	1.1.1.1	192.168.2.5	0xe2c2	No error (0)	lightboxapi.azurewebsites.net	waws-prod-dm1-175.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:23.016204119 CET	1.1.1.1	192.168.2.5	0xe2c2	No error (0)	waws-prod-dm1-175.sip.azurewebsites.windows.net	waws-prod-dm1-175-kiwi.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:23.455612898 CET	1.1.1.1	192.168.2.5	0x9968	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2024 19:58:23.455933094 CET	1.1.1.1	192.168.2.5	0xef6d	No error (0)	securepubads.g.doubleclick.net		172.217.19.162	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:23.999497890 CET	1.1.1.1	192.168.2.5	0x495e	No error (0)	pixel.adsafeprotected.com	iepixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:23.999497890 CET	1.1.1.1	192.168.2.5	0x495e	No error (0)	iepixel.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	pixel.adsafeprotected.com	iepixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	iepixel.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.214.250.15	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.211.37.243	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.210.61.99	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		34.251.253.92	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		18.202.207.48	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.213.154.13	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.50.230.88	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.000782013 CET	1.1.1.1	192.168.2.5	0x5538	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.31.75.164	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.239527941 CET	1.1.1.1	192.168.2.5	0xc7b0	No error (0)	1x1.a-mo.net		98.84.196.233	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.239527941 CET	1.1.1.1	192.168.2.5	0xc7b0	No error (0)	1x1.a-mo.net		23.20.60.250	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.239527941 CET	1.1.1.1	192.168.2.5	0xc7b0	No error (0)	1x1.a-mo.net		52.54.26.191	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.526350975 CET	1.1.1.1	192.168.2.5	0x9739	No error (0)	pagead-googlehosted.l.google.com		172.217.17.33	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.570245981 CET	1.1.1.1	192.168.2.5	0xc0e9	No error (0)	async01.admantx.com		54.92.77.149	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:24.570245981 CET	1.1.1.1	192.168.2.5	0xc0e9	No error (0)	async01.admantx.com		35.79.245.53	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:25.652726889 CET	1.1.1.1	192.168.2.5	0x7909	No error (0)	aax-eu.amazon-adsystem.com		52.94.222.140	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.397001028 CET	1.1.1.1	192.168.2.5	0xecf3	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:26.490688086 CET	1.1.1.1	192.168.2.5	0x7ed7	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:26.490688086 CET	1.1.1.1	192.168.2.5	0x7ed7	No error (0)	livepixel-production.bln.liveintent.com		44.221.168.224	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.490688086 CET	1.1.1.1	192.168.2.5	0x7ed7	No error (0)	livepixel-production.bln.liveintent.com		54.160.73.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.490688086 CET	1.1.1.1	192.168.2.5	0x7ed7	No error (0)	livepixel-production.bln.liveintent.com		50.16.43.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.490688086 CET	1.1.1.1	192.168.2.5	0x7ed7	No error (0)	livepixel-production.bln.liveintent.com		3.94.72.4	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.490688086 CET	1.1.1.1	192.168.2.5	0x7ed7	No error (0)	livepixel-production.bln.liveintent.com		34.231.219.101	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.490688086 CET	1.1.1.1	192.168.2.5	0x7ed7	No error (0)	livepixel-production.bln.liveintent.com		23.21.229.6	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.490688086 CET	1.1.1.1	192.168.2.5	0x7ed7	No error (0)	livepixel-production.bln.liveintent.com		52.54.248.128	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.490688086 CET	1.1.1.1	192.168.2.5	0x7ed7	No error (0)	livepixel-production.bln.liveintent.com		44.195.149.119	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.806401968 CET	1.1.1.1	192.168.2.5	0x6e45	No error (0)	collector.sheknows.com	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:26.806401968 CET	1.1.1.1	192.168.2.5	0x6e45	No error (0)	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		44.236.143.72	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.806401968 CET	1.1.1.1	192.168.2.5	0x6e45	No error (0)	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		52.11.18.109	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.806401968 CET	1.1.1.1	192.168.2.5	0x6e45	No error (0)	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		54.214.176.138	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.806401968 CET	1.1.1.1	192.168.2.5	0x6e45	No error (0)	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		52.13.74.72	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.806505919 CET	1.1.1.1	192.168.2.5	0xaf50	No error (0)	collector.sheknows.com	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:26.848376036 CET	1.1.1.1	192.168.2.5	0xd429	No error (0)	ats.rlcdn.com		18.165.220.126	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.848376036 CET	1.1.1.1	192.168.2.5	0xd429	No error (0)	ats.rlcdn.com		18.165.220.64	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.848376036 CET	1.1.1.1	192.168.2.5	0xd429	No error (0)	ats.rlcdn.com		18.165.220.127	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:26.848376036 CET	1.1.1.1	192.168.2.5	0xd429	No error (0)	ats.rlcdn.com		18.165.220.9	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.027966976 CET	1.1.1.1	192.168.2.5	0x5ecd	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.072278023 CET	1.1.1.1	192.168.2.5	0x507	No error (0)	resources.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.072278023 CET	1.1.1.1	192.168.2.5	0x507	No error (0)	resources.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.126540899 CET	1.1.1.1	192.168.2.5	0x5a13	No error (0)	resources.infolinks.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:28.277936935 CET	1.1.1.1	192.168.2.5	0xd23a	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:28.277936935 CET	1.1.1.1	192.168.2.5	0xd23a	No error (0)	z.ssl.fastly.net		199.232.193.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.277936935 CET	1.1.1.1	192.168.2.5	0xd23a	No error (0)	z.ssl.fastly.net		199.232.197.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.278270006 CET	1.1.1.1	192.168.2.5	0x339e	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:28.538953066 CET	1.1.1.1	192.168.2.5	0x8a69	No error (0)	pghub.io		35.241.45.217	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:28.539396048 CET	1.1.1.1	192.168.2.5	0xa57a	No error (0)	feed.pghub.io		34.102.243.38	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.256953955 CET	1.1.1.1	192.168.2.5	0xf2e9	No error (0)	resources.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.256953955 CET	1.1.1.1	192.168.2.5	0xf2e9	No error (0)	resources.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.258047104 CET	1.1.1.1	192.168.2.5	0xce71	No error (0)	resources.infolinks.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:30.374849081 CET	1.1.1.1	192.168.2.5	0xabef	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:30.374849081 CET	1.1.1.1	192.168.2.5	0xabef	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.374849081 CET	1.1.1.1	192.168.2.5	0xabef	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.374849081 CET	1.1.1.1	192.168.2.5	0xabef	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.374849081 CET	1.1.1.1	192.168.2.5	0xabef	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.375147104 CET	1.1.1.1	192.168.2.5	0x2a1	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:30.375147104 CET	1.1.1.1	192.168.2.5	0x2a1	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.375147104 CET	1.1.1.1	192.168.2.5	0x2a1	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.376171112 CET	1.1.1.1	192.168.2.5	0x2b06	No error (0)	js-sec.indexww.com		104.18.24.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.376171112 CET	1.1.1.1	192.168.2.5	0x2b06	No error (0)	js-sec.indexww.com		104.18.25.18	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.377959013 CET	1.1.1.1	192.168.2.5	0x351	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:30.378518105 CET	1.1.1.1	192.168.2.5	0x9d93	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:30.386759043 CET	1.1.1.1	192.168.2.5	0xd51	No error (0)	prebid.a-mo.net	sgp-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:30.386759043 CET	1.1.1.1	192.168.2.5	0xd51	No error (0)	sgp-prebid.a-mx.net		131.153.206.101	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.386759043 CET	1.1.1.1	192.168.2.5	0xd51	No error (0)	sgp-prebid.a-mx.net		131.153.206.102	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.386759043 CET	1.1.1.1	192.168.2.5	0xd51	No error (0)	sgp-prebid.a-mx.net		131.153.206.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.386759043 CET	1.1.1.1	192.168.2.5	0xd51	No error (0)	sgp-prebid.a-mx.net		131.153.206.100	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.387103081 CET	1.1.1.1	192.168.2.5	0x8bc9	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:30.387912989 CET	1.1.1.1	192.168.2.5	0x9485	No error (0)	prebid.a-mo.net	sgp-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:30.388767958 CET	1.1.1.1	192.168.2.5	0x61dc	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:30.392959118 CET	1.1.1.1	192.168.2.5	0xeb45	No error (0)	pandg.tapad.com		34.102.243.38	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.666162014 CET	1.1.1.1	192.168.2.5	0xc1b9	No error (0)	geo.privacymanager.io		13.226.2.102	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.666162014 CET	1.1.1.1	192.168.2.5	0xc1b9	No error (0)	geo.privacymanager.io		13.226.2.27	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.666162014 CET	1.1.1.1	192.168.2.5	0xc1b9	No error (0)	geo.privacymanager.io		13.226.2.91	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.666162014 CET	1.1.1.1	192.168.2.5	0xc1b9	No error (0)	geo.privacymanager.io		13.226.2.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.713182926 CET	1.1.1.1	192.168.2.5	0x136b	No error (0)	ats.rlcdn.com		18.165.220.126	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.713182926 CET	1.1.1.1	192.168.2.5	0x136b	No error (0)	ats.rlcdn.com		18.165.220.127	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.713182926 CET	1.1.1.1	192.168.2.5	0x136b	No error (0)	ats.rlcdn.com		18.165.220.9	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:30.713182926 CET	1.1.1.1	192.168.2.5	0x136b	No error (0)	ats.rlcdn.com		18.165.220.64	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.190278053 CET	1.1.1.1	192.168.2.5	0xb51f	No error (0)	collector.sheknows.com	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.190278053 CET	1.1.1.1	192.168.2.5	0xb51f	No error (0)	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		52.13.74.72	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.190278053 CET	1.1.1.1	192.168.2.5	0xb51f	No error (0)	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		54.214.176.138	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.190278053 CET	1.1.1.1	192.168.2.5	0xb51f	No error (0)	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		52.11.18.109	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.190278053 CET	1.1.1.1	192.168.2.5	0xb51f	No error (0)	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		44.236.143.72	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.192415953 CET	1.1.1.1	192.168.2.5	0xd26a	No error (0)	collector.sheknows.com	tf-pmc-prod-ecs-public-alb-307258968.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.698532104 CET	1.1.1.1	192.168.2.5	0xf8ff	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.698679924 CET	1.1.1.1	192.168.2.5	0xca84	No error (0)	ads.blogherads.com	z.ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.698679924 CET	1.1.1.1	192.168.2.5	0xca84	No error (0)	z.ssl.fastly.net		199.232.193.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.698679924 CET	1.1.1.1	192.168.2.5	0xca84	No error (0)	z.ssl.fastly.net		199.232.197.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.755003929 CET	1.1.1.1	192.168.2.5	0x512a	No error (0)	cs.media.net		184.30.24.22	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.756490946 CET	1.1.1.1	192.168.2.5	0x1ef2	No error (0)	sync.1rx.io		74.118.186.107	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.764909029 CET	1.1.1.1	192.168.2.5	0x99f5	No error (0)	s.ad.smaato.net		18.66.161.81	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.764909029 CET	1.1.1.1	192.168.2.5	0x99f5	No error (0)	s.ad.smaato.net		18.66.161.92	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.764909029 CET	1.1.1.1	192.168.2.5	0x99f5	No error (0)	s.ad.smaato.net		18.66.161.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.764909029 CET	1.1.1.1	192.168.2.5	0x99f5	No error (0)	s.ad.smaato.net		18.66.161.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.769644022 CET	1.1.1.1	192.168.2.5	0xaeec	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.769644022 CET	1.1.1.1	192.168.2.5	0xaeec	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.769644022 CET	1.1.1.1	192.168.2.5	0xaeec	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.770809889 CET	1.1.1.1	192.168.2.5	0x6113	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.770809889 CET	1.1.1.1	192.168.2.5	0x6113	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.770809889 CET	1.1.1.1	192.168.2.5	0x6113	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.770809889 CET	1.1.1.1	192.168.2.5	0x6113	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.770809889 CET	1.1.1.1	192.168.2.5	0x6113	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.770809889 CET	1.1.1.1	192.168.2.5	0x6113	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.773720980 CET	1.1.1.1	192.168.2.5	0xec96	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.773720980 CET	1.1.1.1	192.168.2.5	0xec96	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.773720980 CET	1.1.1.1	192.168.2.5	0xec96	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:31.773720980 CET	1.1.1.1	192.168.2.5	0xec96	No error (0)	nydc1.outbrain.org		70.42.32.191	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.828633070 CET	1.1.1.1	192.168.2.5	0x6ea7	No error (0)	rtb.gumgum.com		52.77.178.59	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.828633070 CET	1.1.1.1	192.168.2.5	0x6ea7	No error (0)	rtb.gumgum.com		3.1.142.102	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.828633070 CET	1.1.1.1	192.168.2.5	0x6ea7	No error (0)	rtb.gumgum.com		52.74.190.151	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.828633070 CET	1.1.1.1	192.168.2.5	0x6ea7	No error (0)	rtb.gumgum.com		3.1.107.191	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.828633070 CET	1.1.1.1	192.168.2.5	0x6ea7	No error (0)	rtb.gumgum.com		13.228.188.29	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:31.828633070 CET	1.1.1.1	192.168.2.5	0x6ea7	No error (0)	rtb.gumgum.com		13.251.172.28	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.442742109 CET	1.1.1.1	192.168.2.5	0xd592	No error (0)	ssum-sec.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.442742109 CET	1.1.1.1	192.168.2.5	0xd592	No error (0)	ssum-sec.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.443195105 CET	1.1.1.1	192.168.2.5	0x1329	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:32.443223953 CET	1.1.1.1	192.168.2.5	0x68e0	No error (0)	cm.g.doubleclick.net		172.217.21.34	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.647532940 CET	1.1.1.1	192.168.2.5	0x4a06	No error (0)	cs.admanmedia.com		80.77.87.163	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.650054932 CET	1.1.1.1	192.168.2.5	0xf012	No error (0)	cs-tam.minutemedia-prebid.com	d18q3505w6wzgu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:32.650054932 CET	1.1.1.1	192.168.2.5	0xf012	No error (0)	d18q3505w6wzgu.cloudfront.net		13.227.8.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.650054932 CET	1.1.1.1	192.168.2.5	0xf012	No error (0)	d18q3505w6wzgu.cloudfront.net		13.227.8.52	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.650054932 CET	1.1.1.1	192.168.2.5	0xf012	No error (0)	d18q3505w6wzgu.cloudfront.net		13.227.8.24	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.650054932 CET	1.1.1.1	192.168.2.5	0xf012	No error (0)	d18q3505w6wzgu.cloudfront.net		13.227.8.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.731678009 CET	1.1.1.1	192.168.2.5	0x2f29	No error (0)	cs-tam.minutemedia-prebid.com	d18q3505w6wzgu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:32.748728037 CET	1.1.1.1	192.168.2.5	0x9773	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.748728037 CET	1.1.1.1	192.168.2.5	0x9773	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:32.882560015 CET	1.1.1.1	192.168.2.5	0x9fd5	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:32.898705006 CET	1.1.1.1	192.168.2.5	0xf7e3	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:32.910183907 CET	1.1.1.1	192.168.2.5	0x1ea6	No error (0)	match.sharethrough.com	match-ap-southeast-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:32.910183907 CET	1.1.1.1	192.168.2.5	0x1ea6	No error (0)	match-ap-southeast-1-ecs.sharethrough.com		54.169.228.246	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.001388073 CET	1.1.1.1	192.168.2.5	0xac5b	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.001447916 CET	1.1.1.1	192.168.2.5	0x15ea	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.106770992 CET	1.1.1.1	192.168.2.5	0xf898	No error (0)	match.sharethrough.com	match-ap-southeast-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.372080088 CET	1.1.1.1	192.168.2.5	0xae7e	No error (0)	sync-amz.ads.yieldmo.com	syncelb-1292340544.ap-southeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.372317076 CET	1.1.1.1	192.168.2.5	0x73a5	No error (0)	sync-amz.ads.yieldmo.com	syncelb-1292340544.ap-southeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.372317076 CET	1.1.1.1	192.168.2.5	0x73a5	No error (0)	syncelb-1292340544.ap-southeast-1.elb.amazonaws.com		52.76.241.35	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.372317076 CET	1.1.1.1	192.168.2.5	0x73a5	No error (0)	syncelb-1292340544.ap-southeast-1.elb.amazonaws.com		52.76.143.220	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.372317076 CET	1.1.1.1	192.168.2.5	0x73a5	No error (0)	syncelb-1292340544.ap-southeast-1.elb.amazonaws.com		3.1.105.178	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.648288012 CET	1.1.1.1	192.168.2.5	0x9a36	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.242.11.200	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.246.76.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		108.129.36.117	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.210.114.84	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.30.86.151	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.217.38.153	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.19.101.218	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698034048 CET	1.1.1.1	192.168.2.5	0x1aa7	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.246.253.169	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698769093 CET	1.1.1.1	192.168.2.5	0xaf6b	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698769093 CET	1.1.1.1	192.168.2.5	0xaf6b	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698769093 CET	1.1.1.1	192.168.2.5	0xaf6b	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:33.698769093 CET	1.1.1.1	192.168.2.5	0xaf6b	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.044629097 CET	1.1.1.1	192.168.2.5	0x5e0c	No error (0)	cs-tam.yellowblue.io		54.194.2.39	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.044629097 CET	1.1.1.1	192.168.2.5	0x5e0c	No error (0)	cs-tam.yellowblue.io		52.51.72.81	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.044629097 CET	1.1.1.1	192.168.2.5	0x5e0c	No error (0)	cs-tam.yellowblue.io		34.252.15.195	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.044629097 CET	1.1.1.1	192.168.2.5	0x5e0c	No error (0)	cs-tam.yellowblue.io		52.51.44.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.044629097 CET	1.1.1.1	192.168.2.5	0x5e0c	No error (0)	cs-tam.yellowblue.io		52.211.253.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.044629097 CET	1.1.1.1	192.168.2.5	0x5e0c	No error (0)	cs-tam.yellowblue.io		52.208.71.28	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.044629097 CET	1.1.1.1	192.168.2.5	0x5e0c	No error (0)	cs-tam.yellowblue.io		34.248.76.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.044629097 CET	1.1.1.1	192.168.2.5	0x5e0c	No error (0)	cs-tam.yellowblue.io		34.251.183.248	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.179338932 CET	1.1.1.1	192.168.2.5	0x1314	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.179338932 CET	1.1.1.1	192.168.2.5	0x1314	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.179713011 CET	1.1.1.1	192.168.2.5	0x3434	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.179713011 CET	1.1.1.1	192.168.2.5	0x3434	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.181334019 CET	1.1.1.1	192.168.2.5	0xfb75	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.181334019 CET	1.1.1.1	192.168.2.5	0xfb75	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.76.91.170	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.181334019 CET	1.1.1.1	192.168.2.5	0xfb75	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.210.241.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.181334019 CET	1.1.1.1	192.168.2.5	0xfb75	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.252.54.58	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.181334019 CET	1.1.1.1	192.168.2.5	0xfb75	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.248.108.242	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.183247089 CET	1.1.1.1	192.168.2.5	0x2b51	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.194876909 CET	1.1.1.1	192.168.2.5	0x43de	No error (0)	sync.srv.stackadapt.com		35.170.46.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.194876909 CET	1.1.1.1	192.168.2.5	0x43de	No error (0)	sync.srv.stackadapt.com		52.200.38.60	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.194876909 CET	1.1.1.1	192.168.2.5	0x43de	No error (0)	sync.srv.stackadapt.com		52.86.216.144	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.194876909 CET	1.1.1.1	192.168.2.5	0x43de	No error (0)	sync.srv.stackadapt.com		44.214.168.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.194876909 CET	1.1.1.1	192.168.2.5	0x43de	No error (0)	sync.srv.stackadapt.com		35.153.85.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.194876909 CET	1.1.1.1	192.168.2.5	0x43de	No error (0)	sync.srv.stackadapt.com		3.214.248.204	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.194876909 CET	1.1.1.1	192.168.2.5	0x43de	No error (0)	sync.srv.stackadapt.com		54.166.196.94	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.194876909 CET	1.1.1.1	192.168.2.5	0x43de	No error (0)	sync.srv.stackadapt.com		54.144.6.190	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.351186037 CET	1.1.1.1	192.168.2.5	0x16dc	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.373583078 CET	1.1.1.1	192.168.2.5	0xe32b	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.477415085 CET	1.1.1.1	192.168.2.5	0xef19	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.477415085 CET	1.1.1.1	192.168.2.5	0xef19	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.477415085 CET	1.1.1.1	192.168.2.5	0xef19	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.477415085 CET	1.1.1.1	192.168.2.5	0xef19	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.483762980 CET	1.1.1.1	192.168.2.5	0x6a3a	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.528834105 CET	1.1.1.1	192.168.2.5	0xddf9	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.530618906 CET	1.1.1.1	192.168.2.5	0xeee0	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:34.574459076 CET	1.1.1.1	192.168.2.5	0x6962	No error (0)	geo.privacymanager.io		13.226.2.91	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.574459076 CET	1.1.1.1	192.168.2.5	0x6962	No error (0)	geo.privacymanager.io		13.226.2.27	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.574459076 CET	1.1.1.1	192.168.2.5	0x6962	No error (0)	geo.privacymanager.io		13.226.2.102	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:34.574459076 CET	1.1.1.1	192.168.2.5	0x6962	No error (0)	geo.privacymanager.io		13.226.2.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.093874931 CET	1.1.1.1	192.168.2.5	0x8547	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.102737904 CET	1.1.1.1	192.168.2.5	0x848e	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:35.102737904 CET	1.1.1.1	192.168.2.5	0x848e	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.330018044 CET	1.1.1.1	192.168.2.5	0x9cb6	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.330018044 CET	1.1.1.1	192.168.2.5	0x9cb6	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.330766916 CET	1.1.1.1	192.168.2.5	0x7378	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:35.330766916 CET	1.1.1.1	192.168.2.5	0x7378	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.330766916 CET	1.1.1.1	192.168.2.5	0x7378	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.330766916 CET	1.1.1.1	192.168.2.5	0x7378	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.330766916 CET	1.1.1.1	192.168.2.5	0x7378	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.418921947 CET	1.1.1.1	192.168.2.5	0x2d2e	No error (0)	sync.ipredictive.com		34.197.8.73	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.418921947 CET	1.1.1.1	192.168.2.5	0x2d2e	No error (0)	sync.ipredictive.com		44.210.213.98	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.418921947 CET	1.1.1.1	192.168.2.5	0x2d2e	No error (0)	sync.ipredictive.com		3.209.242.128	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.418921947 CET	1.1.1.1	192.168.2.5	0x2d2e	No error (0)	sync.ipredictive.com		18.233.180.144	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.418921947 CET	1.1.1.1	192.168.2.5	0x2d2e	No error (0)	sync.ipredictive.com		44.194.37.91	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.418921947 CET	1.1.1.1	192.168.2.5	0x2d2e	No error (0)	sync.ipredictive.com		44.205.182.185	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.418921947 CET	1.1.1.1	192.168.2.5	0x2d2e	No error (0)	sync.ipredictive.com		52.23.100.133	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.418921947 CET	1.1.1.1	192.168.2.5	0x2d2e	No error (0)	sync.ipredictive.com		34.225.22.174	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:35.483629942 CET	1.1.1.1	192.168.2.5	0x474f	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:35.551135063 CET	1.1.1.1	192.168.2.5	0x6d20	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:35.552725077 CET	1.1.1.1	192.168.2.5	0x42ad	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:35.918190956 CET	1.1.1.1	192.168.2.5	0x231b	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.091952085 CET	1.1.1.1	192.168.2.5	0xb876	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.091952085 CET	1.1.1.1	192.168.2.5	0xb876	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.092009068 CET	1.1.1.1	192.168.2.5	0xa451	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.092009068 CET	1.1.1.1	192.168.2.5	0xa451	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.092009068 CET	1.1.1.1	192.168.2.5	0xa451	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.43.241.57	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.092009068 CET	1.1.1.1	192.168.2.5	0xa451	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.188.228.126	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.092009068 CET	1.1.1.1	192.168.2.5	0xa451	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.224.20.21	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.092009068 CET	1.1.1.1	192.168.2.5	0xa451	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.229.119.177	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.092009068 CET	1.1.1.1	192.168.2.5	0xa451	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		35.80.102.85	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.092009068 CET	1.1.1.1	192.168.2.5	0xa451	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.200.40.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.126667976 CET	1.1.1.1	192.168.2.5	0xfd1	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.186353922 CET	1.1.1.1	192.168.2.5	0x404a	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.186353922 CET	1.1.1.1	192.168.2.5	0x404a	No error (0)	image6v2.pubmnet.com	pugmaster-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.186465979 CET	1.1.1.1	192.168.2.5	0x732a	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.186465979 CET	1.1.1.1	192.168.2.5	0x732a	No error (0)	image6v2.pubmnet.com	pugm-sin12.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.186465979 CET	1.1.1.1	192.168.2.5	0x732a	No error (0)	pugm-sin12.pubmnet.com		207.65.33.83	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.208389044 CET	1.1.1.1	192.168.2.5	0x6065	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.209278107 CET	1.1.1.1	192.168.2.5	0x2612	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.222846031 CET	1.1.1.1	192.168.2.5	0xb1eb	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.226845980 CET	1.1.1.1	192.168.2.5	0xc72a	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	csync.loopme.me	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.155.159	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.254.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.138.30	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.250.157	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.202.49	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.162.172	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.236.216	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.237.34	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.224.215	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.241.197	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.287735939 CET	1.1.1.1	192.168.2.5	0x9f1a	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.248.70	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.288321018 CET	1.1.1.1	192.168.2.5	0xe1f3	No error (0)	csync.loopme.me	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470344067 CET	1.1.1.1	192.168.2.5	0xdadf	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470344067 CET	1.1.1.1	192.168.2.5	0xdadf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.86.129.97	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470344067 CET	1.1.1.1	192.168.2.5	0xdadf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.209.19.249	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470344067 CET	1.1.1.1	192.168.2.5	0xdadf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.89.94.152	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470344067 CET	1.1.1.1	192.168.2.5	0xdadf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		107.21.3.16	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470344067 CET	1.1.1.1	192.168.2.5	0xdadf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		174.129.217.85	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470344067 CET	1.1.1.1	192.168.2.5	0xdadf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.207.79.239	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470344067 CET	1.1.1.1	192.168.2.5	0xdadf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		18.205.135.75	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470344067 CET	1.1.1.1	192.168.2.5	0xdadf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.87.84.166	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.470964909 CET	1.1.1.1	192.168.2.5	0x1656	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.504412889 CET	1.1.1.1	192.168.2.5	0xd345	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.504412889 CET	1.1.1.1	192.168.2.5	0xd345	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.504412889 CET	1.1.1.1	192.168.2.5	0xd345	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.667970896 CET	1.1.1.1	192.168.2.5	0x1b83	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.678148985 CET	1.1.1.1	192.168.2.5	0xd10	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.678251982 CET	1.1.1.1	192.168.2.5	0x7371	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.681658983 CET	1.1.1.1	192.168.2.5	0xc6bf	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.681658983 CET	1.1.1.1	192.168.2.5	0xc6bf	No error (0)	image8-v2.pubmnet.com	imgsync-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.681658983 CET	1.1.1.1	192.168.2.5	0xc6bf	No error (0)	imgsync-sg4c.pubmnet.com		67.199.150.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.681993008 CET	1.1.1.1	192.168.2.5	0xb66	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.681993008 CET	1.1.1.1	192.168.2.5	0xb66	No error (0)	image8-v2.pubmnet.com	imgsync-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.683276892 CET	1.1.1.1	192.168.2.5	0x9501	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.683276892 CET	1.1.1.1	192.168.2.5	0x9501	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.683276892 CET	1.1.1.1	192.168.2.5	0x9501	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.683386087 CET	1.1.1.1	192.168.2.5	0x6ee9	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.705734015 CET	1.1.1.1	192.168.2.5	0xce1c	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:36.708307028 CET	1.1.1.1	192.168.2.5	0x8e7a	No error (0)	dsum-sec.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.708307028 CET	1.1.1.1	192.168.2.5	0x8e7a	No error (0)	dsum-sec.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.726330042 CET	1.1.1.1	192.168.2.5	0x41d7	No error (0)	s.amazon-adsystem.com		98.82.154.76	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.797344923 CET	1.1.1.1	192.168.2.5	0x6d10	No error (0)	a.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.797344923 CET	1.1.1.1	192.168.2.5	0x6d10	No error (0)	a.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.800153971 CET	1.1.1.1	192.168.2.5	0xf23	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.800153971 CET	1.1.1.1	192.168.2.5	0xf23	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.800153971 CET	1.1.1.1	192.168.2.5	0xf23	No error (0)	um.simpli.fi		35.204.164.169	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.800153971 CET	1.1.1.1	192.168.2.5	0xf23	No error (0)	um.simpli.fi		34.13.138.208	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.800153971 CET	1.1.1.1	192.168.2.5	0xf23	No error (0)	um.simpli.fi		35.204.201.36	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.800153971 CET	1.1.1.1	192.168.2.5	0xf23	No error (0)	um.simpli.fi		34.91.165.80	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.801650047 CET	1.1.1.1	192.168.2.5	0x5018	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:36.821485043 CET	1.1.1.1	192.168.2.5	0x840e	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821485043 CET	1.1.1.1	192.168.2.5	0x840e	No error (0)	rw.yieldmo.com	ap-southeast-1-ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821485043 CET	1.1.1.1	192.168.2.5	0x840e	No error (0)	ap-southeast-1-ads.yieldmo.com	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	rw.yieldmo.com	ap-southeast-1-ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	ap-southeast-1-ads.yieldmo.com	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		52.220.157.32	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		18.136.111.226	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		13.214.82.117	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		13.229.244.192	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		18.139.112.189	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		13.228.156.225	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		18.136.43.252	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.821528912 CET	1.1.1.1	192.168.2.5	0x83f0	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		52.76.249.126	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.837603092 CET	1.1.1.1	192.168.2.5	0x4ad	Name error (3)	pixel-us-apac.rubiconproject.com	none	none	65	IN (0x0001)	false
Dec 12, 2024 19:58:36.841869116 CET	1.1.1.1	192.168.2.5	0xe07	Name error (3)	pixel-us-apac.rubiconproject.com	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.858098984 CET	1.1.1.1	192.168.2.5	0x3f77	No error (0)	stx-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.875045061 CET	1.1.1.1	192.168.2.5	0xd48e	No error (0)	stx-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.901565075 CET	1.1.1.1	192.168.2.5	0xa92e	No error (0)	wt.rqtrk.eu		57.129.18.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.901565075 CET	1.1.1.1	192.168.2.5	0xa92e	No error (0)	wt.rqtrk.eu		57.129.18.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.901565075 CET	1.1.1.1	192.168.2.5	0xa92e	No error (0)	wt.rqtrk.eu		57.129.18.121	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.901565075 CET	1.1.1.1	192.168.2.5	0xa92e	No error (0)	wt.rqtrk.eu		57.129.18.105	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.901565075 CET	1.1.1.1	192.168.2.5	0xa92e	No error (0)	wt.rqtrk.eu		57.129.18.109	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.976314068 CET	1.1.1.1	192.168.2.5	0xcb52	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.977303028 CET	1.1.1.1	192.168.2.5	0x9d5f	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.980045080 CET	1.1.1.1	192.168.2.5	0xe8be	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.980045080 CET	1.1.1.1	192.168.2.5	0xe8be	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.982068062 CET	1.1.1.1	192.168.2.5	0x94db	No error (0)	id.a-mx.com		79.127.227.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.982068062 CET	1.1.1.1	192.168.2.5	0x94db	No error (0)	id.a-mx.com		79.127.216.47	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.985008955 CET	1.1.1.1	192.168.2.5	0xb73c	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.985008955 CET	1.1.1.1	192.168.2.5	0xb73c	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.985596895 CET	1.1.1.1	192.168.2.5	0x361	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.985910892 CET	1.1.1.1	192.168.2.5	0x6e62	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:36.986802101 CET	1.1.1.1	192.168.2.5	0xab12	Name error (3)	pixel-us-apac.rubiconproject.com	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.986975908 CET	1.1.1.1	192.168.2.5	0xb69b	No error (0)	ssum.casalemedia.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:36.987095118 CET	1.1.1.1	192.168.2.5	0xa786	No error (0)	ssum.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:36.987095118 CET	1.1.1.1	192.168.2.5	0xa786	No error (0)	ssum.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.067982912 CET	1.1.1.1	192.168.2.5	0x3830	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.068203926 CET	1.1.1.1	192.168.2.5	0x89b7	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.113399982 CET	1.1.1.1	192.168.2.5	0x3004	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.115592003 CET	1.1.1.1	192.168.2.5	0x2443	No error (0)	aax-eu.amazon-adsystem.com		67.220.226.234	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.121455908 CET	1.1.1.1	192.168.2.5	0x2083	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.121455908 CET	1.1.1.1	192.168.2.5	0x2083	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.125994921 CET	1.1.1.1	192.168.2.5	0xad4f	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.125994921 CET	1.1.1.1	192.168.2.5	0xad4f	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.127957106 CET	1.1.1.1	192.168.2.5	0x5caf	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.128169060 CET	1.1.1.1	192.168.2.5	0xd078	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.137538910 CET	1.1.1.1	192.168.2.5	0x44f6	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.150419950 CET	1.1.1.1	192.168.2.5	0x84b0	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.150419950 CET	1.1.1.1	192.168.2.5	0x84b0	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.150814056 CET	1.1.1.1	192.168.2.5	0xbe90	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.150814056 CET	1.1.1.1	192.168.2.5	0xbe90	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.150814056 CET	1.1.1.1	192.168.2.5	0xbe90	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.229329109 CET	1.1.1.1	192.168.2.5	0xefd7	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.229329109 CET	1.1.1.1	192.168.2.5	0xefd7	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.229329109 CET	1.1.1.1	192.168.2.5	0xefd7	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.229329109 CET	1.1.1.1	192.168.2.5	0xefd7	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.229329109 CET	1.1.1.1	192.168.2.5	0xefd7	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.518069029 CET	1.1.1.1	192.168.2.5	0x43a	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.522583961 CET	1.1.1.1	192.168.2.5	0xb507	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:37.522583961 CET	1.1.1.1	192.168.2.5	0xb507	No error (0)	presentation-ams1.turn.com		46.228.164.11	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:37.907047987 CET	1.1.1.1	192.168.2.5	0xb3fa	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.468760014 CET	1.1.1.1	192.168.2.5	0x766d	No error (0)	cm.g.doubleclick.net		172.217.17.66	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.468772888 CET	1.1.1.1	192.168.2.5	0x959b	No error (0)	config.aps.amazon-adsystem.com		18.66.161.21	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.468772888 CET	1.1.1.1	192.168.2.5	0x959b	No error (0)	config.aps.amazon-adsystem.com		18.66.161.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.468772888 CET	1.1.1.1	192.168.2.5	0x959b	No error (0)	config.aps.amazon-adsystem.com		18.66.161.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.468772888 CET	1.1.1.1	192.168.2.5	0x959b	No error (0)	config.aps.amazon-adsystem.com		18.66.161.33	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.471826077 CET	1.1.1.1	192.168.2.5	0x1983	No error (0)	sync.srv.stackadapt.com		35.170.46.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.471826077 CET	1.1.1.1	192.168.2.5	0x1983	No error (0)	sync.srv.stackadapt.com		35.153.85.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.471826077 CET	1.1.1.1	192.168.2.5	0x1983	No error (0)	sync.srv.stackadapt.com		54.144.6.190	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.471826077 CET	1.1.1.1	192.168.2.5	0x1983	No error (0)	sync.srv.stackadapt.com		44.214.168.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.471826077 CET	1.1.1.1	192.168.2.5	0x1983	No error (0)	sync.srv.stackadapt.com		54.166.196.94	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.471826077 CET	1.1.1.1	192.168.2.5	0x1983	No error (0)	sync.srv.stackadapt.com		3.214.248.204	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.471826077 CET	1.1.1.1	192.168.2.5	0x1983	No error (0)	sync.srv.stackadapt.com		52.86.216.144	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.471826077 CET	1.1.1.1	192.168.2.5	0x1983	No error (0)	sync.srv.stackadapt.com		52.200.38.60	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.475378990 CET	1.1.1.1	192.168.2.5	0xb610	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:38.570698977 CET	1.1.1.1	192.168.2.5	0xf6f9	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:38.570698977 CET	1.1.1.1	192.168.2.5	0xf6f9	No error (0)	cs.digbearings.com		52.211.253.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.570698977 CET	1.1.1.1	192.168.2.5	0xf6f9	No error (0)	cs.digbearings.com		34.252.15.195	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.570698977 CET	1.1.1.1	192.168.2.5	0xf6f9	No error (0)	cs.digbearings.com		34.248.76.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.570698977 CET	1.1.1.1	192.168.2.5	0xf6f9	No error (0)	cs.digbearings.com		52.211.162.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.570698977 CET	1.1.1.1	192.168.2.5	0xf6f9	No error (0)	cs.digbearings.com		34.251.183.248	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.570698977 CET	1.1.1.1	192.168.2.5	0xf6f9	No error (0)	cs.digbearings.com		54.194.2.39	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.570698977 CET	1.1.1.1	192.168.2.5	0xf6f9	No error (0)	cs.digbearings.com		52.51.72.81	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.570698977 CET	1.1.1.1	192.168.2.5	0xf6f9	No error (0)	cs.digbearings.com		52.51.44.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.604830980 CET	1.1.1.1	192.168.2.5	0xbd1b	No error (0)	dyv1bugovvq1g.cloudfront.net		108.156.61.100	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.604830980 CET	1.1.1.1	192.168.2.5	0xbd1b	No error (0)	dyv1bugovvq1g.cloudfront.net		108.156.61.173	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.604830980 CET	1.1.1.1	192.168.2.5	0xbd1b	No error (0)	dyv1bugovvq1g.cloudfront.net		108.156.61.161	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.604830980 CET	1.1.1.1	192.168.2.5	0xbd1b	No error (0)	dyv1bugovvq1g.cloudfront.net		108.156.61.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:38.748651981 CET	1.1.1.1	192.168.2.5	0x3cf6	No error (0)	s.amazon-adsystem.com		98.82.154.76	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.059046030 CET	1.1.1.1	192.168.2.5	0x97d6	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.060236931 CET	1.1.1.1	192.168.2.5	0x370a	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.128089905 CET	1.1.1.1	192.168.2.5	0xcb0e	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.128089905 CET	1.1.1.1	192.168.2.5	0xcb0e	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.441966057 CET	1.1.1.1	192.168.2.5	0x6eb7	No error (0)	sync.a-mo.net	sgp-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.441966057 CET	1.1.1.1	192.168.2.5	0x6eb7	No error (0)	sgp-prebid.a-mx.net		131.153.206.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.441966057 CET	1.1.1.1	192.168.2.5	0x6eb7	No error (0)	sgp-prebid.a-mx.net		131.153.206.101	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.441966057 CET	1.1.1.1	192.168.2.5	0x6eb7	No error (0)	sgp-prebid.a-mx.net		131.153.206.102	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.441966057 CET	1.1.1.1	192.168.2.5	0x6eb7	No error (0)	sgp-prebid.a-mx.net		131.153.206.100	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.442037106 CET	1.1.1.1	192.168.2.5	0x7e27	No error (0)	sync.a-mo.net	sgp-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.652424097 CET	1.1.1.1	192.168.2.5	0x87ad	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.652424097 CET	1.1.1.1	192.168.2.5	0x87ad	No error (0)	gw-iad-ym.yeahmobi.com	bid-sin-ali.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.652966022 CET	1.1.1.1	192.168.2.5	0x6f59	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.652966022 CET	1.1.1.1	192.168.2.5	0x6f59	No error (0)	gw-iad-ym.yeahmobi.com	bid-sin-ali.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.652966022 CET	1.1.1.1	192.168.2.5	0x6f59	No error (0)	bid-sin-ali.yeahtargeter.com		8.214.60.171	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.666091919 CET	1.1.1.1	192.168.2.5	0xcb	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.666091919 CET	1.1.1.1	192.168.2.5	0xcb	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.666091919 CET	1.1.1.1	192.168.2.5	0xcb	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.752015114 CET	1.1.1.1	192.168.2.5	0xe644	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.752546072 CET	1.1.1.1	192.168.2.5	0xc4c3	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.752546072 CET	1.1.1.1	192.168.2.5	0xc4c3	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.210.241.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.752546072 CET	1.1.1.1	192.168.2.5	0xc4c3	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.248.108.242	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.752546072 CET	1.1.1.1	192.168.2.5	0xc4c3	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.76.91.170	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.752546072 CET	1.1.1.1	192.168.2.5	0xc4c3	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.252.54.58	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.752557039 CET	1.1.1.1	192.168.2.5	0x7d76	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.752557039 CET	1.1.1.1	192.168.2.5	0x7d76	No error (0)	image6v2.pubmnet.com	pugm-sin12.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.752557039 CET	1.1.1.1	192.168.2.5	0x7d76	No error (0)	pugm-sin12.pubmnet.com		207.65.33.83	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.753215075 CET	1.1.1.1	192.168.2.5	0xb3bc	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.753215075 CET	1.1.1.1	192.168.2.5	0xb3bc	No error (0)	image6v2.pubmnet.com	pugmaster-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.753290892 CET	1.1.1.1	192.168.2.5	0x7e46	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.753902912 CET	1.1.1.1	192.168.2.5	0xef39	No error (0)	wt.rqtrk.eu		57.129.18.109	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.753902912 CET	1.1.1.1	192.168.2.5	0xef39	No error (0)	wt.rqtrk.eu		57.129.18.105	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.753902912 CET	1.1.1.1	192.168.2.5	0xef39	No error (0)	wt.rqtrk.eu		57.129.18.121	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.753902912 CET	1.1.1.1	192.168.2.5	0xef39	No error (0)	wt.rqtrk.eu		57.129.18.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.753902912 CET	1.1.1.1	192.168.2.5	0xef39	No error (0)	wt.rqtrk.eu		57.129.18.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.754170895 CET	1.1.1.1	192.168.2.5	0xeb0c	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.777903080 CET	1.1.1.1	192.168.2.5	0x944	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.778769970 CET	1.1.1.1	192.168.2.5	0x300f	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.786011934 CET	1.1.1.1	192.168.2.5	0x6968	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.786367893 CET	1.1.1.1	192.168.2.5	0x61a3	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.787344933 CET	1.1.1.1	192.168.2.5	0xa542	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.787344933 CET	1.1.1.1	192.168.2.5	0xa542	No error (0)	d2avimlm6gq3h9.cloudfront.net		108.158.78.208	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.789247036 CET	1.1.1.1	192.168.2.5	0x2a11	No error (0)	invstatic101.creativecdn.com		34.96.70.87	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.789742947 CET	1.1.1.1	192.168.2.5	0xc0fc	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.789742947 CET	1.1.1.1	192.168.2.5	0xc0fc	No error (0)	d1402xccwihzsp.cloudfront.net		18.66.161.25	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.789742947 CET	1.1.1.1	192.168.2.5	0xc0fc	No error (0)	d1402xccwihzsp.cloudfront.net		18.66.161.23	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.789742947 CET	1.1.1.1	192.168.2.5	0xc0fc	No error (0)	d1402xccwihzsp.cloudfront.net		18.66.161.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.789742947 CET	1.1.1.1	192.168.2.5	0xc0fc	No error (0)	d1402xccwihzsp.cloudfront.net		18.66.161.51	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.790685892 CET	1.1.1.1	192.168.2.5	0x5b82	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.792603970 CET	1.1.1.1	192.168.2.5	0x34a5	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.792603970 CET	1.1.1.1	192.168.2.5	0x34a5	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.792618036 CET	1.1.1.1	192.168.2.5	0xaa98	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.793417931 CET	1.1.1.1	192.168.2.5	0xcb04	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.793554068 CET	1.1.1.1	192.168.2.5	0xdcef	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:39.912741899 CET	1.1.1.1	192.168.2.5	0x8cfe	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.970351934 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	cs.yellowblue.io		52.211.162.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.970351934 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	cs.yellowblue.io		34.252.15.195	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.970351934 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	cs.yellowblue.io		52.211.253.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.970351934 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	cs.yellowblue.io		34.248.76.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.970351934 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	cs.yellowblue.io		52.208.71.28	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.970351934 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	cs.yellowblue.io		52.51.44.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.970351934 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	cs.yellowblue.io		34.251.183.248	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:39.970351934 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	cs.yellowblue.io		54.194.2.39	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.029726028 CET	1.1.1.1	192.168.2.5	0x5a64	No error (0)	s.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.029726028 CET	1.1.1.1	192.168.2.5	0x5a64	No error (0)	s.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.031400919 CET	1.1.1.1	192.168.2.5	0xa40f	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:40.152806044 CET	1.1.1.1	192.168.2.5	0xfd8e	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:40.153088093 CET	1.1.1.1	192.168.2.5	0xdd	No error (0)	sync.crwdcntrl.net		13.228.52.238	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.153088093 CET	1.1.1.1	192.168.2.5	0xdd	No error (0)	sync.crwdcntrl.net		52.76.92.93	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.153088093 CET	1.1.1.1	192.168.2.5	0xdd	No error (0)	sync.crwdcntrl.net		13.228.48.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.153088093 CET	1.1.1.1	192.168.2.5	0xdd	No error (0)	sync.crwdcntrl.net		13.250.84.149	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.153088093 CET	1.1.1.1	192.168.2.5	0xdd	No error (0)	sync.crwdcntrl.net		3.1.88.234	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.153088093 CET	1.1.1.1	192.168.2.5	0xdd	No error (0)	sync.crwdcntrl.net		18.141.252.181	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.153088093 CET	1.1.1.1	192.168.2.5	0xdd	No error (0)	sync.crwdcntrl.net		52.220.45.219	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.153088093 CET	1.1.1.1	192.168.2.5	0xdd	No error (0)	sync.crwdcntrl.net		13.228.141.68	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.157485008 CET	1.1.1.1	192.168.2.5	0x2aac	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:40.157485008 CET	1.1.1.1	192.168.2.5	0x2aac	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.157485008 CET	1.1.1.1	192.168.2.5	0x2aac	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.161133051 CET	1.1.1.1	192.168.2.5	0xef3	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.194931984 CET	1.1.1.1	192.168.2.5	0x179b	No error (0)	cdn.prod.euid.eu	d2eipinci0cqex.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:40.195064068 CET	1.1.1.1	192.168.2.5	0x2f47	No error (0)	cdn.prod.euid.eu	d2eipinci0cqex.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:40.195064068 CET	1.1.1.1	192.168.2.5	0x2f47	No error (0)	d2eipinci0cqex.cloudfront.net		13.227.12.129	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.426716089 CET	1.1.1.1	192.168.2.5	0xc1a8	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:40.426913023 CET	1.1.1.1	192.168.2.5	0x2ddb	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:40.428288937 CET	1.1.1.1	192.168.2.5	0xa365	No error (0)	tags.crwdcntrl.net		54.230.112.50	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.428288937 CET	1.1.1.1	192.168.2.5	0xa365	No error (0)	tags.crwdcntrl.net		54.230.112.42	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.428288937 CET	1.1.1.1	192.168.2.5	0xa365	No error (0)	tags.crwdcntrl.net		54.230.112.73	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.428288937 CET	1.1.1.1	192.168.2.5	0xa365	No error (0)	tags.crwdcntrl.net		54.230.112.53	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.430367947 CET	1.1.1.1	192.168.2.5	0xd559	No error (0)	cdn.id5-sync.com		104.22.53.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.430367947 CET	1.1.1.1	192.168.2.5	0xd559	No error (0)	cdn.id5-sync.com		172.67.38.106	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.430367947 CET	1.1.1.1	192.168.2.5	0xd559	No error (0)	cdn.id5-sync.com		104.22.52.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.430674076 CET	1.1.1.1	192.168.2.5	0xd9f9	No error (0)	cdn.hadronid.net			65	IN (0x0001)	false
Dec 12, 2024 19:58:40.432540894 CET	1.1.1.1	192.168.2.5	0x3819	No error (0)	cdn.hadronid.net		104.22.52.173	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.432540894 CET	1.1.1.1	192.168.2.5	0x3819	No error (0)	cdn.hadronid.net		104.22.53.173	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.432540894 CET	1.1.1.1	192.168.2.5	0x3819	No error (0)	cdn.hadronid.net		172.67.36.110	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.433604002 CET	1.1.1.1	192.168.2.5	0xb0c8	No error (0)	cdn.id5-sync.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:40.433721066 CET	1.1.1.1	192.168.2.5	0x1620	No error (0)	krk2.kargo.com		18.136.161.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.433721066 CET	1.1.1.1	192.168.2.5	0x1620	No error (0)	krk2.kargo.com		52.220.144.134	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.433721066 CET	1.1.1.1	192.168.2.5	0x1620	No error (0)	krk2.kargo.com		52.221.5.68	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.523132086 CET	1.1.1.1	192.168.2.5	0xa0e5	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.523132086 CET	1.1.1.1	192.168.2.5	0xa0e5	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.526942968 CET	1.1.1.1	192.168.2.5	0xbdfb	No error (0)	dsum-sec.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.526942968 CET	1.1.1.1	192.168.2.5	0xbdfb	No error (0)	dsum-sec.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.527638912 CET	1.1.1.1	192.168.2.5	0x62fc	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:40.603080034 CET	1.1.1.1	192.168.2.5	0xa384	No error (0)	tag.wknd.ai	tag.bouncex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:40.619362116 CET	1.1.1.1	192.168.2.5	0xec8b	No error (0)	tag.wknd.ai	tag.bouncex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:40.619362116 CET	1.1.1.1	192.168.2.5	0xec8b	No error (0)	tag.bouncex.net		34.120.253.250	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.976074934 CET	1.1.1.1	192.168.2.5	0xcf64	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.978785038 CET	1.1.1.1	192.168.2.5	0x66dd	No error (0)	aorta.clickagy.com		54.236.77.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.978785038 CET	1.1.1.1	192.168.2.5	0x66dd	No error (0)	aorta.clickagy.com		23.22.33.167	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.978785038 CET	1.1.1.1	192.168.2.5	0x66dd	No error (0)	aorta.clickagy.com		52.72.85.183	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:40.978785038 CET	1.1.1.1	192.168.2.5	0x66dd	No error (0)	aorta.clickagy.com		54.174.65.254	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.124039888 CET	1.1.1.1	192.168.2.5	0x6fd6	No error (0)	visitor.omnitagjs.com	visitor-ovh-bh.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.124039888 CET	1.1.1.1	192.168.2.5	0x6fd6	No error (0)	visitor-ovh-bh.omnitagjs.com	lb-ovh-bh.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.124039888 CET	1.1.1.1	192.168.2.5	0x6fd6	No error (0)	lb-ovh-bh.omnitagjs.com		152.228.215.159	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.124039888 CET	1.1.1.1	192.168.2.5	0x6fd6	No error (0)	lb-ovh-bh.omnitagjs.com		141.94.172.236	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.124039888 CET	1.1.1.1	192.168.2.5	0x6fd6	No error (0)	lb-ovh-bh.omnitagjs.com		141.94.175.218	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.125643015 CET	1.1.1.1	192.168.2.5	0xfef7	No error (0)	visitor.omnitagjs.com	visitor-ovh-bh.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.125643015 CET	1.1.1.1	192.168.2.5	0xfef7	No error (0)	visitor-ovh-bh.omnitagjs.com	lb-ovh-bh.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.157777071 CET	1.1.1.1	192.168.2.5	0x3ddc	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.163877010 CET	1.1.1.1	192.168.2.5	0x395c	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.163877010 CET	1.1.1.1	192.168.2.5	0x395c	No error (0)	cs.digbearings.com		52.211.253.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.163877010 CET	1.1.1.1	192.168.2.5	0x395c	No error (0)	cs.digbearings.com		34.252.15.195	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.163877010 CET	1.1.1.1	192.168.2.5	0x395c	No error (0)	cs.digbearings.com		34.248.76.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.163877010 CET	1.1.1.1	192.168.2.5	0x395c	No error (0)	cs.digbearings.com		52.51.44.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.163877010 CET	1.1.1.1	192.168.2.5	0x395c	No error (0)	cs.digbearings.com		34.251.183.248	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.163877010 CET	1.1.1.1	192.168.2.5	0x395c	No error (0)	cs.digbearings.com		52.51.72.81	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.163877010 CET	1.1.1.1	192.168.2.5	0x395c	No error (0)	cs.digbearings.com		54.194.2.39	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.163877010 CET	1.1.1.1	192.168.2.5	0x395c	No error (0)	cs.digbearings.com		52.211.162.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.273200989 CET	1.1.1.1	192.168.2.5	0x437f	No error (0)	dyv1bugovvq1g.cloudfront.net		108.156.61.100	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.273200989 CET	1.1.1.1	192.168.2.5	0x437f	No error (0)	dyv1bugovvq1g.cloudfront.net		108.156.61.173	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.273200989 CET	1.1.1.1	192.168.2.5	0x437f	No error (0)	dyv1bugovvq1g.cloudfront.net		108.156.61.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.273200989 CET	1.1.1.1	192.168.2.5	0x437f	No error (0)	dyv1bugovvq1g.cloudfront.net		108.156.61.161	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.371479034 CET	1.1.1.1	192.168.2.5	0x49f	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.373341084 CET	1.1.1.1	192.168.2.5	0x5080	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.373341084 CET	1.1.1.1	192.168.2.5	0x5080	No error (0)	ssp.ads.betweendigital.com		188.42.196.115	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.373341084 CET	1.1.1.1	192.168.2.5	0x5080	No error (0)	ssp.ads.betweendigital.com		188.42.34.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.373341084 CET	1.1.1.1	192.168.2.5	0x5080	No error (0)	ssp.ads.betweendigital.com		188.42.34.64	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.373341084 CET	1.1.1.1	192.168.2.5	0x5080	No error (0)	ssp.ads.betweendigital.com		188.42.191.196	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.373341084 CET	1.1.1.1	192.168.2.5	0x5080	No error (0)	ssp.ads.betweendigital.com		188.42.189.231	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.373341084 CET	1.1.1.1	192.168.2.5	0x5080	No error (0)	ssp.ads.betweendigital.com		188.42.189.197	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.425427914 CET	1.1.1.1	192.168.2.5	0xc8c4	No error (0)	match.sharethrough.com	match-ap-southeast-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.425781965 CET	1.1.1.1	192.168.2.5	0x9f53	No error (0)	match.sharethrough.com	match-ap-southeast-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.425781965 CET	1.1.1.1	192.168.2.5	0x9f53	No error (0)	match-ap-southeast-1-ecs.sharethrough.com		54.254.2.214	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.599034071 CET	1.1.1.1	192.168.2.5	0x207c	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.678266048 CET	1.1.1.1	192.168.2.5	0x21c2	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.678987980 CET	1.1.1.1	192.168.2.5	0xb61b	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.681304932 CET	1.1.1.1	192.168.2.5	0x94af	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.682241917 CET	1.1.1.1	192.168.2.5	0x884c	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.686453104 CET	1.1.1.1	192.168.2.5	0x11ba	No error (0)	invstatic101.creativecdn.com		34.96.70.87	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.935230970 CET	1.1.1.1	192.168.2.5	0xd583	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:41.936105013 CET	1.1.1.1	192.168.2.5	0x1c77	No error (0)	ssum-sec.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.936105013 CET	1.1.1.1	192.168.2.5	0x1c77	No error (0)	ssum-sec.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.936291933 CET	1.1.1.1	192.168.2.5	0x346d	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.936291933 CET	1.1.1.1	192.168.2.5	0x346d	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.206	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.936291933 CET	1.1.1.1	192.168.2.5	0x346d	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.204	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.936422110 CET	1.1.1.1	192.168.2.5	0x233d	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:41.997386932 CET	1.1.1.1	192.168.2.5	0xc358	No error (0)	id.a-mx.com		79.127.216.47	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:41.997386932 CET	1.1.1.1	192.168.2.5	0xc358	No error (0)	id.a-mx.com		79.127.227.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.065721989 CET	1.1.1.1	192.168.2.5	0xa746	No error (0)	um.simpli.fi		35.204.201.36	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.065721989 CET	1.1.1.1	192.168.2.5	0xa746	No error (0)	um.simpli.fi		34.13.138.208	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.065721989 CET	1.1.1.1	192.168.2.5	0xa746	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.065721989 CET	1.1.1.1	192.168.2.5	0xa746	No error (0)	um.simpli.fi		35.204.164.169	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.065721989 CET	1.1.1.1	192.168.2.5	0xa746	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.065721989 CET	1.1.1.1	192.168.2.5	0xa746	No error (0)	um.simpli.fi		34.91.165.80	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.118607998 CET	1.1.1.1	192.168.2.5	0x23a5	No error (0)	sync.a-mo.net	sgp-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.118647099 CET	1.1.1.1	192.168.2.5	0x182a	No error (0)	sync.a-mo.net	sgp-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.118647099 CET	1.1.1.1	192.168.2.5	0x182a	No error (0)	sgp-prebid.a-mx.net		131.153.206.102	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.118647099 CET	1.1.1.1	192.168.2.5	0x182a	No error (0)	sgp-prebid.a-mx.net		131.153.206.101	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.118647099 CET	1.1.1.1	192.168.2.5	0x182a	No error (0)	sgp-prebid.a-mx.net		131.153.206.100	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.118647099 CET	1.1.1.1	192.168.2.5	0x182a	No error (0)	sgp-prebid.a-mx.net		131.153.206.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.131985903 CET	1.1.1.1	192.168.2.5	0x901a	No error (0)	prebid.adnxs.com	xandr-prebid.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.151012897 CET	1.1.1.1	192.168.2.5	0x2df8	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.151012897 CET	1.1.1.1	192.168.2.5	0x2df8	No error (0)	owv2.pubmnet.com	ow-sin12c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.152527094 CET	1.1.1.1	192.168.2.5	0x78a2	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.152527094 CET	1.1.1.1	192.168.2.5	0x78a2	No error (0)	owv2.pubmnet.com	ow-sin12c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.152527094 CET	1.1.1.1	192.168.2.5	0x78a2	No error (0)	ow-sin12c.pubmnet.com		207.65.33.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.160996914 CET	1.1.1.1	192.168.2.5	0xa402	No error (0)	id.rtb.mx	id.a-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.160996914 CET	1.1.1.1	192.168.2.5	0xa402	No error (0)	id.a-mx.com		79.127.216.47	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.160996914 CET	1.1.1.1	192.168.2.5	0xa402	No error (0)	id.a-mx.com		79.127.227.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.161505938 CET	1.1.1.1	192.168.2.5	0x38b	No error (0)	id.rtb.mx	id.a-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.204556942 CET	1.1.1.1	192.168.2.5	0xa764	No error (0)	cs-tam.yellowblue.io		54.194.2.39	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.204556942 CET	1.1.1.1	192.168.2.5	0xa764	No error (0)	cs-tam.yellowblue.io		52.51.72.81	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.204556942 CET	1.1.1.1	192.168.2.5	0xa764	No error (0)	cs-tam.yellowblue.io		34.252.15.195	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.204556942 CET	1.1.1.1	192.168.2.5	0xa764	No error (0)	cs-tam.yellowblue.io		52.51.44.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.204556942 CET	1.1.1.1	192.168.2.5	0xa764	No error (0)	cs-tam.yellowblue.io		52.211.253.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.204556942 CET	1.1.1.1	192.168.2.5	0xa764	No error (0)	cs-tam.yellowblue.io		52.208.71.28	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.204556942 CET	1.1.1.1	192.168.2.5	0xa764	No error (0)	cs-tam.yellowblue.io		34.248.76.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.204556942 CET	1.1.1.1	192.168.2.5	0xa764	No error (0)	cs-tam.yellowblue.io		34.251.183.248	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.210863113 CET	1.1.1.1	192.168.2.5	0x62	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.210863113 CET	1.1.1.1	192.168.2.5	0x62	No error (0)	d2avimlm6gq3h9.cloudfront.net		108.158.78.208	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.210937977 CET	1.1.1.1	192.168.2.5	0xd256	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.232007027 CET	1.1.1.1	192.168.2.5	0xa603	No error (0)	rtb.gumgum.com		52.74.190.151	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.232007027 CET	1.1.1.1	192.168.2.5	0xa603	No error (0)	rtb.gumgum.com		13.251.172.28	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.232007027 CET	1.1.1.1	192.168.2.5	0xa603	No error (0)	rtb.gumgum.com		13.228.188.29	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.232007027 CET	1.1.1.1	192.168.2.5	0xa603	No error (0)	rtb.gumgum.com		3.1.142.102	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.232007027 CET	1.1.1.1	192.168.2.5	0xa603	No error (0)	rtb.gumgum.com		3.1.107.191	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.232007027 CET	1.1.1.1	192.168.2.5	0xa603	No error (0)	rtb.gumgum.com		52.77.178.59	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.263499022 CET	1.1.1.1	192.168.2.5	0x4b49	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.363620043 CET	1.1.1.1	192.168.2.5	0x26ed	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.363620043 CET	1.1.1.1	192.168.2.5	0x26ed	No error (0)	image4-v2.pubmnet.com	spug-sin12.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.363691092 CET	1.1.1.1	192.168.2.5	0x5931	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.363691092 CET	1.1.1.1	192.168.2.5	0x5931	No error (0)	image4-v2.pubmnet.com	spug-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.363691092 CET	1.1.1.1	192.168.2.5	0x5931	No error (0)	spug-sg4c.pubmnet.com		67.199.150.85	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.426592112 CET	1.1.1.1	192.168.2.5	0xd3ab	No error (0)	match.prod.bidr.io		52.17.25.220	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.426592112 CET	1.1.1.1	192.168.2.5	0xd3ab	No error (0)	match.prod.bidr.io		52.17.155.166	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.426592112 CET	1.1.1.1	192.168.2.5	0xd3ab	No error (0)	match.prod.bidr.io		63.32.181.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.426592112 CET	1.1.1.1	192.168.2.5	0xd3ab	No error (0)	match.prod.bidr.io		52.50.195.207	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.426592112 CET	1.1.1.1	192.168.2.5	0xd3ab	No error (0)	match.prod.bidr.io		52.19.235.127	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.426592112 CET	1.1.1.1	192.168.2.5	0xd3ab	No error (0)	match.prod.bidr.io		34.252.79.168	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.426592112 CET	1.1.1.1	192.168.2.5	0xd3ab	No error (0)	match.prod.bidr.io		34.249.70.63	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427587986 CET	1.1.1.1	192.168.2.5	0x345d	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427587986 CET	1.1.1.1	192.168.2.5	0x345d	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427742004 CET	1.1.1.1	192.168.2.5	0xee71	No error (0)	cs.yellowblue.io		54.194.2.39	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427742004 CET	1.1.1.1	192.168.2.5	0xee71	No error (0)	cs.yellowblue.io		34.252.15.195	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427742004 CET	1.1.1.1	192.168.2.5	0xee71	No error (0)	cs.yellowblue.io		52.211.253.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427742004 CET	1.1.1.1	192.168.2.5	0xee71	No error (0)	cs.yellowblue.io		52.211.162.19	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427742004 CET	1.1.1.1	192.168.2.5	0xee71	No error (0)	cs.yellowblue.io		52.208.71.28	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427742004 CET	1.1.1.1	192.168.2.5	0xee71	No error (0)	cs.yellowblue.io		52.51.44.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427742004 CET	1.1.1.1	192.168.2.5	0xee71	No error (0)	cs.yellowblue.io		34.248.76.113	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427742004 CET	1.1.1.1	192.168.2.5	0xee71	No error (0)	cs.yellowblue.io		34.251.183.248	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.427967072 CET	1.1.1.1	192.168.2.5	0x1e54	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	rw.yieldmo.com	ap-southeast-1-ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	ap-southeast-1-ads.yieldmo.com	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		18.136.43.252	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		18.136.111.226	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		13.214.82.117	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		52.76.249.126	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		18.139.112.189	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		13.228.156.225	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		52.220.157.32	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.429649115 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		13.229.244.192	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.430254936 CET	1.1.1.1	192.168.2.5	0xb35	No error (0)	config.aps.amazon-adsystem.com		18.66.161.33	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.430254936 CET	1.1.1.1	192.168.2.5	0xb35	No error (0)	config.aps.amazon-adsystem.com		18.66.161.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.430254936 CET	1.1.1.1	192.168.2.5	0xb35	No error (0)	config.aps.amazon-adsystem.com		18.66.161.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.430254936 CET	1.1.1.1	192.168.2.5	0xb35	No error (0)	config.aps.amazon-adsystem.com		18.66.161.21	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.462778091 CET	1.1.1.1	192.168.2.5	0xa375	No error (0)	events.bouncex.net	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.463990927 CET	1.1.1.1	192.168.2.5	0xf98b	No error (0)	api.bounceexchange.com	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.506241083 CET	1.1.1.1	192.168.2.5	0xb89d	No error (0)	tag.wknd.ai	tag.bouncex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.506241083 CET	1.1.1.1	192.168.2.5	0xb89d	No error (0)	tag.bouncex.net		34.120.253.250	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.507036924 CET	1.1.1.1	192.168.2.5	0xa658	No error (0)	tag.wknd.ai	tag.bouncex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.650831938 CET	1.1.1.1	192.168.2.5	0x1d0b	No error (0)	assets.bounceexchange.com	static.bounceexchange.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.650831938 CET	1.1.1.1	192.168.2.5	0x1d0b	No error (0)	static.bounceexchange.com		34.98.72.95	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.663336039 CET	1.1.1.1	192.168.2.5	0xe3d5	No error (0)	assets.bounceexchange.com	static.bounceexchange.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.699523926 CET	1.1.1.1	192.168.2.5	0xf0a1	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.703907013 CET	1.1.1.1	192.168.2.5	0x8b15	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.713881969 CET	1.1.1.1	192.168.2.5	0xd71f	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.713881969 CET	1.1.1.1	192.168.2.5	0xd71f	No error (0)	image2v2.pubmnet.com	pug-sin12.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.713881969 CET	1.1.1.1	192.168.2.5	0xd71f	No error (0)	pug-sin12.pubmnet.com		207.65.33.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.714723110 CET	1.1.1.1	192.168.2.5	0xde79	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.714723110 CET	1.1.1.1	192.168.2.5	0xde79	No error (0)	image2v2.pubmnet.com	pug-sin12.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.719094038 CET	1.1.1.1	192.168.2.5	0xe67b	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.719094038 CET	1.1.1.1	192.168.2.5	0xe67b	No error (0)	sync.1rx.io		74.118.186.107	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.721831083 CET	1.1.1.1	192.168.2.5	0xe24e	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.736691952 CET	1.1.1.1	192.168.2.5	0x99ec	No error (0)	cdn.hadronid.net		172.67.36.110	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.736691952 CET	1.1.1.1	192.168.2.5	0x99ec	No error (0)	cdn.hadronid.net		104.22.52.173	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.736691952 CET	1.1.1.1	192.168.2.5	0x99ec	No error (0)	cdn.hadronid.net		104.22.53.173	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.738796949 CET	1.1.1.1	192.168.2.5	0x7485	No error (0)	cdn.hadronid.net			65	IN (0x0001)	false
Dec 12, 2024 19:58:42.757076025 CET	1.1.1.1	192.168.2.5	0xbfee	No error (0)	api.bounceexchange.com	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.757076025 CET	1.1.1.1	192.168.2.5	0xbfee	No error (0)	nginx-ingress.wunderkind.co		34.111.8.32	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.823581934 CET	1.1.1.1	192.168.2.5	0x8d35	No error (0)	events.bouncex.net	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.823581934 CET	1.1.1.1	192.168.2.5	0x8d35	No error (0)	nginx-ingress.wunderkind.co		34.111.8.32	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.922830105 CET	1.1.1.1	192.168.2.5	0xd503	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.922830105 CET	1.1.1.1	192.168.2.5	0xd503	No error (0)	rw.yieldmo.com	ap-southeast-1-ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.922830105 CET	1.1.1.1	192.168.2.5	0xd503	No error (0)	ap-southeast-1-ads.yieldmo.com	rw-yieldmo-com-1673518954.ap-southeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.928658009 CET	1.1.1.1	192.168.2.5	0xb3ab	No error (0)	cdn.id5-sync.com		104.22.53.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.928658009 CET	1.1.1.1	192.168.2.5	0xb3ab	No error (0)	cdn.id5-sync.com		104.22.52.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.928658009 CET	1.1.1.1	192.168.2.5	0xb3ab	No error (0)	cdn.id5-sync.com		172.67.38.106	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:42.933581114 CET	1.1.1.1	192.168.2.5	0xd221	No error (0)	cdn.id5-sync.com			65	IN (0x0001)	false
Dec 12, 2024 19:58:42.948981047 CET	1.1.1.1	192.168.2.5	0xdc41	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:42.948998928 CET	1.1.1.1	192.168.2.5	0x370f	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:43.040129900 CET	1.1.1.1	192.168.2.5	0x62f7	No error (0)	bcp.crwdcntrl.net		52.76.92.93	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.040129900 CET	1.1.1.1	192.168.2.5	0x62f7	No error (0)	bcp.crwdcntrl.net		13.250.84.149	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.040129900 CET	1.1.1.1	192.168.2.5	0x62f7	No error (0)	bcp.crwdcntrl.net		3.1.88.234	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.040129900 CET	1.1.1.1	192.168.2.5	0x62f7	No error (0)	bcp.crwdcntrl.net		13.228.141.68	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.040129900 CET	1.1.1.1	192.168.2.5	0x62f7	No error (0)	bcp.crwdcntrl.net		52.220.45.219	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.040129900 CET	1.1.1.1	192.168.2.5	0x62f7	No error (0)	bcp.crwdcntrl.net		13.228.48.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.040129900 CET	1.1.1.1	192.168.2.5	0x62f7	No error (0)	bcp.crwdcntrl.net		18.141.252.181	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.040129900 CET	1.1.1.1	192.168.2.5	0x62f7	No error (0)	bcp.crwdcntrl.net		13.228.52.238	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.131948948 CET	1.1.1.1	192.168.2.5	0x2490	No error (0)	tags.crwdcntrl.net		54.230.112.42	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.131948948 CET	1.1.1.1	192.168.2.5	0x2490	No error (0)	tags.crwdcntrl.net		54.230.112.53	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.131948948 CET	1.1.1.1	192.168.2.5	0x2490	No error (0)	tags.crwdcntrl.net		54.230.112.50	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.131948948 CET	1.1.1.1	192.168.2.5	0x2490	No error (0)	tags.crwdcntrl.net		54.230.112.73	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.141015053 CET	1.1.1.1	192.168.2.5	0xab9e	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:43.141015053 CET	1.1.1.1	192.168.2.5	0xab9e	No error (0)	d1402xccwihzsp.cloudfront.net		18.66.161.51	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.141015053 CET	1.1.1.1	192.168.2.5	0xab9e	No error (0)	d1402xccwihzsp.cloudfront.net		18.66.161.23	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.141015053 CET	1.1.1.1	192.168.2.5	0xab9e	No error (0)	d1402xccwihzsp.cloudfront.net		18.66.161.25	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.141015053 CET	1.1.1.1	192.168.2.5	0xab9e	No error (0)	d1402xccwihzsp.cloudfront.net		18.66.161.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.167406082 CET	1.1.1.1	192.168.2.5	0x8644	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:43.211162090 CET	1.1.1.1	192.168.2.5	0xb358	No error (0)	cdn.prod.euid.eu	d2eipinci0cqex.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:43.211162090 CET	1.1.1.1	192.168.2.5	0xb358	No error (0)	d2eipinci0cqex.cloudfront.net		13.227.12.129	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.213263035 CET	1.1.1.1	192.168.2.5	0x6dfa	No error (0)	cdn.prod.euid.eu	d2eipinci0cqex.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.411745071 CET	1.1.1.1	192.168.2.5	0xc656	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.812107086 CET	1.1.1.1	192.168.2.5	0x74f7	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.956403971 CET	1.1.1.1	192.168.2.5	0x68b	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:43.956403971 CET	1.1.1.1	192.168.2.5	0x68b	No error (0)	simage2v2.pubmnet.com	pug-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:43.956403971 CET	1.1.1.1	192.168.2.5	0x68b	No error (0)	pug-sg4c.pubmnet.com		67.199.150.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:43.956640959 CET	1.1.1.1	192.168.2.5	0x6880	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:43.956640959 CET	1.1.1.1	192.168.2.5	0x6880	No error (0)	simage2v2.pubmnet.com	pug-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.026808023 CET	1.1.1.1	192.168.2.5	0xed94	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.026808023 CET	1.1.1.1	192.168.2.5	0xed94	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.026808023 CET	1.1.1.1	192.168.2.5	0xed94	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.026808023 CET	1.1.1.1	192.168.2.5	0xed94	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.104728937 CET	1.1.1.1	192.168.2.5	0xe5bb	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.370734930 CET	1.1.1.1	192.168.2.5	0x3dd7	No error (0)	cm.ambientdsp.com		18.138.18.111	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.371942997 CET	1.1.1.1	192.168.2.5	0xd739	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.371942997 CET	1.1.1.1	192.168.2.5	0xd739	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.371958971 CET	1.1.1.1	192.168.2.5	0x84ca	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.371958971 CET	1.1.1.1	192.168.2.5	0x84ca	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.371958971 CET	1.1.1.1	192.168.2.5	0x84ca	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.371958971 CET	1.1.1.1	192.168.2.5	0x84ca	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.371958971 CET	1.1.1.1	192.168.2.5	0x84ca	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.371958971 CET	1.1.1.1	192.168.2.5	0x84ca	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.500807047 CET	1.1.1.1	192.168.2.5	0x7b76	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.500807047 CET	1.1.1.1	192.168.2.5	0x7b76	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.500807047 CET	1.1.1.1	192.168.2.5	0x7b76	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.503334999 CET	1.1.1.1	192.168.2.5	0x2d55	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.503334999 CET	1.1.1.1	192.168.2.5	0x2d55	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.503334999 CET	1.1.1.1	192.168.2.5	0x2d55	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.804024935 CET	1.1.1.1	192.168.2.5	0x62ed	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.804024935 CET	1.1.1.1	192.168.2.5	0x62ed	No error (0)	image4-v2.pubmnet.com	spug-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.804024935 CET	1.1.1.1	192.168.2.5	0x62ed	No error (0)	spug-sg4c.pubmnet.com		67.199.150.85	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.804372072 CET	1.1.1.1	192.168.2.5	0x769e	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.804372072 CET	1.1.1.1	192.168.2.5	0x769e	No error (0)	image4-v2.pubmnet.com	spug-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.877238035 CET	1.1.1.1	192.168.2.5	0xa4b0	No error (0)	prebid.adnxs.com	xandr-prebid.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.882591963 CET	1.1.1.1	192.168.2.5	0x2b0b	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.882591963 CET	1.1.1.1	192.168.2.5	0x2b0b	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.882591963 CET	1.1.1.1	192.168.2.5	0x2b0b	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.200.40.103	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.882591963 CET	1.1.1.1	192.168.2.5	0x2b0b	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.188.228.126	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.882591963 CET	1.1.1.1	192.168.2.5	0x2b0b	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		35.80.102.85	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.882591963 CET	1.1.1.1	192.168.2.5	0x2b0b	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.43.241.57	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.882591963 CET	1.1.1.1	192.168.2.5	0x2b0b	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.229.119.177	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.882591963 CET	1.1.1.1	192.168.2.5	0x2b0b	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.224.20.21	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.884836912 CET	1.1.1.1	192.168.2.5	0x13f	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.884836912 CET	1.1.1.1	192.168.2.5	0x13f	No error (0)	owv2.pubmnet.com	ow-sin12c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.884836912 CET	1.1.1.1	192.168.2.5	0x13f	No error (0)	ow-sin12c.pubmnet.com		207.65.33.86	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.885588884 CET	1.1.1.1	192.168.2.5	0xa8a9	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.885588884 CET	1.1.1.1	192.168.2.5	0xa8a9	No error (0)	owv2.pubmnet.com	ow-sin12c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:44.966049910 CET	1.1.1.1	192.168.2.5	0x25b9	No error (0)	ping.chartbeat.net		44.208.199.202	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.966049910 CET	1.1.1.1	192.168.2.5	0x25b9	No error (0)	ping.chartbeat.net		34.197.56.149	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.966049910 CET	1.1.1.1	192.168.2.5	0x25b9	No error (0)	ping.chartbeat.net		54.91.193.210	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.966049910 CET	1.1.1.1	192.168.2.5	0x25b9	No error (0)	ping.chartbeat.net		44.215.100.99	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.966049910 CET	1.1.1.1	192.168.2.5	0x25b9	No error (0)	ping.chartbeat.net		54.144.182.107	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.966049910 CET	1.1.1.1	192.168.2.5	0x25b9	No error (0)	ping.chartbeat.net		34.200.196.38	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.966049910 CET	1.1.1.1	192.168.2.5	0x25b9	No error (0)	ping.chartbeat.net		34.206.246.37	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:44.966049910 CET	1.1.1.1	192.168.2.5	0x25b9	No error (0)	ping.chartbeat.net		54.163.224.76	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.061454058 CET	1.1.1.1	192.168.2.5	0x43cc	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:45.061454058 CET	1.1.1.1	192.168.2.5	0x43cc	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:45.213334084 CET	1.1.1.1	192.168.2.5	0xd67	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:45.256213903 CET	1.1.1.1	192.168.2.5	0x1538	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:45.256213903 CET	1.1.1.1	192.168.2.5	0x1538	No error (0)	image4-v2.pubmnet.com	spug-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:45.256213903 CET	1.1.1.1	192.168.2.5	0x1538	No error (0)	spug-sg4c.pubmnet.com		67.199.150.85	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.256481886 CET	1.1.1.1	192.168.2.5	0x8815	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:45.256481886 CET	1.1.1.1	192.168.2.5	0x8815	No error (0)	image4-v2.pubmnet.com	spug-sin12.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:45.318080902 CET	1.1.1.1	192.168.2.5	0xafc	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.477256060 CET	1.1.1.1	192.168.2.5	0xe2a7	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.942853928 CET	1.1.1.1	192.168.2.5	0xa989	No error (0)	sync.crwdcntrl.net		13.228.52.238	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.942853928 CET	1.1.1.1	192.168.2.5	0xa989	No error (0)	sync.crwdcntrl.net		52.76.92.93	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.942853928 CET	1.1.1.1	192.168.2.5	0xa989	No error (0)	sync.crwdcntrl.net		13.228.48.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.942853928 CET	1.1.1.1	192.168.2.5	0xa989	No error (0)	sync.crwdcntrl.net		13.250.84.149	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.942853928 CET	1.1.1.1	192.168.2.5	0xa989	No error (0)	sync.crwdcntrl.net		13.228.141.68	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.942853928 CET	1.1.1.1	192.168.2.5	0xa989	No error (0)	sync.crwdcntrl.net		18.141.252.181	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.942853928 CET	1.1.1.1	192.168.2.5	0xa989	No error (0)	sync.crwdcntrl.net		52.220.45.219	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:45.942853928 CET	1.1.1.1	192.168.2.5	0xa989	No error (0)	sync.crwdcntrl.net		3.1.88.234	A (IP address)	IN (0x0001)	false
Dec 12, 2024 19:58:46.309217930 CET	1.1.1.1	192.168.2.5	0x1d16	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:46.310683966 CET	1.1.1.1	192.168.2.5	0xceaa	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:46.372519970 CET	1.1.1.1	192.168.2.5	0xfb9a	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:46.372519970 CET	1.1.1.1	192.168.2.5	0xfb9a	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:46.372519970 CET	1.1.1.1	192.168.2.5	0xfb9a	No error (0)	adizio.geo.iponweb.net	adizio-stable-europe-west1.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:46.372802973 CET	1.1.1.1	192.168.2.5	0xf022	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:46.372802973 CET	1.1.1.1	192.168.2.5	0xf022	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:46.372802973 CET	1.1.1.1	192.168.2.5	0xf022	No error (0)	adizio.geo.iponweb.net	adizio-stable-europe-west1.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 19:58:46.372802973 CET	1.1.1.1	192.168.2.5	0xf022	No error (0)	adizio-stable-europe-west1.pumpkin.uverse.iponweb.net		35.206.140.87	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	3.86.129.105	80	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 12, 2024 19:57:13.318594933 CET	430	OUT	GET / HTTP/1.1 Host: ebaumsworld.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 12, 2024 19:57:14.445811033 CET	335	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Thu, 12 Dec 2024 18:57:14 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://ebaumsworld.com:443/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 12, 2024 19:57:59.462141037 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 12, 2024 19:58:44.682588100 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	3.86.129.105	80	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 12, 2024 19:57:58.323824883 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49717	3.86.129.105	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:16 UTC	658	OUT	GET / HTTP/1.1 Host: ebaumsworld.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:16 UTC	502	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Apache/2.2.34 (Amazon) Set-Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; path=/; domain=.ebaumsworld.com; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: *.ebaumsworld.com X-UA-Compatible: IE=Edge
2024-12-12 18:57:16 UTC	15882	IN	Data Raw: 37 65 30 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 43 75 73 74 6f 6d 20 45 76 65 6e 74 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 7b 0a 20 20 27 6c 6f 67 67 65 64 49 6e 27 3a 20 22 66 61 6c 73 65 22 2c 0a 20 20 Data Ascii: 7e03<!DOCTYPE html><html lang="en" xmlns:og="http://ogp.me/ns#" xmlns:fb="http://www.facebook.com/2008/fbml"><head>... Google Custom Event --><script> window.dataLayer = window.dataLayer \|\| []; window.dataLayer.push({ 'loggedIn': "false",
2024-12-12 18:57:17 UTC	16384	IN	Data Raw: 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 63 61 70 69 74 61 6c 69 7a 65 7d 2e 6a 71 43 6f 6e 74 65 6e 74 20 2e 70 61 67 65 73 43 6f 6e 74 61 69 6e 65 72 2c 2e 6a 71 53 74 61 74 69 63 43 6f 6e 74 65 6e 74 20 2e 70 61 67 65 73 43 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 39 70 78 7d 2e 6a 71 43 6f 6e 74 65 6e 74 20 2e 70 61 67 65 73 43 6f 6e 74 61 69 6e 65 72 20 68 31 2c 2e 6a 71 53 74 61 74 69 63 43 6f 6e 74 65 6e 74 20 2e 70 61 67 65 73 43 6f 6e 74 61 69 6e 65 72 20 68 31 7b 6d 61 72 67 69 6e 3a 30 20 2d 39 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 7d 2e 6a 71 6d 43 6c 6f 73 65 7b 77 69 64 74 68 3a 33 36 70 78 3b 68 65 69 Data Ascii: ;font-size:22px;line-height:22px;text-transform:capitalize}.jqContent .pagesContainer,.jqStaticContent .pagesContainer{padding:0 9px}.jqContent .pagesContainer h1,.jqStaticContent .pagesContainer h1{margin:0 -9px;margin-bottom:9px}.jqmClose{width:36px;hei
2024-12-12 18:57:17 UTC	16384	IN	Data Raw: 0a 34 31 66 64 0d 0a 6e 64 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 75 6e 73 65 74 7d 7d 6e 61 76 3e 75 6c 3e 6c 69 20 2e 73 69 67 6e 49 6e 2c 6e 61 76 3e 75 6c 3e 6c 69 20 2e 73 69 67 6e 55 70 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 33 39 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 35 33 36 34 38 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 6e 61 76 3e 75 6c 3e 6c 69 20 2e 73 69 67 6e 55 70 7b 68 65 69 67 68 74 3a 34 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 7d 40 Data Ascii: 41fdnd:0;background-color:unset}}nav>ul>li .signIn,nav>ul>li .signUp{width:100%;height:39px;padding:0;float:left;background:0;border-bottom:1px solid #353648;padding-top:10px;box-sizing:border-box}nav>ul>li .signUp{height:40px;color:#fff;border-top:0}@
2024-12-12 18:57:17 UTC	518	IN	Data Raw: 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 76 69 72 61 6c 44 65 74 61 69 6c 73 20 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 37 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 76 69 72 61 6c 44 65 74 61 69 6c 73 20 68 32 20 61 20 73 70 61 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 69 72 61 20 53 61 6e 73 27 2c 27 47 65 6f 72 67 69 61 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 31 31 31 32 32 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 76 69 72 61 6c 44 65 74 Data Ascii: dth:100%;padding:10px;box-sizing:border-box;overflow:hidden}.viralDetails header{margin-bottom:7px;overflow:hidden}.viralDetails h2 a span{font-family:'Fira Sans','Georgia',sans-serif;font-weight:400;color:#111223;font-size:20px;line-height:24px}.viralDet
2024-12-12 18:57:17 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 31 32 32 33 7d 2e 76 69 72 61 6c 44 65 74 61 69 6c 73 20 2e 76 69 65 77 43 6f 75 6e 74 7b 63 6f 6c 6f 72 3a 23 31 31 31 32 32 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 78 7d 2e 76 69 72 61 6c 44 65 74 61 69 6c 73 20 2e 76 69 65 77 4c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 37 36 38 37 37 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 7d 2e 62 61 6e 61 6e 61 53 75 72 70 72 69 73 65 7b 77 69 64 74 68 3a 33 30 30 70 78 3b 68 65 69 67 68 74 3a 32 39 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 2f 69 6d 67 Data Ascii: 80001223}.viralDetails .viewCount{color:#111223;font-size:14px;line-height:14px}.viralDetails .viewLabel{color:#676877;font-size:12px;line-height:12px}.bananaSurprise{width:300px;height:290px;display:block;background:url('https://cdn.ebaumsworld.com/img
2024-12-12 18:57:17 UTC	16384	IN	Data Raw: 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 36 37 36 38 37 37 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 6f 6f 74 65 72 4c 69 6e 6b 73 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 32 70 78 7d 2e 66 6f 6f 74 65 72 4c 69 6e 6b 73 20 75 6c 7b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 6f 6f 74 65 72 4c 69 6e 6b 73 20 6c 69 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 32 70 78 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b Data Ascii: t:400;color:#676877;font-size:12px;text-align:center}.footerLinks{width:100%;height:auto;margin-bottom:22px}.footerLinks ul{width:auto;margin:auto;display:inline-block;text-align:center}.footerLinks li{float:left;margin-right:32px}@media(max-width:768px){
2024-12-12 18:57:17 UTC	8	IN	Data Raw: 61 63 6b 67 72 6f 0d 0a Data Ascii: ackgro
2024-12-12 18:57:17 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 75 6e 64 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 2f 69 6d 67 2f 64 65 73 6b 74 6f 70 2f 63 6f 6e 74 65 73 74 57 69 6e 6e 65 72 49 63 6f 6e 73 2e 70 6e 67 27 29 20 32 30 70 78 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 6c 69 73 74 69 6e 67 4f 76 65 72 6c 61 79 20 61 2e 77 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 30 20 38 70 78 20 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 2f 69 6d 67 2f 64 65 73 6b 74 6f 70 2f 63 6f 6e 74 65 73 74 57 69 6e 6e 65 72 49 63 6f Data Ascii: 8000und:url('https://cdn.ebaumsworld.com/img/desktop/contestWinnerIcons.png') 20px 5px no-repeat;color:#fff;text-transform:uppercase}.listingOverlay a.winner{padding:8px 0 8px 50px;background:url('https://cdn.ebaumsworld.com/img/desktop/contestWinnerIco
2024-12-12 18:57:17 UTC	16384	IN	Data Raw: 52 6f 6c 6c 20 2e 74 68 75 6d 62 6e 61 69 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 31 32 32 33 7d 2e 67 61 6c 6c 65 72 79 50 6f 73 74 52 6f 6c 6c 20 2e 74 68 75 6d 62 6e 61 69 6c 20 61 2c 2e 67 61 6c 6c 65 72 79 50 6f 73 74 52 6f 6c 6c 20 2e 74 68 75 6d 62 6e 61 69 6c 20 69 6d 67 7b 77 69 64 74 68 3a 32 34 34 70 78 3b 68 65 69 67 68 74 3a 31 36 35 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 67 61 6c 6c 65 72 79 50 6f 73 74 52 6f 6c 6c 20 2e 74 69 74 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 38 35 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a Data Ascii: Roll .thumbnail{background-color:#111223}.galleryPostRoll .thumbnail a,.galleryPostRoll .thumbnail img{width:244px;height:165px;display:block}.galleryPostRoll .title{width:100%;height:85px;padding:8px 12px;margin-bottom:12px;box-sizing:border-box;display:
2024-12-12 18:57:17 UTC	8	IN	Data Raw: 65 74 61 69 6c 73 0d 0a Data Ascii: etails

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49723	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:19 UTC	647	OUT	GET /img/desktop/mainLogo.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:20 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: iogEV4gzG2k1GJkL30T/AK95R0zsdENDVUrK9B21Z7dZSuk+KkUoc5YDkDFxZ0MsfhLfiIAUjLI= x-amz-request-id: WVHYQ0JMTB3HDFNM Content-Type: image/png Server: AmazonS3 X-LLID: a174fe30c40949e1cf0605cfd86ea2bb Age: 24471244 Date: Thu, 12 Dec 2024 18:57:20 GMT Last-Modified: Wed, 02 Aug 2023 20:44:34 GMT Content-Length: 19904 Connection: close
2024-12-12 18:57:20 UTC	6839	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 91 00 00 00 41 08 06 00 00 00 d1 e6 46 0c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRAFtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-12-12 18:57:20 UTC	13065	IN	Data Raw: 08 25 0e 72 bb 81 4e 17 78 b5 b6 b5 76 81 3a 2e c5 8d c1 71 e2 a6 20 13 01 e8 8f 8e 3d 65 52 bf 1d db b7 b4 3a 0b 76 d1 25 df 3c 17 8c 80 5a ea 98 13 39 ea ba 40 17 47 28 54 40 ba 3a db 68 9c 0d ce e5 ed bc a9 3e f3 2a 0c 97 8a 01 1c e8 49 d1 fd b6 3e 9b 84 81 61 21 17 c3 a5 00 46 c4 00 33 19 5f 90 da c3 e7 11 d1 49 f9 57 b7 dc fa f3 91 e3 c6 9f 72 e7 b0 e1 a3 de 5b f6 c6 a2 f6 ed db 37 6f 83 03 e7 57 d4 d0 70 7c d6 4f 7e 7a d7 58 9f df 47 83 e5 b6 db 05 2c 40 90 4c ba a6 17 b0 e0 6d 8e 11 75 d6 c1 47 e2 47 eb 56 a9 83 06 0e fb 67 dd d4 29 97 a3 6e 56 60 43 d0 3a 40 29 50 37 75 5a 31 88 bd 11 eb d6 bd df 78 e8 e0 fe f6 aa ea fe be e9 d3 4e 2b 59 70 c1 85 63 80 3a fd dd d4 d4 0f c3 6f 25 92 4a a6 8d 27 9f 7c b4 9e e9 79 29 3f a8 8b 1c 8e 03 1a 7b ca 84 f2 Data Ascii: %rNxv:.q =eR:v%<Z9@G(T@:h>*I>a!F3_IWr[7oWp\|O~zXG,@LmuGGVg)nV`C:@)P7uZ1xN+Ypc:o%J'\|y)?{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49726	3.86.129.105	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:21 UTC	638	OUT	GET /img/presstart.gif HTTP/1.1 Host: ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:21 UTC	402	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:21 GMT Content-Type: image/gif Content-Length: 12501 Connection: close Server: Apache/2.2.34 (Amazon) Last-Modified: Wed, 11 Dec 2024 20:11:49 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Fri, 12 Dec 2025 18:57:21 GMT Access-Control-Allow-Origin: .ebaumsworld.com X-UA-Compatible: IE=Edge Access-Control-Allow-Origin:
2024-12-12 18:57:21 UTC	12501	IN	Data Raw: 47 49 46 38 39 61 d0 02 5a 00 e6 7f 00 33 93 ff 6c 6d 20 6e a7 ff 17 1a 36 d6 d5 26 ff fe 19 13 16 2a 24 2c 6d ff fe 23 3d 83 eb 27 2f 72 55 a5 ff 15 18 30 1f 24 51 16 1a 34 16 19 33 49 8a ea 20 26 55 22 28 5c 1a 1f 42 ff fe 16 18 1c 3b 14 17 2e 19 1d 3c 2b 35 91 2f 3a a3 46 9d ff 58 91 ea 1c 20 47 29 33 84 21 26 5a 2d 37 97 2c 8f ff 1c 21 48 ff fe 1d 15 83 ff 25 2d 75 1b 20 44 1a 1e 40 1e 23 4d 17 1b 38 23 8a ff d9 e7 ff 49 74 d5 26 2e 78 3a 55 be 3c 6b d3 27 30 7c 3b 97 ff 23 29 65 21 28 61 1d 22 4b d5 d4 1d 2c 36 94 2a 34 8f d5 d4 1a ae cb ff 14 6e d5 e0 eb ff 11 1d 37 6d 6e 24 15 79 eb 24 2a 60 ff fe 29 13 49 8d 1e 24 4f 6e 6f 28 1a 1f 45 54 8f ea 14 5a af 1d 21 49 6f 70 2c 2d 38 99 12 14 25 12 14 26 20 27 5f ff fe 15 12 3b 71 13 15 28 13 15 29 14 17 Data Ascii: GIF89aZ3lm n6&$,m#='/rU0$Q43I &U"(\B;.<+5/:FX G)3!&Z-7,!H%-u D@#M8#It&.x:U<k'0\|;#)e!(a"K,64n7mn$y$*`)I$Ono(ETZ!Iop,-8%& '_;q()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49727	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:21 UTC	413	OUT	GET /img/desktop/mainLogo.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:22 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: iogEV4gzG2k1GJkL30T/AK95R0zsdENDVUrK9B21Z7dZSuk+KkUoc5YDkDFxZ0MsfhLfiIAUjLI= x-amz-request-id: WVHYQ0JMTB3HDFNM Content-Type: image/png Server: AmazonS3 X-LLID: 642243503a206e17cf84653198e8af29 Age: 24471246 Date: Thu, 12 Dec 2024 18:57:22 GMT Last-Modified: Wed, 02 Aug 2023 20:44:34 GMT Content-Length: 19904 Connection: close
2024-12-12 18:57:22 UTC	14079	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 91 00 00 00 41 08 06 00 00 00 d1 e6 46 0c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRAFtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-12-12 18:57:22 UTC	5825	IN	Data Raw: 15 cd 4c 24 33 e5 89 e6 d6 00 59 b5 ba 03 96 d2 43 fc c5 01 ba fc 7c 65 21 e1 ca 86 51 8c 87 3e 6e 13 38 88 f7 8a f4 fe 16 a6 23 21 0c 90 54 50 2d 2a 39 d6 90 22 0f ff 79 7b 73 5b b7 d1 e0 f2 4e 27 98 95 e3 4e 2f e9 74 02 a7 e1 50 48 45 1a 14 00 47 60 f4 24 ab 58 54 95 49 a0 16 7c 5e 99 ba 24 a2 e1 a8 38 67 f6 8c 8a 69 d3 a6 54 d7 d6 f6 f3 01 83 d1 76 12 00 96 c1 8a 93 6c 7f 8c 41 a8 97 3b 1c f4 90 47 1e fe 73 4b 5b 6b 53 fa 24 cf b3 95 5f 8a ed ca 82 e1 be 9a 54 42 2f 0f 67 f5 81 af 58 9d a5 ad e6 78 92 97 b2 82 73 6f ee e8 68 3f 9c 4d 67 35 3b 29 d4 b6 dc ec b6 89 4c 30 80 28 f6 fa 00 0d 7a 44 3f c3 43 a1 7c 90 2f a2 67 f9 b7 0f 3f 61 dd f9 e3 ef 52 95 76 fc f8 91 d8 8b 2f be f0 c6 cf ef fa d1 77 b2 54 b7 db 7e 68 bc 30 82 e4 da fe 95 9e 1f dd 76 e7 8c Data Ascii: L$3YC\|e!Q>n8#!TP-*9"y{s[N'N/tPHEG`$XTI\|^$8giTvlA;GsK[kS$_TB/gXxsoh?Mg5;)L0(zD?C\|/g?aRv/wT~h0v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49734	3.86.129.105	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:22 UTC	402	OUT	GET /img/presstart.gif HTTP/1.1 Host: ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:23 UTC	402	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:23 GMT Content-Type: image/gif Content-Length: 12501 Connection: close Server: Apache/2.2.34 (Amazon) Last-Modified: Wed, 11 Dec 2024 20:11:49 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Fri, 12 Dec 2025 18:57:23 GMT Access-Control-Allow-Origin: .ebaumsworld.com X-UA-Compatible: IE=Edge Access-Control-Allow-Origin:
2024-12-12 18:57:23 UTC	12501	IN	Data Raw: 47 49 46 38 39 61 d0 02 5a 00 e6 7f 00 33 93 ff 6c 6d 20 6e a7 ff 17 1a 36 d6 d5 26 ff fe 19 13 16 2a 24 2c 6d ff fe 23 3d 83 eb 27 2f 72 55 a5 ff 15 18 30 1f 24 51 16 1a 34 16 19 33 49 8a ea 20 26 55 22 28 5c 1a 1f 42 ff fe 16 18 1c 3b 14 17 2e 19 1d 3c 2b 35 91 2f 3a a3 46 9d ff 58 91 ea 1c 20 47 29 33 84 21 26 5a 2d 37 97 2c 8f ff 1c 21 48 ff fe 1d 15 83 ff 25 2d 75 1b 20 44 1a 1e 40 1e 23 4d 17 1b 38 23 8a ff d9 e7 ff 49 74 d5 26 2e 78 3a 55 be 3c 6b d3 27 30 7c 3b 97 ff 23 29 65 21 28 61 1d 22 4b d5 d4 1d 2c 36 94 2a 34 8f d5 d4 1a ae cb ff 14 6e d5 e0 eb ff 11 1d 37 6d 6e 24 15 79 eb 24 2a 60 ff fe 29 13 49 8d 1e 24 4f 6e 6f 28 1a 1f 45 54 8f ea 14 5a af 1d 21 49 6f 70 2c 2d 38 99 12 14 25 12 14 26 20 27 5f ff fe 15 12 3b 71 13 15 28 13 15 29 14 17 Data Ascii: GIF89aZ3lm n6&$,m#='/rU0$Q43I &U"(\B;.<+5/:FX G)3!&Z-7,!H%-u D@#M8#It&.x:U<k'0\|;#)e!(a"K,64n7mn$y$*`)I$Ono(ETZ!Iop,-8%& '_;q()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49729	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:23 UTC	650	OUT	GET /img/desktop/navGradient.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:23 UTC	368	IN	HTTP/1.1 200 OK x-amz-id-2: R7Bay6kwCGRPJrAsANGSxOgpE1d5W2LupuSRvnCcFLDQjEWqzlqesR+zegKbr7uZL1fiaiAbzGY= x-amz-request-id: WVHGDD4SSPP4Y22S Content-Type: image/png Server: AmazonS3 X-LLID: 1d5ae0e460439389db26f885511ff1ed Age: 24471247 Date: Thu, 12 Dec 2024 18:57:23 GMT Last-Modified: Wed, 02 Aug 2023 20:44:38 GMT Content-Length: 993 Connection: close
2024-12-12 18:57:23 UTC	993	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 3d 08 06 00 00 00 6c ad 03 5f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR=l_tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49730	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:23 UTC	647	OUT	GET /img/desktop/navIcons.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:23 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: gt99XjUVc7uiWQvD6l7AwXJ5mv7ae8LO1etH4jJ2XL1mrHpxDr9IXKdPQsY+IX3J7ir44f1Tbls= x-amz-request-id: WVHXMAT0BY6V5KFM Content-Type: image/png Server: AmazonS3 X-LLID: 4013aaf3af88dcc702952a22e13d3f9a Age: 24471247 Date: Thu, 12 Dec 2024 18:57:23 GMT Last-Modified: Wed, 02 Aug 2023 20:44:38 GMT Content-Length: 15639 Connection: close
2024-12-12 18:57:23 UTC	14079	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 02 f8 08 06 00 00 00 09 5f b5 6b 00 00 20 00 49 44 41 54 78 9c ed 9d 77 d8 1c 55 f5 c7 3f bb 79 37 95 d0 12 30 90 84 04 42 28 61 40 8a 12 8a 40 04 69 52 44 40 41 14 05 44 40 10 45 40 83 74 45 11 44 41 44 30 20 cd 82 80 80 20 45 7e 48 55 40 9a 22 90 a5 07 08 a1 25 84 9a 9e 4c c8 fb fb e3 3b f7 bd 77 66 ef b4 dd 7d 23 3e ee f7 79 f6 d9 dd d9 d9 d9 b3 77 6e 39 e7 7c cf 39 b7 d2 3d b9 8b 26 d1 0f f8 38 b0 21 30 16 58 05 18 0c 54 80 d9 c0 74 e0 79 e0 71 e0 61 60 be f7 2a 41 98 f9 23 cd 48 b7 13 f0 79 60 07 60 78 c1 ef 4c 07 6e 03 ae 01 6e 29 f3 63 95 12 2d b8 2f f0 1d 60 63 cf 67 ef 01 33 80 77 81 6e 60 05 e0 23 d1 73 12 93 81 b3 80 df 01 b9 2d 58 44 c0 b5 80 f3 81 4f 39 c7 96 a0 96 b8 0d 78 08 Data Ascii: PNGIHDR(_k IDATxwU?y70B(a@@iRD@AD@E@tEDAD0 E~HU@"%L;wf}#>ywn9\|9=&8!0XTtyqa`*A#Hy``xLnn)c-/`cg3wn`#s-XDO9x
2024-12-12 18:57:23 UTC	1560	IN	Data Raw: 2d e6 16 48 5c 01 99 97 ad 96 c5 6f 4b dd 2d 33 a1 9a c4 97 a3 d0 40 38 c5 7f 7a 29 b4 a5 ee d6 59 28 e2 dc 2c 91 c6 35 b2 32 f2 3e ac da 94 68 2d ee 4f e2 e2 26 c4 36 3d 87 a6 17 b3 35 c8 0d 28 5c fe 05 e4 30 2a 8b 96 f6 27 49 c2 cc 6b 9f 44 0b fc db a8 6f 1e 13 fd 48 33 7d b1 e9 fd 49 40 8a c4 df 69 dc 58 7e 3f e7 f9 97 68 54 df 80 88 c6 15 90 15 37 95 3c bb a6 c5 fd 49 8c 6f 6f 2b 34 e9 fe d6 f9 6c 1f 94 6b e2 ee 97 63 1c 92 7f 43 8d 30 8a fc 58 d6 96 f6 27 39 20 7a de 1c cd 77 fb a3 5b 6a 5a 3f 99 ba f6 2f d4 9a a6 1f ee 46 9c 09 f5 a1 a5 fd 49 cc 74 f2 20 76 7b 90 1a e2 83 af 46 de 87 24 8e 44 23 72 79 e4 b0 4c 47 1b 78 92 4d 91 b7 35 d9 f1 47 62 e3 6e ca a3 c3 93 b4 86 09 74 78 92 f2 e8 f0 24 06 1d 9e a4 ac 80 06 1d 9e c4 45 b3 d2 0d 45 4b d8 16 c8 Data Ascii: -H\oK-3@8z)Y(,52>h-O&6=5(\0*'IkDoH3}I@iX~?hT7<Ioo+4lkcC0X'9 zw[jZ?/FIt v{F$D#ryLGxM5Gbntx$EEK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49732	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:23 UTC	653	OUT	GET /img/desktop/mediaFeedIcons.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:23 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: BkK1PWN9lgPxsO8OFWpV016kglbE0asDUSSBPjSe84xSS08UP8+mWPfVj4RDN3u7vjTvIlEG5tc= x-amz-request-id: YVRS0CKBMM6PXK5G Content-Type: image/png Server: AmazonS3 X-LLID: 7f24bb2a2b589ca17c442edada1c3aea Age: 24471241 Date: Thu, 12 Dec 2024 18:57:23 GMT Last-Modified: Wed, 02 Aug 2023 20:44:34 GMT Content-Length: 7884 Connection: close
2024-12-12 18:57:23 UTC	7884	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 01 68 08 06 00 00 00 4d 22 3b 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRhM";tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49731	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:23 UTC	678	OUT	GET /thumbs/2024/11/11/033346/87633082/inventionsbig_(1).jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:23 UTC	371	IN	HTTP/1.1 200 OK x-amz-id-2: Y9MM1ezQxtkE0SxdQb5zTE9skeh+m5lvWtYuCv8kXtjO/ugCGOZwBpn4WU5Vo5KWJYS7R4T7uBo= x-amz-request-id: JC8PDFD95PTKRD3H Content-Type: image/jpeg Server: AmazonS3 Age: 2672617 Date: Thu, 12 Dec 2024 18:57:23 GMT Last-Modified: Mon, 11 Nov 2024 20:33:47 GMT X-LLID: 3fd871f42093bd87e43f96a13a9b906d Content-Length: 107899 Connection: close
2024-12-12 18:57:23 UTC	6838	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 08 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 c6 4c 85 6a a0 60 22 06 92 00 c4 03 20 8c Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwt"4Lj`"
2024-12-12 18:57:24 UTC	13032	IN	Data Raw: 61 db 97 0b a7 0e 7f 4e 87 cb 59 6f b7 36 43 62 d4 78 de b4 0a ae dc eb 5c 30 b9 0d 76 23 ab 92 a9 76 a0 56 a7 2d 7a 89 9e 71 db 9f af 2b 3e 99 78 82 b8 2f 36 f2 fd ed 71 ed 17 4d f2 f4 a3 c5 6a 9d 3d 3e 2c 95 1a cc 6e 5a c3 52 2f 38 c6 5a 38 99 85 e3 db 5b 9c f5 2e cd e5 76 cc c4 2e 81 09 f1 5e 67 eb f0 e8 7c 28 d5 1e df 1f 5b 85 ce 2f 36 a4 73 7f 4e 62 94 9a 73 b9 06 39 c4 53 d6 72 76 31 8e 9c 87 b1 01 d3 b9 d1 83 df 45 f7 e1 e9 f2 f2 fd 15 49 d2 99 8f 6e fc 77 c6 34 3a 71 6a 42 4b bb b8 46 b1 f6 1b 65 5f 93 aa cb cd dc 5f 1f 4c 4e 93 41 d2 ba eb e4 78 09 fa ff 00 af e3 00 08 04 60 04 00 00 00 04 60 00 00 00 12 d2 a2 f7 37 19 d7 9b 6c d8 80 e9 c4 00 00 00 3b 8e 2b 86 b1 60 a9 58 3c ee ba 4d 2b 46 ce 7b 39 de 6f de 7b f4 1b 55 77 75 5c e5 df 3b ad df 33 Data Ascii: aNYo6Cbx\0v#vV-zq+>x/6qMj=>,nZR/8Z8[.v.^g\|([/6sNbs9Srv1EInw4:qjBKFe__LNAx``7l;+`X<M+F{9o{Uwu\;3
2024-12-12 18:57:24 UTC	12346	IN	Data Raw: c3 b6 d8 10 10 36 3c 77 c2 76 1d c6 fb e2 82 7b 60 1b 67 f5 dc 7d a7 07 b6 0d c0 df 3f b3 9d c6 db 6a 7f e3 30 f9 2f 7f 99 3e 52 3b 49 26 6a 47 fd f3 e4 87 61 b2 d9 e5 0d 78 2b c7 a4 5d 82 09 7c ba ea 37 1d ed 48 ae 47 52 bc b1 94 1c b6 df 4d 3f ef a0 39 7b fc cb 19 ef f5 07 b1 fa 1e 0e fd ae 6c d5 bf 76 d4 bf 81 be 51 ee 25 18 3d ce 1f 73 f2 7f 63 2a 9c 3d a4 c6 20 4a ad 9c 41 77 18 a9 ce 36 5c a8 79 57 74 cf 7e 2d 92 f7 00 e2 ed c5 4e 49 f7 ab 05 ed 87 d3 60 64 0b e5 ee 0d f6 ce 8c 9d 21 20 75 dc 65 22 0a 95 c8 36 e9 26 59 99 12 26 df 4d b0 93 c4 63 c4 25 7d 24 fe 55 c6 38 b3 23 1e 23 50 d4 65 ab 21 06 dd ee a9 73 8e db e1 3f 13 ff 00 a0 fe be 07 bf c2 91 da ed 63 9a c9 de f3 ef f2 36 db 03 87 6e 27 09 1c c6 2f dc 76 5d fb e3 14 03 d5 25 9a f8 d7 62 fe Data Ascii: 6<wv{`g}?j0/>R;I&jGax+]\|7HGRM?9{lvQ%=sc*= JAw6\yWt~-NI`d! ue"6&Y&Mc%}$U8##Pe!s?c6n'/v]%b
2024-12-12 18:57:24 UTC	2896	IN	Data Raw: 68 89 13 09 ec 4a 63 0b eb b5 7e 27 5e 84 35 99 5a 04 da fc fa c5 36 69 05 a9 e6 b7 2f 5e 56 a7 76 68 ea aa dc af 2c 71 a9 1e 61 3b e5 67 2d 2e e2 b4 46 59 07 27 8c 2e fc 58 c5 dd 5c de 72 46 12 36 dc ea 35 56 68 1d 71 a2 3b 85 14 29 6a 3e 56 00 90 f8 76 fb 77 95 74 da 10 01 d6 6d 47 4a ab fa 53 f8 8e 66 ed 14 d7 ed cd f7 6e 37 dc 97 c7 9f 6d b2 1a 1a 9d bf d0 fc 2e bd 45 99 6f 08 3c ad 35 b3 0a eb d6 93 d2 e6 c5 7b 32 c8 cb 1c 90 f9 46 8a 2b ba 75 54 84 4c d5 e1 16 ac bc 96 22 a5 4e 57 eb cb ac c9 4f 9f 4e 1d 12 ac 04 f5 65 92 d2 6d 25 a7 47 b3 72 d3 48 d4 7a d0 4e 66 9f 4a d3 e3 ac 67 b5 36 ab 7c dd b4 58 22 73 d8 66 fc 7b 2f 55 86 46 49 c8 b8 ab 82 2b da 33 32 92 60 8a 5f b5 a1 9e 32 70 58 b2 3b 08 dc b4 6a 5a 4b 0e 3b 06 b4 df d1 b0 e4 f7 32 b0 46 05 Data Ascii: hJc~'^5Z6i/^Vvh,qa;g-.FY'.X\rF65Vhq;)j>VvwtmGJSfn7m.Eo<5{2F+uTL"NWONem%GrHzNfJg6\|X"sf{/UFI+32`_2pX;jZK;2F
2024-12-12 18:57:24 UTC	13488	IN	Data Raw: 97 29 56 b1 19 12 cf e1 eb 1b 16 aa e9 2c 12 f1 6d 33 c4 32 d6 fc bb 1f 8c e9 93 46 b2 0b 01 67 88 f1 8a f8 8c 74 6c af db ca 38 eb ec 49 2e 93 12 59 97 55 ad 16 d1 d6 7e b3 86 eb 2d 61 d4 dc 36 fc 5b 60 ad db ab 4a d5 62 a2 28 2d 27 38 79 60 df 18 91 92 d9 31 9e 4b 6e ac 3a ce d6 60 97 75 67 dd 26 65 f6 79 59 cf 73 58 cd 39 60 da 6c 92 41 be 49 5c a6 fb 05 5c ea 05 1b e1 6d c6 7b 65 1e b9 b7 0f 97 81 9e 48 68 1b 17 12 d7 e1 9a 97 9c a1 1d 39 20 a9 24 b0 d1 a6 65 a6 ca b5 6a a3 d0 ea f4 1e 19 5f 1b 61 9c bf eb 7f 84 a4 f0 7d a2 87 d9 a4 52 e7 d2 12 3f 52 b9 67 5e 39 0c 83 60 1b cc c7 21 7a f2 d9 f0 fc eb 2b 8a c9 1f 45 0a 48 d4 23 da 2e 9d e9 79 c2 72 cc a1 6b c1 18 d0 ea 98 28 c7 c8 e3 95 51 b9 89 d5 d4 b0 b5 55 61 98 81 24 2b c5 b8 d2 86 d5 68 1b ce f4 Data Ascii: )V,m32Fgtl8I.YU~-a6[`Jb(-'8y`1Kn:`ug&eyYsX9`lAI\\m{eHh9 $ej_a}R?Rg^9`!z+EH#.yrk(QUa$+h
2024-12-12 18:57:24 UTC	7240	IN	Data Raw: 98 6d 6e 57 95 6a 27 c0 29 30 ee 44 f7 d7 59 46 98 85 04 5a 37 39 a6 55 de 8c 85 a0 08 ed ef 52 2d b7 41 30 08 50 1c 46 ea a8 4f a6 e2 81 97 0d 4c 24 4e a4 54 37 8a 0d 9e 22 d0 9b 55 a2 ee 0a 09 99 09 ae 36 4c ac cb e4 99 67 ea dd 2f 05 05 a6 dc 11 39 ee 6c d4 00 65 75 48 50 da 0b 18 48 9e e5 a3 c5 b5 9c c2 87 a4 7b c1 41 8a e9 38 8a bf f6 5a 21 f7 ca 84 5a d7 b6 c1 04 ce f5 70 7a 2e b0 f7 96 ba 46 b3 19 2d 30 c4 84 24 66 45 04 fb 4b 92 77 e1 97 ee a1 b5 ae 14 2c 30 c8 53 6c b0 06 d0 50 0c 4e d5 aa 4f 81 9a 2f 15 db 69 35 69 4f 21 46 2d ee 5a 4b 4c 8c e4 5b 45 c9 0b cd 37 a6 34 89 00 dd ac 14 02 ec ea 14 18 82 66 e9 7c a4 98 e9 b8 dd 25 e2 68 b2 c1 1a c9 10 27 8a 32 2d 33 6a 90 70 8a 45 38 05 ed 51 7c c7 d4 b3 f4 19 a7 56 d0 92 14 13 59 ae 90 33 57 b4 48 Data Ascii: mnWj')0DYFZ79UR-A0PFOL$NT7"U6Lg/9leuHPH{A8Z!Zpz.F-0$fEKw,0SlPNO/i5iO!F-ZKL[E74f\|%h'2-3jpE8Q\|VY3WH
2024-12-12 18:57:24 UTC	9144	IN	Data Raw: a6 1b 96 8e d9 b1 b3 b7 10 82 e7 28 cf 63 ac da 32 f9 29 b9 c7 e6 9d 68 96 cb 5b e7 b9 36 40 e4 85 96 87 db 99 c5 69 3c 8e 8f 0d d2 24 75 8e e4 cb 10 86 cb 37 cb 17 14 d6 c8 8f 8a 60 0e 19 28 80 5a 33 32 c6 58 12 9c f9 43 20 b8 92 5c 25 87 82 8b 38 63 a6 ee d1 d5 de b1 e6 60 66 9c 43 62 60 b6 c6 68 fe fa cd 75 47 69 73 68 e6 e2 27 f3 4e 14 68 71 3b 90 27 72 84 f0 1a 26 68 68 10 73 89 6d a9 06 e0 81 69 de 8f 77 31 b3 0a 72 26 b3 28 ca ce a0 4a 6b bc 10 aa b1 6a 55 24 d5 30 be 2d 99 30 34 4e f5 04 b0 66 fa 27 82 79 62 69 c0 2f 6a 8b e6 3e a3 9e ac bd 17 69 1a 4b 51 e6 64 af 91 0b fd b2 79 b8 84 28 e0 85 27 cc 3c ec 7d 45 82 9d a2 9d 20 72 56 88 6b 67 b5 44 fb 25 10 66 6e 92 34 dc 51 13 40 b7 2a 5e b4 58 46 5d 72 da f8 a8 e2 1b 86 0c 06 69 91 9f c7 fc ad 0a Data Ascii: (c2)h[6@i<$u7`(Z32XC \%8c`fCb`huGish'Nhq;'r&hhsmiw1r&(JkjU$0-04Nf'ybi/j>iKQdy('<}E rVkgD%fn4Q@*^XF]ri
2024-12-12 18:57:25 UTC	11584	IN	Data Raw: d0 85 de da ed b0 74 50 51 f6 82 4c 11 fc e9 82 6d 3f cf e2 f6 5d 73 2a 59 43 27 3a 52 3f d0 34 1d fe 16 b3 12 a6 03 f8 13 9f 05 2e c2 89 82 b5 9f e9 68 ea 84 a8 42 73 0c 0f 38 88 88 ab c0 81 19 7d b9 83 84 2a 00 8d 90 81 6b 4c 1b cd ee 2d 05 ed 8d 39 c9 1e d3 48 32 ef 8c f5 af 00 9f 1d 91 55 b9 c6 8b 08 4c b8 85 43 63 e2 01 02 ae e5 dd 96 06 51 bd e8 2d 0a 52 3e 29 07 17 71 6a 48 4a a2 c2 13 cd 65 dd ab c9 2c ab 2c 41 bc ed c6 73 46 e6 59 ea 89 08 ba 63 dc 0c 4c c0 a7 28 8e 11 e3 1f 02 38 97 2e fc d4 7c 2c bf 2b f6 1e 57 38 19 73 df 32 fc 0c af 71 7d 4b c4 6e a6 08 1a 87 37 e3 12 e1 2c 80 ee ba 8c d8 89 66 54 e1 57 2e d8 77 58 43 12 67 31 21 97 6a 63 a4 24 a3 be 06 b3 b0 65 26 a5 42 83 81 2b 47 b0 29 4d f1 86 d9 ae 58 f9 36 83 ac cb c8 65 1e 0a 32 ce 53 Data Ascii: tPQLm?]sYC':R?4.hBs8}kL-9H2ULCcQ-R>)qjHJe,,AsFYcL(8.\|,+W8s2q}Kn7,fTW.wXCg1!jc$e&B+G)MX6e2S
2024-12-12 18:57:25 UTC	16384	IN	Data Raw: cd 18 1c 42 d0 9f 98 2c 46 ea 8b 5b a8 dd b4 42 1d 34 31 88 95 71 40 16 90 50 bb f7 92 2b f7 b8 97 8b 62 80 96 d0 40 56 dc 34 39 63 07 f2 5a d5 72 a2 67 8f d7 49 70 49 c5 6c 20 4b b1 28 b7 a5 e1 82 1a 38 e7 d0 22 ea 33 18 bf 43 e2 56 17 33 28 85 03 de eb c1 36 bf 64 2f b4 02 bb 8b bf cd 92 e7 14 d6 7f db 22 df a2 95 dc 85 d4 07 4a 21 50 b1 d2 1a 65 42 5e 8d 53 0c 5f c8 50 1c 1c f2 41 11 50 14 d6 1d 24 46 90 19 36 97 93 dc b9 e2 9a c3 43 e5 02 c2 a0 a1 67 22 0e 39 aa db 72 b0 1a c8 9a 50 1b 21 79 b6 ae bd 9d 16 38 2b 8d 24 5c 40 a2 ee 36 df 8c 02 b8 81 a1 4f 64 31 ca 4a b2 a3 09 7d 91 0c c5 09 62 19 ed 00 d4 af b9 a8 51 6b 6f 36 f3 31 76 34 da 1e 7d 94 17 a3 32 85 ba 00 da 1b 70 d6 08 8e b9 40 61 20 e6 e2 42 a2 65 6e 00 aa 75 0c a3 46 82 7e b0 b1 b5 9b 85 Data Ascii: B,F[B41q@P+b@V49cZrgIpIl K(8"3CV3(6d/"J!PeB^S_PAP$F6Cg"9rP!y8+$\@6Od1J}bQko61v4}2p@a BenuF~
2024-12-12 18:57:25 UTC	4800	IN	Data Raw: 31 71 e5 69 7a 99 ea e3 b2 54 3b bb 22 16 9a 94 b8 cc a2 b0 42 2a bf df 21 57 f9 48 5a 7f 94 94 86 34 21 2b 79 41 87 ff 00 79 28 f6 fb 22 a1 20 c9 ac 24 a7 b1 a9 7e 70 7a 86 34 69 85 8b d6 f1 1e bb 21 28 e2 92 b6 03 3f 10 d2 e5 0a c5 65 cb 96 5c ab 13 2d 22 ab 3a e5 bd b3 4a 34 cc 10 64 d1 1f b4 71 12 15 43 c5 4b 88 5d 2a 00 50 06 b6 4b 3a b6 cb ac 09 62 08 51 b2 6d e6 37 61 2f 56 08 1c 18 40 dc 05 cc 94 6a 59 11 60 2d e5 cc 5c 47 2b 83 72 c1 41 6f f1 e7 cf f4 0f c3 88 1e 57 89 c7 e6 3a f2 68 b8 e2 c2 6d 24 66 15 83 00 d2 f0 63 f9 be 0d 78 67 10 f0 9e 48 f8 7f 12 3b 97 98 c3 c8 64 9f ff c4 00 39 11 00 02 02 01 03 02 03 06 06 01 02 06 03 01 00 00 01 02 00 11 03 12 21 31 04 41 13 32 51 10 20 22 30 61 71 05 14 33 42 52 81 40 23 a1 15 24 50 72 91 b1 34 53 62 Data Ascii: 1qizT;"B!WHZ4!+yAy(" $~pz4i!(?e\-":J4dqCK]PK:bQm7a/V@jY`-\G+rAoW:hm$fcxgH;d9!1A2Q "0aq3BR@#$Pr4Sb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49737	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:23 UTC	677	OUT	GET /thumbs/2024/11/11/045014/87633215/inventions-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:23 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: 54kcWOPLDVTMogGsTsy/XainnMlKKoGK+/THVjMIUzGF+9baLJj45HuofgOmDkASpYIy3mE85oo= x-amz-request-id: BRV21RJ979ZD7TM1 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 41b8e23a69d378ce96b7d154d4ec3e3c Age: 2668029 Date: Thu, 12 Dec 2024 18:57:23 GMT Last-Modified: Mon, 11 Nov 2024 21:50:15 GMT Content-Length: 43618 Connection: close
2024-12-12 18:57:23 UTC	14079	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 0a 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RD
2024-12-12 18:57:23 UTC	16384	IN	Data Raw: 06 f7 fe 41 da a5 bf dc 07 17 2f f8 ce 7e a9 c4 d7 4b fd e3 b9 ed 9e dc bb 1c 7d 13 36 6e 6c cc f6 ff 00 27 c0 b6 ad 9f c0 a6 df e5 38 b8 51 81 da be 2e b5 06 7b fb 4f 6f 95 3f a9 44 df 3e 27 1e df e5 7f bb 8d fd a5 56 ff 00 29 ca f6 a2 fb 40 ee 62 f6 ec 5d aa 6b 0d 62 7e d3 8f ee 1d 83 cc b5 dd 6c 67 7f e4 3d d5 f6 ad 51 56 5e fb bc ba ea b6 8b c8 0c b8 3b 5b 57 22 c7 99 35 59 dc f6 3f 43 b4 b7 6a b1 57 a6 dd 3b 41 e4 1f 7f dc d7 f5 47 c0 55 de f7 1c 2c d7 90 1e bb b7 ed ab 83 1a a2 69 1a 29 f4 e9 c5 1e 4b 16 5c b6 8e ab 32 fe a7 cc 0f 50 f3 e2 e2 d0 bf dc 61 fd e4 79 a9 19 01 e8 ff 00 bd c0 b8 8b 6f 71 c1 cc f3 e8 64 06 ee f3 ba 59 da 55 f9 51 9f 72 b4 3a 01 86 42 a1 90 0c 87 4c 54 14 b5 01 d0 50 10 64 06 1b 61 50 c8 02 82 80 82 80 60 8a 40 18 88 08 32 Data Ascii: A/~K}6nl'8Q.{Oo?D>'V)@b]kb~lg=QV^;[W"5Y?CjW;AGU,i)K\2PayoqdYUQr:BLTPdaP`@2
2024-12-12 18:57:24 UTC	13155	IN	Data Raw: 01 90 81 00 6c 12 10 0d de d7 fd 57 fc 2f f1 46 9f 71 fd 3f 1f c8 cd ed 7f d5 7f c2 ff 00 14 69 f7 1f d1 f1 fc 80 c0 88 48 e6 c1 aa d4 0a d2 d7 50 31 de e2 5d 7a 40 e7 77 8f d2 79 dc f6 93 bd df bd 0f 3f 97 70 29 37 fb 3e 5f a5 de 62 b7 8c 18 07 c7 7f a7 7a dd 7e 96 98 1f 41 c9 37 bb b4 74 d9 da 57 83 ae cc d5 de e4 af d0 5d c3 d2 37 ff 00 5e 67 2b 0b 76 b5 eb 65 d2 93 ab ac be 68 ab 37 78 f3 61 c9 da 71 eb ae dc 9e ac 0e cf b7 e3 d1 e4 b6 f6 7d 4c e8 24 64 ec dc 51 23 60 10 81 20 00 81 00 00 c9 dd 62 d5 5d 70 dc d8 26 4a f5 26 80 e4 b9 6d 59 46 92 59 47 66 e6 cb 58 12 b4 78 ed 67 c8 0b aa b6 4d 7c b1 16 40 3f 6b 5f a9 9d 2e 14 5d 4f cd ec 36 6c b5 cb 6b 5e 74 5a 07 b1 b4 d7 3e 5d 7e 6e 95 ff 00 a5 14 2f 5b 58 7f 7a c9 7c 37 03 76 37 fd be 0e bb 69 6b 7d Data Ascii: lW/Fq?iHP1]z@wy?p)7>_bz~A7tW]7^g+veh7xaq}L$dQ#` b]p&J&mYFYGfXxgM\|@?k_.]O6lk^tZ>]~n/[Xz\|7v7ik}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49738	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:23 UTC	671	OUT	GET /thumbs/2024/11/11/040330/87633175/n11r-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:23 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: JH1BBzysT7K4MPxWqSAL8JXKSnBE7wPXzW+lkaEJ+mWiXk6J3bJBbgggTlgQOualQMUeR6Vzdyo= x-amz-request-id: QRR76MBX7493N34A Content-Type: image/jpeg Server: AmazonS3 X-LLID: 3b03a4a4e557ad5e1730caec017a9489 Age: 2670833 Date: Thu, 12 Dec 2024 18:57:23 GMT Last-Modified: Mon, 11 Nov 2024 21:03:31 GMT Content-Length: 43317 Connection: close
2024-12-12 18:57:23 UTC	11183	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 0a 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RD
2024-12-12 18:57:23 UTC	16384	IN	Data Raw: bd ea ff 00 d6 e7 fc 6c 3f 5b 9f f1 b2 80 81 e3 af b1 e7 b7 fb 55 ff 00 ad cf f8 d8 ff 00 5b 9f f1 b2 88 08 1e 3a fb 1e 7b 7b d5 df ad cf f8 98 7e b7 3f e2 65 6a 8d 92 f4 6c 31 af b4 5f 2d ef ad 4b f5 b9 ff 00 1b 0f d6 e7 fc 6c 8f a1 61 ac 16 64 c6 be cb 9e 4f 7a 7f ad cf f8 d8 7e b7 3f e3 60 f6 f6 2b b6 2b 2e 43 1a fb 44 b7 92 7a d5 9f ad cf f8 d8 7e b7 3f e3 65 3d 0c 50 6b c7 5f 68 cf 9e fe f5 77 eb 73 fe 36 1f ae cf f8 d9 44 08 78 eb ec 9e 7b 7f b5 68 fd 76 7f c6 c3 f5 d9 ff 00 1b 33 80 f1 9e d0 fd 9b 7f b5 68 fd 76 7f c6 c3 f5 d9 ff 00 1b 33 00 f1 9e d0 fd 9b 7f b5 69 fd 76 7f c6 c3 f5 d9 ff 00 1b 33 88 78 cf 63 f6 6d fe d5 a7 f5 d9 ff 00 1b 0f d7 67 fc 6c cc 03 c7 5f 63 f6 6d fe d5 a7 f5 d9 ff 00 1b 0f d7 67 fc 6c cc 31 e3 3d 97 f6 6d fe d5 a3 f5 d9 Data Ascii: l?[U[:{{~?ejl1_-KladOz~?`++.CDz~?e=Pk_hws6Dx{hv3hv3iv3xcmgl_cmgl1=m
2024-12-12 18:57:23 UTC	9680	IN	Data Raw: ca 9c 96 ac d7 10 a3 91 eb e0 d3 a7 9d 7c bf b5 c9 d6 69 3f e5 ce 6f f8 8d f9 9d 5c 6e bd 2b a9 c1 c9 c9 f0 dd fb 4d d8 72 e2 cb 4e 8b bd 4f 9d 6d 9b db fc be c5 d6 6d c7 ac f4 c2 eb d1 d1 c3 2b 8d 4b af 0b 1a ac cc 14 f9 9f 63 8b 7b be 93 6a fc ef 36 93 4d ee b1 2a c0 d5 97 32 0e ea ba d9 c2 28 79 ad 93 4c 6b 4f c4 75 72 c3 4d b5 60 a2 0a 6b 66 b9 c9 65 6e 9b e2 0c 1c 84 6a 4a c8 87 07 28 22 ce a5 ab 5c c3 16 67 8a dd 55 20 9c f1 0b a4 89 89 7a 13 a3 63 ee 16 5c 51 cf cf f3 03 a5 ba 69 54 d2 32 ef b3 ba 56 17 33 91 13 a7 89 99 c7 af b3 be b6 f7 af 5b b4 df df 3e 17 9e d5 8d 61 1b 36 b9 bd 76 d3 d2 0a b0 6d d6 1c 15 c5 e4 47 61 f0 65 e9 f2 67 1c 6b 65 c3 57 33 69 fc b6 88 6c 47 06 80 80 0a 00 00 08 00 00 28 10 00 40 00 00 79 55 8d df 52 50 aa 3b 5e 14 15 Data Ascii: \|i?o\n+MrNOmm+Kc{j6M*2(yLkOurM`kfenjJ("\gU zc\QiT2V3[>a6vmGaegkeW3ilG(@yURP;^
2024-12-12 18:57:24 UTC	6070	IN	Data Raw: fb ab 53 bc ce 3b 27 ed d5 0d ae 45 bb c8 f1 e1 70 d7 36 6b 5d bf 2f 4d de e3 a5 a4 be 18 28 5b bb 2e 09 2f 60 7e b2 e7 2d f4 bb 5c af ed d1 97 61 5c fb 86 d6 26 a5 69 a9 bb 07 69 ca f2 4e e3 a5 d2 34 4b c4 ad 6e 9d 78 24 87 fa cb 9c e7 0d 89 39 34 8a b3 ed b7 1b 04 f3 75 25 55 c2 03 6f 4d c6 ed 2b a7 5d 7c 4b 1e ea d6 50 d4 89 67 69 e8 b8 0f d3 7d 8f d9 af fc 35 ed bb 7e 75 77 eb 74 ba c6 91 e2 43 2e d3 71 44 ed 14 85 e6 53 fa bb 83 dd dd 96 71 59 e8 bf b7 55 7b 5c f9 b7 b6 8a aa e8 74 71 6c b2 b9 f5 55 78 7c 31 e2 61 5b 97 5f b2 92 25 fa bb 0f d5 b7 a9 39 75 9d d2 7b 1d dd 53 6d d7 4f 33 06 07 b8 de b7 8a 8d 26 b8 b6 6d 7b cb 11 5b 97 5e 09 22 4e 1b 3b 27 ec d4 6d bb 2e 6c 79 17 5b ab a7 de d4 37 98 37 1b 2a 5a f4 b2 ae 35 c2 38 8f f5 97 13 dd 59 a8 6a Data Ascii: S;'Ep6k]/M([./`~-\a\&iiN4Knx$94u%UoM+]\|KPgi}5~uwtC.qDSqYU{\tqlUx\|1a[_%9u{SmO3&m{[^"N;'m.ly[77*Z58Yj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49741	104.18.24.111	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:23 UTC	572	OUT	GET /v2kisuUII5WA-HR5P71C6bUydvMwfMPJVUj8XMXHj3S_hHFVlFTAc9kA HTTP/1.1 Host: memorizematch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:23 UTC	637	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:23 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private, must-revalidate, max-age=21600 etag: W/"7b10a3943467996f25108182a4b0866367a69761063ad8d4377513d0c59da84b" strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding, Accept-Language x-buildname: hoothoot x-buildnumber: 1553448542 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8f0ff09a9b175e72-EWR
2024-12-12 18:57:23 UTC	732	IN	Data Raw: 33 37 39 64 0d 0a 21 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 69 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 6e 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 72 2e 6f 28 6e 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 7d 29 7d 2c Data Ascii: 379d!(function(n){var t={};function r(i){if(t[i])return t[i].exports;var e=t[i]={i:i,l:!1,exports:{}};return n[i].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.m=n,r.c=t,r.d=function(n,t,i){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:i})},
2024-12-12 18:57:23 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 74 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 29 28 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 22 5f 72 65 73 65 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: tion(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s=0)})([function(n,t,r){"use strict";r.r(t),r.d(t,"_reset",(function(){re
2024-12-12 18:57:23 UTC	1369	IN	Data Raw: 31 30 2c 74 6e 3a 30 2c 72 6e 3a 30 2c 65 6e 3a 30 2c 6f 6e 3a 74 72 75 65 2c 75 6e 3a 22 22 2c 61 6e 3a 22 22 2c 63 6e 3a 22 72 22 2c 73 6e 3a 22 74 72 22 2c 64 6e 3a 22 73 22 2c 68 6e 3a 22 74 22 2c 76 6e 3a 22 65 22 2c 6c 6e 3a 22 61 22 2c 6d 6e 3a 31 30 2c 77 6e 3a 22 70 69 6e 67 22 2c 70 6e 3a 22 68 74 74 70 73 3a 2f 2f 65 61 67 65 72 6b 6e 69 67 68 74 2e 63 6f 6d 2f 66 32 38 31 35 62 66 33 33 63 36 64 63 38 2f 33 36 30 32 31 63 66 33 30 36 33 36 31 33 64 31 36 36 34 63 30 65 62 33 36 63 36 62 37 61 33 38 65 61 37 65 66 32 22 2c 67 6e 3a 22 68 74 74 70 73 3a 2f 2f 65 61 67 65 72 6b 6e 69 67 68 74 2e 63 6f 6d 2f 66 39 38 31 35 62 66 33 33 63 36 64 63 38 2f 33 36 30 32 31 63 66 33 30 36 33 36 31 33 64 31 36 36 34 63 30 65 62 33 36 63 36 62 37 61 33 38 Data Ascii: 10,tn:0,rn:0,en:0,on:true,un:"",an:"",cn:"r",sn:"tr",dn:"s",hn:"t",vn:"e",ln:"a",mn:10,wn:"ping",pn:"https://eagerknight.com/f2815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2",gn:"https://eagerknight.com/f9815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38
2024-12-12 18:57:23 UTC	1369	IN	Data Raw: 65 6c 62 3f 31 3a 32 3a 30 7d 2c 72 2e 68 61 73 41 64 42 6c 6f 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 62 6c 7c 7c 74 68 69 73 2e 61 64 62 73 3e 3d 63 2e 59 7d 2c 72 2e 68 61 73 44 69 73 61 62 6c 65 64 41 64 42 6c 6f 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 64 69 73 7c 7c 21 74 68 69 73 2e 66 62 6c 26 26 74 68 69 73 2e 64 69 73 73 3e 3d 63 2e 6e 6e 7d 2c 72 2e 62 6c 6f 63 6b 65 72 46 6c 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 69 64 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 7c 6e 7d 29 2c 30 29 7c 7c 30 7d 2c 72 2e 64 69 73 61 62 6c 65 64 46 6c 61 67 73 3d 66 75 6e 63 Data Ascii: elb?1:2:0},r.hasAdBlocker=function(){return this.fbl\|\|this.adbs>=c.Y},r.hasDisabledAdBlocker=function(){return this.fdis\|\|!this.fbl&&this.diss>=c.nn},r.blockerFlags=function(){return this.bids.reduce((function(n,t){return t\|n}),0)\|\|0},r.disabledFlags=func
2024-12-12 18:57:23 UTC	1369	IN	Data Raw: 65 62 63 61 63 68 65 3d 22 77 65 62 63 61 63 68 65 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 22 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 74 68 69 73 2e 69 4f 53 3d 2d 31 21 3d 3d 67 2e 69 6e 64 65 78 4f 66 28 22 69 50 68 6f 6e 65 22 29 7c 7c 2d 31 21 3d 3d 67 2e 69 6e 64 65 78 4f 66 28 22 69 50 61 64 22 29 29 7d 76 61 72 20 74 2c 72 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 72 2e 69 73 43 68 72 6f 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 72 6f 6d 65 7d 2c 72 2e 69 73 53 61 66 61 72 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 61 66 61 72 69 7d 2c 72 2e 69 73 46 69 72 65 66 6f 78 3d 66 75 6e 63 74 Data Ascii: ebcache="webcache.googleusercontent.com"===window.location.hostname,this.iOS=-1!==g.indexOf("iPhone")\|\|-1!==g.indexOf("iPad"))}var t,r=n.prototype;return r.isChrome=function(){return this.chrome},r.isSafari=function(){return this.safari},r.isFirefox=funct
2024-12-12 18:57:23 UTC	1369	IN	Data Raw: 7c 72 3d 3d 3d 6e 29 74 72 79 7b 6f 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 72 2c 76 61 6c 75 65 3a 79 28 69 29 7d 29 7d 63 61 74 63 68 28 6e 29 7b 7d 74 28 6f 29 7d 29 29 3b 69 66 28 50 26 26 21 69 2e 73 79 6e 63 29 7b 69 66 28 21 69 2e 64 6f 6d 61 69 6e 26 26 6e 75 6c 6c 21 3d 3d 69 2e 64 6f 6d 61 69 6e 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 65 26 26 28 69 2e 64 6f 6d 61 69 6e 3d 65 29 7d 72 65 74 75 72 6e 20 69 2e 64 6f 6d 61 69 6e 26 26 22 2e 22 3d 3d 3d 69 2e 64 6f 6d 61 69 6e 5b 30 5d 26 26 28 69 2e 64 6f 6d 61 69 6e 3d 69 2e 64 6f 6d 61 69 6e 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 2c 21 74 7c 7c 69 2e 6d 61 78 41 67 65 3c 30 3f 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 6f 6d Data Ascii: \|r===n)try{o.push({name:r,value:y(i)})}catch(n){}t(o)}));if(P&&!i.sync){if(!i.domain&&null!==i.domain){var e=window.location.hostname;e&&(i.domain=e)}return i.domain&&"."===i.domain[0]&&(i.domain=i.domain.substring(1)),!t\|\|i.maxAge<0?i.hasOwnProperty("dom
2024-12-12 18:57:23 UTC	1369	IN	Data Raw: 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 72 29 3b 72 65 74 75 72 6e 20 74 26 26 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 26 26 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 5f 28 6e 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 2c 65 3d 5f 28 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 7d 29 29 2c 7b 67 65 74 48 61 73 68 56 61 72 69 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 21 31 3b 72 65 74 75 72 6e 20 43 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 72 65 74 Data Ascii: ).toString().substring(1),r);return t&&f(window.addEventListener)&&window.addEventListener("popstate",(function(){i=_(n.search.substring(1)),e=_(n.hash.substring(1))})),{getHashVariable:function(n){return(function(n,t){var r=!1;return C((function(n,i){ret
2024-12-12 18:57:23 UTC	1369	IN	Data Raw: 6f 6e 20 59 28 6e 29 7b 72 65 74 75 72 6e 20 5a 28 6e 2c 71 2c 4c 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 57 29 72 65 74 75 72 6e 20 5a 28 6e 2c 48 2c 4c 29 3b 74 68 72 6f 77 20 74 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 5b 4e 5d 26 26 28 24 28 4e 2c 6e 75 6c 6c 2c 7b 64 6f 6d 61 69 6e 3a 48 7d 29 2c 7a 5b 4e 5d 3d 21 31 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 6e 28 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 7b 73 6f 75 72 63 65 3a 21 30 2c 6d 65 64 69 75 6d 3a 21 30 2c 6e 61 6d 65 3a 21 30 2c 63 61 6d 70 61 69 67 6e 3a 21 30 2c 63 6f Data Ascii: on Y(n){return Z(n,q,L).catch((function(t){if(W)return Z(n,H,L);throw t})).then((function(){z[N]&&($(N,null,{domain:H}),z[N]=!1)}))}function nn(){var n=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t={source:!0,medium:!0,name:!0,campaign:!0,co
2024-12-12 18:57:23 UTC	1369	IN	Data Raw: 6f 3d 65 2e 63 6f 6e 6e 65 63 74 53 74 61 72 74 2c 75 3d 65 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 61 3d 65 2e 63 6f 6e 6e 65 63 74 45 6e 64 2c 63 3d 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3b 72 65 74 75 72 6e 7b 64 6e 73 3a 75 6e 28 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 2d 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 29 2c 74 72 61 6e 73 66 65 72 53 69 7a 65 3a 75 6e 28 65 2e 74 72 61 6e 73 66 65 72 53 69 7a 65 29 2c 65 6e 63 6f 64 65 64 53 69 7a 65 3a 75 6e 28 65 2e 65 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 64 75 72 61 74 69 6f 6e 3a 75 6e 28 65 2e 64 75 72 61 74 69 6f 6e 29 2c 63 6f 6e 6e 65 63 74 3a 75 6e 28 61 2d 6f 3e 30 26 26 75 2d 6f 29 2c 72 65 71 75 65 73 74 3a 75 6e 28 63 2d 75 29 2c 72 65 73 70 6f 6e Data Ascii: o=e.connectStart,u=e.requestStart,a=e.connectEnd,c=e.responseStart;return{dns:un(e.domainLookupEnd-e.domainLookupStart),transferSize:un(e.transferSize),encodedSize:un(e.encodedBodySize),duration:un(e.duration),connect:un(a-o>0&&u-o),request:un(c-u),respon
2024-12-12 18:57:23 UTC	1369	IN	Data Raw: 29 2c 77 6e 3d 5b 22 6c 69 76 65 22 2c 68 6e 5d 2e 6a 6f 69 6e 28 22 2d 22 29 2c 70 6e 3d 5b 76 6e 2c 68 6e 5d 2e 6a 6f 69 6e 28 22 2d 22 29 2c 67 6e 3d 5b 76 6e 2c 22 6f 70 74 69 6f 6e 73 22 5d 2e 6a 6f 69 6e 28 22 2d 22 29 2c 62 6e 3d 5b 76 6e 2c 22 61 6c 6c 22 2c 22 67 72 6f 75 70 73 22 5d 2e 6a 6f 69 6e 28 22 2d 22 29 3b 66 75 6e 63 74 69 6f 6e 20 79 6e 28 29 7b 72 65 74 75 72 6e 21 21 54 28 6c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 6e 28 29 7b 72 65 74 75 72 6e 21 21 54 28 6d 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 50 6e 28 29 7b 72 65 74 75 72 6e 20 49 28 29 26 26 54 28 77 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 24 6e 28 29 7b 72 65 74 75 72 6e 20 54 28 70 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6e 28 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 5b 5d 2c 69 3d Data Ascii: ),wn=["live",hn].join("-"),pn=[vn,hn].join("-"),gn=[vn,"options"].join("-"),bn=[vn,"all","groups"].join("-");function yn(){return!!T(ln)}function kn(){return!!T(mn)}function Pn(){return I()&&T(wn)}function $n(){return T(pn)}function _n(n){var t=[],r=[],i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49736	18.161.111.43	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:23 UTC	540	OUT	GET /c/hotjar-1657353.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:24 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 12 Dec 2024 18:57:23 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/6a86b37509a032b2df5809cab9d2f2a8 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5e061de75f6666d04b790352c63b08c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P4 X-Amz-Cf-Id: 61k3H8r7E1eLd4cr6NvMxUZUmOnb0WneLGE9GLYeffr4Hp9GQUXJ3w==
2024-12-12 18:57:24 UTC	4097	IN	Data Raw: 66 66 61 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 36 35 37 33 35 33 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 37 2e 39 39 39 39 39 39 39 39 35 37 38 39 31 35 33 65 2d 39 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f Data Ascii: ffawindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1657353,"rec_value":7.999999995789153e-9,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_
2024-12-12 18:57:24 UTC	9046	IN	Data Raw: 32 33 34 65 0d 0a 3d 21 31 2c 6e 3d 22 76 3d 22 2e 63 6f 6e 63 61 74 28 63 2e 76 65 72 73 69 6f 6e 29 2c 72 3d 22 22 2e 63 6f 6e 63 61 74 28 63 2e 6d 65 74 72 69 63 73 55 72 6c 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 26 73 69 74 65 5f 69 64 3d 22 29 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 2e 73 69 74 65 5f 69 64 29 2b 28 6c 2e 69 73 44 65 62 75 67 45 6e 61 62 6c 65 64 3f 22 26 64 65 62 75 67 3d 74 72 75 65 22 3a 22 22 29 2c 69 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3b 69 66 28 22 73 65 6e 64 42 65 61 63 6f 6e 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 29 74 72 79 7b 74 3d 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 2e 62 69 6e 64 28 6e 61 76 69 67 61 74 6f 72 29 28 72 2c 69 Data Ascii: 234e=!1,n="v=".concat(c.version),r="".concat(c.metricsUrl,"?").concat(n,"&site_id=").concat(window.hjSiteSettings.site_id)+(l.isDebugEnabled?"&debug=true":""),i=JSON.stringify(e);if("sendBeacon"in navigator)try{t=navigator.sendBeacon.bind(navigator)(r,i
2024-12-12 18:57:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49744	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	649	OUT	GET /img/desktop/modalClose.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:25 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: hA+t+/mKhWN+LaJoFPPtq+wutSN7MtLuS2UMtWK6txK87VDrCNRCm6QUbybhMufe7FXOJhJaE3E= x-amz-request-id: AT2YT3QBY1RQSWJN Content-Type: image/png Server: AmazonS3 X-LLID: 8f92845095289ce8bc7fd6005c2f558c Age: 24471241 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Wed, 02 Aug 2023 20:44:36 GMT Content-Length: 1247 Connection: close
2024-12-12 18:57:25 UTC	1247	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 0f 08 06 00 00 00 ed 73 4f 2f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRsO/tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49745	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	671	OUT	GET /thumbs/2024/12/10/034340/87645737/line-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:25 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: GRW/pvX63mZO9xbU7zqr0LIcc/t0seYmME7+cGq/i4AJfnG5Rr/FyfQh1xyZs0lrAQ4bRvrq+Ns= x-amz-request-id: A5XVRM6CJX44R1SV Content-Type: image/jpeg Server: AmazonS3 X-LLID: d2aa55047b3ffa61c879d8b9cfc900ad Age: 166424 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Tue, 10 Dec 2024 20:43:41 GMT Content-Length: 304252 Connection: close
2024-12-12 18:57:25 UTC	16014	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-12-12 18:57:25 UTC	16019	IN	Data Raw: f9 5c 9c d6 0d 1c 5d d6 77 06 9f a3 d5 e8 96 92 0b 56 ff 00 23 53 54 4b 45 ae af 4c 1d 52 a0 49 71 c8 b5 a1 6c ac e9 91 ed cd 90 9a 6e 9e 9d 53 3b 2a 46 8b 72 90 ae a2 9b 85 b2 2d 90 86 13 fc 8e b4 3b 2e 6f 93 44 98 41 c6 56 e9 13 c9 be 4c 64 db 2d e6 0e ea 0a ef d0 c3 ce 91 cf 4a 79 fd 59 78 91 27 60 f4 3b c3 d5 89 67 73 96 ff 00 11 3a 9f 29 26 4e b8 ef 37 7a 0a 30 2d d8 08 2b ae d5 7c e6 96 38 fb 2e a6 72 e5 ee 8d 6f 83 d8 7e e7 96 af a8 92 08 dd d3 d6 f1 e4 b1 96 09 8c 55 7f c6 76 2b a7 4d 8a 49 46 c6 ab 13 df 4b 8d 0e 05 37 17 cd df 43 18 03 56 05 27 ea bd 76 79 3d 8d 97 33 a9 e5 47 65 58 70 45 22 6f bc c3 ec 87 cf 7d 1a 97 0c 40 50 5d 6f 22 19 b4 e9 75 c1 50 51 40 14 79 35 49 eb b6 09 36 b1 49 5a a7 c0 a9 93 23 44 a3 22 de a6 4e 75 fb 3e 28 b6 c4 0c Data Ascii: \]wV#STKELRIqlnS;*Fr-;.oDAVLd-JyYx'`;gs:)&N7z0-+\|8.ro~Uv+MIFK7CV'vy=3GeXpE"o}@P]o"uPQ@y5I6IZ#D"Nu>(
2024-12-12 18:57:25 UTC	16384	IN	Data Raw: 67 3c 6f a8 12 e6 76 23 ea ab 99 19 19 f9 e4 73 3f e5 bc 0b 9f c1 f5 4c 5e 83 a9 77 fe e3 e7 7e 6e 86 6e b9 a8 a6 aa 9f aa 61 23 29 41 8b a0 00 21 40 7e 44 a4 32 2b 06 6d da 8d dd ae 5f a1 1a 11 a5 37 37 53 ce 27 11 d4 fa 20 70 dc 43 a6 19 08 ea c9 64 8a aa e3 28 cf d5 25 c9 43 30 4b a4 39 12 63 93 41 42 19 3c 18 27 2b 7c ac a4 63 23 12 b8 18 8b 7b 29 ec 31 7b 2d f7 40 12 86 a5 00 d2 d9 68 20 5a b1 d2 8f b7 73 1d 94 cb 24 ae b1 7f 22 f9 fa f4 3c 90 df 55 c2 50 f8 a9 c8 5a 60 a2 e9 6b 2d 46 ac fb 2d 6b 18 b5 4d af 46 67 47 b6 8a e5 7c a3 ec f7 bf e4 7f 63 45 00 ed dc ba f5 c8 f6 bc 82 fd 4d f8 d2 e7 7c f7 d1 76 07 2d 15 15 99 39 75 d7 6d 57 1f 7f e1 60 cf 41 c8 92 70 f4 24 1f 23 da 84 bd af 9a 88 3b 19 a4 3e 7e d8 b3 c1 7b 54 be 33 a7 66 7d 57 9b af 9f 5c Data Ascii: g<ov#s?L^w~nna#)A!@~D2+m_77S' pCd(%C0K9cAB<'+\|c#{)1{-@h Zs$"<UPZ`k-F-kMFgG\|cEM\|v-9umW`Ap$#;>~{T3f}W\
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: fb 7f ea 07 e8 21 70 80 5c 2e 11 0a 51 fb 48 4e 08 a3 f5 73 54 4d 55 d4 bf 61 f6 9d 33 fb a2 fb 1f d5 23 65 7c 9a ae 35 c1 63 21 31 c5 94 2f 6c 39 bc e4 b1 4d 26 66 49 dd 87 b8 e1 2e a7 39 f0 9a d9 72 98 72 b3 d3 16 47 94 bb 2b de ec ab d8 ea 99 22 f6 db bd 23 1a ec 94 ae 92 09 e4 73 f0 b2 39 55 7f 2a 24 53 0a 8c a7 1f d1 e0 bd b5 ed 27 43 e9 7a 2e 0c 63 83 cf ab 0a 71 45 1f d2 df bc 8c 4d fd aa b9 fd d4 cf ec 07 d7 95 ca 28 a0 87 08 a7 27 2b b7 dd e5 13 cc a3 c4 c4 6b 48 4a 63 bd 33 72 10 21 b1 2f 96 26 37 4a db 34 08 0d 05 86 47 fe cc dc d2 87 62 99 2b dd 5e 97 31 58 63 a0 73 e5 77 27 f5 33 ef c2 e3 84 6e 11 62 1a fe e3 33 b1 7b 4e 67 ef 1f 46 a0 82 08 7d 1b f6 ff 00 d4 0f d0 17 08 05 e8 b8 44 29 47 ed 21 38 7a 14 7e a5 aa 26 85 02 97 ec 3e d3 a6 7f 74 Data Ascii: !p\.QHNsTMUa3#e\|5c!1/l9M&fI.9rrG+"#s9U*$S'Cz.cqEM('+kHJc3r!/&7J4Gb+^1Xcsw'3nb3{NgF}D)G!8z~&>t
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 23 e9 e8 89 47 fd 07 fd 8f d9 cf e0 d8 3c 98 07 ee a3 37 8a 16 8a 8e 77 05 5a eb da af 64 a0 7c 76 7d a9 1e d6 f0 9b 21 09 8e fd bc ab 6f f1 7c 79 36 ba 0c 75 df 68 da c8 17 4b 3e 47 90 fb 3c 99 26 f2 5e e7 d3 ee 9b 51 c4 d0 c4 97 a8 b0 47 89 f0 84 09 f1 c6 33 23 38 41 ab f1 87 8c 83 c5 79 f9 7d 0f da c3 f8 41 fc 96 fd 90 41 0f d4 7e d5 3f bc 22 9b f7 e5 73 f5 91 31 0f ac 87 d4 94 cf b8 41 58 52 9f 56 9f a3 87 a3 63 4d 77 8a a7 78 b4 d5 97 cd af 67 26 ec 00 b2 7f d8 ff 00 a1 47 e9 c2 e5 37 d4 26 a6 8f 47 84 3e ed 55 e3 f2 5e cf a7 ea 1f 4e 78 5e ea f7 57 92 99 c9 cd 4e 6a 8b ef 0f d8 7d 90 72 0f 44 f3 fa 07 ea 23 95 e2 83 7f d1 e5 72 b9 f4 25 0f f4 1c 9e 78 13 bf 85 e5 e4 87 a0 a3 3f 8b a8 3e 29 19 57 1a d7 2b 14 5a d6 c9 4d 9e 2d a5 17 97 b6 39 15 b9 43 Data Ascii: #G<7wZd\|v}!o\|y6uhK>G<&^QG3#8Ay}AA~?"s1AXRVcMwxg&G7&G>U^Nx^WNj}rD#r%x?>)W+ZM-9C
2024-12-12 18:57:26 UTC	16320	IN	Data Raw: 9a e4 dc e6 67 1d 98 c8 ea da 8e 5f 62 ec 5d 1e 5c 0c 7f e3 f9 1b 1b 57 4b e2 5f 3c 3b 86 07 23 86 dd 33 35 ec 5a cc 43 1f b2 e7 e0 e5 bb 84 d8 74 bb d1 bb 4b ad 56 ae c3 a5 c4 71 74 5c d3 6b 17 b3 eb 56 9f 60 61 b2 53 be d5 28 ab ca 58 5a e8 9c 02 6f 1c 59 73 98 b5 fb 19 01 ba 76 24 bf 23 33 d9 ed 43 05 be 6f 99 2a 9d 5a f7 e7 f4 5f 88 4d cc 50 ff 00 84 f4 0d 7e 0a ba 47 51 d5 eb 2e bc d7 70 07 a6 7a cb aa 69 40 ee c5 c8 e3 e2 d8 ba 43 a7 66 d9 77 1d fb 37 8c d6 16 ad ab d9 da ce 7e 39 35 dc 1e b7 d7 1b 5e c5 b4 eb fd 57 98 d4 b5 bd 5a 2c ad 6d eb e6 0c a2 0f 8e d8 dd 3b 65 c9 f5 a6 57 af b6 68 16 73 55 c2 e1 30 f1 e9 b7 b2 71 e4 b1 39 bc 32 17 22 73 66 92 29 5c c7 fb 71 e7 1a c1 53 18 e3 3e ba c9 1d 1c 71 be 4f 73 dd 77 31 bc 28 de f4 c7 17 2c 73 9f f9 Data Ascii: g_b]\WK_<;#35ZCtKVqt\kV`aS(XZoYsv$#3Co*Z_MP~GQ.pzi@Cfw7~95^WZ,m;eWhsU0q92"sf)\qS>qOsw1(,s
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: c4 59 3a fb b5 da 37 b6 5d 8b dd cc 76 15 7c 5c b8 dd 43 29 8c c7 e3 f0 ce ea fc 96 47 60 83 5d a7 36 2a df e2 5f dc 2f 41 36 1b 50 c6 54 3a ed e8 6b c1 55 b8 7d a3 33 86 fe 17 23 8e c7 55 b3 1c 98 f9 26 fc a3 f2 47 39 1e 3a 86 43 22 2d ca 22 96 46 6a d9 29 30 59 bc 48 66 46 a4 98 a8 25 63 71 b0 b5 6f 5a 8b 37 2c 2d dc 6e 53 13 3b ae ba 45 83 d8 5d 8d 96 dc f1 ed 5a f6 ba 24 8a 4f 37 97 63 2c 10 be 11 7c 92 ab a2 db 6e 9b a3 66 19 d8 da 4e 9f 4b 47 eb 1c 4d 29 f7 2f 94 f8 bb 12 62 b0 fa 7e e5 da ae ea 0d 76 8e 87 d6 ff 00 c6 37 72 cc 77 84 74 6b ef 42 17 39 bf f5 f7 14 10 77 9c 7b 6e 12 68 3e 59 e6 dd ae 7c 7d c6 f7 d6 cf 4a 3c 7f c9 0d f2 9d 7c 77 ca 0d a2 fd 1b ba d5 4c 9e 63 76 c6 e3 71 19 4c 75 99 31 5a f5 2d 7a 2c 96 d3 d5 37 39 ca fc 9c c6 47 4b 65 Data Ascii: Y:7]v\|\C)G`]6*_/A6PT:kU}3#U&G9:C"-"Fj)0YHfF%cqoZ7,-nS;E]Z$O7c,\|nfNKGM)/b~v7rwtkB9w{nh>Y\|}J<\|wLcvqLu1Z-z,79GKe
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 57 af 4a c9 62 84 7f 25 40 b9 93 43 5d b0 57 91 f6 24 6f 95 78 2b c6 f9 2f 55 74 12 59 b7 5a b4 79 1d 9f 17 56 db 72 fb 7e 5a 8e 6b 47 d8 f6 6a 7b d6 99 81 d7 f1 55 cb a6 76 6e cd 6a b8 9c 7b ff 00 2f 6b aa f6 4f 2d 5a f0 b2 19 21 89 d3 b0 39 ac 6c b2 3e 38 9e cf 75 f2 38 4b 72 53 10 bd a9 3f 39 38 ea c6 4c a6 ea a8 8c 5d 33 5c d1 ea 8d da 27 d9 d2 70 9a 5c b6 d9 ff 00 1c 48 22 1d 61 09 52 75 7d 56 9b 5d 7e 23 af 7e d8 7e 03 54 c1 ec 33 62 a4 92 2a f1 6d 39 1a 98 1d 53 73 c5 bb b2 32 1b cf 58 cb aa b7 e2 87 95 8e ad 6c 70 f8 cd 52 9c d6 7e 5b 69 3a a6 5f b6 b7 2e b9 d9 34 bc 47 58 be 4c 86 13 5b 3f 8d 2f 40 c6 c7 e2 0c 91 35 ac f1 7d ad 67 21 5a 5e dc 73 de 61 b4 eb 6f 37 ad 71 b3 7c c0 af ee 75 8c 92 79 97 fe d4 26 8c c9 f1 83 2b 63 21 d2 6c 71 e1 a3 95 Data Ascii: WJb%@C]W$ox+/UtYZyVr~ZkGj{Uvnj{/kO-Z!9l>8u8KrS?98L]3\'p\H"aRu}V]~#~~T3b*m9Ss2XlpR~[i:_.4GXL[?/@5}g!Z^sao7q\|uy&+c!lq
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 1d 33 e3 d7 99 12 ea e1 09 2e d6 c9 ec ef 44 b2 19 2b 16 56 21 c0 fa 42 86 7f d4 bf a8 ba be 3a a8 45 95 b6 9e 27 13 98 24 f8 e6 77 94 7a 32 ec bd b1 64 11 a1 61 1d 7b af 62 1e 7e 44 13 a1 c1 7f 51 7e c3 81 b6 24 c9 7e e5 0d fb 68 8d f7 3f 52 b2 9a 20 51 f5 12 67 5f a1 d7 f6 3a f6 fa 0b 45 68 49 12 d1 3e 15 10 f4 41 7e 83 19 9c 47 8f 2f 44 94 7b 1f 18 44 e6 67 44 62 19 f2 4d 90 59 44 c8 97 57 c1 1d 88 20 99 bc 2c d6 e3 fd f3 c8 91 cb 10 8e a2 68 4e f0 c8 7a 21 13 02 92 8e 2b 10 f6 ab 47 07 05 95 9a 2c 85 8e 36 a3 ca 9f 2e 36 56 1b d9 b2 7c 77 24 a1 2f b8 99 d4 eb 47 57 07 c5 21 28 e7 4f e5 98 91 a5 b7 7a 92 82 50 c8 ec 7e 25 10 f5 3d 53 b5 18 ac ce 88 17 df 44 46 28 86 b1 f9 11 e1 ce 67 12 84 9b e4 f8 95 a3 93 93 aa fb 14 a4 72 a3 13 88 c7 18 b5 25 22 60 Data Ascii: 3.D+V!B:E'$wz2da{b~DQ~$~h?R Qg_:EhI>A~G/D{DgDbMYDW ,hNz!+G,6.6V\|w$/GW!(OzP~%=SDF(gr%"`
2024-12-12 18:57:26 UTC	16320	IN	Data Raw: 18 ed 76 63 70 00 f2 ae ec ce c6 e4 e1 8b 15 9e 0c 6f ea 33 28 2a ac 3d 4c 02 75 d3 ce b2 3b ce 3e fc c6 c9 e5 b8 c9 82 bf 0a c3 ff 00 38 25 6d a4 27 e6 04 5f af 4a 7c be f9 ee 2e 47 8d e7 f8 49 e6 87 b5 fb 77 1f 11 27 c7 c8 0e 2e c6 69 d8 e9 6f 0a 8b 89 8f 16 1c f5 e6 a3 32 f0 52 99 af 1a ef e8 be 9b 59 af e0 6a 44 ee 1c 41 81 99 0c af ec a9 89 95 91 57 f9 9b a1 0d e1 50 72 78 d9 10 41 9f 8d 21 93 10 20 31 48 a8 1a db 92 44 20 83 63 5c 9f 77 c5 86 dc d7 1d 36 10 4c de 31 d8 2b 4a e6 d7 93 dc d6 e7 77 9d 62 71 71 fe de f1 63 dd 80 97 ee 1c 92 5b 93 c2 c8 b6 87 19 d4 0d fe 56 26 d5 3e 66 1b e5 e7 fd ba 91 97 fd 44 2c 62 2b 68 3d 36 b5 c8 d6 d5 9b 94 79 29 b0 72 38 df 56 3e 17 b0 63 8b 24 1f ce 25 22 d7 f3 15 c5 c9 85 db 99 5c f0 c7 96 7f 7a 38 a0 39 09 1e Data Ascii: vcpo3(*=Lu;>8%m'_J\|.GIw'.io2RYjDAWPrxA! 1HD c\w6L1+Jwbqqc[V&>fD,b+h=6y)r8V>c$%"\z89

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49746	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	416	OUT	GET /img/desktop/navGradient.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:25 UTC	368	IN	HTTP/1.1 200 OK x-amz-id-2: R7Bay6kwCGRPJrAsANGSxOgpE1d5W2LupuSRvnCcFLDQjEWqzlqesR+zegKbr7uZL1fiaiAbzGY= x-amz-request-id: WVHGDD4SSPP4Y22S Content-Type: image/png Server: AmazonS3 X-LLID: 58bdce9214456a343187e424b6b9a2ea Age: 24471249 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Wed, 02 Aug 2023 20:44:38 GMT Content-Length: 993 Connection: close
2024-12-12 18:57:25 UTC	993	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 3d 08 06 00 00 00 6c ad 03 5f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR=l_tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49747	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	419	OUT	GET /img/desktop/mediaFeedIcons.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:25 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: BkK1PWN9lgPxsO8OFWpV016kglbE0asDUSSBPjSe84xSS08UP8+mWPfVj4RDN3u7vjTvIlEG5tc= x-amz-request-id: YVRS0CKBMM6PXK5G Content-Type: image/png Server: AmazonS3 X-LLID: 87b1913c22d9c97bf6953946c8951732 Age: 24471243 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Wed, 02 Aug 2023 20:44:34 GMT Content-Length: 7884 Connection: close
2024-12-12 18:57:25 UTC	7884	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 01 68 08 06 00 00 00 4d 22 3b 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRhM";tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49749	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	413	OUT	GET /img/desktop/navIcons.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:25 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: gt99XjUVc7uiWQvD6l7AwXJ5mv7ae8LO1etH4jJ2XL1mrHpxDr9IXKdPQsY+IX3J7ir44f1Tbls= x-amz-request-id: WVHXMAT0BY6V5KFM Content-Type: image/png Server: AmazonS3 X-LLID: 48107a4f2061790006c812d356fc66f4 Age: 24471249 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Wed, 02 Aug 2023 20:44:38 GMT Content-Length: 15639 Connection: close
2024-12-12 18:57:25 UTC	14079	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 02 f8 08 06 00 00 00 09 5f b5 6b 00 00 20 00 49 44 41 54 78 9c ed 9d 77 d8 1c 55 f5 c7 3f bb 79 37 95 d0 12 30 90 84 04 42 28 61 40 8a 12 8a 40 04 69 52 44 40 41 14 05 44 40 10 45 40 83 74 45 11 44 41 44 30 20 cd 82 80 80 20 45 7e 48 55 40 9a 22 90 a5 07 08 a1 25 84 9a 9e 4c c8 fb fb e3 3b f7 bd 77 66 ef b4 dd 7d 23 3e ee f7 79 f6 d9 dd d9 d9 d9 b3 77 6e 39 e7 7c cf 39 b7 d2 3d b9 8b 26 d1 0f f8 38 b0 21 30 16 58 05 18 0c 54 80 d9 c0 74 e0 79 e0 71 e0 61 60 be f7 2a 41 98 f9 23 cd 48 b7 13 f0 79 60 07 60 78 c1 ef 4c 07 6e 03 ae 01 6e 29 f3 63 95 12 2d b8 2f f0 1d 60 63 cf 67 ef 01 33 80 77 81 6e 60 05 e0 23 d1 73 12 93 81 b3 80 df 01 b9 2d 58 44 c0 b5 80 f3 81 4f 39 c7 96 a0 96 b8 0d 78 08 Data Ascii: PNGIHDR(_k IDATxwU?y70B(a@@iRD@AD@E@tEDAD0 E~HU@"%L;wf}#>ywn9\|9=&8!0XTtyqa`*A#Hy``xLnn)c-/`cg3wn`#s-XDO9x
2024-12-12 18:57:25 UTC	1560	IN	Data Raw: 2d e6 16 48 5c 01 99 97 ad 96 c5 6f 4b dd 2d 33 a1 9a c4 97 a3 d0 40 38 c5 7f 7a 29 b4 a5 ee d6 59 28 e2 dc 2c 91 c6 35 b2 32 f2 3e ac da 94 68 2d ee 4f e2 e2 26 c4 36 3d 87 a6 17 b3 35 c8 0d 28 5c fe 05 e4 30 2a 8b 96 f6 27 49 c2 cc 6b 9f 44 0b fc db a8 6f 1e 13 fd 48 33 7d b1 e9 fd 49 40 8a c4 df 69 dc 58 7e 3f e7 f9 97 68 54 df 80 88 c6 15 90 15 37 95 3c bb a6 c5 fd 49 8c 6f 6f 2b 34 e9 fe d6 f9 6c 1f 94 6b e2 ee 97 63 1c 92 7f 43 8d 30 8a fc 58 d6 96 f6 27 39 20 7a de 1c cd 77 fb a3 5b 6a 5a 3f 99 ba f6 2f d4 9a a6 1f ee 46 9c 09 f5 a1 a5 fd 49 cc 74 f2 20 76 7b 90 1a e2 83 af 46 de 87 24 8e 44 23 72 79 e4 b0 4c 47 1b 78 92 4d 91 b7 35 d9 f1 47 62 e3 6e ca a3 c3 93 b4 86 09 74 78 92 f2 e8 f0 24 06 1d 9e a4 ac 80 06 1d 9e c4 45 b3 d2 0d 45 4b d8 16 c8 Data Ascii: -H\oK-3@8z)Y(,52>h-O&6=5(\0*'IkDoH3}I@iX~?hT7<Ioo+4lkcC0X'9 zw[jZ?/FIt v{F$D#ryLGxM5Gbntx$EEK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49751	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	443	OUT	GET /thumbs/2024/11/11/045014/87633215/inventions-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:25 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: 54kcWOPLDVTMogGsTsy/XainnMlKKoGK+/THVjMIUzGF+9baLJj45HuofgOmDkASpYIy3mE85oo= x-amz-request-id: BRV21RJ979ZD7TM1 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 4caefb1bd58bdbcb1e7af571de549fa5 Age: 2668031 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Mon, 11 Nov 2024 21:50:15 GMT Content-Length: 43618 Connection: close
2024-12-12 18:57:25 UTC	14079	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 0a 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RD
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 06 f7 fe 41 da a5 bf dc 07 17 2f f8 ce 7e a9 c4 d7 4b fd e3 b9 ed 9e dc bb 1c 7d 13 36 6e 6c cc f6 ff 00 27 c0 b6 ad 9f c0 a6 df e5 38 b8 51 81 da be 2e b5 06 7b fb 4f 6f 95 3f a9 44 df 3e 27 1e df e5 7f bb 8d fd a5 56 ff 00 29 ca f6 a2 fb 40 ee 62 f6 ec 5d aa 6b 0d 62 7e d3 8f ee 1d 83 cc b5 dd 6c 67 7f e4 3d d5 f6 ad 51 56 5e fb bc ba ea b6 8b c8 0c b8 3b 5b 57 22 c7 99 35 59 dc f6 3f 43 b4 b7 6a b1 57 a6 dd 3b 41 e4 1f 7f dc d7 f5 47 c0 55 de f7 1c 2c d7 90 1e bb b7 ed ab 83 1a a2 69 1a 29 f4 e9 c5 1e 4b 16 5c b6 8e ab 32 fe a7 cc 0f 50 f3 e2 e2 d0 bf dc 61 fd e4 79 a9 19 01 e8 ff 00 bd c0 b8 8b 6f 71 c1 cc f3 e8 64 06 ee f3 ba 59 da 55 f9 51 9f 72 b4 3a 01 86 42 a1 90 0c 87 4c 54 14 b5 01 d0 50 10 64 06 1b 61 50 c8 02 82 80 82 80 60 8a 40 18 88 08 32 Data Ascii: A/~K}6nl'8Q.{Oo?D>'V)@b]kb~lg=QV^;[W"5Y?CjW;AGU,i)K\2PayoqdYUQr:BLTPdaP`@2
2024-12-12 18:57:26 UTC	13155	IN	Data Raw: 01 90 81 00 6c 12 10 0d de d7 fd 57 fc 2f f1 46 9f 71 fd 3f 1f c8 cd ed 7f d5 7f c2 ff 00 14 69 f7 1f d1 f1 fc 80 c0 88 48 e6 c1 aa d4 0a d2 d7 50 31 de e2 5d 7a 40 e7 77 8f d2 79 dc f6 93 bd df bd 0f 3f 97 70 29 37 fb 3e 5f a5 de 62 b7 8c 18 07 c7 7f a7 7a dd 7e 96 98 1f 41 c9 37 bb b4 74 d9 da 57 83 ae cc d5 de e4 af d0 5d c3 d2 37 ff 00 5e 67 2b 0b 76 b5 eb 65 d2 93 ab ac be 68 ab 37 78 f3 61 c9 da 71 eb ae dc 9e ac 0e cf b7 e3 d1 e4 b6 f6 7d 4c e8 24 64 ec dc 51 23 60 10 81 20 00 81 00 00 c9 dd 62 d5 5d 70 dc d8 26 4a f5 26 80 e4 b9 6d 59 46 92 59 47 66 e6 cb 58 12 b4 78 ed 67 c8 0b aa b6 4d 7c b1 16 40 3f 6b 5f a9 9d 2e 14 5d 4f cd ec 36 6c b5 cb 6b 5e 74 5a 07 b1 b4 d7 3e 5d 7e 6e 95 ff 00 a5 14 2f 5b 58 7f 7a c9 7c 37 03 76 37 fd be 0e bb 69 6b 7d Data Ascii: lW/Fq?iHP1]z@wy?p)7>_bz~A7tW]7^g+veh7xaq}L$dQ#` b]p&J&mYFYGfXxgM\|@?k_.]O6lk^tZ>]~n/[Xz\|7v7ik}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49752	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	437	OUT	GET /thumbs/2024/11/11/040330/87633175/n11r-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:25 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: JH1BBzysT7K4MPxWqSAL8JXKSnBE7wPXzW+lkaEJ+mWiXk6J3bJBbgggTlgQOualQMUeR6Vzdyo= x-amz-request-id: QRR76MBX7493N34A Content-Type: image/jpeg Server: AmazonS3 X-LLID: f47399250e817a89aab6311da8bff213 Age: 2670835 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Mon, 11 Nov 2024 21:03:31 GMT Content-Length: 43317 Connection: close
2024-12-12 18:57:25 UTC	8287	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 0a 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RD
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: a9 d1 f0 3c f6 f7 e5 2d a6 e6 ce f8 db c4 df 1e 9e 1f 41 05 2b e5 8e dd 82 f5 bb cb 64 d3 51 36 5c 7e 82 df 9c 3f a2 5f 9e a3 d9 7c a5 b6 db 5d 64 b5 ad 7b 55 ca 9d 0e 97 76 ed 95 ee 78 7d 1b 59 d1 4a b4 a5 3c 00 d5 b5 fe 4d 3f 2a 3c f6 3f f7 db 7e 43 d2 62 a7 a7 45 4e 30 a0 c1 5e d3 55 be 7b ee b7 2e bd 3d 11 a0 1a f7 7f c9 bf e5 67 17 e5 66 eb db e5 71 4e e7 7b 2e 3f 56 96 a3 d3 a9 34 64 ed 7d ba bd b7 07 a1 5b 3b a9 6e 5f 98 1e 5b b3 6c 36 fd d7 26 4c fb db 75 64 56 6b a1 b8 d0 9f cc 7b 1e db b4 db 35 82 b5 ae 66 d4 43 d6 39 9d 3d ff 00 ca 7b 6d de 47 96 96 78 db d6 dd 3c 05 6f 94 76 9e 83 c5 56 d5 dc 7f 11 ea f4 03 a9 4f e8 57 fd bf fa 4e 57 c9 df d0 ff 00 c5 63 b8 b6 e9 61 f4 27 4e 9e 89 f7 41 9b b4 f6 ca f6 cc 3e 85 6c ee a5 b9 6a 00 e4 6c ff 00 df Data Ascii: <-A+dQ6\~?_\|]d{Uvx}YJ<M?*<?~CbEN0^U{.=gfqN{.?V4d}[;n_[l6&LudVk{5fC9={mGx<ovVOWNWca'NA>ljl
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: f6 5b 69 fb c8 d5 74 59 55 f2 6e 84 5b f8 5a 1d 9e ad fe 5b 04 4b 92 8f 1b 41 1e 35 63 5f 65 37 ce cc ae d2 95 bd a5 02 b6 83 76 6a 7d a2 a8 ed a2 f7 84 2a b8 9f 61 3f 61 1a 2d 5b 64 b1 b8 b0 12 ca fe 27 52 09 b5 f4 02 7d 50 f9 b1 3e 3a 70 60 39 84 e3 8b 1a ab 7e e2 29 6a 89 cc 4b f1 40 16 6d 0f 8a 85 c4 4d 3d 3d 84 e8 a1 c8 17 3a eb 3c 9c 04 75 5b c9 12 54 71 52 75 c7 f1 11 56 d1 38 55 5e f3 63 c5 f0 af 24 2c 38 d2 d5 97 da bd 6a 11 64 66 d6 3b 71 22 4e f8 ed 4e 24 0e 8c 81 a1 0d 05 49 0c 8a 24 80 90 c8 92 40 48 68 48 68 0e 4f cc 7f d3 57 f3 af aa c7 07 63 f7 bd c7 7b e6 3f e9 ab f9 d7 d5 63 83 b1 fb de e3 5c 7f 38 97 b3 60 00 1e b7 20 00 30 10 c0 02 81 80 c8 a2 07 03 43 48 8d 48 12 24 90 24 49 23 39 76 90 24 49 20 48 9a 46 6d 75 90 a0 94 04 12 48 e7 6b Data Ascii: [itYUn[Z[KA5c_e7vj}*a?a-[d'R}P>:p`9~)jK@mM==:<u[TqRuV8U^c$,8jdf;q"NN$I$@HhHhOWc{?c\8` 0CHH$$I#9v$I HFmuHk
2024-12-12 18:57:26 UTC	536	IN	Data Raw: 76 cc 12 06 ca 65 e9 2c c7 97 a9 9c f5 62 ca 59 c8 1d 6a d8 b2 ae 4c 78 db 83 45 18 17 11 78 55 c9 24 4d 48 1c cd c6 dd e3 5a 14 53 24 68 76 6f 16 50 ce 3e e3 17 45 a4 0d 98 33 78 97 5e 95 cc a1 a3 97 8f 89 bb 16 64 80 c5 b8 c1 6c 4f c8 a5 58 ef d5 d6 eb 53 91 bb db fa 6e 6b c0 2e 54 75 b2 75 c9 05 22 06 5b 71 e5 2f eb 39 a9 92 57 68 c5 d5 b9 b3 a5 5c a5 f4 c9 3c 4e 4d 72 b4 cb ab b8 93 37 57 49 bb a9 ea 32 ca 65 68 e6 57 3f 99 75 73 49 8b a3 73 77 56 99 4b ab 73 93 5c d1 a9 a2 99 a4 e7 75 c3 ac db 2e 84 a6 57 93 68 b2 71 2a c7 92 59 ae 99 17 32 66 c2 c9 5e 67 bd ec 7f 4f 8d 5d 70 76 8f d8 ce 6e cf ef 7b 8f 43 f3 2b 4f 6d 58 fc 6b fe 5b 1e 7b 67 f7 bd c7 bb 82 e6 c7 87 9a 62 d6 b0 10 1e f7 9c c0 40 03 01 00 0c 04 00 30 10 00 c0 40 03 01 01 03 01 00 0c 04 Data Ascii: ve,bYjLxExU$MHZS$hvoP>E3x^dlOXSnk.Tuu"[q/9Wh\<NMr7WI2ehW?usIswVKs\u.Whq*Y2f^gO]pvn{C+OmXk[{gb@0@
2024-12-12 18:57:26 UTC	1726	IN	Data Raw: 9b 1c fc 3a 71 02 2e 79 11 4c b1 e8 f8 95 f8 80 49 1b 55 31 81 15 4d b1 c1 03 49 55 a9 cc b9 45 60 20 2a 00 18 00 80 00 00 00 00 00 00 00 00 00 00 00 06 00 00 00 00 03 00 00 1a 18 86 03 90 10 01 25 68 25 d6 56 49 01 62 65 b5 28 2c a8 17 d4 be ac cf 56 5b 57 a8 1a 17 10 b1 09 9e 03 e9 60 63 dd 33 09 d1 cf 82 d6 e0 65 7b 4c 88 0a 11 66 3e 24 6d 8e d5 e2 6a c3 45 12 06 8c 4e 11 a6 85 14 45 b5 ab 5c 00 be a4 d3 2a ab 2c a8 10 ca d2 47 37 71 7e bd 0e 86 5e 07 3b 35 40 ce 9c 16 52 f1 a9 4b 50 3a bd 40 e8 61 76 b6 88 dd 5c 6a f5 8b 6a 62 db db 48 46 fc 4a cb 56 07 1f 77 b7 78 ad 2b 83 32 9d ed f6 3e aa 49 c3 6a 00 88 e0 00 a0 00 02 60 35 66 5b 4c 90 52 04 c2 e5 ba 99 57 89 7d 72 d5 73 39 c8 64 ba ba 4d dd 7c 79 97 89 a5 66 38 55 bb a9 75 77 0c c5 d1 bf d8 bb be Data Ascii: :q.yLIU1MIUE` %h%VIbe(,V[W`c3e{Lf>$mjENE\,G7q~^;5@RKP:@av\jjbHFJVwx+2>Ij`5f[LRW}rs9dM\|yf8Uuw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49753	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	666	OUT	GET /thumbs/2024/12/10/094405/87645339/sanra.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:26 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: kJlsJ5PxfkgqtOLO+x0JvobbPHkGFo10369KedJPh/9CjMmVdDXc5HWEv9Bnfl6q4wAqvLtRFfw= x-amz-request-id: RNHTZ239VQSVPP3V Content-Type: image/jpeg Server: AmazonS3 X-LLID: 830a6c9cc15fbc70bae00466d06969ba Age: 188000 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Tue, 10 Dec 2024 14:44:06 GMT Content-Length: 98409 Connection: close
2024-12-12 18:57:26 UTC	14080	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 0f 03 5d d5 54 c3 a0 f1 09 ab 83 b6 ff 00 95 13 0b a7 4b a2 18 37 ea a6 41 7a a9 95 1f aa 99 05 ea a6 41 fa a8 13 bd 50 a0 f4 c8 05 e9 90 9f 51 01 3a 4d 15 11 e4 9a 89 03 46 e2 8a 86 9f 73 54 10 2e e5 7f a6 e2 05 74 41 82 bd ba 9c 66 06 f6 13 11 26 a1 66 ac 55 36 e2 18 f2 87 d3 1b 41 76 a1 46 93 ee 64 12 5f b2 36 3a 81 c8 8b 5b 9c 25 dd ad b8 9d ff 00 e9 91 50 54 44 28 ad 6f 2e 1a 5d 03 4b c7 c1 55 c1 d8 65 96 d8 39 93 47 e6 1e 21 0c 2c 2c f9 14 4e 74 70 b9 b4 a1 54 59 f2 2b 91 1d bc 52 36 51 42 2b 44 ca e1 71 c4 2e 5d 90 80 b2 13 b9 ed 1a 80 99 4c 2a f9 b4 d2 db 6e b5 97 ea 73 49 a2 96 98 73 0c 76 36 4c 96 64 5a c5 a3 9e ef e6 a6 4c 34 b9 1f 6e 72 36 c4 97 79 80 6e e4 c8 c9 db c4 f8 2f df 11 25 85 a6 9a 25 a9 21 9c 83 9e eb b7 6e 24 d3 c5 58 97 f5 d2 bd Data Ascii: ]TK7AzAPQ:MFsT.tAf&fU6AvFd_6:[%PTD(o.]KUe9G!,,NtpTY+R6QB+Dq.]L*nsIsv6LdZL4nr6yn/%%!n$X
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 9a 87 73 c9 6f 66 05 a0 ed 6a ac 2a 2e ee 2e a5 63 f7 48 75 05 07 26 b6 73 bf ef 32 1e 49 a3 b4 45 75 58 89 27 f2 40 f2 b0 1a a8 43 8a 29 05 c1 65 08 2f 1a ea 88 62 59 05 15 1c ba 09 03 39 a1 75 74 de 8d 25 f2 59 bd 4e 4d 0d 0f 42 12 ac 6a f2 33 34 62 c6 e7 01 e5 0a 0c b4 57 b6 d6 f6 f2 39 cd 12 97 03 40 b2 ac f3 72 97 5e b1 0c 1b 5b bb 41 f8 a9 75 57 74 e3 31 46 fc 34 0f 91 a1 c4 b0 56 a9 84 ca 7c b8 9c 5d d3 76 b9 82 aa e1 7d 99 2e 44 db 1c 2e 52 d2 08 db ac 92 00 08 f8 a8 65 d5 f1 b1 91 6d 6c e3 d1 e0 15 a8 e5 5c 53 de b0 3f ef 0b 7f 83 97 b7 8c 71 eb f8 83 6a c6 90 cf 15 f5 39 f3 cc 7c 9d fa 79 5f 34 ed 84 0e eb e5 7d 9a be af c9 72 6a 42 37 2f 8e fa 7b 41 05 96 4a 04 12 14 80 b3 64 0c 3c b4 eb b4 af 46 88 e5 b8 bb d9 ec af fe e6 27 96 bd a7 a8 5e 88 Data Ascii: sofj*..cHu&s2IEuX'@C)e/bY9ut%YNMBj34bW9@r^[AuWt1F4V\|]v}.D.Reml\S?qj9\|y_4}rjB7/{AJd<F'^
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 34 25 3d 19 fe e5 32 70 4f 55 2e ae 9a 77 3f f7 02 9a 15 cf d5 e9 9d c3 d6 ae 83 aa be a9 7b 9c 8a 37 ba 56 9a 74 5a 91 e6 eb d2 56 82 df 35 88 b7 63 62 bb 88 69 dd 74 8f 9d bb 41 8b c9 e0 67 a1 8a 50 c1 d8 55 57 9e f8 69 ed 26 6b e3 1f 6f 30 77 86 aa e1 66 ca 7e 4d 07 29 9a dd cc b5 07 61 1d 42 98 74 96 32 38 4c 56 66 cd f3 3e ee 27 54 fe a3 55 c7 ab d9 ca c3 ec 7b 5a 08 70 3b aa 6a be 6e f3 cb e9 69 66 1a 0c 16 51 a0 7a 15 eb a0 0b cb fc ee 5c 3b d9 86 92 c3 8e 40 e9 9d 74 f1 f5 6a be a7 cd a6 1f 1f ae c7 6f 6d 99 62 d3 23 45 2b d1 7d 3d 7f 1c f5 aa 38 dc f9 ef 9a 5e ef 29 55 da 42 33 31 42 cb a6 1d d4 6b 75 aa cd ad 4d 4d cf 96 b8 ab 23 b3 9c ee a7 4a ae 77 64 f4 4c b7 cf e4 6d a9 1d e3 77 13 a6 bd ea b3 ee cd e4 81 9f e1 30 df d8 4d 98 b4 7f a2 f6 b4 Data Ascii: 4%=2pOU.w?{7VtZV5cbitAgPUWi&ko0wf~M)aBt28LVf>'TU{Zp;jnifQz\;@tjomb#E+}=8^)UB31BkuMM#JwdLmw0M
2024-12-12 18:57:26 UTC	16320	IN	Data Raw: 55 db 4a 97 53 14 5b 4c 10 55 62 95 6f 7b 71 6a fd f0 3c b1 df 05 ac 38 dd b0 02 e2 69 2e 9b 2c 8e 2e 90 9a d4 a5 67 2d 26 4e be 8d ac ae f8 2e 35 d2 3a 16 0c c4 ec 4b 66 22 bb 5b fc 96 2b 51 98 cf 73 97 c5 23 ed ed 9b b4 8d 2a a4 d7 2d c6 46 7b fc 8d f4 95 7c a6 95 e9 55 b9 24 6f 0b fb 0c 16 fb 21 24 97 25 a0 f6 aa 98 63 6a a4 be 82 da 09 5c 03 f7 91 dd 5c 33 94 46 5c 34 be 89 ea 99 c9 f7 4a 1a 3e 6b ae bb 33 75 26 ca d1 ce bc 64 bf a4 38 1f f1 5d 32 d6 ba 65 dd b8 66 6a 16 d9 c5 09 7e a0 01 fe 0a 65 d3 f8 56 ff 00 1b 7d 1b b4 0e 5a 95 c7 6d 30 b4 9c ee b0 b8 0d ea e6 9a 7e 4b 3b 44 e1 ff 00 67 14 ba be fb 3c 8c a1 e6 9e 73 fc 57 c6 ef e2 bf 61 f2 f3 ce 8e 89 c6 e3 8e 7b 11 3b 85 6b d1 6b 93 e6 fd ba e2 ac e4 91 a6 09 a3 0d a1 0d 34 fc 97 b2 6b e1 f1 6c Data Ascii: UJS[LUbo{qj<8i.,.g-&N.5:Kf"[+Qs#*-F{\|U$o!$%cj\\3F\4J>k3u&d8]2efj~eV}Zm0~K;Dg<sWa{;kk4kl
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 7d 1f 9f 5b 94 da b4 7c 53 d9 0b 9c ad eb 2f b2 4d db 0d 6a 1a 57 dc e5 a7 87 8f a6 ee f1 c7 f8 8e 13 0d 6e c6 41 0b 77 b4 7d 54 0b d3 34 79 36 d9 7f 18 14 f2 e8 16 e6 ae 76 9c 0e a2 dc 8c 64 ad e5 53 23 dc 55 c8 2a aa 82 44 0a 04 0c 5c 80 f6 16 91 50 52 ab 03 c8 f1 ff 00 6d 77 ea 30 51 8e 5e 7d 9b 8a aa 95 c9 a0 07 cd 4f 10 7f 82 56 a3 cf de e2 30 b7 91 ca 29 dc ae 1b 3a ea a1 89 ab 8d 74 87 9a d5 90 e3 58 81 e6 46 16 43 cd 8f c0 2b 10 ec 71 9a f4 5a 13 62 80 9a 68 b5 04 b8 e0 03 aa a8 93 1c 22 88 24 b2 10 a8 74 32 81 30 01 3b 53 0b 91 02 1d a2 61 32 76 38 59 5d d4 55 72 93 ea 86 8a 2d c8 94 5e a6 e5 52 d1 88 ab aa 21 7e a8 66 88 11 ea 17 15 42 c3 6a 10 06 b0 82 81 e6 8f 14 43 ad d0 68 a8 04 38 a0 72 20 5a 50 c1 e3 43 a9 44 c1 b2 d1 54 02 a8 12 68 81 2e Data Ascii: }[\|S/MjWnAw}T4y6vdS#U*D\PRmw0Q^}OV0):tXFC+qZbh"$t20;Sa2v8Y]Ur-^R!~fBjCh8r ZPCDTh.
2024-12-12 18:57:26 UTC	2473	IN	Data Raw: e8 9b 23 fa f8 20 a8 b8 bd 7d eb 0d bb 81 de 4d 1a 02 85 76 9f 63 38 4c 78 88 26 c9 48 da 5c 4a 6a d3 de 85 75 d5 c6 d7 58 34 1a 7e 2b a4 4c 92 56 d0 db d5 0c 3c aa 86 8a 06 dc a8 6c a0 6a f6 e5 96 58 eb 8b d7 9d a2 26 3a 87 f0 28 3c 77 ca b3 13 66 79 0d e5 fb c9 70 32 39 83 f0 2a 55 55 86 d4 a3 15 d6 bd 92 e3 c2 5b f7 5f c8 cd 19 ab 4f e4 b5 19 77 92 4f 4e cb 71 28 82 eb ac 40 5d 10 10 04 64 94 c8 2a a0 49 50 11 54 78 cf 31 81 ba b3 ba 7d 18 7d 3a e8 bc 91 d6 21 d9 cc fb 79 c1 a1 03 ba ad 2c ef ed 22 bd 87 d5 8f eb 01 58 8c ec 91 ba 37 96 b8 50 85 59 a4 a2 09 01 a0 00 a2 c2 91 4e 43 33 e2 78 73 4d 28 a8 d3 62 b2 a2 40 1a f2 8a bd 89 f4 a3 9a 50 68 f0 99 e7 44 e0 c7 39 41 ba c7 df c5 3c 54 26 a1 c3 54 19 8e 67 c3 62 bf 89 d3 40 df 3f 5d 10 72 9b 9c 7c f6 Data Ascii: # }Mvc8Lx&H\JjuX4~+LV<ljX&:(<wfyp29UU[_OwONq(@]dIPTx1}}:!y,"X7PYNC3xsM(b@PhD9A<T&Tgb@?]r\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49750	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	676	OUT	GET /thumbs/2024/12/09/024708/87644924/pawnshops-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:26 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: jRlENXAbMGShBNBAqpsHnG+dtiMjnL+DPDMMzJpxa2pTwN2cRtV1s1lfWXXMKtOM3NvYSjVFSQc= x-amz-request-id: TR571DRS9R7CTX1B Content-Type: image/jpeg Server: AmazonS3 X-LLID: 9d0b0f72dd6fff425a20e4b081ccbea6 Age: 256217 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Mon, 09 Dec 2024 19:47:09 GMT Content-Length: 43576 Connection: close
2024-12-12 18:57:26 UTC	14080	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 0a 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RD
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: b4 83 dd 6c 78 ed bf 68 f9 87 dc 72 92 c0 28 f9 a3 a0 b7 bb 4b 75 8c f6 ed ba f3 17 f9 4d 8a ff 00 ea bf a4 64 27 4c 18 f3 41 8f 34 6e ff 00 2f b2 ff 00 f9 7f 69 19 75 7d 92 ff 00 ea af a4 99 17 e9 8f c5 cd 0e af 9a 34 ff 00 98 da 70 da af a4 83 eb 1b 7f ff 00 96 3f 48 c8 bf 4a 6a fb 05 89 64 ba b5 97 96 da 3f 4b 2a 97 53 8b ca c4 57 c5 90 d0 f5 72 22 f5 72 45 52 df 57 2b 71 5f 12 b7 ba 93 fa a9 13 17 53 b9 5e 46 76 39 5d 94 b8 10 51 6d 8c 5d 34 b0 19 2d 21 a4 98 d6 ad b5 e4 61 b7 fd 3d cf e6 1d ac 22 c5 b6 7f 73 75 76 86 7a f4 36 3f d4 46 e8 ac bf 98 c1 b1 7f 7b 13 7a 7f 39 ae 4a 85 e5 f7 17 3e 27 06 27 7e ef f4 6e 2e f3 81 12 d2 2c 45 b0 c1 32 94 5b 0c 99 cd bb e9 b3 61 8d f8 2e 6c ec 4e 09 45 77 48 e3 74 f7 4b f6 df 69 dc 9b aa ff 00 b8 ef fa bf 2e 3d Data Ascii: lxhr(KuMd'LA4n/iu}4p?HJjd?K*SWr"rERW+q_S^Fv9]Qm]4-!a="suvz6?F{z9J>''~n.,E2[a.lNEwHtKi.=
2024-12-12 18:57:26 UTC	13112	IN	Data Raw: 3d 99 98 95 eb 96 1d 26 9a ef 25 fd 76 1c fe c9 7f 2e fc 6e 51 9a 61 3a 9c 5b 3b 95 35 99 b6 d5 d3 9d 98 ef 2e ba 2a 44 a5 49 aa 33 3c 6e 55 13 f3 a4 ab 4a ba 54 93 65 f0 59 2c 5f 1e 97 6e 4b 4c ab 29 71 a7 03 7a b1 a2 11 8c 72 8a a1 9b 67 d4 2c 5c bb 3b 31 92 d7 17 4c 78 9b e6 dd 3c 38 b3 bd b6 fb 79 33 cb 35 42 72 a9 4d db e9 dc 92 87 0c c8 7a b5 c0 e5 6b 5f 35 75 5b c0 e4 75 e8 ff 00 6b 17 da 74 d3 8b 8d 6b 49 72 39 7d 6b 1d ad 16 69 9a df 06 5d 79 16 a9 26 8b ad 66 5f 69 2d e5 ba 3c 2e c7 f6 a2 a8 c7 4b 33 79 ad 4a d2 fc 8c e8 59 78 a3 0c 97 81 9b 2d 70 39 b6 dd a8 b9 45 a5 56 9a 32 39 60 77 b7 8f 56 dd 3f e5 37 cf 3f 4c db 8e 72 7c 8b 2b 54 70 76 d2 71 de c9 b6 e9 89 d3 9e ef 4f 95 57 b4 96 7f 80 f7 d8 d8 9a ec 38 9b 2b 3e 9c 2a a1 a6 4f 8c b1 36 dc Data Ascii: =&%v.nQa:[;5.DI3<nUJTeY,_nKL)qzrg,\;1Lx<8y35BrMzk_5u[uktkIr9}ki]y&f_i-<.K3yJYx-p9EV29`wV?7?Lr\|+TpvqOW8+>O6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49748	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	674	OUT	GET /thumbs/2024/12/10/012528/87645535/randoms-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657
2024-12-12 18:57:26 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: NkPMeiDXJ1YfVSrQh6Rea5ixHENgwYTE200KOQTW3KyZVHGNBGHKy3Ny9kZmok3L7hpvazDdoDw= x-amz-request-id: K75VXTZFP41X033C Content-Type: image/jpeg Server: AmazonS3 X-LLID: c3f3cb2156800641176902eee49adebf Age: 174717 Date: Thu, 12 Dec 2024 18:57:25 GMT Last-Modified: Tue, 10 Dec 2024 18:25:29 GMT Content-Length: 198672 Connection: close
2024-12-12 18:57:26 UTC	14079	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 66 21 04 34 06 4d 0d 9b 02 58 30 18 00 0f 01 00 00 43 01 6a 86 31 60 60 6c b0 0c c0 2d 47 09 63 bf 8c 79 7a 03 d3 35 fc 2a 29 d9 bf 62 c7 1f bc 7b f2 e6 c8 c4 1e 01 60 58 34 63 41 b5 aa 5a 28 45 a9 0d 0b 43 00 12 41 e4 e2 a5 2c d3 00 c1 06 06 80 80 50 51 a0 21 04 9c 02 cb c2 b0 06 37 8e 6a e1 9f 95 f5 b9 77 cf e9 08 60 14 c3 2d 86 d7 63 fa 18 dd dd bc 70 3d f2 98 83 f6 4b 93 95 f1 0a db b0 c2 c7 93 a1 5c 4c 77 87 1d 26 14 12 f8 1c 85 cd 49 5e f0 a8 d9 b8 66 7d 3c af e6 f5 c6 b0 dc 29 13 85 25 5a 36 4b 50 10 e7 d5 1f e1 f6 2c 1e 4e c9 0c d3 b2 6d a8 85 a4 50 6e 6c c2 94 4b 78 69 7e 89 15 48 75 5e 6f 7d 2f ca f2 57 d0 7c c8 74 80 92 d4 1d 12 0e 20 4a 07 93 8b 1a 74 77 91 ef 7b 7b f2 7f 54 ab 8b 55 10 d2 81 20 b6 2a 10 9a 85 2b 74 b3 cb 6b 6a 9a d7 3a b7 7c Data Ascii: f!4MX0Cj1``l-Gcyz5)b{`X4cAZ(ECA,PQ!7jw`-cp=K\Lw&I^f}<)%Z6KP,NmPnlKxi~Hu^o}/W\|t Jtw{{TU +tkj:\|
2024-12-12 18:57:26 UTC	8232	IN	Data Raw: a7 f5 7f a4 a2 8d 4a a2 a2 08 a0 11 08 22 a8 a8 88 54 54 54 54 54 45 cb 77 5d fd 37 2d ca b5 4e 34 4d 9a 89 c3 79 a5 16 e5 b7 46 e9 44 02 a2 a2 1a d1 51 37 b9 08 84 c3 45 b9 6e 5b d6 f4 5f a9 fe 88 ac 9f f7 15 55 74 aa da 55 34 08 2a 27 22 ea 22 f0 8b d6 f5 bc 15 be 8b dc 4c 3a 1f 5e ed 29 a3 09 4c 40 68 00 4d 3d 53 d0 d5 a8 10 10 35 52 36 a9 d1 55 36 3a 26 b5 35 1e ab 61 4f 8d 7b 2b db 4c 65 13 02 a7 a4 9d 0a 72 67 64 f1 d1 e7 a9 f5 f7 54 54 47 d5 45 44 42 a6 94 54 d1 cd 5b 56 c3 4d ab 6f 56 8a 29 42 da 54 7d 03 85 51 6a 2d 4e 08 1e a1 35 b5 4e 6a a2 a7 a2 8a 89 a3 a9 08 84 02 da b6 aa 2a 2a 6a 7d 55 fa 85 64 ff 00 bb 4f 45 15 74 a2 1d e8 a8 9f dd ee ea 1c 0a 71 ea 7d 0d 79 0b 79 28 1f 51 2a 8b 78 5b c2 de 13 13 02 03 46 9e a0 68 fe c3 50 87 54 d5 44 1b Data Ascii: J"TTTTTEw]7-N4MyFDQ7En[_UtU4'""L:^)L@hM=S5R6U6:&5aO{+LergdTTGEDBT[VMoV)BT}Qj-N5Njj}UdOEtq}yy(Qx[FhPTD
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: d5 09 bd c1 a1 7b ea 35 77 7f 4e c5 b0 27 0a 7a a3 ec 11 52 20 2a 88 a6 a7 e8 b0 2a 14 15 0a a1 5d 55 3d 4c ec 13 50 d2 aa a8 15 55 54 f3 d4 14 1c 15 51 70 4e 3d 03 4a 08 94 49 44 ad f4 2c 75 53 82 68 eb 54 5c 2a c2 8b 90 90 03 01 dc 24 88 ab 28 8e db 76 d0 3b 53 d8 9e 8e 7f dc c3 50 7a 8b 88 77 2b ab 43 ba 78 68 88 d4 77 aa aa 25 0d 1c 10 4d 3d 28 bb 26 bb ae e0 b7 04 e7 22 51 a2 73 91 72 79 a8 00 a0 0a 8f a2 31 17 3b 1b 0d 15 00 45 e1 3c 55 04 15 df ef fa 0d 4d ee 3d 34 aa da 11 62 73 68 1d dc fa cf 51 ed a6 33 4d 8b 66 a5 95 3b 02 ec 9d df 43 dd 9d 91 4f f4 1f 41 f4 b1 33 51 e8 73 2a 69 4d 76 d5 06 d1 33 4f d3 f5 ea ba ae a8 02 51 05 74 46 88 b8 a0 ee 85 c8 3b ae e6 a3 44 ea 22 42 34 4f 06 b1 94 10 a0 4e 28 87 55 a4 84 5e 9c 1c 4d 8b 4a 6d a3 de 2d ad Data Ascii: {5wN'zR *]U=LPUTQpN=JID,uShT\$(v;SPzw+Cxhw%M=(&"Qsry1;E<UM=4bshQ3Mf;COA3Qs*iMv3OQtF;D"B4ON(U^MJm-
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: 97 28 6a 77 88 79 74 61 fe 2f e6 d1 a3 e3 ee 74 c2 ee 27 ce a3 03 03 cd e2 41 bc ea d5 33 2d cf 22 4c e5 bc e6 06 c7 cf f9 a4 42 3f 29 73 1b 61 6f e6 6e 4b 18 8b ce 79 e6 28 7e 41 e6 e1 11 7c 9a cc 42 d8 fe 55 de 46 99 f2 ea 46 a6 fc b9 86 b0 fc b5 c0 38 58 7c 96 e2 59 eb bb 47 b8 d8 59 1a 5b c6 f0 e9 31 ec 31 c1 7a 03 16 49 84 62 b2 1c 73 8f 5f 4a df 10 f8 af 24 9d e0 1e 05 30 77 c6 fe 3d 29 93 e3 4b 02 b9 f8 d5 9c 24 fc 6c e5 91 b7 ce 99 39 3c 1e ee 59 cc f9 4f 2f b9 11 02 1f 6c 42 65 a1 4e 61 62 c7 61 32 59 38 e5 b7 2f 7f 85 be 4e 73 9f 11 de f8 d7 c8 7c 53 cb bc 5b 3f 65 2d 95 e6 22 41 76 f9 ac a0 60 8e de 27 27 08 d8 d7 42 c0 73 d0 43 14 31 78 e6 4b 88 9d e2 d9 43 b0 5e 37 82 ca e5 dc 2f 06 1d 6d c5 70 c0 73 1e 39 6b 71 c6 b0 fc 5b 25 c8 4e 56 06 b0 Data Ascii: (jwyta/t'A3-"LB?)saonKy(~A\|BUFF8X\|YGY[11zIbs_J$0w=)K$l9<YO/lBeNaba2Y8/Ns\|S[?e-"Av`''BsC1xKC^7/mps9kq[%NV
2024-12-12 18:57:26 UTC	6328	IN	Data Raw: 2d c5 45 bc 36 f8 d7 da 5d ff 00 9d 5a cb 3d a6 42 cf 21 0e f7 05 1b 89 55 0a a1 33 f7 db 3b 39 8b cc dd e4 ef ad ef 61 0e c5 49 9e b9 7f f1 98 9e 52 2e e6 fe 4e 1b 7b 0b 5b f6 5c 33 69 a1 2f 04 1a a6 d1 54 d0 ee a8 76 d0 1e d2 8b 9a 56 e0 0d 37 00 43 55 42 df 44 24 e8 d9 9a 10 73 48 04 2a 84 c1 25 03 c8 4e 76 e0 1b 55 20 31 9f f6 27 ce b9 36 2f c8 92 32 79 a2 cc 67 26 e4 99 1e 3b 34 16 83 8e df 4d 90 9b 16 5b 97 ba c6 d8 5b 61 f1 5b 7e ed ae 20 31 c1 6c 72 21 cd 40 ba 95 7a 24 d5 cd aa 64 b4 2e 70 5b d6 e7 39 7f c8 a8 48 6b 9a d0 5c 40 69 04 80 02 e8 aa 02 35 51 17 54 bc 85 ee b4 a0 f4 e0 e5 ee 0a 10 4a 6d 53 5c 00 24 39 50 23 b5 60 cf fe f3 e5 c7 fe 4b 77 7d 1a ea 38 b8 15 50 b8 1f 8f b3 3e 40 cb f1 fe 2d 1f 8f a1 8f 90 58 5c 8e 5b e2 be 07 cd 2c bc a5 Data Ascii: -E6]Z=B!U3;9aIR.N{[\3i/TvV7CUBD$sH*%NvU 1'6/2yg&;4M[[a[~ 1lr!@z$d.p[9Hk\@i5QTJmS\$9P#`Kw}8P>@-X\[,
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: a9 7b 36 c6 41 0c 7d 63 69 e8 7a 16 1a b0 ba a6 af 01 8f d8 5d 30 ae e0 43 4b 02 de 01 32 02 44 c4 86 4d b1 b1 92 e9 2f 6e e1 13 45 24 93 36 4b 87 cb 27 05 3f fc bf cc 12 7f ed 2a 94 09 08 d5 aa bd 45 0a ab 57 2c c6 3f 2f c7 ee ec 73 78 f7 33 92 5d 45 2d e5 e5 fc 51 71 5b 7e 5a e7 fc 73 e0 f9 68 33 b1 c5 0d ae 23 8b 63 31 d6 ac c0 72 2e 77 91 e5 5e 4f e2 96 5c a7 87 f0 2c 55 9d cf 04 c2 70 2e 6f 8f f2 46 30 dc 0b 39 f3 38 cb 1b b7 65 72 b9 3b 8b 09 ae b1 56 9c 9f c8 37 b3 d9 67 73 f9 2c 99 c8 1b a6 5c 33 dc 09 de ed 72 f9 26 e2 31 52 5d c9 7d 71 05 c3 4b 0e 48 0b 6b fb d0 63 c9 de 6d 67 2b 95 b3 33 37 1b 41 c5 e5 1f 61 76 cc e3 db 1e 17 3d 3c 57 18 6c d1 92 ce da f2 ae 65 f3 4b a2 b9 ab 99 3c d5 c7 e4 1d 1a 7e 75 e0 49 9b 98 b2 1e 4b 1d 86 40 73 28 e3 88 Data Ascii: {6A}ciz]0CK2DM/nE$6K'?*EW,?/sx3]E-Qq[~Zsh3#c1r.w^O\,Up.oF098er;V7gs,\3r&1R]}qKHkcmg+37Aav=<WleK<~uIK@s(
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: e6 74 b3 ba 76 4d 6d 3c ec 64 0f 60 6d bd bc 6c 8e 07 4c fb b3 24 d3 73 de 77 90 e3 71 f1 ab 7b ab 78 ad 61 b1 b3 86 da 3d a2 7b 19 a3 92 16 b6 48 6d 6e e9 2c 79 22 f7 47 7b 09 65 99 78 8f e2 90 03 c8 5f 3e 33 1f c6 fc 91 b4 da 61 ec 88 35 77 6d ad 54 28 b6 a8 8a 2e 1b 98 8f 0b 9f e3 38 fc 55 dd ae 66 c0 dc b2 e3 2f 96 65 bc bc a7 0d 8c 6f 94 af f2 37 2e a9 03 ee 41 0e d4 40 ad c8 9a 80 51 3d 0d 51 a2 06 80 38 ad c9 d2 6d 5e e0 55 35 e3 d6 ad bc ca b4 b1 b6 97 70 e4 2c ce 77 c4 f3 58 cb 81 e5 f3 e3 2e 32 d7 7c 4f 99 e3 f2 be 3f cb 60 87 1d f2 5e 53 01 3e 47 92 70 de 73 16 73 e3 17 82 33 d1 65 3e 1c 66 58 dc 97 c5 4f 31 40 47 c6 9f 36 6e 9f c2 3e 69 b5 9e c7 e3 b7 9e 73 2d b1 f8 57 e7 3b e8 71 5f 05 72 cd 75 97 c2 5f 1f 63 2d ad 7e 2f 7c 7e b0 c7 e3 fc 77 Data Ascii: tvMm<d`mlL$swq{xa={Hmn,y"G{ex_>3a5wmT(.8Uf/eo7.A@Q=Q8m^U5p,wX.2\|O?`^S>Gpss3e>fXO1@G6n>is-W;q_ru_c-~/\|~w
2024-12-12 18:57:26 UTC	16384	IN	Data Raw: a3 21 51 a2 ea df 0a cb 60 2f 79 09 a2 c1 00 63 ab 1f 1a 27 68 a6 b6 86 b9 c9 c8 fa 50 9d ff 00 95 67 48 49 26 59 dc 93 e3 ad 12 46 95 a0 b5 25 cf ed 0f e9 ff 00 c1 01 de 99 af a7 4a de 48 28 bf 59 ee 34 ef 5e eb e6 f0 ac 13 9c c5 59 59 d4 dd 99 a2 90 47 a8 fc a9 b7 5a 32 d6 f2 f8 9b 6b 5a dc 5f a5 34 51 38 6c 53 bb ee 54 f5 d6 a0 f5 64 8f 19 b1 90 6c c8 7e b1 87 be 9f 0b da b8 0e 5b 39 72 60 7e 6c ce 9f 6f 34 65 25 53 1c ae 8a c0 1e cd 6a c9 c1 94 48 b8 62 3f 52 29 66 1b 54 c9 23 58 28 3e 26 9b 0a 78 cf a0 66 5c 95 b0 f3 24 b0 b6 eb 0f cc 52 e4 f1 b9 58 fc 84 06 d2 3e 26 69 f4 fd 25 3a 9d 7c 45 70 dc 82 e7 e3 60 f1 f1 64 ed e5 8c c0 38 92 17 06 ea 87 4d 09 b6 b5 ee a1 c5 ab 61 c9 ee 09 e4 f7 af b5 f9 78 d7 d5 8d b3 26 60 d3 61 87 16 1e 98 00 69 5c 3f b8 Data Ascii: !Q`/yc'hPgHI&YF%JH(Y4^YYGZ2kZ_4Q8lSTdl~[9r`~lo4e%SjHb?R)fT#X(>&xf\$RX>&i%:\|Ep`d8Max&`ai\?
2024-12-12 18:57:26 UTC	16320	IN	Data Raw: 7e 55 ed f3 61 ff 00 ee a6 20 bf fe dd 9d 5a 81 42 de 3a d1 b8 14 6e a2 89 da 08 ab 81 ba e3 a1 ad 54 11 db 5a b3 0e dd 28 ed 6e dd 2b 37 37 25 82 a2 42 ce 8c 4f 7b 69 53 e4 e7 ca 72 23 85 cc 78 ca 40 b2 a5 fb 5e b1 61 11 81 b4 7e ef 4f 00 2f 48 48 17 d2 a1 f3 0d 00 b8 bd 44 1a d6 20 74 d4 52 58 af d3 e3 5a 20 60 74 36 a9 cb 2e c1 b7 cb a7 5a 94 5f 70 b7 42 29 db d3 bb c6 da d9 46 b4 ad 3b 88 b1 32 24 b4 bb ba 6a 74 d6 95 d6 ce 92 28 74 70 3a 83 f1 a1 70 35 e9 4c c4 68 35 b5 e9 76 8f ca 85 96 e7 c0 57 99 48 23 b1 ae 95 d2 d5 a6 ba 57 71 7f 0a 62 c4 93 b8 dc 9a 04 92 75 b7 e9 ac 1d 76 17 5b e9 e1 5e 9c 4c 0e 44 88 09 1b ae ca 2a 46 49 09 2d 7b af cc f8 d2 cd 90 83 71 e8 08 3d 3c 2f 51 6c 8c a8 d3 7f 7f 0e d4 cc 18 9c a9 c1 10 24 67 cd 7b 58 69 e1 5c 8f 3b Data Ascii: ~Ua ZB:nTZ(n+77%BO{iSr#x@^a~O/HHD tRXZ `t6.Z_pB)F;2$jt(tp:p5Lh5vWH#Wqbuv[^LD*FI-{q=</Ql$g{Xi\;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49757	104.18.24.111	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	397	OUT	GET /v2kisuUII5WA-HR5P71C6bUydvMwfMPJVUj8XMXHj3S_hHFVlFTAc9kA HTTP/1.1 Host: memorizematch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:26 UTC	637	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:25 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private, must-revalidate, max-age=21600 etag: W/"9680eb7d4ceda26e2861c7943624a4c93606ddffce8b754641f29748c0f0b6d7" strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding, Accept-Language x-buildname: hoothoot x-buildnumber: 1553448542 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8f0ff0a8fa207c94-EWR
2024-12-12 18:57:26 UTC	732	IN	Data Raw: 37 63 66 34 0d 0a 21 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 69 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 6e 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 72 2e 6f 28 6e 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 7d 29 7d 2c Data Ascii: 7cf4!(function(n){var t={};function r(i){if(t[i])return t[i].exports;var e=t[i]={i:i,l:!1,exports:{}};return n[i].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.m=n,r.c=t,r.d=function(n,t,i){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:i})},
2024-12-12 18:57:26 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 74 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 29 28 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 22 5f 72 65 73 65 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: tion(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s=0)})([function(n,t,r){"use strict";r.r(t),r.d(t,"_reset",(function(){re
2024-12-12 18:57:26 UTC	1369	IN	Data Raw: 31 30 2c 74 6e 3a 30 2c 72 6e 3a 30 2c 65 6e 3a 30 2c 6f 6e 3a 74 72 75 65 2c 75 6e 3a 22 22 2c 61 6e 3a 22 22 2c 63 6e 3a 22 72 22 2c 73 6e 3a 22 74 72 22 2c 64 6e 3a 22 73 22 2c 68 6e 3a 22 74 22 2c 76 6e 3a 22 65 22 2c 6c 6e 3a 22 61 22 2c 6d 6e 3a 31 30 2c 77 6e 3a 22 70 69 6e 67 22 2c 70 6e 3a 22 68 74 74 70 73 3a 2f 2f 65 61 67 65 72 6b 6e 69 67 68 74 2e 63 6f 6d 2f 66 32 38 31 35 62 66 33 33 63 36 64 63 38 2f 33 36 30 32 31 63 66 33 30 36 33 36 31 33 64 31 36 36 34 63 30 65 62 33 36 63 36 62 37 61 33 38 65 61 37 65 66 32 22 2c 67 6e 3a 22 68 74 74 70 73 3a 2f 2f 65 61 67 65 72 6b 6e 69 67 68 74 2e 63 6f 6d 2f 66 39 38 31 35 62 66 33 33 63 36 64 63 38 2f 33 36 30 32 31 63 66 33 30 36 33 36 31 33 64 31 36 36 34 63 30 65 62 33 36 63 36 62 37 61 33 38 Data Ascii: 10,tn:0,rn:0,en:0,on:true,un:"",an:"",cn:"r",sn:"tr",dn:"s",hn:"t",vn:"e",ln:"a",mn:10,wn:"ping",pn:"https://eagerknight.com/f2815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2",gn:"https://eagerknight.com/f9815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38
2024-12-12 18:57:26 UTC	1369	IN	Data Raw: 65 6c 62 3f 31 3a 32 3a 30 7d 2c 72 2e 68 61 73 41 64 42 6c 6f 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 62 6c 7c 7c 74 68 69 73 2e 61 64 62 73 3e 3d 63 2e 59 7d 2c 72 2e 68 61 73 44 69 73 61 62 6c 65 64 41 64 42 6c 6f 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 64 69 73 7c 7c 21 74 68 69 73 2e 66 62 6c 26 26 74 68 69 73 2e 64 69 73 73 3e 3d 63 2e 6e 6e 7d 2c 72 2e 62 6c 6f 63 6b 65 72 46 6c 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 69 64 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 7c 6e 7d 29 2c 30 29 7c 7c 30 7d 2c 72 2e 64 69 73 61 62 6c 65 64 46 6c 61 67 73 3d 66 75 6e 63 Data Ascii: elb?1:2:0},r.hasAdBlocker=function(){return this.fbl\|\|this.adbs>=c.Y},r.hasDisabledAdBlocker=function(){return this.fdis\|\|!this.fbl&&this.diss>=c.nn},r.blockerFlags=function(){return this.bids.reduce((function(n,t){return t\|n}),0)\|\|0},r.disabledFlags=func
2024-12-12 18:57:26 UTC	1369	IN	Data Raw: 65 62 63 61 63 68 65 3d 22 77 65 62 63 61 63 68 65 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 22 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 74 68 69 73 2e 69 4f 53 3d 2d 31 21 3d 3d 67 2e 69 6e 64 65 78 4f 66 28 22 69 50 68 6f 6e 65 22 29 7c 7c 2d 31 21 3d 3d 67 2e 69 6e 64 65 78 4f 66 28 22 69 50 61 64 22 29 29 7d 76 61 72 20 74 2c 72 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 72 2e 69 73 43 68 72 6f 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 72 6f 6d 65 7d 2c 72 2e 69 73 53 61 66 61 72 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 61 66 61 72 69 7d 2c 72 2e 69 73 46 69 72 65 66 6f 78 3d 66 75 6e 63 74 Data Ascii: ebcache="webcache.googleusercontent.com"===window.location.hostname,this.iOS=-1!==g.indexOf("iPhone")\|\|-1!==g.indexOf("iPad"))}var t,r=n.prototype;return r.isChrome=function(){return this.chrome},r.isSafari=function(){return this.safari},r.isFirefox=funct
2024-12-12 18:57:26 UTC	1369	IN	Data Raw: 7c 72 3d 3d 3d 6e 29 74 72 79 7b 6f 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 72 2c 76 61 6c 75 65 3a 79 28 69 29 7d 29 7d 63 61 74 63 68 28 6e 29 7b 7d 74 28 6f 29 7d 29 29 3b 69 66 28 50 26 26 21 69 2e 73 79 6e 63 29 7b 69 66 28 21 69 2e 64 6f 6d 61 69 6e 26 26 6e 75 6c 6c 21 3d 3d 69 2e 64 6f 6d 61 69 6e 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 65 26 26 28 69 2e 64 6f 6d 61 69 6e 3d 65 29 7d 72 65 74 75 72 6e 20 69 2e 64 6f 6d 61 69 6e 26 26 22 2e 22 3d 3d 3d 69 2e 64 6f 6d 61 69 6e 5b 30 5d 26 26 28 69 2e 64 6f 6d 61 69 6e 3d 69 2e 64 6f 6d 61 69 6e 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 2c 21 74 7c 7c 69 2e 6d 61 78 41 67 65 3c 30 3f 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 6f 6d Data Ascii: \|r===n)try{o.push({name:r,value:y(i)})}catch(n){}t(o)}));if(P&&!i.sync){if(!i.domain&&null!==i.domain){var e=window.location.hostname;e&&(i.domain=e)}return i.domain&&"."===i.domain[0]&&(i.domain=i.domain.substring(1)),!t\|\|i.maxAge<0?i.hasOwnProperty("dom
2024-12-12 18:57:26 UTC	1369	IN	Data Raw: 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 72 29 3b 72 65 74 75 72 6e 20 74 26 26 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 26 26 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 5f 28 6e 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 2c 65 3d 5f 28 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 7d 29 29 2c 7b 67 65 74 48 61 73 68 56 61 72 69 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 21 31 3b 72 65 74 75 72 6e 20 43 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 72 65 74 Data Ascii: ).toString().substring(1),r);return t&&f(window.addEventListener)&&window.addEventListener("popstate",(function(){i=_(n.search.substring(1)),e=_(n.hash.substring(1))})),{getHashVariable:function(n){return(function(n,t){var r=!1;return C((function(n,i){ret
2024-12-12 18:57:26 UTC	1369	IN	Data Raw: 6f 6e 20 59 28 6e 29 7b 72 65 74 75 72 6e 20 5a 28 6e 2c 71 2c 4c 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 57 29 72 65 74 75 72 6e 20 5a 28 6e 2c 48 2c 4c 29 3b 74 68 72 6f 77 20 74 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 5b 4e 5d 26 26 28 24 28 4e 2c 6e 75 6c 6c 2c 7b 64 6f 6d 61 69 6e 3a 48 7d 29 2c 7a 5b 4e 5d 3d 21 31 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 6e 28 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 7b 73 6f 75 72 63 65 3a 21 30 2c 6d 65 64 69 75 6d 3a 21 30 2c 6e 61 6d 65 3a 21 30 2c 63 61 6d 70 61 69 67 6e 3a 21 30 2c 63 6f Data Ascii: on Y(n){return Z(n,q,L).catch((function(t){if(W)return Z(n,H,L);throw t})).then((function(){z[N]&&($(N,null,{domain:H}),z[N]=!1)}))}function nn(){var n=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t={source:!0,medium:!0,name:!0,campaign:!0,co
2024-12-12 18:57:26 UTC	1369	IN	Data Raw: 6f 3d 65 2e 63 6f 6e 6e 65 63 74 53 74 61 72 74 2c 75 3d 65 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 61 3d 65 2e 63 6f 6e 6e 65 63 74 45 6e 64 2c 63 3d 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3b 72 65 74 75 72 6e 7b 64 6e 73 3a 75 6e 28 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 2d 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 29 2c 74 72 61 6e 73 66 65 72 53 69 7a 65 3a 75 6e 28 65 2e 74 72 61 6e 73 66 65 72 53 69 7a 65 29 2c 65 6e 63 6f 64 65 64 53 69 7a 65 3a 75 6e 28 65 2e 65 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 64 75 72 61 74 69 6f 6e 3a 75 6e 28 65 2e 64 75 72 61 74 69 6f 6e 29 2c 63 6f 6e 6e 65 63 74 3a 75 6e 28 61 2d 6f 3e 30 26 26 75 2d 6f 29 2c 72 65 71 75 65 73 74 3a 75 6e 28 63 2d 75 29 2c 72 65 73 70 6f 6e Data Ascii: o=e.connectStart,u=e.requestStart,a=e.connectEnd,c=e.responseStart;return{dns:un(e.domainLookupEnd-e.domainLookupStart),transferSize:un(e.transferSize),encodedSize:un(e.encodedBodySize),duration:un(e.duration),connect:un(a-o>0&&u-o),request:un(c-u),respon
2024-12-12 18:57:26 UTC	1369	IN	Data Raw: 29 2c 77 6e 3d 5b 22 6c 69 76 65 22 2c 68 6e 5d 2e 6a 6f 69 6e 28 22 2d 22 29 2c 70 6e 3d 5b 76 6e 2c 68 6e 5d 2e 6a 6f 69 6e 28 22 2d 22 29 2c 67 6e 3d 5b 76 6e 2c 22 6f 70 74 69 6f 6e 73 22 5d 2e 6a 6f 69 6e 28 22 2d 22 29 2c 62 6e 3d 5b 76 6e 2c 22 61 6c 6c 22 2c 22 67 72 6f 75 70 73 22 5d 2e 6a 6f 69 6e 28 22 2d 22 29 3b 66 75 6e 63 74 69 6f 6e 20 79 6e 28 29 7b 72 65 74 75 72 6e 21 21 54 28 6c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 6e 28 29 7b 72 65 74 75 72 6e 21 21 54 28 6d 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 50 6e 28 29 7b 72 65 74 75 72 6e 20 49 28 29 26 26 54 28 77 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 24 6e 28 29 7b 72 65 74 75 72 6e 20 54 28 70 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6e 28 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 5b 5d 2c 69 3d Data Ascii: ),wn=["live",hn].join("-"),pn=[vn,hn].join("-"),gn=[vn,"options"].join("-"),bn=[vn,"all","groups"].join("-");function yn(){return!!T(ln)}function kn(){return!!T(mn)}function Pn(){return I()&&T(wn)}function $n(){return T(pn)}function _n(n){var t=[],r=[],i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49754	18.161.111.91	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:25 UTC	365	OUT	GET /c/hotjar-1657353.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:26 UTC	640	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 12 Dec 2024 18:57:23 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/6a86b37509a032b2df5809cab9d2f2a8 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 733ea595c2dc45be54d2c763076c592e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P4 X-Amz-Cf-Id: Afh8Qdm2oA0kZ-4w7s4_lwXZbCcm2DfNl4ehn0pvYmXImYm_ip036w== Age: 3
2024-12-12 18:57:26 UTC	13136	IN	Data Raw: 33 33 34 38 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 36 35 37 33 35 33 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 37 2e 39 39 39 39 39 39 39 39 35 37 38 39 31 35 33 65 2d 39 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 Data Ascii: 3348window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1657353,"rec_value":7.999999995789153e-9,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console
2024-12-12 18:57:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49761	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:26 UTC	519	OUT	GET /thumbs/2024/11/11/033346/87633082/inventionsbig_(1).jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
2024-12-12 18:57:27 UTC	371	IN	HTTP/1.1 200 OK x-amz-id-2: Y9MM1ezQxtkE0SxdQb5zTE9skeh+m5lvWtYuCv8kXtjO/ugCGOZwBpn4WU5Vo5KWJYS7R4T7uBo= x-amz-request-id: JC8PDFD95PTKRD3H Content-Type: image/jpeg Server: AmazonS3 Age: 2672621 Date: Thu, 12 Dec 2024 18:57:27 GMT Last-Modified: Mon, 11 Nov 2024 20:33:47 GMT X-LLID: 21c5564e2ad469072808897965e950c4 Content-Length: 107899 Connection: close
2024-12-12 18:57:27 UTC	16013	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 08 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 c6 4c 85 6a a0 60 22 06 92 00 c4 03 20 8c Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwt"4Lj`"
2024-12-12 18:57:27 UTC	16384	IN	Data Raw: 7c 23 be 72 d9 b3 7d c6 f9 39 e2 e1 84 6d 8c 49 04 e0 3c 94 61 1e bc 0c 8c bc 40 dd 19 94 a6 c1 b8 92 bd 29 32 f4 1c 25 ed 59 f8 b6 57 00 30 39 a6 42 86 3e 44 c6 84 6d 9a 9d 54 4e a1 01 b7 ee b6 e1 0e 9d 51 95 ac 98 0e 45 20 75 0c 2e 55 49 62 c6 ae ca 85 ce d8 47 d3 3f 38 fa dd fe 6a 67 5a a8 94 64 97 c4 9d b5 2d 21 f3 50 77 5d 73 48 db c5 83 ff 00 24 99 a3 c1 ab 14 99 a8 da 94 d9 f0 bb ca f1 96 6f 08 f7 d1 b7 6f 0d cf 9a ac 2b 5f c2 d5 a3 4b a8 b3 68 7a 7c cd e2 89 26 0b 46 38 fc 48 82 0a 9a 6c 49 e2 b4 77 1a 78 4a 30 5f a7 a9 57 4b 7b 6d e2 dc ac 78 f8 a6 e8 ca 08 89 36 b0 a8 21 89 3c 2a 46 5e d6 21 b5 a6 43 4d 7c 1f fa d7 33 44 1b 0d 54 64 91 a0 f0 be d9 5f 55 1a 84 9a 75 43 e2 96 92 1d 4e b4 eb e1 99 25 b0 97 66 9e 1d 56 6a d1 5a a1 14 1a 9e 99 2d 1a Data Ascii: \|#r}9mI<a@)2%YW09B>DmTNQE u.UIbG?8jgZd-!Pw]sH$oo+_Khz\|&F8HlIwxJ0_WK{mx6!<*F^!CM\|3DTd_UuCN%fVjZ-
2024-12-12 18:57:27 UTC	16384	IN	Data Raw: a7 47 b3 72 d3 48 d4 7a d0 4e 66 9f 4a d3 e3 ac 67 b5 36 ab 7c dd b4 58 22 73 d8 66 fc 7b 2f 55 86 46 49 c8 b8 ab 82 2b da 33 32 92 60 8a 5f b5 a1 9e 32 70 58 b2 3b 08 dc b4 6a 5a 4b 0e 3b 06 b4 df d1 b0 e4 f7 32 b0 46 05 eb 54 60 71 74 e8 22 1d 5c 89 a4 50 0b ac f9 d7 df 3a a7 16 6d bd de c7 6e d2 58 d8 e5 cb 0e 38 b8 a9 a8 ca c4 2b c7 61 8e c3 04 9b 91 b9 95 47 b4 b6 40 ed 92 bb c8 fb 0d 3e 21 0c d9 35 84 6b 32 57 ce 97 fd 78 47 d1 a6 4d 9a bf ee da 8f f0 61 fd 54 c9 fb 71 cb 47 76 fa 23 34 39 7a 37 10 e5 2e 3e 68 83 9a bc d1 ac 05 4d 82 31 bd fe 1a 44 bc 25 61 92 54 90 a8 95 75 08 4a bf 3f 80 c8 64 e2 c0 e5 7f 10 94 8d 55 8e aa d6 dd b3 8c 93 43 32 89 07 17 2a 72 33 b1 cd 36 d8 86 78 d8 8d 4e b7 10 73 58 d5 16 6f 42 48 c3 0f bf c1 5b 89 04 50 d6 03 d3 Data Ascii: GrHzNfJg6\|X"sf{/UFI+32`_2pX;jZK;2FT`qt"\P:mnX8+aG@>!5k2WxGMaTqGv#49z7.>hM1D%aTuJ?dUC2*r36xNsXoBH[P
2024-12-12 18:57:27 UTC	15226	IN	Data Raw: ee 5a 4b 4c 8c e4 5b 45 c9 0b cd 37 a6 34 89 00 dd ac 14 02 ec ea 14 18 82 66 e9 7c a4 98 e9 b8 dd 25 e2 68 b2 c1 1a c9 10 27 8a 32 2d 33 6a 90 70 8a 45 38 05 ed 51 7c c7 d4 b3 f4 19 a7 56 d0 92 14 13 59 ae 90 33 57 b4 48 ac 1e 75 60 56 0e 5d 54 70 58 b8 7c 10 d9 a8 2b a0 f3 30 55 c6 85 74 5c 50 a1 d5 7a bc 2e 0a e2 84 97 45 62 66 ba 41 61 ea cf 21 44 77 bc 54 57 fb eb 48 27 f9 d4 77 0f e7 51 df ef 27 93 de 50 46 49 e5 0e 6d d3 61 f0 d6 e7 05 15 fe 25 44 89 2c ea b4 87 f8 a8 ce f1 4e 27 bf 51 47 50 41 04 2f 57 0b 97 14 28 ff 00 98 4f 21 45 3e 2a 31 51 07 80 57 1a 02 19 55 c9 38 3c 4c 39 a2 5f 0c d0 0b a3 80 b2 16 99 12 19 38 5e 14 9c 6c 59 7b c6 33 c9 44 da 63 40 10 a2 b6 52 95 28 73 41 cc 70 c0 cc 29 bd e6 72 6c ef 90 9a d2 1e 25 45 a4 3d 46 89 53 99 08 Data Ascii: ZKL[E74f\|%h'2-3jpE8Q\|VY3WHu`V]TpX\|+0Ut\Pz.EbfAa!DwTWH'wQ'PFIma%D,N'QGPA/W(O!E>*1QWU8<L9_8^lY{3Dc@R(sAp)rl%E=FS
2024-12-12 18:57:27 UTC	1079	IN	Data Raw: 13 8c 95 2c 4d 13 3f 91 28 1c 65 8a a8 d5 e3 c2 46 d9 59 2a 80 b5 99 78 be 18 c4 83 58 62 ef f2 91 51 5a 82 03 3a 32 94 c8 c6 e9 11 8c 7b 35 5a 3d 41 db 0a 9e 19 bb ca cc 4f 19 f0 dc d7 8a 7c 5d 79 7c 34 43 52 bf 01 c6 21 cc a7 a5 cd 5f 4e 05 35 41 ac a1 c2 44 dd 5f 3d a0 38 9f 08 10 65 fb cc c0 2f 8c 2e bf aa 8b 96 20 c9 ec 23 6c f8 f9 f5 99 65 a1 f0 79 12 53 ec 25 ad e2 cd 39 7f ef b0 9a 12 66 54 ca c2 c2 6b 46 d3 1f 99 9a 57 2a 22 fc ae bc c2 38 dd 2e f9 17 0d d2 87 0b 06 06 b6 39 6d 11 d1 ec a2 97 8b 85 74 1c dc 0b 15 75 c3 28 6c 0d 99 38 ee 3b 1a ef f1 23 d1 30 35 f6 88 bd 83 a5 97 c0 ad 18 f6 b5 c5 a9 15 19 19 85 0f 67 43 04 17 a8 de 47 ec a2 02 99 d2 a8 e5 34 f4 25 ed 6a 80 ba 12 01 32 81 6a be 88 fe 26 ac 96 14 67 14 c2 c7 08 a5 80 07 81 07 44 82 Data Ascii: ,M?(eFYxXbQZ:2{5Z=AO\|]y\|4CR!_N5AD_=8e/. #leyS%9fTkFW"8.9mtu(l8;#05gCG4%j2j&gD
2024-12-12 18:57:27 UTC	16384	IN	Data Raw: 4c b8 85 43 63 e2 01 02 ae e5 dd 96 06 51 bd e8 2d 0a 52 3e 29 07 17 71 6a 48 4a a2 c2 13 cd 65 dd ab c9 2c ab 2c 41 bc ed c6 73 46 e6 59 ea 89 08 ba 63 dc 0c 4c c0 a7 28 8e 11 e3 1f 02 38 97 2e fc d4 7c 2c bf 2b f6 1e 57 38 19 73 df 32 fc 0c af 71 7d 4b c4 6e a6 08 1a 87 37 e3 12 e1 2c 80 ee ba 8c d8 89 66 54 e1 57 2e d8 77 58 43 12 67 31 21 97 6a 63 a4 24 a3 be 06 b3 b0 65 26 a5 42 83 81 2b 47 b0 29 4d f1 86 d9 ae 58 f9 36 83 ac cb c8 65 1e 0a 32 ce 53 18 eb 8d 7e 0d ab f8 1d b6 f9 60 67 0b 90 b5 28 06 19 37 5f a3 9c 88 e4 68 db 08 1d 75 50 b6 dc f4 4c 84 6c 6d 1e 84 28 5e c0 01 02 56 2e 85 31 73 fd a1 b5 dd 6c 37 96 21 2b ea 89 db f2 51 c3 6f 04 e2 cd 1d 60 6e c1 f1 d2 88 42 8d d4 bf 4b 8a d0 51 54 86 9b bb 60 f3 2a ce 2b 84 bc 66 0e f2 2a ce df a4 87 Data Ascii: LCcQ-R>)qjHJe,,AsFYcL(8.\|,+W8s2q}Kn7,fTW.wXCg1!jc$e&B+G)MX6e2S~`g(7_huPLlm(^V.1sl7!+Qo`nBKQT`+f
2024-12-12 18:57:27 UTC	16384	IN	Data Raw: 06 b4 ab 2c 84 33 ab 23 44 b2 02 2f be 53 33 34 6d 02 3e d6 5e a2 0e 19 60 0b 0b 6e a1 39 c3 b3 1d 29 61 8b e1 23 58 8f 4b 57 5f 13 31 2c 7c 32 b3 ed bf b8 c0 1f 02 dd b5 15 8b 6b a4 74 90 15 fc 8d 36 f7 2f 1c 45 68 9c 15 f3 6c 85 55 e8 ba 88 55 0c 5c 5c b7 0e 24 f7 87 eb 50 82 4a 75 a0 f9 af fc 57 8d 8f b8 bc 30 d1 04 8d cf c7 5f 8d a0 85 83 b4 89 61 29 ba f4 42 9a f3 02 50 55 cc fc b9 04 7e 1a 90 d8 79 86 dc af 0b 06 70 35 19 5a 34 42 6a af 73 2f 3b ac 42 64 d4 f4 66 23 66 8d 08 9c 24 a5 cb 73 22 66 9c 5b 2a 3a 25 31 ca d0 1a 46 5b 09 73 06 31 e5 a2 c8 ec 23 12 3b 8f 82 31 f1 58 fc 18 4a d9 62 6c 0f 5c 3b 41 0c 37 96 26 2a 95 72 80 29 d6 69 8a 23 d3 d6 36 31 d4 69 b2 dc 50 03 ab 83 67 e3 11 9f 42 b9 4f 70 88 eb 83 77 d0 80 85 8b ae 81 cb 06 ef 5d 46 06 Data Ascii: ,3#D/S34m>^`n9)a#XKW_1,\|2kt6/EhlUU\\$PJuW0_a)BPU~yp5Z4Bjs/;Bdf#f$s"f[:%1F[s1#;1XJbl\;A7&r)i#61iPgBOpw]F
2024-12-12 18:57:27 UTC	10045	IN	Data Raw: 6a 62 e9 09 ac 83 29 27 98 cd 9b 62 fb 17 34 04 55 5c 18 82 81 15 b7 99 0d 88 c0 11 c4 7e 8f 1e 76 6a 01 5a f6 1d 8c 1f 86 e7 c6 da 68 10 76 a8 f8 f2 f4 e7 46 44 98 7f 2e 71 64 26 b5 8e 01 81 71 96 5b 34 a4 9b 8d 87 a4 00 ff 00 aa 20 c6 8f 97 4e 33 60 f0 61 38 c1 a9 8d e9 75 2d 8d e1 f1 fa aa 2d c2 f0 67 e4 ab ce 40 87 06 20 94 5b 69 85 ba 64 7d 40 f3 b7 33 a6 ea c6 5e a3 c3 04 70 7e 4b 70 62 73 ee b8 bc 66 23 b2 a5 4c 2b a8 6a 3e ce a0 51 06 60 cb f1 11 2a e1 40 41 98 69 72 19 c1 8f 8c 31 81 42 f1 00 8c a1 a6 f8 de 03 60 7b f5 00 12 80 ed 04 57 29 c4 6c 8c c3 99 a6 15 20 f9 c8 8b 97 20 35 a8 cc 6f af 92 09 95 33 90 50 8b 9b 03 c4 d2 49 98 b1 80 04 61 42 84 5d f2 52 85 d8 6e 7b c6 0a 41 0c 2c 4f 0b 0b 7e c1 1c fe 5e 95 4d 96 3c 4c 4e 99 b3 96 e7 c3 1f ee Data Ascii: jb)'b4U\~vjZhvFD.qd&q[4 N3`a8u--g@ [id}@3^p~Kpbsf#L+j>Q`*@Air1B`{W)l 5o3PIaB]Rn{A,O~^M<LN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49764	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:27 UTC	490	OUT	GET /img/desktop/modalClose.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
2024-12-12 18:57:27 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: hA+t+/mKhWN+LaJoFPPtq+wutSN7MtLuS2UMtWK6txK87VDrCNRCm6QUbybhMufe7FXOJhJaE3E= x-amz-request-id: AT2YT3QBY1RQSWJN Content-Type: image/png Server: AmazonS3 X-LLID: 91d0027156b27c6dcb1f38be94b6cc9f Age: 24471243 Date: Thu, 12 Dec 2024 18:57:27 GMT Last-Modified: Wed, 02 Aug 2023 20:44:36 GMT Content-Length: 1247 Connection: close
2024-12-12 18:57:27 UTC	1247	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 0f 08 06 00 00 00 ed 73 4f 2f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRsO/tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49766	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:27 UTC	517	OUT	GET /thumbs/2024/12/09/024708/87644924/pawnshops-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
2024-12-12 18:57:28 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: jRlENXAbMGShBNBAqpsHnG+dtiMjnL+DPDMMzJpxa2pTwN2cRtV1s1lfWXXMKtOM3NvYSjVFSQc= x-amz-request-id: TR571DRS9R7CTX1B Content-Type: image/jpeg Server: AmazonS3 X-LLID: e1748bdb55012baed7faf429cba73107 Age: 256220 Date: Thu, 12 Dec 2024 18:57:28 GMT Last-Modified: Mon, 09 Dec 2024 19:47:09 GMT Content-Length: 43576 Connection: close
2024-12-12 18:57:28 UTC	5392	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 0a 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RD
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: d4 8d 8e 25 72 8a 79 9b e7 bc 62 fe a8 e4 4f 02 ab 99 1d 3b 9b 75 23 0e e2 cb 8a c0 f4 ce f5 c3 bf d7 63 0c b2 36 f4 c8 d5 33 14 8d bd 2d e1 24 2f a7 38 de e2 88 50 b0 83 39 3a a5 02 6d 90 89 26 02 62 a0 00 02 c0 6d 88 00 42 a0 31 54 09 22 42 43 01 83 15 42 a0 45 91 24 c8 b2 80 04 30 1d 4c d7 cd 05 17 84 4a e6 cb 32 24 a7 99 13 b4 71 a0 ba c3 f1 14 97 58 55 91 2f a4 8e bd bc 49 c9 0a cc 2a 6c 5b 76 d1 e4 eb c5 7b 78 f4 e7 cb 02 0d 1a af 59 71 33 34 59 5b 8e bf b6 bf 53 2f c3 7f 34 4a 7d d5 fa a8 7e 1a f9 a4 5f ed bf d4 cb f9 1f cd 12 8f 75 fe aa 1f 86 be 69 1d e7 f0 71 eb fe df f4 e5 6d fc cc b9 94 6d fc cf b8 be 45 8b 49 e4 67 b9 93 2f 65 13 c8 a9 19 23 99 b6 d3 c8 c7 15 89 aa db c8 8a d1 1c c9 c7 89 08 66 38 66 ca 91 37 e5 00 7e 51 11 42 cd 80 2c d8 00 Data Ascii: %rybO;u#c63-$/8P9:m&bmB1T"BCBE$0LJ2$qXU/I*l[v{xYq34Y[S/4J}~_uiqmmEIg/e#f8f7~QB,
2024-12-12 18:57:28 UTC	2440	IN	Data Raw: 41 c1 aa 46 5c 8c d2 e8 fa 5b 4a 4d c1 fd 5e 26 93 5c cd b6 dd dc bb 27 27 8c 71 ef 3b 1b 2b 95 b9 e8 e5 19 2f 81 4e df 64 e3 75 c9 cb 4c 29 84 5b c5 92 dd e8 b6 e3 76 ba 5c 1e 48 88 dd 63 a7 db db d6 56 6a e5 8d 57 06 73 37 3b 95 25 5b 92 a5 1f 8a 07 6a c6 f6 13 5e bc a4 a3 6e 94 4b 89 c2 ea 9b 9d a5 da fa 70 ad c7 f5 8a d6 c8 e7 ee 34 ea d5 0f 2b c8 a4 83 6d 60 48 39 5b a7 51 12 8c 2a aa dd 08 d0 2e 02 51 55 1c 63 52 f8 c4 21 42 05 f1 42 8c 49 d2 80 55 6f a8 38 ba 33 a5 6f 72 ae db 6d 1e 76 59 9d 3d 8d 55 a7 52 75 3c ac be 1a b6 ed e3 da 47 72 f4 e0 4f 67 1a aa 99 b7 32 c5 b1 06 37 e2 91 ba c2 d3 1a 98 6d aa b3 a7 15 a6 05 a9 14 5d 75 75 66 fb 30 fb 93 99 7a 58 9a e3 ba f0 28 23 9b b7 57 fe 2a a5 1f 56 ea 8a 3a 9f e3 a2 e3 8e 67 26 c5 f7 6e e6 b3 6b ea Data Ascii: AF\[JM^&\''q;+/NduL)[v\HcVjWs7;%[j^nKp4+m`H9[Q.QUcR!BBIUo83ormvY=URu<GrOg27m]uuf0zX(#WV:g&nk
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 7d 42 6a 10 4d f3 47 2e e4 c6 b9 f6 e4 75 a8 a5 e9 b8 aa 2c ce 6c 4e af 5b 84 b4 a9 7d 55 43 95 12 66 72 eb c5 da b5 22 71 20 89 c1 99 76 58 88 b7 42 55 20 cd 44 4d 62 0f 31 44 4d e2 69 12 66 63 4b 8b a1 97 8b 35 19 a8 5d 55 8b ee 38 b7 0e dd cf 2b ee 38 77 47 49 15 db cc d2 f3 f8 19 61 99 a7 8f c0 cc 28 8e 68 c5 77 ce cd 91 78 a3 1d ef 3b 2b 28 22 71 cc 82 25 1c c2 ad 35 70 5d c6 53 57 05 dc 61 43 b3 3b a9 e8 8b 95 33 a0 e7 b5 bb 61 29 5c 8d 13 c9 9d 3e 8b ba b5 b7 b9 73 d6 6e 92 54 c0 ea 4f 7b b7 bb e1 b7 8d 3e d4 4d 33 5e 66 30 72 c9 16 fa 4e 39 a3 a9 b9 bf 61 63 29 d2 4b 84 11 82 7b 8d 6e 8a b4 ed 35 8c ea 1d 3a e5 cb 7b 98 4a ce 33 c5 24 7b 68 6f 3d 2b 5e a6 ea 90 92 cd 54 f0 b0 6e db ac 5e 97 ce 39 84 9b 93 ac ea df f1 32 e2 5f 2f 4b 3e af d3 e5 27 Data Ascii: }BjMG.u,lN[}UCfr"q vXBU DMb1DMifcK5]U8+8wGIa(hwx;+("q%5p]SWaC;3a)\>snTO{>M3^f0rN9ac)K{n5:{J3${ho=+^Tn^92_/K>'
2024-12-12 18:57:28 UTC	2976	IN	Data Raw: 15 44 41 83 d0 9f 22 0e d4 97 03 64 a5 e3 a0 a3 98 19 14 69 8b 44 94 e9 9c 70 36 a6 81 d1 81 5d a8 42 5e 24 b1 2e 21 04 a0 9d 01 c8 09 88 86 a1 d4 02 a1 98 55 01 47 3c 40 23 0a 04 15 11 40 20 02 a0 25 1c c4 08 0b 18 0c 89 43 00 00 00 00 20 19 11 88 00 06 01 4a 80 4a 82 2a 10 c0 92 41 4d 22 40 90 36 41 19 32 a6 4a 4c 88 02 45 91 42 48 b1 20 02 2d 8d 91 a0 53 8a 26 90 92 26 88 06 56 c9 b6 41 81 11 0c 02 80 12 19 03 00 00 00 00 00 00 02 86 20 00 10 80 02 01 80 00 08 62 01 00 00 00 00 00 08 00 00 00 00 00 00 20 10 c4 02 00 11 50 c0 00 06 31 00 53 a8 ea 44 08 26 99 22 b4 c9 26 15 e9 bd 9d fa c9 fe 14 be 68 9d be ad 79 db de 46 0f 29 41 7d 35 67 0f d9 ae bb c9 fe 14 be 68 9d 3f 75 56 0e 17 63 9c 12 7f b5 92 fa 6b 8f e4 b6 33 0d d5 bf 56 c4 e0 d6 68 a7 6d 73 5a Data Ascii: DA"diDp6]B^$.!UG<@#@ %C JJ*AM"@6A2JLEBH -S&&VA b P1SD&"&hyF)A}5gh?uVck3VhmsZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49767	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:27 UTC	512	OUT	GET /thumbs/2024/12/10/034340/87645737/line-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
2024-12-12 18:57:28 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: GRW/pvX63mZO9xbU7zqr0LIcc/t0seYmME7+cGq/i4AJfnG5Rr/FyfQh1xyZs0lrAQ4bRvrq+Ns= x-amz-request-id: A5XVRM6CJX44R1SV Content-Type: image/jpeg Server: AmazonS3 X-LLID: ac6aad2eedba1dd886e035100932f124 Age: 166427 Date: Thu, 12 Dec 2024 18:57:28 GMT Last-Modified: Tue, 10 Dec 2024 20:43:41 GMT Content-Length: 304252 Connection: close
2024-12-12 18:57:28 UTC	14079	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 91 6c 8d d2 d5 4a c2 4d d2 13 cb 71 91 fb 23 4d 6e fe 8f 71 3f 87 5c bf 47 0a f4 78 24 aa e8 c1 6f e7 37 48 49 54 e5 41 22 67 ea 92 e0 e8 15 3f 14 0d ee fe 6f fb a3 c8 bf 1c 0f 5a 51 c8 eb 33 b1 79 4a 24 19 c1 d9 1a 0a ca 42 ee 57 39 ad a4 76 01 ea e8 f4 cc 4a d4 56 1d ca ac 2f 4c ed 72 23 bc c6 56 0f 59 3a 33 e6 6d b6 1c 74 b6 2e c8 61 bb 8d 65 21 0d 83 d4 8c cd 07 18 10 01 e4 e7 8e bc 90 11 d4 8e 6d 2b 6e 73 0b 63 c5 19 b0 b6 21 e7 37 9b 40 e1 1c ee 01 6d cc 82 d9 cb 83 ec 20 8e 8f 96 b3 7c 8e 91 a2 13 73 bc 5f 03 e7 af ec 4e dc 10 84 c6 7f 7e 67 7c da 27 8d 98 e2 4e 2f 6e fa 72 7b 4a 11 a6 ae f4 39 ab 0b be d9 79 23 6a cd 6e f9 7d 36 b2 e2 c7 4f 5e 82 1e 96 65 e4 e7 b6 1f 0e 54 bc f8 b4 93 91 44 56 d6 dd 2f ae 5a e3 4b 4d ff 00 11 f5 8f 97 99 76 6d 8b Data Ascii: lJMq#Mnq?\Gx$o7HITA"g?oZQ3yJ$BW9vJV/Lr#VY:3mt.ae!m+nsc!7@m \|s_N~g\|'N/nr{J9y#jn}6O^eTDV/ZKMvm
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 8d 53 c5 45 72 63 23 6c a3 9c ac b9 dc ae b5 8b e2 76 6b 27 a2 e5 c1 3e 83 c9 d9 6f a3 78 e9 7b 8d dc b1 5e 2f d7 39 79 d7 06 02 e3 3e de 28 67 ca fa c7 a1 1b 73 d0 e4 b9 72 fb 02 d8 72 52 ff 00 2b f3 b9 27 cc 73 27 2f 43 ab a0 7f 67 f6 3f 38 d2 61 22 71 98 d4 c6 44 72 31 15 30 b0 63 d1 28 c5 2c 55 69 d8 db 5d 1c f7 d7 c7 a1 99 b7 ac ad af 33 a1 d6 fc fa 20 4a a8 22 4b 6e 69 a8 9d 3e 5c 78 f4 ee a8 59 6b 79 b8 9e ee 2f 06 a9 ce 5b a0 b5 1d bb 36 b2 ba f0 94 ee 02 30 6d d4 16 9e 88 e8 d4 ba 80 36 9e 1e b1 c8 74 c6 23 64 32 9a e5 33 42 ca e1 15 8b 85 47 22 a6 8a b6 11 b9 50 4c fc 62 73 03 8d 29 a2 be b7 96 bb 4a b3 30 54 60 a9 eb 50 d4 aa 39 b0 eb 7c 15 46 39 5c c8 eb d3 9b e5 78 25 e9 2b 65 35 f7 93 d9 e9 bf c6 be ed 51 fa 3f 2c 97 b9 dd 17 5c 51 66 dc 6b Data Ascii: SErc#lvk'>ox{^/9y>(gsrrR+'s'/Cg?8a"qDr10c(,Ui]3 J"Kni>\xYky/[60m6t#d23BG"PLbs)J0T`P9\|F9\x%+e5Q?,\Qfk
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 22 9c 10 3f ab 8f a7 f6 a8 63 2f 56 1d c2 74 be be 61 17 05 5d e8 3b 80 0f 2a e3 09 13 44 79 91 84 26 8f a3 be d2 fd 48 f5 60 45 bc 8f 6d 78 26 b4 05 1f 0b c0 26 46 38 74 21 7b 01 7b 01 3d 81 a9 de 20 9e 08 2c 08 b4 22 42 fb a6 82 57 8a 7b f8 12 0e 54 ed e1 11 ca 30 f2 9d 1f 88 63 82 6c 81 79 7a bc ae 7e 85 02 42 f3 2a 57 95 03 8f 12 c8 43 8c 9c 8c 63 79 35 63 e1 3d de bc fa 72 b9 5c ae 53 be e3 e8 51 43 e9 22 29 cb c5 78 28 e3 4d 77 08 3b 9f a9 2b 95 ca e5 1f d2 df a0 1e 8f 1e bf e8 37 8e 07 09 df 7e 51 2b 95 cf d0 85 c2 68 47 ee 7e dc 22 17 3c 2f 35 ca e5 79 af 34 4a 27 fd 72 80 44 7a 7e 8e 09 5e d9 50 44 0a 91 ed 8d 48 f2 e4 61 2b d9 f4 73 38 55 fe e7 ec c3 c2 9c 79 09 e0 3c cd 09 09 91 af 6d 17 fa 48 79 5c 2e 13 5b ca 64 5c 2f 2e 17 92 f2 0b 9e 53 3d Data Ascii: "?c/Vta];Dy&H`Emx&&F8t!{{= ,"BW{T0clyz~BWCcy5c=r\SQC")x(Mw;+7~Q+hG~"</5y4J'rDz~^PDHa+s8Uy<mHy\.[d\/.S=
2024-12-12 18:57:28 UTC	16320	IN	Data Raw: 6f ae 5d 8b 25 2b da e7 d9 7a c6 cb cb 58 df 22 7e ff 00 50 ce 57 80 4c 68 03 84 f2 9e 53 9d c2 2f 4f 3c a3 f6 73 bc 50 77 26 2f 45 18 f2 41 9c 20 17 2b 95 cf d4 94 42 95 ab db f5 f0 20 f1 c8 7c 47 c9 b1 95 e0 53 64 2d 5f 94 53 6c 12 9a fe 51 55 a3 f2 7f b1 c4 36 8f 06 0a e0 c7 ee f8 1b 2e e6 46 b3 96 87 06 22 f2 e4 5c 5e a3 88 a2 df dd 43 d1 42 3d 64 3e 86 27 4c f9 69 78 c1 8a a4 04 53 40 1d 35 aa ad 62 91 80 1e 13 9a bc 97 9f a7 d2 4f b8 4c fb fd 1a ce 53 98 8b 78 31 3b 84 4a 71 2a 37 10 8c a5 64 ec 14 c9 0b 8c 5f 69 bd 53 50 4e fa c4 f5 00 e5 46 38 08 7d 7c 91 3c a6 ae 50 3e 9f 41 f6 2a 4f b0 08 28 c2 b5 f6 2f e0 c1 2f 06 19 b9 12 7a 8b 50 92 89 f0 06 44 24 e5 17 a2 f4 3d 4c 61 11 c2 09 bf 52 7d 79 40 fe 91 2f 80 92 ca a8 78 96 c0 0f 6b 2b 34 1b 2d 68 Data Ascii: o]%+zX"~PWLhS/O<sPw&/EA +B \|GSd-_SlQU6.F"\^CB=d>'LixS@5bOLSx1;Jq7d_iSPNF8}\|<P>AO(//zPD$=LaR}y@/xk+4-h
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 18 7a 7b 8e 9d 67 e4 5f f9 2e 29 cc f8 f5 92 64 5b 9c 92 49 69 53 c1 e6 33 31 d6 ea 5c bc f5 f6 0e af dd 2d 65 a2 ea de c9 12 51 ea 8d eb dd ab d6 96 62 60 ca df bb 24 78 bc 9d 84 cc 35 48 94 71 d7 63 7d d8 82 e3 de 6f 71 62 ba de e6 1f 5b df ba b2 96 0d d9 be b2 89 b8 4b 2f bb af d3 d5 ac c5 39 c6 68 98 1b 18 0d 6f 16 24 c8 5b dd 9f 95 c3 62 33 15 ad 77 ef 5a ec 5d ab a5 f5 26 93 7b 49 d1 bb df e3 4e 91 de ab 4c f8 95 d2 fa 56 3e bd 0d 07 4b a7 b4 7c 8f e9 bd 51 bb b7 ce ad 41 8f d9 fe 74 76 6e 44 6c fd e3 d9 fb 6d 89 20 d8 b2 2e fe 12 49 57 c6 2c 40 c7 6a b0 cd 04 73 76 c5 6b f9 3e aa d4 f4 bc 7e a0 3a e2 a6 2a 6e bd d5 34 db 98 ac 76 72 09 9f 95 b1 92 b9 91 86 ef 5b 6b fb 14 7f e0 d9 cd 7e 7b 76 e0 c2 d4 bd bf 6b 34 a3 9f b9 b0 b1 3b 78 ee dc 86 66 de Data Ascii: z{g_.)d[IiS31\-eQb`$x5Hqc}oqb[K/9ho$[b3wZ]&{INLV>K\|QAtvnDlm .IW,@jsvk>~:*n4vr[k~{vk4;xf
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 23 77 50 b3 91 db b1 2f 1b f7 60 63 16 99 da 3d 9b 9b db f1 fa 9d 8a cd 97 17 7a 18 eb 44 d9 e9 31 a1 8c b8 d7 4c d9 8e 46 8b 7b 6b 6a ab ac e9 9d a7 b8 4f 93 c8 dc 89 f1 d9 33 c5 3d 6a 31 d7 73 2e b8 c8 30 7e c6 36 b4 13 d8 cd 64 33 2d 74 a3 a0 ac 55 a1 b9 e9 f9 c3 82 b5 41 d8 2a ba 94 ba 35 3c b5 7c 9e 2f 0d 02 d8 2a 6c 34 73 1b be 72 d4 7a ce bd 9b 8c d4 b9 9c a1 8e c3 d4 7d 8c 9d 9d ba c5 8c 4e 07 1b d8 06 7b 6e b7 49 90 54 c1 64 73 99 3a 59 26 be ce 51 d1 52 af 73 65 c7 38 dd c6 79 d0 a5 84 82 47 58 d6 1b 8b c5 fc 91 c2 33 1d a7 5d 81 d2 4f 8e 06 0c 87 5f 77 07 64 f5 ab b4 af 99 3d 75 ba e3 bb db a8 20 d3 b2 50 eb d8 bc dc 16 26 cf 6b 13 e2 f6 78 9c fd 5b 62 c5 64 6b 8c 33 31 b9 7d 8d d6 f1 d7 ae 39 87 0d 8e cc ca 1b fc 95 fb 7a 14 3a be c7 64 3b 50 Data Ascii: #wP/`c=zD1LF{kjO3=j1s.0~6d3-tUA5<\|/l4srz}N{nITds:Y&QRse8yGX3]O_wd=u P&kx[bdk31}9z:d;P
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 5c 70 8c b1 d7 1c d1 6a 9c 10 8a 38 1d 7e cd 1c 56 1a 38 cb 6b 51 b1 46 d5 6f 66 69 ea d6 c7 d3 c3 4f 7a d5 6a 99 7f e2 2b e1 b2 10 64 b2 f9 cd 7a f4 d5 a4 93 25 1a f8 cb 16 03 29 99 bb b9 f5 ce 8d 5b b5 3f ec e3 a7 34 9b 58 0f fb 6d c6 58 cb 75 6f 78 f5 9f 70 e0 22 e1 c7 dd f1 4d ff 00 70 71 c2 77 d8 9e 03 a7 60 67 7e 6d 58 7d 63 ac e3 96 37 17 4b 18 26 56 97 32 78 f8 8d f0 26 4c d0 7d ca cc 73 a6 61 0d 99 a5 e2 77 71 e6 f4 c7 f9 3a 5e 02 2f 94 0f 2b 2d 5f 39 bf f1 60 bc b5 3f 8e 17 dd 5a 60 26 f6 d1 88 c2 d9 b0 c7 b6 e3 ae 49 5e dc 97 03 94 b3 c9 34 dd 71 09 97 35 9e d4 69 66 eb 60 37 7e ce ea 2b ba bf cc 8d 7b 3c c9 b6 7e b7 dd cd ab 7b 0e b8 ec a6 f7 b8 32 0d db 3e ec a5 6c 2e 66 1b d0 eb 59 0a 39 0d 61 f7 d8 ca f8 f9 83 a4 c5 d4 c3 33 0e 71 18 f6 b6 Data Ascii: \pj8~V8kQFofiOzj+dz%)[?4XmXuoxp"Mpqw`g~mX}c7K&V2x&L}sawq:^/+-_9`?Z`&I^4q5if`7~+{<~{2>l.fY9a3q
2024-12-12 18:57:28 UTC	16320	IN	Data Raw: 3c 71 ce 35 fc 70 74 ba 85 ab 18 1c f4 59 bc 0a d0 2c 47 3e b7 dd 97 e7 d7 74 cd 57 e6 f7 64 69 fb 1e 91 f2 d7 aa 3b 35 b8 da d0 49 88 0c 6f 84 37 2c 55 17 f0 fa fe 79 b9 fe 8e c7 cb 6a ef 5d 76 46 bf 4b 2f b7 6e f8 b8 b5 bf 90 b6 f0 72 eb dd e1 a3 e7 91 c9 62 dd 04 79 4c 4d 91 90 d9 b0 74 55 de c9 d5 aa 43 b7 fc 8c d7 f0 55 b7 1f 90 1b 86 c9 3e 6e ce db 9e 98 ea 11 9b 4d d5 bc 18 dd 37 1d 3b b0 dd 75 fc bb f5 af 8e 3b 3e 75 bf fd 4d c8 36 bc 7f 14 ff 00 8f 66 53 a2 f0 70 cb 2f 4e e1 a8 b2 f7 5b 5d 82 69 f5 c3 54 d5 a3 49 cb 1d a5 60 f2 31 eb fa 2d 2a b1 57 a5 89 8c 6c bd 95 8c eb fd 83 b8 be 44 f6 6e 63 a7 f4 c6 b2 de 0e 39 04 c0 b7 c5 ad 04 b2 23 20 24 86 ba 06 b8 18 8b 82 8f ee 25 f1 73 27 05 fc 87 3e b5 2b 59 2b 7a 7f c4 9e b2 c0 d2 ca 61 ed cf 6a ed Data Ascii: <q5ptY,G>tWdi;5Io7,Uyj]vFK/nrbyLMtUCU>nM7;u;>uM6fSp/N[]iTI`1-*WlDnc9# $%s'>+Y+zaj
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 4c 73 94 c8 60 c2 12 b1 97 0c 48 b6 d3 61 a5 45 c0 65 65 26 37 29 24 0f 3f 18 3d b2 20 2c 75 23 dd 02 c7 77 4b 57 6b cd 34 8f 3f 17 cb c0 ee ea 91 93 24 19 11 eb f6 e2 32 7a 0e b7 1d 68 65 61 f0 39 79 38 9b ca 19 71 f1 74 73 f9 47 95 04 3d 97 9c 16 45 3b fd bc 75 74 75 6f e7 5e 86 fd 0d 4b d8 dc f7 ed 1f 25 fb 81 fb 55 9f 25 b9 9e cb ce 46 78 f1 11 ba e4 71 d2 b8 df 1c 89 d4 05 36 ac 4e f1 fd ae c7 e4 3b cf b0 73 ed bb 1b 3e 09 20 e5 78 77 63 ac 72 c2 54 19 14 7d 20 8a 3c c7 27 fb 59 cc c5 83 2c cb 06 3c 91 e2 4d 23 15 3f 43 95 55 b8 dc 7c 2b f6 93 b8 b9 1e d3 5e 3b 89 e2 79 46 e5 f9 c9 25 2c b2 b3 e4 0f d3 62 ac 6e 0a ae 84 5b 4a ef 2e 4f 8e e3 f1 f3 38 9e e0 c8 96 4c 49 e5 60 ad 17 ba b6 26 c7 ad 8e b5 fb 7d d9 fc a7 6d 71 fd e9 ce f1 10 64 c5 9b dc 7f Data Ascii: Ls`HaEee&7)$?= ,u#wKWk4?$2zhea9y8qtsG=E;utuo^K%U%Fxq6N;s> xwcrT} <'Y,<M#?CU\|+^;yF%,bn[J.O8LI`&}mqd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49768	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:27 UTC	507	OUT	GET /thumbs/2024/12/10/094405/87645339/sanra.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
2024-12-12 18:57:28 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: kJlsJ5PxfkgqtOLO+x0JvobbPHkGFo10369KedJPh/9CjMmVdDXc5HWEv9Bnfl6q4wAqvLtRFfw= x-amz-request-id: RNHTZ239VQSVPP3V Content-Type: image/jpeg Server: AmazonS3 X-LLID: 067dbef3eadb76bf92f659e338751026 Age: 188003 Date: Thu, 12 Dec 2024 18:57:28 GMT Last-Modified: Tue, 10 Dec 2024 14:44:06 GMT Content-Length: 98409 Connection: close
2024-12-12 18:57:28 UTC	14080	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 0f 03 5d d5 54 c3 a0 f1 09 ab 83 b6 ff 00 95 13 0b a7 4b a2 18 37 ea a6 41 7a a9 95 1f aa 99 05 ea a6 41 fa a8 13 bd 50 a0 f4 c8 05 e9 90 9f 51 01 3a 4d 15 11 e4 9a 89 03 46 e2 8a 86 9f 73 54 10 2e e5 7f a6 e2 05 74 41 82 bd ba 9c 66 06 f6 13 11 26 a1 66 ac 55 36 e2 18 f2 87 d3 1b 41 76 a1 46 93 ee 64 12 5f b2 36 3a 81 c8 8b 5b 9c 25 dd ad b8 9d ff 00 e9 91 50 54 44 28 ad 6f 2e 1a 5d 03 4b c7 c1 55 c1 d8 65 96 d8 39 93 47 e6 1e 21 0c 2c 2c f9 14 4e 74 70 b9 b4 a1 54 59 f2 2b 91 1d bc 52 36 51 42 2b 44 ca e1 71 c4 2e 5d 90 80 b2 13 b9 ed 1a 80 99 4c 2a f9 b4 d2 db 6e b5 97 ea 73 49 a2 96 98 73 0c 76 36 4c 96 64 5a c5 a3 9e ef e6 a6 4c 34 b9 1f 6e 72 36 c4 97 79 80 6e e4 c8 c9 db c4 f8 2f df 11 25 85 a6 9a 25 a9 21 9c 83 9e eb b7 6e 24 d3 c5 58 97 f5 d2 bd Data Ascii: ]TK7AzAPQ:MFsT.tAf&fU6AvFd_6:[%PTD(o.]KUe9G!,,NtpTY+R6QB+Dq.]L*nsIsv6LdZL4nr6yn/%%!n$X
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 9a 87 73 c9 6f 66 05 a0 ed 6a ac 2a 2e ee 2e a5 63 f7 48 75 05 07 26 b6 73 bf ef 32 1e 49 a3 b4 45 75 58 89 27 f2 40 f2 b0 1a a8 43 8a 29 05 c1 65 08 2f 1a ea 88 62 59 05 15 1c ba 09 03 39 a1 75 74 de 8d 25 f2 59 bd 4e 4d 0d 0f 42 12 ac 6a f2 33 34 62 c6 e7 01 e5 0a 0c b4 57 b6 d6 f6 f2 39 cd 12 97 03 40 b2 ac f3 72 97 5e b1 0c 1b 5b bb 41 f8 a9 75 57 74 e3 31 46 fc 34 0f 91 a1 c4 b0 56 a9 84 ca 7c b8 9c 5d d3 76 b9 82 aa e1 7d 99 2e 44 db 1c 2e 52 d2 08 db ac 92 00 08 f8 a8 65 d5 f1 b1 91 6d 6c e3 d1 e0 15 a8 e5 5c 53 de b0 3f ef 0b 7f 83 97 b7 8c 71 eb f8 83 6a c6 90 cf 15 f5 39 f3 cc 7c 9d fa 79 5f 34 ed 84 0e eb e5 7d 9a be af c9 72 6a 42 37 2f 8e fa 7b 41 05 96 4a 04 12 14 80 b3 64 0c 3c b4 eb b4 af 46 88 e5 b8 bb d9 ec af fe e6 27 96 bd a7 a8 5e 88 Data Ascii: sofj*..cHu&s2IEuX'@C)e/bY9ut%YNMBj34bW9@r^[AuWt1F4V\|]v}.D.Reml\S?qj9\|y_4}rjB7/{AJd<F'^
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 34 25 3d 19 fe e5 32 70 4f 55 2e ae 9a 77 3f f7 02 9a 15 cf d5 e9 9d c3 d6 ae 83 aa be a9 7b 9c 8a 37 ba 56 9a 74 5a 91 e6 eb d2 56 82 df 35 88 b7 63 62 bb 88 69 dd 74 8f 9d bb 41 8b c9 e0 67 a1 8a 50 c1 d8 55 57 9e f8 69 ed 26 6b e3 1f 6f 30 77 86 aa e1 66 ca 7e 4d 07 29 9a dd cc b5 07 61 1d 42 98 74 96 32 38 4c 56 66 cd f3 3e ee 27 54 fe a3 55 c7 ab d9 ca c3 ec 7b 5a 08 70 3b aa 6a be 6e f3 cb e9 69 66 1a 0c 16 51 a0 7a 15 eb a0 0b cb fc ee 5c 3b d9 86 92 c3 8e 40 e9 9d 74 f1 f5 6a be a7 cd a6 1f 1f ae c7 6f 6d 99 62 d3 23 45 2b d1 7d 3d 7f 1c f5 aa 38 dc f9 ef 9a 5e ef 29 55 da 42 33 31 42 cb a6 1d d4 6b 75 aa cd ad 4d 4d cf 96 b8 ab 23 b3 9c ee a7 4a ae 77 64 f4 4c b7 cf e4 6d a9 1d e3 77 13 a6 bd ea b3 ee cd e4 81 9f e1 30 df d8 4d 98 b4 7f a2 f6 b4 Data Ascii: 4%=2pOU.w?{7VtZV5cbitAgPUWi&ko0wf~M)aBt28LVf>'TU{Zp;jnifQz\;@tjomb#E+}=8^)UB31BkuMM#JwdLmw0M
2024-12-12 18:57:28 UTC	80	IN	Data Raw: 55 db 4a 97 53 14 5b 4c 10 55 62 95 6f 7b 71 6a fd f0 3c b1 df 05 ac 38 dd b0 02 e2 69 2e 9b 2c 8e 2e 90 9a d4 a5 67 2d 26 4e be 8d ac ae f8 2e 35 d2 3a 16 0c c4 ec 4b 66 22 bb 5b fc 96 2b 51 98 cf 73 97 c5 23 ed ed 9b b4 8d 2a a4 d7 2d c6 Data Ascii: UJS[LUbo{qj<8i.,.g-&N.5:Kf"[+Qs#*-
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: 46 7b fc 8d f4 95 7c a6 95 e9 55 b9 24 6f 0b fb 0c 16 fb 21 24 97 25 a0 f6 aa 98 63 6a a4 be 82 da 09 5c 03 f7 91 dd 5c 33 94 46 5c 34 be 89 ea 99 c9 f7 4a 1a 3e 6b ae bb 33 75 26 ca d1 ce bc 64 bf a4 38 1f f1 5d 32 d6 ba 65 dd b8 66 6a 16 d9 c5 09 7e a0 01 fe 0a 65 d3 f8 56 ff 00 1b 7d 1b b4 0e 5a 95 c7 6d 30 b4 9c ee b0 b8 0d ea e6 9a 7e 4b 3b 44 e1 ff 00 67 14 ba be fb 3c 8c a1 e6 9e 73 fc 57 c6 ef e2 bf 61 f2 f3 ce 8e 89 c6 e3 8e 7b 11 3b 85 6b d1 6b 93 e6 fd ba e2 ac e4 91 a6 09 a3 0d a1 0d 34 fc 97 b2 6b e1 f1 6c f2 e0 b7 98 eb b8 f9 63 9f 38 2d 81 d2 fd 47 a2 cf af 97 47 4d b2 75 9d 9c f0 08 9e 0e fa 74 5b 91 96 f8 86 be c5 8e 1d 08 5d 22 2b a5 7b 1a 0d 4a d0 63 cf 20 20 0d 3c 57 1d ea a0 5e e5 ac b1 91 bb d6 90 03 e1 55 cb 2b 86 0f 39 ce 4b de e6 Data Ascii: F{\|U$o!$%cj\\3F\4J>k3u&d8]2efj~eV}Zm0~K;Dg<sWa{;kk4klc8-GGMut[]"+{Jc <W^U+9K
2024-12-12 18:57:28 UTC	16384	IN	Data Raw: c0 2b 10 ec 71 9a f4 5a 13 62 80 9a 68 b5 04 b8 e0 03 aa a8 93 1c 22 88 24 b2 10 a8 74 32 81 30 01 3b 53 0b 91 02 1d a2 61 32 76 38 59 5d d4 55 72 93 ea 86 8a 2d c8 94 5e a6 e5 52 d1 88 ab aa 21 7e a8 66 88 11 ea 17 15 42 c3 6a 10 06 b0 82 81 e6 8f 14 43 ad d0 68 a8 04 38 a0 72 20 5a 50 c1 e3 43 a9 44 c1 b2 d1 54 02 a8 12 68 81 2e a2 06 89 35 50 02 2a 10 36 5b aa 02 a1 40 87 03 d9 03 4e 0e 40 41 84 94 0e b5 b4 ec ac 06 e1 50 a8 83 7b 6e 24 84 d3 aa a8 c7 df f1 c6 5d 4a 77 36 a4 9e aa 2e 51 0f b6 f1 bc ef df 41 e0 b5 36 ab 94 9b 5e 25 6f 64 fa d2 b4 59 67 29 97 b8 d8 a4 82 8d 6d 08 52 c7 b7 e6 e9 8a cb 5c c0 e8 24 20 f4 ec b9 bf 4d c3 b7 83 21 d5 d5 47 a2 6f 98 43 fe 92 ab 16 9d c5 da 09 e5 21 c3 45 65 7c bf ae dc 2e 67 e3 71 3e dc b9 a3 55 de 57 c1 df 36 Data Ascii: +qZbh"$t20;Sa2v8Y]Ur-^R!~fBjCh8r ZPCDTh.5P*6[@N@AP{n$]Jw6.QA6^%odYg)mR\$ M!GoC!Ee\|.gq>UW6
2024-12-12 18:57:28 UTC	2329	IN	Data Raw: ba b3 ba 7d 18 7d 3a e8 bc 91 d6 21 d9 cc fb 79 c1 a1 03 ba ad 2c ef ed 22 bd 87 d5 8f eb 01 58 8c ec 91 ba 37 96 b8 50 85 59 a4 a2 09 01 a0 00 a2 c2 91 4e 43 33 e2 78 73 4d 28 a8 d3 62 b2 a2 40 1a f2 8a bd 89 f4 a3 9a 50 68 f0 99 e7 44 e0 c7 39 41 ba c7 df c5 3c 54 26 a1 c3 54 19 8e 67 c3 62 bf 89 d3 40 df 3f 5d 10 72 9b 9c 7c f6 13 18 a5 6d 08 40 c3 8f 75 43 b0 3b 55 03 c4 a0 50 3a a0 32 01 d4 2a 2d 30 99 59 6d 67 69 dd 40 0a d4 65 d5 b8 df 22 65 dc 6d 63 9d aa d0 d6 30 b1 cd 1b 4a 01 42 0a 21 40 a0 58 71 d3 e0 82 e7 19 96 10 ed 63 fa 14 4a be bd bf b6 65 a0 7d 46 a1 54 55 63 e3 96 79 3d 56 7d 15 40 fe 46 3b bd 94 8c 14 30 18 5b 7b f6 ca 1f 21 3b 7b 82 b4 98 68 4c 02 66 ee 8c ec 94 76 f1 55 30 76 db 20 58 7d 2b 91 b5 dd 01 4a 98 4d 04 1e 9a 82 b2 60 15 Data Ascii: }}:!y,"X7PYNC3xsM(b@PhD9A<T&Tgb@?]r\|m@uC;UP:2*-0Ymgi@e"emc0JB!@XqcJe}FTUcy=V}@F;0[{!;{hLfvU0v X}+JM`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49769	18.66.152.227	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:28 UTC	534	OUT	GET /js/chartbeat.js HTTP/1.1 Host: static.chartbeat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:29 UTC	589	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 39061 Connection: close Date: Thu, 12 Dec 2024 03:34:37 GMT Server: nginx Last-Modified: Wed, 05 Jun 2024 00:13:00 GMT Cross-Origin-Resource-Policy: cross-origin Expires: Fri, 13 Dec 2024 03:34:37 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes ETag: "665fad8c-9895" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e47955c447d3bc6630a9c0e1a8b8e666.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: ypE4_sXDgs7v7BssuMyCtp96pUSj9aw6NWPyVRQfaqAtvk93ZPsBSA== Age: 55370
2024-12-12 18:57:29 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 2c 68 3d 74 72 75 65 2c 69 3d 6e 75 6c 6c 2c 6b 3d 66 61 6c 73 65 2c 6e 2c 6f 3d 74 68 69 73 3b 0a 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 62 3d 3d 22 6f 62 6a 65 63 74 22 29 69 66 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 65 6c 73 65 20 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3b 69 66 28 63 3d 3d 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 29 72 65 74 75 72 6e 22 6f 62 6a Data Ascii: (function(){var g=void 0,h=true,i=null,k=false,n,o=this;function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"obj
2024-12-12 18:57:29 UTC	16384	IN	Data Raw: 76 65 49 74 65 6d 28 61 29 2c 62 2e 72 65 6d 6f 76 65 49 74 65 6d 28 61 2b 22 5f 65 78 70 69 72 65 73 22 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 62 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 7a 61 3d 61 7c 7c 22 22 3b 74 68 69 73 2e 53 3d 62 7c 7c 22 2f 22 3b 74 68 69 73 2e 67 62 3d 64 7c 7c 7b 7d 3b 74 68 69 73 2e 64 61 3d 28 74 68 69 73 2e 4f 61 3d 4f 62 28 74 68 69 73 2e 67 62 29 29 3f 22 22 3a 63 7c 7c 55 61 28 29 3b 74 68 69 73 2e 4f 62 3d 4d 2e 42 28 29 21 3d 3d 69 7c 7c 4c 2e 4c 62 28 74 68 69 73 2e 53 2c 74 68 69 73 2e 64 61 29 3b 74 68 69 73 2e 7a 62 3d 6b 7d 6e 3d 50 62 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 2e 69 73 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4f 62 7d 3b 6e 2e 63 72 65 61 Data Ascii: veItem(a),b.removeItem(a+"_expires"))};function Pb(a,b,c,d){this.za=a\|\|"";this.S=b\|\|"/";this.gb=d\|\|{};this.da=(this.Oa=Ob(this.gb))?"":c\|\|Ua();this.Ob=M.B()!==i\|\|L.Lb(this.S,this.da);this.zb=k}n=Pb.prototype;n.isSupported=function(){return this.Ob};n.crea
2024-12-12 18:57:29 UTC	6293	IN	Data Raw: 73 2e 61 5b 49 5d 3d 76 28 74 68 69 73 2e 61 5b 49 5d 29 3b 74 68 69 73 2e 4a 62 3d 42 28 43 2c 22 63 22 2c 74 68 69 73 2e 67 63 2c 74 68 69 73 29 3b 74 68 69 73 2e 4b 62 3d 42 28 43 2c 22 72 22 2c 74 68 69 73 2e 68 63 2c 74 68 69 73 29 3b 74 68 69 73 2e 55 3d 69 7d 3b 58 2e 70 72 6f 74 6f 74 79 70 65 2e 47 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 47 61 3d 61 7d 3b 0a 58 2e 70 72 6f 74 6f 74 79 70 65 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6b 2e 75 70 64 61 74 65 28 22 5f 63 68 61 72 74 62 65 61 74 34 22 2c 5b 22 74 3d 22 2b 74 68 69 73 2e 57 61 2c 22 45 3d 22 2b 74 68 69 73 2e 46 2e 63 61 2c 22 78 3d 22 2b 69 63 28 74 68 69 73 29 2c 22 63 3d 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 28 71 28 29 2d 74 68 69 73 2e 6c 61 29 Data Ascii: s.a[I]=v(this.a[I]);this.Jb=B(C,"c",this.gc,this);this.Kb=B(C,"r",this.hc,this);this.U=i};X.prototype.Gb=function(a){this.Ga=a};X.prototype.ya=function(){this.k.update("_chartbeat4",["t="+this.Wa,"E="+this.F.ca,"x="+ic(this),"c="+Math.round((q()-this.la)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49770	18.66.152.227	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:28 UTC	544	OUT	GET /js/chartbeat_mab_image.js HTTP/1.1 Host: static.chartbeat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:29 UTC	587	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 24339 Connection: close Date: Thu, 12 Dec 2024 18:52:56 GMT Server: nginx Last-Modified: Thu, 21 Dec 2023 01:18:23 GMT Cross-Origin-Resource-Policy: cross-origin Expires: Fri, 13 Dec 2024 18:52:56 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes ETag: "6583925f-5f13" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 62f08065c1f082b40f47b381b6d213ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: YmSH-9vTEiKJFEG4VitjkdSkHnhP5u8iB9J7diThktYCRqtVyGX8Eg== Age: 273
2024-12-12 18:57:29 UTC	15797	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 2c 6d 3d 74 72 75 65 2c 6e 3d 6e 75 6c 6c 2c 6f 3d 66 61 6c 73 65 2c 70 3d 74 68 69 73 3b 0a 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 62 3d 3d 22 6f 62 6a 65 63 74 22 29 69 66 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 65 6c 73 65 20 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3b 69 66 28 63 3d 3d 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 Data Ascii: (function(){var g=void 0,m=true,n=null,o=false,p=this;function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"objec
2024-12-12 18:57:29 UTC	8542	IN	Data Raw: 28 72 3d 31 36 3b 72 3c 38 30 3b 72 2b 2b 29 6a 5b 72 5d 3d 28 6a 5b 72 2d 33 5d 5e 6a 5b 72 2d 38 5d 5e 6a 5b 72 2d 31 34 5d 5e 6a 5b 72 2d 31 36 5d 29 3c 3c 31 7c 28 6a 5b 72 2d 33 5d 5e 6a 5b 72 2d 38 5d 5e 6a 5b 72 2d 31 34 5d 5e 6a 5b 72 2d 31 36 5d 29 3e 3e 3e 33 31 3b 62 3d 63 3b 69 3d 64 3b 6b 3d 65 3b 6c 3d 66 3b 73 3d 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 30 3b 72 2b 2b 29 75 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2f 32 30 29 2c 75 3d 28 62 3c 3c 35 7c 62 3e 3e 3e 32 37 29 2b 28 75 3d 3d 30 3f 69 26 6b 5e 7e 69 26 6c 3a 75 3d 3d 31 3f 69 5e 6b 5e 6c 3a 75 3d 3d 32 3f 69 26 6b 5e 69 26 6c 5e 6b 26 6c 3a 69 5e 6b 5e 6c 29 2b 73 2b 61 5b 75 5d 2b 6a 5b 72 5d 26 34 32 39 34 39 36 37 32 39 35 2c 73 3d 6c 2c 6c 3d 6b 2c 6b 3d 69 3c 3c 33 30 7c 69 3e Data Ascii: (r=16;r<80;r++)j[r]=(j[r-3]^j[r-8]^j[r-14]^j[r-16])<<1\|(j[r-3]^j[r-8]^j[r-14]^j[r-16])>>>31;b=c;i=d;k=e;l=f;s=h;for(r=0;r<80;r++)u=Math.floor(r/20),u=(b<<5\|b>>>27)+(u==0?i&k^~i&l:u==1?i^k^l:u==2?i&k^i&l^k&l:i^k^l)+s+a[u]+j[r]&4294967295,s=l,l=k,k=i<<30\|i>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49772	172.67.74.207	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:28 UTC	549	OUT	GET /galleryplayer.js HTTP/1.1 Host: literally-media.videoplayerhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:29 UTC	885	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 12 Dec 2024 18:57:28 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Thu, 12 Dec 2024 19:57:28 GMT Location: https://btloader.com/tag?h=literally-media&upapi=true Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IUPgTG218yiiHVh6rYV0QF0ns3X72vM4wzCdOERYb2ZMDxitToLG1NpWVcEm2td4MYtRBg7OnpwS%2BN15Ei3uI%2FrV14JHhw0YAw%2BxsgQiEGIXF2VUE1mn5Dht4Agv%2FRmpw3rQv7DaR0AL9C4DLKPC89qzfMc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f0ff0bbcdf14294-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1760&min_rtt=1754&rtt_var=669&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1127&delivery_rate=1620421&cwnd=213&unsent_bytes=0&cid=e8650e7c3cf8a85a&ts=449&x=0"
2024-12-12 18:57:29 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49775	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:29 UTC	740	OUT	GET /thumbs/mediaavatar/87634625-1731533401.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
2024-12-12 18:57:29 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: Ji74mDBkfcVjtSkT8dqgmiVm5uLqQbtbXhpjI8zSN3lcKMoA7FfE2+pO5SsgH9KwDda4Jmf07kA= x-amz-request-id: T64CPEVQA1MX8WDZ Content-Type: image/jpeg Server: AmazonS3 Age: 2496446 Date: Thu, 12 Dec 2024 18:57:29 GMT Last-Modified: Wed, 13 Nov 2024 21:30:02 GMT X-LLID: 75e227bb76b201c87de41d05dd2ed710 Content-Length: 1348 Connection: close
2024-12-12 18:57:29 UTC	1348	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49776	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:29 UTC	740	OUT	GET /thumbs/mediaavatar/87634957-1731604399.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
2024-12-12 18:57:29 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: DMWFjFFbsyKHlrOtoFM8OihWnDdyW+xhnDIh0mP7siWT4VDRrF3clgqvOdmYEn5C1mOe57AEEro= x-amz-request-id: BM7GT4F2DM4ZKGR2 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 760e343fa0a813fa1623189275895cf2 Age: 2425448 Date: Thu, 12 Dec 2024 18:57:29 GMT Last-Modified: Thu, 14 Nov 2024 17:13:20 GMT Content-Length: 1348 Connection: close
2024-12-12 18:57:29 UTC	1348	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49773	199.232.193.131	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:29 UTC	537	OUT	GET /static/blogherads.js HTTP/1.1 Host: ads.blogherads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:29 UTC	639	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6349 x-amz-id-2: +eY9thipTEGK6cicAxJ32G7ZPLrXr55i1B4NdrFaxzRQCUIfrZYHg/Y3VAjCixcDQfIHiFymD0w= x-amz-request-id: Q3HZF0J523D1VVQ2 Last-Modified: Thu, 12 Dec 2024 17:07:01 GMT ETag: "e8ccd08b2d290991709adef5513b6331" x-amz-server-side-encryption: AES256 Content-Type: application/javascript Cache-Control: max-age=14400, stale-while-revalidate=3600 Accept-Ranges: bytes Date: Thu, 12 Dec 2024 18:57:29 GMT Via: 1.1 varnish Age: 4600 X-Served-By: cache-nyc-kteb1890039-NYC X-Cache: HIT X-Cache-Hits: 257 X-Timer: S1734029849.442720,VS0,VE0 Access-Control-Allow-Origin: *
2024-12-12 18:57:29 UTC	1379	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 73 6b 65 20 4d 65 64 69 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 61 2c 6f 2c 72 3d 7b 38 32 39 38 30 3a 28 65 2c 61 2c 6f 29 3d 3e 7b 6f 2e 64 28 61 2c 7b 41 3a 28 29 3d 3e 72 7d 29 2c 77 69 6e 64 6f 77 2e 62 6c 6f 67 68 65 72 61 64 73 3d 77 69 6e 64 6f 77 2e 62 6c 6f 67 68 65 72 61 64 73 7c 7c 7b 61 64 71 3a 5b 5d 7d 3b 63 6f 6e 73 74 20 72 3d 77 69 6e 64 6f 77 2e 62 6c 6f 67 68 65 72 61 64 73 7d 2c 37 39 34 37 3a 28 65 2c 61 2c 6f 29 3d 3e 7b 6f 2e 64 28 61 2c 7b 4a 45 3a 28 29 3d 3e 73 2c 4d 44 3a 28 29 3d 3e 6c 2c 76 56 3a 28 29 3d 3e 69 Data Ascii: /* Copyright 2024 Penske Media Corporation. All Rights Reserved. */(()=>{"use strict";var e,a,o,r={82980:(e,a,o)=>{o.d(a,{A:()=>r}),window.blogherads=window.blogherads\|\|{adq:[]};const r=window.blogherads},7947:(e,a,o)=>{o.d(a,{JE:()=>s,MD:()=>l,vV:()=>i
2024-12-12 18:57:29 UTC	1379	IN	Data Raw: 6a 28 29 7b 76 61 72 20 65 2c 61 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 24 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 65 2e 6e 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 76 61 72 20 61 2c 6f 3b 6e 75 6c 6c 3d 3d 3d 28 61 3d 24 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6f 3d 61 2e 6d 61 72 6b 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6f 2e 63 61 6c 6c 28 61 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 61 29 7b 76 61 72 20 6f 2c 72 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 6f 3d 24 2e 70 65 72 66 6f 72 Data Ascii: j(){var e,a;return null===(e=$.performance)\|\|void 0===e\|\|null===(a=e.now)\|\|void 0===a?void 0:a.call(e)}function O(e){var a,o;null===(a=$.performance)\|\|void 0===a\|\|null===(o=a.mark)\|\|void 0===o\|\|o.call(a,e)}function k(e,a){var o,r;return null===(o=$.perfor
2024-12-12 18:57:29 UTC	1379	IN	Data Raw: 7d 29 7d 2c 6e 2e 66 3d 7b 7d 2c 6e 2e 65 3d 65 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 2e 66 29 2e 72 65 64 75 63 65 28 28 28 61 2c 6f 29 3d 3e 28 6e 2e 66 5b 6f 5d 28 65 2c 61 29 2c 61 29 29 2c 5b 5d 29 29 2c 6e 2e 75 3d 65 3d 3e 22 63 68 75 6e 6b 73 2f 22 2b 65 2b 22 2e 22 2b 7b 36 35 32 3a 22 39 31 66 64 65 38 31 65 36 36 64 66 34 65 32 31 64 38 34 35 22 2c 38 31 33 3a 22 64 37 35 30 62 30 37 61 63 38 33 64 39 31 66 30 64 38 61 37 22 2c 39 39 32 3a 22 34 39 65 62 34 33 34 33 34 62 36 66 37 64 31 35 32 65 39 35 22 2c 31 31 39 37 3a 22 63 37 64 63 30 31 38 32 64 38 37 32 37 39 31 63 38 31 66 36 22 2c 31 32 35 37 3a 22 39 39 36 64 64 61 37 36 64 62 65 63 63 39 34 39 39 31 66 30 22 2c 31 32 39 30 3a 22 34 38 62 39 Data Ascii: })},n.f={},n.e=e=>Promise.all(Object.keys(n.f).reduce(((a,o)=>(n.f[o](e,a),a)),[])),n.u=e=>"chunks/"+e+"."+{652:"91fde81e66df4e21d845",813:"d750b07ac83d91f0d8a7",992:"49eb43434b6f7d152e95",1197:"c7dc0182d872791c81f6",1257:"996dda76dbecc94991f0",1290:"48b9
2024-12-12 18:57:29 UTC	1379	IN	Data Raw: 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 2c 6e 2e 6f 3d 28 65 2c 61 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 2c 6f 3d 7b 7d 2c 6e 2e 6c 3d 28 65 2c 61 2c 72 2c 74 29 3d 3e 7b 69 66 28 6f 5b 65 5d 29 6f 5b 65 5d 2e 70 75 73 68 28 61 29 3b 65 6c 73 65 7b 76 61 72 20 64 2c 63 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 66 6f 72 28 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: his;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),n.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),o={},n.l=(e,a,r,t)=>{if(o[e])o[e].push(a);else{var d,c;if(void 0!==r)for(var f=document.getElemen
2024-12-12 18:57:29 UTC	833	IN	Data Raw: 67 20 63 68 75 6e 6b 20 22 2b 61 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 74 2b 22 3a 20 22 2b 64 2b 22 29 22 2c 63 2e 6e 61 6d 65 3d 22 43 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 63 2e 74 79 70 65 3d 74 2c 63 2e 72 65 71 75 65 73 74 3d 64 2c 72 5b 31 5d 28 63 29 7d 7d 29 2c 22 63 68 75 6e 6b 2d 22 2b 61 2c 61 29 7d 7d 3b 76 61 72 20 61 3d 28 61 2c 6f 29 3d 3e 7b 76 61 72 20 72 2c 74 2c 5b 64 2c 63 2c 66 5d 3d 6f 2c 6c 3d 30 3b 69 66 28 64 2e 73 6f 6d 65 28 28 61 3d 3e 30 21 3d 3d 65 5b 61 5d 29 29 29 7b 66 6f 72 28 72 20 69 6e 20 63 29 6e 2e 6f 28 63 2c 72 29 26 26 28 6e 2e 6d 5b 72 5d 3d 63 5b 72 5d 29 3b 69 66 28 66 29 66 28 6e 29 7d 66 6f 72 28 61 26 26 61 28 6f 29 3b 6c 3c 64 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 74 3d 64 5b 6c 5d 2c 6e 2e 6f Data Ascii: g chunk "+a+" failed.\n("+t+": "+d+")",c.name="ChunkLoadError",c.type=t,c.request=d,r[1](c)}}),"chunk-"+a,a)}};var a=(a,o)=>{var r,t,[d,c,f]=o,l=0;if(d.some((a=>0!==e[a]))){for(r in c)n.o(c,r)&&(n.m[r]=c[r]);if(f)f(n)}for(a&&a(o);l<d.length;l++)t=d[l],n.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49774	199.232.193.131	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:29 UTC	550	OUT	GET /sk/12/122/1226456/26278/header.js HTTP/1.1 Host: ads.blogherads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:29 UTC	637	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7666 x-amz-id-2: +5llUbUz1wIAY3TzW1oH85fVv4JMNPVcMtn5ny+iicUZ8gkmAY2eF/rLizOV+Jkdd09jlv5WwGY= x-amz-request-id: XWXWEY8Y3E11KQSH Last-Modified: Thu, 12 Dec 2024 01:03:50 GMT ETag: "f86ea7ed9a23794c8226a22e328e5a9d" x-amz-server-side-encryption: AES256 Content-Type: application/javascript Cache-Control: max-age=14400, stale-while-revalidate=3600 Accept-Ranges: bytes Date: Thu, 12 Dec 2024 18:57:29 GMT Via: 1.1 varnish Age: 3832 X-Served-By: cache-ewr-kewr1740062-EWR X-Cache: HIT X-Cache-Hits: 4 X-Timer: S1734029849.451167,VS0,VE0 Access-Control-Allow-Origin: *
2024-12-12 18:57:29 UTC	1379	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 73 6b 65 20 4d 65 64 69 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 32 30 32 34 31 32 31 32 30 31 30 33 2d 35 38 36 36 36 30 39 20 2a 2f 0a 76 61 72 20 62 6c 6f 67 68 65 72 61 64 73 3d 62 6c 6f 67 68 65 72 61 64 73 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 63 2c 73 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 74 26 26 74 2e 6d 61 72 6b 26 26 74 2e 6d 61 72 6b 28 22 70 6d 63 2d 61 74 6c 61 73 2d 6d 67 2d 63 6f 6e 66 69 67 2d 6c 6f 61 64 65 64 22 29 7d 63 2e 63 6f 6e 66 3d 63 2e 63 6f 6e 66 7c 7c 7b 22 64 66 70 5f 61 63 63 6f 75 6e 74 22 3a 38 33 35 32 Data Ascii: /* Copyright 2024 Penske Media Corporation. All Rights Reserved. 202412120103-5866609 */var blogherads=blogherads\|\|{};!function(c,s){function t(){var t=window.performance;t&&t.mark&&t.mark("pmc-atlas-mg-config-loaded")}c.conf=c.conf\|\|{"dfp_account":8352
2024-12-12 18:57:29 UTC	1379	IN	Data Raw: 2c 22 62 72 61 6e 64 69 6e 67 22 3a 22 6c 69 66 65 73 74 79 6c 65 73 22 2c 22 66 6f 72 63 65 5f 63 6f 6d 73 63 6f 72 65 5f 6c 6f 67 6f 22 3a 74 72 75 65 2c 22 64 66 70 5f 6e 61 6d 65 22 3a 22 61 2e 65 62 61 75 6d 73 77 6f 72 6c 64 22 2c 22 66 6c 6f 61 74 69 6e 67 70 6c 61 79 65 72 5f 64 65 73 6b 74 6f 70 5f 73 69 7a 65 22 3a 22 6d 65 64 69 75 6d 22 2c 22 66 6c 6f 61 74 69 6e 67 70 6c 61 79 65 72 5f 65 6e 61 62 6c 65 5f 63 6c 6f 73 65 5f 74 69 6d 65 22 3a 30 2c 22 66 6c 6f 61 74 69 6e 67 70 6c 61 79 65 72 5f 66 6c 6f 61 74 5f 70 6f 73 69 74 69 6f 6e 22 3a 22 72 69 67 68 74 22 2c 22 6a 75 73 74 70 72 65 6d 69 75 6d 5f 64 65 73 6b 74 6f 70 5f 63 66 22 3a 22 64 69 73 61 62 6c 65 22 2c 22 6a 75 73 74 70 72 65 6d 69 75 6d 5f 7a 6f 6e 65 5f 69 64 22 3a 22 31 31 Data Ascii: ,"branding":"lifestyles","force_comscore_logo":true,"dfp_name":"a.ebaumsworld","floatingplayer_desktop_size":"medium","floatingplayer_enable_close_time":0,"floatingplayer_float_position":"right","justpremium_desktop_cf":"disable","justpremium_zone_id":"11
2024-12-12 18:57:29 UTC	1379	IN	Data Raw: 6c 6f 6f 72 5f 75 73 5f 64 65 73 6b 74 6f 70 22 3a 30 2e 30 35 2c 22 70 72 69 63 65 5f 66 6c 6f 6f 72 73 5f 70 72 65 62 69 64 5f 66 6c 6f 6f 72 5f 75 73 5f 6d 6f 62 69 6c 65 5f 61 6e 64 72 6f 69 64 22 3a 30 2e 30 35 2c 22 70 72 69 63 65 5f 66 6c 6f 6f 72 73 5f 70 72 65 62 69 64 5f 66 6c 6f 6f 72 5f 75 73 5f 6d 6f 62 69 6c 65 5f 6e 6f 6e 5f 61 6e 64 72 6f 69 64 22 3a 30 2e 30 35 2c 22 72 68 6f 6d 62 75 73 5f 73 69 74 65 5f 69 64 22 3a 31 30 36 37 37 31 35 2c 22 72 75 62 69 63 6f 6e 5f 73 69 74 65 5f 69 64 22 3a 22 38 34 30 34 30 22 2c 22 72 75 62 69 63 6f 6e 5f 7a 6f 6e 65 5f 69 64 22 3a 22 31 33 35 35 37 39 32 22 2c 22 72 75 62 69 63 6f 6e 5f 76 69 64 65 6f 5f 73 69 74 65 5f 69 64 22 3a 22 31 36 34 37 31 32 22 2c 22 72 75 62 69 63 6f 6e 5f 76 69 64 65 6f Data Ascii: loor_us_desktop":0.05,"price_floors_prebid_floor_us_mobile_android":0.05,"price_floors_prebid_floor_us_mobile_non_android":0.05,"rhombus_site_id":1067715,"rubicon_site_id":"84040","rubicon_zone_id":"1355792","rubicon_video_site_id":"164712","rubicon_video
2024-12-12 18:57:29 UTC	1379	IN	Data Raw: 76 69 63 65 22 3a 22 6d 6f 62 69 6c 65 22 2c 22 69 64 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 36 32 34 32 39 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 31 37 37 31 34 36 7d 7d 2c 7b 22 69 6e 64 65 78 22 3a 35 2c 22 65 72 72 6f 72 73 22 3a 5b 5d 2c 22 6b 76 70 73 22 3a 7b 22 70 6c 61 74 22 3a 22 6d 6f 62 22 2c 22 73 74 22 3a 22 62 6f 74 74 6f 6d 22 7d 2c 22 73 69 7a 65 73 22 3a 5b 5b 33 32 30 2c 35 30 5d 2c 5b 33 30 30 2c 35 30 5d 5d 2c 22 64 65 76 69 63 65 22 3a 22 6d 6f 62 69 6c 65 22 2c 22 69 64 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 36 32 34 33 30 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 31 37 37 31 34 37 7d 7d 2c 7b 22 69 6e 64 65 78 22 3a 36 2c 22 65 72 72 6f 72 73 22 3a 5b 5d 2c 22 6b 76 70 73 22 3a 7b 22 70 6c 61 74 22 3a 22 6d 6f 62 22 Data Ascii: vice":"mobile","ids":{"pageId":162429,"placementId":177146}},{"index":5,"errors":[],"kvps":{"plat":"mob","st":"bottom"},"sizes":[[320,50],[300,50]],"device":"mobile","ids":{"pageId":162430,"placementId":177147}},{"index":6,"errors":[],"kvps":{"plat":"mob"
2024-12-12 18:57:29 UTC	1379	IN	Data Raw: 63 2d 34 61 61 31 2d 62 66 35 33 2d 36 64 33 35 33 38 32 32 64 35 66 38 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 65 73 6b 74 6f 70 20 4c 69 73 74 20 47 61 6c 6c 65 72 79 20 6e 6f 6e 2d 46 61 63 65 62 6f 6f 6b 22 2c 22 63 6f 6e 74 61 69 6e 65 72 5f 61 74 74 72 69 62 75 74 65 73 22 3a 22 73 74 79 6c 65 3d 5c 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 5c 22 22 2c 22 6d 61 74 63 68 5f 75 72 6c 22 3a 22 74 72 65 6e 64 69 6e 67 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 22 2c 22 6e 65 67 61 74 65 5f 6d 61 74 63 68 5f 75 72 6c 22 3a 31 2c 22 6c 61 7a 79 6c 6f 61 64 5f 6d 75 6c 74 69 70 6c 69 65 72 22 3a 33 2c 22 72 65 70 72 6f 63 65 73 73 22 3a 74 72 75 65 2c 22 Data Ascii: c-4aa1-bf53-6d353822d5f8","description":"Desktop List Gallery non-Facebook","container_attributes":"style=\"text-align: center; padding-bottom: 10px;\"","match_url":"trending.ebaumsworld.com","negate_match_url":1,"lazyload_multiplier":3,"reprocess":true,"
2024-12-12 18:57:29 UTC	771	IN	Data Raw: 6f 6e 22 3a 22 4d 6f 62 69 6c 65 20 4c 69 73 74 20 47 61 6c 6c 65 72 79 20 54 72 65 6e 64 69 6e 67 20 6f 6e 6c 79 22 2c 22 63 6f 6e 74 61 69 6e 65 72 5f 61 74 74 72 69 62 75 74 65 73 22 3a 22 73 74 79 6c 65 3d 5c 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 5c 22 22 2c 22 6d 61 74 63 68 5f 75 72 6c 22 3a 22 74 72 65 6e 64 69 6e 67 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 22 2c 22 6c 61 7a 79 6c 6f 61 64 5f 6d 75 6c 74 69 70 6c 69 65 72 22 3a 33 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 6d 6f 62 69 6c 65 22 7d 5d 2c 22 64 66 70 5f 63 68 69 6c 64 5f 6e 65 74 77 6f 72 6b 5f 63 6f 64 65 22 3a 22 31 30 31 39 30 31 37 22 2c 22 63 6d 70 22 3a 74 72 75 65 7d 2c 63 2e 61 64 71 3d Data Ascii: on":"Mobile List Gallery Trending only","container_attributes":"style=\"text-align: center; padding-bottom: 10px;\"","match_url":"trending.ebaumsworld.com","lazyload_multiplier":3,"platform":"mobile"}],"dfp_child_network_code":"1019017","cmp":true},c.adq=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49783	172.67.43.139	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:29 UTC	541	OUT	GET /api/init-398c0g22ym0ukn3detw.js HTTP/1.1 Host: api.b2c.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:29 UTC	284	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:29 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=600 CF-Cache-Status: EXPIRED Last-Modified: Thu, 12 Dec 2024 18:57:29 GMT Server: cloudflare CF-RAY: 8f0ff0c01bcc41ff-EWR
2024-12-12 18:57:29 UTC	1085	IN	Data Raw: 34 34 39 33 0d 0a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 30 3c 31 26 26 28 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 70 29 7b 69 66 28 21 70 29 7b 5f 5f 24 50 50 3d 70 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 76 29 7b 70 2e 65 28 6b 2c 76 29 7d 3b 70 2e 77 3d 5b 5d 3b 70 2e 71 3d 5b 5d 3b 70 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 76 29 7b 70 2e 71 2e 70 75 73 68 28 5b 6b 2c 76 2c 30 5d 29 7d 3b 5f 5f 24 50 50 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 2c 74 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 65 2e 73 74 79 6c 65 Data Ascii: 4493Math.random()*10<1&&(function(a,d,p){if(!p){__$PP=p=function(k,v){p.e(k,v)};p.w=[];p.q=[];p.e=function(k,v){p.q.push([k,v,0])};__$PP.e=function(){var e,n,t=0;function i(){return e\|\|((e=document.createElement("div")).style.position="absolute",e.style
2024-12-12 18:57:29 UTC	1369	IN	Data Raw: 69 6e 64 6f 77 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 2c 6c 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 2c 67 3d 6c 28 29 2c 70 3d 31 37 35 65 33 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 31 65 33 2a 65 29 2f 31 65 33 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 76 61 72 20 6e 3d 6c 28 29 3b 72 65 74 75 Data Ascii: indow.oRequestAnimationFrame\|\|window.setTimeout,l=window.performance&&"function"==typeof performance.now?function(){return performance.now()}:function(){return+new Date},g=l(),p=175e3;function d(e){return Math.round(1e3*e)/1e3}function m(e){var n=l();retu
2024-12-12 18:57:29 UTC	1369	IN	Data Raw: 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 29 3a 31 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 26 26 28 22 73 65 6c 65 63 74 22 3d 3d 3d 6f 7c 7c 22 6d 6f 75 73 65 75 70 22 3d 3d 3d 6f 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 6f 7c 7c 22 74 6f 75 63 68 65 6e 64 22 3d 3d 3d 6f 29 29 7b 76 61 72 20 6e 3d 72 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 2c 74 3d 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 75 62 73 74 72 28 30 2c 78 29 3b 21 63 26 26 74 26 26 28 63 3d 31 2c 61 28 22 73 65 6c 65 63 74 65 64 2d 74 65 78 74 22 2c 74 29 2c 6e 2e 72 61 6e 67 65 43 6f 75 6e 74 26 26 61 28 22 73 65 6c 65 63 74 65 64 2d 68 74 6d 6c 22 2c 53 28 6e 2e 67 65 74 52 61 6e 67 65 41 74 28 30 29 2e Data Ascii: mentElement.scrollTop):1)),"function"==typeof r.getSelection&&("select"===o\|\|"mouseup"===o\|\|"keyup"===o\|\|"touchend"===o)){var n=r.getSelection(),t=n.toString().substr(0,x);!c&&t&&(c=1,a("selected-text",t),n.rangeCount&&a("selected-html",S(n.getRangeAt(0).
2024-12-12 18:57:29 UTC	1369	IN	Data Raw: 2c 74 3d 7b 76 69 64 65 6f 69 6e 70 75 74 3a 30 2c 61 75 64 69 6f 69 6e 70 75 74 3a 30 2c 61 75 64 69 6f 6f 75 74 70 75 74 3a 30 7d 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 6f 3d 65 5b 6e 5d 2e 6b 69 6e 64 3b 74 5b 6f 5d 3d 28 74 5b 6f 5d 7c 7c 30 29 2b 31 7d 66 6f 72 28 6e 20 69 6e 20 74 29 69 28 22 6d 65 64 69 61 2d 22 2b 6e 2c 74 5b 6e 5d 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 22 75 72 6c 22 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 22 72 65 66 65 72 72 65 72 22 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 29 29 7d 2c 66 75 6e Data Ascii: ,t={videoinput:0,audioinput:0,audiooutput:0};n<e.length;n++){var o=e[n].kind;t[o]=(t[o]\|\|0)+1}for(n in t)i("media-"+n,t[n])})},function(e){e("url",a(function(){return location.href}))},function(e){e("referrer",a(function(){return document.referrer}))},fun
2024-12-12 18:57:29 UTC	1369	IN	Data Raw: 70 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 2c 6e 28 22 74 6f 70 2d 70 61 67 65 73 69 7a 65 22 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 57 69 64 74 68 2b 22 78 22 2b 77 69 6e 64 6f 77 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 61 28 4f 29 2c 74 21 3d 3d 65 26 26 6e 28 22 72 65 73 69 7a 65 22 2c 74 3d 65 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 33 Data Ascii: p.innerHeight),n("top-pagesize",window.top.document.documentElement.scrollWidth+"x"+window.top.document.documentElement.scrollHeight))}catch(e){}window.addEventListener("resize",function(e){e=a(O),t!==e&&n("resize",t=e)})},function(e){var n=Math.floor(1e3
2024-12-12 18:57:29 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 22 4e 2f 41 22 3b 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2c 6f 3d 5b 5d 2c 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 6f 5b 69 5d 3d 74 5b 69 5d 2e 6e 61 6d 65 2b 22 3b 22 2b 74 5b 69 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 2b 22 3b 22 2b 74 5b 69 5d 2e 66 69 6c 65 6e 61 6d 65 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 5b 69 5d 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6f 5b 69 5d 2b 3d 22 20 28 22 2b 74 5b 69 5d 5b 72 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 2b 22 3b 22 2b 74 5b 69 5d 5b 72 5d 2e 74 79 70 65 2b 22 3b 22 2b 74 5b 69 5d Data Ascii: nction(e){var n="N/A";if(window.navigator&&navigator.plugins){for(var t=navigator.plugins,o=[],i=0;i<t.length;i++){o[i]=t[i].name+";"+t[i].description+";"+t[i].filename;for(var r=0;r<t[i].length;r++)o[i]+=" ("+t[i][r].description+";"+t[i][r].type+";"+t[i]
2024-12-12 18:57:29 UTC	1369	IN	Data Raw: 6e 28 29 7b 6e 3d 66 28 6e 29 7d 29 29 2c 6e 7d 29 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 65 3f 28 6e 28 22 62 61 74 74 65 72 79 22 2c 5b 65 2e 63 68 61 72 67 69 6e 67 3f 31 3a 30 2c 65 2e 6c 65 76 65 6c 2c 65 2e 63 68 61 72 67 69 6e 67 54 69 6d 65 2c 65 2e 64 69 73 63 68 61 72 67 69 6e 67 54 69 6d 65 5d 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 77 28 65 2c 22 63 68 61 72 67 69 6e 67 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 22 63 68 61 72 67 69 6e 67 63 68 61 6e 67 65 22 2c 65 2e 63 68 61 72 67 69 6e 67 3f 31 3a 30 29 7d 29 29 3a 6e 28 22 62 61 74 74 65 72 79 22 2c 22 6e 2f 61 22 29 7d 6e 61 76 69 67 61 74 6f 72 2e 67 65 74 42 61 74 74 65 72 79 3f 6e 61 76 69 67 61 74 6f 72 2e 67 65 74 Data Ascii: n(){n=f(n)})),n})}))},function(n){function e(e){e?(n("battery",[e.charging?1:0,e.level,e.chargingTime,e.dischargingTime].join(" ")),w(e,"chargingchange",function(){n("chargingchange",e.charging?1:0)})):n("battery","n/a")}navigator.getBattery?navigator.get
2024-12-12 18:57:29 UTC	1369	IN	Data Raw: 65 73 74 28 61 2e 69 64 29 3f 22 67 6f 6f 67 6c 65 22 3a 61 2e 69 64 29 2c 75 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 75 2e 77 69 64 74 68 29 2b 22 78 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 75 2e 68 65 69 67 68 74 29 2b 22 40 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 75 2e 78 29 2b 22 78 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 75 2e 79 29 2b 22 23 22 2b 63 3b 69 2e 70 75 73 68 28 64 29 2c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3d 3d 3d 77 69 6e 64 6f 77 26 26 65 28 22 70 61 67 65 2d 66 72 61 6d 65 2d 73 65 6c 66 22 2c 64 29 7d 65 28 22 70 61 67 65 2d 66 72 61 6d 65 2d 63 6f 75 6e 74 22 2c 6f 2e 6c 65 6e 67 74 68 29 2c 30 3c 69 2e 6c 65 6e 67 74 68 26 26 65 28 22 70 61 67 65 Data Ascii: est(a.id)?"google":a.id),u=a.getBoundingClientRect(),d=Math.round(u.width)+"x"+Math.round(u.height)+"@"+Math.round(u.x)+"x"+Math.round(u.y)+"#"+c;i.push(d),a.contentWindow===window&&e("page-frame-self",d)}e("page-frame-count",o.length),0<i.length&&e("page
2024-12-12 18:57:29 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 26 26 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 61 6e 79 2d 70 6f 69 6e 74 65 72 22 29 3b 65 28 22 61 6e 79 2d 70 6f 69 6e 74 65 72 22 2c 6e 3f 6e 2e 6d 61 74 63 68 65 73 3f 31 3a 30 3a 22 6e 2f 61 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 22 63 68 72 6f 6d 65 22 2c 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 3f 31 3a 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 22 77 65 62 72 74 63 22 2c 77 69 6e 64 6f 77 2e 52 54 43 50 65 65 72 43 6f 6e 6e 65 63 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 52 54 43 44 61 74 61 43 68 61 6e 6e 65 6c 3f 31 3a 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 Data Ascii: on(e){var n=window.matchMedia&&window.matchMedia("any-pointer");e("any-pointer",n?n.matches?1:0:"n/a")},function(e){e("chrome",window.chrome?1:0)},function(e){e("webrtc",window.RTCPeerConnection&&window.RTCDataChannel?1:0)},function(n){var e=document.crea
2024-12-12 18:57:29 UTC	1369	IN	Data Raw: 65 6e 74 57 69 6e 64 6f 77 2e 73 65 6c 66 2e 67 65 74 3b 6e 26 26 6e 2e 74 6f 53 74 72 69 6e 67 28 29 26 26 74 28 22 70 75 70 70 65 74 65 65 72 22 2c 31 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 63 6c 6f 63 6b 22 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 2c 6e 3d 6c 28 29 2c 74 3d 6e 2b 32 3b 6e 3d 3d 3d 6c 28 29 3b 29 3b 66 6f 72 28 3b 6c 28 29 3c 74 3b 65 2b 2b 29 3b 72 65 74 75 72 6e 20 65 7d 29 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 31 2c 6f 3d 6c 28 29 2b 31 30 30 3b 21 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 75 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 29 3c 6f 3f 28 74 2b Data Ascii: entWindow.self.get;n&&n.toString()&&t("puppeteer",1)})},function(e){requestAnimationFrame(function(){e("clock",a(function(){for(var e=1,n=l(),t=n+2;n===l(););for(;l()<t;e++);return e}))})},function(n){var t=1,o=l()+100;!function e(){u(function(){l()<o?(t+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49784	172.67.41.60	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:30 UTC	543	OUT	GET /tag?h=literally-media&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:30 UTC	511	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: W/"73d48c8c441ea83e2ddcffd3a7452542" Last-Modified: Thu, 12 Dec 2024 18:47:11 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 619 Server: cloudflare CF-RAY: 8f0ff0c72a9642ec-EWR
2024-12-12 18:57:30 UTC	858	IN	Data Raw: 37 64 61 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 73 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 Data Ascii: 7da1!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e
2024-12-12 18:57:30 UTC	1369	IN	Data Raw: 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 6f 3b 29 74 72 79 7b 69 66 28 6e 3d 31 2c 73 26 26 28 72 3d 32 26 69 5b 30 5d 3f 73 2e 72 65 74 75 72 6e 3a 69 5b 30 5d 3f 73 2e 74 68 72 6f 77 7c 7c 28 28 72 3d 73 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 73 29 2c 30 29 3a 73 2e 6e 65 78 74 29 26 26 21 28 72 3d 72 2e 63 61 6c 6c 28 73 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 72 3b 73 77 69 74 63 68 28 73 3d 30 2c 72 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 72 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 72 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 Data Ascii: executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=0,r&&(i=[2&i[0],r.value]),i[0]){case 0:case 1:r=i;break;case 4:return o.label++,{value:i[1],done:!1};case 5
2024-12-12 18:57:30 UTC	1369	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 6f 2c 63 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 33 2c 2c 34 5d 29 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 Data Ascii: .document.body\|\|window.document.documentElement).appendChild(s)}))}function c(){return t(this,void 0,void 0,(function(){var e,t,i,o,c;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),window.__bt=window.__bt\|\|{},"function"!=ty
2024-12-12 18:57:30 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 77 69 74 63 68 28 74 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 5b 34 2c 61 28 65 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 5b 32 2c 21 74 2e 73 65 6e 74 28 29 5d 7d 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 65 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 32 2c 2c 33 5d 29 2c 5b 34 2c 66 65 74 63 68 28 6f 2c 7b 6d 6f 64 65 Data Ascii: ction(){return n(this,(function(t){switch(t.label){case 0:return[4,a(e)];case 1:return[2,!t.sent()]}}))}))}function u(){return t(this,void 0,void 0,(function(){return n(this,(function(e){switch(e.label){case 0:return e.trys.push([0,2,,3]),[4,fetch(o,{mode
2024-12-12 18:57:30 UTC	1369	IN	Data Raw: 38 38 37 30 31 37 39 38 34 22 2c 22 35 30 38 32 39 34 34 34 33 33 30 32 39 31 32 30 22 2c 22 35 37 32 39 37 34 39 33 31 34 38 33 30 33 33 36 22 2c 22 34 38 36 34 31 30 31 37 33 30 37 34 36 33 36 38 22 2c 22 35 37 30 30 39 32 33 31 39 39 33 32 34 31 36 30 22 2c 22 35 31 32 30 33 32 38 36 38 32 39 36 32 39 34 34 22 2c 22 36 33 31 35 39 31 35 36 37 33 36 30 30 30 30 30 22 2c 22 36 33 32 36 31 37 36 35 33 31 33 34 39 35 30 34 22 2c 22 35 36 35 36 39 31 33 30 31 37 35 36 39 32 38 30 22 2c 22 35 31 38 38 32 37 39 30 33 38 36 34 30 31 32 38 22 2c 22 35 37 35 35 32 34 35 35 35 37 31 38 36 35 36 30 22 2c 22 35 31 38 30 34 39 30 33 31 36 32 35 31 31 33 36 22 2c 22 35 37 34 39 39 30 35 30 36 37 33 34 33 38 37 32 22 2c 22 35 31 37 35 34 36 32 30 32 34 37 30 38 30 39 Data Ascii: 887017984","5082944433029120","5729749314830336","4864101730746368","5700923199324160","5120328682962944","6315915673600000","6326176531349504","5656913017569280","5188279038640128","5755245557186560","5180490316251136","5749905067343872","517546202470809
2024-12-12 18:57:30 UTC	1369	IN	Data Raw: 64 69 73 61 62 6c 65 5f 61 75 74 6f 6d 61 74 69 63 5f 64 65 74 65 63 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 20 22 73 69 6e 67 6c 65 5f 63 6c 69 63 6b 5f 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 72 65 6e 64 65 72 5f 74 6f 5f 61 61 5f 75 73 65 72 73 5f 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 20 22 77 65 62 73 69 74 65 73 22 3a 7b 7d 2c 20 22 73 63 72 69 70 74 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 74 6d 65 73 73 61 67 65 2e 63 6f 6d 2f 73 63 72 69 70 74 2f 72 6c 69 6e 6b 2e 6a 73 3f 6f 3d 35 37 32 30 39 38 30 38 35 34 39 33 31 34 35 36 26 62 74 5f 65 6e 76 3d 70 72 6f 64 22 7d 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 70 61 72 73 69 6e 67 20 52 4c 20 73 65 74 74 69 6e 67 73 22 Data Ascii: disable_automatic_detection":false, "single_click_disabled":false, "render_to_aa_users_disabled":false}, "websites":{}, "script":"https://cdn.btmessage.com/script/rlink.js?o=5720980854931456&bt_env=prod"}}catch(e){console.error("Error parsing RL settings"
2024-12-12 18:57:30 UTC	1369	IN	Data Raw: 2c 49 2c 44 2c 4f 2c 52 2c 50 2c 6b 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 69 66 28 74 3d 7b 77 65 62 73 69 74 65 49 44 3a 76 6f 69 64 20 30 2c 63 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3a 21 31 2c 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3a 21 31 2c 77 69 64 67 65 74 3a 21 31 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5b 5c 5d 5d 2f 67 2c 22 5c 5c 24 26 22 29 3b 76 61 72 20 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 65 2b 22 28 3d 28 5b 5e 26 23 5d 2a 29 7c 26 7c 23 7c 24 29 22 29 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 32 5d 3f 64 Data Ascii: ,I,D,O,R,P,k;return n(this,(function(n){switch(n.label){case 0:if(t={websiteID:void 0,contentEnabled:!1,mobileContentEnabled:!1,widget:!1},d=function(e,t){e=e.replace(/[\[\]]/g,"\\$&");var n=new RegExp("[?&]"+e+"(=([^&#]*)\|&\|#\|$)").exec(t);return n?n[2]?d
2024-12-12 18:57:30 UTC	1369	IN	Data Raw: 35 5d 3b 63 61 73 65 20 35 3a 69 66 28 68 26 26 68 20 69 6e 20 54 3f 28 5f 3d 54 5b 68 5d 2c 74 2e 77 65 62 73 69 74 65 49 44 3d 6e 75 6c 6c 21 3d 3d 28 73 3d 5f 2e 77 29 26 26 76 6f 69 64 20 30 21 3d 3d 73 3f 73 3a 5f 2e 77 65 62 73 69 74 65 5f 69 64 2c 74 2e 63 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 6e 75 6c 6c 21 3d 3d 28 72 3d 5f 2e 63 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 5f 2e 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 5f 2e 6d 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 5f 2e 6d 6f 62 69 6c 65 5f 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 77 69 64 67 65 74 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 5f 2e 77 69 64 67 65 74 Data Ascii: 5];case 5:if(h&&h in T?(_=T[h],t.websiteID=null!==(s=_.w)&&void 0!==s?s:_.website_id,t.contentEnabled=null!==(r=_.ce)&&void 0!==r?r:_.content_enabled,t.mobileContentEnabled=null!==(i=_.me)&&void 0!==i?i:_.mobile_content_enabled,t.widget=null!==(o=_.widget
2024-12-12 18:57:30 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 22 2b 43 2b 22 2f 65 76 65 6e 74 73 2f 75 6e 6b 6e 6f 77 6e 5f 64 6f 6d 61 69 6e 73 3f 75 70 61 70 69 3d 74 72 75 65 26 74 69 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 78 2e 74 72 61 63 65 49 44 29 2b 22 26 63 76 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4c 29 2c 4f 29 7d 72 65 74 75 72 6e 5b 32 2c 7b 73 69 74 65 49 6e 66 6f 3a 74 7d 5d 7d 7d 29 29 7d 29 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 72 65 74 75 72 6e 20 42 7d 42 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 5f 62 74 5f 74 61 67 5f 64 3d 7b 6f 72 67 49 44 3a 53 2c 64 6f 6d 61 69 6e 3a 45 2c 73 69 74 65 49 6e 66 6f 3a 65 2e 73 69 74 65 49 6e 66 6f 2c 61 70 69 44 6f 6d 61 Data Ascii: "https://"+C+"/events/unknown_domains?upapi=true&tid="+encodeURIComponent(x.traceID)+"&cv="+encodeURIComponent(L),O)}return[2,{siteInfo:t}]}}))}))}();function H(){return B}B.then((function(e){window.__bt_tag_d={orgID:S,domain:E,siteInfo:e.siteInfo,apiDoma
2024-12-12 18:57:30 UTC	1369	IN	Data Raw: 3d 36 3b 73 74 61 74 69 63 20 4c 43 4d 3d 32 34 3b 73 74 61 74 69 63 20 65 6e 63 6f 64 65 28 65 29 7b 69 66 28 21 2f 5e 5b 30 2d 31 5d 2b 24 2f 2e 74 65 73 74 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 47 28 22 49 6e 76 61 6c 69 64 20 62 69 74 46 69 65 6c 64 22 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 6c 65 6e 67 74 68 25 74 68 69 73 2e 4c 43 4d 3b 65 2b 3d 74 3f 22 30 22 2e 72 65 70 65 61 74 28 74 68 69 73 2e 4c 43 4d 2d 74 29 3a 22 22 3b 6c 65 74 20 6e 3d 22 22 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 3d 74 68 69 73 2e 42 41 53 49 53 29 6e 2b 3d 74 68 69 73 2e 44 49 43 54 5b 70 61 72 73 65 49 6e 74 28 65 2e 73 75 62 73 74 72 28 74 2c 74 68 69 73 2e 42 41 53 49 53 29 2c 32 29 5d 3b 72 65 74 75 72 6e 20 6e 7d 73 74 61 74 69 Data Ascii: =6;static LCM=24;static encode(e){if(!/^[0-1]+$/.test(e))throw new G("Invalid bitField");const t=e.length%this.LCM;e+=t?"0".repeat(this.LCM-t):"";let n="";for(let t=0;t<e.length;t+=this.BASIS)n+=this.DICT[parseInt(e.substr(t,this.BASIS),2)];return n}stati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49785	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:30 UTC	740	OUT	GET /thumbs/mediaavatar/87634955-1731590260.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1
2024-12-12 18:57:31 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: bs8Ph8VVbcxTksJ9jkTV/u11iMQ8y3xaZUHOMQxcEoutcQVpQXsQdpflqpsDjOQ28e7+xx1uO28= x-amz-request-id: NRWERJYWFTBD9GFW Content-Type: image/jpeg Server: AmazonS3 X-LLID: 564af3a9a32b5e5c5be56ef6e3bf3127 Age: 2439590 Date: Thu, 12 Dec 2024 18:57:31 GMT Last-Modified: Thu, 14 Nov 2024 13:17:41 GMT Content-Length: 1345 Connection: close
2024-12-12 18:57:31 UTC	1345	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49790	199.232.193.131	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:30 UTC	362	OUT	GET /static/blogherads.js HTTP/1.1 Host: ads.blogherads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:31 UTC	639	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6349 x-amz-id-2: KXPCVEmeXwpagsXhek/fZ1Wfvc4nB9UIR+U/nUpORKv464LsWqMHtdcOyDSNKcwLPtxkNk1i6ts= x-amz-request-id: Q3HS19M8WJPM9S0B Last-Modified: Thu, 12 Dec 2024 17:07:01 GMT ETag: "e8ccd08b2d290991709adef5513b6331" x-amz-server-side-encryption: AES256 Content-Type: application/javascript Cache-Control: max-age=14400, stale-while-revalidate=3600 Accept-Ranges: bytes Date: Thu, 12 Dec 2024 18:57:31 GMT Via: 1.1 varnish Age: 4602 X-Served-By: cache-ewr-kewr1740031-EWR X-Cache: HIT X-Cache-Hits: 409 X-Timer: S1734029851.241842,VS0,VE0 Access-Control-Allow-Origin: *
2024-12-12 18:57:31 UTC	1379	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 73 6b 65 20 4d 65 64 69 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 61 2c 6f 2c 72 3d 7b 38 32 39 38 30 3a 28 65 2c 61 2c 6f 29 3d 3e 7b 6f 2e 64 28 61 2c 7b 41 3a 28 29 3d 3e 72 7d 29 2c 77 69 6e 64 6f 77 2e 62 6c 6f 67 68 65 72 61 64 73 3d 77 69 6e 64 6f 77 2e 62 6c 6f 67 68 65 72 61 64 73 7c 7c 7b 61 64 71 3a 5b 5d 7d 3b 63 6f 6e 73 74 20 72 3d 77 69 6e 64 6f 77 2e 62 6c 6f 67 68 65 72 61 64 73 7d 2c 37 39 34 37 3a 28 65 2c 61 2c 6f 29 3d 3e 7b 6f 2e 64 28 61 2c 7b 4a 45 3a 28 29 3d 3e 73 2c 4d 44 3a 28 29 3d 3e 6c 2c 76 56 3a 28 29 3d 3e 69 Data Ascii: /* Copyright 2024 Penske Media Corporation. All Rights Reserved. */(()=>{"use strict";var e,a,o,r={82980:(e,a,o)=>{o.d(a,{A:()=>r}),window.blogherads=window.blogherads\|\|{adq:[]};const r=window.blogherads},7947:(e,a,o)=>{o.d(a,{JE:()=>s,MD:()=>l,vV:()=>i
2024-12-12 18:57:31 UTC	1379	IN	Data Raw: 6a 28 29 7b 76 61 72 20 65 2c 61 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 24 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 65 2e 6e 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 76 61 72 20 61 2c 6f 3b 6e 75 6c 6c 3d 3d 3d 28 61 3d 24 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6f 3d 61 2e 6d 61 72 6b 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6f 2e 63 61 6c 6c 28 61 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 61 29 7b 76 61 72 20 6f 2c 72 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 6f 3d 24 2e 70 65 72 66 6f 72 Data Ascii: j(){var e,a;return null===(e=$.performance)\|\|void 0===e\|\|null===(a=e.now)\|\|void 0===a?void 0:a.call(e)}function O(e){var a,o;null===(a=$.performance)\|\|void 0===a\|\|null===(o=a.mark)\|\|void 0===o\|\|o.call(a,e)}function k(e,a){var o,r;return null===(o=$.perfor
2024-12-12 18:57:31 UTC	1379	IN	Data Raw: 7d 29 7d 2c 6e 2e 66 3d 7b 7d 2c 6e 2e 65 3d 65 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 2e 66 29 2e 72 65 64 75 63 65 28 28 28 61 2c 6f 29 3d 3e 28 6e 2e 66 5b 6f 5d 28 65 2c 61 29 2c 61 29 29 2c 5b 5d 29 29 2c 6e 2e 75 3d 65 3d 3e 22 63 68 75 6e 6b 73 2f 22 2b 65 2b 22 2e 22 2b 7b 36 35 32 3a 22 39 31 66 64 65 38 31 65 36 36 64 66 34 65 32 31 64 38 34 35 22 2c 38 31 33 3a 22 64 37 35 30 62 30 37 61 63 38 33 64 39 31 66 30 64 38 61 37 22 2c 39 39 32 3a 22 34 39 65 62 34 33 34 33 34 62 36 66 37 64 31 35 32 65 39 35 22 2c 31 31 39 37 3a 22 63 37 64 63 30 31 38 32 64 38 37 32 37 39 31 63 38 31 66 36 22 2c 31 32 35 37 3a 22 39 39 36 64 64 61 37 36 64 62 65 63 63 39 34 39 39 31 66 30 22 2c 31 32 39 30 3a 22 34 38 62 39 Data Ascii: })},n.f={},n.e=e=>Promise.all(Object.keys(n.f).reduce(((a,o)=>(n.f[o](e,a),a)),[])),n.u=e=>"chunks/"+e+"."+{652:"91fde81e66df4e21d845",813:"d750b07ac83d91f0d8a7",992:"49eb43434b6f7d152e95",1197:"c7dc0182d872791c81f6",1257:"996dda76dbecc94991f0",1290:"48b9
2024-12-12 18:57:31 UTC	1379	IN	Data Raw: 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 2c 6e 2e 6f 3d 28 65 2c 61 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 2c 6f 3d 7b 7d 2c 6e 2e 6c 3d 28 65 2c 61 2c 72 2c 74 29 3d 3e 7b 69 66 28 6f 5b 65 5d 29 6f 5b 65 5d 2e 70 75 73 68 28 61 29 3b 65 6c 73 65 7b 76 61 72 20 64 2c 63 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 66 6f 72 28 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: his;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),n.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),o={},n.l=(e,a,r,t)=>{if(o[e])o[e].push(a);else{var d,c;if(void 0!==r)for(var f=document.getElemen
2024-12-12 18:57:31 UTC	833	IN	Data Raw: 67 20 63 68 75 6e 6b 20 22 2b 61 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 74 2b 22 3a 20 22 2b 64 2b 22 29 22 2c 63 2e 6e 61 6d 65 3d 22 43 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 63 2e 74 79 70 65 3d 74 2c 63 2e 72 65 71 75 65 73 74 3d 64 2c 72 5b 31 5d 28 63 29 7d 7d 29 2c 22 63 68 75 6e 6b 2d 22 2b 61 2c 61 29 7d 7d 3b 76 61 72 20 61 3d 28 61 2c 6f 29 3d 3e 7b 76 61 72 20 72 2c 74 2c 5b 64 2c 63 2c 66 5d 3d 6f 2c 6c 3d 30 3b 69 66 28 64 2e 73 6f 6d 65 28 28 61 3d 3e 30 21 3d 3d 65 5b 61 5d 29 29 29 7b 66 6f 72 28 72 20 69 6e 20 63 29 6e 2e 6f 28 63 2c 72 29 26 26 28 6e 2e 6d 5b 72 5d 3d 63 5b 72 5d 29 3b 69 66 28 66 29 66 28 6e 29 7d 66 6f 72 28 61 26 26 61 28 6f 29 3b 6c 3c 64 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 74 3d 64 5b 6c 5d 2c 6e 2e 6f Data Ascii: g chunk "+a+" failed.\n("+t+": "+d+")",c.name="ChunkLoadError",c.type=t,c.request=d,r[1](c)}}),"chunk-"+a,a)}};var a=(a,o)=>{var r,t,[d,c,f]=o,l=0;if(d.some((a=>0!==e[a]))){for(r in c)n.o(c,r)&&(n.m[r]=c[r]);if(f)f(n)}for(a&&a(o);l<d.length;l++)t=d[l],n.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49789	199.232.193.131	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:30 UTC	375	OUT	GET /sk/12/122/1226456/26278/header.js HTTP/1.1 Host: ads.blogherads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:31 UTC	637	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7666 x-amz-id-2: +5llUbUz1wIAY3TzW1oH85fVv4JMNPVcMtn5ny+iicUZ8gkmAY2eF/rLizOV+Jkdd09jlv5WwGY= x-amz-request-id: XWXWEY8Y3E11KQSH Last-Modified: Thu, 12 Dec 2024 01:03:50 GMT ETag: "f86ea7ed9a23794c8226a22e328e5a9d" x-amz-server-side-encryption: AES256 Content-Type: application/javascript Cache-Control: max-age=14400, stale-while-revalidate=3600 Accept-Ranges: bytes Date: Thu, 12 Dec 2024 18:57:31 GMT Via: 1.1 varnish Age: 3833 X-Served-By: cache-ewr-kewr1740052-EWR X-Cache: HIT X-Cache-Hits: 2 X-Timer: S1734029851.241736,VS0,VE0 Access-Control-Allow-Origin: *
2024-12-12 18:57:31 UTC	1379	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 73 6b 65 20 4d 65 64 69 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 32 30 32 34 31 32 31 32 30 31 30 33 2d 35 38 36 36 36 30 39 20 2a 2f 0a 76 61 72 20 62 6c 6f 67 68 65 72 61 64 73 3d 62 6c 6f 67 68 65 72 61 64 73 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 63 2c 73 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 74 26 26 74 2e 6d 61 72 6b 26 26 74 2e 6d 61 72 6b 28 22 70 6d 63 2d 61 74 6c 61 73 2d 6d 67 2d 63 6f 6e 66 69 67 2d 6c 6f 61 64 65 64 22 29 7d 63 2e 63 6f 6e 66 3d 63 2e 63 6f 6e 66 7c 7c 7b 22 64 66 70 5f 61 63 63 6f 75 6e 74 22 3a 38 33 35 32 Data Ascii: /* Copyright 2024 Penske Media Corporation. All Rights Reserved. 202412120103-5866609 */var blogherads=blogherads\|\|{};!function(c,s){function t(){var t=window.performance;t&&t.mark&&t.mark("pmc-atlas-mg-config-loaded")}c.conf=c.conf\|\|{"dfp_account":8352
2024-12-12 18:57:31 UTC	1379	IN	Data Raw: 2c 22 62 72 61 6e 64 69 6e 67 22 3a 22 6c 69 66 65 73 74 79 6c 65 73 22 2c 22 66 6f 72 63 65 5f 63 6f 6d 73 63 6f 72 65 5f 6c 6f 67 6f 22 3a 74 72 75 65 2c 22 64 66 70 5f 6e 61 6d 65 22 3a 22 61 2e 65 62 61 75 6d 73 77 6f 72 6c 64 22 2c 22 66 6c 6f 61 74 69 6e 67 70 6c 61 79 65 72 5f 64 65 73 6b 74 6f 70 5f 73 69 7a 65 22 3a 22 6d 65 64 69 75 6d 22 2c 22 66 6c 6f 61 74 69 6e 67 70 6c 61 79 65 72 5f 65 6e 61 62 6c 65 5f 63 6c 6f 73 65 5f 74 69 6d 65 22 3a 30 2c 22 66 6c 6f 61 74 69 6e 67 70 6c 61 79 65 72 5f 66 6c 6f 61 74 5f 70 6f 73 69 74 69 6f 6e 22 3a 22 72 69 67 68 74 22 2c 22 6a 75 73 74 70 72 65 6d 69 75 6d 5f 64 65 73 6b 74 6f 70 5f 63 66 22 3a 22 64 69 73 61 62 6c 65 22 2c 22 6a 75 73 74 70 72 65 6d 69 75 6d 5f 7a 6f 6e 65 5f 69 64 22 3a 22 31 31 Data Ascii: ,"branding":"lifestyles","force_comscore_logo":true,"dfp_name":"a.ebaumsworld","floatingplayer_desktop_size":"medium","floatingplayer_enable_close_time":0,"floatingplayer_float_position":"right","justpremium_desktop_cf":"disable","justpremium_zone_id":"11
2024-12-12 18:57:31 UTC	1379	IN	Data Raw: 6c 6f 6f 72 5f 75 73 5f 64 65 73 6b 74 6f 70 22 3a 30 2e 30 35 2c 22 70 72 69 63 65 5f 66 6c 6f 6f 72 73 5f 70 72 65 62 69 64 5f 66 6c 6f 6f 72 5f 75 73 5f 6d 6f 62 69 6c 65 5f 61 6e 64 72 6f 69 64 22 3a 30 2e 30 35 2c 22 70 72 69 63 65 5f 66 6c 6f 6f 72 73 5f 70 72 65 62 69 64 5f 66 6c 6f 6f 72 5f 75 73 5f 6d 6f 62 69 6c 65 5f 6e 6f 6e 5f 61 6e 64 72 6f 69 64 22 3a 30 2e 30 35 2c 22 72 68 6f 6d 62 75 73 5f 73 69 74 65 5f 69 64 22 3a 31 30 36 37 37 31 35 2c 22 72 75 62 69 63 6f 6e 5f 73 69 74 65 5f 69 64 22 3a 22 38 34 30 34 30 22 2c 22 72 75 62 69 63 6f 6e 5f 7a 6f 6e 65 5f 69 64 22 3a 22 31 33 35 35 37 39 32 22 2c 22 72 75 62 69 63 6f 6e 5f 76 69 64 65 6f 5f 73 69 74 65 5f 69 64 22 3a 22 31 36 34 37 31 32 22 2c 22 72 75 62 69 63 6f 6e 5f 76 69 64 65 6f Data Ascii: loor_us_desktop":0.05,"price_floors_prebid_floor_us_mobile_android":0.05,"price_floors_prebid_floor_us_mobile_non_android":0.05,"rhombus_site_id":1067715,"rubicon_site_id":"84040","rubicon_zone_id":"1355792","rubicon_video_site_id":"164712","rubicon_video
2024-12-12 18:57:31 UTC	1379	IN	Data Raw: 76 69 63 65 22 3a 22 6d 6f 62 69 6c 65 22 2c 22 69 64 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 36 32 34 32 39 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 31 37 37 31 34 36 7d 7d 2c 7b 22 69 6e 64 65 78 22 3a 35 2c 22 65 72 72 6f 72 73 22 3a 5b 5d 2c 22 6b 76 70 73 22 3a 7b 22 70 6c 61 74 22 3a 22 6d 6f 62 22 2c 22 73 74 22 3a 22 62 6f 74 74 6f 6d 22 7d 2c 22 73 69 7a 65 73 22 3a 5b 5b 33 32 30 2c 35 30 5d 2c 5b 33 30 30 2c 35 30 5d 5d 2c 22 64 65 76 69 63 65 22 3a 22 6d 6f 62 69 6c 65 22 2c 22 69 64 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 36 32 34 33 30 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 31 37 37 31 34 37 7d 7d 2c 7b 22 69 6e 64 65 78 22 3a 36 2c 22 65 72 72 6f 72 73 22 3a 5b 5d 2c 22 6b 76 70 73 22 3a 7b 22 70 6c 61 74 22 3a 22 6d 6f 62 22 Data Ascii: vice":"mobile","ids":{"pageId":162429,"placementId":177146}},{"index":5,"errors":[],"kvps":{"plat":"mob","st":"bottom"},"sizes":[[320,50],[300,50]],"device":"mobile","ids":{"pageId":162430,"placementId":177147}},{"index":6,"errors":[],"kvps":{"plat":"mob"
2024-12-12 18:57:31 UTC	1379	IN	Data Raw: 63 2d 34 61 61 31 2d 62 66 35 33 2d 36 64 33 35 33 38 32 32 64 35 66 38 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 65 73 6b 74 6f 70 20 4c 69 73 74 20 47 61 6c 6c 65 72 79 20 6e 6f 6e 2d 46 61 63 65 62 6f 6f 6b 22 2c 22 63 6f 6e 74 61 69 6e 65 72 5f 61 74 74 72 69 62 75 74 65 73 22 3a 22 73 74 79 6c 65 3d 5c 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 5c 22 22 2c 22 6d 61 74 63 68 5f 75 72 6c 22 3a 22 74 72 65 6e 64 69 6e 67 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 22 2c 22 6e 65 67 61 74 65 5f 6d 61 74 63 68 5f 75 72 6c 22 3a 31 2c 22 6c 61 7a 79 6c 6f 61 64 5f 6d 75 6c 74 69 70 6c 69 65 72 22 3a 33 2c 22 72 65 70 72 6f 63 65 73 73 22 3a 74 72 75 65 2c 22 Data Ascii: c-4aa1-bf53-6d353822d5f8","description":"Desktop List Gallery non-Facebook","container_attributes":"style=\"text-align: center; padding-bottom: 10px;\"","match_url":"trending.ebaumsworld.com","negate_match_url":1,"lazyload_multiplier":3,"reprocess":true,"
2024-12-12 18:57:31 UTC	771	IN	Data Raw: 6f 6e 22 3a 22 4d 6f 62 69 6c 65 20 4c 69 73 74 20 47 61 6c 6c 65 72 79 20 54 72 65 6e 64 69 6e 67 20 6f 6e 6c 79 22 2c 22 63 6f 6e 74 61 69 6e 65 72 5f 61 74 74 72 69 62 75 74 65 73 22 3a 22 73 74 79 6c 65 3d 5c 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 5c 22 22 2c 22 6d 61 74 63 68 5f 75 72 6c 22 3a 22 74 72 65 6e 64 69 6e 67 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 22 2c 22 6c 61 7a 79 6c 6f 61 64 5f 6d 75 6c 74 69 70 6c 69 65 72 22 3a 33 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 6d 6f 62 69 6c 65 22 7d 5d 2c 22 64 66 70 5f 63 68 69 6c 64 5f 6e 65 74 77 6f 72 6b 5f 63 6f 64 65 22 3a 22 31 30 31 39 30 31 37 22 2c 22 63 6d 70 22 3a 74 72 75 65 7d 2c 63 2e 61 64 71 3d Data Ascii: on":"Mobile List Gallery Trending only","container_attributes":"style=\"text-align: center; padding-bottom: 10px;\"","match_url":"trending.ebaumsworld.com","lazyload_multiplier":3,"platform":"mobile"}],"dfp_child_network_code":"1019017","cmp":true},c.adq=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49792	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:31 UTC	860	OUT	GET /thumbs/mediaavatar/87635471-1731638253.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:31 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: UT49CO/FxsZuEztmSdCDC1r3Vd6PuQbiNcMHF5uped/Q0fjp9HStSidYp7MRVCkiEJtWafr8Hrw= x-amz-request-id: K48Q80S051AXT61B Content-Type: image/jpeg Server: AmazonS3 X-LLID: 775d365525c56c91e352c8bd8e178dc5 Age: 2391598 Date: Thu, 12 Dec 2024 18:57:31 GMT Last-Modified: Fri, 15 Nov 2024 02:37:34 GMT Content-Length: 1301 Connection: close
2024-12-12 18:57:31 UTC	1301	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49787	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:31 UTC	860	OUT	GET /thumbs/mediaavatar/87635273-1731618848.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:31 UTC	389	IN	HTTP/1.1 200 OK x-amz-id-2: dyi4/wV8fohnmXpQR8Hz6FnPUInCKq1aKYQag1XcwUlkbbmKr7DXKSnBH5Q7cWwPKf3voxqr58Tfil3QZq1PFH6Q9nJJVjfo x-amz-request-id: 0ESJR5738RFTMDH6 Content-Type: image/jpeg Server: AmazonS3 X-LLID: ef7b91bf6e87f7b9315ae26efa067d3c Age: 2411002 Date: Thu, 12 Dec 2024 18:57:31 GMT Last-Modified: Thu, 14 Nov 2024 21:14:09 GMT Content-Length: 1607 Connection: close
2024-12-12 18:57:31 UTC	1607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49793	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:31 UTC	626	OUT	GET /thumbs/mediaavatar/87634957-1731604399.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:31 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: DMWFjFFbsyKHlrOtoFM8OihWnDdyW+xhnDIh0mP7siWT4VDRrF3clgqvOdmYEn5C1mOe57AEEro= x-amz-request-id: BM7GT4F2DM4ZKGR2 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 9feeed85acab572bab88d6566adad2c2 Age: 2425450 Date: Thu, 12 Dec 2024 18:57:31 GMT Last-Modified: Thu, 14 Nov 2024 17:13:20 GMT Content-Length: 1348 Connection: close
2024-12-12 18:57:31 UTC	1348	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49794	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:31 UTC	626	OUT	GET /thumbs/mediaavatar/87634625-1731533401.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:31 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: Ji74mDBkfcVjtSkT8dqgmiVm5uLqQbtbXhpjI8zSN3lcKMoA7FfE2+pO5SsgH9KwDda4Jmf07kA= x-amz-request-id: T64CPEVQA1MX8WDZ Content-Type: image/jpeg Server: AmazonS3 Age: 2496448 Date: Thu, 12 Dec 2024 18:57:31 GMT Last-Modified: Wed, 13 Nov 2024 21:30:02 GMT X-LLID: dbdb19b756f5a6a0bfd092499202800c Content-Length: 1348 Connection: close
2024-12-12 18:57:31 UTC	1348	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49786	18.66.152.227	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:31 UTC	359	OUT	GET /js/chartbeat.js HTTP/1.1 Host: static.chartbeat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:32 UTC	589	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 39061 Connection: close Date: Thu, 12 Dec 2024 03:34:37 GMT Server: nginx Last-Modified: Wed, 05 Jun 2024 00:13:00 GMT Cross-Origin-Resource-Policy: cross-origin Expires: Fri, 13 Dec 2024 03:34:37 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes ETag: "665fad8c-9895" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fe31fd81e932533c22303983879bb2be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: d1RZBEcYNfT1htb_P3K9KwjSY-DaxKfg1Gp0QTww_clAlapUgUHu0w== Age: 55373
2024-12-12 18:57:32 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 2c 68 3d 74 72 75 65 2c 69 3d 6e 75 6c 6c 2c 6b 3d 66 61 6c 73 65 2c 6e 2c 6f 3d 74 68 69 73 3b 0a 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 62 3d 3d 22 6f 62 6a 65 63 74 22 29 69 66 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 65 6c 73 65 20 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3b 69 66 28 63 3d 3d 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 29 72 65 74 75 72 6e 22 6f 62 6a Data Ascii: (function(){var g=void 0,h=true,i=null,k=false,n,o=this;function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"obj
2024-12-12 18:57:32 UTC	16384	IN	Data Raw: 76 65 49 74 65 6d 28 61 29 2c 62 2e 72 65 6d 6f 76 65 49 74 65 6d 28 61 2b 22 5f 65 78 70 69 72 65 73 22 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 62 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 7a 61 3d 61 7c 7c 22 22 3b 74 68 69 73 2e 53 3d 62 7c 7c 22 2f 22 3b 74 68 69 73 2e 67 62 3d 64 7c 7c 7b 7d 3b 74 68 69 73 2e 64 61 3d 28 74 68 69 73 2e 4f 61 3d 4f 62 28 74 68 69 73 2e 67 62 29 29 3f 22 22 3a 63 7c 7c 55 61 28 29 3b 74 68 69 73 2e 4f 62 3d 4d 2e 42 28 29 21 3d 3d 69 7c 7c 4c 2e 4c 62 28 74 68 69 73 2e 53 2c 74 68 69 73 2e 64 61 29 3b 74 68 69 73 2e 7a 62 3d 6b 7d 6e 3d 50 62 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 2e 69 73 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4f 62 7d 3b 6e 2e 63 72 65 61 Data Ascii: veItem(a),b.removeItem(a+"_expires"))};function Pb(a,b,c,d){this.za=a\|\|"";this.S=b\|\|"/";this.gb=d\|\|{};this.da=(this.Oa=Ob(this.gb))?"":c\|\|Ua();this.Ob=M.B()!==i\|\|L.Lb(this.S,this.da);this.zb=k}n=Pb.prototype;n.isSupported=function(){return this.Ob};n.crea
2024-12-12 18:57:32 UTC	5608	IN	Data Raw: 73 2e 61 5b 49 5d 3d 76 28 74 68 69 73 2e 61 5b 49 5d 29 3b 74 68 69 73 2e 4a 62 3d 42 28 43 2c 22 63 22 2c 74 68 69 73 2e 67 63 2c 74 68 69 73 29 3b 74 68 69 73 2e 4b 62 3d 42 28 43 2c 22 72 22 2c 74 68 69 73 2e 68 63 2c 74 68 69 73 29 3b 74 68 69 73 2e 55 3d 69 7d 3b 58 2e 70 72 6f 74 6f 74 79 70 65 2e 47 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 47 61 3d 61 7d 3b 0a 58 2e 70 72 6f 74 6f 74 79 70 65 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6b 2e 75 70 64 61 74 65 28 22 5f 63 68 61 72 74 62 65 61 74 34 22 2c 5b 22 74 3d 22 2b 74 68 69 73 2e 57 61 2c 22 45 3d 22 2b 74 68 69 73 2e 46 2e 63 61 2c 22 78 3d 22 2b 69 63 28 74 68 69 73 29 2c 22 63 3d 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 28 71 28 29 2d 74 68 69 73 2e 6c 61 29 Data Ascii: s.a[I]=v(this.a[I]);this.Jb=B(C,"c",this.gc,this);this.Kb=B(C,"r",this.hc,this);this.U=i};X.prototype.Gb=function(a){this.Ga=a};X.prototype.ya=function(){this.k.update("_chartbeat4",["t="+this.Wa,"E="+this.F.ca,"x="+ic(this),"c="+Math.round((q()-this.la)
2024-12-12 18:57:32 UTC	685	IN	Data Raw: 52 46 4c 59 3d 59 3b 76 61 72 20 67 64 3d 6f 2e 70 53 55 50 45 52 46 4c 59 5f 6d 61 62 2c 5a 3d 6f 2e 70 53 55 50 45 52 46 4c 59 5f 70 75 62 2c 68 64 3d 5b 5d 3b 67 64 26 26 68 64 2e 70 75 73 68 28 67 64 29 3b 69 66 28 5a 29 68 64 2e 70 75 73 68 28 5a 29 2c 5a 2e 61 64 64 45 6e 67 61 67 65 64 41 64 46 69 6c 74 65 72 26 26 28 59 2e 61 64 64 45 6e 67 61 67 65 64 41 64 46 69 6c 74 65 72 3d 5a 2e 61 64 64 45 6e 67 61 67 65 64 41 64 46 69 6c 74 65 72 29 2c 5a 2e 72 65 66 72 65 73 68 41 64 26 26 28 59 2e 72 65 66 72 65 73 68 41 64 3d 5a 2e 72 65 66 72 65 73 68 41 64 29 2c 5a 2e 72 65 67 69 73 74 65 72 47 70 74 53 6c 6f 74 26 26 28 59 2e 72 65 67 69 73 74 65 72 47 70 74 53 6c 6f 74 3d 5a 2e 72 65 67 69 73 74 65 72 47 70 74 53 6c 6f 74 29 2c 4a 62 28 22 5f 63 62 Data Ascii: RFLY=Y;var gd=o.pSUPERFLY_mab,Z=o.pSUPERFLY_pub,hd=[];gd&&hd.push(gd);if(Z)hd.push(Z),Z.addEngagedAdFilter&&(Y.addEngagedAdFilter=Z.addEngagedAdFilter),Z.refreshAd&&(Y.refreshAd=Z.refreshAd),Z.registerGptSlot&&(Y.registerGptSlot=Z.registerGptSlot),Jb("_cb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49788	18.66.152.227	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:31 UTC	369	OUT	GET /js/chartbeat_mab_image.js HTTP/1.1 Host: static.chartbeat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:32 UTC	587	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 24339 Connection: close Date: Thu, 12 Dec 2024 18:52:56 GMT Server: nginx Last-Modified: Thu, 21 Dec 2023 01:18:23 GMT Cross-Origin-Resource-Policy: cross-origin Expires: Fri, 13 Dec 2024 18:52:56 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes ETag: "6583925f-5f13" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 24377ef75edd4e6b9442a3a00a398438.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: npXmDn0IXtd2Lj845qmhogbxZySwwA00djli9t6L9_yJkkW_CzNN9g== Age: 275
2024-12-12 18:57:32 UTC	15797	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 2c 6d 3d 74 72 75 65 2c 6e 3d 6e 75 6c 6c 2c 6f 3d 66 61 6c 73 65 2c 70 3d 74 68 69 73 3b 0a 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 62 3d 3d 22 6f 62 6a 65 63 74 22 29 69 66 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 65 6c 73 65 20 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3b 69 66 28 63 3d 3d 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 Data Ascii: (function(){var g=void 0,m=true,n=null,o=false,p=this;function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"objec
2024-12-12 18:57:32 UTC	8542	IN	Data Raw: 28 72 3d 31 36 3b 72 3c 38 30 3b 72 2b 2b 29 6a 5b 72 5d 3d 28 6a 5b 72 2d 33 5d 5e 6a 5b 72 2d 38 5d 5e 6a 5b 72 2d 31 34 5d 5e 6a 5b 72 2d 31 36 5d 29 3c 3c 31 7c 28 6a 5b 72 2d 33 5d 5e 6a 5b 72 2d 38 5d 5e 6a 5b 72 2d 31 34 5d 5e 6a 5b 72 2d 31 36 5d 29 3e 3e 3e 33 31 3b 62 3d 63 3b 69 3d 64 3b 6b 3d 65 3b 6c 3d 66 3b 73 3d 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 30 3b 72 2b 2b 29 75 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2f 32 30 29 2c 75 3d 28 62 3c 3c 35 7c 62 3e 3e 3e 32 37 29 2b 28 75 3d 3d 30 3f 69 26 6b 5e 7e 69 26 6c 3a 75 3d 3d 31 3f 69 5e 6b 5e 6c 3a 75 3d 3d 32 3f 69 26 6b 5e 69 26 6c 5e 6b 26 6c 3a 69 5e 6b 5e 6c 29 2b 73 2b 61 5b 75 5d 2b 6a 5b 72 5d 26 34 32 39 34 39 36 37 32 39 35 2c 73 3d 6c 2c 6c 3d 6b 2c 6b 3d 69 3c 3c 33 30 7c 69 3e Data Ascii: (r=16;r<80;r++)j[r]=(j[r-3]^j[r-8]^j[r-14]^j[r-16])<<1\|(j[r-3]^j[r-8]^j[r-14]^j[r-16])>>>31;b=c;i=d;k=e;l=f;s=h;for(r=0;r<80;r++)u=Math.floor(r/20),u=(b<<5\|b>>>27)+(u==0?i&k^~i&l:u==1?i^k^l:u==2?i&k^i&l^k&l:i^k^l)+s+a[u]+j[r]&4294967295,s=l,l=k,k=i<<30\|i>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49801	104.22.64.220	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:31 UTC	366	OUT	GET /api/init-398c0g22ym0ukn3detw.js HTTP/1.1 Host: api.b2c.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:31 UTC	288	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:31 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=600 CF-Cache-Status: HIT Age: 2 Last-Modified: Thu, 12 Dec 2024 18:57:29 GMT Server: cloudflare CF-RAY: 8f0ff0cdac950f81-EWR
2024-12-12 18:57:31 UTC	1081	IN	Data Raw: 34 34 39 33 0d 0a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 30 3c 31 26 26 28 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 70 29 7b 69 66 28 21 70 29 7b 5f 5f 24 50 50 3d 70 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 76 29 7b 70 2e 65 28 6b 2c 76 29 7d 3b 70 2e 77 3d 5b 5d 3b 70 2e 71 3d 5b 5d 3b 70 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 76 29 7b 70 2e 71 2e 70 75 73 68 28 5b 6b 2c 76 2c 30 5d 29 7d 3b 5f 5f 24 50 50 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 2c 74 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 65 2e 73 74 79 6c 65 Data Ascii: 4493Math.random()*10<1&&(function(a,d,p){if(!p){__$PP=p=function(k,v){p.e(k,v)};p.w=[];p.q=[];p.e=function(k,v){p.q.push([k,v,0])};__$PP.e=function(){var e,n,t=0;function i(){return e\|\|((e=document.createElement("div")).style.position="absolute",e.style
2024-12-12 18:57:31 UTC	1369	IN	Data Raw: 65 7c 7c 77 69 6e 64 6f 77 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 2c 6c 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 2c 67 3d 6c 28 29 2c 70 3d 31 37 35 65 33 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 31 65 33 2a 65 29 2f 31 65 33 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 76 61 72 20 6e 3d 6c 28 29 3b Data Ascii: e\|\|window.oRequestAnimationFrame\|\|window.setTimeout,l=window.performance&&"function"==typeof performance.now?function(){return performance.now()}:function(){return+new Date},g=l(),p=175e3;function d(e){return Math.round(1e3*e)/1e3}function m(e){var n=l();
2024-12-12 18:57:31 UTC	1369	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 29 3a 31 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 26 26 28 22 73 65 6c 65 63 74 22 3d 3d 3d 6f 7c 7c 22 6d 6f 75 73 65 75 70 22 3d 3d 3d 6f 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 6f 7c 7c 22 74 6f 75 63 68 65 6e 64 22 3d 3d 3d 6f 29 29 7b 76 61 72 20 6e 3d 72 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 2c 74 3d 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 75 62 73 74 72 28 30 2c 78 29 3b 21 63 26 26 74 26 26 28 63 3d 31 2c 61 28 22 73 65 6c 65 63 74 65 64 2d 74 65 78 74 22 2c 74 29 2c 6e 2e 72 61 6e 67 65 43 6f 75 6e 74 26 26 61 28 22 73 65 6c 65 63 74 65 64 2d 68 74 6d 6c 22 2c 53 28 6e 2e 67 65 74 52 61 6e 67 65 41 74 Data Ascii: documentElement.scrollTop):1)),"function"==typeof r.getSelection&&("select"===o\|\|"mouseup"===o\|\|"keyup"===o\|\|"touchend"===o)){var n=r.getSelection(),t=n.toString().substr(0,x);!c&&t&&(c=1,a("selected-text",t),n.rangeCount&&a("selected-html",S(n.getRangeAt
2024-12-12 18:57:31 UTC	1369	IN	Data Raw: 20 6e 3d 30 2c 74 3d 7b 76 69 64 65 6f 69 6e 70 75 74 3a 30 2c 61 75 64 69 6f 69 6e 70 75 74 3a 30 2c 61 75 64 69 6f 6f 75 74 70 75 74 3a 30 7d 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 6f 3d 65 5b 6e 5d 2e 6b 69 6e 64 3b 74 5b 6f 5d 3d 28 74 5b 6f 5d 7c 7c 30 29 2b 31 7d 66 6f 72 28 6e 20 69 6e 20 74 29 69 28 22 6d 65 64 69 61 2d 22 2b 6e 2c 74 5b 6e 5d 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 22 75 72 6c 22 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 22 72 65 66 65 72 72 65 72 22 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 29 29 7d Data Ascii: n=0,t={videoinput:0,audioinput:0,audiooutput:0};n<e.length;n++){var o=e[n].kind;t[o]=(t[o]\|\|0)+1}for(n in t)i("media-"+n,t[n])})},function(e){e("url",a(function(){return location.href}))},function(e){e("referrer",a(function(){return document.referrer}))}
2024-12-12 18:57:31 UTC	1369	IN	Data Raw: 77 2e 74 6f 70 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 2c 6e 28 22 74 6f 70 2d 70 61 67 65 73 69 7a 65 22 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 57 69 64 74 68 2b 22 78 22 2b 77 69 6e 64 6f 77 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 61 28 4f 29 2c 74 21 3d 3d 65 26 26 6e 28 22 72 65 73 69 7a 65 22 2c 74 3d 65 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 Data Ascii: w.top.innerHeight),n("top-pagesize",window.top.document.documentElement.scrollWidth+"x"+window.top.document.documentElement.scrollHeight))}catch(e){}window.addEventListener("resize",function(e){e=a(O),t!==e&&n("resize",t=e)})},function(e){var n=Math.floor
2024-12-12 18:57:31 UTC	1369	IN	Data Raw: 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 22 4e 2f 41 22 3b 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2c 6f 3d 5b 5d 2c 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 6f 5b 69 5d 3d 74 5b 69 5d 2e 6e 61 6d 65 2b 22 3b 22 2b 74 5b 69 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 2b 22 3b 22 2b 74 5b 69 5d 2e 66 69 6c 65 6e 61 6d 65 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 5b 69 5d 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6f 5b 69 5d 2b 3d 22 20 28 22 2b 74 5b 69 5d 5b 72 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 2b 22 3b 22 2b 74 5b 69 5d 5b 72 5d 2e 74 79 70 65 2b 22 3b 22 2b Data Ascii: },function(e){var n="N/A";if(window.navigator&&navigator.plugins){for(var t=navigator.plugins,o=[],i=0;i<t.length;i++){o[i]=t[i].name+";"+t[i].description+";"+t[i].filename;for(var r=0;r<t[i].length;r++)o[i]+=" ("+t[i][r].description+";"+t[i][r].type+";"+
2024-12-12 18:57:31 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 6e 3d 66 28 6e 29 7d 29 29 2c 6e 7d 29 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 65 3f 28 6e 28 22 62 61 74 74 65 72 79 22 2c 5b 65 2e 63 68 61 72 67 69 6e 67 3f 31 3a 30 2c 65 2e 6c 65 76 65 6c 2c 65 2e 63 68 61 72 67 69 6e 67 54 69 6d 65 2c 65 2e 64 69 73 63 68 61 72 67 69 6e 67 54 69 6d 65 5d 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 77 28 65 2c 22 63 68 61 72 67 69 6e 67 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 22 63 68 61 72 67 69 6e 67 63 68 61 6e 67 65 22 2c 65 2e 63 68 61 72 67 69 6e 67 3f 31 3a 30 29 7d 29 29 3a 6e 28 22 62 61 74 74 65 72 79 22 2c 22 6e 2f 61 22 29 7d 6e 61 76 69 67 61 74 6f 72 2e 67 65 74 42 61 74 74 65 72 79 3f 6e 61 76 69 67 61 74 6f 72 Data Ascii: ction(){n=f(n)})),n})}))},function(n){function e(e){e?(n("battery",[e.charging?1:0,e.level,e.chargingTime,e.dischargingTime].join(" ")),w(e,"chargingchange",function(){n("chargingchange",e.charging?1:0)})):n("battery","n/a")}navigator.getBattery?navigator
2024-12-12 18:57:31 UTC	1369	IN	Data Raw: 65 2f 2e 74 65 73 74 28 61 2e 69 64 29 3f 22 67 6f 6f 67 6c 65 22 3a 61 2e 69 64 29 2c 75 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 75 2e 77 69 64 74 68 29 2b 22 78 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 75 2e 68 65 69 67 68 74 29 2b 22 40 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 75 2e 78 29 2b 22 78 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 75 2e 79 29 2b 22 23 22 2b 63 3b 69 2e 70 75 73 68 28 64 29 2c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3d 3d 3d 77 69 6e 64 6f 77 26 26 65 28 22 70 61 67 65 2d 66 72 61 6d 65 2d 73 65 6c 66 22 2c 64 29 7d 65 28 22 70 61 67 65 2d 66 72 61 6d 65 2d 63 6f 75 6e 74 22 2c 6f 2e 6c 65 6e 67 74 68 29 2c 30 3c 69 2e 6c 65 6e 67 74 68 26 26 65 28 22 Data Ascii: e/.test(a.id)?"google":a.id),u=a.getBoundingClientRect(),d=Math.round(u.width)+"x"+Math.round(u.height)+"@"+Math.round(u.x)+"x"+Math.round(u.y)+"#"+c;i.push(d),a.contentWindow===window&&e("page-frame-self",d)}e("page-frame-count",o.length),0<i.length&&e("
2024-12-12 18:57:31 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 26 26 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 61 6e 79 2d 70 6f 69 6e 74 65 72 22 29 3b 65 28 22 61 6e 79 2d 70 6f 69 6e 74 65 72 22 2c 6e 3f 6e 2e 6d 61 74 63 68 65 73 3f 31 3a 30 3a 22 6e 2f 61 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 22 63 68 72 6f 6d 65 22 2c 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 3f 31 3a 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 22 77 65 62 72 74 63 22 2c 77 69 6e 64 6f 77 2e 52 54 43 50 65 65 72 43 6f 6e 6e 65 63 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 52 54 43 44 61 74 61 43 68 61 6e 6e 65 6c 3f 31 3a 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e Data Ascii: nction(e){var n=window.matchMedia&&window.matchMedia("any-pointer");e("any-pointer",n?n.matches?1:0:"n/a")},function(e){e("chrome",window.chrome?1:0)},function(e){e("webrtc",window.RTCPeerConnection&&window.RTCDataChannel?1:0)},function(n){var e=document.
2024-12-12 18:57:32 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 73 65 6c 66 2e 67 65 74 3b 6e 26 26 6e 2e 74 6f 53 74 72 69 6e 67 28 29 26 26 74 28 22 70 75 70 70 65 74 65 65 72 22 2c 31 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 63 6c 6f 63 6b 22 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 2c 6e 3d 6c 28 29 2c 74 3d 6e 2b 32 3b 6e 3d 3d 3d 6c 28 29 3b 29 3b 66 6f 72 28 3b 6c 28 29 3c 74 3b 65 2b 2b 29 3b 72 65 74 75 72 6e 20 65 7d 29 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 31 2c 6f 3d 6c 28 29 2b 31 30 30 3b 21 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 75 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 29 3c 6f Data Ascii: contentWindow.self.get;n&&n.toString()&&t("puppeteer",1)})},function(e){requestAnimationFrame(function(){e("clock",a(function(){for(var e=1,n=l(),t=n+2;n===l(););for(;l()<t;e++);return e}))})},function(n){var t=1,o=l()+100;!function e(){u(function(){l()<o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49802	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:32 UTC	850	OUT	GET /img/desktop/paginationArrows.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:32 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: 8dhlldiKHKQdbMogH+667/xVG0VJ1Br3Bxyhowc7QhfmYrmswOT9eQcm4T4gDZMXgAYBMll9Evw= x-amz-request-id: HNB6DEYX5G591PCQ Content-Type: image/png Server: AmazonS3 X-LLID: 1070677717fbbd00a6193d52bf9d709f Age: 24471250 Date: Thu, 12 Dec 2024 18:57:32 GMT Last-Modified: Wed, 02 Aug 2023 20:44:43 GMT Content-Length: 1923 Connection: close
2024-12-12 18:57:32 UTC	1923	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 9c 08 06 00 00 00 76 81 2b c2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 35 37 37 32 2c 20 32 30 31 34 2f 30 31 2f 31 33 2d 31 39 3a 34 34 3a 30 30 20 20 Data Ascii: PNGIHDRv+tEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49803	3.160.188.50	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:32 UTC	532	OUT	GET /beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:32 UTC	533	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 16665 Connection: close Last-Modified: Mon, 09 Dec 2024 15:01:00 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 12 Dec 2024 04:33:54 GMT Cache-Control: max-age=86400 ETag: "f938e5cf59280e13f9597c828fb3b891" X-Cache: Hit from cloudfront Via: 1.1 3635a3f2591277e6a6edf40e028cba0a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P5 X-Amz-Cf-Id: cYON62qTZbbRSfq7mB1rO6KDbT5TL_T7IrmcYzbn4mSCSwv3U0umJw== Age: 51819
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: 76 61 72 20 43 4f 4d 53 43 4f 52 45 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 3c 72 3b 65 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 69 29 26 26 28 6e 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: var COMSCORE=function(n){var t=function(){return t=Object.assign\|\|function(n){for(var t,e=1,r=arguments.length;e<r;e++)for(var i in t=arguments[e])Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i]);return n},t.apply(this,arguments)};"function"==typeof
2024-12-12 18:57:33 UTC	281	IN	Data Raw: 6e 74 65 67 72 61 74 69 6f 6e 3a 21 30 2c 65 6e 61 62 6c 65 43 6d 70 49 6e 74 65 67 72 61 74 69 6f 6e 3a 21 30 2c 65 6e 61 62 6c 65 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 3a 21 31 2c 62 79 70 61 73 73 55 73 65 72 43 6f 6e 73 65 6e 74 52 65 71 75 69 72 65 6d 65 6e 74 46 6f 72 31 50 43 6f 6f 6b 69 65 3a 21 31 2c 65 6e 61 62 6c 65 44 6f 63 75 6d 65 6e 74 55 72 6c 43 6f 6c 6c 65 63 74 69 6f 6e 3a 21 30 2c 65 6e 61 62 6c 65 44 6f 63 75 6d 65 6e 74 54 69 74 6c 65 43 6f 6c 6c 65 63 74 69 6f 6e 3a 21 30 2c 65 6e 61 62 6c 65 44 6f 63 75 6d 65 6e 74 52 65 66 65 72 72 65 72 43 6f 6c 6c 65 63 74 69 6f 6e 3a 21 30 7d 7d 29 2c 4e 3d 75 28 46 2c 46 2e 65 74 29 2c 42 3d 75 28 46 2c 46 2e 73 74 29 3b 72 65 74 75 72 6e 20 46 2e 66 74 28 29 2c 42 28 29 2c 6e 2e 62 Data Ascii: ntegration:!0,enableCmpIntegration:!0,enableFirstPartyCookie:!1,bypassUserConsentRequirementFor1PCookie:!1,enableDocumentUrlCollection:!0,enableDocumentTitleCollection:!0,enableDocumentReferrerCollection:!0}}),N=u(F,F.et),B=u(F,F.st);return F.ft(),B(),n.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49804	157.240.196.15	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:32 UTC	536	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:33 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-WkeFfWmI' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-12-12 18:57:33 UTC	1694	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-12-12 18:57:33 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-12-12 18:57:33 UTC	14656	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: 7c 7c 64 3d 3d 3d 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 7c 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 Data Ascii: \|\|d==="GLOBAL_VARIABLE"\|\|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==nu
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: 69 63 72 6f 64 61 74 61 5f 64 65 6c 61 79 22 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 Data Ascii: icrodata_delay"}})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 Data Ascii: ignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f)
2024-12-12 18:57:33 UTC	1727	IN	Data Raw: 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 Data Ascii: ocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}f
2024-12-12 18:57:33 UTC	14657	IN	Data Raw: 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 Data Ascii: y:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEnc
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c Data Ascii: sLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET");f.getFbeventsModules("signal
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 6e 75 6d 62 65 72 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 Data Ascii: ){return function(a){if(typeof a!=="string")throw new g();return a}}function q(){return function(a){if(typeof a!=="string"&&typeof a!=="number")throw new g();return a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49808	104.22.74.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:32 UTC	368	OUT	GET /tag?h=literally-media&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:33 UTC	511	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: W/"73d48c8c441ea83e2ddcffd3a7452542" Last-Modified: Thu, 12 Dec 2024 18:47:11 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 622 Server: cloudflare CF-RAY: 8f0ff0d5892e43d0-EWR
2024-12-12 18:57:33 UTC	858	IN	Data Raw: 37 64 61 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 73 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 Data Ascii: 7da1!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e
2024-12-12 18:57:33 UTC	1369	IN	Data Raw: 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 6f 3b 29 74 72 79 7b 69 66 28 6e 3d 31 2c 73 26 26 28 72 3d 32 26 69 5b 30 5d 3f 73 2e 72 65 74 75 72 6e 3a 69 5b 30 5d 3f 73 2e 74 68 72 6f 77 7c 7c 28 28 72 3d 73 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 73 29 2c 30 29 3a 73 2e 6e 65 78 74 29 26 26 21 28 72 3d 72 2e 63 61 6c 6c 28 73 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 72 3b 73 77 69 74 63 68 28 73 3d 30 2c 72 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 72 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 72 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 Data Ascii: executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=0,r&&(i=[2&i[0],r.value]),i[0]){case 0:case 1:r=i;break;case 4:return o.label++,{value:i[1],done:!1};case 5
2024-12-12 18:57:33 UTC	1369	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 6f 2c 63 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 33 2c 2c 34 5d 29 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 Data Ascii: .document.body\|\|window.document.documentElement).appendChild(s)}))}function c(){return t(this,void 0,void 0,(function(){var e,t,i,o,c;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),window.__bt=window.__bt\|\|{},"function"!=ty
2024-12-12 18:57:33 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 77 69 74 63 68 28 74 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 5b 34 2c 61 28 65 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 5b 32 2c 21 74 2e 73 65 6e 74 28 29 5d 7d 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 65 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 32 2c 2c 33 5d 29 2c 5b 34 2c 66 65 74 63 68 28 6f 2c 7b 6d 6f 64 65 Data Ascii: ction(){return n(this,(function(t){switch(t.label){case 0:return[4,a(e)];case 1:return[2,!t.sent()]}}))}))}function u(){return t(this,void 0,void 0,(function(){return n(this,(function(e){switch(e.label){case 0:return e.trys.push([0,2,,3]),[4,fetch(o,{mode
2024-12-12 18:57:33 UTC	1369	IN	Data Raw: 38 38 37 30 31 37 39 38 34 22 2c 22 35 30 38 32 39 34 34 34 33 33 30 32 39 31 32 30 22 2c 22 35 37 32 39 37 34 39 33 31 34 38 33 30 33 33 36 22 2c 22 34 38 36 34 31 30 31 37 33 30 37 34 36 33 36 38 22 2c 22 35 37 30 30 39 32 33 31 39 39 33 32 34 31 36 30 22 2c 22 35 31 32 30 33 32 38 36 38 32 39 36 32 39 34 34 22 2c 22 36 33 31 35 39 31 35 36 37 33 36 30 30 30 30 30 22 2c 22 36 33 32 36 31 37 36 35 33 31 33 34 39 35 30 34 22 2c 22 35 36 35 36 39 31 33 30 31 37 35 36 39 32 38 30 22 2c 22 35 31 38 38 32 37 39 30 33 38 36 34 30 31 32 38 22 2c 22 35 37 35 35 32 34 35 35 35 37 31 38 36 35 36 30 22 2c 22 35 31 38 30 34 39 30 33 31 36 32 35 31 31 33 36 22 2c 22 35 37 34 39 39 30 35 30 36 37 33 34 33 38 37 32 22 2c 22 35 31 37 35 34 36 32 30 32 34 37 30 38 30 39 Data Ascii: 887017984","5082944433029120","5729749314830336","4864101730746368","5700923199324160","5120328682962944","6315915673600000","6326176531349504","5656913017569280","5188279038640128","5755245557186560","5180490316251136","5749905067343872","517546202470809
2024-12-12 18:57:33 UTC	1369	IN	Data Raw: 64 69 73 61 62 6c 65 5f 61 75 74 6f 6d 61 74 69 63 5f 64 65 74 65 63 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 20 22 73 69 6e 67 6c 65 5f 63 6c 69 63 6b 5f 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 72 65 6e 64 65 72 5f 74 6f 5f 61 61 5f 75 73 65 72 73 5f 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 20 22 77 65 62 73 69 74 65 73 22 3a 7b 7d 2c 20 22 73 63 72 69 70 74 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 74 6d 65 73 73 61 67 65 2e 63 6f 6d 2f 73 63 72 69 70 74 2f 72 6c 69 6e 6b 2e 6a 73 3f 6f 3d 35 37 32 30 39 38 30 38 35 34 39 33 31 34 35 36 26 62 74 5f 65 6e 76 3d 70 72 6f 64 22 7d 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 70 61 72 73 69 6e 67 20 52 4c 20 73 65 74 74 69 6e 67 73 22 Data Ascii: disable_automatic_detection":false, "single_click_disabled":false, "render_to_aa_users_disabled":false}, "websites":{}, "script":"https://cdn.btmessage.com/script/rlink.js?o=5720980854931456&bt_env=prod"}}catch(e){console.error("Error parsing RL settings"
2024-12-12 18:57:33 UTC	1369	IN	Data Raw: 2c 49 2c 44 2c 4f 2c 52 2c 50 2c 6b 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 69 66 28 74 3d 7b 77 65 62 73 69 74 65 49 44 3a 76 6f 69 64 20 30 2c 63 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3a 21 31 2c 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3a 21 31 2c 77 69 64 67 65 74 3a 21 31 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5b 5c 5d 5d 2f 67 2c 22 5c 5c 24 26 22 29 3b 76 61 72 20 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 65 2b 22 28 3d 28 5b 5e 26 23 5d 2a 29 7c 26 7c 23 7c 24 29 22 29 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 32 5d 3f 64 Data Ascii: ,I,D,O,R,P,k;return n(this,(function(n){switch(n.label){case 0:if(t={websiteID:void 0,contentEnabled:!1,mobileContentEnabled:!1,widget:!1},d=function(e,t){e=e.replace(/[\[\]]/g,"\\$&");var n=new RegExp("[?&]"+e+"(=([^&#]*)\|&\|#\|$)").exec(t);return n?n[2]?d
2024-12-12 18:57:33 UTC	1369	IN	Data Raw: 35 5d 3b 63 61 73 65 20 35 3a 69 66 28 68 26 26 68 20 69 6e 20 54 3f 28 5f 3d 54 5b 68 5d 2c 74 2e 77 65 62 73 69 74 65 49 44 3d 6e 75 6c 6c 21 3d 3d 28 73 3d 5f 2e 77 29 26 26 76 6f 69 64 20 30 21 3d 3d 73 3f 73 3a 5f 2e 77 65 62 73 69 74 65 5f 69 64 2c 74 2e 63 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 6e 75 6c 6c 21 3d 3d 28 72 3d 5f 2e 63 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 5f 2e 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 5f 2e 6d 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 5f 2e 6d 6f 62 69 6c 65 5f 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 77 69 64 67 65 74 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 5f 2e 77 69 64 67 65 74 Data Ascii: 5];case 5:if(h&&h in T?(_=T[h],t.websiteID=null!==(s=_.w)&&void 0!==s?s:_.website_id,t.contentEnabled=null!==(r=_.ce)&&void 0!==r?r:_.content_enabled,t.mobileContentEnabled=null!==(i=_.me)&&void 0!==i?i:_.mobile_content_enabled,t.widget=null!==(o=_.widget
2024-12-12 18:57:33 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 22 2b 43 2b 22 2f 65 76 65 6e 74 73 2f 75 6e 6b 6e 6f 77 6e 5f 64 6f 6d 61 69 6e 73 3f 75 70 61 70 69 3d 74 72 75 65 26 74 69 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 78 2e 74 72 61 63 65 49 44 29 2b 22 26 63 76 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4c 29 2c 4f 29 7d 72 65 74 75 72 6e 5b 32 2c 7b 73 69 74 65 49 6e 66 6f 3a 74 7d 5d 7d 7d 29 29 7d 29 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 72 65 74 75 72 6e 20 42 7d 42 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 5f 62 74 5f 74 61 67 5f 64 3d 7b 6f 72 67 49 44 3a 53 2c 64 6f 6d 61 69 6e 3a 45 2c 73 69 74 65 49 6e 66 6f 3a 65 2e 73 69 74 65 49 6e 66 6f 2c 61 70 69 44 6f 6d 61 Data Ascii: "https://"+C+"/events/unknown_domains?upapi=true&tid="+encodeURIComponent(x.traceID)+"&cv="+encodeURIComponent(L),O)}return[2,{siteInfo:t}]}}))}))}();function H(){return B}B.then((function(e){window.__bt_tag_d={orgID:S,domain:E,siteInfo:e.siteInfo,apiDoma
2024-12-12 18:57:33 UTC	1369	IN	Data Raw: 3d 36 3b 73 74 61 74 69 63 20 4c 43 4d 3d 32 34 3b 73 74 61 74 69 63 20 65 6e 63 6f 64 65 28 65 29 7b 69 66 28 21 2f 5e 5b 30 2d 31 5d 2b 24 2f 2e 74 65 73 74 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 47 28 22 49 6e 76 61 6c 69 64 20 62 69 74 46 69 65 6c 64 22 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 6c 65 6e 67 74 68 25 74 68 69 73 2e 4c 43 4d 3b 65 2b 3d 74 3f 22 30 22 2e 72 65 70 65 61 74 28 74 68 69 73 2e 4c 43 4d 2d 74 29 3a 22 22 3b 6c 65 74 20 6e 3d 22 22 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 3d 74 68 69 73 2e 42 41 53 49 53 29 6e 2b 3d 74 68 69 73 2e 44 49 43 54 5b 70 61 72 73 65 49 6e 74 28 65 2e 73 75 62 73 74 72 28 74 2c 74 68 69 73 2e 42 41 53 49 53 29 2c 32 29 5d 3b 72 65 74 75 72 6e 20 6e 7d 73 74 61 74 69 Data Ascii: =6;static LCM=24;static encode(e){if(!/^[0-1]+$/.test(e))throw new G("Invalid bitField");const t=e.length%this.LCM;e+=t?"0".repeat(this.LCM-t):"";let n="";for(let t=0;t<e.length;t+=this.BASIS)n+=this.DICT[parseInt(e.substr(t,this.BASIS),2)];return n}stati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49805	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:32 UTC	864	OUT	GET /thumbs/2024/12/09/053029/87645244/heistbig.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:33 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: it/QJZAEISs0bNayos33LvvFt9XjoulGFbVLGjMT+VD76ZvZ4CNIQqL/Z9/yCsvjRaA8dpj3H+M= x-amz-request-id: 4P7Y6X20WHGYS4CN Content-Type: image/jpeg Server: AmazonS3 X-LLID: 9e9d9c4d72d86f5c69cd19b4999d1a3f Age: 246424 Date: Thu, 12 Dec 2024 18:57:33 GMT Last-Modified: Mon, 09 Dec 2024 22:30:30 GMT Content-Length: 102807 Connection: close
2024-12-12 18:57:33 UTC	14079	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 a9 6d 63 8b d3 8b 5b 78 8b e7 93 6b 4d Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwt"5mc[xkM
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: b4 49 7e 6e e4 58 1a d8 0f cd 89 44 d0 bb 79 a6 8f 8c 68 8a 3b ee fc a3 35 69 9a e3 70 e7 3b 9b d8 37 a0 de 51 4f 85 e4 32 e3 30 a2 8c 6a ec 94 76 19 a8 bf 89 dc a0 70 6b 5a 4e 41 ca 47 99 df 78 e5 b0 69 2b 72 28 28 7a ac 5f a6 3d 38 e7 8a 4d 11 35 3e fd ce 0d 15 2a 49 dc fc b2 d2 15 10 a2 3a 2a ab a6 37 54 69 38 21 f8 18 9f 4c 0f bd e1 2e a7 2f 97 ae 8d 9c 53 c5 c0 82 0a b3 ba eb 8b 1c 71 ba 68 77 aa f2 2c f4 d9 50 9c 7e e4 b0 8a 16 e5 da 14 36 76 ba 16 9a 90 ec 71 42 82 22 c3 89 0f fa ab 64 3a b9 0d 07 26 a5 58 e5 fe 19 f2 4c 70 a8 47 9a 14 32 6a ef b6 9d a3 fe 11 eb 16 7f 02 b7 59 9a f9 5a e2 ea 5e ad 76 e4 ac ae 26 2b a4 d4 b3 0f f8 4f 18 57 76 2a 78 c4 90 bc 76 54 2e 0c 93 90 f8 8f c3 8f d5 3d b1 87 1b c4 d5 48 41 22 99 50 28 7a 26 e8 6e 7e f4 12 07 Data Ascii: I~nXDyh;5ip;7QO20jvpkZNAGxi+r((z_=8M5>I:7Ti8!L./Sqhw,P~6vqB"d:&XLpG2jYZ^v&+OWv*xvT.=HA"P(z&n~
2024-12-12 18:57:33 UTC	1573	IN	Data Raw: 10 c9 3a 38 ae f6 a3 03 36 55 36 38 c6 c5 5c 93 a3 69 39 21 66 6e f2 84 6c 8c e0 d5 b3 14 61 85 c7 72 d4 36 bb 53 18 1b b1 36 a9 f6 66 38 d4 d7 c9 7b 14 5b 0b 94 70 b2 3e 6b 71 52 c2 d9 73 1e 6a 48 6e 15 74 28 e0 8d c3 32 8d 88 6c aa f6 6a 6f 5e cf 09 f9 81 5e c5 18 da 53 ac b1 57 02 57 b1 b7 3c 53 62 6d ca 53 0d ca 4b 24 39 8a 84 cb 24 7d a5 36 30 d1 40 28 9c c6 bc 50 b6 a8 d8 60 3f 30 51 58 2c d9 e2 ee f2 9a d6 b4 51 a2 83 49 53 d9 e8 6a 32 4d d1 92 25 38 e8 6b 80 41 c2 98 23 8a ab 5a af d4 ae 0e c9 ea da 69 65 90 f7 7a e9 c5 62 b1 54 2a 8a 8a ea ba 15 d5 77 40 cc f1 a5 8f 58 da 2d 5d ac 60 27 34 f1 14 62 b5 38 51 d3 12 3b ca 75 9f 06 5c 75 0b 55 db 67 fe a0 ff 00 a8 a3 04 ee c5 f2 d4 8c b1 aa bb 6c ff 00 d4 1f f5 15 a8 99 e4 6b 64 bc 07 6d 53 ec cc 7e Data Ascii: :86U68\i9!fnlar6S6f8{[p>kqRsjHnt(2ljo^^SWW<SbmSK$9$}60@(P`?0QX,QISj2M%8kA#ZiezbT*w@X-]`'4b8Q;u\uUglkdmS~
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: c9 67 fa 42 e1 38 e3 66 a6 e3 00 cf 20 85 9e cf 41 f7 2c ff 00 48 52 d8 a0 92 ef 21 ad 15 c6 82 8b d9 6c f4 a6 a5 9f 45 6d b3 8b 3b db 23 39 a7 62 a9 ad 57 06 74 b3 68 84 9f b4 a6 15 c3 44 ec 73 ad b2 31 99 b9 ca 1e 0f 82 31 ca 17 8f 6a f6 6b 3f f2 59 f4 56 9e 0e 6d 2f c1 83 86 c5 c1 a4 9b 53 89 f9 4e 8f 63 84 ca f9 1e 2f 12 76 a7 d8 ec cf 14 d5 34 77 60 ac f1 ea ad ed 66 e2 7d 34 3e c9 14 92 eb 1e 2b 85 28 9d 65 b3 38 53 52 df 21 45 2b 65 b3 4c f8 63 71 a3 e8 a0 e0 e8 98 01 93 94 ef d9 7b 35 9f f9 2c fa 29 f8 3a 27 0a c5 c9 77 ec ac 8d ad a9 8d 78 da 6a 0a f6 7b 3f f2 59 fe 90 bd 86 17 4c 5e 5a 2e ec 68 c1 45 1c 1e d3 69 8f 54 cc 2e 91 87 62 96 cd 01 89 f4 89 95 ba 76 2e 0d 8d 8f 95 f7 9a 08 bb b5 18 2c e0 13 a9 67 fa 42 e0 bc a5 3d da 6d 91 50 5f 08 1c Data Ascii: gB8f A,HR!lEm;#9bWthDs11jk?YVm/SNc/v4w`f}4>+(e8SR!E+eLcq{5,):'wxj{?YL^Z.hEiT.bv.,gB=mP_
2024-12-12 18:57:33 UTC	6784	IN	Data Raw: e7 96 36 ec 51 82 82 14 25 54 49 4d 92 a2 d0 d7 09 62 88 b6 44 c3 94 a3 61 50 c8 55 b1 9a 70 71 b3 15 8f 07 41 14 a2 30 86 b6 a5 64 3a e4 a8 d3 d0 41 31 ec 10 cc 1d bf 34 22 e9 f8 22 ac 67 a3 42 d1 ea d3 2c 03 d9 f2 0c 73 c9 26 68 12 91 bd 85 12 ea 30 cc 53 92 26 26 f6 0d c8 e5 10 5a 0b 3d 0a 91 13 a4 d9 13 26 23 62 34 67 46 d9 89 1b 90 37 65 62 e8 85 aa a6 86 54 dc 73 60 e9 b2 74 c6 46 c7 a8 83 01 29 50 66 65 42 08 c4 c3 e8 91 40 59 0c 7c 8d 0c 87 95 89 0e 44 ea 0a 98 13 b4 22 6d 28 c1 82 04 3f 02 c9 4e f6 9f 5f a3 c1 19 f2 1e f5 9e f0 67 ed a5 3e 26 24 f9 f4 af 68 50 b4 47 da 88 28 53 ea d1 ed 21 1a b4 8b 3e 29 6e e8 d2 64 68 a2 62 74 58 3a b4 11 62 8e 86 b6 08 5e 42 32 98 16 a3 38 4e da 60 7d 03 d4 58 5d 86 46 93 45 23 5d 45 35 93 97 03 33 1b 21 60 d1 Data Ascii: 6Q%TIMbDaPUpqA0d:A14""gB,s&h0S&&Z=&#b4gF7ebTs`tF)PfeB@Y\|D"m(?N_g>&$hPG(S!>)ndhbtX:b^B28N`}X]FE#]E53!`
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: 9b fc 0f 6f b2 dd b8 46 64 1d 79 bd 16 72 e2 cd 48 6d 25 2c 4e 7c b4 0f b4 34 7b 9b a5 13 cf 3a 50 ba 0d fb d0 6c 1d ba 10 b8 17 5f 29 8c e9 ab b6 8a 05 e5 d4 1f 48 93 d1 ca 77 3f e0 84 26 12 8d 3a 8c 8c ed 8e 4c db 15 33 0a 15 1c 94 e5 94 5c 0a c6 cb 50 a0 76 a1 4f fc 89 4e 48 32 2c b6 4b 74 b0 41 69 91 c8 a0 8d 54 c6 7a 10 94 18 d4 8e f1 81 47 46 37 32 7c f4 4d 9b 34 64 43 d2 cc e8 e6 b4 f6 47 db 68 af 6c 7b f7 c1 ed 47 da e8 35 4a 53 13 8b b4 e7 8d 1d d6 0d f7 0f 6c 7d be 87 b5 9e cb f0 c4 ae fa a1 30 94 0d 4e 28 b4 67 db 14 6a 20 f6 1f bd 3d e3 f5 a7 dd e2 19 8c a2 53 12 44 cc bb cd 68 ee 65 79 fe 5a 41 bb 37 f8 1d ac a2 57 98 92 a2 b3 7b 4e 94 ac 24 fd 3a 20 10 9c f2 79 be 79 1f 04 64 ae 74 cf ec 4d 4e 3e a3 7d 6f c1 03 aa 6c cb 1f 72 5c 64 d8 91 ae Data Ascii: oFdyrHm%,N\|4{:Pl_)Hw?&:L3\PvONH2,KtAiTzGF72\|M4dCGhl{G5JSl}0N(gj =SDheyZA7W{N$: yydtMN>}olr\d
2024-12-12 18:57:33 UTC	16384	IN	Data Raw: 90 5a 0a 65 fe 70 06 0c b2 91 2d 7f dd 06 db 0a 35 e5 4c 97 76 b9 cf 64 5c a1 4d 63 68 58 b5 ff 00 b0 4f 06 14 43 9b 27 71 83 29 1b 64 8d 5a 53 c1 61 3f 97 52 b4 5e 7f df 03 fa 6a 0d 5c 51 ae f7 e4 2f 52 e8 36 e4 56 f9 12 ff 00 02 11 f6 a5 27 a7 b9 c3 09 4c ba 4f eb 38 c3 61 06 03 52 73 c2 85 aa 2f e7 ac 97 6d ff 00 f2 27 ed bc 3b c2 0b 20 23 96 9a 08 07 cb a0 d1 96 0f 10 17 86 e8 f2 05 fa 99 3d bc c9 5b b0 be f2 eb 11 f3 7f cd 09 9a 22 b5 b5 10 d7 df fb a3 82 03 c1 95 72 cf 63 8c 45 5f c1 86 62 5d 0f 64 b5 8a bd 74 2f 6c 19 78 ff 00 cf 68 64 a6 a3 b1 d8 96 96 d4 2d ee 38 83 70 95 82 b0 29 1c 53 36 78 a4 47 4a 34 23 4e 28 b1 ba 20 36 bf cc c8 52 b8 77 6d 88 a1 3c 87 99 93 5d b8 27 3a ff 00 ea cd 45 70 67 00 79 32 82 e5 43 75 d0 23 67 a2 91 3a 30 2c 8e 3a Data Ascii: Zep-5Lvd\MchXOC'q)dZSa?R^j\Q/R6V'LO8aRs/m'; #=["rcE_b]dt/lxhd-8p)S6xGJ4#N( 6Rwm<]':Epgy2Cu#g:0,:
2024-12-12 18:57:33 UTC	9224	IN	Data Raw: 4d 97 b8 35 59 71 38 d4 21 94 63 f2 d4 d1 c9 a9 40 a5 6a af 64 1b bf ba 8d ee 53 62 dc b1 cc bd 1b 3e 08 da ad 0b c1 14 b3 e2 e2 de 01 62 b4 80 4a c0 bf 35 99 81 b2 21 80 ac 1a e2 5e f3 51 cb 76 ca 45 bd cc 7a 62 8c 7f 6b b3 a0 5f d3 ee ff 00 17 ac 11 8a cd 63 cc 11 f2 12 a5 0f 50 fb fe 50 02 51 13 81 4a b2 ed f9 47 f1 ff 00 fb 8b 59 4e 27 ac 3d 6f 1f b9 2c 7d 32 10 a2 b7 d0 27 f3 3b 4f c0 c7 e3 32 8e 26 8b ab a2 74 af 00 d0 04 b6 e8 fd d3 a9 a0 af a2 3d fd d6 be 97 47 9b 9a 87 dc 02 31 59 ac 79 82 3e 42 54 a1 ea 1f 7f ca 00 41 37 d4 bb cd ee 3f 07 3f 8f ce 7e 77 45 ca 59 6d 32 8b 0e 87 68 73 02 cd c5 39 cc b0 36 98 20 dd 05 47 18 d7 20 f7 14 13 9a 85 5b 10 bd c7 b5 95 50 31 90 56 2c 94 ea f7 29 8c ca a3 53 23 50 4a 95 42 cb e8 a3 a7 35 f4 b3 c9 84 d3 2e Data Ascii: M5Yq8!c@jdSb>bJ5!^QvEzbk_cPPQJGYN'=o,}2';O2&t=G1Yy>BTA7??~wEYm2hs96 G [P1V,)S#PJB5.
2024-12-12 18:57:33 UTC	5611	IN	Data Raw: dd 14 5b 51 71 dd cb 54 80 6d 1b 06 a2 b6 4e 72 86 25 5c 4c 77 39 8e 93 52 f8 80 cf 7c b3 b3 8b 8a e3 82 4f ff c4 00 2b 11 01 00 02 02 01 03 02 07 01 00 02 03 00 00 00 00 01 00 11 21 31 41 10 51 71 61 81 20 30 50 91 a1 b1 f0 40 c1 f1 60 70 e1 ff da 00 08 01 02 01 01 3f 10 82 d3 0b a9 87 10 70 fa cb 92 63 33 59 83 b9 46 1a 3c 43 62 19 67 68 9f 2a b4 e8 b4 2c 49 70 10 2e 55 51 17 2d 42 63 b4 45 21 2f 01 51 4b 97 d8 fd 20 d3 2f a0 b5 01 a2 0e 5e 62 e3 ef 1e 49 55 06 98 8e 93 1a 94 3c e2 da 54 ff 00 a2 f9 06 ed c1 98 f4 e1 32 ad fa c3 7a 6a 70 3e 95 d6 b1 73 86 72 78 8f d2 79 74 6e 1a 27 12 dc 30 dc c8 5c 61 cc 61 9f 34 74 2f 7c a6 5b 88 ed f8 ff 00 30 e9 74 c3 96 05 16 ed 9a 02 38 57 41 71 7d a7 2c 4e 33 1e 9c 7d 1e 9c df 51 c4 ed 1d 24 bc 86 60 f6 89 96 76 Data Ascii: [QqTmNr%\Lw9R\|O+!1AQqa 0P@`p?pc3YF<Cbgh*,Ip.UQ-BcE!/QK /^bIU<T2zjp>srxytn'0\aa4t/\|[0t8WAq},N3}Q$`v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49806	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:32 UTC	626	OUT	GET /thumbs/mediaavatar/87634955-1731590260.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:33 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: bs8Ph8VVbcxTksJ9jkTV/u11iMQ8y3xaZUHOMQxcEoutcQVpQXsQdpflqpsDjOQ28e7+xx1uO28= x-amz-request-id: NRWERJYWFTBD9GFW Content-Type: image/jpeg Server: AmazonS3 X-LLID: 9f525c73e681dc32ad513d62e397ab18 Age: 2439592 Date: Thu, 12 Dec 2024 18:57:33 GMT Last-Modified: Thu, 14 Nov 2024 13:17:41 GMT Content-Length: 1345 Connection: close
2024-12-12 18:57:33 UTC	1345	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49809	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:33 UTC	626	OUT	GET /thumbs/mediaavatar/87635273-1731618848.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:33 UTC	389	IN	HTTP/1.1 200 OK x-amz-id-2: dyi4/wV8fohnmXpQR8Hz6FnPUInCKq1aKYQag1XcwUlkbbmKr7DXKSnBH5Q7cWwPKf3voxqr58Tfil3QZq1PFH6Q9nJJVjfo x-amz-request-id: 0ESJR5738RFTMDH6 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 082123d0fd19a4f2794381989158797f Age: 2411004 Date: Thu, 12 Dec 2024 18:57:33 GMT Last-Modified: Thu, 14 Nov 2024 21:14:09 GMT Content-Length: 1607 Connection: close
2024-12-12 18:57:33 UTC	1607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49810	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:33 UTC	626	OUT	GET /thumbs/mediaavatar/87635471-1731638253.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:33 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: UT49CO/FxsZuEztmSdCDC1r3Vd6PuQbiNcMHF5uped/Q0fjp9HStSidYp7MRVCkiEJtWafr8Hrw= x-amz-request-id: K48Q80S051AXT61B Content-Type: image/jpeg Server: AmazonS3 X-LLID: d332fd65d92cd747601fbae0e61f88fc Age: 2391600 Date: Thu, 12 Dec 2024 18:57:33 GMT Last-Modified: Fri, 15 Nov 2024 02:37:34 GMT Content-Length: 1301 Connection: close
2024-12-12 18:57:33 UTC	1301	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 35 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75C $.' ",#(7),01444'9=82<.342C2!!2222222222222222222222222222222222222222222222222222"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49818	104.21.25.186	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:33 UTC	521	OUT	GET /px.gif HTTP/1.1 Host: bt.dns-finder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:34 UTC	1315	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:34 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-goog-generation: 1721406977485562 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC7BtfnEcx31s64rjtmLxfqAJc8hPnGang145Xyq0GlR0ggU_Un1cM8STqc_uU-G3E9BW4s Expires: Thu, 12 Dec 2024 19:34:58 GMT Cache-Control: public, max-age=14400 Age: 1356 Last-Modified: Fri, 19 Jul 2024 16:36:17 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OwKJCBeZkvErQ%2FkrIpiFg5SqtSCO1KrieYKYeViRnDXV18ckBlYlgMRktdPxaxH3GarehURQefVj3tKKm8%2FWcu3Jmhe5rK520%2FikY52b3pk%2Bs6nyTKYlIU%2BYQj%2BE3SJVD7wykg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f0ff0dd089241f9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1741&min_rtt=1737&rtt_var=659&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1099&delivery_rate=1649717&cwnd=212&unsent_bytes=0&cid=8bc3802cd4063565&ts=460&x=0"
2024-12-12 18:57:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49817	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:34 UTC	616	OUT	GET /img/desktop/paginationArrows.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:35 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: 8dhlldiKHKQdbMogH+667/xVG0VJ1Br3Bxyhowc7QhfmYrmswOT9eQcm4T4gDZMXgAYBMll9Evw= x-amz-request-id: HNB6DEYX5G591PCQ Content-Type: image/png Server: AmazonS3 X-LLID: 95203f2a748160530d559bf1f242b1d3 Age: 24471252 Date: Thu, 12 Dec 2024 18:57:34 GMT Last-Modified: Wed, 02 Aug 2023 20:44:43 GMT Content-Length: 1923 Connection: close
2024-12-12 18:57:35 UTC	1923	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 9c 08 06 00 00 00 76 81 2b c2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 35 37 37 32 2c 20 32 30 31 34 2f 30 31 2f 31 33 2d 31 39 3a 34 34 3a 30 30 20 20 Data Ascii: PNGIHDRv+tEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49816	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:34 UTC	861	OUT	GET /thumbs/2024/12/12/095024/87646647/santa.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:34 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: RQEYbqe8xjN44Qjqbew4Ok6QjUfK9CbyYUXIKV3KCDS38jOeY6DIGYekGhvkCO69lvtG3Xy8P1Y= x-amz-request-id: 1CK5BPC8R9JWB4Q7 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 90109056e26a47c9ced13ae1218f6a9a Age: 14829 Date: Thu, 12 Dec 2024 18:57:34 GMT Last-Modified: Thu, 12 Dec 2024 14:50:25 GMT Content-Length: 124775 Connection: close
2024-12-12 18:57:34 UTC	14080	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 43 00 00 ff e1 03 9d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyChttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:34 UTC	16384	IN	Data Raw: d7 02 1a aa 9a 9a d6 c3 10 e6 e0 e6 71 f3 18 73 22 76 33 c7 e0 78 42 40 b2 83 da 9a 88 6c 5d 63 e6 1a 8e c3 b9 aa 1a 9e 43 6d 2e bf 1e d4 05 6c 8e 24 84 b8 e8 7c 28 00 72 82 08 4d f6 09 d8 50 38 96 9f a5 4a a2 11 6b 50 20 43 9b bb 6a 81 f6 f6 a0 57 00 ed 20 80 14 85 a0 0e 01 0e d2 8e 70 dc db 28 f8 50 20 ed cd b1 00 9e e1 68 08 1b 8a b4 ed 0d 17 4f ba 80 34 97 9f 00 a2 fa da 81 c9 b1 a5 2f 40 d2 5a d6 05 50 1c 2f 40 8b 76 82 5c 43 88 d3 e1 40 be 90 5c 96 20 5a 80 eb 66 a5 82 10 68 12 0d 7b f6 a0 4e 05 ce f3 0d 7a 50 26 84 22 3d c8 b7 3d c2 78 d0 34 aa 2a 95 36 23 ad 03 b6 35 a4 78 a7 8f 85 02 be eb 8d 75 34 03 5b 1d 75 3d a8 11 71 20 95 53 ae df 01 40 53 70 da 01 40 14 d0 06 ee 68 ba b8 27 ca 83 ea ec 8c 7e 13 dd d3 4d 0b 64 0d ca 88 2c 6f 6e 87 b5 79 5e Data Ascii: qs"v3xB@l]cCm.l$\|(rMP8JkP CjW p(P hO4/@ZP/@v\C@\ Zfh{NzP&"==x4*6#5xu4[u=q S@Sp@h'~Md,ony^
2024-12-12 18:57:34 UTC	1577	IN	Data Raw: c6 d6 a6 a7 8a b6 63 20 69 69 69 dc a4 93 1f 86 aa bf 1b d6 75 63 2f 2f 18 3c 19 d8 41 69 24 8e a4 f7 09 51 db 9a cb 9f 0c c4 f6 cc db eb 65 3b 48 3d fe 14 6e 55 58 ce c3 24 6f d5 be 66 1d 49 f0 a1 51 c8 00 22 40 a4 9b 9f 9f 85 18 aa b9 0e 2c 78 01 11 dd 2f d6 ab 1d 7d 2e 71 72 9c 49 c7 a9 78 9f 64 69 b8 3d c5 7a fd 1d 63 e7 7e af 5e f2 9b 9b e1 f0 e4 f3 36 4c 8e 2e 47 2b a2 96 22 ac 7e ee e9 75 af 76 be 2d e7 19 18 98 5c 99 8d d8 ec e5 3d 56 8f 2b 9c 4b 90 75 54 55 1f 2a ab 19 f9 78 9e f0 6e e0 e7 c5 c8 41 09 4f 59 89 23 d9 f1 6b ae 95 96 f1 cc f2 dc 3e 0f b9 24 76 04 d0 b7 8d e7 61 04 c0 e6 00 22 c8 1a 96 b9 74 27 a5 6e 54 ae 0b 2f 1b 2f 0e 57 41 92 cf 49 f1 92 0e ee e2 b5 ac 20 01 18 8a 57 6d c7 73 54 1f 35 cf f1 5c 03 40 89 27 ca aa 7a 1f 1a 00 77 02 Data Ascii: c iiiuc//<Ai$Qe;H=nUX$ofIQ"@,x/}.qrIxdi=zc~^6L.G+"~uv-\=V+KuTU*xnAOY#k>$va"t'nT//WAI WmsT5\@'zw
2024-12-12 18:57:34 UTC	16384	IN	Data Raw: bd 2e 2b 3e 16 ba 79 cf a5 7c c8 32 f1 c9 73 58 e0 e0 43 b6 b5 d6 2d f0 5a 9e 35 a9 62 bc ae 99 ed 12 b1 c8 19 76 0e b7 d4 1a 37 14 b2 32 0f a4 19 90 ae 69 b9 6b 6e 41 35 15 9f 90 59 0b 8b e2 16 1a 29 ba 51 2c aa 9f 99 3b 5c 1e 35 b8 4a 21 ad 3f 98 61 62 a3 93 52 2f 55 9e aa 3f e6 46 41 21 7c 7e 15 bf 5f 58 e1 ec e7 ca 63 a6 e1 b9 37 e6 63 08 5d 0b 5f 34 7f 4b c5 dc 00 f0 3a 8a fa 1e be f6 47 c4 f7 fa ef 36 ab 73 1c 4b 77 33 93 8f 18 45 23 95 c5 d1 11 e7 4d 7c ab 6f 85 75 c7 9a 30 b9 7f 6e e5 66 c2 39 8f 6d e4 be 0c f8 ef 36 39 24 17 78 a1 b1 a3 7a c2 e4 26 cc e4 71 a2 9f 96 c5 6b f2 31 8a b9 ec f2 3c 86 fe 20 5a 97 f0 a0 e6 bd e9 c2 c7 c8 c6 ee 6b 8e 05 f1 c8 c0 a4 df 6c ad 3e 66 38 78 8b fc 6b 51 8c 70 f6 29 b8 02 ba 8d 09 ae 88 00 9d c4 37 44 b1 d5 05 Data Ascii: .+>y\|2sXC-Z5bv72iknA5Y)Q,;\5J!?abR/U?FA!\|~_Xc7c]_4K:G6sKw3E#M\|ou0nf9m69$xz&qk1< Zkl>f8xkQp)7D
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: 1d a0 aa 98 a9 26 73 31 95 c5 9b c0 bd 58 94 dc 6e 7b 16 67 90 e6 6d f0 a9 69 03 37 2a 39 0f 92 cb d2 85 52 73 8e b5 58 a4 1e 56 8b 13 34 28 4a cd 8d ca 6c b8 4c c9 89 d1 48 37 35 c1 08 f8 d6 71 bd 79 ef bb bd 9a fe 3d af c9 c4 0b 08 e9 a9 15 71 a9 5c 46 f1 1c 85 86 c4 74 ac de 5b 95 26 3c 9b a7 6a 77 15 9c 6a 56 9e 7c de ab 6f d2 a3 71 9e 28 d6 9b 2f d3 57 94 b5 0d 69 83 0d 15 0b c2 94 ac 06 96 ed 0a 2a 8d ff 00 67 f1 b2 cf 94 32 e3 28 e6 5f e4 2a ca c7 4f 4d c0 9e 4f 40 87 dd c9 7a d6 b9 e3 9e cb e6 25 c6 cf 7c 24 96 02 51 0e 95 53 18 fe f0 70 fc ab 76 95 de 54 fc ea 56 e3 94 06 e9 da b9 57 78 90 f4 ac 56 e2 58 eb 9d 6a 2c c7 d6 b9 d6 d6 e0 d6 b1 60 fb 6f fb fa 21 bf a3 5c 61 21 7f f1 fc 5f f9 3c ca fa 0f 03 e1 b7 02 88 d1 af d2 07 5a 06 80 e2 ae 01 08 Data Ascii: &s1Xn{gmi79RsXV4(JlLH75qy=q\Ft[&<jwjV\|oq(/Wig2(_*OMO@z%\|$QSpvTVWxVXj,`o!\a!_<Z
2024-12-12 18:57:35 UTC	13568	IN	Data Raw: 2b a4 71 b5 2b 50 0a 51 3c 0d 0e 04 97 00 82 b1 45 79 a5 0d 28 b5 a6 6a 30 f0 e3 63 46 93 b1 ab 51 a6 8e 0e 3b 6c ee b5 51 75 e0 6d 00 0a e9 0d 55 fc 9e 44 b9 01 c5 c5 ac 17 a8 95 a4 18 36 25 25 64 ec 5c 77 be 70 13 ad 76 e5 1e 87 c2 46 de 37 8e 74 d3 8d ae 2d b0 eb 56 af 2f 3f e7 73 59 91 9f 23 8f 9a f5 c7 aa ed cc 51 fe a3 8a d3 b7 6a 38 57 1b 5d 64 46 fc b6 ca 6c 35 a9 5b 86 3a 30 eb 8a c3 46 b3 1c 93 52 2a 66 40 c1 77 94 15 da 63 35 1b df 88 5d b6 17 a9 1d 0d 5f 84 87 b5 8d 2d d7 e1 53 15 03 9e 14 83 d2 a3 27 46 0e a2 f5 2a 9f 26 44 21 85 a4 80 6b 38 29 3d ed 7b ec 6b 41 6e 31 5c 1b d0 39 b9 13 1e 8a 2a 25 3f d4 ef 6a a9 80 fc b6 b1 a8 2e b6 a0 85 d8 c3 20 77 1d a8 b1 cc fb a7 db 38 cd c7 f5 e0 8f 6c 84 f9 88 a8 d3 8c 8f 26 7e 3a 6f 4c 0b 83 7a a9 d3 Data Ascii: +q+PQ<Ey(j0cFQ;lQumUD6%%d\wpvF7t-V/?sY#Qj8W]dFl5[:0FRf@wc5]_-S'F&D!k8)={kAn1\9*%?j. w8l&~:oLz
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: da 43 81 b2 0e dd e8 11 52 81 50 85 fb e8 0d c5 ca 5b ed 5a 06 85 d4 ea db d0 12 e7 ed 3f 70 f8 50 1b a7 4d 3e 6a 68 02 e8 d0 e4 4b 92 74 34 05 ad dc 75 4d 15 74 23 5a 0d 8e 1f 2e 43 c9 e3 62 e2 ee 3b 4a 20 b2 dd 14 f8 57 3a d6 bd 32 1c 89 a2 6f a1 10 2f 61 52 f4 b9 26 d5 96 cf 72 91 f9 75 00 a5 c6 aa 5c 7a 8f 85 06 8f 0b c6 ca 18 c5 b2 94 2e d5 1b a0 f9 50 75 30 8f cb 6d 86 24 0f 6f d7 fe 75 ff 00 0a 26 28 f2 33 b3 14 95 3e a4 8e d4 0d 47 ce 81 63 e4 0f 57 74 8d de d2 d2 97 b3 53 ad 4c 53 f1 66 8c c6 fc 99 7e b7 90 c0 09 45 53 63 4c 07 d2 39 79 3e 94 84 90 aa f1 a5 fa 27 c2 aa 2b 7b 83 2c e1 c4 f8 a1 fa f6 ec 8c 93 7d c7 ad 0c 4f c0 e1 88 71 0b dc 4f 9d 8a 4b f5 b5 f5 f8 d1 9a b9 04 23 fa 7e c9 dc 86 52 0b 88 36 da 3a af f9 8d 13 55 f2 98 df 45 a1 4b 3d Data Ascii: CRP[Z?pPM>jhKt4uMt#Z.Cb;J W:2o/aR&ru\z.Pu0m$ou&(3>GcWtSLSf~EScL9y>'+{,}OqOK#~R6:UEK=
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: ab 9b b1 f0 c3 b6 c4 12 0e 9d a8 a9 f2 04 ce c7 11 c4 5a e2 8a d7 1d 5a 4d 24 5e ba 50 9d f9 00 86 c8 6e 3c a5 0e b5 bb 98 e3 6d 59 86 67 0c 77 34 05 70 1e 55 36 f0 ac 63 b7 57 e0 21 2d 8e 33 ea 3f 73 a5 1e 62 eb 86 a6 a9 4f bb 23 32 fc 37 3f 4d b1 22 cb f7 83 33 5f 68 78 e8 5f 33 ba 00 e4 46 9b f8 9a f2 7e cb bf ea cb ad e4 67 6c d3 ee 56 ee 71 2f 79 50 97 35 cb d7 c7 8c c6 95 64 90 3d 77 38 39 bb da 03 46 a9 f2 b5 76 90 c4 2e fe 43 43 1a 11 5c aa 6a e2 29 4d 2c a3 f9 a4 6f da 5c 50 1d 47 82 25 30 d5 69 e5 63 a0 6b 54 b3 f9 77 06 e6 e5 4d 59 0b 15 1f 20 0d 72 aa 06 01 d8 da b5 8c da ad 34 a4 11 b8 16 a9 d3 a2 a7 85 59 13 55 a5 c9 70 28 42 29 2d d6 b5 89 aa cf 94 84 54 d6 df 03 5a c6 55 df 28 1e 60 49 00 58 0f 8d 5c 4d 4c c7 87 c2 f6 97 6e d5 01 f8 69 53 Data Ascii: ZZM$^Pn<mYgw4pU6cW!-3?sbO#27?M"3_hx_3F~glVq/yP5d=w89Fv.CC\j)M,o\PG%0ickTwMY r4YUp(B)-TZU(`IX\MLniS
2024-12-12 18:57:35 UTC	13630	IN	Data Raw: 0b 92 eb 5a 35 87 cc 1c 7c 46 12 58 06 db 1a 86 b1 39 96 40 fe 34 cf 1f 5d 2a e9 ae 49 cd 71 d6 9e 4b a6 39 a9 5a 5d 44 fa ac a2 70 bd 66 80 95 02 da 6a e8 6a 5e b4 98 69 17 a2 95 03 86 94 4d 1b d5 d5 39 a0 9b 0a a9 a7 fa 4e 3a 03 57 0d 43 3c 66 32 16 b3 44 7d 69 a0 13 7a de b2 5b 85 6f 50 6b 21 56 82 aa d9 50 2a 05 40 be 34 0a a0 72 8a ce 04 08 a9 80 ad 02 1a d0 3e 80 69 7a ce 29 2f 51 40 aa 05 40 a8 15 02 a0 54 01 da 55 4a 6d 19 c1 6e b5 57 04 94 a5 ab 20 b5 4d 45 1d a6 81 ec 6d c1 a0 b4 dd 28 82 e0 4d 4a 06 d3 51 48 35 14 d6 7a 04 57 35 87 36 ac 52 a8 a7 b0 da ba 4a 89 61 bb 8d 6a 54 74 dc 04 de 9c 02 33 d4 d6 e3 97 6d d8 9e 08 aa e4 7e c6 38 a1 aa 58 7b 31 99 aa d1 12 fa 2d e9 40 24 81 c1 9b e3 d4 50 53 9d b2 49 1f f3 14 55 d1 5e 2d ad 28 74 15 4d 29 Data Ascii: Z5\|FX9@4]IqK9Z]Dpfjj^iM9N:WC<f2D}iz[oPk!VP@4r>iz)/Q@@TUJmnW MEm(MJQH5zW56RJajTt3m~8X{1-@$PSIU^-(tM)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49819	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:34 UTC	859	OUT	GET /thumbs/2024/12/11/030516/87646246/wow.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:35 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: 0BXti3N5GW0IvRU/gT9YkdTBlfxunmSdpLelCUgrcbjX+AjV9/RA/8W1Y1B+6VuSdcmiTViKl0k= x-amz-request-id: ZDC3WF09GJ7TKAW8 Content-Type: image/jpeg Server: AmazonS3 X-LLID: f6b7a32f1acd13fca82905027f3117f6 Age: 82337 Date: Thu, 12 Dec 2024 18:57:34 GMT Last-Modified: Wed, 11 Dec 2024 20:05:17 GMT Content-Length: 105414 Connection: close
2024-12-12 18:57:35 UTC	14080	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: fa ad 63 66 4d 50 1e 6a 0f 65 35 7d 1a ac 6b 5c 03 83 88 4d 5f 5c 18 2d 16 ad 53 57 06 d7 0a e8 14 4c 13 b6 1e b4 45 c5 2c b1 50 d6 b4 90 77 74 28 98 89 f2 4c 28 d2 ea 11 d1 17 0c 32 a6 6e 86 c8 e9 cf 26 fb e9 9a 6b bf e4 ae ad e5 24 5c 86 45 0d 4d 13 58 c4 72 e7 e4 9b 7a 95 6f 64 d6 a7 20 19 73 5c 13 50 7c 53 5a bc 84 66 4e 01 04 90 0e 80 12 9a c5 e5 36 26 5c f4 21 ce 25 9d 2a 51 ce f3 e5 7d 92 12 75 a8 e8 a3 53 91 92 f3 ff 00 99 fb 14 d5 c3 b6 4a 6a 6a 9a 61 dc 6d 50 7e 29 a9 79 47 eb 0a d3 af 65 52 41 89 0d 05 d1 71 0e 43 8e dd c0 e8 8c 62 c6 69 a6 2c 4e ad 09 60 23 c6 a8 bc cf 2c c7 4b 31 1b 4b 89 15 a8 0a 6b af a9 09 a6 68 f2 f5 29 a7 a2 a7 27 2b 9d 8f 29 98 6e 2d 69 a1 f0 5a 95 9e f9 79 66 4f 2d 23 72 1f 43 46 87 16 b4 0b df b2 ef 27 87 87 ae bc 94 Data Ascii: cfMPje5}k\M_\-SWLE,Pwt(L(2n&k$\EMXrzod s\P\|SZfN6&\!%*Q}uSJjjamP~)yGeRAqCbi,N`#,K1Kkh)'+)n-iZyfO-#rCF'
2024-12-12 18:57:35 UTC	1577	IN	Data Raw: 45 1b bc 5a bf 25 7f cd bf ff 00 a7 1c 07 3d f8 f3 dd de df 7f af 91 0f dd e2 02 37 3e 2b 96 81 a9 70 e9 45 cf af 9c 7b 3e 1f fb 0e 7a fd 47 c4 fb b9 dc 3c cd 91 95 9b 16 5f 2c f1 9d 40 ee bc dd 47 6f af c6 7d 26 c7 a1 61 72 11 e7 63 7a f1 6d 93 1d e3 74 53 0e df c2 7c 57 27 ce eb e5 79 fd 39 03 b0 a1 e8 89 e9 ff 00 44 22 8d ed da 40 a0 51 2f 26 76 3c 0e 69 8d cc 0e 69 d4 aa 98 31 03 03 43 43 46 d6 e8 86 18 e2 c3 d5 a5 10 df 6d 00 b8 69 27 b2 14 46 0c 72 ed a0 50 d2 b4 57 59 f2 6f 42 20 50 39 8a 33 d6 fd d4 d5 c0 7a 22 83 cc 75 a2 aa 73 14 65 9b 09 f2 8d 02 08 ce 20 06 ad 92 81 45 d4 9f 69 56 d9 f5 28 cf 40 74 12 37 ff 00 37 68 f1 15 46 72 a1 74 73 b9 bb 99 30 7d 35 34 46 e4 47 4c ee 8d a8 e8 55 d0 98 79 02 d2 76 0f 9d 94 09 ae e4 77 8a 30 58 d6 e8 34 5c Data Ascii: EZ%=7>+pE{>zG<_,@Go}&arczmtS\|W'y9D"@Q/&v<ii1CCFmi'FrPWYoB P93z"use EiV(@t77hFrts0}54FGLUyvw0X4\
2024-12-12 18:57:35 UTC	14480	IN	Data Raw: e9 a9 83 c2 67 a7 8e fa f7 b5 53 55 69 a4 6d 06 a9 a1 1a 50 d3 54 d4 c0 1d ae b7 ea 4d 30 c4 9d 2f 64 d3 09 a0 53 b2 b1 7d 51 cd 1b 3e be a3 b2 a7 a2 09 0b 8d 28 48 46 3d 1a 38 31 55 c7 d5 79 22 9e 55 61 e8 95 d1 d1 c6 86 81 5d 3d 02 31 58 4e e2 fa 1e 89 a9 78 72 df 92 b8 f8 7f e9 89 b2 2c 5c 1c d1 5e b6 5d 38 ae 7d f2 f1 d9 8b 7e fe 2a 76 0b d3 1e 3e 99 fc 9f fe ac ff 00 17 5e c8 c3 57 0c ee 8a 2f 88 59 ae fc 3e d8 fc cb ff 00 27 ff 00 53 fe 52 f5 f2 f9 8f 37 68 54 18 40 e0 20 74 04 0a 03 1a 20 70 a6 82 a2 01 3a a0 20 a8 71 aa ce 8b 0c a1 01 5d 16 5f 03 46 3e f0 6a 7b 20 86 5d a6 11 d0 85 91 e4 3f 9a 3d bb 26 76 1b 32 b1 a3 f3 b0 f9 8a 2b ca b8 ec 37 43 1f 9b 4e a7 c5 66 c5 8b a7 0d af a6 e0 4d 54 c5 0c 9c 4c 64 0a 28 ac ec 9e 1e 60 ea b1 b5 ed 45 2a c5 Data Ascii: gSUimPTM0/dS}Q>(HF=81Uy"Ua]=1XNxr,\^]8}~v>^W/Y>'SR7hT@ t p: q]_F>j{ ]?=&v2+7CNfMTLd(`E
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: a0 4c e3 9c d3 56 e5 3a bf 04 45 88 71 dc 1e 1a 72 09 27 4a 8a 24 2c 70 bf 93 22 cd 8e 7c 66 3c 87 c4 0d 41 e8 bd 5f 37 97 ea f3 f8 b6 36 5c 87 75 a5 97 69 5c 19 cd 3f f1 0d 24 f5 bf ed 5a 67 fe b7 20 7c 75 65 35 a8 5c dd b9 7d 93 ff 00 70 46 9f d0 7f d5 ff 00 92 bb d7 cc 78 dc 84 10 50 63 f3 e0 7f 49 c8 14 b9 06 88 3c 9f 04 57 90 88 11 51 ea 5c 7c d0 77 dc d7 b5 78 ac ec 26 49 56 41 20 6f d4 2d 74 1e 6f 9d 88 cc 39 e4 c6 91 db f6 e8 ea aa 23 c6 c8 cf c6 03 ed a6 70 63 85 db 5e 88 06 4f f8 87 97 c9 26 e7 e8 6a a5 06 d8 04 6c a0 36 40 58 d8 73 c8 fa b1 b6 3f aa 88 35 ff 00 a3 36 1c 57 4d 25 c8 15 a9 17 41 95 0c 7e b4 ec 65 2a 1c 7a aa 3b bc 4c 7f b7 81 8c db 4b 0d 2e 10 5b 10 3b bd 3e 28 1f ec e4 24 e9 b5 06 7f 23 9b c6 e1 c6 44 8f 05 ff 00 c0 83 8f e4 79 Data Ascii: LV:Eqr'J$,p"\|f<A_76\ui\?$Zg \|ue5\}pFxPcI<WQ\\|wx&IVA o-to9#pc^O&jl6@Xs?56WM%A~e*z;LK.[;>($#Dy
2024-12-12 18:57:35 UTC	15472	IN	Data Raw: cf 45 af b6 9a 27 8a 5d bd 97 6e 3e 78 d2 fe 14 0f 96 78 e3 0d 04 bd c0 2e f7 f1 5f 5a 7e 2e e1 e3 e3 3d bb 09 d2 49 1b a1 ec 57 93 e9 75 a9 17 39 ee 6a 2f 5c 62 b9 f4 bd 2e 9c fc bf eb b4 e5 a7 c4 63 44 20 69 65 c1 1a a7 5d 25 8d 37 c6 00 a0 d2 8b 97 b2 4a c3 39 6d 19 4e 60 35 da 52 f4 e8 d8 c5 94 38 07 2e 76 b9 f4 b9 ea 46 6e 0f c9 63 d7 5c bd 69 17 30 8a 15 67 16 27 aa 07 46 cd d5 69 b2 d7 95 b2 a7 89 c0 b7 c5 73 b5 ce 38 af ca 5c 09 e4 bd bf 91 46 7a 8f 63 09 0d f1 5e ef 87 7f f1 d3 d9 f2 06 47 b6 b9 0c be 46 4e 3f 1f 1c fa bb c8 91 d4 f2 81 5e eb dd 39 95 8a 9f 9f fc 43 c9 e2 63 7a 9c 7b fd 4c 80 01 74 66 b5 d2 f4 59 bf 1d 4c 79 de 5e 16 6e 04 8e 8f 90 c7 7b 26 15 15 70 a5 d7 9f e9 f0 31 51 e1 b6 7e db 95 e4 eb 8c 0f 1c 92 31 af 6b 07 f8 9f 5e 84 90 Data Ascii: E']n>xx._Z~.=IWu9j/\b.cD ie]%7J9mN`5R8.vFnc\i0g'Fis8\Fzc^GFN?^9Ccz{LtfYLy^n{&p1Q~1k^
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: e9 8b 1d f7 e2 5e 76 19 38 e7 c5 34 81 bb 45 8b ca f6 7d 2f 87 4f 9c 76 39 7e e8 e1 31 23 32 4b 99 18 63 3e a3 b8 2f 35 e9 df d1 c8 f3 1f 9c 3d a7 c7 57 d3 93 ee 1d d1 a0 ae 77 b8 97 97 09 c9 7e 7b e6 b3 f2 5d 0e 2b 7d 0c 67 d4 57 4a 57 45 ca f6 48 f3 2e 77 3b 37 23 3e 47 67 4e ec 89 1e 4b 9a 5c 7c b4 3e 05 71 eb e8 de b2 65 2d d9 b7 b6 94 5c 7a fa 56 3d 51 c5 38 94 7a 67 eb 1a 3f c5 5d 72 eb 91 b3 3a 78 9f 40 0b 80 d4 f6 57 5e 7e b9 5f 87 92 0f 00 ee f8 94 d7 2f 55 96 ce 5e 2f 47 05 9c 67 a8 83 2f 02 1c ab 7d 27 ba e9 3a c6 15 60 c2 e4 38 dc a6 4d 82 f2 1d 1b b7 3a a7 55 d2 7d 28 ed 78 7f 76 c7 98 3d 09 ff 00 95 92 45 36 f4 71 5d 27 d6 e0 df c6 f4 cf 9a 79 04 71 94 ff 00 55 8b 79 58 f8 22 26 4b 1c 82 ba 00 2d 5a a7 3d ea 8b 8e e3 61 3b db 25 5b 23 ee 0b Data Ascii: ^v84E}/Ov9~1#2Kc>/5=Ww~{]+}gWJWEH.w;7#>GgNK\\|>qe-\zV=Q8zg?]r:x@W^~_/U^/Gg/}':`8M:U}(xv=E6q]'yqUyX"&K-Z=a;%[#
2024-12-12 18:57:35 UTC	10653	IN	Data Raw: 44 0f 54 02 6a ae 01 70 25 66 8a f3 c4 d7 8a 38 55 be 2b 7c f6 31 f3 f8 59 1a ef 57 1b ca fe a4 5c 10 bd 5f 3f a8 a1 b9 ec f2 bf ea eb d1 7a 67 7a d0 32 70 a1 c9 88 c7 2c 41 d1 b8 50 83 74 eb 9d 47 9e 7b 93 d8 59 38 b2 9c be 37 fc 22 6b 24 44 57 f6 2f 37 7f 35 71 72 bc c1 94 e0 37 07 03 47 42 6b af 70 bc dd 7c aa 34 e1 c9 8d ec d8 f3 e6 a5 da 75 5c fc c1 56 5c 26 3d fb e2 71 61 17 0e 1a fc 96 f9 fa 2b a1 f6 f7 be 33 38 c7 7d af 29 59 f0 cd 83 ba 80 bd 3c fd 95 e8 38 dc 8c 59 78 41 d8 92 89 71 9c 2a d6 ea 47 cc af 4f 1f 48 2b 47 99 04 51 bf 1d d6 2f 35 27 52 17 68 2f 71 f3 9c 66 97 61 1a 3d ff 00 51 3d 56 3e 9c 6b 29 f2 79 29 e7 d9 0e 63 c8 80 50 39 a2 d5 5e 7b f3 c5 5c e4 f0 d9 3e 1c 4e e2 db e9 fa 22 e0 5c 95 8f c1 8b f6 2d c5 8c e6 65 c8 5f 33 cd 36 f5 Data Ascii: DTjp%f8U+\|1YW\_?zgz2p,APtG{Y87"k$DW/75qr7GBkp\|4u\V\&=qa+38})Y<8YxAq*GOH+GQ/5'Rh/qfa=Q=V>k)y)cP9^{\>N"\-e_36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49821	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:34 UTC	859	OUT	GET /thumbs/2024/12/09/011657/87644961/wow.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external
2024-12-12 18:57:35 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: lQTQtDQP8OFMfSsp7x02qwmmTCa1TPE/k9Bpj9LchNRM0vcfUUZP2AjYEiQJtpf1YH9bUVmep0w= x-amz-request-id: W60TZQZ9D5QT7AK4 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 5fbf82f6a6ca285268d8e34d6123c625 Age: 261637 Date: Thu, 12 Dec 2024 18:57:35 GMT Last-Modified: Mon, 09 Dec 2024 18:16:59 GMT Content-Length: 224461 Connection: close
2024-12-12 18:57:35 UTC	8287	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 43 00 00 ff e1 03 9d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyChttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: f4 b5 00 5d 5f ab cd 22 b4 76 42 74 25 ff 00 f4 49 4f 0f 52 ca 89 f1 b5 1e c8 1d 0b 27 0c f6 b9 de 30 a7 df 8a 49 54 b6 94 c3 97 1a 6d 57 5a 2a cc 03 eb 1f c7 fb 3c a8 0e a9 d8 4b 2c 95 de e4 5e e4 2b a8 d3 c2 a3 99 3e b0 ec ae 09 94 cb 63 62 e1 72 b2 17 2a 0c 02 55 19 95 93 b5 b2 ae b6 14 3b 87 eb 22 23 d9 4c 22 48 bb 20 9f 88 a3 dc 9d 09 8c 7b 41 83 6a c0 c7 4a ad f0 a9 dc 9d 02 91 fd b2 c4 34 3f 4e 32 00 f9 0a 1d c3 d0 35 88 e3 2d e2 d0 96 a3 80 80 15 7b 0a 0e 7c 05 44 2b 9a c4 35 92 86 86 5e b2 b6 28 1d 75 aa 3b 0d 80 63 1c 5e 1a 09 b0 16 1f 2a 6c 83 03 e8 e3 d0 80 ba 92 3f b2 a7 62 60 75 18 58 09 3a 25 35 3b 13 02 cc 1c 6b 23 72 c0 1f c2 a7 62 60 5c 43 8b 32 50 86 88 2a 51 b0 d4 51 4c 38 17 c8 b2 30 a0 44 59 77 6a 05 8d 94 6c 3a 0a 39 01 f3 fe 5b dd Data Ascii: ]_"vBt%IOR'0ITmWZ<K,^+>cbrU;"#L"H {AjJ4?N25-{\|D+5^(u;c^l?b`uX:%5;k#rb`\C2PQQL80DYwjl:9[
2024-12-12 18:57:35 UTC	7369	IN	Data Raw: 14 30 2e 45 6d 59 23 c6 95 a1 e2 cd 7b 87 25 5f b2 b0 93 f9 40 06 a9 91 ae b2 c0 90 45 54 5e 3a 97 ca 74 a5 92 2d 8b 1e 6e 5d ce c3 55 e0 b7 23 4f 1b aa e2 a6 09 d8 4b 4f a9 a5 75 a9 82 76 09 43 cb 14 e8 aa 0d 17 d7 30 ab 59 44 29 3f 55 53 24 6d 8c c7 3f 70 47 f3 56 79 23 42 b0 42 b3 01 26 c0 d5 4d 0d f6 1d 19 54 af f3 50 ea 4f b4 69 ec ab 68 fc c0 7e 35 30 4f b4 1e fe 61 4f 9e db 5a fc a9 70 55 29 8b 6d 0a 09 ee 3a 68 e0 cf 39 0c 48 93 f9 53 e3 41 94 e4 5c 18 3b cf 75 74 10 c4 e2 90 3d 08 ea 74 14 c1 48 15 cb 9a 30 f8 fc 92 e6 aa 52 6a da 3c 95 df e0 f9 e7 6a 8c a5 95 0f cc 7f be bb 4b f5 38 73 f2 4e 8e ad a6 90 53 8f dd 4a b9 e9 50 82 d0 9d cd 5a a1 06 53 76 9e 09 f8 d4 0a 2d 38 37 88 71 16 d0 0a cb 77 82 e8 1b 07 14 cb 88 d1 92 41 d4 0d 2b 28 cc 35 8f Data Ascii: 0.EmY#{%_@ET^:t-n]U#OKOuvC0YD)?US$m?pGVy#BB&MTPOih~50OaOZpU)m:h9HSA\;ut=tH0Rj<jK8sNSJPZSv-87qwA+(5
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: c2 51 6b 8e a6 91 b2 e8 c4 8f 26 5a 9d 3b 1b 04 93 e3 48 d9 66 0e c6 c6 2d 47 ba f7 f6 d0 c0 51 0b 90 a5 02 2a 9a 47 4b 55 b0 96 0a ec 59 32 ec e6 35 1b 8b 88 1a de e4 d7 42 ab 32 72 2f 87 21 cc 52 13 2b 16 96 1d d1 40 78 d6 a4 ce 7c e2 44 99 c3 53 2e ee 21 1e af 02 05 32 42 20 0c 8e 3f 2e 19 37 49 b0 f8 54 09 01 6d 94 92 15 e3 53 23 21 11 e3 0d f7 3e 26 a8 b5 70 5b 13 5e e1 12 9a 46 28 36 b1 a8 1a 1a ca 16 10 66 7a 58 92 50 93 6d fd 05 28 70 1a c5 33 2a 5b c9 b2 4f a9 43 af ce 9a 2c 56 6b 7c 6f 83 bf c8 19 4b 2a 73 b2 c0 16 71 ce 86 de 20 56 ba e1 93 3c e7 83 3f e6 71 b1 5c 0b 94 b9 8e 8a e0 76 39 36 52 fc 8d 34 97 51 14 b2 3d 0b 2c cc c4 a5 c6 0e e4 2f a1 a4 ec 58 83 11 16 0d 89 d2 aa 9b 2e 88 55 87 59 08 21 47 d4 7a 1f 0a a5 32 d2 4c 87 61 b6 84 b4 c1 Data Ascii: Qk&Z;Hf-GQGKUY25B2r/!R+@x\|DS.!2B ?.7ITmS#!>&p[^F(6fzXPm(p3[OC,Vk\|oK*sq V<?q\v96R4Q=,/X.UY!Gz2La
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: 9c c9 c5 42 cc 47 e3 36 c0 5a 92 41 de 85 28 f4 f2 d6 84 f6 23 82 e5 5b c8 72 27 2a fd 92 38 8d f6 ae 4b 52 d5 b9 25 04 00 01 f3 bd 66 86 d2 89 63 a9 b2 b7 ca d7 9b cd 3c e4 de 3e da e0 cc 5a c2 90 e3 aa b8 00 0d 40 03 a5 ea 4f 67 b7 82 a7 ac c1 ac b3 99 82 1a 19 a5 87 1d 74 1d cb 17 b6 eb de da d5 b4 cb 21 e9 81 e6 e2 26 43 db 10 9b a9 c3 a0 f3 aa 77 17 06 9a 80 d9 1f 6e e0 ff 00 98 e2 cb 7d 25 0e c8 2b 52 92 bd 52 9d a9 b8 22 fd 2e 6b 8d 65 69 1a d5 7d 96 4b 22 78 d3 70 5a 44 44 76 dc 36 fd 35 23 6d 8d f5 36 b5 56 e2 52 d1 99 e5 62 73 79 b9 77 e0 e3 f1 ce b4 c2 56 52 95 ac 14 97 75 d3 fd df 88 a3 0a 70 55 22 9d ca 64 65 f8 e3 cb 61 d4 a9 c9 ee ac a5 4c 85 0d a8 03 ad 95 63 70 3e 35 ab 1d 51 53 60 57 f3 cb 87 01 d6 bb 5d e9 32 52 94 b4 56 e1 01 0b 4a bd Data Ascii: BG6ZA(#[r'*8KR%fc<>Z@Ogt!&Cwn}%+RR".kei}K"xpZDDv65#m6VRbsywVRupU"deaLcp>5QS`W]2RVJ
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: bc bc 94 6d ef 4e 95 88 b2 39 37 d6 bd 02 5c 1e 52 76 39 36 d9 32 40 0d e1 19 ff 00 f0 ae a8 ff 00 01 6a a2 3f b1 d4 ba 6b fa c9 7c 83 09 ab f0 71 8f 25 6b 08 51 06 d6 a4 70 08 8f b9 75 3a 83 a8 a9 d1 10 64 92 a2 49 ea 6a c4 43 c9 fa c5 42 0d b8 6f 73 e4 6a 10 4a 7e a1 4c 41 a2 4d c9 f3 a8 41 b5 1a 04 05 72 77 cb 58 cd 83 fe 22 80 3f 2a 0c 64 54 56 ab a4 0a 05 b9 26 c5 0b 42 9b 29 f1 35 54 87 0c 26 53 9f 9d 1b aa b6 42 2e 40 b6 f2 02 76 84 6e 22 fe 06 82 64 24 08 71 8a 40 43 85 26 de 74 b9 21 d4 c5 52 1c 42 90 ed ec 46 9f 8d 4c 8c 8f d4 8e 53 ff 00 90 c9 ff 00 bb ff 00 98 9a ea 5b fa b3 9b 5f ec 51 80 f1 ac 39 34 8e 23 a5 06 14 4c 88 74 22 a8 98 46 a5 fd 54 a1 18 24 9a 84 39 45 10 e0 eb 4c 88 38 0f 85 10 31 89 c9 bb 26 af ac ae 44 4c 6a ad 22 d4 2f 44 88 Data Ascii: mN97\Rv962@j?k\|q%kQpu:dIjCBosjJ~LAMArwX"?*dTV&B)5T&SB.@vn"d$q@C&t!RBFLS[_Q94#Lt"FT$9EL81&DLj"/D
2024-12-12 18:57:35 UTC	16320	IN	Data Raw: 42 4a 56 49 3b 7c 6f d6 b0 db ae f3 c1 aa 17 b4 cd 3b db 6e 3d 86 e4 f9 03 37 30 e2 12 a6 fd 4d 32 85 a5 3a f9 9b 69 e3 4f a7 4a ef f9 1a 36 76 f3 0c 2f 21 cf 71 64 40 e3 58 b9 6e 62 80 52 db 64 a1 ae eb 80 21 c7 9d f4 21 21 5f 33 5d 6b 14 53 e0 c7 19 bc 72 7c 60 ac 3e 5a 2e 4e 54 6c 9b 7d a7 c3 8a 52 fd 40 8b 93 d0 1f 1a b5 70 67 93 cb 39 2b 1e e3 28 53 dd 10 9f 3b 7f a2 b4 45 e4 84 02 ab d3 90 4b a7 d2 91 44 83 44 fa 49 a8 41 2e ab 41 f2 a0 06 33 44 07 5a 1b 9e 42 7c cd 01 8a 44 f7 37 e4 1f 5f f3 38 b3 fd b4 c8 74 44 6c dd 64 d4 63 44 33 1e e8 65 20 a6 da 75 ac 92 f2 58 85 ba b4 25 b2 52 4d c7 9d 2a 08 9c 7f 74 47 dc 9b 59 46 f4 67 e4 83 eb 52 94 6e a4 d2 85 0a 8c 92 a7 d0 94 8b 92 a1 a7 e3 51 96 2f 07 ea 77 29 ff 00 c8 a4 ff 00 dd ff 00 cc 4d 74 ee fd Data Ascii: BJVI;\|o;n=70M2:iOJ6v/!qd@XnbRd!!!_3]kSr\|`>Z.NTl}R@pg9+(S;EKDDIA.A3DZB\|D7_8tDldcD3e uX%RM*tGYFgRnQ/w)Mt
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: 6c 0d ee fc 45 78 2d 9a dc ac c1 d4 ad e1 0b fb 31 dd 6a 6d ff 00 51 a5 5e d5 a2 35 aa 12 90 d2 79 1e c8 3c f4 ef 5b aa b1 1e 15 8b 6b 7a 57 4b 2c 35 c1 45 61 11 da 3b 53 61 a9 15 91 96 a3 9b 96 ab 85 74 a8 11 6d 7a 4e b4 19 07 15 af 4a 19 23 23 be a1 e3 56 45 32 a9 0c 85 d8 58 57 67 d6 dd 25 2c 19 ac 8e 51 03 32 ad 98 d7 d4 75 05 06 be 8d ea e4 dc 91 82 c8 98 fb 8f 36 5c 51 3e 66 bd 82 2a 42 56 fc 65 0e d6 c5 6e 3f 9e fa 0f c2 a0 ee 39 2e 1e db 60 e3 c9 4b 99 47 41 5a 9b 5e c6 c1 fe 35 cf dc b3 0b 06 69 bc 1a 1b 6d d8 de d5 e7 af 7c 12 02 9c 04 8b 0a e1 ed c3 3e 0d d5 b1 a4 34 3b 81 4b 17 ae 0d ba 98 cb 66 88 c8 9e 5c 60 22 c9 4d 8d 79 eb 96 25 c1 b6 b1 82 95 28 e8 6d 55 96 8b 6d 8b 6b 41 b2 1e 5e f4 9e b4 12 01 e0 e2 aa 60 83 ab dc 5a b9 d6 9a 11 cc 90 Data Ascii: lEx-1jmQ^5y<[kzWK,5Ea;SatmzNJ##VE2XWg%,Q2u6\Q>f*BVen?9.`KGAZ^5im\|>4;Kf\`"My%(mUmkA^`Z
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: af 38 33 79 bc 56 c9 6c 94 16 80 bb 8d c8 67 a1 51 f1 3b 7a 56 58 cf 26 db 68 b2 b5 cf 81 48 cf 72 78 bd ac 7c fc b4 97 9a 82 92 d4 64 bf 75 a5 a4 7d 41 09 0a e8 2e 7a d5 ca 06 54 5a 71 5c d7 8e bc 88 b0 73 72 58 66 63 c2 c9 dc ad b7 f8 92 74 ab e2 5a a4 5f 67 f2 d9 92 38 c2 38 83 79 66 21 e3 96 6d b1 2a 6d 05 c4 9d 76 29 43 52 93 45 dd 85 80 a8 ac e4 87 9c f6 8f 3d c7 78 f2 79 14 cf b5 ed 38 53 db 69 2e 12 f1 4a f5 05 22 d6 3a 78 5e ac 51 cc 72 15 34 de 0a 3c 96 82 81 0a dc 40 be 84 10 74 a5 ea 5b 12 5f b4 19 68 99 5c ae 66 7b 0d a8 a7 08 ce d6 f7 e8 54 e2 f7 13 fd 89 b5 23 f2 6e b3 5f a2 4f f9 0d 70 98 72 73 fe dd fd ff 00 10 96 98 f9 cc ca df 7d f9 ee a4 28 a2 63 8e 59 d2 ae a7 d2 91 b4 55 1d da 13 aa c9 60 ca 21 de 3d 8c 66 24 47 3e fe 5a 52 94 b8 e3 Data Ascii: 83yVlgQ;zVX&hHrx\|du}A.zTZq\srXfctZ_g88yf!m*mv)CRE=xy8Si.J":x^Qr4<@t[_h\f{T#n_Oprs}(cYU`!=f$G>ZR
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: 14 9d a4 fc b1 d2 5f 00 ee 4f c5 bd bc cd e1 18 93 1b 20 42 7b a8 ed c6 90 1c 32 3b d1 85 9b 2d 25 90 1d 69 d6 c7 45 27 a8 eb 7a 45 26 9f 0c 32 49 fc 0b c3 f1 4e 39 96 7b 21 9c 6a 6c 68 39 b9 08 60 3b b5 b7 23 85 86 95 74 38 f8 7a ca 5e f3 a9 29 03 d5 ad 34 ad 92 5e 40 ab 44 b8 b8 ee 17 ed dc 01 c6 26 33 f7 d2 65 a8 38 f3 31 46 dd 89 b9 72 c0 b8 bd ea 52 8f a9 7a 95 2b c7 4a a5 b7 2f 25 91 e3 c0 b7 79 6f b7 f3 70 68 cc 4f 8f d9 63 0e 4b 4c c5 43 a8 71 0e 20 5d 40 2b 6d f7 24 28 6a 3a 83 42 2f 03 67 26 3b ef 77 3b 7d ae 32 df 14 79 84 e1 a1 e6 48 98 61 b2 da d2 54 d1 58 58 2b 0a 24 9f 0b 5c fe 15 bf 56 2d f2 64 b9 af 93 15 93 0b 19 06 64 77 e7 47 90 21 c9 1b ca 77 a1 97 0a 6f 6d c8 1e ad bf 0d d5 d2 4c e7 ce 2b 21 ec 3c cf 6e 5b 25 79 2c 4c a4 c6 24 0e f2 Data Ascii: _O B{2;-%iE'zE&2IN9{!jlh9`;#t8z^)4^@D&3e81FrRz+J/%yophOcKLCq ]@+m$(j:B/g&;w;}2yHaTXX+$\V-ddwG!womL+!<n[%y,L$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49823	178.250.1.11	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:34 UTC	594	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Febaumsworld.com%2F&domain=ebaumsworld.com&cw=1&lsw=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://ebaumsworld.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:35 UTC	522	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 12 Dec 2024 18:57:35 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://ebaumsworld.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 212280 strict-transport-security: max-age=31536000; preload; connection: close
2024-12-12 18:57:35 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49820	3.160.188.19	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:34 UTC	357	OUT	GET /beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:35 UTC	533	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 16665 Connection: close Last-Modified: Mon, 09 Dec 2024 15:01:00 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 12 Dec 2024 04:33:54 GMT Cache-Control: max-age=86400 ETag: "f938e5cf59280e13f9597c828fb3b891" X-Cache: Hit from cloudfront Via: 1.1 6f6b2c6019ba264aff6f1264f1980d36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P5 X-Amz-Cf-Id: 9yZdvK5z7SkWxxhWok2IGJ4meWJ8kjzrHLcQgbMjrV0Pq8u6eHp-3g== Age: 51822
2024-12-12 18:57:35 UTC	15990	IN	Data Raw: 76 61 72 20 43 4f 4d 53 43 4f 52 45 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 3c 72 3b 65 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 69 29 26 26 28 6e 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: var COMSCORE=function(n){var t=function(){return t=Object.assign\|\|function(n){for(var t,e=1,r=arguments.length;e<r;e++)for(var i in t=arguments[e])Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i]);return n},t.apply(this,arguments)};"function"==typeof
2024-12-12 18:57:35 UTC	675	IN	Data Raw: 6f 6d 2f 62 32 3f 22 2c 63 2c 32 30 34 38 29 3b 65 2e 69 74 2e 75 74 28 74 29 7d 7d 2c 65 2e 69 74 2e 74 74 26 26 7b 74 74 3a 65 2e 69 74 2e 74 74 7d 29 29 7d 7d 2c 74 68 69 73 2e 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3d 6e 7c 7c 5f 63 6f 6d 73 63 6f 72 65 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 74 29 65 2e 65 74 28 6e 5b 74 5d 29 3b 5f 63 6f 6d 73 63 6f 72 65 3d 5b 5d 7d 2c 74 68 69 73 2e 69 74 3d 6e 2c 74 68 69 73 2e 6f 74 3d 6e 65 77 20 45 7d 72 65 74 75 72 6e 20 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 66 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 5f 63 6f 6d 73 63 6f 72 65 26 26 28 77 69 6e 64 6f 77 2e 5f 63 6f 6d 73 63 6f 72 65 3d 5b 5d 29 7d 2c 6e 7d Data Ascii: om/b2?",c,2048);e.it.ut(t)}},e.it.tt&&{tt:e.it.tt}))}},this.st=function(n){n=n\|\|_comscore;for(var t=0;t<n.length;++t)e.et(n[t]);_comscore=[]},this.it=n,this.ot=new E}return n.prototype.ft=function(){"undefined"==typeof _comscore&&(window._comscore=[])},n}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49824	162.19.138.116	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:34 UTC	619	OUT	POST /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 330 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ebaumsworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:34 UTC	330	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 69 64 35 49 64 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 65 78 70 69 72 65 73 22 3a 39 30 2c 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 32 38 38 30 30 7d 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 72 74 6e 65 72 22 3a 34 32 39 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 2d 69 64 65 6e 74 69 74 79 2d 68 75 62 22 2c 22 70 64 22 3a 22 4d 54 49 39 54 57 39 36 61 57 78 73 59 53 38 31 4c 6a 41 67 4b 46 64 70 62 6d 52 76 64 33 4d 67 54 6c 51 67 4d 54 41 75 4d 44 73 67 56 32 6c 75 4e 6a 51 37 49 48 67 32 4e 43 6b 67 51 58 42 77 62 47 56 58 5a 57 4a 4c 61 58 51 76 4e 54 4d 33 4c 6a 4d 32 49 43 68 4c 53 46 52 4e 54 43 Data Ascii: {"name":"id5Id","storage":{"type":"html5","expires":90,"name":"id5id","refreshInSeconds":28800},"params":{"partner":429,"provider":"pubmatic-identity-hub","pd":"MTI9TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTC
2024-12-12 18:57:35 UTC	618	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://ebaumsworld.com vary: Origin access-control-allow-credentials: true p3p: CP="CAO PSA OUR" set-cookie: id5=bd7138c8-df01-7346-84c9-ca1f86d2a58d#1734029855191#1; Max-Age=7776000; Expires=Wed, 12-Mar-2025 18:57:35 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Thu, 12 Dec 2024 18:57:34 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-12-12 18:57:35 UTC	205	IN	Data Raw: 43 32 0d 0a 7b 22 66 65 74 63 68 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 67 2f 76 32 2f 34 32 39 2e 6a 73 6f 6e 22 2c 22 6f 76 65 72 72 69 64 65 73 22 3a 7b 22 70 62 45 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 62 6f 75 6e 63 65 22 3a 7b 22 73 65 74 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 7d 7d 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 62 2e 65 75 2d 31 2d 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6c 62 2f 76 31 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: C2{"fetchCall":{"url":"https://id5-sync.com/g/v2/429.json","overrides":{"pbExtensions":{"bounce":{"setCookie":true}}}},"extensionsCall":{"url":"https://lb.eu-1-id5-sync.com/lb/v1","method":"GET"}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49826	3.33.220.150	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:35 UTC	605	OUT	GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://ebaumsworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:35 UTC	595	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:35 GMT Content-Type: application/json Content-Length: 109 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: https://ebaumsworld.com cache-control: private expires: Sat, 11 Jan 2025 18:57:35 GMT set-cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e; expires=Fri, 12 Dec 2025 18:57:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none vary: Origin
2024-12-12 18:57:35 UTC	109	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 34 36 33 33 39 37 65 36 2d 62 30 63 38 2d 34 62 32 31 2d 38 39 63 34 2d 33 30 32 36 35 30 61 38 64 61 37 65 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 31 32 2d 31 32 54 31 38 3a 35 37 3a 33 35 22 7d Data Ascii: {"TDID":"463397e6-b0c8-4b21-89c4-302650a8da7e","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-12-12T18:57:35"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49828	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:35 UTC	706	OUT	GET /thumbs/2024/12/09/053029/87645244/heistbig.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D
2024-12-12 18:57:35 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: it/QJZAEISs0bNayos33LvvFt9XjoulGFbVLGjMT+VD76ZvZ4CNIQqL/Z9/yCsvjRaA8dpj3H+M= x-amz-request-id: 4P7Y6X20WHGYS4CN Content-Type: image/jpeg Server: AmazonS3 X-LLID: eb57f2b5cca60cd5ef6d3840d37622b8 Age: 246426 Date: Thu, 12 Dec 2024 18:57:35 GMT Last-Modified: Mon, 09 Dec 2024 22:30:30 GMT Content-Length: 102807 Connection: close
2024-12-12 18:57:35 UTC	5391	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 a9 6d 63 8b d3 8b 5b 78 8b e7 93 6b 4d Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwt"5mc[xkM
2024-12-12 18:57:35 UTC	16384	IN	Data Raw: 9a b2 af 9f 8f 73 b1 d4 71 5c aa a6 b5 bf 2b af 05 e5 d7 16 a6 ca 2e bc 85 34 48 ae d9 d9 48 9f 34 ad 27 95 35 6f af f2 3e b9 13 69 c6 7b 0f 22 bc 3d 3e 0a 29 d1 ac b1 c6 ec b6 c9 74 f6 b4 98 56 ed 54 f7 d3 48 0e cf a1 4c d3 ca 37 33 d3 29 a9 e7 ab 91 d0 66 ed ec b6 7e 88 1a e7 71 92 62 db 37 90 b5 2b a8 b4 cc 27 34 9d 3d 71 58 f9 bb 4d 2b f7 5c 27 b8 69 97 3c d5 e2 b4 49 bd 67 09 11 1d b0 70 17 a5 dd 58 e1 69 47 6f 47 10 4c 4f 6d 47 17 23 b0 a7 90 2d 1d 6d 9e 54 0e 92 c6 1d e9 cb da 54 76 f4 d4 d6 01 21 22 8d a5 0a 34 18 40 01 04 b2 00 48 12 48 31 64 95 80 c2 80 b4 d2 13 79 53 95 c4 ee a1 8d da 92 a1 b4 b2 74 39 79 92 8f 28 dd c9 1b 42 fd 69 2e a1 46 5b 33 1d f2 4e 57 a0 63 8a e9 1d 7e d8 c3 e9 e7 c2 32 55 36 35 e4 fa 5d 2e 30 d2 cd 6d c2 2b 6b 80 59 20 Data Ascii: sq\+.4HH4'5o>i{"=>)tVTHL73)f~qb7+'4=qXM+\'i<IgpXiGoGLOmG#-mTTv!"4@HH1dySt9y(Bi.F[3NWc~2U65].0m+kY
2024-12-12 18:57:35 UTC	5336	IN	Data Raw: 15 3d cd 15 15 15 34 49 23 aa 69 b1 17 28 3a b4 7f a4 3d 13 f2 fc 3b dc 1a da 95 ac 7c ce c7 06 2d 5b 65 34 bb 82 92 c8 e6 0a b4 e0 89 c5 55 51 5d 28 39 c1 5f 28 38 26 b9 9b d1 9c 0c 82 74 cf 28 bd e7 32 b6 20 68 98 55 45 f0 42 d8 a4 75 1a 53 11 d0 d3 55 88 5a c2 b5 81 5e 07 f0 b0 e8 b7 f5 59 3c bd 54 9c e5 44 e0 a8 9c 86 47 b9 47 9a d8 ee f4 ce 77 92 9b 62 72 28 04 cc d4 bb 34 bb 9a 15 50 5b f4 41 84 d1 9f cc 14 5d 24 9e 32 ad 46 8c 07 f3 05 3c 91 eb df 43 c4 24 6e 42 97 5c 70 ca 94 29 ed 4c 1c 98 97 24 34 1b b9 92 af b7 2b 8a f3 69 d1 a8 e9 7d bc 8a 27 b9 a2 bf 77 55 19 18 72 69 86 86 4e 4d 6a 15 7e e1 be 25 65 70 2f 77 72 83 e3 f1 14 73 42 98 e2 a3 e6 a3 b5 14 76 f7 15 da 8a 2e 89 d1 ca 18 da 51 bb 74 43 b5 5e 01 19 9a 98 eb c2 be ea 9c 59 5a 6f 2b a5 Data Ascii: =4I#i(:=;\|-[e4UQ](9_(8&t(2 hUEBuSUZ^Y<TDGGwbr(4P[A]$2F<C$nB\p)L$4+i}'wUriNMj~%ep/wrsBv.QtC^YZo+
2024-12-12 18:57:35 UTC	10136	IN	Data Raw: 5e c8 ff 00 99 7b 23 be 75 ec 67 f9 89 82 ec 4d 1b 9b 4d 07 3e 35 a9 f8 5c 08 15 9a aa bb b9 48 da 21 9a 22 f4 69 86 85 66 d4 f4 3a 68 fc 43 47 0a f4 51 f8 90 25 dc 96 b6 a5 7b 15 b3 f9 7f b8 4f 8e d1 17 3e 33 45 56 16 d5 46 e9 9f 84 6c aa 6c 7c 26 dc 87 fe d5 ed 96 98 48 13 c4 9f 6c 85 b1 09 2b 5a e4 17 b4 db a6 e8 a2 a0 ff 00 bb d7 ff 00 55 1b 3f f6 a8 f8 40 87 5c 9e 3b bd aa d1 6c 8e 1e d7 6c 0b 5d c2 32 e2 c8 e8 3f ee f5 7b 85 19 89 65 7e 9f d9 41 c2 0d 7f 26 41 75 ca d1 35 f3 74 64 a6 6f dc ab 27 56 87 c2 ad 7d 5a 6f 0a 8e 66 c7 10 c3 94 83 6d d2 f3 63 a0 ff 00 bb d6 ab 84 18 39 9e 9f d9 0b 4d 2a 1c da 39 30 5b e4 6d f6 0c 3c 93 e2 b7 34 17 bd b8 0e e4 d6 db de 2a c6 50 79 7f 75 23 a6 8c d2 56 d0 a6 d9 ed 72 0b cd 8f 0f a7 aa 70 7c 6e a4 ac a2 32 06 Data Ascii: ^{#ugMM>5\H!"if:hCGQ%{O>3EVFll\|&Hl+ZU?@\;ll]2?{e~A&Au5tdo'V}Zofmc9M90[m<4Pyu#Vrp\|n2
2024-12-12 18:57:36 UTC	13032	IN	Data Raw: 10 c3 c5 03 42 91 65 64 72 1a 0f c1 4b 1e 38 d3 61 78 64 91 f8 de 8f 54 32 2c eb e3 4e 26 b2 21 3a f8 e0 8f 02 d6 08 29 f4 e3 a2 c2 36 d2 55 24 a1 05 78 7d 21 8d a3 d8 fe 90 c9 71 48 a2 0d 75 6f c8 e7 48 93 79 d8 52 1a 35 63 3f 48 4c 33 64 bb 21 e5 7b 37 c9 91 15 43 21 90 1b bf 70 6e 5b 7d 48 56 cc f2 4f 59 bf 90 d4 53 35 ee 9e 4d ba ad 15 39 b6 dc c1 82 90 9e 65 57 3f a0 19 a9 0f d4 9e d5 2f 32 c0 db 75 2c 25 e5 7f f9 14 7d 45 df 7c 13 62 4c 67 97 ea 99 98 a7 9b 70 88 96 09 35 dd 88 8c bc 1c cf a3 cb 25 9e 7f cc 60 ee 48 de c3 b7 ce ce cf d8 a7 22 9b 3b ec 47 4d 07 bb cb 10 d5 34 31 ab 05 85 2f 2f 48 40 82 70 9f 3b 0a 21 b4 c6 26 93 b5 44 c8 b6 89 17 12 27 8b b3 99 8e 61 6a 3e 81 4c d8 6f 32 08 13 fc 0e 74 1b c1 e7 d5 1c 14 cf 38 5c d1 d6 21 c9 24 8d ad Data Ascii: BedrK8axdT2,N&!:)6U$x}!qHuoHyR5c?HL3d!{7C!pn[}HVOYS5M9eW?/2u,%}E\|bLgp5%`H";GM41//H@p;!&D'aj>Lo2t8\!$
2024-12-12 18:57:36 UTC	13032	IN	Data Raw: f7 33 aa 18 a0 b0 56 9f c8 7b dd 7f 79 5e cc be 1e 84 7f 81 7f e4 be 7e 86 0e ee 84 61 f8 84 d9 a9 ca 82 10 c7 54 ee 08 e7 ea 23 fd 88 eb f5 23 8b f5 21 29 37 a8 fa 5f a9 da fd 4f 37 a9 e6 f5 3c de a7 77 a8 8f fa cb 27 df 23 fe 93 ec 64 1a 07 01 ee 11 c4 32 47 02 8a 8a 2a 6b ab 15 4a ee 88 cf b1 9d 28 f4 89 b2 b3 0f a1 1b 99 fc 5d 58 c8 a8 ec 26 94 3b 43 92 4e e8 90 c7 85 11 07 41 42 a2 c1 62 4f a4 e7 4f b5 d0 86 69 dc 29 13 6d 7b 41 6d 4e 5b 7a a3 36 c6 47 4d ef 2c 9b 6e 15 40 f3 10 51 5b 03 2d f0 2b 3c 4b 8f dd 0d e7 2f ae 05 f6 9f a1 af 54 c5 69 66 52 81 27 d1 54 91 db af 10 c5 df ea ec 79 27 29 be 51 ed 87 be 0b ab 49 d0 82 5f e4 21 90 9a f3 08 2e d1 b7 51 49 39 e2 23 f2 2f 84 12 df fc 97 32 f6 09 29 d8 ea 4f 84 b9 80 97 c7 ea 45 20 26 b0 7b 05 1c b1 Data Ascii: 3V{y^~aT##!)7_O7<w'#d2G*kJ(]X&;CNABbOOi)m{AmN[z6GM,n@Q[-+<K/TifR'Ty')QI_!.QI9#/2)OE &{
2024-12-12 18:57:36 UTC	2896	IN	Data Raw: 2d 37 7c fd 05 0e e7 ca 60 22 ef 52 99 df a9 ee 9b d4 a9 f0 9b 37 3a 7e 13 7a 95 3e 13 7a 95 3e 13 7a 8f f8 4d ea 3f e1 00 6f 79 f6 4c 3f cc a9 f0 87 51 fe c1 0e ab bd 82 83 bc 27 d1 56 ea 7c 2a 3d 30 a9 64 ef c8 aa 7d ea 83 d5 0a 60 b9 e5 c1 52 89 7c 65 2a c6 ba ab e7 48 4d bb 19 f3 c1 53 fb ff 00 22 9e 08 7b bb 71 59 b6 01 07 25 49 e1 84 ca a8 f0 e7 87 05 bf 69 fb 53 eb 35 c2 31 cd 54 ac d7 30 80 0a 7d 66 b9 a4 41 4e ac d2 c2 20 a6 3a d7 02 9d 59 a6 dc 0e 05 54 ac 0c 44 e0 56 fd 9a b4 a3 56 5e d3 a0 46 bb 30 e5 29 f5 83 8b 70 c0 19 46 bb 3f 69 55 2b 5d 10 b7 ed 23 99 a9 f5 ae 73 7c 81 55 2a b5 ed 81 2a 83 71 ba 7d 15 77 0b 23 cf e8 03 de dc 01 5b da 9f b9 07 b9 b9 15 7b ae 99 c5 6f 2a 7e e5 7b c1 26 73 5b c7 c9 32 af 7c 93 76 2a e7 4c ce 2b 79 53 f7 26 Data Ascii: -7\|`"R7:~z>z>zM?oyL?Q'V\|=0d}`R\|eHMS"{qY%IiS51T0}fAN :YTDVV^F0)pF?iU+]#s\|U*q}w#[{o~{&s[2\|v*L+yS&
2024-12-12 18:57:36 UTC	8688	IN	Data Raw: 88 12 cc d6 33 1a 61 e7 f1 8e 24 04 34 38 0f 01 11 7d 82 2b c3 81 2e 75 19 4e 0b 20 bf 97 f7 0d e9 6f b0 ef 7a 94 15 a2 19 15 c3 2c 36 37 c2 ee 5d 62 8a e5 81 79 73 de 52 c7 96 a6 f0 ce 4e 6a 66 6d 7f ad d0 ab cc 56 23 57 d1 9b 6a 61 c4 5a 61 65 37 89 41 77 11 f1 be 11 be 61 d6 b1 31 2c 25 9b 97 71 95 59 cc 26 04 00 21 68 ab e2 2c b3 b2 1c 0d bb 88 80 d1 0a ae 94 ec 8c 2e 06 e2 3c 11 36 17 96 72 e5 03 c2 95 02 65 99 86 da 29 c2 1f 50 aa 7e 12 a2 f3 f0 5c cd e1 a4 67 07 43 08 24 77 1d 40 c4 b8 25 f4 14 95 35 12 10 07 09 33 92 01 37 be 97 2b 17 0d 4e 7a 03 02 56 21 82 1b 02 c0 cb 81 e5 73 21 f6 8b 71 a6 16 d2 eb 29 b5 47 87 92 76 47 fd 90 32 5b 47 6f dc 01 77 18 01 35 42 d9 73 0d 6a dd 92 d0 1e 1e 27 3c 15 9c d4 80 f3 c8 55 4b 62 bb d6 2f 50 96 1a ae ee 90 Data Ascii: 3a$48}+.uN oz,67]bysRNjfmV#WjaZae7Awa1,%qY&!h,.<6re)P~\gC$w@%537+NzV!s!q)GvG2[Gow5Bsj'<UKb/P
2024-12-12 18:57:36 UTC	7240	IN	Data Raw: 2b 2b 6b 1b 25 53 cc c8 79 c4 3b 77 8c 80 98 be df 04 ff 00 70 b6 e3 34 ca 4d ce 46 4f 39 8a fd 29 6b 0a 27 67 eb cb a0 a8 ed 5e 23 1b 25 5f 4c 90 36 c1 c4 39 8e 25 5d 88 a8 e3 a0 31 d0 82 a0 59 03 79 83 7b 9e a1 0c 85 c8 95 50 6a 70 3d 2b 00 85 40 90 d5 62 44 c4 3b 99 68 8b 11 04 ab 04 ad a2 c5 c7 5a 4b b3 11 c1 16 64 62 54 81 67 30 f2 95 50 7b ca 3c c2 bc b0 6c 6a 0c c4 2e 40 68 84 45 8c 35 33 00 2c 63 57 31 51 2d 94 43 52 e1 8d c0 4c 62 59 7d 4b 4a 48 8d c4 84 b6 b4 ca b5 ea 11 54 16 1a fa 20 d2 75 19 45 ee c9 4b 17 43 43 ee 95 14 91 98 3b bd 16 65 a4 c4 f6 c1 4f 99 70 74 29 04 64 a0 fa 99 f4 36 98 86 aa 70 c2 d6 21 87 51 9c d2 61 99 f0 29 af fb 25 0a 86 cb f2 4a 82 e2 47 5e 5f dd 1d 6a 22 56 e0 81 39 3c 78 49 54 03 70 60 55 c5 2b d3 2c 40 d3 fb 84 46 Data Ascii: ++k%Sy;wp4MFO9)k'g^#%_L69%]1Yy{Pjp=+@bD;hZKdbTg0P{<lj.@hE53,cW1Q-CRLbY}KJHT uEKCC;eOpt)d6p!Qa)%JG^_j"V9<xITp`U+,@F
2024-12-12 18:57:36 UTC	11584	IN	Data Raw: a9 75 bb e8 69 06 7f 09 52 a5 40 c4 7a 30 95 12 31 e6 32 e6 f3 19 28 59 ca 1a a8 40 24 56 12 db 8a a2 c0 62 0c 40 55 aa 25 9e 20 d0 81 04 ac 20 00 3c 66 09 57 86 09 33 08 39 c4 96 90 a0 38 63 d7 71 50 10 0e 63 ee 70 8c a3 01 73 b3 10 23 9b 80 15 b1 cc 79 45 98 f8 22 ab 9a a8 18 a8 e2 ae 71 09 88 77 1c c1 6b 94 19 52 c9 31 32 84 98 cc a3 b2 07 9c ba 95 ac 43 98 e6 0a b6 56 c4 41 55 1c 9e 35 12 ba ae f3 09 db 42 5f 95 d4 60 50 95 53 98 48 a9 d6 a3 c8 13 6a 2e 09 2c d6 61 8d 1a 86 39 ec 46 51 da 38 0d 23 31 c9 17 7b ab a8 36 9c 4b 42 94 2e e8 11 66 1a a1 29 ad 30 34 89 11 4b 87 99 44 b3 e0 44 a6 03 99 41 db aa 8b 4f f1 99 f8 51 b2 dd 4e d2 ff 00 c9 a8 d6 76 31 73 65 90 f1 23 67 cb f5 28 f6 42 d1 c4 72 26 c7 c4 59 c0 45 86 b9 60 51 68 78 1f 44 cd 69 66 1c e0 Data Ascii: uiR@z012(Y@$Vb@U% <fW398cqPcps#yE"qwkR12CVAU5B_`PSHj.,a9FQ8#1{6KB.f)04KDDAOQNv1se#g(Br&YE`QhxDif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49827	207.65.33.74	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:35 UTC	628	OUT	POST /wl?pubid=156500 HTTP/1.1 Host: t.pubmatic.com Connection: keep-alive Content-Length: 139 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://ebaumsworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:35 UTC	139	OUT	Data Raw: 6a 73 6f 6e 3d 25 37 42 25 32 32 70 75 62 69 64 25 32 32 25 33 41 25 32 32 31 35 36 35 30 30 25 32 32 25 32 43 25 32 32 70 69 64 25 32 32 25 33 41 25 32 32 31 33 37 39 33 25 32 32 25 32 43 25 32 32 70 64 76 69 64 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 69 68 25 32 32 25 33 41 32 25 32 43 25 32 32 6f 72 69 67 25 32 32 25 33 41 25 32 32 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 25 32 32 25 37 44 Data Ascii: json=%7B%22pubid%22%3A%22156500%22%2C%22pid%22%3A%2213793%22%2C%22pdvid%22%3A%221%22%2C%22ih%22%3A2%2C%22orig%22%3A%22ebaumsworld.com%22%7D
2024-12-12 18:57:36 UTC	312	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ebaumsworld.com Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Date: Thu, 12 Dec 2024 18:57:35 GMT Content-Length: 17 Content-Type: text/plain; charset=utf-8 Connection: close
2024-12-12 18:57:36 UTC	17	IN	Data Raw: 52 65 71 75 65 73 74 20 52 65 63 65 69 76 65 64 21 Data Ascii: Request Received!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49829	157.240.196.15	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:35 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:36 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-WkeFfWmI' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-12-12 18:57:36 UTC	1694	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-12-12 18:57:36 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-12-12 18:57:36 UTC	14656	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-12-12 18:57:36 UTC	16384	IN	Data Raw: 7c 7c 64 3d 3d 3d 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 7c 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 Data Ascii: \|\|d==="GLOBAL_VARIABLE"\|\|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==nu
2024-12-12 18:57:36 UTC	16384	IN	Data Raw: 69 63 72 6f 64 61 74 61 5f 64 65 6c 61 79 22 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 Data Ascii: icrodata_delay"}})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b
2024-12-12 18:57:36 UTC	16384	IN	Data Raw: 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 Data Ascii: ignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f)
2024-12-12 18:57:36 UTC	1727	IN	Data Raw: 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 Data Ascii: ocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}f
2024-12-12 18:57:36 UTC	14657	IN	Data Raw: 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 Data Ascii: y:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEnc
2024-12-12 18:57:36 UTC	16384	IN	Data Raw: 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c Data Ascii: sLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET");f.getFbeventsModules("signal
2024-12-12 18:57:36 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 6e 75 6d 62 65 72 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 Data Ascii: ){return function(a){if(typeof a!=="string")throw new g();return a}}function q(){return function(a){if(typeof a!=="string"&&typeof a!=="number")throw new g();return a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49825	13.250.84.149	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:35 UTC	580	OUT	GET /id?c=17207 HTTP/1.1 Host: id.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://ebaumsworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49834	108.139.78.212	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:36 UTC	572	OUT	GET /e/dtb/bid/97371.8/0/prebid?adunitid=$rs_300x250_$ri HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:37 UTC	353	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 19 Connection: close Date: Thu, 12 Dec 2024 18:57:36 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 1c573730a8c921bc21093121dc5f6c14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DXB53-P1 X-Amz-Cf-Id: izYg-r0oD7RtyPKeiHLTJtd1UvTjLmGxiNzaBdqLFPNTumzC7GE_tA==
2024-12-12 18:57:37 UTC	19	IN	Data Raw: 61 6d 7a 6e 61 64 73 2e 61 61 78 50 75 6e 74 28 7b 7d 29 Data Ascii: amznads.aaxPunt({})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49839	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:36 UTC	703	OUT	GET /thumbs/2024/12/12/095024/87646647/santa.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D
2024-12-12 18:57:37 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: RQEYbqe8xjN44Qjqbew4Ok6QjUfK9CbyYUXIKV3KCDS38jOeY6DIGYekGhvkCO69lvtG3Xy8P1Y= x-amz-request-id: 1CK5BPC8R9JWB4Q7 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 02c469543b7f6a6da188d95941f50dc1 Age: 14831 Date: Thu, 12 Dec 2024 18:57:36 GMT Last-Modified: Thu, 12 Dec 2024 14:50:25 GMT Content-Length: 124775 Connection: close
2024-12-12 18:57:37 UTC	16015	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 43 00 00 ff e1 03 9d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyChttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:37 UTC	16384	IN	Data Raw: 47 8d 85 ce c6 cb 7b 15 63 74 59 90 3d 7c ed b0 5f 88 4a 9e 27 cb 8a ce f6 8f 04 ee 63 33 17 16 49 70 9c c6 19 21 31 0d a5 1c df 32 a2 2f 7a 98 28 9e 2e 3c ae 0e 71 8f 94 65 93 10 6d f5 3f 0a 10 88 09 b9 75 45 53 e4 b8 f9 b2 3d ad c1 b7 9e 86 09 f2 32 24 30 8d ec fe 6b 63 68 50 5c 75 ab 07 13 c8 7b 57 8e 30 33 32 05 c6 49 5c c7 c7 22 88 df 1b 1e 5a 0b 4f f1 1a d6 98 a3 cc fb 3f 23 07 95 cb c0 81 e1 cd c6 02 56 07 f9 5e 63 72 14 03 a9 bd 59 4c 64 e2 71 99 79 a5 cc c7 01 c5 8d 74 80 1b 6e 0d d4 0f 1a 68 ac f6 23 43 9d 70 4a 28 1d 7b 1a a8 0c 21 a4 20 20 ad bb 25 03 88 69 72 80 0a 03 f2 02 81 25 d5 a0 8d d7 1f 2a 04 5c 10 16 df c1 75 a0 04 dd 35 dd a8 16 a0 44 35 a4 ad c0 e9 df c2 80 a0 b3 47 8d a8 03 6f a7 94 25 cd 02 47 11 b9 53 bd d1 3c 28 11 00 dd c2 d7 Data Ascii: G{ctY=\|_J'c3Ip!12/z(.<qem?uES=2$0kchP\u{W032I\"ZO?#V^crYLdqytnh#CpJ({! %ir%*\u5D5Go%GS<(
2024-12-12 18:57:37 UTC	10641	IN	Data Raw: ee 23 d7 19 78 f1 98 64 f1 af 99 1f 59 e7 be ec 33 e7 fb 89 d9 6f 7e e6 b0 a3 6b 16 fc b5 3e 8d 06 49 8b 1a fb 81 5a 66 b6 b1 9a 1a d0 05 80 15 b8 ca 60 09 28 2f 4d 44 11 99 47 22 c8 05 c3 ca 53 51 a9 cb 71 38 3e 96 e2 c4 c8 68 d6 95 23 12 5e 26 49 a0 df b0 ed 1a 94 ac 9a 8e 08 dd 86 36 01 6a b2 e1 57 f1 f2 4e c7 29 e9 5a d4 55 93 3a 46 38 ee d2 b2 44 6f cb 32 58 50 56 12 11 32 9e 95 85 6b c1 93 1b a1 d8 6b a7 20 16 b4 ee 03 b1 ae 91 2b 0e 38 c4 79 2f 7f 5a da 27 e4 f1 dd 9b 85 1c d0 85 74 25 5c 95 23 35 5c 38 c9 88 ef 5a e4 0b 2d 6e 31 5d 3f b2 df c4 4f c1 f2 10 e4 b4 3a 76 b1 63 5a b1 ce d7 3d c0 7b 5f 2b 9e e4 1f 04 03 73 49 72 11 d1 28 9a ce f7 07 09 93 c3 e5 3b 1b 29 85 8e 61 20 1e e9 51 a6 3b db a5 1a 42 fd 52 b2 98 8c 85 34 30 b6 d0 2d be 34 01 50 Data Ascii: #xdY3o~k>IZf`(/MDG"SQq8>h#^&I6jWN)ZU:F8Do2XPV2kk +8y/Z't%\#5\8Z-n1]?O:vcZ={_+sIr(;)a Q;BR40-4P
2024-12-12 18:57:37 UTC	16384	IN	Data Raw: ab 39 65 7f 8f c1 73 a5 0f 4f 2d 5d 48 bf ca e4 88 a0 6c 0c d7 53 55 d7 97 3f c8 3a 3f 48 bd f6 f1 a5 76 91 cd cb 9f 03 9c 58 d7 02 57 45 ac d8 d1 47 33 e3 3b a3 76 d1 d4 57 1c 47 3b ef 2e 2e 0e 53 1d f3 31 3d 46 05 4e e6 8b 23 90 f6 ef 26 ee 13 38 3a 48 d4 05 05 ae d2 f5 97 4f 17 7b 0f 21 16 64 4d 95 8d 40 ee d5 65 66 f2 3b 99 b9 1a d3 5a 8c 62 c4 1e 93 6e 42 55 64 27 ca 0e 71 6b 0f d3 49 11 13 44 93 59 56 b5 20 6c 91 4b 1f 4b 0a 58 96 21 fc c3 01 da 6c 6b 36 11 3b b8 f6 cb 8c 32 04 8d ff 00 aa b7 ac e3 4c ac bc 72 d7 58 8b 54 c5 d2 88 02 12 98 87 12 81 29 15 95 cf 70 78 7c de 31 87 20 23 bf 0b 86 ab 57 4d 79 87 35 c0 bb 89 cb 74 17 2d 1a 1a cf 55 db 8a cd 74 4b 5c ad 77 91 03 d8 00 ac eb 5e 26 c0 1a c9 9a ee a0 d2 56 6c 5f e4 f3 1d 94 d0 5f 6d 81 05 6e Data Ascii: 9esO-]HlSU?:?HvXWEG3;vWG;..S1=FN#&8:HO{!dM@ef;ZbnBUd'qkIDYV lKKX!lk6;2LrXT)px\|1 #WMy5t-UtK\w^&Vl__mn
2024-12-12 18:57:37 UTC	16384	IN	Data Raw: 0b c4 bb 8f c6 89 b1 88 e3 0d 6b 75 55 17 72 f7 35 3e d3 1c f7 1f ca c5 8a b3 03 77 b8 90 e5 45 1e 15 9b ca eb 55 de ed 33 c4 57 6b 76 84 1a 9b 69 65 a6 35 cf 28 31 b9 78 a0 90 4c 5c a0 94 43 e1 a5 6a 55 ee 6b 77 03 9e 97 2b 14 35 d2 81 b0 92 58 74 20 56 7a e9 99 ce 39 6e 6b 35 92 e5 3e 46 dc 29 20 6a 89 53 c7 e1 69 d8 5c 80 7c 41 a0 12 d6 34 95 5a c5 8e de bb 1c f7 bd 22 6b db 1e 6c 2c df 20 3b 5e 3a 95 d0 d7 6e 3e 5c 7d ff 00 15 89 81 c8 3e 17 10 ff 00 21 76 97 b0 3f 1a d7 5c 33 3b f8 75 5c 57 28 d6 79 9e e5 0f 17 0d 35 ce f2 df 93 7f 17 91 6b 81 21 bb b7 02 0a ea 7b 7c eb 0b 28 3f 28 c4 52 40 5b b8 05 b9 b7 ca 8d 68 37 3d e6 4d ad 3b 8a 1d 55 01 e9 56 1a 91 b9 47 e9 79 bc 89 bb b5 b5 fb ea b3 6a b6 54 71 49 b8 4c 18 f0 e2 41 0d 3a 0e 95 2c 67 54 dc c1 Data Ascii: kuUr5>wEU3Wkvie5(1xL\CjUkw+5Xt Vz9nk5>F) jSi\\|A4Z"kl, ;^:n>\}>!v?\3;u\W(y5k!{\|(?(R@[h7=M;UVGyjTqILA:,gT
2024-12-12 18:57:37 UTC	16384	IN	Data Raw: 03 c2 b8 08 e4 25 e1 c3 f0 af 8f 8d 04 f2 c2 d8 58 27 5d ee 50 d5 ea 2f 53 04 33 c6 e5 32 c6 d5 41 b8 0f f2 8b 05 f8 53 45 7c 89 1b 14 d7 b2 b7 cc e5 d7 ec a6 a2 1c 89 0b e0 01 c3 69 90 16 b9 c0 59 0d 85 e9 aa f1 6f 79 c1 3e 0e 53 e1 c8 6a b4 97 79 fa 3b 69 b1 24 75 15 d3 96 2c 72 85 c0 90 45 c2 5c 9e fe 1f 1a db 25 f8 41 3d 15 3e 74 09 a4 1e 8a 45 8a 6b 40 00 42 1a 42 10 12 fd 3e 74 09 ae 2e 28 48 6f 4e e2 80 82 ad dd a5 d1 28 0a 12 53 b7 4e bf 1a 06 92 dd df c4 3b f4 5a 02 54 0d a4 ee 27 a0 b9 a0 00 81 e5 55 23 51 d4 50 12 6c 5c fe 9f b3 c2 80 1f 3a dc aa 29 07 c4 d0 16 8f 35 ee d2 89 40 8b 40 b9 d3 bd 00 6a 10 42 02 46 84 50 7b dc 51 37 32 2f 5e 40 0c 6e b8 af 0d 7d 1a c2 e5 f8 ec 79 b3 23 6c 63 d2 6e 8e 03 bd 44 38 e0 33 1d 86 13 28 91 a8 95 62 5a e7 Data Ascii: %X']P/S32ASE\|iYoy>Sjy;i$u,rE\%A=>tEk@BB>t.(HoN(SN;ZT'U#QPl\:)5@@jBFP{Q72/^@n}y#lcnD83(bZ
2024-12-12 18:57:37 UTC	16320	IN	Data Raw: d6 c1 c9 6c a3 ba d1 93 43 5a b4 ac e1 38 0f c2 ed a4 54 43 5d 31 4d ae 23 e3 41 43 29 4d db 51 a8 c1 e7 f0 dd 3c 05 d1 1d c7 a8 15 55 c0 e6 c4 62 99 cd 76 a0 de aa d8 6e 3b c3 1c 16 b5 12 35 b0 b3 e2 61 44 55 ef 57 a0 cc bc a8 de 2c 05 67 98 95 d4 fb 13 3e 18 20 7b 24 45 5d 4d 76 8e 7d 3a d6 f2 70 bb a8 ad c7 1b 0c 9b 92 68 fa 6e bd a9 52 43 1b 9a c2 15 c6 a2 f8 a0 9b 94 c5 0a 0b 81 03 5b d4 b1 a9 f0 e5 f9 ec ec 1c 90 e8 98 d0 bf c4 2b 16 3a ca e5 26 60 6b 88 6e 95 ca ba 44 26 d5 1a 80 41 5a 6a 95 ea 6b 44 34 a2 51 1a d6 2a 3e f3 fe fe 8a 7e 8d f1 7d 57 9f c5 1f ff 00 27 9b 5e 87 95 f0 c8 da 41 20 12 3e d4 34 00 a5 82 aa 5c 1d 0d 03 c1 68 71 28 5d dd 28 02 06 83 d5 46 9f 88 50 28 7f d6 8a d7 24 6b e0 6b 1e cb ab cf c3 a7 c2 99 a5 5a 4d c2 fc 08 15 e3 ea Data Ascii: lCZ8TC]1M#AC)MQ<Ubvn;5aDUW,g> {$E]Mv}:phnRC[+:&`knD&AZjkD4Q*>~}W'^A >4\hq(](FP($kkZM
2024-12-12 18:57:37 UTC	16263	IN	Data Raw: bd 51 a7 93 93 eb 4a e7 13 bc b6 de 60 57 71 b1 20 f5 b5 59 c7 8c c7 4b 50 bd d1 b0 b5 96 7e cb f5 52 e3 de ae 22 bb a5 25 e1 a0 b7 c9 a8 20 eb 56 44 b5 13 a4 8d cd 73 43 81 5d 5a 02 a2 56 e3 2a ce 7b 9e ef 4c 1d ad d4 9d 10 8a b2 22 19 0b 64 24 38 7d 63 40 34 02 b7 05 59 20 08 03 1c 42 15 03 fc 6b 71 2d 47 b5 c1 db 9e 51 45 93 e2 94 66 d3 1f b8 79 89 dd b7 41 d0 8a 33 a4 1c 02 b8 9f 88 e8 6a e1 86 92 09 5e 87 52 9f b0 51 2d 46 5c 50 12 43 90 f5 15 a4 02 40 00 fd 21 7b d3 03 54 b4 6c e8 49 4f 0a a0 a8 6b 43 87 4b 03 af dd 44 17 5c 92 0d dd 41 d3 36 47 35 a5 d2 15 26 eb 5e 3a fa 1a 30 72 4e 8d a4 2d 15 d1 70 7c c6 06 46 30 89 ee f4 a6 6a eb d6 b5 ac d6 94 fc 6e 07 2d 8a 62 9d e1 7f 05 ee b4 d4 64 bf 8e 8b 8f c1 9b 0f 2e cd 43 b5 c2 9a 56 1f 0c 0c 33 1d 9f Data Ascii: QJ`Wq YKP~R"% VDsC]ZV*{L"d$8}c@4Y Bkq-GQEfyA3j^RQ-F\PC@!{TlIOkCKD\A6G5&^:0rN-p\|F0jn-bd.CV3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49841	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:36 UTC	701	OUT	GET /thumbs/2024/12/11/030516/87646246/wow.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D
2024-12-12 18:57:37 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: 0BXti3N5GW0IvRU/gT9YkdTBlfxunmSdpLelCUgrcbjX+AjV9/RA/8W1Y1B+6VuSdcmiTViKl0k= x-amz-request-id: ZDC3WF09GJ7TKAW8 Content-Type: image/jpeg Server: AmazonS3 X-LLID: dc19447577d8724e715ccfd70c1cf2f6 Age: 82340 Date: Thu, 12 Dec 2024 18:57:37 GMT Last-Modified: Wed, 11 Dec 2024 20:05:17 GMT Content-Length: 105414 Connection: close
2024-12-12 18:57:37 UTC	14080	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:37 UTC	16384	IN	Data Raw: fa ad 63 66 4d 50 1e 6a 0f 65 35 7d 1a ac 6b 5c 03 83 88 4d 5f 5c 18 2d 16 ad 53 57 06 d7 0a e8 14 4c 13 b6 1e b4 45 c5 2c b1 50 d6 b4 90 77 74 28 98 89 f2 4c 28 d2 ea 11 d1 17 0c 32 a6 6e 86 c8 e9 cf 26 fb e9 9a 6b bf e4 ae ad e5 24 5c 86 45 0d 4d 13 58 c4 72 e7 e4 9b 7a 95 6f 64 d6 a7 20 19 73 5c 13 50 7c 53 5a bc 84 66 4e 01 04 90 0e 80 12 9a c5 e5 36 26 5c f4 21 ce 25 9d 2a 51 ce f3 e5 7d 92 12 75 a8 e8 a3 53 91 92 f3 ff 00 99 fb 14 d5 c3 b6 4a 6a 6a 9a 61 dc 6d 50 7e 29 a9 79 47 eb 0a d3 af 65 52 41 89 0d 05 d1 71 0e 43 8e dd c0 e8 8c 62 c6 69 a6 2c 4e ad 09 60 23 c6 a8 bc cf 2c c7 4b 31 1b 4b 89 15 a8 0a 6b af a9 09 a6 68 f2 f5 29 a7 a2 a7 27 2b 9d 8f 29 98 6e 2d 69 a1 f0 5a 95 9e f9 79 66 4f 2d 23 72 1f 43 46 87 16 b4 0b df b2 ef 27 87 87 ae bc 94 Data Ascii: cfMPje5}k\M_\-SWLE,Pwt(L(2n&k$\EMXrzod s\P\|SZfN6&\!%*Q}uSJjjamP~)yGeRAqCbi,N`#,K1Kkh)'+)n-iZyfO-#rCF'
2024-12-12 18:57:37 UTC	16384	IN	Data Raw: 45 1b bc 5a bf 25 7f cd bf ff 00 a7 1c 07 3d f8 f3 dd de df 7f af 91 0f dd e2 02 37 3e 2b 96 81 a9 70 e9 45 cf af 9c 7b 3e 1f fb 0e 7a fd 47 c4 fb b9 dc 3c cd 91 95 9b 16 5f 2c f1 9d 40 ee bc dd 47 6f af c6 7d 26 c7 a1 61 72 11 e7 63 7a f1 6d 93 1d e3 74 53 0e df c2 7c 57 27 ce eb e5 79 fd 39 03 b0 a1 e8 89 e9 ff 00 44 22 8d ed da 40 a0 51 2f 26 76 3c 0e 69 8d cc 0e 69 d4 aa 98 31 03 03 43 43 46 d6 e8 86 18 e2 c3 d5 a5 10 df 6d 00 b8 69 27 b2 14 46 0c 72 ed a0 50 d2 b4 57 59 f2 6f 42 20 50 39 8a 33 d6 fd d4 d5 c0 7a 22 83 cc 75 a2 aa 73 14 65 9b 09 f2 8d 02 08 ce 20 06 ad 92 81 45 d4 9f 69 56 d9 f5 28 cf 40 74 12 37 ff 00 37 68 f1 15 46 72 a1 74 73 b9 bb 99 30 7d 35 34 46 e4 47 4c ee 8d a8 e8 55 d0 98 79 02 d2 76 0f 9d 94 09 ae e4 77 8a 30 58 d6 e8 34 5c Data Ascii: EZ%=7>+pE{>zG<_,@Go}&arczmtS\|W'y9D"@Q/&v<ii1CCFmi'FrPWYoB P93z"use EiV(@t77hFrts0}54FGLUyvw0X4\
2024-12-12 18:57:37 UTC	16384	IN	Data Raw: 04 bf 50 41 eb 75 bd ae a8 26 93 a9 16 09 80 83 82 03 69 08 24 0e 36 be 88 27 8f 22 82 8e b9 e8 82 cb 66 6f 4a a4 1a 1c 64 b5 78 f8 af 67 c9 a9 1d e7 10 3f 96 d5 f4 78 6e 37 58 2c 0a e5 db 6b fc 70 f3 2f 37 6d 4a d3 d9 55 c6 96 a3 7c 65 6a 33 15 64 89 db 97 49 5b c3 b1 85 a1 66 a8 87 8a 72 ac 1e 69 85 c1 d4 e9 aa f5 fc aa 57 9b fb 9e 58 c0 70 dd 70 a7 da b9 74 e0 72 76 bd ee a5 fc 4a f9 5f 4e bc b9 aa ba 0a df 42 b9 6b 2a d3 42 7b 0a 22 20 97 10 16 9b 57 b2 2a 84 91 6d 75 29 64 12 8c 78 a4 60 6b 9a 29 dd 11 ce fb 97 17 17 8d d9 23 0e d3 27 4a ff 00 72 0c ac 6e 4d ce 68 69 75 7b 5a 8b a7 30 56 cd 6b 64 79 17 2d 3a d1 68 53 1c 7e eb 30 9f db d1 6b 9f d1 d6 fe 2b e4 f9 5c 2f 7a f1 d8 cc 98 98 a7 76 d7 47 5e 95 a5 d6 f4 7d df c2 c0 59 87 11 2d a7 94 51 62 d1 Data Ascii: PAu&i$6'"foJdxg?xn7X,kp/7mJU\|ej3dI[friWXpptrvJ_NBkB{" Wmu)dx`k)#'JrnMhiu{Z0Vkdy-:hS~0k+\/zvG^}Y-Qb
2024-12-12 18:57:37 UTC	16320	IN	Data Raw: 35 06 8a e8 9d 93 b4 8a 93 75 74 5b 89 e1 c2 c6 aa e8 94 ba c9 a1 da 6e 9e c0 ea a8 12 f3 d9 4a 23 7b 77 0a 56 89 91 54 a6 c6 8d c6 84 55 63 e9 c9 ac cc ce 1e 09 49 f2 d2 bd 42 e3 ea ba c3 cb e0 4b 5f e4 b8 59 b0 d5 16 c2 62 90 38 b0 35 c2 cb 38 ba b0 f7 34 dd c6 e9 80 9e e7 35 8d 31 82 e2 75 52 89 a1 73 c4 75 96 c0 f4 53 44 98 db 1b 21 34 d7 aa aa 37 96 ef 37 01 04 4d 89 93 4b 46 79 9f 5b f6 51 16 f2 72 5b 89 10 8e 36 8f 50 fe aa 83 fd 88 33 3d 67 54 b9 e6 b5 ef e2 9a 2d 62 c1 b8 ee 70 1b 7a 29 68 b3 3c a2 38 80 26 c3 40 b1 a3 32 5c 87 3e fd 10 7b b4 39 4e f5 5b 13 05 4b cd 2c be 83 9b 4a 56 c7 0b 8b 2b 52 02 0a 72 64 56 a0 0b 20 8d b3 ed 63 82 a3 33 2a 7c 86 b8 48 c7 79 46 ad ea b7 03 c3 23 8f e9 37 f0 54 4a 62 2f 69 a0 a2 8c 63 2a 6f 6e 3e 7c 80 e9 64 Data Ascii: 5ut[nJ#{wVTUcIBK_Yb858451uRsuSD!477MKFy[Qr[6P3=gT-bpz)h<8&@2\>{9N[K,JV+RrdV c3\|HyF#7TJb/icon>\|d
2024-12-12 18:57:37 UTC	16384	IN	Data Raw: 65 c7 d7 06 83 62 a1 d2 94 b2 d4 a2 cc 71 80 02 72 8b 4d 6d 82 f5 fc d5 6e 36 13 40 bb 35 16 1e 00 6d 57 1e ab a4 61 73 59 62 1c 59 9e 1d 4a 30 93 fb 17 87 ed 56 be 7c c9 ce 67 a9 9e 5a 77 c9 34 c4 9a fe e5 f3 fa 72 b7 14 23 32 c8 ed ad 15 27 a2 f2 77 1b e7 aa e8 78 5e 32 a4 17 b7 cd d0 15 e6 ea bd ff 00 0f 95 e9 d4 1c 46 e2 c2 65 7d 37 11 66 f5 5c fd df 73 e1 fc 36 79 60 ce f7 17 38 bc 5c 9b 29 ee df d3 e7 22 16 c6 d7 fd 56 f1 29 2b 87 fd 75 9e c9 c1 8b 05 93 73 39 60 13 10 23 1b 75 fc dd 28 af b3 d1 cf cd 5f 23 d5 ca ca 97 2a 53 57 cc 4b 89 3a ac 5a 5e 35 0b e1 60 14 a0 35 f9 ad 46 7e 93 23 5f db db f8 8e 17 94 e4 9c 29 34 c3 d2 84 ba 80 50 d9 7a 7e 7d 63 e4 7d a3 99 8f 8f c3 67 f3 9f 56 48 eb 97 37 ad 6e bb 5f ab cd c4 4c 79 5c dc 28 bf e0 b3 24 8a e0 Data Ascii: ebqrMmn6@5mWasYbYJ0V\|gZw4r#2'wx^2Fe}7f\s6y`8\)"V)+us9`#u(_#*SWK:Z^5`5F~#_)4Pz~}c}gVH7n_Ly\($
2024-12-12 18:57:37 UTC	9478	IN	Data Raw: 64 05 19 25 b5 35 28 0f 65 46 ea 7e d4 09 a4 38 ed ec 82 47 20 6d a5 d6 ae a8 2c 45 03 a9 aa 03 a5 35 ba 00 7c 7b 86 e0 81 8c 52 18 c0 0f a5 94 74 8a f3 41 35 2d aa 18 d0 c2 11 c3 00 a0 01 c7 ea a2 aa c1 fc db ff 00 25 ff 00 53 fe 52 c4 57 98 84 12 0e 88 1e a8 10 2a 28 d4 a8 20 81 2a 1d 50 90 21 aa a1 16 b5 d7 dd 4a 28 24 6d 29 6b a0 70 81 d0 24 09 02 50 31 0b 61 a8 b1 43 16 56 ca 60 7d 8c a1 17 a1 5a e6 8c bc fe 25 92 02 e6 dd dd 17 7e 7b c5 63 cb 1c f0 1a 3f 41 a7 45 e9 e3 e9 a1 43 24 6f 0e 06 e3 a8 2b b4 9a 39 3f 73 fb 0b 07 93 6b f2 31 5b e9 64 eb 6d 49 0b 1d 70 3c d3 27 0b 91 e3 f2 4c 39 71 ba 32 d3 46 4a 47 d4 bc 7d fc c4 ad c9 73 48 73 c6 ea 2f 35 98 d2 db 61 66 53 6f 18 20 f7 3a 7c 92 74 a3 c1 cd e4 b8 69 7d 4c 57 17 44 cf aa 3e 84 7c 17 a7 8e c7 Data Ascii: d%5(eF~8G m,E5\|{RtA5-%SRW( P!J($m)kp$P1aCV`}Z%~{c?AEC$o+9?sk1[dmIp<'L9q2FJG}sHs/5afSo :\|ti}LWD>\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49842	162.19.138.118	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:36 UTC	553	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ebaumsworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:37 UTC	377	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://ebaumsworld.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Thu, 12 Dec 2024 18:57:36 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-12-12 18:57:37 UTC	56	IN	Data Raw: 32 44 0d 0a 7b 22 6c 62 22 3a 22 2f 52 68 4a 5a 33 39 47 4a 6f 4a 4a 50 76 54 44 43 47 63 31 73 41 3d 3d 22 2c 22 74 74 6c 22 3a 32 38 38 30 30 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2D{"lb":"/RhJZ39GJoJJPvTDCGc1sA==","ttl":28800}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49843	141.95.33.120	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:36 UTC	419	OUT	GET /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=bd7138c8-df01-7346-84c9-ca1f86d2a58d#1734029855191#1
2024-12-12 18:57:37 UTC	304	IN	HTTP/1.1 400 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding content-type: text/html;charset=utf-8 transfer-encoding: chunked date: Thu, 12 Dec 2024 18:57:36 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-12-12 18:57:37 UTC	40	IN	Data Raw: 32 32 0d 0a 70 61 72 74 6e 65 72 20 70 61 72 61 6d 65 74 65 72 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 0d 0a Data Ascii: 22partner parameter must not be null
2024-12-12 18:57:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49845	104.21.25.186	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:37 UTC	347	OUT	GET /px.gif HTTP/1.1 Host: bt.dns-finder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:37 UTC	1310	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-goog-generation: 1721406977485562 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC7BtfnEcx31s64rjtmLxfqAJc8hPnGang145Xyq0GlR0ggU_Un1cM8STqc_uU-G3E9BW4s Expires: Thu, 12 Dec 2024 19:34:58 GMT Cache-Control: public, max-age=14400 Age: 1359 Last-Modified: Fri, 19 Jul 2024 16:36:17 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KXTWFZMpXoOoI2m%2B584jkI88i6%2FPuPLVne3egRntbZqK36Prs1JpCIqF7WEO9pOApaGq3JGeaJCdDhnTlf2PuM0DjXcLE5csT4B71DctBHeHz%2BbZVFkLz1kiA%2B7qNQWDQxHsaA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f0ff0f03e7e1821-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1711&min_rtt=1662&rtt_var=659&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=925&delivery_rate=1756919&cwnd=242&unsent_bytes=0&cid=77d5deb4409ea2b3&ts=454&x=0"
2024-12-12 18:57:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49844	52.223.40.198	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:37 UTC	426	OUT	GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e
2024-12-12 18:57:37 UTC	354	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:37 GMT Content-Type: application/json Content-Length: 108 Connection: close server: Kestrel cache-control: private expires: Sat, 11 Jan 2025 18:57:37 GMT set-cookie: TDID=463397e6-b0c8-4b21-89c4-302650a8da7e; expires=Fri, 12 Dec 2025 18:57:37 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-12-12 18:57:37 UTC	108	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 34 36 33 33 39 37 65 36 2d 62 30 63 38 2d 34 62 32 31 2d 38 39 63 34 2d 33 30 32 36 35 30 61 38 64 61 37 65 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 54 52 55 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 31 38 3a 35 37 3a 33 37 22 7d Data Ascii: {"TDID":"463397e6-b0c8-4b21-89c4-302650a8da7e","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-11-12T18:57:37"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49846	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:37 UTC	701	OUT	GET /thumbs/2024/12/09/011657/87644961/wow.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D
2024-12-12 18:57:37 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: lQTQtDQP8OFMfSsp7x02qwmmTCa1TPE/k9Bpj9LchNRM0vcfUUZP2AjYEiQJtpf1YH9bUVmep0w= x-amz-request-id: W60TZQZ9D5QT7AK4 Content-Type: image/jpeg Server: AmazonS3 X-LLID: ac5e3a30db9b6de3ab7610e5d598b54e Age: 261639 Date: Thu, 12 Dec 2024 18:57:37 GMT Last-Modified: Mon, 09 Dec 2024 18:16:59 GMT Content-Length: 224461 Connection: close
2024-12-12 18:57:37 UTC	14079	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 43 00 00 ff e1 03 9d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyChttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:38 UTC	16384	IN	Data Raw: dd a5 8f 85 aa ac 36 51 22 5b b8 b9 52 5c 09 90 d1 b3 6b d2 fd 2f 41 a0 22 ef c2 78 6c 3c 84 94 29 f4 0b 9b 00 92 3c aa 45 16 a2 df 97 f6 a2 5c c4 48 56 30 6d 54 80 10 00 e8 13 e3 56 a8 64 28 aa 4e f6 ea 7f 18 94 cc 60 d2 90 3a b8 7c c0 f0 1f 3a 32 86 06 45 cb 8b 7b 37 1b 92 60 32 13 72 6a 0d ac 85 08 a9 57 e5 56 db dc d1 48 6e d8 31 26 b8 c0 4c fc 9a 59 fd 46 e1 2f b4 15 e0 4a 4d 89 a2 86 29 f9 36 db 8c ec a7 1d d3 65 c2 6a fa c0 cc eb 37 29 2f 49 52 d2 74 ab 40 4f f6 bb 8d b3 ca 79 c4 28 33 3f f0 8c ef 97 28 9e 81 98 e9 2e 2a ff 00 c2 d4 c9 91 82 b9 7f 25 91 c8 33 d2 66 6e db 1d 2e 29 31 db 1a 04 b6 93 64 ff 00 60 a6 c8 d1 78 19 c7 e7 a5 44 79 b3 b8 ec 49 17 a5 63 46 c4 99 b0 e0 32 88 c8 c0 6d f1 d4 8d 7e 74 a6 a8 cb 21 98 eb d7 51 54 cd 1b 2a 0a 42 77 Data Ascii: 6Q"[R\k/A"xl<)<E\HV0mTVd(N`:\|:2E{7`2rjWVHn1&LYF/JM)6ej7)/IRt@Oy(3?(.%3fn.)1d`xDyIcF2m~t!QTBw
2024-12-12 18:57:38 UTC	16384	IN	Data Raw: 4f d6 7c 2d e3 6a d1 fd b4 37 72 f1 c1 39 74 5e 57 88 4e 4b 21 24 b5 97 7d df b6 ed a1 21 2a 0c 84 dd 2b 0a f1 d7 42 2a c8 6c 46 43 a9 1a 86 22 32 22 e3 01 41 2b 71 46 eb 74 fd 4a 3e 66 aa 7e 4b 44 39 90 79 d7 7b 45 37 4a 4a 93 bf e0 3a 55 90 45 72 64 49 2e 7d b8 dc 0f ab cf c7 5a bd 44 89 83 da 65 a8 89 33 1f 3e ad 4a 52 7a fc e9 64 8d 10 e4 6b 19 91 54 f7 5c 78 9b b6 09 4a 4f 86 95 9e 66 a8 a0 57 23 5a d7 90 21 67 e9 40 08 f8 5e b2 cb c9 b6 b8 9d c6 4b ee e3 de 8d 7d ae 30 42 92 69 e1 20 4a 1c 8e 45 cc 22 42 4c 69 1a 3a 8f cd e1 4b 64 f2 3a ab 02 fb 97 70 ba d2 ce fe 8a 47 81 15 8a 6c ba 28 71 12 1d 62 e5 9f 50 57 d4 da ba 55 4e 43 a4 71 39 08 ae 39 64 92 d3 80 ea 85 ff 00 a0 d0 52 03 44 e6 5c de 41 06 ff 00 2a 64 ca 9a 25 1f 56 8a d0 d1 10 45 f6 8d a4 Data Ascii: O\|-j7r9t^WNK!$}!+BlFC"2"A+qFtJ>f~KD9y{E7JJ:UErdI.}ZDe3>JRzdkT\xJOfW#Z!g@^K}0Bi JE"BLi:Kd:pGl(qbPWUNCq99dRD\A*d%VE
2024-12-12 18:57:38 UTC	16384	IN	Data Raw: 92 b9 8c 0f 39 28 b9 20 25 a5 29 d0 ab 24 58 59 26 f6 17 f3 ac df 6e 03 13 6c ce 71 86 b9 2a b0 99 b6 9a 6c ad d8 e9 2e a5 e2 84 b6 1d 61 41 48 d5 44 0d d6 e8 69 be f7 e4 6b 17 04 ff 00 ea 16 7f 19 e5 3c 6f 8d c8 9e e0 47 79 05 31 a4 b8 a3 74 b8 a0 42 89 58 d2 de 83 d7 ad 6c 9e e7 64 85 55 e1 18 a4 ee 3d fb 63 c1 ae f2 cc 35 7f 81 27 71 da a4 58 1b a4 1f 0d 6b 13 94 7b 65 85 64 bc f0 cf 64 1e e4 78 83 1d 12 58 7a 46 40 95 b0 ea 1d 7d b5 47 16 16 55 82 6c bb 0f 03 57 d5 2c bc 21 fa 85 30 fe c5 c9 f6 c3 3a 8e 51 ca a6 af 90 63 f0 e8 76 53 90 37 96 1b 5a 90 82 50 a2 a3 f5 04 9d 6c 6a d9 62 32 e4 3f 56 57 06 7f c8 38 5b 79 3c 8c 9c fc e8 32 1a 85 38 07 d9 0a 5d 8e f7 ec e1 4a 6e 55 b5 09 0a aa 5d 8b 21 75 60 44 2e 0d 8c ca a3 ec 31 f0 91 15 c9 c8 0d 32 c2 e6 Data Ascii: 9( %)$XY&nlq*l.aAHDik<oGy1tBXldU=c5'qXk{eddxXzF@}GUlW,!0:QcvS7ZPljb2?VW8[y<28]JnU]!u`D.12
2024-12-12 18:57:38 UTC	16320	IN	Data Raw: cc 5e bb da 95 fd 72 cb 0d 29 c6 59 65 ca 5f f5 1b c6 e7 ba cb 0d 45 91 0d 5e 2a 70 a3 68 3e 57 07 c6 b6 6d ec 4a 4d 74 37 6c 4f be 30 64 d9 cc 9c 7c 87 26 c8 3d 85 24 45 98 f2 9f 01 40 24 fa f5 5f f6 d5 94 ca 58 e4 11 ab aa cb 08 f0 c9 0a 89 99 52 5a 25 09 7d b5 b4 a0 3a 28 11 7d 7f 11 5b b5 af e7 05 3c 76 37 7c 2b a0 c9 86 ea bf 30 6c 93 f8 0a af 63 f7 3d 05 3f a0 42 06 25 6f 65 e6 cb 8a 52 87 a2 cd 52 c6 e1 d5 2e 21 3b 87 c2 b6 c5 f0 65 4b f2 0d 38 d2 5a 96 e4 c4 ab 6b a5 bb 58 9d 34 a6 cf 05 2a 38 b3 b1 06 6f 31 c5 e2 63 25 dc 83 bb 96 be 8d b6 92 b5 93 f2 02 91 8f 3d 94 8a ee 57 30 ff 00 27 68 9c 4a 9f 7a de a4 c5 4b 47 4f 8a 96 6c 2b 0e d5 6e 4b 83 9f b1 da df 05 7d 62 7c 52 7e f1 97 59 b1 b1 2b 49 02 ff 00 3a e4 ca 32 89 cf 95 52 5e 50 c6 4e 5c 71 Data Ascii: ^r)Ye_E^ph>WmJMt7lO0d\|&=$E@$_XRZ%}:(}[<v7\|+0lc=?B%oeRR.!;eK8ZkX48o1c%=W0'hJzKGOl+nK}b\|R~Y+I:2R^PN\q
2024-12-12 18:57:38 UTC	16384	IN	Data Raw: 31 02 62 ff 00 f8 66 55 d5 09 2c 2d 3d 42 7b 43 a0 fc 6e 2b 3c e8 48 ea a9 26 66 b9 b8 b1 70 a2 4a b0 f9 44 64 d3 11 c5 86 16 c0 73 b6 e2 1b 00 97 06 d0 76 27 5d 37 56 76 96 43 9c 10 38 cf 14 f7 1b 99 3a fe 53 89 c4 71 4c 26 ee bb 90 29 0c a1 c5 78 ec 4a c7 ea 5f a0 29 eb e1 4f d5 7c 17 d7 07 2e 4d 5a 5c 1f ea 11 1c 7d 8c 26 63 1c 64 b4 94 a4 b6 ca 1c b9 6f c1 3b 88 3a 7c ab 3d d5 b9 79 f0 5d 14 df 83 de da cd cd f0 7c eb fc 83 9e 61 e5 46 c8 20 98 f0 09 d8 b4 a8 1f ad c5 2d 26 da 0d 2a 46 6e be 10 93 83 5e 4b 27 ba 39 8c 9e 6f 2a cf ee 6d 34 dc 14 25 0b 8c de e0 f2 56 d3 80 28 b8 35 29 1f 3a c9 6d f2 ed c8 0a cb 9e e1 a2 1e 02 57 05 80 84 4e c4 c9 de e3 c1 69 0b 03 a1 23 51 6d a4 81 4d fd b9 38 e1 00 a2 e2 98 63 33 c8 23 a6 7b a8 69 b0 fb 60 b4 dd 80 1a Data Ascii: 1bfU,-=B{Cn+<H&fpJDdsv']7VvC8:SqL&)xJ_)O\|.MZ\}&cdo;:\|=y]\|aF -&Fn^K'9om4%V(5):mWNi#QmM8c3#{i`
2024-12-12 18:57:38 UTC	16384	IN	Data Raw: 75 1b 84 80 a5 1b 9b de 91 dd 62 96 4d f5 ca 87 5b 86 0a 7f 16 6a 6f 06 f7 0a 5f 1b 8f 0d c6 f1 39 a2 94 b6 ec b4 12 a4 b8 d8 2b 4f 65 42 c9 48 51 ba 75 17 29 15 b7 6e ce f5 67 e4 f3 f4 d5 f5 da fa f8 36 4c 62 da 44 40 fb ca b2 5b 06 ff 00 0b 57 32 be 4e 8b 78 32 ff 00 7c 33 0e 64 38 e5 dd f4 b4 f4 86 be d4 12 ad ca 40 dd a8 03 4f 0b fa ab b1 a2 d4 64 73 77 f2 e0 da f8 2c 5e d0 73 3e 1b 37 db b5 37 96 7e 37 1c 4f 1a 42 1a 94 d2 94 86 d8 91 21 db ed 92 96 c1 2a 2b 3a 05 aa d7 bf 4a 6d ed 79 b9 71 e0 4d 0d 88 38 73 e4 99 94 e4 dc 62 7b df b7 c0 93 13 30 c6 39 0b 97 25 e2 bf bb 8c dc de f7 e9 30 94 2d 24 5d c4 fa 8a d0 af 0a c5 2a 9c 63 c9 a6 b6 a7 3c af 80 07 29 e3 f2 f9 4e 01 9c 3e 3e 44 4f b8 c9 b6 17 1d a5 a9 05 e5 f6 56 7b 84 36 bb 28 ac f5 ba 4a 88 1a Data Ascii: ubM[jo_9+OeBHQu)ng6LbD@[W2Nx2\|3d8@Odsw,^s>77~7OB!+:JmyqM8sb{09%0-$]c<)N>>DOV{6(J
2024-12-12 18:57:38 UTC	16384	IN	Data Raw: 28 cf f2 92 9a ee b5 8c 9a b0 ec 67 77 16 1f 6d 6e 00 b4 b6 7a 96 81 da 6c 46 80 ff 00 0a 79 41 b6 5d 4d ea 31 e5 11 63 3a b4 a1 d7 b0 13 91 3d 6e 58 7d f3 c0 37 7d c0 a9 6c 00 81 76 fc ae 80 05 5a a2 a3 e4 92 b2 56 fe a0 4d d0 a4 35 35 ec 82 45 e1 10 d4 56 16 7b a0 a8 aa c5 24 f4 28 48 d4 9b 8a cf 65 8b e0 d5 4d 12 5e 4a 86 4c cb 76 21 53 69 2d b7 19 2e a5 80 85 a9 67 6b ab ba 8f a8 e9 f0 03 4a cf f6 72 76 23 a5 f8 e5 9a 47 b0 18 d8 f9 06 32 d9 87 58 43 4c f6 d3 8f 61 4d 20 36 76 ad 05 4e 6f 3a ee 5e a2 e6 b6 27 f8 9c 2b 62 e3 3c 17 38 f0 4f 19 82 de 31 d9 9f 79 36 4a e2 35 22 77 6c 27 70 4d 9a 65 86 d8 6f d2 46 d1 61 f2 51 34 8c b5 02 3d da e6 38 ce 21 c5 dc c2 bf 12 06 7e 47 21 07 7c 55 af 6a 5a 63 76 e5 3c 10 df d0 77 8d 96 f0 55 cd 25 54 49 e5 a3 57 Data Ascii: (gwmnzlFyA]M1c:=nX}7}lvZVM55EV{$(HeM^JLv!Si-.gkJrv#G2XCLaM 6vNo:^'+b<8O1y6J5"wl'pMeoFaQ4=8!~G!\|UjZcv<wU%TIW
2024-12-12 18:57:38 UTC	16320	IN	Data Raw: a7 2f 82 b6 85 25 e0 aa f4 9a 52 9f c9 44 c4 48 4b 6b 41 bf 88 af 47 40 91 66 7d c8 63 16 65 a9 68 1a 13 5d 18 9d 1a 65 c1 1a 3f a8 0a 25 ac 29 15 0d b6 9b b9 4c 8a 64 88 d2 6c eb d6 4f 4a b6 05 6c 9b 19 a4 25 22 e3 5a b7 22 b2 4e cb 8d 28 0a 36 e1 d8 29 1a 2b b2 58 34 c8 3f f8 ca f4 db 1e 0f 0b 5f 93 32 f7 27 98 72 38 5c 95 cc 6e 29 6b 81 1a 38 0d ee ed 8d cf 2c a7 71 52 54 47 d2 2f 6d 2a fd 5f d4 a2 f5 99 03 73 5c 7f dc 38 78 78 bc 8b 3e 24 b9 8d 9c 9b b6 ff 00 73 72 40 3d 37 84 1f 45 fc 2f 5a a3 c9 98 23 c6 88 56 11 37 37 d8 b5 0d 75 f8 d3 60 85 83 0d fe 3e e0 7a 74 a3 10 48 9b 1f 97 a2 1c b3 8e 93 fa 4a 06 c8 53 a6 c1 43 e0 4d 6d a2 d5 17 c9 c5 de a1 cf c0 5b 21 9c 69 50 d0 db 49 01 45 61 4e 0b 83 a7 c2 86 d4 e3 2e 51 82 ad 09 21 d1 c9 30 d8 a6 dd 91 Data Ascii: /%RDHKkAG@f}ceh]e?%)LdlOJl%"Z"N(6)+X4?_2'r8\n)k8,qRTG/m*_s\8xx>$sr@=7E/Z#V77u`>ztHJSCMm[!iPIEaN.Q!0
2024-12-12 18:57:38 UTC	16384	IN	Data Raw: 35 15 a9 fe 00 e2 2c f2 34 9f a5 54 cb 58 18 12 33 b2 56 2c 85 69 4e b5 c7 51 44 67 e5 bc f1 bb 8b ad 10 a3 00 eb fc 03 e4 e4 63 47 b9 51 04 8a d7 5d 63 aa ff 00 92 a3 c8 39 a1 6f 73 6c aa de 1a 1a dd 0a 59 9a eb e3 04 52 f2 19 99 53 d4 4a 94 48 f8 d6 98 d7 83 91 76 d6 48 05 6a 59 f5 55 a9 18 9c b2 3a cb 5b cd a8 8a 14 89 04 1b 13 6a 50 84 90 63 30 9f 55 af 40 03 4f 64 90 34 45 a9 5b 19 22 37 dd 77 55 6b e9 e5 49 90 a2 63 4b 04 01 4a c7 c9 f5 4b aa d4 81 f1 ae 9a 5c 1c 25 e4 17 9f 75 71 b0 8e ca 70 ff 00 e1 ec b5 1f 80 50 ff 00 45 67 a1 7f c8 59 3f 03 0f 30 ca 9c b1 17 bd 88 b6 9a 1d 6b bf 19 60 e6 c9 26 22 44 58 c9 8a b5 6d 21 49 d6 9a 52 2b 51 c0 25 d4 b7 dd b8 f8 5a b2 b2 c2 c2 c6 45 b8 89 64 af fc 27 93 65 79 dc 78 d5 91 20 69 0e 85 a0 29 b5 6e 49 17 Data Ascii: 5,4TX3V,iNQDgcGQ]c9oslYRSJHvHjYU:[jPc0U@Od4E["7wUkIcKJK\%uqpPEgY?0k`&"DXm!IR+Q%ZEd'eyx i)nI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49847	3.86.129.105	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:37 UTC	1248	OUT	GET /user/login/ HTTP/1.1 Host: ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/html, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; pbjs-unifiedid=%7B%22TDID%22%3A%22463397e6-b0c8-4b21-89c4-302650a8da7e%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-12-12T18%3A57%3A35%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:37 UTC	403	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 7451 Connection: close Server: Apache/2.2.34 (Amazon) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: *.ebaumsworld.com X-UA-Compatible: IE=Edge
2024-12-12 18:57:37 UTC	7451	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 53 69 67 6e 75 70 46 6f 72 6d 20 22 20 69 64 3d 22 6c 6f 67 69 6e 46 6f 72 6d 57 72 61 70 70 65 72 22 3e 0a 09 3c 64 69 76 20 69 64 3d 22 6c 6f 67 69 6e 46 6f 72 6d 22 3e 0a 09 3c 68 31 3e 53 49 47 4e 20 49 4e 3c 2f 68 31 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 46 6f 72 6d 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 22 3e 0a 09 09 3c 75 6c 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 53 69 67 6e 49 6e 22 3e 0a 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 4c 6f 67 69 6e 42 74 6e 20 73 69 67 6e 69 6e 46 61 63 65 62 6f 6f 6b 22 20 6f 6e 63 6c 69 63 6b 3d 22 45 62 61 75 6d 46 61 63 65 62 6f 6f 6b 2e 6c 6f 67 69 6e 28 29 3b 22 3e 0a 09 09 09 09 53 69 67 6e 20 69 Data Ascii: <div class="loginSignupForm " id="loginFormWrapper"><div id="loginForm"><h1>SIGN IN</h1><div class="loginForm modalContentWrapper"><ul class="socialSignIn"><li class="socialLoginBtn signinFacebook" onclick="EbaumFacebook.login();">Sign i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49848	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:37 UTC	1085	OUT	GET /img/desktop/loaderGlobe50YellowWhite.gif HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:38 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: ghigmTgPgqj6j4nemwEiMcSM8prZxQ1VYEPWi+0JMCpv0wTG0HAqnJNvkuv2WVGcRbqga1j+bts= x-amz-request-id: 7HP1NC9DEMBHVVZ3 Content-Type: image/gif Server: AmazonS3 X-LLID: 965abc9afb8160d75b2895423dcbd6ce Age: 12178910 Date: Thu, 12 Dec 2024 18:57:38 GMT Last-Modified: Wed, 02 Aug 2023 20:44:33 GMT Content-Length: 63823 Connection: close
2024-12-12 18:57:38 UTC	16014	IN	Data Raw: 47 49 46 38 39 61 32 00 32 00 f7 ff 00 fe f4 bd ff fc f0 fd c9 00 fe ea 89 fe e1 55 fe e9 81 ff fd f2 fe e2 59 fd dd 3d fe eb 8d fd d4 06 fe de 41 fe de 44 fd d9 29 fd d7 1a fd d8 1d fe e1 51 fe df 49 fe e6 6d fe f0 a5 fe e4 66 fd da 2d ff fd f4 fe e6 71 fe e3 5d fd dc 39 fd d9 25 fe ee 9e ff fa e4 fe e0 4d fe e5 69 fd d2 04 fe e7 75 fd d8 21 ff f6 ce ff fc ee fe f0 aa ff f9 dc fd db 31 ff f4 c2 fe f1 ac ff fa e6 ff f8 da fd dc 35 fe f2 b6 fe f3 bb ff f7 d1 ff fa e2 fe ed 96 ff f6 cc ff f8 d7 ff f5 c4 fe f4 c0 fe f1 af fe f3 b9 ff fa e8 fe e8 79 ff f8 d6 fe f0 a8 ff f6 ca ff fe f7 fe ec 94 fe ed 99 ff fc ec fe f1 b0 fe f2 b4 fe f3 ba fe ee 9b ff f5 c6 fd d7 23 ff f7 d2 fd d4 0a fe ed 9a ff f9 de fe e4 62 ff f7 d4 ff f8 d4 ff fc ea ff fb ea fd d2 09 ff fd Data Ascii: GIF89a22UY=AD)QImf-q]9%Miu!15y#b
2024-12-12 18:57:38 UTC	16384	IN	Data Raw: 31 78 60 09 06 2f 2c 6c 68 60 a2 83 89 71 c2 7a 96 ff 60 e5 e4 4c 30 1f 27 1a 07 08 e2 a4 fa 41 28 0a 80 29 88 5b 72 16 2d 5a 74 64 a8 70 ed 91 95 0b 5d a2 18 c0 df 80 04 16 68 20 42 ac 04 11 45 62 56 54 e0 40 18 0b 38 90 01 01 79 f4 50 84 00 18 9c 51 e1 34 3c 14 28 8b 05 c2 0c 71 57 29 0a 74 f1 00 31 ba 84 81 40 33 c3 24 03 c6 01 b1 c4 82 8c 0f 3e e8 d0 02 01 22 b8 d7 d8 2e 87 e4 42 9f 5c 27 d1 72 c4 39 b2 e0 11 0c 72 02 f1 32 43 0f be 94 c0 c5 03 50 40 c6 0b 2b 34 44 70 cb 30 b7 b0 50 0c 0a ac 8c e0 01 07 0a c9 c2 02 0c 41 88 91 cb 10 1f fd 72 0e 0b 3d 04 f0 0f 2b 3c 38 f1 8b 30 06 b0 00 c2 03 b9 ac 93 9e 2c 6c fd 83 4b 31 16 58 65 c3 10 41 50 b0 90 2c cf 08 d4 0b 10 3d 30 e3 8b 2f c6 f8 30 c4 09 7d 12 64 80 2d b6 cc 37 0b 31 b5 00 73 08 2b 32 a4 00 c5 Data Ascii: 1x`/,lh`qz`L0'A()[r-Ztdp]h BEbVT@8yPQ4<(qW)t1@3$>".B\'r9r2CP@+4Dp0PAr=+<80,lK1XeAP,=0/0}d-71s+2
2024-12-12 18:57:38 UTC	16384	IN	Data Raw: f8 85 4c 90 07 15 2c 20 d4 d2 95 0b 0c 0b bf 31 6c e9 fa 50 a3 44 2c 16 2c 74 18 43 ea 6b 43 34 16 40 ae b4 9e c1 d7 20 ab 2f 04 6a 13 14 81 c3 81 01 61 23 7a 8d 18 82 c4 e5 4b b5 01 cc c6 80 81 74 a5 8f 17 1f 69 28 cb 55 6b 1c 01 0a 04 65 15 e3 a5 fb a0 01 12 62 4a 08 ff 2e 88 ab 98 40 56 22 20 24 91 35 be bd fb f7 f0 fd b2 3a b1 e0 d6 ad 63 0a 14 d4 ea e2 65 81 04 03 53 08 d2 81 19 c3 d0 52 57 10 06 8c c7 0a 04 c0 28 30 4b 29 b6 d0 f2 40 0f 34 28 41 81 0d c1 6c b0 81 18 53 d0 c0 4a 4f ac f4 b2 41 29 b9 dc 42 44 77 07 b1 90 8b 2d c4 0c 50 80 04 26 40 60 03 09 c1 34 d7 5c 6b 1b 38 81 10 57 e1 68 80 a2 40 4e 1c a2 05 77 39 4c 11 8c 71 cd c1 30 83 7c 25 e8 10 4b 0d 46 28 84 c2 87 f2 4c d0 d1 08 24 20 83 54 30 30 24 61 96 0a 1b 30 63 63 0f 32 28 34 42 36 17 Data Ascii: L, 1lPD,,tCkC4@ /ja#zKti(UkebJ.@V" $5:ceSRW(0K)@4(AlSJOA)BDw-P&@`4\k8Wh@Nw9Lq0\|%KF(L$ T00$a0cc2(4B6
2024-12-12 18:57:38 UTC	15041	IN	Data Raw: 06 15 48 60 43 30 e2 fa 30 46 12 b6 98 c1 b7 40 b2 78 a0 81 00 45 64 85 4b 10 ee 36 06 40 17 2b cd d2 4c 2e 4a 38 52 67 0f 46 64 e5 84 04 d4 0d 04 85 0f 31 b0 b2 57 0a 17 ec 32 82 01 04 35 a4 d0 39 55 dc a2 c0 2d 38 8c 40 6e 9d 1b a0 70 b2 41 e7 b0 1b 00 0f 0f 08 30 ca 38 d2 92 61 c2 20 5c 54 bb d0 22 60 24 73 4b 2c 02 e1 72 45 0f c6 f8 d2 c3 1f 4e ff b3 81 03 18 d9 c1 2f 88 e0 02 e8 59 c0 05 29 30 40 ff 04 c2 0a 1c e8 c2 16 af 80 42 09 44 f0 0f 56 e4 e0 52 3d 28 01 43 70 61 01 03 28 90 07 09 38 42 19 0e 70 aa 8f c0 40 00 62 e8 05 1a 2e a0 9b bd b0 22 08 f2 80 de 42 64 71 8e 0a e8 62 18 ca d0 45 1d 3e a4 95 12 84 a1 82 01 90 1e 03 22 b1 80 88 fe c9 a2 00 86 d9 1a 30 d0 d4 2c 82 10 e6 01 40 e0 05 e6 56 d7 c4 2a 5a f1 8a 58 fc 48 40 00 00 21 f9 04 09 03 00 Data Ascii: H`C00F@xEdK6@+L.J8RgFd1W259U-8@npA08a \T"`$sK,rEN/Y)0@BDVR=(Cpa(8Bp@b."BdqbE>"0,@V*ZXH@!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49849	207.65.33.74	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:38 UTC	353	OUT	GET /wl?pubid=156500 HTTP/1.1 Host: t.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:38 UTC	250	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Date: Thu, 12 Dec 2024 18:57:38 GMT Content-Length: 17 Content-Type: text/plain; charset=utf-8 Connection: close
2024-12-12 18:57:38 UTC	17	IN	Data Raw: 52 65 71 75 65 73 74 20 52 65 63 65 69 76 65 64 21 Data Ascii: Request Received!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49855	162.19.138.116	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:38 UTC	681	OUT	POST /g/v2/429.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 574 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ebaumsworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=bd7138c8-df01-7346-84c9-ca1f86d2a58d#1734029855191#1
2024-12-12 18:57:38 UTC	574	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 22 3a 34 32 39 2c 22 67 64 70 72 22 3a 30 2c 22 6e 62 50 61 67 65 22 3a 31 2c 22 6f 22 3a 22 70 62 6a 73 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 63 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 2f 22 2c 22 74 6f 70 22 3a 31 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 2f 22 2c 22 76 22 3a 22 38 2e 35 30 2e 30 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 65 78 70 69 72 65 73 22 3a 39 30 2c 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 32 38 38 30 Data Ascii: {"partner":429,"gdpr":0,"nbPage":1,"o":"pbjs","tml":"https://ebaumsworld.com/","ref":null,"cu":"https://www.ebaumsworld.com/","top":1,"u":"https://ebaumsworld.com/","v":"8.50.0","storage":{"type":"html5","expires":90,"name":"id5id","refreshInSeconds":2880
2024-12-12 18:57:39 UTC	557	IN	HTTP/1.1 200 OK date: Thu, 12 Dec 2024 18:57:39 GMT p3p: CP="CAO PSA OUR" set-cookie: id5=bd7138c8-df01-7346-84c9-ca1f86d2a58d#1734029855191#2; Path=/; Domain=id5-sync.com; Expires=Wed, 12 Mar 2025 18:57:39 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://ebaumsworld.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-12-12 18:57:39 UTC	645	IN	Data Raw: 32 37 39 0d 0a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 6b 49 66 68 57 65 2d 56 45 4c 77 71 6e 48 76 49 69 54 67 4e 31 73 4c 7a 48 51 41 53 42 6e 4f 63 77 34 42 68 4a 52 38 2d 31 4a 4a 4b 6f 37 77 51 61 5f 6c 4d 45 6c 64 6f 71 32 35 34 62 79 2d 6b 71 50 53 34 45 41 72 68 2d 79 36 2d 5f 44 50 53 6b 30 65 38 70 47 49 45 54 2d 4b 4e 54 55 54 61 43 75 57 4d 51 75 6f 31 4f 66 56 2d 38 32 37 39 77 33 65 34 47 77 48 43 4d 75 6f 35 53 54 56 6b 30 67 7a 51 41 67 61 33 34 2d 42 6a 73 51 77 30 4c 66 72 74 6d 7a 4e 44 38 47 50 56 31 34 33 33 4e 6a 6b 77 34 4f 5a 41 67 63 41 37 4b 61 43 30 73 51 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 31 32 2d 31 32 54 31 38 3a 35 37 3a 33 35 2e 31 39 31 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e Data Ascii: 279{"signature":"ID5_AkIfhWe-VELwqnHvIiTgN1sLzHQASBnOcw4BhJR8-1JJKo7wQa_lMEldoq254by-kqPS4EArh-y6-_DPSk0e8pGIET-KNTUTaCuWMQuo1OfV-8279w3e4GwHCMuo5STVk0gzQAga34-BjsQw0LfrtmzND8GPV1433Njkw4OZAgcA7KaC0sQ","created_at":"2024-12-12T18:57:35.191Z","id5_consen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49858	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:38 UTC	1074	OUT	GET /img/desktop/checkboxInner.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:39 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: tb0lIx8DD1UkoC7+K+DNRii8MqzLafQeYEOeKyTIW0UXbYLe9OiKM0/tN4RfSWP3C3OaYc077kk= x-amz-request-id: B3ZJ1KY5PQ9DB6Q6 Content-Type: image/png Server: AmazonS3 X-LLID: 1fc075d4371847654eaf0f68a1621fc2 Age: 12178910 Date: Thu, 12 Dec 2024 18:57:39 GMT Last-Modified: Wed, 02 Aug 2023 20:44:08 GMT Content-Length: 1079 Connection: close
2024-12-12 18:57:39 UTC	1079	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 35 37 37 32 2c 20 32 30 31 34 2f 30 31 2f 31 33 2d 31 39 3a 34 34 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49856	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:38 UTC	1078	OUT	GET /img/desktop/socialSignInIcons.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:39 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: 4fbZbLe/OVLSDJY/iON0CXUAMxR6dlxuByl8B1Hg8z1fwbav2Oqx0vHRYvAukFPfBUk9ouVkwoI= x-amz-request-id: B3ZM6M4G68HYJFS3 Content-Type: image/png Server: AmazonS3 X-LLID: e7ad0d495da9431021e9c2fff58a6903 Age: 12178910 Date: Thu, 12 Dec 2024 18:57:39 GMT Last-Modified: Wed, 02 Aug 2023 20:44:49 GMT Content-Length: 4428 Connection: close
2024-12-12 18:57:39 UTC	4428	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 7e 08 06 00 00 00 3e da d1 bf 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 35 37 37 32 2c 20 32 30 31 34 2f 30 31 2f 31 33 2d 31 39 3a 34 34 3a 30 30 20 20 Data Ascii: PNGIHDR~>tEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49860	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:38 UTC	1098	OUT	GET /thumbs/2024/12/09/055424/87645255/beforewar-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:39 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: 6AlF3CDLM3OfunU5SWaVM76rZHn3Y8oqmalPtDZ79FiEa1lkV8FhOyGUsNrn2h02bBh1FX2tbvY= x-amz-request-id: 0WT1D8BYEZ72GSR9 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 843d571bb8ceb674e553c309c8eb7de2 Age: 244995 Date: Thu, 12 Dec 2024 18:57:39 GMT Last-Modified: Mon, 09 Dec 2024 22:54:25 GMT Content-Length: 50313 Connection: close
2024-12-12 18:57:39 UTC	6840	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 0a 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RD
2024-12-12 18:57:39 UTC	16384	IN	Data Raw: 8a d1 c0 c8 f8 a4 a3 34 e8 fa f5 2d e7 71 54 9a ab 6d 7b d7 5f a9 9f 29 b4 94 e2 92 63 61 76 4a 2e 2f db 2d 7e d3 3f d5 3a b5 75 26 81 5d 32 68 33 48 9c 23 50 82 9c 85 a0 d6 26 03 ab 4d 80 d8 d1 00 80 11 34 50 d6 2a 07 61 00 28 0a 0f 05 48 1b c4 54 0d 40 d8 0d d3 a8 62 86 b6 3a 0c 22 c5 b1 ed 7a 46 41 12 d3 46 45 5f fc b8 bf f9 72 fe db fe 68 9b 39 f0 b8 ee 27 09 24 b8 f5 fb 4c 7f cb ba 65 cb fb 6f f9 a2 6c e7 4e 51 b8 a9 1a ae 3f ea 2f 84 f5 46 e3 bf 08 d7 d2 c7 e3 72 70 4e 5b 8c bb 91 a6 b1 68 9e c5 78 a3 9b a2 52 4b 4b a8 c2 4b 7b 00 f1 04 41 00 42 10 08 01 10 50 10 82 10 3a 1c 96 65 c4 ae ca a9 ea ce b6 7a 45 fd 0e 46 f3 e5 27 f5 03 5b b0 c7 ee e5 2f 16 6c 19 bd 95 52 c7 da 69 80 02 21 00 84 21 00 84 20 80 04 10 00 04 db 41 15 00 6f 21 54 75 05 c4 00 Data Ascii: 4-qTm{_)cavJ./-~?:u&]2h3H#P&M4P*a(HT@b:"zFAFE_rh9'$LeolNQ?/FrpN[hxRKKK{ABP:ezEF'[/lRi!! Ao!Tu
2024-12-12 18:57:39 UTC	992	IN	Data Raw: a0 20 54 64 ee 28 81 21 1f c6 94 9c ba b1 8a ed 76 1f f2 28 aa b0 1b 2b 31 65 5c bb 54 83 6b c0 17 fb 94 63 a5 b5 56 63 64 e6 dd 92 f5 4a 9e 48 a3 36 76 6e 36 f4 0d 9c 29 dc 96 bb 75 03 bb 71 55 a6 c8 e3 9b 7a db aa 2b 2d 99 5a ac 54 16 c5 67 6a 78 d7 15 db 5b a2 ce 16 5c 2f a5 e3 d5 17 9d a5 26 45 4f 81 dc 6d 64 aa 4b d3 3e b1 66 91 9f 0e df 6d ea d6 a5 c8 d2 09 44 8d 24 10 2a 12 a1 19 5d f3 19 5f c7 6d ad 63 a9 aa 45 92 a2 ed c9 4d d1 34 07 9e 52 09 68 76 1f 97 1d 71 12 5b 26 ce 5e fd b8 db 93 8c 68 f5 d1 a3 b0 ed 18 eb 1f 1e 30 ea f5 65 fe 24 68 01 88 46 55 1a d5 38 bd ca f0 52 84 fd 4e b5 24 c8 94 a3 47 1d 05 5e 69 48 28 de 75 49 12 72 8c 15 64 d2 fa 95 65 3e 73 48 a3 dc e1 f2 cd 47 a2 2a 27 ee 1d d7 1f 1a 15 8c 94 a5 e0 8e 73 2d 4b 3a 0e ec bd cb 55 Data Ascii: Td(!v(+1e\TkcVcdJH6vn6)uqUz+-ZTgjx[\/&EOmdK>fmD$]_mcEM4Rhvq[&^h0e$hFU8RN$G^iH(uIrde>sHG's-K:U
2024-12-12 18:57:39 UTC	13032	IN	Data Raw: 4a 85 5b af 73 9b a2 07 b8 c9 e8 87 c2 2e 6e 91 2d c7 02 be f7 50 39 eb d9 12 8e 95 0e 3f 6f bf 94 eb 14 d2 fe 26 74 d0 c2 b3 0a 52 2a be 34 2c 25 4d 80 c6 b3 d9 55 af 54 e4 e5 22 75 61 46 aa 85 fb 97 14 56 a5 4b 93 ae c0 64 5f 85 24 d1 55 af 12 e6 5e 92 a9 52 ec 6a b4 2a 02 ce b3 6f d1 73 43 3f 26 e6 35 c7 58 36 8b 72 8a 6b d4 aa 52 94 31 eb aa a3 2a 1f 63 2a da 5c 23 16 df 89 7b 1a dc 65 34 ca f6 38 f1 a4 15 11 77 1d 50 51 b1 09 12 c6 e5 0a 96 e5 42 64 cc b4 b7 5e 45 69 e9 52 4b 72 19 79 50 0a f3 9a 4b 6a 99 79 8d cf d3 ac 57 81 a3 76 7c 57 a3 73 12 77 9f 36 ee a7 2f a1 51 6a 0e 31 5c 7a 19 39 b8 df 1c b9 c7 da cb bf 89 b2 f7 8c 90 25 7a c4 d7 17 5a 79 a2 a3 2a 0b a8 c9 7a 9a 5e 64 d7 a0 a1 e9 8b d0 93 03 1f e4 bf 1e a9 6a 69 1a 59 38 f7 1c 15 24 de 9b Data Ascii: J[s.n-P9?o&tR4,%MUT"uaFVKd_$U^RjosC?&5X6rkR1c\#{e48wPQBd^EiRKryPKjyWv\|Wsw6/Qj1\z9%zZy*z^djiY8$
2024-12-12 18:57:40 UTC	13065	IN	Data Raw: 47 a4 06 46 e4 a0 a9 06 d5 77 2b 25 19 51 1b 3f 97 2e 71 b9 3a ec cc 54 5f ed d7 15 be 4f c4 51 d4 ce 6e ec d2 5b 17 20 a8 a8 65 f6 f9 f3 55 35 56 c6 1d 05 95 ef ae 51 68 9d b2 39 20 33 a3 f1 de 83 c7 bb b3 f1 e8 73 7d c2 37 31 a5 f0 4b db d1 f8 9d 45 cc 78 ca 55 7b 95 f3 31 23 97 0f 8a 7a 35 ed 97 80 95 2b 8f 7b 1d 5f 6c 8d 71 a1 5f 03 98 bf 66 56 26 ed 4f dc 8e 87 b1 5d 52 b3 c5 f4 66 af 8c c5 8b c9 c1 f9 11 38 b9 2a 9a 17 ec f3 89 9d 6a 4d 3e 2c cb 4a 99 16 5a f5 2d d1 0c ef 3b 8f 9b dd 6e 68 de 85 0c 8b de 89 35 e2 54 5c 8c aa aa 0a 55 ea 45 6a 55 8a 24 82 01 f3 6e 84 04 d3 d8 85 30 1f 10 dd d6 14 ea 24 36 6f a0 19 f3 b5 26 f4 44 ab 0a 52 5a ba 16 20 b5 26 72 a1 45 17 8e ad 2a d5 86 cc 6a e8 89 32 6e a5 a3 2f 76 fc 17 28 bb 92 d1 74 08 6c 2d a8 a2 49 Data Ascii: GFw+%Q?.q:T_OQn[ eU5VQh9 3s}71KExU{1#z5+{_lq_fV&O]Rf8jM>,JZ-;nh5T\UEjU$n0$6o&DRZ &rEj2n/v(tl-I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49859	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:38 UTC	1093	OUT	GET /thumbs/2024/12/10/093625/87645337/Untitled-1.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:39 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: meuPz5S6wpTbJhWxeJyZ0jvdphP5icEMQJ0PmvF/9b/mcAozLHC9Mid9UyAVJbLlFAdxoxfmmz0= x-amz-request-id: 880EXY6ET4ZQSQCS Content-Type: image/jpeg Server: AmazonS3 X-LLID: 60ae946ee555f4262e58c73986a89112 Age: 188474 Date: Thu, 12 Dec 2024 18:57:39 GMT Last-Modified: Tue, 10 Dec 2024 14:36:26 GMT Content-Length: 106753 Connection: close
2024-12-12 18:57:39 UTC	14079	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: cf f8 57 40 c4 f7 08 5c 63 a2 cf 4d 17 fc bb 8f ac 15 9f e8 9f c9 bb 8f 9d f1 39 30 a3 25 1b d8 0e da 96 e9 d5 63 dd 6b f9 47 1a e5 bd f0 75 c5 db ad f1 ec 01 91 bb 57 0f 10 16 e7 4c f8 4f e3 fd fe 6c b3 d9 e3 44 21 d3 3d c1 a4 d2 ab 97 4f 4f 1c 2e fb a4 d9 72 59 4c 65 59 4f 70 03 f9 ae 5e 9d bf 9a 0d 8f 1a 16 ae 96 ea 76 0d ad 1a 15 8b d3 73 e6 a8 ce f2 2c 4c 36 5b 5f 4d 16 2d 74 9c 33 9d bc e4 9c 76 db 95 49 79 73 4f 6a ba d7 a2 e5 d5 6e 70 f4 6e 3f b8 5d b9 f6 59 2c 4f 88 38 8f 57 45 c9 a9 13 21 c7 f0 4e 4f 28 b8 b7 64 72 4c d3 50 e6 80 a5 aa d2 c1 c7 6c a1 8d 8d 8c 00 19 d0 2c 0e 6b dd 3e 69 91 c4 df c1 8f b4 8f 6c 52 1d ae 3e 1a e8 aa 38 87 77 2c e6 b6 b4 65 e3 64 04 ce 37 38 03 e6 ba 44 71 46 5a 19 de 64 76 b5 2b ac 16 16 38 d6 c5 27 b8 16 b4 c5 af Data Ascii: W@\cM90%ckGuWLOlD!=OO.rYLeYOp^vs,L6[_M-t3vIysOjnpn?]Y,O8WE!NO(drLPl,k>ilR>8w,ed78DqFZdv+8'
2024-12-12 18:57:40 UTC	15472	IN	Data Raw: ce 4b c4 64 92 6b 78 6a d9 06 ba 22 e2 fe cb ee 62 e3 1c e7 b0 5a 03 ae a6 89 86 2c ad fe e7 b1 57 92 01 91 c5 c7 23 7c 49 6a 62 27 4b f7 0b db 57 01 ef 61 23 71 ff 00 84 26 09 f8 7e fe 76 c6 f6 41 0c 98 b8 e2 8f c6 ad 0b 36 34 d7 41 ce 7b 1d 75 16 f9 63 b7 63 8f 50 40 5c eb 70 0c fd 8d cc ed 82 27 c0 d7 d7 d2 34 0b 8f 53 5a 95 b0 83 05 c4 9f 84 16 16 13 c4 c8 4f 40 d2 05 56 7c 2e b9 d7 7c 78 56 28 f1 08 9b 00 0e 9b 46 b1 e3 50 16 7c 2c ae 29 0f 60 b9 44 58 b6 e5 62 a4 b1 3d bb 97 4c 5f 4c 5d db 5f 8e b9 75 b5 c7 a6 46 1a 10 b7 23 36 96 c7 87 34 1e be 4b a4 62 8d f2 30 32 8e e8 b6 c2 33 2d 60 74 82 68 9d b5 ed 35 04 7c 15 4a eb 9c 27 bc 52 63 2c d9 8d bd 7e f8 c6 80 bb 54 46 ea d7 92 db e6 28 eb 72 1a 1d e3 d1 40 fd d5 dc 76 4c 2f 92 50 29 f1 54 67 32 1d Data Ascii: Kdkxj"bZ,W#\|Ijb'KWa#q&~vA64A{uccP@\p'4SZO@V\|.\|xV(FP\|,)`DXb=L_L]_uF#64Kb023-`th5\|J'Rc,~TF(r@vL/P)Tg2
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 35 24 34 4d 02 38 dc 1b 5a 2b a0 3a a7 aa dc 4a 8b 26 85 75 95 cf a2 4b a8 2a ba 73 58 a9 98 99 67 b7 ba 8e f2 d8 91 2c 64 1d 17 ab 87 97 e9 5e 9e ed af 76 63 ba b0 8e db 24 cd af 60 0d dc e5 3b e3 5e 3e fa 6f ff 00 77 e3 37 95 77 bb 1d 5d d6 b4 49 ea 3c 3f 4c 65 f9 1f 03 c3 64 4f d5 e3 ee 19 1d c0 d6 a0 85 df 8f a5 bf b8 f1 f5 f8 fd 22 d8 e1 32 cc b6 36 f2 4a 25 03 40 6b 55 e8 9d 47 9a ea a6 e3 f7 4c 24 c5 f2 42 64 8a be 1a ae 9b 2a f3 29 f8 b9 ce 38 81 ef db b9 a7 c7 42 a3 a7 e4 e0 e6 1c 72 47 56 42 63 1f 14 6b 28 4b c9 b8 ac 82 8d b8 01 4c 5c a2 39 3e 2a f6 d3 ea c6 a9 87 e5 2a da f3 8d 00 36 de 36 9f 34 f2 97 b3 39 0c 96 28 7f 83 38 93 e4 b5 38 62 fd 29 9b 7c ad 84 00 ca f3 d3 a2 be 23 33 e9 55 19 2c 86 53 2b 29 16 2d 70 8c 78 84 c8 df bf f2 91 6d c5 Data Ascii: 5$4M8Z+:J&uKsXg,d^vc$`;^>ow7w]I<?LedO"26J%@kUGL$Bd)8BrGVBck(KL\9>**6649(88b)\|#3U,S+)-pxm
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: b8 78 29 8a c5 72 8e f3 f2 8e 63 6e 6c 19 19 8d 92 9a 13 f0 29 83 79 c3 f2 b8 8e 17 c3 9d 3d fc e1 d7 05 a5 db 09 d6 aa 23 11 87 ee 66 53 95 72 09 63 60 2d b1 63 8e d1 e0 a8 db ed 01 10 87 31 05 4e 47 1f ba 66 4d 5d 1a 6a 50 5e 59 e4 6d e5 b7 11 34 ea d1 44 09 2e 15 34 54 1d 6a a0 08 3b 9f 6e 3f e8 cc 77 ca 5f f3 9e b1 47 2e 14 0e 3f 35 50 eb 40 3e 0b 35 56 16 ef 0d 8c 01 a2 cb 50 f8 90 ba a1 46 a1 06 d5 f2 1e aa 29 8c a6 3e 66 62 a7 96 37 1d cd 69 20 a8 3c dd c8 72 79 7b 8b db 88 65 bd 73 1a 1c 40 6d 55 56 76 6c 46 e8 9c e9 66 74 84 eb 52 55 91 9a ea dd af c2 c1 7b c6 ae 2d 63 20 48 5a 76 fe 4b 71 18 9b ac cf 28 e0 d9 39 99 73 6e e7 db 6f 25 af a7 85 56 a0 eb 1d b4 e7 72 72 dc 7c c6 1f 44 f1 0a ec 1d 74 55 8a b9 c4 f7 bf 13 85 c9 bf 1b 94 25 93 46 68 ed Data Ascii: x)rcnl)y=#fSrc`-c1NGfM]jP^Ym4D.4Tj;n?w_G.?5P@>5VPF)>fb7i <ry{es@mUVvlFftRU{-c HZvKq(9sno%Vrr\|DtU%Fh
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 30 b4 1a b8 ae 5d 4d aa 89 93 c7 f0 ee 4c 5b 7b 73 2c 72 36 03 b8 92 47 82 2a b3 93 f3 ce 0f 69 83 97 17 6f 72 c6 51 bb 00 69 1f 25 27 ec 72 7b 08 31 d6 11 cd 79 8f bb dc eb 82 49 a9 f3 5b 15 3c bb 3d 8e c3 e0 26 7b 27 ad e4 ed 35 00 eb aa 0e 35 82 25 f3 be ed c6 b2 b9 fb bf b5 6a ac 75 de 25 3c b7 26 22 ee 80 85 81 a6 cf 59 13 34 72 57 41 45 03 2c 68 d8 a0 30 52 a1 c6 a8 14 10 2a a8 0c 39 03 8d 72 07 41 40 ad ca 03 05 02 ab 44 0a 6a 29 d8 c7 ab 54 15 1c 96 28 9d 11 24 74 08 32 78 db 7b b7 df b5 d0 b8 ec 07 a2 0f 53 76 e7 77 fa 2f 1b bf f5 52 5a ff 00 fb 67 ac 51 c5 64 fd 47 e6 b2 a4 10 10 00 28 98 16 d4 06 28 81 6d 28 16 47 a6 a1 04 4b a9 f3 cd 88 b2 c6 e5 d1 8f 82 a2 b2 3c 87 3d 89 c4 7d 5b 9c d3 f1 40 fc 18 bb 9b c9 05 c6 4d de e4 a3 5d 50 5c c6 1b 1b Data Ascii: 0]ML[{s,r6GiorQi%'r{1yI[<=&{'55%ju%<&"Y4rWAE,h0R9rA@Dj)T($t2x{Svw/RZgQdG((m(GK<=}[@M]P\
2024-12-12 18:57:41 UTC	11666	IN	Data Raw: 99 7d 6e e3 40 e4 0f b2 e2 df c5 da aa 24 36 48 4f 47 04 0a de cf 35 01 12 d3 fc c8 14 dd a3 ab 94 12 23 73 69 d6 a8 17 bd 9e 24 20 7a 36 35 cd ad 74 40 9a b5 af 02 be 28 2a 01 59 51 d5 10 2a a8 15 40 2a 80 12 81 25 c8 08 94 09 54 0d 14 50 aa a0 aa a0 08 0e aa 02 28 0a b4 40 87 3b 45 60 8e f3 55 41 34 94 0a a9 40 08 45 26 88 83 a2 a0 52 aa 01 b4 2a 0c 34 20 56 c4 06 22 07 aa 05 7d 34 67 a8 aa 02 fa 18 1d a1 14 40 c4 b8 48 e4 3e 97 90 81 2e c3 9b 78 cb 84 84 d1 11 47 7a fb 82 f2 dd c6 88 b1 09 b6 33 4a ff 00 d4 75 41 a5 c3 71 b7 cc da 3c 8a 14 0e 5c e1 6f 2c 65 26 d8 f4 f2 40 2d 99 92 79 dd 3d 68 3c d0 4f 6d 68 81 2f 0e 3d 10 32 59 35 74 40 a6 be 56 f5 44 38 26 7f 92 00 fb 99 00 d0 6a 81 a1 7d 30 ea dd 15 0e 37 25 4e ad 28 16 32 71 9e a0 84 0e b7 2d 63 18 Data Ascii: }n@$6HOG5#si$ z65t@(YQ@%TP(@;E`UA4@E&R4 V"}4g@H>.xGz3JuAq<\o,e&@-y=h<Omh/=2Y5t@VD8&j}07%N(2q-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49861	157.240.196.15	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:38 UTC	531	OUT	GET /en_US/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:39 UTC	1826	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 19096dadf27736bb4e0f7ac6862d07ba ETag: "9fce535721db1f4cf142e75c82ec4bdd" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: GQltrfJ3NrtOD3rGhi0Hug== Expires: Thu, 12 Dec 2024 19:07:11 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2024-12-12 18:57:39 UTC	876	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-12-12 18:57:39 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-12-12 18:57:39 UTC	3092	IN	Data Raw: 2a 31 37 33 34 30 32 39 32 33 31 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 38 38 32 31 35 39 36 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1734029231,,JIT Construction: v1018821596,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49857	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:38 UTC	1088	OUT	GET /thumbs/2024/12/11/031836/87646374/shape.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:39 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: UcbZNfLbqzZ1Ms9d1/7K8gXUI3dd6dH4c9T2XClTaOIRGNr5tpHersaNgE/yPMC2eA/MiVAElt0= x-amz-request-id: 1EGJE3Z8PAH6V5ZV Content-Type: image/jpeg Server: AmazonS3 X-LLID: 86c9b3e518e38e91df5188a685645f75 Age: 81543 Date: Thu, 12 Dec 2024 18:57:39 GMT Last-Modified: Wed, 11 Dec 2024 20:18:37 GMT Content-Length: 174139 Connection: close
2024-12-12 18:57:39 UTC	14080	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:39 UTC	16384	IN	Data Raw: d5 f6 1a fe 4d 31 20 e2 e4 5b 23 2b 30 17 b7 43 5e 67 67 d6 f6 6b f8 75 7f cc d2 a7 78 f0 e2 5b 94 b3 7c ac 7f d9 5c bb 75 6d af cc 39 dd 2f c2 23 9d 0a 2f 40 6f d0 d6 78 5e 72 d2 5e 55 4a 59 7a af 5a 2e 01 66 57 22 84 ea f6 6f 2a 8a 72 04 3c 88 1a 16 b9 fe ea 8c 34 90 34 dc bc 6a 7a a9 1e 35 72 1f 88 39 f9 95 04 ed 16 66 fc 5e 14 fc 4b c4 04 bc eb 36 e1 b7 6a 1f 49 51 d6 fe 75 1e 16 d3 91 3e 38 e6 e7 ca c6 8a 1c 49 16 59 ac b1 29 07 51 7b de b6 d7 a6 96 db eb 0c 9d 0f 51 5f 38 f3 98 04 93 b4 8a 22 db 08 74 b8 a6 1e 0e 54 da d4 b0 04 46 01 a3 01 3a c7 44 20 b9 38 da 13 6a eb eb d9 d3 d3 40 c3 02 99 6c d5 ae fb 3a 77 3b c3 c2 86 c0 80 3a d7 0f 67 6e 1c 9b 6c 69 1c 11 74 f0 15 e7 ef ec 5c a3 ca a4 fd 3c 7e 54 f5 f6 aa e7 62 64 45 03 a5 69 ff 00 23 85 fe c6 Data Ascii: M1 [#+0C^ggkux[\|\um9/#/@ox^r^UJYzZ.fW"o*r<44jz5r9f^K6jIQu>8IY)Q{Q_8"tTF:D 8j@l:w;:gnlit\<~TbdEi#
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 39 c7 71 ef 65 cc e0 78 31 b0 3f 75 69 e2 48 5f 1e 39 4b 3c 91 81 21 fc 5b 9b fd b5 a7 82 32 9f d9 8e c1 59 4b 30 16 1a 9d 3e fa 7e 03 2d 61 c4 8d 1d 99 37 c7 27 89 53 61 47 81 27 08 54 5f 52 6d 72 c4 df 5a 78 c0 46 e0 36 a0 ee 36 bd fc 8d 30 d1 c5 d5 6f ae 94 48 68 e1 31 c7 28 92 c4 58 7a 89 e9 6a 46 e7 3f b8 58 12 45 cc 0e 47 e9 8b 2b d2 76 f5 dd f6 d7 d0 fd 7f 66 23 83 d9 d5 4e ca b8 17 00 d8 d7 ab 9e 1e 66 b3 95 73 91 50 92 68 2c 6f 7b d7 07 64 cd 7a 7d 7c c6 b8 d2 8b 6b d7 c2 a6 6f 94 ef 30 29 18 10 a4 dc dc fa 7c 0a b7 81 ad a4 9d 9c 52 d6 ad 48 17 b9 78 bb 03 ee f7 0f 18 b7 d3 ff 00 e6 20 1f da c0 d7 9b be df f1 f7 ff 00 d2 e9 c7 94 c1 4c 16 2c 5d 2e 4b e8 ea 7c 2d 5e df 4f 65 de 65 e6 77 4f 0e 05 47 a2 06 ea 4d 74 e3 0e 3d e5 a2 d4 d8 0b f5 3d 0d Data Ascii: 9qex1?uiH_9K<![2YK0>~-a7'SaG'T_RmrZxF660oHh1(XzjF?XEG+vf#NfsPh,o{dz}\|ko0)\|RHx L,].K\|-^OeewOGMt==
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: b6 12 73 a5 69 a0 8f 1c 17 6b 6a 58 9f a3 e1 6e 95 1b 6b c3 3b 0e 9d 94 40 b3 c2 0a 41 3e d1 2a dc dc b2 fd 46 e7 ca b9 e9 3a 37 6a 73 f1 f3 d8 0b c4 65 31 1c a4 31 14 8a 69 35 19 78 e3 5f 5f 94 8a 34 15 a6 bf 00 ff 00 83 c9 ca c0 9a 3c 23 91 b3 12 6d 71 e4 22 d7 23 f0 37 c4 54 6c 0d 62 44 33 c8 64 17 90 13 a5 7c 8f d8 fb b6 56 89 d0 40 0d b6 d8 9d 6d 5e 3f 5f b1 76 a1 99 a5 8a 28 b7 0b 5c 74 15 dd 2f 01 04 79 31 ca c3 4d 3c eb 1b 9b 41 94 78 e1 e0 26 f6 5b 1b 55 df 52 ed 32 1c 0b f7 79 54 bc 85 bf 09 b0 af a3 fa 6d 2e bc 15 71 c2 0f ba 45 fe 55 f6 5b eb 9d 42 eb fb 7b 0c f9 1c e7 1b 04 6d eb 9e 64 1e 27 42 6b 93 ba 6b 0e 3e ea e3 b1 d7 1b 0a 1c 70 6e 22 50 a4 f9 9b 6b 5d 5d 17 f8 9d 15 ba ba 49 ed d4 b2 11 4f 30 44 d7 ad 63 db d9 88 2a b1 cc 67 1f 73 d2 Data Ascii: sikjXnk;@A>F:7jse11i5x__4<#mq"#7TlbD3d\|V@m^?_v(\t/y1M<Ax&[UR2yTm.qEU[B{md'Bkk>pn"Pk]]IO0Dcgs
2024-12-12 18:57:40 UTC	16320	IN	Data Raw: 4c ae 52 ae 17 4e 4f 1c 0d 0a b0 ab f6 f5 f2 d5 2f a4 7b 4e 4b e3 a6 e3 a1 02 d5 f1 7e cf a7 9d 8a ae b8 31 15 96 36 8b ea 63 63 5b 7a 5e 9c d7 69 7f c4 45 ba 39 bd bc 62 d2 1f a4 5c 9a fb 3e 9e ec 68 6a 07 35 cf 3e 66 73 a2 fa 51 0e 87 e5 5e 3f d8 cf d8 9a ab 72 99 06 59 80 1a 8a e2 eb e8 92 26 88 c4 8d 1a 2d 46 be 55 d1 ae 61 32 38 f8 8b 16 b6 bf 65 56 fb 65 58 47 37 01 8f 30 05 af af c2 aa 6b 95 4d 1b 43 fb 7b c6 e4 36 f6 b8 3e 22 d5 73 ac 7e b7 b2 3b 0c e0 c6 65 c2 91 94 8f 3b 91 47 6f 47 05 e2 4c dc d6 56 1b 18 b2 11 98 2f 52 4d ab e7 7d df 47 37 29 bc 09 87 93 c4 cc 8c 15 70 4f 42 a4 d7 93 b7 45 d2 89 4c 97 b6 b0 66 48 dc a0 05 98 12 7a f4 af 57 d7 df 6c 35 95 d6 f8 b8 e3 8f 06 04 5b 6d 54 00 01 a0 d0 57 d8 fa 72 62 64 65 99 f1 70 24 62 ec 14 df ab Data Ascii: LRNO/{NK~16cc[z^iE9b\>hj5>fsQ^?rY&-FUa28eVeXG70kMC{6>"s~;e;GoGLV/RM}G7)pOBELfHzWl5[mTWrbdep$b
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: da a6 83 2a 5c 5c a8 32 a2 fa e0 70 7e 34 43 d2 70 ee 5c 66 5c 72 45 c7 f2 71 9f 4c ca 11 ed e3 7d 6b af ad 3b 45 92 46 04 10 06 e0 35 d6 ba 18 52 ec b9 2f 03 df a0 d4 81 d6 9a a4 57 32 9c fb c8 fe 7a 5c 79 7c 28 54 ae 4f dd 90 88 fb 8f 2c 01 65 66 b8 b5 3d 63 69 f0 5c ba 03 6f 3a df 52 ac bc a2 da 8a 8e cd 93 20 57 7b eb e1 7e 95 c7 df d8 de 6a ce 2a 17 90 f9 81 73 5c da 7f 2a 36 b8 4b 87 88 72 32 16 30 2d 73 a9 ae df 5f a3 c9 9f 67 66 22 e1 89 02 c1 1a c2 83 e9 eb e4 4d 7d 57 ab d1 35 8f 1b bb b2 ed 44 9d e0 df c7 ce bb 63 06 ba 2f 51 50 32 d4 a9 3f 11 45 8a 95 a3 29 00 f8 69 59 6d 16 12 62 4e e1 e4 2f 58 6f 1a 68 03 22 42 14 69 6b 75 1e 75 e7 f7 6d 87 56 90 11 6b c9 5c d9 cb 64 b1 29 2f a5 6f a6 9f 94 6d b1 8c 00 ab a7 cc 7f 6d 76 4d e4 8e 6b b6 52 7a Data Ascii: \\2p~4Cp\f\rEqL}k;EF5R/W2z\y\|(TO,ef=ci\o:R W{~js\*6Kr20-s_gf"M}W5Dc/QP2?E)iYmbN/Xoh"BikuumVk\d)/ommvMkRz
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: 27 d2 7e 37 a8 ac e9 2f 25 9d 2c 33 ab 13 a0 35 5a f5 4a bd 60 9c 6e ed 68 d4 46 1a b6 eb d6 6a d2 6a 3d 3b c6 48 80 2e 74 35 bf 9c aa ba b0 df b8 c8 83 eb 22 df 2a bd 6c 4c d5 0b fe e8 45 6b 6f d6 b4 cc 3f 14 47 f7 1a 36 d7 7e 87 e3 48 f0 d3 fe bb 57 e9 25 be da ce 9e 12 af 7c a8 16 32 eb f3 ad 02 05 ef 22 ce 6d 25 fe da 03 73 de 9b 46 b2 5b cf 5a 02 16 ef 4b b6 92 9f be 80 99 3b d9 54 6b 29 bf c4 d2 a0 06 67 7b 44 dd 24 bf db 50 03 0e eb 8e 4f f9 9d 7e 34 06 87 ba 63 5b fa ee 3e 74 04 7f f5 6a df 49 3f 8d 01 1c bd d6 1b 43 27 f1 a0 22 6e e9 42 7f cc 3f 7d 01 a3 f7 48 02 e2 43 f7 d0 1d bb fe d9 f9 76 e4 63 ee 2b b6 ef 68 e1 f8 df ea f7 ff 00 d9 5d 7e af e5 1b 1c e7 71 1c 47 29 de 27 8e f6 d7 d8 75 bc 81 7c 7e 62 a7 af 5e 59 e9 d9 fc 5c e7 f7 af b2 b8 ee Data Ascii: '~7/%,35ZJ`nhFjj=;H.t5"*lLEko?G6~HW%\|2"m%sF[ZK;Tk)g{D$PO~4c[>tjI?C'"nB?}HCvc+h]~qG)'u\|~b^Y\
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: 7e 99 c9 bb b4 60 02 5e f6 04 d8 0a ed 81 b9 70 2a 49 b0 34 e5 0c 1a 76 07 be 74 59 02 36 28 0f 41 59 ed 75 01 e7 68 cb a8 0a 3e 26 b1 da ea 03 64 98 95 49 da 1b e1 5c 7d 98 04 3c 8f b6 c2 c1 14 7c 85 8d 71 76 6b 28 56 33 a0 bd ec a6 d7 37 ae 4b eb e4 36 1d b7 22 e2 47 9a c1 ad 22 e8 2b 3b eb 00 32 71 ca 2f e9 b1 f2 ac ff 00 51 52 fc 84 78 ee 00 a2 cc 33 29 ca 95 f7 84 b0 d7 ce 94 06 19 7c 14 99 5d ba f9 0d 1a bc 5d 25 90 eb b0 79 da b5 d7 5c 85 67 8a e2 b1 23 4f cf 71 26 2c 40 b1 91 06 df 50 e9 4e c1 08 93 92 2b 39 66 8d 5a 1d cc 42 91 76 23 e1 50 b8 1f 27 8e f7 58 cb 8d 72 92 6a 63 f2 bd 0a 6f 91 c6 98 30 e3 6d de ab 6a 28 2c 95 28 94 93 63 71 41 e5 ba e4 4a 9a 1e b4 d7 1b ae 79 06 c4 5e 85 08 8f 21 5b af 8d 5c 0f 15 47 3e 55 ae a1 0c f8 ab 20 b5 ea 83 Data Ascii: ~`^p*I4vtY6(AYuh>&dI\}<\|qvk(V37K6"G"+;2q/QRx3)\|]]%y\g#Oq&,@PN+9fZBv#P'Xrjco0mj(,(cqAJy^![\G>U
2024-12-12 18:57:41 UTC	16320	IN	Data Raw: 14 8f f4 fd c7 1b b8 21 5d 2c 3e 26 9e b4 2b 7f bc dc 66 ee 1e 1e 4d 12 f2 f1 f2 09 b7 7c f4 fe fa f4 bd 1d b1 b3 5e ab cb e6 cf dc 6e 1f f4 dc a2 72 b1 5b f4 99 f6 2c c3 f9 c8 d4 57 d3 fa fb f0 eb 95 55 4b 83 62 35 ae fd 6a 28 a8 5a ba 7a d8 6d 06 c2 cd b8 5f a5 74 69 58 6c 35 08 bf 5e b5 d3 ad 61 b4 4a ad e6 7a ea 7e 75 59 4e 18 de 03 10 a6 e0 f9 d4 da 58 68 48 bf 5d 6f d2 a2 9c 8d b7 b1 fa 00 a8 aa c3 24 33 68 45 be 35 76 cc 23 2f 11 1a 8d 46 e3 51 99 f8 69 c3 3b cd 81 45 21 3c 6f 57 77 2d b5 6c 0d bc 3a d4 7e ec 23 c9 e5 2c 6e 07 4f 1a ac eb b1 f8 65 30 8f 73 1d 80 c8 57 a5 ba d6 1b ed e1 ce 5d 5d 1e 8f 67 65 e2 1c f0 9d ab ca 72 92 85 c7 89 98 0d 00 b5 93 6f 89 62 6b cd f6 7e e7 5d 3e 1f 43 e9 7d 1c b7 3b ad 11 f1 1c 07 6f 34 6b c8 3a e5 65 5c 6d c7 Data Ascii: !],>&+fM\|^nr[,WUKb5j(Zzm_tiXl5^aJz~uYNXhH]o$3hE5v#/FQi;E!<oWw-l:~#,nOe0sW]]gerobk~]>C};o4k:e\m
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: a4 63 e7 e3 4f 05 2b d1 71 fc ac ec 13 0e 0d 88 df f9 63 4b 7f c5 51 76 c2 fc 32 2d 7b 57 8f c5 53 37 2b 98 88 c7 56 89 4d dc 7c 3c aa 2f 67 f4 39 d7 84 c9 9f c1 63 1f 6f 8d c3 f7 25 b7 f9 f2 8d 6d e6 3c 2b 19 76 56 1a e5 77 27 0b 8d 09 87 33 21 9d e4 fa f1 21 f1 3f 12 2a e7 56 4a ec 57 2f 33 ce 64 b6 cc 0c 65 e2 b0 c7 d3 24 df 5e cf e6 b8 be bf 3a df 5f 5e 32 db 76 d8 18 5c 32 4e b3 67 b4 dc a4 c4 fa 66 70 6c 0f 92 81 a1 aa ec d7 13 86 39 5e e1 e1 78 67 e3 4e 44 10 80 1d 6c 37 81 e9 16 e8 6d a5 79 57 bb 79 b6 06 15 79 f2 bb 77 b7 31 24 cf cb 8e 37 e4 0b 91 04 1d 58 a9 1a 58 7c eb d3 ea bb 6d 39 54 eb 51 db 3f 33 37 2d f2 73 72 7f 4a b3 93 77 bf f9 60 f4 15 d1 d7 c3 5f 88 e8 9d af 9f 28 ed 4c cc 79 40 c9 38 aa d1 c6 e3 5f 76 32 3a 9a e8 f5 39 ac bb be 15 Data Ascii: cO+qcKQv2-{WS7+VM\|</g9co%m<+vVw'3!!?*VJW/3de$^:_^2v\2Ngfpl9^xgNDl7myWyyw1$7XX\|m9TQ?37-srJw`_(Ly@8_v2:9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49863	162.19.138.118	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:38 UTC	349	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:39 UTC	309	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Thu, 12 Dec 2024 18:57:38 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-12-12 18:57:39 UTC	51	IN	Data Raw: 32 44 0d 0a 7b 22 6c 62 22 3a 22 6e 49 73 77 49 55 61 63 4a 34 72 34 46 75 6b 6b 52 51 47 59 68 51 3d 3d 22 2c 22 74 74 6c 22 3a 32 38 38 30 30 7d 0d 0a Data Ascii: 2D{"lb":"nIswIUacJ4r4FukkRQGYhQ==","ttl":28800}
2024-12-12 18:57:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49865	3.86.129.105	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:39 UTC	1023	OUT	GET /user/login/ HTTP/1.1 Host: ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; pbjs-unifiedid=%7B%22TDID%22%3A%22463397e6-b0c8-4b21-89c4-302650a8da7e%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-12-12T18%3A57%3A35%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:40 UTC	409	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Apache/2.2.34 (Amazon) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: *.ebaumsworld.com X-UA-Compatible: IE=Edge
2024-12-12 18:57:40 UTC	15975	IN	Data Raw: 37 65 36 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 43 75 73 74 6f 6d 20 45 76 65 6e 74 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 7b 0a 20 20 20 20 27 6c 6f 67 67 65 64 49 6e Data Ascii: 7e60<!DOCTYPE html><html lang="en" xmlns:og="http://ogp.me/ns#" xmlns:fb="http://www.facebook.com/2008/fbml"><head> ... Google Custom Event --> <script> window.dataLayer = window.dataLayer \|\| []; window.dataLayer.push({ 'loggedIn
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 2e 67 69 66 27 29 20 63 65 6e 74 65 72 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 73 69 74 65 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 33 32 30 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 34 66 34 7d 2e 73 69 74 65 43 6f 6e 74 61 69 6e 65 72 2e 66 75 6c 6c 57 69 64 74 68 43 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 69 74 65 43 6f 6e 74 61 69 6e 65 72 2e 66 75 6c 6c 57 69 64 74 68 43 6f 6e 74 65 6e 74 20 2e 6d 61 69 6e 43 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 28 6d 61 78 2d Data Ascii: .gif') center 0 no-repeat;text-align:center}.siteContainer{width:1320px;margin:auto;padding:0 10px;box-sizing:border-box;background-color:#f4f4f4}.siteContainer.fullWidthContent{padding:0}.siteContainer.fullWidthContent .mainContent{width:100%}@media(max-
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 0a 34 31 61 30 0d 0a 72 3a 23 66 66 66 7d 6e 61 76 20 61 20 73 70 61 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 69 72 61 20 53 61 6e 73 27 2c 27 47 65 6f 72 67 69 61 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 6e 61 76 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 42 75 62 62 6c 65 7b 68 65 69 67 68 74 3a 32 36 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 36 70 78 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 Data Ascii: 41a0r:#fff}nav a span{font-family:'Fira Sans','Georgia',sans-serif;font-weight:700;color:#fff;font-size:12px;line-height:12px;text-transform:uppercase}nav .notificationBubble{height:26px;min-width:26px;padding:7px 10px;padding-top:7px;box-sizing:border
2024-12-12 18:57:40 UTC	425	IN	Data Raw: 65 77 4c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 37 36 38 37 37 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 7d 2e 62 61 6e 61 6e 61 53 75 72 70 72 69 73 65 7b 77 69 64 74 68 3a 33 30 30 70 78 3b 68 65 69 67 68 74 3a 32 39 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 2f 69 6d 67 2f 64 65 73 6b 74 6f 70 2f 62 61 6e 61 6e 61 53 75 72 70 72 69 73 65 42 67 2e 6a 70 67 27 29 20 30 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 62 61 6e 61 6e 61 53 75 72 70 72 69 73 65 20 2e 73 6c 6f 74 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 Data Ascii: ewLabel{color:#676877;font-size:12px;line-height:12px}.bananaSurprise{width:300px;height:290px;display:block;background:url('https://cdn.ebaumsworld.com/img/desktop/bananaSurpriseBg.jpg') 0 0 no-repeat;position:relative}.bananaSurprise .slots{float:left;w
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 69 72 61 20 53 61 6e 73 27 2c 27 47 65 6f 72 67 69 61 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 63 6f 6c 6f 72 3a 23 32 36 32 38 33 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 70 62 6a 54 69 6d 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 Data Ascii: 8000f;font-family:'Fira Sans','Georgia',sans-serif;font-weight:700;color:#26283d;font-size:15px;line-height:15px;text-transform:uppercase;-moz-border-radius:5px;-webkit-border-radius:5px;border-radius:5px;text-align:center}.pbjTime{position:absolute;lef
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 30 37 30 37 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 38 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 69 72 61 20 53 61 6e 73 27 2c 27 47 65 6f 72 67 69 61 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 32 36 32 38 33 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 20 75 6c 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 20 6c 69 7b 64 69 73 Data Ascii: 07070;font-size:12px}.paginationControl{height:80px;text-align:center;margin:auto;margin-bottom:10px;font-family:'Fira Sans','Georgia',sans-serif;color:#26283d;font-size:16px;font-weight:400;line-height:10px}.paginationControl ul,.paginationControl li{dis
2024-12-12 18:57:40 UTC	8	IN	Data Raw: 6d 65 64 69 61 52 0d 0a Data Ascii: mediaR
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 61 74 69 6e 67 20 2e 73 74 61 72 7b 77 69 64 74 68 3a 32 35 70 78 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 2f 69 6d 67 2f 64 65 73 6b 74 6f 70 2f 72 61 74 69 6e 67 53 74 61 72 73 2e 70 6e 67 27 29 20 30 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6d 65 64 69 61 52 61 74 69 6e 67 20 2e 79 65 6c 6c 6f 77 4f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 35 30 70 78 7d 2e 6d 65 64 69 61 52 61 74 69 6e 67 20 2e 79 65 6c 6c 6f 77 48 61 6c 66 7b 62 61 63 6b 67 72 Data Ascii: 8000ating .star{width:25px;height:25px;padding-right:5px;background:url('https://cdn.ebaumsworld.com/img/desktop/ratingStars.png') 0 0 no-repeat;float:left;cursor:pointer}.mediaRating .yellowOn{background-position:0 -50px}.mediaRating .yellowHalf{backgr
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 64 65 73 6b 74 6f 70 2f 67 61 6c 6c 65 72 79 52 65 70 6c 61 79 2e 70 6e 67 27 29 20 30 20 30 20 6e 6f 2d 72 65 70 65 61 74 7d 2e 67 61 6c 6c 65 72 79 50 6f 73 74 52 6f 6c 6c 20 2e 72 65 70 6c 61 79 42 74 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 37 39 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 67 61 6c 6c 65 72 79 50 6f 73 74 52 6f 6c 6c 20 2e 72 65 70 6c 61 79 47 61 6c 6c 65 72 79 53 68 61 72 65 20 2e 73 68 61 72 65 46 61 63 65 62 6f 6f 6b 7b 77 69 64 74 68 3a 32 30 36 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 Data Ascii: desktop/galleryReplay.png') 0 0 no-repeat}.galleryPostRoll .replayBtn:hover{background-position:0 -79px;cursor:pointer}.galleryPostRoll .replayGalleryShare .shareFacebook{width:206px;height:50px;-moz-border-radius:5px;-webkit-border-radius:5px;border-radi
2024-12-12 18:57:40 UTC	8	IN	Data Raw: 65 2d 68 65 69 67 0d 0a Data Ascii: e-heig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49756	52.222.144.12	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:39 UTC	632	OUT	GET /skeleton.gif?service=ad&adid=zshsa&adnum=189994 HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:39 UTC	616	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 12 Dec 2024 16:57:49 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Aug 2020 23:55:15 GMT ETag: "45cf913e5d9d3c9b2058033056d3dd23" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: iiN8XkcmZQdDIQeKkzAiegPwcD.5WPja Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 313d89143144c0a6ff7ca4969034d54a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: BSRNEF0hPqQMy7fvXdxrggqIiypLMnr9mDYJCOzQtcW82oMQsBtgQg== Age: 7191
2024-12-12 18:57:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49864	108.139.78.212	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:39 UTC	398	OUT	GET /e/dtb/bid/97371.8/0/prebid?adunitid=$rs_300x250_$ri HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:40 UTC	353	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 19 Connection: close Date: Thu, 12 Dec 2024 18:57:40 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 79bffa74f4534739a9d4a60fcbff34b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DXB53-P1 X-Amz-Cf-Id: fRkEdHE_nmg8g9h56FLFuJx9mT5i-bPq7ptC0SwITTZjM8r9IZlJJA==
2024-12-12 18:57:40 UTC	19	IN	Data Raw: 61 6d 7a 6e 61 64 73 2e 61 61 78 50 75 6e 74 28 7b 7d 29 Data Ascii: amznads.aaxPunt({})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49870	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:40 UTC	851	OUT	GET /img/desktop/loaderGlobe50YellowWhite.gif HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:40 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: ghigmTgPgqj6j4nemwEiMcSM8prZxQ1VYEPWi+0JMCpv0wTG0HAqnJNvkuv2WVGcRbqga1j+bts= x-amz-request-id: 7HP1NC9DEMBHVVZ3 Content-Type: image/gif Server: AmazonS3 X-LLID: 684ad5775bf0ca86ce2ed43919d4f4c6 Age: 12178912 Date: Thu, 12 Dec 2024 18:57:40 GMT Last-Modified: Wed, 02 Aug 2023 20:44:33 GMT Content-Length: 63823 Connection: close
2024-12-12 18:57:40 UTC	14079	IN	Data Raw: 47 49 46 38 39 61 32 00 32 00 f7 ff 00 fe f4 bd ff fc f0 fd c9 00 fe ea 89 fe e1 55 fe e9 81 ff fd f2 fe e2 59 fd dd 3d fe eb 8d fd d4 06 fe de 41 fe de 44 fd d9 29 fd d7 1a fd d8 1d fe e1 51 fe df 49 fe e6 6d fe f0 a5 fe e4 66 fd da 2d ff fd f4 fe e6 71 fe e3 5d fd dc 39 fd d9 25 fe ee 9e ff fa e4 fe e0 4d fe e5 69 fd d2 04 fe e7 75 fd d8 21 ff f6 ce ff fc ee fe f0 aa ff f9 dc fd db 31 ff f4 c2 fe f1 ac ff fa e6 ff f8 da fd dc 35 fe f2 b6 fe f3 bb ff f7 d1 ff fa e2 fe ed 96 ff f6 cc ff f8 d7 ff f5 c4 fe f4 c0 fe f1 af fe f3 b9 ff fa e8 fe e8 79 ff f8 d6 fe f0 a8 ff f6 ca ff fe f7 fe ec 94 fe ed 99 ff fc ec fe f1 b0 fe f2 b4 fe f3 ba fe ee 9b ff f5 c6 fd d7 23 ff f7 d2 fd d4 0a fe ed 9a ff f9 de fe e4 62 ff f7 d4 ff f8 d4 ff fc ea ff fb ea fd d2 09 ff fd Data Ascii: GIF89a22UY=AD)QImf-q]9%Miu!15y#b
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 40 50 56 fc b9 a7 44 2e b4 e4 e2 4a 2c 83 d5 ba 90 30 2d 94 30 aa af c4 16 6b ec b1 88 fd 62 c1 39 4e a8 20 82 08 2e c8 10 00 07 bc c0 55 2c 0d 1d ac 10 cf 05 0b 48 b0 80 03 12 20 60 5e 03 05 00 31 5d 0c c3 26 9b 04 09 b4 d8 e2 40 18 31 6a 40 40 02 6d 1c e0 c2 21 b6 f4 60 0c 19 2c 0c 11 81 04 4c e4 e7 84 03 b4 70 da 85 02 e6 28 11 44 06 b5 d0 62 c6 15 27 90 60 8c 89 24 f8 42 06 03 ba 4c 60 1a 0f 1a d4 32 0b 49 0a 10 43 00 99 c3 28 70 84 21 d9 6e 60 0c 9f be 44 b3 01 0b 1e d8 92 4f ba 1e 39 71 84 2d 1f 83 3c 8b 03 2b 30 40 4b 08 1b c0 10 cb 0d ff c8 e2 42 d0 34 f4 72 da 06 15 84 33 9b 61 bb 98 51 8b 5a 0a 94 42 0b 30 13 8c c0 41 00 f7 0d 34 c2 06 5d c7 d5 03 80 4f 13 f6 cb 00 6a d8 92 8c 02 17 e4 41 02 05 08 e0 a2 97 13 2c 88 50 c8 62 23 08 53 50 0c b6 d0 Data Ascii: @PVD.J,0-0kb9N .U,H `^1]&@1j@@m!`,Lp(Db'`$BL`2IC(p!n`DO9q-<+0@KB4r3aQZB0A4]OjA,Pb#SP
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 80 42 84 52 0e d0 52 0b 17 bd fc 32 1e 2b 1d 00 43 cb 2d 0e 1c a0 83 31 5a e8 20 44 19 30 f4 20 46 85 40 d4 80 84 0f 49 b0 32 02 04 b5 0c 53 0a 2d 47 c4 80 de 41 8b 08 50 83 08 5e 54 81 c2 06 2e cc 00 c3 71 ab ad e6 cb 10 41 f4 22 10 0b 82 dc 42 4c 2d f9 9c 28 d0 08 6c a4 80 0b 41 3c e8 80 44 8d 2e c1 30 03 5a 90 49 10 4e 53 09 05 50 4e 0d 07 fd 02 44 52 32 19 b3 c1 08 1f bd 80 4c 0f 49 45 37 1d 42 4e 9c 20 0f 08 58 fd 83 0b 2b 40 b0 f0 cf 2f b1 0c 11 93 71 7c 79 d4 0b 1e c8 34 49 03 0f 0b d1 70 09 51 31 94 c0 4b 0b 2f 88 87 cb 2f bc 88 e7 d1 39 57 c0 10 84 90 04 ed e2 40 38 0b 92 21 10 2f 2e 2c 67 c1 39 94 12 c4 4a 10 72 0a 76 0e 09 90 09 b4 9d 11 3a 2e 84 4b 09 c2 b4 ff 27 eb ac b4 d6 6a eb ad 82 05 c0 41 00 e7 94 a0 82 01 cf 94 30 01 13 ac 2c 67 6b 54 Data Ascii: BRR2+C-1Z D0 F@I2S-GAP^T.qA"BL-(lA<D.0ZINSPNDR2LIE7BN X+@/q\|y4IpQ1K//9W@8!/.,g9Jrv:.K'jA0,gkT
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: 7c 01 ac 81 04 c0 16 83 58 00 0c 14 a4 b0 02 5d 18 02 86 bb 1a 57 be 7a c8 c4 26 3a 51 21 01 01 00 21 f9 04 09 03 00 ff 00 2c 00 00 00 00 32 00 32 00 40 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c f8 af d8 33 27 31 48 88 f8 c5 21 46 90 20 27 38 9c 73 82 8b 21 43 2a 3a 08 34 c3 40 08 03 8a 41 0a 4a a9 5c c9 52 e5 ac 52 b4 74 2d 70 22 2f 80 47 82 64 da 1d bb 55 80 80 ae 5b 61 06 8c 11 82 44 83 b3 59 b6 6a 19 2a 30 6c 58 a9 0f 19 0e 0c b1 f0 8f c7 4d 83 3f 3a 00 33 47 55 20 ab 11 cc 86 f8 8a b5 41 87 b0 82 c6 74 9d a0 13 26 5c 81 03 28 78 b4 38 13 25 4d 84 11 1c ae fe 93 95 90 55 a1 b3 06 59 91 00 56 8b d6 83 61 c0 6e d1 60 a5 b7 b1 e3 c7 90 23 27 dc 55 85 56 17 5b c9 4a a5 54 b9 b9 65 a9 61 b6 b8 b0 1a 20 c4 42 2f bd ac 8c d0 b2 f5 a0 5d 35 04 0f 68 bd f4 Data Ascii: \|X]Wz&:Q!!,22@H\3'1H!F '8s!C:4@AJ\RRt-p"/GdU[aDYj*0lXM?:3GU At&\(x8%MUYVan`#'UV[JTea B/]5h
2024-12-12 18:57:41 UTC	592	IN	Data Raw: d8 1a 72 58 96 32 0b 2d 1f 78 00 40 0a 50 a8 50 82 08 0a 19 d3 85 2d b7 ac b3 a3 40 01 5c 20 01 19 35 a4 c0 c5 03 92 21 b7 65 17 30 00 31 c2 5a bd 68 50 cb 50 b5 54 c0 83 88 06 c8 e2 44 29 b6 1c 75 cb 01 39 f8 20 c6 08 6b 1e d4 4b 18 e1 c0 a0 d6 5a 8b dc 62 05 78 02 5c c0 0a 0e 62 a4 c7 4a 2f 91 16 64 01 33 4b 58 d0 de aa ac b6 ea ea ab b0 b2 ff 67 41 12 22 c4 50 82 05 74 94 60 84 13 46 bc 70 e3 ab b2 00 11 41 1e 13 64 20 80 2e 70 f0 62 c1 08 50 bc f0 42 0b 0d 74 71 40 0c b2 b0 c7 ca 19 45 2c 60 80 13 86 cc d0 4b 00 57 e4 d4 0b 27 0a 3c 70 4b 17 42 cd 32 57 11 39 10 c8 00 30 a2 50 e0 61 2f 07 c8 c3 ca 10 07 d4 f0 c0 77 5a 12 a3 40 2d b7 c4 a2 97 12 21 fc 60 c0 48 0b b2 c2 41 06 b7 e4 b2 e1 30 0a 28 10 82 2b e1 94 97 8b 32 e2 71 f0 d6 2e 5a 9c 53 2a 2e 55 Data Ascii: rX2-x@PP-@\ 5!e01ZhPPTD)u9 kKZbx\bJ/d3KXgA"Pt`FpAd .pbPBtq@E,`KW'<pKB2W90Pa/wZ@-!`HA0(+2q.ZS*.U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49868	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:40 UTC	1086	OUT	GET /thumbs/2024/12/11/125806/87646013/WOW.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:40 UTC	368	IN	HTTP/1.1 200 OK x-amz-id-2: O2PWRmVvpABJty/rqesIgHOLFXB5PIhMy6VjRGVVx/F8dqi4xcKsUnjMUX15V5HpDCeBJciFtwo= x-amz-request-id: NGEH7PJKJGKH33YR Content-Type: image/jpeg Server: AmazonS3 X-LLID: aa919bfef66f27d847f171f76d2b7f68 Age: 89974 Date: Thu, 12 Dec 2024 18:57:40 GMT Last-Modified: Wed, 11 Dec 2024 17:58:07 GMT Content-Length: 99278 Connection: close
2024-12-12 18:57:40 UTC	14081	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 8e e6 bc 1b a3 93 3e 2d 14 73 39 f1 34 9d 55 ca c7 62 92 af 2c cd 20 a5 90 6f 54 64 38 84 64 18 42 79 06 14 64 1a 50 08 45 91 95 48 26 4c 39 e6 c0 1d a1 52 4a cb 78 f5 7d 0e e9 ad f2 ad c8 e3 f2 b1 99 59 5b 41 4d 54 4d 6b d0 f6 fd ad 76 d7 11 9e c9 90 19 0d 6c 9d af 18 e8 31 de f8 dd 26 b1 8e a9 ca 24 53 79 2e 69 c4 c5 da d3 42 e4 dd 5e bf 5e 6b 08 f9 dc e2 49 3a f5 4b 2f 5b 5e bc 2a f2 62 33 e5 c6 d6 dc d5 37 27 b5 71 ab d0 38 98 23 83 11 bb c5 0d 15 65 f3 37 5e 7b 21 c8 c8 2f 91 ec 17 04 59 4d af a8 fc 6f 5f 18 c8 72 d1 c9 1c c5 0f 5b 6d 42 62 b1 f2 ca d6 8a dd 07 a7 5e 5a 07 62 ba 18 58 2b ee 28 6f c6 41 58 85 cd 85 db db fa 53 67 4b 8d 86 fc 99 da 1b 6b a5 76 c3 3d b6 93 e5 f4 b7 dc 22 5b e1 fc 81 1d 04 5f f9 cc 5a 77 fe ca f9 7f c5 4c fb 1a ff 00 af Data Ascii: >-s94Ub, oTd8dBydPEH&L9RJx}Y[AMTMkvl1&$Sy.iB^^kI:K/[^*b37'q8#e7^{!/YMo_r[mBb^ZbX+(oAXSgKkv="[_ZwL
2024-12-12 18:57:40 UTC	16384	IN	Data Raw: 7c bc eb 29 e2 5c 87 38 5a e8 7a bd 53 11 3c 2d a3 50 d5 20 08 0e 7c 85 ad d6 c8 46 d1 95 f2 4c a2 fa 47 5b 12 2d fa 53 70 76 47 a6 78 a4 98 b0 70 30 56 80 ed 4d e4 f6 75 ed 76 57 f2 9c 94 8f 9c 86 12 5a 95 8f 53 d6 e8 c4 04 1c f3 af 55 38 7a 3d 77 08 cc 43 75 d4 e1 df d7 ec 56 af c4 d9 8d 1c c1 f2 90 00 4e 39 bd dd ee da b6 53 79 27 11 8a c2 1e f0 48 d0 2d b5 be 1f 29 d9 d1 b5 d9 49 91 e5 18 79 6f 2c 63 2a c3 a1 53 be de 1b f5 f4 d8 7e 20 6e e0 e6 e8 4a f3 3b 2f 97 64 be 1e b7 f7 47 ff 00 62 f2 7f fd 8f e6 23 5e e7 77 ed af 1b d5 ff 00 24 ff 00 cf d1 f3 fe 56 29 71 69 02 cb ce af 47 7d 05 e3 63 52 20 a5 97 03 a0 88 b6 62 e4 95 35 5a e3 c8 45 90 78 0b ce f1 71 e7 62 b8 81 f9 ad 15 05 5e 9b e2 b0 ee ea cc 79 ae 56 f8 25 73 1e 28 e6 9a 15 d3 97 9d b6 98 42 Data Ascii: \|)\8ZzS<-P \|FLG[-SpvGxp0VMuvWZSU8z=wCuVN9Sy'H-)Iyo,c*S~ nJ;/dGb#^w$V)qiG}cR b5ZExqb^yV%s(B
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: ad f7 49 ac 70 75 ec 85 41 0c 79 01 2c 2a 54 ed 98 d1 18 57 27 1c 8a 04 61 72 a3 33 92 85 64 c7 4a 4a 63 92 3a 92 50 79 4d 8e 0e e4 0c ac f1 ec 82 58 41 36 2b 5c 0e 4d 7b 3f bd 4f 44 ab 1e ca 49 b1 fe ce be 5d f9 2f 95 d3 9f 9c 5a 95 44 d6 bc ed f7 b2 a4 84 7d a0 86 f1 64 4a cf 80 55 35 67 ce a9 fc 93 92 f0 16 ec fe 97 3c ce 90 91 f3 69 aa 7c 5d 1d 7d 8f aa fe f1 e4 7d 3f db 8e 5e 6f e1 38 df db 95 10 ff 00 c5 6f db fb 5e 2f 57 ee 8f 9d cf 23 04 d1 0b eb aa e6 e2 ea ca ab 24 31 92 55 a6 a0 aa 84 22 19 58 18 08 d5 04 71 99 9b b5 41 96 62 c2 c3 47 25 95 2a 9c f0 25 f8 a8 b5 72 0c 86 57 05 16 aa 45 96 16 7f 6a 41 7d 54 5a 72 34 90 65 62 cd 10 6b c0 a9 48 02 e4 7c 72 3c 86 ef 84 dc e8 9c a7 85 09 e1 39 78 66 a1 04 b0 68 8e 6a e2 32 0c 69 43 b6 4f 15 8f ef 00 Data Ascii: IpuAy,TW'ar3dJJc:PyMXA6+\M{?ODI]/ZD}dJU5g<i\|]}}?^o8o^/W#$1U"XqAbG%%rWEjA}TZr4ebkH\|r<9xfhj2iCO
2024-12-12 18:57:41 UTC	16320	IN	Data Raw: d5 a7 6b 52 aa 89 03 4a 4a 3d ad 28 34 8c 62 46 99 b1 82 10 67 08 c2 66 70 6a 0e 38 84 28 d2 50 70 95 09 9b 90 4e 40 25 50 0e 08 27 10 80 61 08 33 68 10 0c 7b 50 68 5e cf 82 64 12 58 cd d3 65 40 4e 2e 9c 67 b2 a7 91 07 61 57 1c 7d 91 8d e7 19 f9 4f 5a ca e2 db 5f 29 bc 32 00 c8 de e2 35 53 6b 6d 35 f2 d5 34 ac 1d b0 e6 9b a4 69 a3 d5 4d 38 2a 36 9a a9 5c 58 46 da 51 06 2e 2a 8a 20 c4 b6 a9 12 56 e8 80 94 20 8c 90 8a 20 21 2e ba 46 4d d7 40 3d a0 14 1a 41 1a 61 2b 19 44 03 f6 a0 3b 69 08 06 bc d0 20 c2 4a fa 94 95 22 2a 27 01 28 99 10 b5 21 93 76 a0 c8 5a 80 69 08 04 fc 50 64 dc 10 0d 72 0a a2 71 f5 4d 28 9c 41 4c 04 c8 88 b8 59 5c a8 da 65 45 ca 61 09 63 73 48 b9 16 5b 69 b3 8b bb a9 81 cf 81 d0 cc e6 1d 42 ea d6 bc ce cd 40 1d 15 b1 a6 d1 04 7b 6c 80 90 Data Ascii: kRJJ=(4bFgfpj8(PpN@%P'a3h{Ph^dXe@N.gaW}OZ_)25Skm54iM86\XFQ. V !.FM@=Aa+D;i J"*'(!vZiPdrqM(ALY\eEacsH[iB@{l
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: cd 4a 46 80 f4 5d 3f a3 8b 79 e1 42 02 a4 e1 c4 20 3e 96 2f 3b 8f e2 57 13 d8 c1 ed 79 41 58 90 3c a6 9c 14 c8 52 3c 1b dc 29 0e 25 0f 40 c1 1f 28 09 a6 85 9f 28 06 9b a6 51 51 93 91 bd c6 e9 e1 70 ec 76 57 54 60 64 43 a2 6d 10 79 41 2b 43 45 53 54 a8 5b 21 aa 15 22 c3 1e 52 29 44 60 b0 3d 93 b8 04 8b 09 06 51 42 2c 2f d5 7c 50 ce c4 33 4d dc 06 3a d6 a8 4e 54 13 3c e3 e5 10 7d 6c 94 8a ca c2 0c ad d4 aa 2e a7 28 d6 c8 36 a4 a3 83 c1 48 dd dc 48 9d dc 08 06 b9 ed 17 28 88 d9 53 e5 79 6c 8f 84 9d c5 db 7d a5 69 a7 cb 83 da db 1a bc 2b 2b 20 cb 21 b5 68 75 5d da be 6f b3 e5 09 24 ab 63 b1 8f 69 29 a5 0b ac 8c 02 56 e9 95 75 50 46 39 06 44 c3 90 0a d4 81 c8 27 0d 50 0e 40 22 01 55 29 c8 05 1a 20 15 01 36 24 3d d9 83 7d 2e 52 a0 66 53 ae 18 34 6a 47 10 86 d5 Data Ascii: JF]?yB >/;WyAX<R<)%@((QQpvWT`dCmyA+CEST[!"R)D`=QB,/\|P3M:NT<}l.(6HH(Syl}i++ !hu]o$ci)VuPF9D'P@"U) 6$=}.RfS4jG
2024-12-12 18:57:41 UTC	3341	IN	Data Raw: a9 f2 ab fb 5f 7b fd ee 81 b3 fd b0 e6 a2 70 a8 78 c6 04 7f 9b 88 ad fb 7f 6b e6 fd 39 ff 00 db 3f d7 fd 9f 09 79 17 0b 26 0e 64 86 94 89 c6 a1 73 ca f5 ee ab 4f 07 e5 8c 39 1f 47 23 bd ae ff 00 0c 7c 7a a5 b3 4d 1b f9 22 0f 6d 7d 74 59 d7 56 b4 04 d1 39 85 0d 62 30 d0 6c 50 a8 63 e1 54 79 0e f8 cd e8 83 ca 33 bc 0b 26 32 56 cc e1 a9 40 ca 78 73 5c d2 2e 80 36 2c ff 00 70 24 a5 82 1d 0e 70 27 54 b0 32 35 99 56 d5 18 54 d9 33 32 c8 ea 96 15 c8 af c9 24 6a 8c 2b 91 82 72 35 28 c0 e4 64 b9 40 0d 53 c2 2e c0 65 e4 5a 3a aa c3 2b b8 67 67 83 d6 c9 e1 9d dc 2e 47 27 1b 01 ab 90 ca ee c9 f3 dc ec d5 d9 1b ac 56 88 95 9c 93 b8 f1 bd c6 b5 ea 8e 34 f6 96 c4 3b 4a 23 1b 0a d8 1e e3 65 67 af 55 ab 0e 2f 09 cf c8 6f 41 5b a2 3a 34 f5 fc 2f f9 3e 0b 1a 5c 5d d1 59 e0 Data Ascii: _{pxk9?y&dsO9G#\|zM"m}tYV9b0lPcTy3&2V@xs\.6,p$p'T25VT32$j+r5(d@S.eZ:+gg.G'V4;J#egU/oA[:4/>\]Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49874	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:40 UTC	1090	OUT	GET /thumbs/2024/11/13/013050/87634329/comics1.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:41 UTC	383	IN	HTTP/1.1 200 OK x-amz-id-2: uYGy7PTw0qnI7jSVG3Nft0lcaRcLa2SYfA+fslIETQiOsbHlX7uGacqajcH6HhWBUqFFvGx3MG3dq3PU7y9gcQ== x-amz-request-id: VCTJ8Z3G8XPAN5FX Content-Type: image/jpeg Server: AmazonS3 X-LLID: 046e8ac2c43835d989476e6ae74ae797 Age: 2507210 Date: Thu, 12 Dec 2024 18:57:41 GMT Last-Modified: Wed, 13 Nov 2024 18:30:51 GMT Content-Length: 255243 Connection: close
2024-12-12 18:57:41 UTC	14066	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: d3 ec af 4f d5 a9 47 2a 29 a9 24 c2 e1 f3 0d 52 d5 2b d4 5b 4d 63 6d 0b 49 6a d4 0a 1d 4a 56 da 49 1b 16 a7 00 52 13 bb ad 56 02 d2 aa 76 e9 dd 5d 92 52 7a eb 38 92 d3 03 38 ac 3f 27 b2 5a 2d 90 a3 a5 bc de fd 3d 4a 19 ae 49 71 5a 6d c9 75 29 0a 92 e3 49 65 a0 e2 d0 dc 99 55 2b 6b b2 eb b1 d5 8a a9 c4 4f 48 93 98 d5 97 27 b5 da e0 5e 32 b6 2e 57 7c b2 ff 00 39 a6 a7 31 64 49 7c c0 2f 34 e2 de 92 a5 a5 2d 24 2d 2d 83 19 a5 b9 b1 88 fb c0 49 a9 71 d7 a8 c9 42 1e ef 8f df 33 ec b3 f8 4b 93 60 b1 84 f1 4e 3f b4 e3 dc 61 06 53 72 9e c8 be 93 7f a0 65 ae 31 dc 63 b0 1a 49 5b 28 02 b5 40 52 42 14 1c d4 17 43 6f c8 b9 05 ab 8a b3 8b 94 b1 6e c8 f2 4c 83 21 9a d3 f1 67 ca 72 0a 2d 56 27 af 41 51 62 c5 88 94 bd 15 0d 39 0a 1c 60 68 da 94 e8 65 62 af b2 c2 d6 e6 b0 Data Ascii: OG*)$R+[McmIjJVIRVv]Rz88?'Z-=JIqZmu)IeU+kOH'^2.W\|91dI\|/4-$--IqB3K`N?aSre1cI[(@RBConL!gr-V'AQb9`heb
2024-12-12 18:57:41 UTC	1575	IN	Data Raw: 37 04 42 67 6a 85 0a 4e f4 ae 84 77 50 e9 f8 7a 68 0d d9 11 67 fb 1a cb 95 73 80 66 4d f6 8d 9c dd 40 bb 5a 90 0a 87 1d 5d a6 b8 54 89 6c a4 15 0f ca 64 b8 b2 97 50 0a 43 2a a1 48 ec 14 03 b1 ef 5d a8 99 3f b4 3e 67 7a db 21 99 f0 9e c5 91 74 b7 ce 61 61 d6 9e 62 33 ec 4e 4b ad 29 15 42 d0 50 d8 50 5a 4e d3 d3 e1 a0 17 1e d3 2e bf 9d fb 65 e0 0b 88 70 b8 a5 e0 56 16 1e 5a a9 5f 52 2c 26 a3 ac 74 e9 d1 4d 91 a0 24 2a d3 52 09 03 c8 2a 09 1f 3e d5 fb 40 d0 11 b7 80 ef d3 a4 5d b9 f3 12 ba dc 9f b8 4c c2 39 46 ea 88 a1 f7 56 fa db 81 76 8d 0e f3 15 b4 97 54 a2 10 91 39 49 42 7b 27 6d 13 40 34 04 5f e2 fe 29 c6 f9 bf 2c f7 e7 8e e5 0d 3a c2 ae dc ad 12 2d b2 f1 1d 5e 9d ca d9 36 cd 68 8c 98 17 28 8f 23 69 6d c8 eb 51 71 b5 02 3a 85 24 d5 2b 20 80 f0 f1 96 53 Data Ascii: 7BgjNwPzhgsfM@Z]TldPCH]?>gz!taab3NK)BPPZN.epVZ_R,&tM$R*>@]L9FVvT9IB{'m@4_),:-^6h(#imQq:$+ S
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: fc 66 25 34 58 94 cb 72 59 55 37 34 ea 02 d2 68 6a 2a 95 54 77 d0 0d d6 7b c6 38 9e 5d 85 66 78 cb 98 dd ac 2b 27 b1 dc 2d 6b 79 30 d8 0b 1f 57 1d 6d 05 05 6c ad 41 55 47 cf 40 41 0c 4b 3a bf 58 bf 97 45 83 94 70 5c 46 cb 76 e4 9c 43 0f 8f 6d 7e 63 b6 d6 e5 88 8e 5a 65 a6 db 3e e0 b6 10 85 2d ef a3 69 a7 24 96 c0 25 45 14 a1 d0 1b 90 32 be 71 f6 f1 8e 43 e7 6b d7 38 c5 f7 63 ed eb 21 6a df 37 3d bc fd 24 78 17 2b 0c 37 e8 85 5e 6c a2 0a d5 19 f8 88 2e 05 3c c5 02 c2 7a a4 92 95 68 0f 44 ae 10 6d 39 66 3d 3a d9 2d 28 b8 59 32 5b 73 91 e4 26 80 a1 e8 b3 1a 28 57 43 e0 a4 2f c7 40 7c fa e7 d3 79 0f 14 93 ed 3e c5 88 c4 56 41 cb fe d2 79 17 34 c2 a4 d9 f7 ee 93 75 b4 58 a1 b5 79 84 cb 67 a9 52 a6 59 b7 21 00 7e 25 55 23 cd a0 26 9e 70 71 8e 5f e7 a8 4b c2 2f Data Ascii: f%4XrYU74hj*Tw{8]fx+'-ky0WmlAUG@AK:XEp\FvCm~cZe>-i$%E2qCk8c!j7=$x+7^l.<zhDm9f=:-(Y2[s&(WC/@\|y>VAy4uXygRY!~%U#&pq_K/
2024-12-12 18:57:41 UTC	9680	IN	Data Raw: 39 c5 30 3b c5 91 10 ee 19 be 59 36 15 af f2 c5 be f3 49 87 25 70 53 ea ba bd 92 54 de f4 05 8e 83 e7 a0 3d 43 e3 99 13 e5 60 98 8b d7 3b 04 ac 5a e1 f9 4c 54 4b c7 67 38 c3 d2 21 ad b6 c2 0b 4e 39 19 c7 5a 51 14 ee 95 53 ec ec 00 59 af b9 fb a8 3e ce fa 02 0b 62 58 8b 1c b1 93 fb e8 44 a5 6c 83 9c dd d8 e3 74 c8 a0 a0 66 cd 8d b0 c3 8b 4f 51 d1 b9 37 17 4a 8f c4 52 95 d0 18 bd 9d 5e 64 72 1f b3 6c 7b 16 bc 15 8c 87 18 b3 dd f8 f3 2b 87 e9 6e 72 34 9b 42 9f b7 21 82 95 1e aa 4b 25 a5 00 a1 d8 8e 95 ae 80 8a de cd 6e 30 b8 1f 8f b8 23 91 8a 5a 8b c5 9e e1 ed d0 f1 1e 40 92 5d 71 48 b3 67 36 d9 33 a1 db 6e 2a de b2 10 c5 cd b4 aa 3b c6 a9 08 79 0c 2c 9a 28 8d 01 2b bd a3 48 6a d9 c8 fe f2 f0 36 df 42 9a b1 f3 04 9c 81 84 36 ef aa 50 9c 92 0b 12 14 90 68 9a Data Ascii: 90;Y6I%pST=C`;ZLTKg8!N9ZQSY>bXDltfOQ7JR^drl{+nr4B!K%n0#Z@]qHg63n*;y,(+Hj6B6Ph
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: 46 6f 76 fd 5f 72 f2 3b f0 62 58 e8 bc c8 e9 74 c6 24 e6 3e f3 30 7b 9e 55 0d f5 37 c6 d6 bb a6 43 83 c1 79 41 51 1b 88 c3 11 e2 22 6a 5b 15 fd eb d3 25 28 05 2a 94 0c d0 6b ae b7 f6 f8 ed 57 77 12 61 9e be e6 55 5b 6c 2a fd b2 c7 6f 16 9f ee 03 8a 18 48 6e df c7 3c 9f 74 7a c2 dd 4e e4 db b2 56 99 be 32 93 5e be 55 ca 71 23 e2 06 b3 e5 fa 95 2f e7 55 f7 ad 3f 61 6e 26 9d 55 f2 7f e6 48 fc 81 99 b2 71 fb f4 7b 64 08 b7 5b 93 f6 d9 8d db 2d 53 c8 11 64 c9 53 2b 0c b1 20 a8 28 7a 6e 2c 84 ae a2 9b 49 d7 25 3e a5 ac 1d 57 9e 97 0a 48 51 c3 d7 ac 43 90 72 ef 6e f8 af 1f 62 0f e2 77 7c 47 2d ba 64 dc a1 8b 5b ad 0f db ed 98 dc eb 65 b6 4c 1b 94 77 1c 69 94 44 57 a9 70 57 a4 80 85 af 71 f3 7d 9f 47 c2 c1 91 65 77 72 eb 1a 3f 9b fd c7 91 cf e4 63 be 35 4a 24 9a Data Ascii: Fov_r;bXt$>0{U7CyAQ"j[%(kWwaU[loHn<tzNV2^Uq#/U?an&UHq{d[-SdS+ (zn,I%>WHQCrnbw\|G-d[eLwiDWpWq}Gewr?c5J$
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: c8 6e 8e dd 56 9e ab 8a c2 7e 96 31 3e 01 4a aa 9c 57 f9 aa 1a f0 79 5d fd bb 3e 97 a1 12 3c 76 6c 57 1f c7 85 2c f6 58 96 f7 29 45 c8 69 a0 97 96 3c 37 38 6a b5 74 ed b9 47 a6 bc 3c fd cf 2d f6 24 50 81 d0 f8 6e ef ae 3f 76 f7 d5 b0 54 00 2b 40 05 7a 28 00 05 7e df 8e aa eb 3b 90 50 00 3a 0e 83 c0 6a 12 4b 44 48 15 00 69 e3 ad 6b 59 05 a0 92 af f1 7c 06 ab 65 0c 19 0d 2b d3 b6 a0 14 d0 06 80 34 01 a0 0d 00 68 03 40 1a 00 d4 5f 5a c1 46 46 6f 75 1c 89 7e c1 b8 ea 3d a3 0a 98 98 5c 89 c9 97 78 98 96 0b 2c 00 a7 22 49 9c 16 b9 37 04 54 1f fa 14 36 9f 7f b7 45 04 13 df 5d fd b7 03 99 64 0c 1e 25 8a 63 7c 77 8d 23 18 c7 9a 66 d5 67 8e b1 2e eb 70 71 45 32 2e 12 bf 7a a7 ee 37 19 4e 85 ad f7 d6 a4 a9 6b 75 c5 a9 54 0b 02 89 4a 75 f4 37 7d 4f a5 1a d6 c9 23 5f Data Ascii: nV~1>JWy]><vlW,X)Ei<78jtG<-$Pn?vT+@z(~;P:jKDHikY\|e+4h@_ZFFou~=\x,"I7T6E]d%c\|w#fg.pqE2.z7NkuTJu7}O#_
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: 0e 0b 04 59 97 95 4f cb 31 e8 16 77 63 46 75 c6 e2 ac 48 72 63 8e a8 22 38 6d 1e 54 28 9a 6b ce e4 76 45 9a ee f3 b9 35 be 83 8a df 33 fb b4 9b 18 35 03 da 55 b1 99 8f 74 8f 73 93 c8 76 57 60 83 d8 a8 fd 33 6e 3c b4 d7 ad 02 42 bc 35 87 ff 00 d7 97 99 b2 b8 9b bd e1 1e ec 79 6e 1a b1 de 4c e4 9c 33 8e b0 3b 8a c0 cb ec bc 6d 12 e8 ed f1 e8 64 d1 d8 6d dd 2e 0a 42 19 f5 53 fb b7 4a 50 09 41 3b 4d 0f 5e ae 37 69 58 5f 99 5b d8 91 d6 dc 73 16 e3 ac 1a d9 87 71 8e 28 c5 b3 1e c4 6d ef 7f 0f e2 d1 96 db 21 e7 90 d3 8b 0c a9 f5 12 82 e3 cb 00 97 5d 5d 56 a5 29 4b 51 3a f6 7a 52 50 8c 6b ab 21 27 0f 31 ef 4b 1b 3c 8b 79 3c 39 82 5b 73 4e 57 ca 1e bf 5e 72 2c 8f 29 32 5a 86 da 21 c7 87 6e b7 a6 15 95 b9 25 6d c4 69 82 91 47 82 d5 d4 91 d7 5e 7f 27 82 b2 29 66 bb Data Ascii: YO1wcFuHrc"8mT(kvE535UtsvW`3n<B5ynL3;mdm.BSJPA;M^7iX_[sq(m!]]V)KQ:zRPk!'1K<y<9[sNW^r,)2Z!n%miG^')f
2024-12-12 18:57:41 UTC	16320	IN	Data Raw: ed a9 c5 29 c5 80 4b 6c 32 80 a7 9f 72 9e 46 d2 48 f3 14 83 dd 67 d2 be 2c f2 55 7a ec e7 65 b9 e6 db 5c 54 f7 18 5f 6e d8 56 6c b4 e5 d9 8c 66 9b 91 fc 71 74 49 96 ed ea d2 a2 53 15 d6 0c a5 3c b6 99 8e 54 a6 3d 0d df bb 20 13 f8 ab ae 65 5e 9d d6 a7 af 8f 2a c9 59 aa 85 e4 27 ee 2c 71 a5 9a f1 12 db 22 34 5b 5d e2 53 4e 48 6d b8 3e bb 4a 65 96 ca 41 79 e5 45 21 2c 22 aa 00 2d cd a9 24 d0 1d 53 26 4c 78 ec 95 dc 3b 38 49 b8 97 e4 8d 15 5d a7 4d be 02 c1 c6 13 68 61 f9 87 2a c8 6d 11 a2 21 46 44 81 7f 9c cb 6d 21 3d 49 52 8b e1 29 02 9e 3a d2 12 53 a9 9f 4d 6d fc 29 fd 83 8b ed da e9 cc d9 37 2e 47 89 68 cb 32 d8 5c 47 8d 5a db bc e6 29 cb 1e 5c e1 7a 13 fd 46 ad b1 ad f1 e7 03 22 2a 1c 2d ad d2 f9 db b9 08 f2 24 82 09 63 97 7d 36 39 b9 4b 1d 69 f4 a9 f8 Data Ascii: )Kl2rFHg,Uze\T_nVlfqtIS<T= e^Y',q"4[]SNHm>JeAyE!,"-$S&Lx;8I]Mham!FDm!=IR):SMm)7.Gh2\GZ)\zF"*-$c}69Ki
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: ca a9 0b 4f 4d 79 8b 9c dd dc 3d 0f 46 bc 34 94 c1 38 3f 97 e4 36 63 fb 7f 2f b4 db 6d fe 73 98 64 f7 08 ac b2 00 69 11 97 70 76 3b 01 a0 28 03 65 31 ea 07 63 dc d4 d4 eb e6 fb ac 5a d2 6f 4a c1 39 a8 07 40 00 1e 00 0a 0d 78 a6 a1 a0 0d 00 68 03 40 1a 00 d0 a3 6e 43 51 26 88 63 b9 c3 95 65 71 8e 3b 10 63 f6 d8 79 06 7f 95 cb fc ab 04 c6 e5 b8 59 65 f9 6a 4f a8 ec 99 6a 48 2b 11 61 b4 82 fb ea 40 a9 4a 43 69 a2 d5 5d 7a 1c 3e 2a bc 58 ce cb 52 2a 60 f8 ec 4c 79 57 49 f7 5b 9c 8c a7 2b c9 25 ae e1 96 e6 12 d0 13 26 e5 39 65 41 4e 6c 05 41 96 90 14 50 c3 29 25 2d 35 fb b0 55 55 29 5f 45 4a f4 2d 0b 2a a1 c8 5f a2 a0 5d 59 5a 47 74 a0 92 29 f7 03 d3 55 76 92 e9 41 ca 70 a1 4b 52 90 12 84 13 d1 20 01 f6 9f bc eb 16 68 8d 47 0d 54 7a f4 d5 49 31 92 00 d0 18 b7 Data Ascii: OMy=F48?6c/msdipv;(e1cZoJ9@xh@nCQ&ceq;cyYejOjH+a@JCi]z>XR`LyWI[+%&9eANlAP)%-5UU)_EJ-*_]YZGt)UvApKR hGTzI1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49876	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:40 UTC	844	OUT	GET /img/desktop/socialSignInIcons.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:41 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: 4fbZbLe/OVLSDJY/iON0CXUAMxR6dlxuByl8B1Hg8z1fwbav2Oqx0vHRYvAukFPfBUk9ouVkwoI= x-amz-request-id: B3ZM6M4G68HYJFS3 Content-Type: image/png Server: AmazonS3 X-LLID: 2bb01acf95bf2af1428466b8319e15f8 Age: 12178912 Date: Thu, 12 Dec 2024 18:57:41 GMT Last-Modified: Wed, 02 Aug 2023 20:44:49 GMT Content-Length: 4428 Connection: close
2024-12-12 18:57:41 UTC	4428	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 7e 08 06 00 00 00 3e da d1 bf 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 35 37 37 32 2c 20 32 30 31 34 2f 30 31 2f 31 33 2d 31 39 3a 34 34 3a 30 30 20 20 Data Ascii: PNGIHDR~>tEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49873	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:40 UTC	1096	OUT	GET /thumbs/2024/12/05/035257/87643946/randoms-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:41 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: v785fNzswFGjUpvf/ogjNWTSHtFVqqTt0nCVU2ait+uvGMq8BVfjVq2Ujs7bpIpTVsnYoKnCzg0= x-amz-request-id: EZPP32BJAHHZDRP4 Content-Type: image/jpeg Server: AmazonS3 X-LLID: b5596155e36c0da9b0495ff358818e64 Age: 597883 Date: Thu, 12 Dec 2024 18:57:41 GMT Last-Modified: Thu, 05 Dec 2024 20:52:58 GMT Content-Length: 407615 Connection: close
2024-12-12 18:57:41 UTC	14079	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: e6 a3 52 a8 d6 ac 69 a9 1d 72 a1 9e a8 c7 2d 2a a7 c4 24 61 a1 d2 9c e5 33 ba 16 c7 1a 42 4c e3 09 4f 6e 99 d9 3b ba 18 6d 48 55 be 54 e6 04 5b 87 f1 5b 47 0f 07 51 56 ae 6d 53 aa d1 2f 9c a4 53 3f 54 e2 ad 39 6a 46 37 2b 78 80 4e b4 af 56 c2 26 13 72 f9 a5 39 01 67 4d aa 63 1b d5 4a 43 2d 49 8b d5 d7 8a 6d 52 36 65 e7 fb 16 4f c7 fe 8d 57 16 da e3 ad 86 da e7 31 3b 3a af a2 b9 10 04 13 31 3f b2 e0 d8 de 8f 87 74 6e c5 f2 d4 e4 4c 90 17 2f 81 2b d4 1c 4a a7 90 8d 9b 95 19 90 0f 5d 0e 4a a8 82 c7 54 65 b2 5b 24 1a 24 c2 e3 a1 b6 65 0c 1c cf d0 b2 7c ac a8 aa 56 56 9e 61 6a d3 bd 04 31 9d ca 26 5e 5b ab c9 21 35 ff 00 a0 e3 de 5f a5 7f 29 d5 20 f8 60 13 5e e7 97 62 bd bf 8c 1e 2f 4b e4 ea 94 4e b9 6c 9b 49 f0 ee 78 26 55 9f 4b aa 31 cf 13 f4 6a af d1 79 4b Data Ascii: Rir-*$a3BLOn;mHUT[[GQVmS/S?T9jF7+xNV&r9gMcJC-ImR6eOW1;:1?tnL/+J]JTe[$$e\|VVaj1&^[!5_) `^b/KNlIx&UK1jyK
2024-12-12 18:57:41 UTC	1570	IN	Data Raw: b2 c5 76 16 56 d0 bd 05 c3 c5 da 38 cc 37 5b f5 37 98 e8 43 75 73 6a ca e8 43 6a c5 2f a1 7f 3c 33 87 40 7d 50 4a 64 d2 40 f3 02 62 45 d8 f4 d7 97 40 f2 bd 0d d5 e6 7d 06 19 ed f2 e5 7d 2f 92 0d de 0c 0d 13 0a d5 7f 7c d3 d6 d6 1d 65 bb e6 f6 82 ad d3 57 5a fb 0a b3 e6 dc f4 77 4b 29 2a cc 98 1f ea cd cb ca 0b 66 2a ad 68 ea 94 dd 85 b1 f7 64 fa 8b f4 1f 21 98 88 fc 94 9d db 7a 88 cb 0e 1b 03 a9 0a 4b 06 a8 f0 aa c3 2a 2c 90 de 13 c9 1c 5c 54 62 92 3c 84 a5 82 92 d4 91 03 ae a4 e0 ab aa 9d cb e6 5a b5 4f 6e 9c d4 e2 4f d2 31 93 f4 9f ae 70 43 fa eb 99 5f a4 50 2e 54 0f a1 8a c8 ce 48 eb 91 e5 7e 55 49 dd 3b ba 06 1a a6 ba bc ca cf a5 89 80 d9 5f 1b ab 73 29 f7 2c 85 81 6f 6a d4 3a f4 a7 10 55 b1 4e e9 0b b6 f5 7d 54 5e 53 7a bf 2e 9b 5d 3a 12 74 63 51 4b Data Ascii: vV87[7CusjCj/<3@}PJd@bE@}}/\|eWZwK)fhd!zK*,\Tb<ZOnO1pC_P.TH~UI;_s),oj:UN}T^Sz.]:tcQK
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: aa f0 95 58 fa 1e 29 2f 3f af 25 c7 e9 52 3d 2e 5d 9c 96 da b5 0f 86 4a 2a e5 6a 3f 91 19 7f 8a 9c 30 63 e5 b1 91 29 49 8d bd bb 7d 71 95 44 ea b9 ba 6d 56 a5 d3 92 aa de ef 34 58 e7 93 ce 61 a9 3a 05 1a 2e ea 96 03 14 d2 13 3a bb 16 87 e1 77 c8 fe 9c d3 b5 c3 73 9d d0 a4 2d 6a db 4a 8d a6 a9 47 00 65 66 e2 3a ef a0 13 39 65 b2 0c 07 62 df 25 9c 40 92 4b 8d 45 dc 48 20 ad 0e ed 49 3b 3d 49 b4 ce 27 3e f6 e8 64 1e 96 0d 9b 47 00 73 25 55 ba 8f a2 61 96 9c d7 be 8e 5d 67 87 ad 60 c0 a9 25 cd 11 66 f6 ac c1 76 b1 41 5a b8 f6 89 be 16 89 6a 96 5e 7a 63 a2 c1 89 68 55 11 8d 91 c8 1e 05 56 6c 54 ee 7a bc 07 44 d0 5c 18 ca ef 6e 67 ab 23 14 13 1c 1b e2 74 ae cb a0 27 80 db 4a c8 d5 76 37 0b b8 97 27 ac 3d ae f4 a6 5c ed 43 55 aa be 7c 1a 77 e6 27 6d ca 3d 9e 7e Data Ascii: X)/?%R=.]J*j?0c)I}qDmV4Xa:.:ws-jJGef:9eb%@KEH I;=I'>dGs%Ua]g`%fvAZj^zchUVlTzD\ng#t'Jv7'=\CU\|w'm=~
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: c2 78 c0 79 c4 92 70 ab 07 be 10 31 41 07 14 f7 8e 21 e4 71 21 49 70 3b 15 83 8d fc 4d 25 76 0a 75 6a 8c da 1e 7a 52 46 38 e2 9e 2d c6 f2 53 71 48 53 d5 eb 90 a1 c4 54 2e d5 a2 a5 cd 42 9b 51 29 52 0b 7f 79 2e 59 71 51 9e 42 1c 6e 23 8f e3 d1 7c 93 11 e1 20 a5 6d 46 6d a9 0d 48 76 42 42 04 56 02 5c 64 7b 7a 13 ce 10 71 5c 9f 44 60 07 10 80 73 c1 38 b0 9c 51 e7 d1 38 06 11 87 01 ce 07 a7 18 94 8e 7c 46 2f 80 0e 05 1c 48 e7 3a dd 82 ab 2b 34 15 35 3e 28 97 19 4c 90 a4 36 06 01 c0 4f a7 38 57 c6 10 09 f0 18 91 c6 7d 70 23 da 40 1c f5 f6 be 54 a5 9e 0f 39 d9 0d f1 38 a7 9c f1 e7 0f 23 14 ee 79 fb 37 ee 12 30 ff 00 db 3f e3 c7 dd 20 62 c6 25 3e ee 7b 8f 11 8a 6b 12 38 23 0f d7 8e 70 24 8c 03 81 83 00 c5 8f 67 1e 5a 70 c8 51 c5 c8 71 69 6c a9 38 52 56 af 83 cb Data Ascii: xyp1A!q!Ip;M%vujzRF8-SqHST.BQ)Ry.YqQBn#\| mFmHvBBV\d{zq\D`s8Q8\|F/H:+45>(L6O8W}p#@T98#y70? b%>{k8#p$gZpQqil8RV
2024-12-12 18:57:41 UTC	9224	IN	Data Raw: fa 12 70 ff 00 15 32 f2 38 7d 20 e3 ab f3 0e 36 52 02 b1 a7 0a 32 3c e0 ac 77 c5 40 81 c9 3e 8a 57 39 f1 e3 bc a5 0d a8 0c 3f cb 07 8f 05 40 84 05 8c 68 95 e3 aa 3c 14 06 10 1e 53 c8 79 d0 84 05 15 84 a8 f3 c1 e4 ba 39 8d 1f cc a1 27 c5 9e 79 9b 23 c7 2c a6 aa 51 03 8c 27 14 ca 4e 21 18 13 c6 14 8c 0f 21 23 c5 b7 71 70 54 a1 f6 ca 46 1e 40 f0 f1 c7 9b 2a c2 85 60 e7 3f 96 10 a3 9e 18 18 39 f0 93 9f 01 c0 c1 18 18 38 58 23 08 28 c0 39 cf 11 9e 20 67 29 c4 80 73 e4 46 2d 44 7a 03 ee b2 07 a1 18 09 04 92 70 7d 52 33 81 8a f6 cf 33 81 c5 1f 4f 22 33 eb 9e 24 e6 b6 ea 99 b0 52 fd fc 78 5b df 22 81 af 1c 8a b3 f2 58 c4 65 96 59 ff 00 af a8 03 07 a7 d7 38 c3 81 44 60 70 f3 e6 0e 28 03 85 19 f4 ce 70 a4 e0 c0 9e 70 a7 8c 03 ff 00 83 9f e9 1e 84 f1 e8 0e 05 90 3c Data Ascii: p28} 6R2<w@>W9?@h<Sy9'y#,Q'N!!#qpTF@*`?98X#(9 g)sF-Dzp}R33O"3$Rx["XeY8D`p(pp<
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: 2a 18 0e 73 84 62 87 18 73 7b 95 f0 55 e8 d1 fe 7b 40 42 9c 51 20 27 df 10 9f 6f a2 52 f1 53 91 de 73 cd 6a 3c 05 e1 c9 2d f2 ae 40 c8 e8 f3 53 e4 95 b2 9e 73 67 77 e6 b2 9d 68 96 9c 8d 19 c9 8f 6b 1a d3 34 8c 37 20 38 a5 9e 12 db 9c e7 c8 02 9c 70 63 3f c9 23 09 e3 09 18 a4 85 09 5a fd 7c ac 91 d7 b0 1d c9 1d 6c fa 0c 8d 46 ca 3e 49 8a f3 5e 9c fb 02 31 b3 ee 93 88 fe 38 d9 e4 a4 fb 24 f3 94 67 ff 00 b4 94 f8 05 14 a5 0f 30 54 04 75 12 cb 45 28 57 be 04 67 b6 20 24 07 14 00 98 56 ea 90 c2 c6 10 41 09 27 13 15 23 08 18 5a 1c a9 67 87 1f e3 3e e5 38 a5 85 97 09 0b 44 a0 a4 85 83 8a 23 98 d1 9d 56 2e 30 40 73 95 10 be 30 93 9c 12 56 a0 84 a5 44 e1 8c e2 8a 60 28 86 e0 a1 19 e2 94 a4 0e 30 91 9e 58 ac 71 09 56 7c 48 18 58 4a 8f db 0c 4b 41 24 15 60 1c 60 5a Data Ascii: *sbs{U{@BQ 'oRSsj<-@Ssgwhk47 8pc?#Z\|lF>I^18$g0TuE(Wg $VA'#Zg>8D#V.0@s0VD`(0XqV\|HXJKA$``Z
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: 55 f5 76 c7 fe 43 aa e8 74 56 9d 6f d9 96 c2 3f 34 9a dc 34 4c a5 61 32 21 b9 5d 22 aa 9e b2 0c 8a a3 d7 94 2b 85 33 67 da a1 57 2b 61 b9 71 dd 62 5d ea 9a eb 9b 7d 5a 86 53 d3 0b 49 99 aa 86 5a 97 76 d6 c5 2a 9e 58 5b 43 af 61 5a cb b6 df b5 fb 6b 0d d2 7d 16 c7 42 f4 4b 6b 98 0c 57 6e d5 d7 46 5d 73 0c 47 d7 63 58 44 a4 91 0a 8e de 76 df a6 ed 1a e2 58 85 3a 0d 10 fc fa 6b 55 a5 f6 a6 cf a8 44 d4 6c 1f a1 fd 38 d7 74 4d 4f b8 f7 5f d4 fe 80 7a 4d a7 4e 74 44 a2 e7 eb c7 47 36 c5 ef eb e7 eb fa de e9 dd 5f 45 e8 4b 1f fd ba 63 48 9f dc 5b 5d aa 63 69 fd a6 59 73 af bb 31 75 4e 69 3b 98 4f 59 f4 bc 1d f6 1d 1e 87 aa 57 54 44 6e be 82 35 8d fd 6a e5 59 ed b2 25 bb 5f b3 48 6e 42 b7 a6 4b 77 db 34 ab 13 67 b3 49 60 da 6d d6 13 72 ab 66 76 31 8f ba cc 52 8d Data Ascii: UvCtVo?44La2!]"+3gW+aqb]}ZSIZv*X[CaZk}BKkWnF]sGcXDvX:kUDl8tMO_zMNtDG6_EKcH[]ciYs1uNi;OYWTDn5jY%_HnBKw4gI`mrfv1R
2024-12-12 18:57:41 UTC	16384	IN	Data Raw: db a9 6e db bc 3a d6 bd c9 5d dd d5 30 99 d7 3b a7 ab ac 5f ff 00 2d d2 d4 2e bb 13 47 a6 45 8f 73 d8 23 2c 7b 97 b0 dd 73 a6 fb 07 b1 36 4d eb 61 87 bb 5f ec 71 74 3d 9e 8e be e7 a2 fb 6b 7f b2 d4 e8 b7 f9 5d 7b af 75 e4 ad e6 d6 c2 63 91 f6 be b6 d6 a9 a1 de ec 95 5a 76 a5 0b b5 61 7e bc 59 eb df eb 7a 8f 5e 47 ee 37 fb 77 44 45 fe ca a6 96 e9 f4 c9 87 69 14 24 c1 72 4e a5 11 a0 d4 48 89 e6 34 60 92 d3 6a 4b 54 f5 35 92 51 2b 55 a6 7d 32 f4 e8 65 27 4e 7d 85 6f e8 b8 8d 95 1b 03 4c a5 bb 6d 66 59 d7 2b 5b 5a f5 e8 8f 21 34 ec fb d7 b4 9f 0d 85 a6 f3 6d 4a 86 6f c6 53 69 fc 65 5b ce 55 d3 2d 4f f5 f5 6b ed 31 ab a5 28 6e 84 23 e2 d8 15 e0 ad 95 d4 a1 ee c7 b8 2d b4 d2 1d 7e 5f 5c 45 76 c9 db 4b 75 99 17 b5 d7 16 b7 8d d3 ec a7 b1 59 9a b6 1d 7a 25 6b f3 Data Ascii: n:]0;_-.GEs#,{s6Ma_qt=k]{ucZva~Yz^G7wDEi$rNH4`jKT5Q+U}2e'N}oLmfY+[Z!4mJoSie[U-Ok1(n#-~_\EvKuYz%k
2024-12-12 18:57:41 UTC	16320	IN	Data Raw: 3d 88 ec ce bd 9e 6a 77 9d 5a 16 39 6b aa ca 71 c7 35 09 ef 5e d3 ea 73 6b 68 de 75 d8 84 fb 92 48 3c 0c 52 d3 c2 d4 54 16 f7 8a 29 6b a8 6c 63 5b 54 55 56 bf 15 b2 88 ca 03 82 d8 24 21 20 1e 30 f9 f9 20 2b 99 7c f8 30 40 8f ee 43 2d 2d 4f 48 ae 9d 0d 25 4d f9 29 c6 c1 f9 92 71 52 78 c3 30 0c 13 13 9d 15 37 9e f8 4e c0 2a f6 bb 8e d1 b0 46 c5 b7 ff 00 fd 2d 4e 81 7d 5f 5e e4 a5 b5 2a 63 73 a1 a6 ce 43 70 e0 86 a7 d8 31 1a 87 5d 8a d4 44 cc 5b aa 92 fb c9 69 df b6 ac da b5 4a bd 92 b3 ab fb 17 63 d5 1c 6e d3 f3 f7 7a 2e db 12 ef 37 ae c0 5e ba f6 98 a9 5d 80 99 16 0d 74 e7 58 6a 16 d4 3b 66 97 bb 41 a4 73 61 b5 ab d4 34 4d 9b 61 d5 e2 d0 33 2b 7d a0 aa a6 7e 07 62 ea 95 7a a6 af 2e 23 88 b0 de 36 17 ea b4 e4 9b ad 3e 9b 5b ab a6 bf 9a 7b a3 73 77 6b a6 5c Data Ascii: =jwZ9kq5^skhuH<RT)klc[TUV$! 0 +\|0@C--OH%M)qRx07NF-N}_^csCp1]D[iJcnz.7^]tXj;fAsa4Ma3+}~bz.#6>[{swk\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49875	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:40 UTC	840	OUT	GET /img/desktop/checkboxInner.png HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:41 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: tb0lIx8DD1UkoC7+K+DNRii8MqzLafQeYEOeKyTIW0UXbYLe9OiKM0/tN4RfSWP3C3OaYc077kk= x-amz-request-id: B3ZJ1KY5PQ9DB6Q6 Content-Type: image/png Server: AmazonS3 X-LLID: 2d4388a7452eee2bbf9c5d0b513cec0e Age: 12178912 Date: Thu, 12 Dec 2024 18:57:41 GMT Last-Modified: Wed, 02 Aug 2023 20:44:08 GMT Content-Length: 1079 Connection: close
2024-12-12 18:57:41 UTC	1079	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 35 37 37 32 2c 20 32 30 31 34 2f 30 31 2f 31 33 2d 31 39 3a 34 34 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49877	157.240.196.15	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:40 UTC	356	OUT	GET /en_US/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:41 UTC	1826	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 19096dadf27736bb4e0f7ac6862d07ba ETag: "9fce535721db1f4cf142e75c82ec4bdd" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: GQltrfJ3NrtOD3rGhi0Hug== Expires: Thu, 12 Dec 2024 19:07:11 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2024-12-12 18:57:41 UTC	877	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-12-12 18:57:41 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-12-12 18:57:41 UTC	3092	IN	Data Raw: 2a 31 37 33 34 30 32 39 32 33 31 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 38 38 32 31 35 39 36 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1734029231,,JIT Construction: v1018821596,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49881	104.18.24.111	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:40 UTC	660	OUT	POST /u/f3815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2 HTTP/1.1 Host: eagerknight.com Connection: keep-alive Content-Length: 286 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ebaumsworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:40 UTC	286	OUT	Data Raw: 7b 22 63 22 3a 7b 22 64 62 6c 22 3a 74 72 75 65 2c 22 64 69 73 22 3a 31 39 2c 22 64 66 6c 61 67 73 22 3a 38 37 31 33 2c 22 64 74 22 3a 31 35 30 30 37 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 2f 22 2c 22 70 69 64 22 3a 22 41 2d 36 33 30 46 44 43 38 30 41 36 30 30 32 31 39 45 44 46 42 30 41 43 43 43 2d 32 22 2c 22 6a 73 76 22 3a 22 32 2e 35 38 2e 30 22 2c 22 75 74 63 6f 22 3a 2d 31 38 30 30 30 2c 22 76 65 72 62 22 3a 31 2c 22 73 73 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 6d 6f 72 69 7a 65 6d 61 74 63 68 2e 63 6f 6d 2f 76 32 6b 69 73 75 55 49 49 35 57 41 2d 48 52 35 50 37 31 43 36 62 55 79 64 76 4d 77 66 4d 50 4a 56 55 6a 38 58 4d 58 48 6a 33 53 5f 68 48 46 56 6c 46 54 41 63 39 6b 41 22 7d 2c 22 62 22 3a 5b Data Ascii: {"c":{"dbl":true,"dis":19,"dflags":8713,"dt":15007,"uri":"https://ebaumsworld.com/","pid":"A-630FDC80A600219EDFB0ACCC-2","jsv":"2.58.0","utco":-18000,"verb":1,"ss":"https://memorizematch.com/v2kisuUII5WA-HR5P71C6bUydvMwfMPJVUj8XMXHj3S_hHFVlFTAc9kA"},"b":[
2024-12-12 18:57:41 UTC	850	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:41 GMT Content-Type: application/json; charset=utf-8 Content-Length: 295 Connection: close access-control-allow-credentials: true access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie access-control-allow-methods: POST, OPTIONS access-control-allow-origin: https://ebaumsworld.com Cache-Control: no-cache, no-store, must-revalidate expires: Thu, 12 Dec 2024 18:57:40 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding, Origin x-buildname: hoothoot x-buildnumber: 1553448542 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8f0ff107feed7c78-EWR
2024-12-12 18:57:41 UTC	295	IN	Data Raw: 7b 22 6e 65 77 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 49 44 22 3a 22 35 2d 36 66 35 63 66 38 35 36 33 64 30 61 35 36 37 63 37 33 64 62 64 38 30 61 32 65 37 33 37 34 61 35 2d 36 37 36 33 36 35 32 64 37 35 37 33 32 64 36 35 36 31 37 33 37 34 33 31 2d 30 22 2c 22 6e 6f 77 22 3a 31 37 33 34 30 32 39 38 36 31 2c 22 69 64 73 22 3a 5b 7b 22 69 64 22 3a 22 30 75 66 36 38 62 34 33 65 39 62 38 62 61 31 31 65 66 38 33 63 32 39 35 64 38 31 34 64 66 32 64 39 35 22 2c 22 74 79 70 65 22 3a 22 70 61 67 65 76 69 65 77 22 7d 5d 2c 22 6c 6f 63 61 6c 44 61 74 61 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 53 74 61 74 75 73 22 3a 7b 22 6b 6e 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 72 65 67 69 73 74 65 72 65 64 22 3a 66 61 6c 73 65 2c 22 73 75 62 73 63 72 69 Data Ascii: {"newSession":true,"sessionID":"5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0","now":1734029861,"ids":[{"id":"0uf68b43e9b8ba11ef83c295d814df2d95","type":"pageview"}],"localData":"","visitorStatus":{"known":false,"registered":false,"subscri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49879	141.95.33.120	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:40 UTC	415	OUT	GET /g/v2/429.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=bd7138c8-df01-7346-84c9-ca1f86d2a58d#1734029855191#2
2024-12-12 18:57:41 UTC	185	IN	HTTP/1.1 400 Bad Request date: Thu, 12 Dec 2024 18:57:41 GMT transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-12-12 18:57:41 UTC	546	IN	Data Raw: 32 31 42 0d 0a 52 65 71 75 69 72 65 64 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 69 73 20 6d 69 73 73 69 6e 67 3a 20 70 75 62 6c 69 63 20 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 68 74 74 70 2e 52 65 73 70 6f 6e 73 65 45 6e 74 69 74 79 3c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 73 70 6f 6e 73 65 44 74 6f 3e 20 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 46 65 74 63 68 43 6f 6e 74 72 6f 6c 6c 65 72 2e 66 65 74 63 68 43 6c 69 65 6e 74 54 6f 53 65 72 76 65 72 28 6a 61 76 61 2e 6c 61 6e 67 2e 4c 6f 6e 67 2c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 71 75 65 73 74 42 6f 64 79 2c 6a 61 76 61 2e 6c 61 6e 67 2e 49 6e 74 65 67 65 72 2c 6a 61 76 61 2e 6c 61 6e 67 2e Data Ascii: 21BRequired request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.FetchController.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang.
2024-12-12 18:57:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49880	13.227.8.2	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:41 UTC	547	OUT	GET /modules.675199526fcb21f102e5.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:42 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 227718 Connection: close Date: Tue, 10 Dec 2024 14:10:24 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "acb4d2a336af2d9eae3deb70e89cb560" Last-Modified: Tue, 10 Dec 2024 14:06:32 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1484e663ceddae5460cfdb19a3c7d448.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: 8RvyT8xFkauxDzOnFBpXJgXZ-MDZy0FCXfGIg0YAJzL6YknVT_mK5A== Age: 190037
2024-12-12 18:57:42 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 37 35 31 39 39 35 32 36 66 63 62 32 31 66 31 30 32 65 35 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.675199526fcb21f102e5.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 6f 67 2e 64 65 62 75 67 28 22 55 73 65 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 41 50 49 20 63 61 6c 6c 20 73 75 63 63 65 73 73 66 75 6c 2e 22 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 65 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 29 2c 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 55 73 65 72 20 41 74 74 72 69 62 75 74 65 73 20 76 61 6c 69 64 61 74 69 6f 6e 20 41 50 49 20 63 61 6c 6c 20 66 61 69 6c 65 64 2e 22 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 26 26 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 7c 7c 22 75 6e 6b 6e 6f 77 6e 5f 66 61 69 6c 75 72 65 22 29 7d 29 2c 22 Data Ascii: og.debug("User validation API call successful.","userAttributes",e)}),"userAttributes"),hj.tryCatch((function(e){hj.log.debug("User Attributes validation API call failed.","userAttributes",e.responseText&&JSON.parse(e.responseText)\|\|"unknown_failure")}),"
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 29 7d 7d 7d 28 29 2c 6e 3d 76 6f 69 64 20 30 21 3d 3d 74 2c 6f 3d 6e 75 6c 6c 21 3d 3d 69 2e 67 65 74 28 29 3b 72 65 74 75 72 6e 20 6e 26 26 69 2e 73 65 74 28 7b 72 65 66 65 72 72 65 72 3a 74 7d 29 2c 6f 7c 7c 6e 7d 7d 2c 36 31 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 3d 28 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 29 7d 29 2e 74 65 73 74 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 21 6e 61 76 69 67 61 74 6f 72 29 72 65 74 75 72 6e 22 4e 6f 20 55 73 65 72 2d 41 67 65 6e 74 20 50 72 6f 76 69 64 65 64 22 3b 69 66 28 6e 75 6c 6c 21 Data Ascii: )}}}(),n=void 0!==t,o=null!==i.get();return n&&i.set({referrer:t}),o\|\|n}},6175:function(e,t,n){"use strict";n.d(t,{K:function(){return i}});var r,o,i=((o=function(){return r()}).test=r=function(){var e;if(!navigator)return"No User-Agent Provided";if(null!
2024-12-12 18:57:42 UTC	15899	IN	Data Raw: 69 67 6e 65 64 53 6c 6f 74 3b 29 73 3d 73 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 3b 72 65 74 75 72 6e 20 75 28 68 6a 2e 68 71 28 73 29 2e 70 61 72 65 6e 74 28 29 2c 22 3e 22 2b 6f 2b 6e 29 7d 72 65 74 75 72 6e 20 75 28 65 2e 70 61 72 65 6e 74 28 29 2c 22 3e 22 2b 6f 2b 6e 29 7d 29 2c 22 63 6f 6d 6d 6f 6e 22 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 22 29 29 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 65 2e 69 6e 64 65 78 4f 66 28 22 79 75 69 5f 22 29 3e 2d 31 29 26 26 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 6e 2c 22 5c 5c 24 31 22 29 29 2e 73 70 6c 69 74 28 2f Data Ascii: ignedSlot;)s=s.assignedSlot;return u(hj.hq(s).parent(),">"+o+n)}return u(e.parent(),">"+o+n)}),"common"),l=function(e){var r=[];return!(void 0===(e=hj.hq.trim((e\|\|"").replace(/\s\s+/g," ")))\|\|""===e\|\|e.indexOf("yui_")>-1)&&((e=e.replace(n,"\\$1")).split(/
2024-12-12 18:57:42 UTC	12792	IN	Data Raw: 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 46 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 76 61 72 20 47 3d 21 31 2c 59 3d 28 30 2c 57 2e 74 55 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 61 3b 28 30 2c 63 2e 4e 29 28 28 61 3d 7b 7d 2c 61 5b 69 2e 73 2e 52 45 43 4f 52 44 49 4e 47 5f 48 45 4c Data Ascii: d():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},F.apply(this,arguments)}var G=!1,Y=(0,W.tU)((function(e,t,n,r,o){var a;(0,c.N)((a={},a[i.s.RECORDING_HEL
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 74 2e 63 61 6e 55 73 65 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 29 69 66 28 74 29 7b 76 61 72 20 72 3d 61 28 29 3b 69 66 28 30 21 3d 3d 72 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 69 3d 72 2e 66 69 6e 64 49 6e 64 65 78 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 74 7d 29 29 3b 2d 31 21 3d 3d 69 26 26 28 72 5b 69 5d 3d 56 28 56 28 7b 7d 2c 72 5b 69 5d 29 2c 7b 7d 2c 7b 70 61 67 65 56 69 73 69 74 4b 65 79 3a 6e 7d 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 6f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 29 29 7d 7d 65 6c 73 65 20 68 6a 2e 65 78 63 65 70 74 69 6f 6e 73 2e 6c 6f 67 28 6e 65 77 20 45 72 72 6f 72 28 22 56 69 65 77 70 6f 72 74 20 49 44 20 77 61 73 20 Data Ascii: t.canUseLocalStorage())if(t){var r=a();if(0!==r.length){var i=r.findIndex((function(e){return e.id===t}));-1!==i&&(r[i]=V(V({},r[i]),{},{pageVisitKey:n}),window.localStorage.setItem(o,JSON.stringify(r)))}}else hj.exceptions.log(new Error("Viewport ID was
2024-12-12 18:57:42 UTC	2804	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 6f 6d 70 6f 73 65 64 7c 7c 68 6a 2e 65 76 65 6e 74 2e 73 69 67 6e 61 6c 28 22 73 68 61 64 6f 77 2d 65 76 65 6e 74 3a 22 2e 63 6f 6e 63 61 74 28 65 2e 74 79 70 65 29 2c 65 29 7d 29 2c 21 30 29 7d 29 29 7d 29 2c 22 54 72 65 65 4d 69 72 72 6f 72 43 6c 69 65 6e 74 2e 70 72 6f 70 61 67 61 74 65 4e 6f 6e 43 6f 6d 70 6f 73 65 64 45 76 65 6e 74 73 22 29 2c 74 68 69 73 2e 6c 69 73 74 65 6e 54 6f 4d 75 74 61 74 69 6f 6e 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 2e 6d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 2e 70 75 73 68 28 6e 65 77 20 63 65 28 7b 72 6f 6f 74 4e 6f 64 65 3a 65 2c 63 Data Ascii: tion(t){e.addEventListener(t,(function(e){e.composed\|\|hj.event.signal("shadow-event:".concat(e.type),e)}),!0)}))}),"TreeMirrorClient.propagateNonComposedEvents"),this.listenToMutations=hj.tryCatch((function(e){o.mutationSummaries.push(new ce({rootNode:e,c
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 6f 75 6c 64 53 75 70 70 72 65 73 73 4e 6f 64 65 2c 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6e 2e 63 6f 6e 74 65 6e 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 3a 6f 3d 68 6a 2e 6d 65 74 72 69 63 73 2e 74 69 6d 65 28 29 2c 72 3d 68 6a 2e 70 72 69 76 61 63 79 2e 67 65 74 53 75 70 70 72 65 73 73 65 64 4e 6f 64 65 28 69 2c 61 29 2c 68 6a 2e 6d 65 74 72 69 63 73 2e 74 69 6d 65 49 6e 63 72 28 22 74 61 73 6b 2d 65 78 65 63 75 74 69 6f 6e 2d 74 69 6d 65 22 2c 7b 74 61 67 3a 7b 74 61 73 6b 3a 22 6e 6f 64 65 2d 73 75 70 70 72 65 73 73 69 6f 6e 22 7d 2c 73 74 61 72 74 3a 6f 7d 29 2c 61 3d 72 2e 73 68 6f 75 6c 64 53 75 70 70 72 65 73 73 4e 6f 64 65 2c 73 2e 74 61 67 4e 61 6d 65 3d 72 2e 6e 6f 64 65 2e 74 61 67 4e 61 6d Data Ascii: ouldSuppressNode,s.textContent=n.content;break;case Node.ELEMENT_NODE:o=hj.metrics.time(),r=hj.privacy.getSuppressedNode(i,a),hj.metrics.timeIncr("task-execution-time",{tag:{task:"node-suppression"},start:o}),a=r.shouldSuppressNode,s.tagName=r.node.tagNam
2024-12-12 18:57:42 UTC	9200	IN	Data Raw: 28 30 2c 72 2e 6f 4c 29 28 65 2c 74 68 69 73 29 7d 3b 74 2e 6e 6f 64 65 49 64 3d 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 67 65 74 4e 6f 64 65 49 64 28 74 68 69 73 29 2c 74 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 3d 6e 75 6c 6c 2c 74 2e 69 73 4f 6e 44 6f 63 75 6d 65 6e 74 3d 21 30 2c 61 28 74 29 7d 7d 29 2c 69 3d 21 30 29 7d 2c 65 2e 72 65 67 69 73 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 70 75 73 68 28 65 29 7d 2c 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 68 61 64 6f 77 52 6f 6f 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 22 2c 6e 29 2c 6e 3d 6e 75 6c 6c 2c 69 3d 21 31 29 2c 6f 26 26 28 Data Ascii: (0,r.oL)(e,this)};t.nodeId=hj.treeMirror.getNodeId(this),t.parentSelector=null,t.isOnDocument=!0,a(t)}}),i=!0)},e.register=function(e){t.push(e)},e.destroy=function(){n&&(Object.defineProperty(ShadowRoot.prototype,"adoptedStyleSheets",n),n=null,i=!1),o&&(
2024-12-12 18:57:42 UTC	7972	IN	Data Raw: 2c 76 6f 69 64 20 30 3d 3d 3d 65 5b 72 5d 2e 61 26 26 76 6f 69 64 20 30 3d 3d 3d 65 5b 72 5d 2e 62 26 26 76 6f 69 64 20 30 3d 3d 3d 65 5b 72 5d 2e 63 26 26 76 6f 69 64 20 30 3d 3d 3d 65 5b 72 5d 2e 64 26 26 28 65 5b 72 5d 3d 6e 75 6c 6c 29 7d 29 29 2c 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 29 29 7d 29 2c 22 64 61 74 61 22 29 3b 76 61 72 20 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 6d 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 6a 3b 72 65 74 75 72 6e 20 69 2e 66 5f 2e 6e 6f 77 28 29 2d 74 3e 31 38 65 35 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 73 74 6f 72 65 2e 72 65 63 6f 72 64 69 6e 67 2e 73 65 74 28 22 61 63 74 69 76 65 22 2c 21 31 Data Ascii: ,void 0===e[r].a&&void 0===e[r].b&&void 0===e[r].c&&void 0===e[r].d&&(e[r]=null)})),e.filter((function(e){return e}))}),"data");var C=function(){var e,t=null!==(e=m)&&void 0!==e?e:j;return i.f_.now()-t>18e5},E=function(){hj.store.recording.set("active",!1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49883	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:41 UTC	1089	OUT	GET /thumbs/2024/01/09/043149/87494120/cringe.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:42 UTC	372	IN	HTTP/1.1 200 OK x-amz-id-2: P2lz2pr7RJxeWBrjabdIU1whyX27cQGmMdWDlKYCvu/9+FNXzWM2Ssrx51sp5pbd5q1BwNYHOW4= x-amz-request-id: YRK4GNXBRNBHP3WA Content-Type: image/jpeg Server: AmazonS3 X-LLID: a7c67a3168193b124c0b075af6e4aa88 Age: 29193951 Date: Thu, 12 Dec 2024 18:57:41 GMT Last-Modified: Tue, 09 Jan 2024 21:31:51 GMT Content-Length: 218671 Connection: close
2024-12-12 18:57:42 UTC	14077	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 55 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 Data Ascii: ExifII*DuckyU/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF x
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 2f d4 cd 5e 1c b2 79 aa 3a 04 cc 14 ad 23 a8 07 69 3d 44 4a 16 06 7f d1 1f 8a b2 3c 5b eb c9 ea 1b 1c be e4 0e 66 b9 25 be d7 5b 49 95 64 ca 20 31 5d 76 aa a8 a4 72 a4 a0 23 c2 94 6f 2b d8 9e c0 36 f6 45 88 12 25 84 fa 37 fa 9e fd 1e fd 5f 72 2f 31 fd 3b 70 1b 4f 30 7a 6c e5 aa 8f d4 ee 18 8d c1 e7 69 2a ac 95 fe 64 d2 a4 38 d1 0a 29 09 9a 7b a4 61 2c 34 16 67 e9 dd ff 00 df a0 e6 0e 71 b8 f3 2f af a1 60 e3 ae 10 0d 94 d9 f8 c3 1f a2 6a a2 ab ce 90 48 5b b7 05 cd d9 0e be de 90 a3 24 5f 0d 7b 60 18 dc 00 64 00 6a 00 0b 5c 4c a9 dc ff 00 95 5f b2 28 ca c7 c7 b9 1b 38 0a 56 b1 db b8 fe d8 e3 76 59 b9 6c 70 99 8d 15 f6 4a 30 26 37 16 c1 14 e6 d0 0a 3f 94 85 0f 7c 0d c9 6d 34 2a 47 af 4c 2d da 7c de 97 2b 48 93 15 4c 91 bb fe 24 cb b2 13 89 7d 4a fa 12 a5 20 Data Ascii: /^y:#i=DJ<[f%[Id 1]vr#o+6E%7_r/1;pO0zlid8){a,4gq/`jH[$_{`dj\L_(8VvYlpJ0&7?\|m4GL-\|+HL$}J
2024-12-12 18:57:42 UTC	1574	IN	Data Raw: 40 cc 84 15 8f 33 fc b1 a8 03 b4 c2 b7 22 d9 b4 42 3e ba 30 2f ea 0e 31 a4 c8 18 51 5d 5d 03 fb de 40 99 da 14 74 3e e8 4b a1 d3 29 bb 69 3e 71 0a 07 4e b2 ed 8a 59 7a 0c 07 00 98 94 88 9f 58 46 c9 03 f3 92 4c e1 94 95 33 b4 b8 14 8d b2 d6 70 c9 10 0a d8 27 5e d1 dd 13 57 a9 72 0d a1 81 20 4f 5e a6 18 86 0c 94 e9 3f fb 22 60 b1 3d 01 19 00 92 44 4d 49 80 76 da 21 bf 9b 48 f1 21 40 89 77 c3 22 bb 54 7d da ae 6f 5c e9 58 79 d3 f9 8d 80 47 6f 8a 2c 4e 44 74 28 97 d6 ab 1d bd b7 89 5b 6f f4 ad ee b6 ad c3 e7 90 0c c1 3d b1 2c 65 5d 0a 39 4d 7e a8 ab c3 6d cd 50 2e 55 a8 3b 5d 6c 1f 0a 87 48 82 d4 86 67 3d 62 34 77 fc 05 ea 8b da 11 49 71 63 c7 4f 51 a4 94 65 d0 1e b3 9c 4a b4 39 1d 8c ee 2a bd 58 2c d6 7a 3a 2b c2 12 97 d2 52 a7 56 81 fe 6e 9d b0 37 2c 07 b6 Data Ascii: @3"B>0/1Q]]@t>K)i>qNYzXFL3p'^Wr O^?"`=DMIv!H!@w"T}o\XyGo,NDt([o=,e]9M~mP.U;]lHg=b4wIqcOQeJ9*X,z:+RVn7,
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 47 74 00 68 a6 70 0b 06 c0 94 04 a5 06 00 00 d2 02 4c 80 0c 52 67 00 1c 79 5e c8 08 83 3c ad 7a 69 01 30 8d 84 10 24 04 04 23 7b 09 49 06 02 4d 04 10 00 80 4e 26 d2 92 0c e0 1d 1b 90 06 70 03 67 2e 19 a2 49 eb 01 12 32 ed 7c 15 c4 58 e6 5e fe 7f 8f 62 f6 da 4c e2 ad 4a 7a aa f0 c5 23 29 ac 71 c5 09 15 97 65 be 7f 6c 00 d4 8f 24 09 20 13 d6 42 70 0a d1 b0 94 83 a0 d4 c0 09 1b 00 98 07 36 40 23 58 01 a9 13 6f d6 1b 1e 4b 42 f5 87 21 a2 66 ba cf 54 82 dd 45 2d 5b 69 75 97 51 da 95 a5 60 82 20 22 08 e2 cd e8 7b d1 e6 39 91 1c b6 c9 c6 98 f5 3e 4a 56 5d 35 88 b6 53 15 ef 26 64 89 a4 81 ac 4a 64 34 4a 34 74 74 f4 8d a5 aa 74 86 e9 d2 02 50 da 00 4a 52 07 40 00 d0 08 8b 02 41 82 52 7a c4 24 31 87 64 49 0d 1b 1d 34 80 11 b8 09 32 00 32 00 34 54 3a 18 00 cd c2 00 Data Ascii: GthpLRgy^<zi0$#{IMN&pg.I2\|X^bLJz#)qel$ Bp6@#XoKB!fTE-[iuQ` "{9>JV]5S&dJd4J4tttPJR@ARz$1dI4224T:
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: b6 29 b2 1d 58 4a c1 79 7d 79 16 52 53 48 e1 fd 25 e2 50 85 2d 53 20 2b 43 39 c4 78 d3 07 68 04 7e ed 62 b1 e6 95 36 cb ad 6a 9f 5b ca de c7 88 c9 33 03 4d 60 75 82 ab e4 23 ce 6b e3 bb 33 9f 33 7f bb bd b9 2b 49 5b 6e 27 f9 04 e7 d9 13 05 6f 3b 41 bf 4b 0e 64 77 ab 6b d6 4c 60 97 d9 4b 84 2c 93 fc a0 e9 15 d9 17 d3 2b 26 eb 16 17 6f 71 2b b2 e5 2d a9 93 5a b1 b9 45 46 72 3e 13 22 62 9b 17 ab 0a 35 34 8c e0 b4 f5 76 2c 57 f3 ad c9 65 48 0a 5f 89 52 26 7a 93 05 18 6e 55 9e 46 ac aa a5 bc d4 d4 54 a7 65 39 72 7b 65 db 38 d1 25 36 ae a4 d5 e8 7f 28 bc 5b f9 21 ba 75 d5 ba 28 ea 13 f9 8d 29 c2 53 e2 12 d0 13 a4 49 55 b6 2f 15 9f 26 a2 69 c6 d8 a9 7b 45 2e 42 66 67 6f bc 98 93 3c 8a 57 0b 8b 35 ac 29 ea 23 3d ab 29 9f 78 10 e9 0a 10 2f 85 a1 45 4b da a1 16 d5 Data Ascii: )XJy}yRSH%P-S +C9xh~b6j[3M`u#k33+I[n'o;AKdwkL`K,+&oq+-ZEFr>"b54v,WeH_R&znUFTe9r{e8%6([!u()SIU/&i{E.Bfgo<W5)#=)x/EK
2024-12-12 18:57:42 UTC	13568	IN	Data Raw: a1 4d 3e d1 d1 49 23 a8 8d 35 39 f7 dc 74 5d 28 6c 15 d4 a5 ea 72 14 b2 27 bc 9d 7a 45 e2 31 a8 12 96 df 2d 9e c9 81 2e e8 65 52 24 51 a4 79 1b 36 11 e0 e8 49 88 e0 02 1e 43 8f a2 af 7a 99 d4 19 98 65 8a 49 23 6e 51 e1 ea 1c ff 00 1e 5d ad e4 01 73 40 25 87 65 a8 22 21 e0 12 f6 2a ce 43 80 5e b1 8b a5 4d b2 f4 da 98 7e 9c 9e ba 6e 4f 7c 55 e0 11 3d 46 b5 e2 c8 bb a6 35 55 71 a5 51 53 28 25 52 eb d2 2e c3 8f 51 f2 af e2 38 fd 0a 58 ed 57 9b d5 73 ca 77 6b e1 65 2e 20 2b 69 97 df 1e 87 a9 53 c8 fb 35 05 b2 a5 c2 f1 3a 46 d2 c2 c9 52 94 54 a9 97 3b cc f5 d6 3d 37 5e a7 97 ca e1 8a 98 be 25 8d d0 5c 3e 72 9e 4a 5a d6 99 05 12 44 bb 74 33 8d 19 2b 26 bc 16 20 8f 58 59 8d a6 d5 9a 33 47 65 61 08 a8 d3 77 96 00 4e e9 f5 31 e7 bb ea 13 3d 0f 52 e4 7c dd f5 ca 9b Data Ascii: M>I#59t](lr'zE1-.eR$Qy6ICzeI#nQ]s@%e"!*C^M~nO\|U=F5UqQS(%R.Q8XWswke. +iS5:FRT;=7^%\>rJZDt3+& XY3GeawN1=R\|
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 46 3a ff 00 27 03 3b 88 f9 2e f7 c4 19 ed 83 92 b1 89 2a ef 68 79 aa a6 e7 22 15 b5 53 96 b1 ea 7d 87 49 f6 31 41 bb a3 9b c1 91 7f a9 ee 47 07 fa 8e 7b 9c 78 76 cb ca 55 ad a1 8a cb 9b 41 55 0d 35 f0 a5 c4 9d aa 8f cf 5f 61 e8 be be 66 7d 23 d6 67 f2 29 43 d1 ab bd 45 25 82 a6 e1 6d 1e 6d dd 69 50 6d 08 3d 74 d2 5e d8 e7 62 c8 ac 8e d3 72 47 5f d2 3e a4 b2 5a 54 bf 70 c8 4e 33 64 0e ad df 2d a4 85 3a e0 20 00 54 a3 d0 08 d1 89 26 f5 27 1e 8f 51 a5 90 3f 9a 59 2f 49 b4 5b 79 0d 2f d5 4e 6b 15 ad c8 fb 64 44 76 71 61 c6 d6 e7 7b ad 9a ad 43 06 73 30 e7 db 42 d2 ab 3d 75 2d f2 95 24 2d 49 00 a7 78 ee 8b 56 2a ad 8c 7d ae bd 5b d0 58 c7 bd 4e 56 b5 56 8b 2e 59 6b 5d b2 e8 4c 9c a7 da 4b 6b 9f 6a 55 14 64 46 47 89 21 db 70 c8 68 ab 10 d5 e6 d8 93 e5 2c ce 4a Data Ascii: F:';.hy"S}I1AG{xvUAU5_af}#g)CE%mmiPm=t^brG_>ZTpN3d-: T&'Q?Y/I[y/NkdDvqa{Cs0B=u-$-IxV}[XNVV.Yk]LKkjUdFG!ph,J
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 6f c2 92 42 be 9f 29 ea 2f b5 37 3c a2 a5 21 57 7b 83 ca 74 b8 b5 4a 63 71 48 eb ec 11 ec ea d6 2a 28 3e 5f ed 73 73 c8 c9 59 9a 9a 3b 4d 21 43 0e 1f 3a 7a 99 eb 3f b2 1f 17 61 d9 ec 72 1b 1a b7 2b 6e 48 e6 48 9b 95 7a 9a ab c7 6a 24 50 12 e2 fc c6 54 3b 74 3a 47 a7 e9 75 a9 6a b6 d1 51 64 b8 07 d5 af 21 71 35 99 ac 59 0e aa ef 87 24 6c f9 4b 81 51 71 09 26 67 cb 5a fd ba c6 1c de b6 96 72 62 ed 60 f2 22 c7 60 5e a1 b8 e7 91 3c b6 a9 6a 0d 1d dc 8f 15 25 48 da 52 7b 82 8e 86 32 3c 2e 9a 41 e3 fb 5e bd e2 b4 8f c4 04 b8 80 e3 66 68 22 60 83 39 c0 94 18 9d a4 30 84 02 9e ba ca 5f 6c 43 b1 53 d4 ed 29 09 11 5a 72 54 cd f6 4a 23 91 28 d2 93 b8 4b b0 f7 44 5d 83 42 2e 48 da 5c b8 5b db 1a ac 3c 0f b2 40 13 17 75 6d a3 28 b6 e2 ab 61 2a 00 0f 82 2b a8 25 26 c3 Data Ascii: oB)/7<!W{tJcqH(>_ssY;M!C:z?ar+nHHzj$PT;t:GujQd!q5Y$lKQq&gZrb`"`^<j%HR{2<.A^fh"`90_lCS)ZrTJ#(KD]B.H\[<@um(a+%&
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 4c 36 72 3b 3e 9d c4 c1 0f 66 bc 19 c8 56 27 4b d5 b4 8e 38 d2 7a 49 3a c7 a1 af b2 a7 e4 f3 b9 bd 65 86 8b d8 be 50 d3 e1 b6 a8 dd 49 26 52 da 46 b1 a2 be c2 9f 93 25 bd 6d d0 aa ce 0f 93 16 c1 53 2b 4a 88 ed 11 72 ed d6 da 26 55 6e ad a8 a5 84 ee 98 fd f2 d6 42 6b 50 bd 8a d0 e8 67 16 2c 92 22 62 6b d5 2f 36 f2 42 5b 59 52 8e c4 a7 69 9c c4 69 a5 64 ad b1 cb 86 e0 5c 89 99 5d d9 b5 59 6d eb 4f 99 20 5d 79 3b 50 90 4c a7 b8 e9 db 16 aa 12 9a 2d 57 03 7a 31 a7 e2 db 95 26 79 9f d6 22 e9 75 68 07 13 4e d8 01 a6 d4 48 54 e4 3a 91 12 a8 a4 56 a4 b1 36 6e 44 a9 c7 6b 45 d7 14 ad 5d 0d 49 3b 8b 33 21 b2 7a ea 3a 4a 1b 2e 1a 35 b0 27 04 cd 80 fa b9 45 75 91 fb 2d f8 21 bb cb a9 92 ab 47 85 32 03 59 88 e5 db a0 a7 44 3a b1 5c 7d 59 61 5c a3 ce 37 fa 0c 53 03 2f Data Ascii: L6r;>fV'K8zI:ePI&RF%mS+Jr&UnBkPg,"bk/6B[YRiid\]YmO ]y;PL-Wz1&y"uhNHT:V6nDkE]I;3!z:J.5'Eu-!G2YD:\}Ya\7S/
2024-12-12 18:57:42 UTC	16320	IN	Data Raw: 4a 74 31 0f 50 81 73 04 f5 33 ea 6f 8c 90 2d 5c 85 4e ce 59 69 6c 14 b8 b9 2d 8a bd a9 1a 9d c2 61 46 21 21 5a 81 f7 c7 de b4 38 6b 3c a9 36 ea b3 53 8f e4 4e 78 17 47 74 12 6c 2a 7a 6d 73 f8 c5 a9 0c 90 6f 3c fe 9f cd ec 35 58 ed fd 0d 55 63 2f 25 47 78 52 54 92 0e a0 a4 fb 35 87 4e 07 4e 06 df d3 e7 88 ec 9c 2f 6c ce af 95 b5 8d 8b 63 d5 cd 9a 7a c7 94 12 91 48 d3 65 46 64 9f 84 29 46 40 43 92 d8 27 29 7a db a3 c8 72 17 b0 6e 05 b7 aa ae e0 de f6 57 7a 73 4a 74 a8 68 54 84 89 ee d7 a4 23 a9 5b 44 27 5d c2 99 06 6d 7a 55 f7 92 ae 0f dd 2f 6f 3c 97 9d 5d 51 2b 69 26 73 21 08 3a 04 89 e8 22 56 84 ec 58 cc 73 12 b7 59 71 2a 4b 65 36 d4 d3 b4 94 a1 21 09 02 40 8f 64 53 96 bc b4 64 2b 12 5f 03 f3 ae 5f c7 88 73 8d 72 b9 dd f8 ee f2 a3 42 db 6b 52 8b d4 cb 7f Data Ascii: Jt1Ps3o-\NYil-aF!!Z8k<6SNxGtlzmso<5XUc/%GxRT5NN/lczHeFd)F@C')zrnWzsJthT#[D']mzU/o<]Q+i&s!:"VXsYqKe6!@dSd+__srBkR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49884	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:41 UTC	864	OUT	GET /thumbs/2024/12/09/055424/87645255/beforewar-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:42 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: 6AlF3CDLM3OfunU5SWaVM76rZHn3Y8oqmalPtDZ79FiEa1lkV8FhOyGUsNrn2h02bBh1FX2tbvY= x-amz-request-id: 0WT1D8BYEZ72GSR9 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 5530eb1ca46ed756811d95f0b31301cc Age: 244997 Date: Thu, 12 Dec 2024 18:57:41 GMT Last-Modified: Mon, 09 Dec 2024 22:54:25 GMT Content-Length: 50313 Connection: close
2024-12-12 18:57:42 UTC	14080	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 0a 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RD
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 19 72 f4 2c ae 53 74 42 9d c5 0d 1e ec 8e 56 e3 71 7a d5 40 81 f7 38 3f 64 5c 97 88 eb 79 dc d5 5c 68 2f c1 5b 7a 2d 3e 83 1f 6f 8b ea c2 a5 86 75 b9 3e 3b 32 c2 75 2a db c3 85 bd 56 a4 de dd 82 1f 76 da bb 07 17 d5 1c 3e 7f 6d 96 34 9d 25 58 d4 ec ee 5e 5c 5d 1e a7 31 dc ae c5 c1 f3 f1 2c 4a c3 ac 56 9b b0 2e 4f a5 03 c9 7e e2 03 52 7b ba 1b 64 1c 52 d6 4c 5c ff 00 85 09 71 8f 98 6a e5 b2 a0 40 a4 9e ee 82 5c 23 ab d4 3f 1f f1 30 29 41 3d 35 01 ca 72 97 b6 34 42 e0 ff 00 79 8b 95 c7 b6 9f 51 3b 7d 64 ea 04 b8 e9 2b b0 5a 3f 52 3a bc ad 1d 3c 8e 5b 0a 11 95 e8 35 4d d1 d3 67 dc e3 2f b0 95 58 79 8b 84 64 65 a3 4f 3e e4 6e 2f 4b d4 cd e1 4d 1b 28 06 87 66 9c 61 93 ca 4e 8a 85 48 5b 8a dc 9d 64 c2 da a4 50 1d 1e 47 70 8c a2 e3 6d 36 cc 6b d6 2f 5f 54 a2 21 Data Ascii: r,StBVqz@8?d\y\h/[z->ou>;2u*Vv>m4%X^\]1,JV.O~R{dRL\qj@\#?0)A=5r4ByQ;}d+Z?R:<[5Mg/XydeO>n/KM(faNH[dPGpm6k/_T!
2024-12-12 18:57:42 UTC	16384	IN	Data Raw: 51 16 2d e4 d3 53 3f 5a 57 78 b2 f0 23 78 f2 da 9b 1a 4b 22 ba d5 2e 95 13 ce a8 da 64 67 2c 59 cb 64 c9 63 81 4f ea 3a 79 22 db c8 e5 a5 5d 3c 06 2b 8d f8 6a 34 c8 8d db 84 17 a6 1a 95 ae 49 c6 be 9f d4 68 c6 f5 b4 b5 ad 47 56 d4 aa c6 98 c8 e7 07 ba 1a f8 74 d0 d3 95 9b 52 7a 2a 8d 78 f6 92 d9 17 53 f3 59 c9 d0 b1 cd 5d 8f 17 ba d8 9d e3 5a 7d 28 55 b9 69 db 75 8b aa 2e a6 58 85 af d2 34 7c a7 57 51 bb 9a 64 05 52 58 71 5a 35 53 4f b4 d8 c6 bb 7e 97 d5 55 36 e8 4d 5c 64 29 12 46 eb ea 77 17 7b 27 6f c8 8a 71 87 17 fe c7 43 0b b8 7e 5a b9 61 3b 98 ef 9c 56 f1 7e ef fd 42 fd 65 73 52 54 64 73 87 51 89 b8 e8 f7 44 b1 b8 de 8c 87 a8 2b 41 cb 51 d7 20 ba 11 ec 02 7a 0b 7d 02 dd 45 08 4a 6e 90 4d bf 22 a1 a0 ad 0d 5b 1d 9a e4 f5 bd 2e 0b c3 a9 79 76 ac 7b 7b Data Ascii: Q-S?ZWx#xK".dg,YdcO:y"]<+j4IhGVtRz*xSY]Z}(Uiu.X4\|WQdRXqZ5SO~U6M\d)Fw{'oqC~Za;V~BesRTdsQD+AQ z}EJnM"[.yv{{
2024-12-12 18:57:42 UTC	3465	IN	Data Raw: c4 b6 66 a9 af 52 39 f8 12 b2 19 78 91 57 fb 35 df 8a f7 c7 d2 47 41 3b 4f 7d 91 c5 4a ec d6 b6 fd 2d 75 25 c3 c9 bf 97 3e 37 27 27 4f 31 8b 2b ab 77 6d c3 77 fa 0c de eb dc be 28 f0 8c 1b 4f ab 2c 63 a5 15 4a 10 f7 4b 6a ed 96 96 f4 23 4e 76 73 84 ad b6 9a fa 19 e1 f2 01 d2 39 90 18 40 ca 8d 8e d4 a9 6e be 2c d6 b1 35 07 a9 99 80 a9 6d 16 2e 4d c7 53 9d 6a 2a f7 5b ba e8 64 17 33 ae 72 65 34 6a 25 21 09 08 d2 34 e2 fd 2a a5 3b f7 1c dd 11 24 6e a7 14 88 6b 59 19 53 1c 5a 5a 9a 3d b6 c6 9c d9 4e 4b 54 bc 4b d2 77 2d c1 5b b6 b5 7d 45 16 ee dc 51 ea 32 dc fe 4d 16 e6 64 f1 72 56 b2 4d 91 45 de b4 ea 93 4c 98 ab 79 58 d7 a2 f9 71 aa 29 6d a3 d0 d1 b3 dd ee 45 71 bb 0a a2 59 c6 c6 5c 79 5b fb 4a 32 e3 2e 32 4f c1 9a d7 33 92 4a 86 4c e0 e1 3e 24 b5 a8 1a b6 Data Ascii: fR9xW5GA;O}J-u%>7''O1+wmw(O,cJKj#Nvs9@n,5m.MSj[d3re4j%!4;$nkYSZZ=NKTKw-[}EQ2MdrVMELyXq)mEqY\y[J2.2O3JL>$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49882	13.226.2.71	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:41 UTC	397	OUT	GET /skeleton.gif?service=ad&adid=zshsa&adnum=189994 HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:42 UTC	616	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 12 Dec 2024 16:57:49 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Aug 2020 23:55:15 GMT ETag: "45cf913e5d9d3c9b2058033056d3dd23" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: iiN8XkcmZQdDIQeKkzAiegPwcD.5WPja Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 13ccd839fb2a1f5455d22e9152fa0226.cloudfront.net (CloudFront) X-Amz-Cf-Pop: TLV50-C1 X-Amz-Cf-Id: FVvkUjjg7KESA3PzQ2PwufXQmIroyxkv9g36S_3e65sABywGRj8g2w== Age: 7193
2024-12-12 18:57:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49887	104.17.248.203	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:41 UTC	544	OUT	GET /web-vitals@3/dist/web-vitals.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:42 UTC	548	IN	HTTP/1.1 302 Found Date: Thu, 12 Dec 2024 18:57:42 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /web-vitals@3.5.2/dist/web-vitals.iife.js vary: Accept via: 1.1 fly.io fly-request-id: 01JEY36T4VVV9G91G5C2ZQ1B2Y-lga CF-Cache-Status: HIT Age: 556 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f0ff10ddbbf421d-EWR
2024-12-12 18:57:42 UTC	69	IN	Data Raw: 33 66 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 77 65 62 2d 76 69 74 61 6c 73 40 33 2e 35 2e 32 2f 64 69 73 74 2f 77 65 62 2d 76 69 74 61 6c 73 2e 69 69 66 65 2e 6a 73 0d 0a Data Ascii: 3fFound. Redirecting to /web-vitals@3.5.2/dist/web-vitals.iife.js
2024-12-12 18:57:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49889	104.17.158.113	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:41 UTC	580	OUT	GET /vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/lightbox_inline.js HTTP/1.1 Host: www.lightboxcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:42 UTC	864	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:42 GMT Content-Type: application/javascript Content-Length: 2379 Connection: close Content-MD5: WuQN1lTNxDgy363p5pd6YA== Last-Modified: Thu, 15 Sep 2022 08:07:05 GMT ETag: 0x8DA96F14793D8E4 x-ms-request-id: 3d8b2328-a01e-0004-58fa-3fedb2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding CF-Cache-Status: HIT Age: 215 Accept-Ranges: bytes Access-Control-Allow-Origin: * Set-Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000; path=/; domain=.lightboxcdn.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f0ff10dd9e3c356-EWR
2024-12-12 18:57:42 UTC	505	IN	Data Raw: 77 69 6e 64 6f 77 2e 6c 69 67 68 74 62 6f 78 6a 73 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 20 28 63 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 20 64 29 20 7b 20 64 20 26 26 20 28 64 20 2b 3d 20 28 2f 5c 3f 2f 2e 74 65 73 74 28 64 29 20 3f 20 22 26 22 20 3a 20 22 3f 22 29 20 2b 20 22 6c 76 3d 31 22 29 3b 20 63 5b 62 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 69 20 3d 20 77 69 6e 64 6f 77 2c 20 68 20 3d 20 64 6f 63 75 6d 65 6e 74 2c 20 6a 20 3d 20 62 2c 20 67 20 3d 20 68 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 20 6c 20 3d 20 22 6c 6f 61 64 22 2c 20 6b 20 3d 20 30 3b 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 62 28 29 20 7b 20 61 2e 50 28 6c 29 3b 20 61 2e 77 20 3d 20 31 3b 20 63 Data Ascii: window.lightboxjs \|\| function (c) { function g(b, d) { d && (d += (/\?/.test(d) ? "&" : "?") + "lv=1"); c[b] \|\| function () { var i = window, h = document, j = b, g = h.location.protocol, l = "load", k = 0; (function () { function b() { a.P(l); a.w = 1; c
2024-12-12 18:57:42 UTC	1369	IN	Data Raw: 5d 20 7c 7c 20 5b 5d 2c 20 6a 20 3d 20 61 2e 65 68 5b 65 5d 20 3d 20 61 2e 65 68 5b 65 5d 20 7c 7c 20 5b 5d 2c 20 66 20 3d 20 61 2e 70 68 5b 65 5d 20 3d 20 61 2e 70 68 5b 65 5d 20 7c 7c 20 5b 5d 3b 20 62 20 26 26 20 64 2e 70 75 73 68 28 62 29 3b 20 63 20 26 26 20 6a 2e 70 75 73 68 28 63 29 3b 20 68 20 26 26 20 66 2e 70 75 73 68 28 68 29 3b 20 72 65 74 75 72 6e 20 6d 20 7d 3b 20 72 65 74 75 72 6e 20 6d 20 7d 3b 20 76 61 72 20 61 20 3d 20 63 5b 6a 5d 2e 5f 20 3d 20 7b 7d 3b 20 61 2e 66 68 20 3d 20 7b 7d 3b 20 61 2e 65 68 20 3d 20 7b 7d 3b 20 61 2e 70 68 20 3d 20 7b 7d 3b 20 61 2e 6c 20 3d 20 64 20 3f 20 64 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 5c 2f 2f 2c 20 28 67 20 3d 3d 20 22 68 74 74 70 73 3a 22 20 3f 20 67 20 3a 20 22 68 74 74 70 3a 22 29 20 2b 20 22 Data Ascii: ] \|\| [], j = a.eh[e] = a.eh[e] \|\| [], f = a.ph[e] = a.ph[e] \|\| []; b && d.push(b); c && j.push(c); h && f.push(h); return m }; return m }; var a = c[j]._ = {}; a.fh = {}; a.eh = {}; a.ph = {}; a.l = d ? d.replace(/^\/\//, (g == "https:" ? g : "http:") + "
2024-12-12 18:57:42 UTC	505	IN	Data Raw: 29 20 2b 20 27 22 27 29 20 2b 20 27 22 29 3b 64 2e 63 6c 6f 73 65 28 29 3b 27 20 7d 20 61 2e 50 28 32 29 20 7d 3b 20 61 2e 6c 20 26 26 20 71 28 29 20 7d 29 28 29 20 7d 28 29 3b 20 63 5b 62 5d 2e 6c 76 20 3d 20 22 31 22 3b 20 72 65 74 75 72 6e 20 63 5b 62 5d 20 7d 20 76 61 72 20 6f 20 3d 20 22 6c 69 67 68 74 62 6f 78 6a 73 22 2c 20 6b 20 3d 20 77 69 6e 64 6f 77 5b 6f 5d 20 3d 20 67 28 6f 29 3b 20 6b 2e 72 65 71 75 69 72 65 20 3d 20 67 3b 20 6b 2e 6d 6f 64 75 6c 65 73 20 3d 20 63 20 7d 28 7b 7d 29 3b 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 34 65 35 31 39 39 36 2d 66 61 65 35 2d 34 62 66 36 2d 61 38 64 66 2d 37 33 37 61 35 66 35 65 66 31 32 63 27 29 20 21 3d 20 6e 75 6c 6c 29 20 7b 20 64 6f 63 75 6d 65 6e Data Ascii: ) + '"') + '");d.close();' } a.P(2) }; a.l && q() })() }(); c[b].lv = "1"; return c[b] } var o = "lightboxjs", k = window[o] = g(o); k.require = g; k.modules = c }({}); if (document.getElementById('c4e51996-fae5-4bf6-a8df-737a5f5ef12c') != null) { documen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49891	104.26.11.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:41 UTC	533	OUT	GET /scripts/ta.js HTTP/1.1 Host: static.trueanthem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:42 UTC	1229	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:42 GMT Content-Type: text/javascript Content-Length: 731 Connection: close x-goog-generation: 1680495923461532 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 731 x-goog-hash: crc32c=cFyq6Q== x-goog-hash: md5=LVEAlqx4oP86QO2uXZwMkg== x-goog-storage-class: STANDARD x-guploader-uploadid: AFiumC4lL2Xh-JyMEkKppPTUHtOq8e68yaYqNyA4jb8yfHAmAqtU5kZWgi54hSAu8YrW-ExHJu0 expires: Thu, 12 Dec 2024 18:37:36 GMT Cache-Control: public, max-age=86400 Age: 1299 last-modified: Mon, 03 Apr 2023 04:25:23 GMT etag: "2d510096ac78a0ff3a40edae5d9c0c92" vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rm2EtO25oioUoiD8Tli03r1EFMzI%2F508%2FhipCGaPVbydDvACGaRH7D57AP7uY%2BZCcFXjqpyY%2BqEcs6DETJmvf%2BTxDxOQJbnR5G8zJw396P4BwFdPI3RcERj1RwwIOYZDJdIYgWONGw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f0ff10edc1befa7-EWR
2024-12-12 18:57:42 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 30 33 33 26 6d 69 6e 5f 72 74 74 3d 32 30 31 39 26 72 74 74 5f 76 61 72 3d 37 38 36 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 34 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 31 31 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 33 36 38 33 32 32 26 63 77 6e 64 3d 31 36 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 64 34 65 66 66 62 64 65 37 36 37 34 62 66 66 26 74 73 3d 34 35 36 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=2033&min_rtt=2019&rtt_var=786&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1111&delivery_rate=1368322&cwnd=161&unsent_bytes=0&cid=9d4effbde7674bff&ts=456&x=0"
2024-12-12 18:57:42 UTC	731	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 32 36 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 55 52 4c 5f 52 4f 4f 54 3a 22 2f 2f 62 2e 74 72 75 65 61 6e 74 68 65 6d 2e 63 6f 6d 22 2c 50 41 47 45 5f 53 4f 43 49 41 4c 5f 53 44 4b 5f 52 4f 4f 54 3a 22 2f 2f 73 74 61 74 69 63 2e 74 72 75 65 61 6e 74 68 65 6d 2e 63 6f 6d 2f 73 63 72 69 70 74 73 22 7d 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 61 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 28 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 68 3d 28 29 3d 3e 22 63 33 34 33 Data Ascii: (()=>{var e={726:e=>{e.exports={URL_ROOT:"//b.trueanthem.com",PAGE_SOCIAL_SDK_ROOT:"//static.trueanthem.com/scripts"}}},t={};function n(r){var a=t[r];if(void 0!==a)return a.exports;var o=t[r]={exports:{}};return e[r](o,o.exports,n),o.exports}n.h=()=>"c343

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49886	91.228.74.166	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:42 UTC	528	OUT	GET /quant.js HTTP/1.1 Host: secure.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:42 UTC	295	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:42 GMT Content-Type: application/javascript Content-Length: 23145 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=604800 Etag: "mLYq618hJoRcW1Crupr2OQ==" Expires: Thu, 19 Dec 2024 18:57:42 GMT Vary: Accept-Encoding
2024-12-12 18:57:42 UTC	16089	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 33 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 63 61 73 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 71 63 53 65 73 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 72 28 29 3b 72 65 74 75 72 6e 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 28 65 2b 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 25 31 36 7c 30 3b Data Ascii: /* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;
2024-12-12 18:57:42 UTC	7056	IN	Data Raw: 31 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3f 5a 28 65 29 3a 5f 28 65 2c 21 30 29 2c 6f 3d 21 30 7d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 28 74 3d 44 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2c 30 29 29 2e 73 70 6c 69 63 65 28 31 2c 30 2c 6e 29 2c 4a 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 3b 72 3d 21 31 2c 71 65 26 26 4b 28 29 7d 72 65 74 75 72 6e 20 6f 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 61 2c 69 2c 63 2c 75 2c 73 3d 5b 5d 2c 6c 3d 5b 5d 2c 66 3d 74 7c 7c 5f 3b 69 66 28 28 72 3d 44 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 29 26 26 72 2e 6c 65 6e Data Ascii: 1;if(arguments.length){for(n=function(e){r?Z(e):_(e,!0),o=!0},e=0;e<arguments.length;e++)(t=De.call(arguments[e],0)).splice(1,0,n),J.apply(null,t);r=!1,qe&&K()}return o},J=function(e,t){var n,r,o,a,i,c,u,s=[],l=[],f=t\|\|_;if((r=De.call(arguments,2))&&r.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49890	52.36.224.135	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:42 UTC	780	OUT	GET /iframes/topics.html HTTP/1.1 Host: postrelease.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor=0f1b092d-51f4-424e-bbfb-294743129f31; status=0
2024-12-12 18:57:42 UTC	413	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:42 GMT Content-Type: text/html Content-Length: 582 Connection: close x-amz-id-2: B4rGBEOVM8x9NJLOfMgbZUVauy2IFYIrzMrPZfKhlxLHlswL4TWKjjBVOAN3w/Cl2QYY+KvdG1o= x-amz-request-id: ADE8ZHW0SJQBCRNZ Last-Modified: Fri, 15 Mar 2024 21:34:47 GMT ETag: "ec22fdd2cd0ccf11c7761864efa96c06" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3
2024-12-12 18:57:42 UTC	582	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 54 6f 70 69 63 73 28 29 20 7b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 6f 70 69 63 73 20 3d 20 61 77 61 69 74 20 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 6f 70 69 63 49 64 73 Data Ascii: <html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"></head><body> <script> async function getTopics() { try { const topics = await document.browsingTopics(); const topicIds

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49895	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:42 UTC	1092	OUT	GET /thumbs/2024/11/11/040543/87633123/skylabbig.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:43 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: /F2OftZVeyvFgZsrw5Bbzzl0ipMqcg5P/4YtUl38CkTjF8kOVjKze36g0enhXx1Baa1enHKaiF0= x-amz-request-id: RJYFJNEZQMYZ6D9E Content-Type: image/jpeg Server: AmazonS3 Age: 2670719 Date: Thu, 12 Dec 2024 18:57:42 GMT Last-Modified: Mon, 11 Nov 2024 21:05:44 GMT X-LLID: 73da977f3c9b2988501dadccd05e3dbe Content-Length: 82872 Connection: close
2024-12-12 18:57:43 UTC	14079	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f3 11 4b 07 d1 f8 2d 22 2a a7 90 64 11 08 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwt"4K-"*d
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: d2 41 67 94 34 40 1a d6 b5 ad 6b 5a 70 92 bb 70 56 b5 a5 af 47 b2 03 ea 31 bf a0 ce 90 f5 1e d2 a2 34 d0 d5 61 68 37 a6 f1 a4 4d 32 b6 7d f5 ec 70 7d 4e 29 2f fa 9b 35 79 15 b6 cb 38 80 1f 99 43 db 96 18 ae ef 20 3d 5c 8b 9b 18 88 c6 d0 f8 5a f9 16 ca 8d 9c aa a5 f0 19 29 d4 58 50 c7 8f 07 3a 56 0d 23 81 8d ad 7a 69 6b 5e da fb 4f 29 bf fb e3 bd 11 92 33 13 5b bd e0 22 b5 c5 8f 5d 68 fb 6f e1 bc 52 5f f6 0d 06 a7 2d 1c f3 f2 2d 55 d8 59 a0 33 af 47 26 7b 72 8d 38 8d 9d 5a d7 14 c8 74 8a 9a 16 58 73 10 2c 8e 2a dc 9b a9 7c b4 82 8b 03 e5 c8 2a 2e f5 1e c3 e4 3d f6 82 df a7 22 33 c4 3c 3d 8d 96 07 b0 8d 6a 38 9d 14 0a a0 f5 df a9 f7 df ae a9 0f fb 46 78 bb b6 5a aa 17 76 6b c4 ba 3f 09 54 23 d7 90 0e c4 6d 64 7e 16 b1 ce f2 7e 8f d3 e7 74 9a e8 1f 2b 6a 35 Data Ascii: Ag4@kZppVG14ah7M2}p}N)/5y8C =\Z)XP:V#zik^O)3["]hoR_--UY3G&{r8ZtXs,\|.="3<=j8FxZvk?T#md~~t+j5
2024-12-12 18:57:43 UTC	1632	IN	Data Raw: e2 8d 94 7e f1 ba 8f 25 52 bb 4e d2 7f de 6a ad c1 aa b8 f7 15 51 fc 32 9f fc b2 a0 e4 7a 90 e4 4d 21 c2 50 19 0b a2 03 57 a4 52 77 e1 44 e8 51 f8 8a 2c 99 1b 27 7f 05 8d fd 9b 43 a4 4d f9 2e df ba 04 36 14 bc 6a 75 41 30 8f 24 de 2a 98 dc 9a 3d d5 d2 54 6d 06 9b 0d a7 a0 19 e5 fb 20 d7 20 74 8a 1f 8a 5a 98 69 89 92 79 99 ff 00 62 b2 e3 ae ea c8 87 03 c9 02 00 9f fe 15 4e 2e 4d d0 c7 66 71 dc 8e 3a 6d 88 86 85 d8 1f d4 2a a6 31 07 23 30 8f 48 f3 be 7c 8a 02 a0 fc d2 bb 6a de d5 e9 5a 37 ea b7 e6 9f 57 ea 58 06 5d 27 f6 55 29 9c 88 29 e6 49 32 89 f7 dc 3c d6 97 46 cf 3d 2b 7f 75 a1 e9 3e f0 07 81 b1 5a 2d 63 38 02 67 48 ea 84 97 f0 69 41 a2 08 0d 03 73 53 49 d8 a4 78 5d 54 f7 ea 34 2a 62 25 c9 bb 82 e2 e0 a9 cd 81 2b a7 a5 d2 32 96 d3 3e 49 ee 67 d5 ce 6c Data Ascii: ~%RNjQ2zM!PWRwDQ,'CM.6juA0$=Tm tZiybN.Mfq:m1#0H\|jZ7WX]'U))I2<F=+u>Z-c8gHiAsSIx]T4*b%+2>Igl
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: 78 85 a1 33 2a 27 e0 b4 6f e4 ad 04 83 8e 97 ec b4 1a c1 9d 15 43 48 e6 27 7a d2 29 88 7d d9 c4 2e 97 4f a4 23 60 7e cb 03 5b 48 b9 02 c6 bd 82 5c 33 58 85 93 e4 82 d2 9b 36 94 66 65 36 bd 33 4a a9 5d 0d 47 0d db 93 e0 4d c7 15 5d 8d 0f c3 6e 28 b7 30 a8 93 b7 50 c2 a0 e1 67 59 70 84 45 28 6a 2c 86 cf 32 a9 53 b0 32 55 5a 93 b5 03 92 74 66 55 56 99 0e 21 4d 9f 9e e4 5e f3 51 de 4a d2 bf 75 79 0f 60 f3 43 f8 23 19 fb e7 25 8a f5 5c 5f cb 72 0d b0 10 3d 44 60 6a d9 2b 15 5f 30 16 2a cd 1b 83 6e b1 92 29 8d 9f bc 89 c2 31 14 d7 68 da 4e fc 2d cc f1 44 54 61 ca 1c 15 3d 25 94 df d2 e1 21 0a 74 de 1a 66 d9 a0 ea 60 33 68 f2 55 6a 3f 15 9a 15 36 66 e2 53 18 e2 e0 33 47 d4 df db e5 61 6d 95 af ea 6d dd 25 76 a0 f1 cd 13 4c bb 76 22 85 39 6e 6a 72 57 3e 0b 6d fe Data Ascii: x3'oCH'z)}.O#`~[H\3X6fe63J]GM]n(0PgYpE(j,2S2UZtfUV!M^QJuy`C#%\_r=D`j+_0n)1hN-DTa=%!tf`3hUj?6fS3Gamm%vLv"9njrW>m
2024-12-12 18:57:43 UTC	16364	IN	Data Raw: dc b6 70 6f c1 d7 88 98 5c 0d 58 02 27 8c e1 80 79 fb 86 42 73 c3 7e 1a 89 36 67 ec f4 ca e6 07 0d ce ce 61 71 89 ba d8 fd aa 63 2c 5b 67 14 89 8d 8d 99 17 24 ca 86 34 85 da c2 ab dc 4e 39 3e e5 bc b5 14 22 8d 25 d1 22 a8 e0 e6 04 4b 5c 00 af 10 50 9e 3f 65 f6 47 a2 d2 95 51 86 96 e3 5e be 44 e2 52 93 38 a2 16 f4 c5 c9 f5 39 15 1b 51 1a 45 35 76 ab f3 c4 50 bc 68 45 cf 32 a3 92 c0 97 e4 49 5d 4d 5c a7 15 16 5d 8e 75 12 87 89 4b e2 22 bc 5e ec 29 5c 54 6d 95 1c 2e dc 02 a8 01 80 91 9d f1 55 12 fa 2a 17 fd be 33 87 d0 52 3c 0d 54 a1 1f 0b 30 e1 cc ef 4b 11 d9 fb 82 1c 09 4f 52 aa 54 cf 97 e2 a6 6c d7 d0 94 18 cd 8d 1f 07 89 e7 e0 bb 21 47 89 5e 75 d5 4a a4 2f 59 67 86 72 d8 0e 78 82 0f 55 02 55 3d ab 8b 1d f6 c8 0e 50 71 b1 36 cf c1 80 aa 13 e6 ae 2b 12 17 Data Ascii: po\X'yBs~6gaqc,[g$4N9>"%"K\P?eGQ^DR89QE5vPhE2I]M\]uK"^)\Tm.U*3R<T0KORTl!G^uJ/YgrxUU=Pq6+
2024-12-12 18:57:43 UTC	13032	IN	Data Raw: dc e5 b8 d5 79 86 06 e1 72 fe 35 f4 4f 05 e4 98 d1 6e 57 ad 93 52 fe 7f da f1 f3 c3 1d d2 aa 7c 65 ef a4 bf b2 39 bd 7f 78 77 3e e3 09 51 4f d2 88 35 4e 21 08 3d e7 31 6e c3 f4 04 ef 9b c2 73 f0 7c cb ae ee 9f 96 88 52 ff 00 11 03 91 aa 42 68 81 0b 66 cc 10 8f 11 d5 a0 f9 8d f1 1e 04 a5 0a 9d 61 42 5e 14 a2 10 a7 bc 36 15 63 7a 61 60 fe eb 83 2e 22 13 10 58 3f 0c 27 5f 0e 51 4b 84 a7 10 d6 cc d9 3a 4d 88 7a 89 87 d4 20 c1 86 c5 c5 10 f2 44 f4 c5 10 06 cf 05 4a 3d b0 51 cb 7d 40 1f 09 47 c0 1e 10 a1 ce e5 81 b3 6e 15 39 7d 12 a1 94 85 f0 3f a4 a4 92 72 2d 09 8d 01 75 ea 6e 2e a9 66 37 6b bf 64 63 1b 8b b9 80 96 31 9d 12 5c b1 62 d8 02 00 80 11 2f 12 ed 75 18 53 c4 a7 7a 97 2e 2e 59 70 7a 9a 6a 2a a2 7f 74 d5 c5 5e 9f ed 67 fa ff 00 25 fc a3 8d 46 fc 55 8b Data Ascii: yr5OnWR\|e9xw>QO5N!=1ns\|RBhfaB^6cza`."X?'_QK:Mz DJ=Q}@Gn9}?r-un.f7kdc1\b/uSz..Ypzj*t^g%FU
2024-12-12 18:57:43 UTC	4997	IN	Data Raw: f5 cb fc 8e 63 9d 1a 8d 68 78 a9 0f 11 0f 14 f8 83 99 ac b2 99 0c 3b 21 0d 28 a3 13 e9 c4 fd 88 ba 64 a3 27 ba df 28 a6 da 1a ac 9f 57 a2 71 a9 ea f2 8c 5c 5b a4 b8 5d 51 a6 f2 a4 52 b1 72 f2 4c b2 f7 59 a1 6d ab ab 06 36 af 55 a1 28 b4 7a 85 57 4c 84 5d ec 87 07 54 41 45 3a 66 24 e0 f6 44 a2 a0 b7 66 a2 0f bb 16 21 f1 9a aa 27 29 cd 6f 47 a6 c4 f9 54 7d c5 23 f8 88 fc 5f 87 df 4d d9 ad 16 59 64 b1 d2 b4 2c 67 6f dd b2 5e a2 76 dd 8b d5 4a f7 25 ea 93 5b 31 63 ba 1e 30 b1 9a 76 cf 8a 3c 47 6b 71 62 39 c4 b3 06 2e 6f 72 30 54 46 29 1c 09 23 19 7f 32 bc 44 91 12 58 4a 5d b7 21 85 a1 6f c9 8a b8 7f 91 e9 17 cb 26 3e 5f 54 3e ae 8e e2 aa cd 8d ec 5e 49 73 d4 e7 8f 06 b4 b1 e3 e3 ba a9 34 29 c9 fd 72 b1 e3 2e 52 25 ea a5 c5 0f 1a 6c 53 fb 8e 72 97 2e f2 d6 91 Data Ascii: chx;!(d'(Wq\[]QRrLYm6U(zWL]TAE:f$Df!')oGT}#_MYd,go^vJ%[1c0v<Gkqb9.or0TF)#2DXJ]!o&>_T>^Is4)r.R%lSr.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49897	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:42 UTC	859	OUT	GET /thumbs/2024/12/10/093625/87645337/Untitled-1.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:43 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: meuPz5S6wpTbJhWxeJyZ0jvdphP5icEMQJ0PmvF/9b/mcAozLHC9Mid9UyAVJbLlFAdxoxfmmz0= x-amz-request-id: 880EXY6ET4ZQSQCS Content-Type: image/jpeg Server: AmazonS3 X-LLID: 7db91acbd0160edf42a8508e8ea895fb Age: 188477 Date: Thu, 12 Dec 2024 18:57:42 GMT Last-Modified: Tue, 10 Dec 2024 14:36:26 GMT Content-Length: 106753 Connection: close
2024-12-12 18:57:43 UTC	14079	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: cf f8 57 40 c4 f7 08 5c 63 a2 cf 4d 17 fc bb 8f ac 15 9f e8 9f c9 bb 8f 9d f1 39 30 a3 25 1b d8 0e da 96 e9 d5 63 dd 6b f9 47 1a e5 bd f0 75 c5 db ad f1 ec 01 91 bb 57 0f 10 16 e7 4c f8 4f e3 fd fe 6c b3 d9 e3 44 21 d3 3d c1 a4 d2 ab 97 4f 4f 1c 2e fb a4 d9 72 59 4c 65 59 4f 70 03 f9 ae 5e 9d bf 9a 0d 8f 1a 16 ae 96 ea 76 0d ad 1a 15 8b d3 73 e6 a8 ce f2 2c 4c 36 5b 5f 4d 16 2d 74 9c 33 9d bc e4 9c 76 db 95 49 79 73 4f 6a ba d7 a2 e5 d5 6e 70 f4 6e 3f b8 5d b9 f6 59 2c 4f 88 38 8f 57 45 c9 a9 13 21 c7 f0 4e 4f 28 b8 b7 64 72 4c d3 50 e6 80 a5 aa d2 c1 c7 6c a1 8d 8d 8c 00 19 d0 2c 0e 6b dd 3e 69 91 c4 df c1 8f b4 8f 6c 52 1d ae 3e 1a e8 aa 38 87 77 2c e6 b6 b4 65 e3 64 04 ce 37 38 03 e6 ba 44 71 46 5a 19 de 64 76 b5 2b ac 16 16 38 d6 c5 27 b8 16 b4 c5 af Data Ascii: W@\cM90%ckGuWLOlD!=OO.rYLeYOp^vs,L6[_M-t3vIysOjnpn?]Y,O8WE!NO(drLPl,k>ilR>8w,ed78DqFZdv+8'
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: ce 4b c4 64 92 6b 78 6a d9 06 ba 22 e2 fe cb ee 62 e3 1c e7 b0 5a 03 ae a6 89 86 2c ad fe e7 b1 57 92 01 91 c5 c7 23 7c 49 6a 62 27 4b f7 0b db 57 01 ef 61 23 71 ff 00 84 26 09 f8 7e fe 76 c6 f6 41 0c 98 b8 e2 8f c6 ad 0b 36 34 d7 41 ce 7b 1d 75 16 f9 63 b7 63 8f 50 40 5c eb 70 0c fd 8d cc ed 82 27 c0 d7 d7 d2 34 0b 8f 53 5a 95 b0 83 05 c4 9f 84 16 16 13 c4 c8 4f 40 d2 05 56 7c 2e b9 d7 7c 78 56 28 f1 08 9b 00 0e 9b 46 b1 e3 50 16 7c 2c ae 29 0f 60 b9 44 58 b6 e5 62 a4 b1 3d bb 97 4c 5f 4c 5d db 5f 8e b9 75 b5 c7 a6 46 1a 10 b7 23 36 96 c7 87 34 1e be 4b a4 62 8d f2 30 32 8e e8 b6 c2 33 2d 60 74 82 68 9d b5 ed 35 04 7c 15 4a eb 9c 27 bc 52 63 2c d9 8d bd 7e f8 c6 80 bb 54 46 ea d7 92 db e6 28 eb 72 1a 1d e3 d1 40 fd d5 dc 76 4c 2f 92 50 29 f1 54 67 32 1d Data Ascii: Kdkxj"bZ,W#\|Ijb'KWa#q&~vA64A{uccP@\p'4SZO@V\|.\|xV(FP\|,)`DXb=L_L]_uF#64Kb023-`th5\|J'Rc,~TF(r@vL/P)Tg2
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: 5e 7b c8 73 bb fe 4d dc 48 ef 26 fe 9c 52 3b 46 9f 9a 83 af dc 59 06 db 32 40 6b 50 14 10 0c 3f 04 d5 24 c1 af 45 01 88 69 e0 8b a2 95 d9 16 46 45 b4 ae 8c f8 16 94 0f e0 f9 97 33 c1 ce d7 ba e1 f3 c2 4e a1 da e8 95 5d 16 e7 ba 53 de 61 49 8e ac ba db d3 e2 b2 39 d4 fc f3 b8 1e eb bd 99 1d b2 ba 6a a8 47 fd c4 ee 3b 3a c8 4f e2 80 7f dc ce e3 0e 8e fe d4 0d 9e e8 77 30 1d 1f a2 20 bf ee a7 72 87 53 5f 8a a0 d9 dd 3e e3 97 51 d5 da 7a fc 90 35 73 f5 19 4b 91 7b 7b ac e7 53 54 43 bb 03 45 00 5a 81 25 e0 34 b8 f4 0a 88 82 4b 8b d9 44 56 0d 2f 77 f3 53 54 10 79 08 cf 62 22 f7 a6 89 c2 11 d5 d4 d1 58 8e a1 d8 9b a6 cb 61 77 90 78 a0 d8 4e e2 a8 e4 bd e3 cf 5a e6 f9 0c f0 3a 4d cd 85 c4 6d ae 8a c1 cc 26 e3 d6 d7 12 87 b4 6d 01 5d 04 ee 31 6e 5d 57 d7 f0 4d 09 Data Ascii: ^{sMH&R;FY2@kP?$EiFE3N]SaI9jG;:Ow0 rS_>Qz5sK{{STCEZ%4KDV/wSTyb"XawxNZ:Mm&m]1n]WM
2024-12-12 18:57:43 UTC	80	IN	Data Raw: db df c3 60 36 1f d4 5a d5 95 61 2c f2 83 1b c9 f1 97 96 ed d8 f7 bd ad 70 fc 54 a8 ee fd c7 63 5b 67 63 92 63 7f ab 2c 6d 24 fc c2 c3 6c c5 bc ee 7c 2d 71 14 71 51 48 39 19 58 fa 06 92 82 b3 2b 92 bf 9d cd 63 23 34 f1 40 8b 59 ee 62 70 74 Data Ascii: `6Za,pTc[gcc,m$l\|-qqQH9X+c#4@Ybpt
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: ad 2d 6a 0b 88 b2 b6 47 f5 1d 50 3c eb ab 42 37 07 04 09 12 c6 ee 88 a1 bc 04 0e 46 f6 93 42 68 89 4f 50 20 4b 80 05 02 49 01 10 01 15 40 ec d6 51 de 5a 3e 27 0d 76 9a 28 29 38 f6 41 b6 37 0f b0 79 a6 ba 22 2f e7 8f 5d c3 a1 46 8d 6d 2a a8 33 f5 b7 e6 10 5e dc ee 9a 27 b0 f8 8a 2c 34 b6 e1 85 b8 eb 79 99 b4 55 fe 2a 2a c6 69 5a f3 5a 52 aa 55 45 7c 4d 35 50 30 6d e3 dd 5d da 20 39 33 fc 7b 1c cf f9 a9 c3 1c df 02 50 67 b2 9d ee e1 f8 fd c1 ae 12 48 de 94 a1 50 c6 44 f7 5a 6e 65 3c b6 f6 b1 7b 6c 65 40 75 15 85 37 c5 33 99 2b 2c e3 ad fd c0 f7 34 fe 87 2d 46 6b b3 e1 79 44 92 b9 ad bd 85 ad 6f 9e 8b 71 96 bf 1f 79 8c 96 51 ec 06 ee 3d 42 da 25 65 70 f6 99 6b 37 da de 30 3a 27 8a 01 44 dc 47 2c bf ec 3f 18 64 92 cb ee 88 43 c9 3e 4b ac ac d8 cd 4b d8 6c 74 Data Ascii: -jGP<B7FBhOP KI@QZ>'v()8A7y"/]Fm3^',4yU*iZZRUE\|M5P0m] 93{PgHPDZne<{le@u73+,4-FkyDoqyQ=B%epk70:'DG,?dC>KKlt
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: 1d 25 14 93 44 04 51 04 10 29 a1 a7 aa 29 0f 6c 5e 4a a2 3b a3 8e bd 10 11 8e 2a 68 10 20 b0 04 09 01 02 5c 1c a8 4e a1 30 18 4c 04 e0 48 34 50 46 7c 12 56 b5 40 b8 c4 80 75 52 94 a3 2c 81 10 d9 9e 4f 24 09 33 bd 02 1d 70 e4 0d 3a e9 cd ea 8b 0a 8a e1 d2 1e 8a 87 ef 72 56 d8 fb 23 34 8e 01 c0 68 0a a3 97 f2 0e 71 73 79 70 e8 6d dc 40 26 9a 26 35 19 5c ac d7 c2 17 39 f2 ba a7 e2 8a f4 27 db b4 97 7f e9 2b c0 d6 97 3d ec 3b 4f 8f 45 11 c0 bb 93 6f 90 8b 97 dd 36 eb 73 64 73 cd 01 f2 aa 8d c5 4c 0c a3 40 27 54 53 ec f4 bb e0 ac 5b 4f 19 f6 b7 46 d5 6e 21 c8 dc ed a5 fb 08 1e 25 6e 33 49 f6 63 b8 69 3d 0f 92 db 9d 74 7e d3 f7 2a 3e 3f 70 71 59 11 be c6 6f 49 dd d0 55 2c 65 a0 e6 fd a8 e3 7c a1 ee ca e1 2e a3 6c b2 fa 84 60 8d 2a ac e9 1c eb 29 da 7e 67 63 0b Data Ascii: %DQ))l^J;h \N0LH4PF\|V@uR,O$3p:rV#4hqsypm@&&5\9'+=;OEo6sdsL@'TS[OFn!%n3Ici=t~>?pqYoIU,e\|.l`*)~gc
2024-12-12 18:57:43 UTC	10674	IN	Data Raw: 51 65 8a ba c9 82 5d 70 77 7c d4 c1 6a e9 e4 91 9d 00 4c 0c 80 6a ae 05 80 a6 05 07 36 9d 13 10 cc 80 13 a2 60 48 d3 aa 05 02 d2 7a 2b 86 9d 68 8c f5 68 53 13 40 db c2 7f 95 55 18 b7 82 94 da 10 31 26 22 da 63 ae 81 28 9d c3 b8 e6 3e 6c f3 4b 86 ff 00 6c d5 66 8e d7 6b 61 8f b8 7b 58 19 4d 82 81 41 64 31 b1 b5 be db 4d 10 1c 18 e6 46 ea 97 12 81 fb 9b 5f 72 3d ac 75 0a 60 c6 f3 9b 3b bb 3c 0c ee 13 96 ef 04 6a 89 8e 15 63 65 72 c7 bd ce 7e ed c4 9a aa a9 af 82 e0 0f 49 d5 04 29 64 bf 67 40 74 40 c8 ca 5e c5 ab 81 4c 01 dc 9d ec d1 cd 35 40 70 f2 53 2b b6 86 14 13 85 fb 8b 6b 43 aa 06 a4 ca 16 f5 05 01 c3 90 f7 3a 55 00 b8 cc 8b 51 ea 69 a2 06 62 e4 70 4a 74 05 34 4c 8f 29 13 87 44 12 19 7d 19 f3 46 8e b6 ee 22 88 73 ea 22 3e 28 0c 4b 1f 98 40 b1 2c 74 fd Data Ascii: Qe]pw\|jLj6`Hz+hhS@U1&"c(>lKlfka{XMAd1MF_r=u`;<jcer~I)dg@t@^L5@pS+kC:UQibpJt4L)D}F"s">(K@,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49896	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:42 UTC	1090	OUT	GET /thumbs/2024/11/08/045032/87632310/1968big.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:43 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: Xg9PTf5mqazp4Y0zymhr2THdo/KxslbVjtSpddxphEwj779p86bA7EmMFACJn1UOzVN+isJRejw= x-amz-request-id: RGGVNECK6S9GS656 Content-Type: image/jpeg Server: AmazonS3 X-LLID: e232f4b8030b744eb427b057190eeb96 Age: 2927230 Date: Thu, 12 Dec 2024 18:57:42 GMT Last-Modified: Fri, 08 Nov 2024 21:50:33 GMT Content-Length: 92672 Connection: close
2024-12-12 18:57:43 UTC	14079	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d2 da bc 66 3c 3a 4a 10 d0 16 68 62 ad Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwt"5f<:Jhb
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: 63 d9 46 d4 36 b6 c6 94 77 ea cf 94 cc 39 3e ae cc 8b a9 bf 5d 0e b7 61 7e 70 3b f4 50 52 8c a1 f6 50 ed d5 72 90 78 6c 4c b9 aa d7 7d 45 ad 2d 59 a3 7e 07 0f 8f 92 63 64 78 a4 37 6a 41 06 e5 e9 25 f3 f2 f2 f2 0d da 58 96 c0 75 60 ef 0f 89 5f 4a c1 14 48 18 b1 07 bf 2f 26 66 62 d9 d0 03 f1 d9 7f 77 bb cf ca 1c aa be 33 c6 60 30 fa bd 60 0c 03 c0 88 71 10 c7 2c 37 23 c0 da 0c 93 fa 8f e1 2d 81 ba 8a 6d a7 03 3e af d4 cd 62 d6 95 cd 79 e4 b1 2b 77 dd 61 3d eb 33 44 ec f6 e0 07 51 72 6b 06 f5 4b 1b 90 8e 27 9a d1 ce eb c8 76 13 6d 2a 42 61 d7 47 bc 83 35 76 01 da 43 5d 66 9d 27 1a eb 0a b3 b6 1c 1c 38 64 68 3e a2 54 10 08 59 3a 1c 0d 61 6e fb ef be c3 77 de 2b 07 8a 66 4c 00 60 60 e5 cb 03 c0 8c 56 7a cf 18 1d 78 f8 f8 7a fc 1d 58 7e 21 35 08 cf 0f 57 a3 eb Data Ascii: cF6w9>]a~p;PRPrxlL}E-Y~cdx7jA%Xu`_JH/&fbw3`0`q,7#-m>by+wa=3DQrkK'vm*BaG5vC]f'8dh>TY:anw+fL``VzxzX~!5W
2024-12-12 18:57:43 UTC	1575	IN	Data Raw: 85 8e 4d fb 0e 57 87 66 2b 34 af 96 1e 66 b4 4f 26 f6 09 a1 bd e5 97 d1 e7 c6 42 81 0a 82 83 60 08 75 59 89 3d 82 8e c3 b4 a2 8a 3b 6a 08 3c d6 5c cb 50 b2 43 4f 89 ff 00 a6 cb ac ec e1 09 ca 9c d0 01 00 ae 8a 28 49 aa 63 4e 89 af 66 52 9d 84 97 2f fa 64 d5 a7 fc 2f 1e c9 44 a3 da 25 0e 6e 1f e5 61 b4 ca 0a 89 ed ac 64 83 d1 10 48 3a 8f 77 65 74 51 ec 1e de 5c 04 9f d7 3f a0 5e d6 4f 98 fe bd ab ed bf ba 68 6e 9e 27 c5 3e 1c 34 b2 cb df 73 2b e4 13 66 9c c8 fd 23 ba c3 4c 63 65 78 f3 0a 75 5f 92 e0 40 31 f6 aa e1 1e 4a ca cb 2d d5 5c 10 00 9d 96 54 55 53 cb 21 30 9a 39 82 a9 b8 91 b8 c4 b3 2b 82 dd 01 c5 98 51 64 70 77 23 d9 0a cb 3b 2d c9 39 c2 c3 6f 10 1c d0 cd 97 f1 41 05 44 62 91 b2 03 70 b2 d2 a9 84 59 3c ba ce 58 9c dd f5 3e 21 c5 af 77 00 17 2b 0b Data Ascii: MWf+4fO&B`uY=;j<\PCO(IcNfR/d/D%nadH:wetQ\?^Ohn'>4s+f#Lcexu_@1J-\TUS!09+Qdpw#;-9oADbpY<X>!w+
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: a4 d9 54 d7 60 57 f0 43 96 c7 cd 33 23 6e ae 75 13 60 85 91 37 46 8a 6d 0d 97 7b b0 aa a2 15 79 2d db bc 50 78 ba e9 b3 a7 62 f5 eb b2 8b 8d 65 57 a2 6c ed ca 7b e1 02 16 47 67 03 b1 6d be 08 84 68 02 75 13 ea 9c 1d 75 c2 ac ab b2 98 09 7f ae 7f 40 bd b4 bf 3b bf 5e d5 bf 80 01 d6 3c 44 27 b1 d9 e3 ad f5 6a 7b 5b 9b 97 e6 8c 98 86 44 de eb 2e ac aa ba 2b 6a 9e 71 71 92 53 e3 94 1f ba 4a 6c 90 31 f9 82 85 cc 73 1a ec c7 aa cb 39 2a a5 be 6b d9 00 7b b4 4e 96 7c 95 b0 4d 64 41 a0 af 63 9b e8 15 0f ea 8e 22 5c ee 1c 01 06 58 05 58 f3 8e 4a 84 28 99 82 0e af 2d 11 91 ee 79 d4 ec 04 15 6e cf 8e c0 0d 56 62 13 a3 39 93 4f 0b 93 5b c4 87 20 b3 82 0a b3 87 42 bc 54 93 cf 1c 51 8a bd ce b2 74 71 b0 39 d9 9e 1a 01 29 ec fe 60 9f 28 ac 78 99 1b 5e 5a 85 3c 72 16 4f Data Ascii: T`WC3#nu`7Fm{y-PxbeWl{Ggmhuu@;^<D'j{[D.+jqqSJl1s9*k{N\|MdAc"\XXJ(-ynVb9O[ BTQtq9)`(x^Z<rO
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: 61 4d 26 16 56 c1 4d e1 16 aa 9f 0f 83 64 78 89 33 c8 16 64 df 59 c8 d1 66 a3 23 da c0 2e 4d 10 c3 61 9b 0c 5f 0b 69 f5 4e c2 e1 5b 9f f7 ee 1f 80 57 a9 44 f3 4e 76 25 c0 f2 d8 5c e6 85 2b 89 00 55 65 a1 7d fc 13 32 d0 0c aa 18 e5 dd d2 ae 5c 26 eb 33 8e c2 a6 0f 64 e0 d0 31 c1 43 30 ce d7 e7 b2 8e 3f 49 cd 95 b9 47 66 be f8 64 27 69 1a f6 69 e8 d9 c7 f3 6c fd 98 c3 e0 85 13 67 73 c1 ad 1a 35 1f c1 d5 35 35 04 d4 02 01 00 87 54 10 eb b4 a7 55 56 47 9f 1f e0 a8 7d f5 bb 19 86 55 ea f2 ee df fb b7 7e bd ba c4 ef 9d 57 11 e9 06 fd dc 64 df dd b0 9d 14 b0 c8 1e 45 29 d5 3f 26 67 0d 55 51 cc 2c a8 e6 a1 1c 4f 26 e0 05 9a 47 11 cc a6 32 39 b0 ce b3 ab 99 a8 17 16 d5 46 d0 5c f3 65 2e 33 10 c6 31 95 6f 45 83 0c 6b 77 59 1c 07 34 47 74 a7 b7 92 04 d1 36 8b 8c 04 Data Ascii: aM&VMdx3dYf#.Ma_iN[WDNv%\+Ue}2\&3d1C0?IGfd'iilgs555TUVG}U~WdE)?&gUQ,O&G29F\e.31oEkwY4Gt6
2024-12-12 18:57:43 UTC	13568	IN	Data Raw: 5e 0e 0a 5f 15 c4 6d 84 ae cd 38 1c b1 21 f0 08 fa ce 77 a0 0e e6 71 52 a2 b5 0e 48 71 98 4a 19 94 92 99 7b 82 68 ea 62 ad a4 5e c9 96 26 72 fe 38 3f eb 51 91 78 7f 11 2b 03 02 31 52 f9 3e 09 72 05 fc 25 2f 97 01 a8 19 21 ab 88 c3 04 16 64 09 09 b7 70 07 11 1d ae f2 d4 cb 29 de 56 24 a9 8a 8b 6c bc 57 1e 23 b4 8d af b8 3c f4 36 56 0c d3 c6 7c 7a 25 3c b6 52 fc cc c8 fd bc ca 9e 18 8e e9 f6 29 2b e2 95 9b e8 40 1b 46 98 53 01 29 16 69 31 09 52 07 a2 13 b8 2e 7f 7b 98 11 a5 56 39 ae 0a 5f 5c cc 62 8a 90 7e 84 60 d4 12 aa a5 7d 31 c3 76 8b 01 12 9a 01 b6 1b c9 bb 94 cc b0 a1 c6 23 68 8b 70 f1 33 10 a3 cc 45 a0 74 f2 44 73 a3 15 b4 24 06 b2 a2 2d 6c 88 0f 43 80 ea 01 da c9 f6 02 1c 86 24 76 b5 58 dc 28 cc 9f 44 33 74 c0 ce d8 12 66 5b 96 2c ea 34 ee f1 b8 b1 Data Ascii: ^_m8!wqRHqJ{hb^&r8?Qx+1R>r%/!dp)V$lW#<6V\|z%<R)+@FS)i1R.{V9_\b~`}1v#hp3EtDs$-lC$vX(D3tf[,4
2024-12-12 18:57:43 UTC	14298	IN	Data Raw: 62 26 72 fe e5 16 18 71 a6 35 93 bc 80 71 04 e2 62 40 31 89 c5 c4 19 ca 2f 8c cc 77 e0 8b 4b 2d 63 33 28 81 09 50 22 46 24 46 00 13 99 a2 59 31 16 04 2d 1f 19 f0 b3 ea 69 31 dc 14 f9 26 1e 26 57 8a d2 9c d8 14 7a 86 8c e1 e0 6b eb fe 91 82 0a bf ee c1 73 9b 8a 68 71 52 b7 7c 03 d3 dc 3f ca d0 f2 31 8d 17 8e 99 72 68 de 71 1f 40 38 22 70 20 f5 be 99 b7 91 70 ad c1 23 2b d1 04 5f 71 61 33 25 5c 11 ba 61 07 60 69 3b b8 4f a1 4a 0d 02 90 e5 bd 20 3f 10 9f 34 cb cc e6 d6 12 81 81 29 10 e8 59 78 e6 07 7f 18 8d f8 44 87 66 d6 26 16 dc 30 cb b4 ee b5 32 f1 4a 51 50 13 4b 60 d2 98 a2 cf 81 1d dd 63 68 59 60 8c 01 4c 14 99 dc b5 c2 50 11 81 3c 2a 7e c5 46 06 a5 42 96 bc 73 ac 4b 8d 78 c3 52 cc 05 55 0d c8 a5 4d a2 8f 37 1f 53 99 d4 de 25 6a c3 89 0d dc 16 86 d5 45 Data Ascii: b&rq5qb@1/wK-c3(P"F$FY1-i1&&WzkshqR\|?1rhq@8"p p#+_qa3%\a`i;OJ ?4)YxDf&02JQPK`chY`LP<*~FBsKxRUM7S%jE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49898	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:42 UTC	852	OUT	GET /thumbs/2024/12/11/125806/87646013/WOW.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:43 UTC	368	IN	HTTP/1.1 200 OK x-amz-id-2: O2PWRmVvpABJty/rqesIgHOLFXB5PIhMy6VjRGVVx/F8dqi4xcKsUnjMUX15V5HpDCeBJciFtwo= x-amz-request-id: NGEH7PJKJGKH33YR Content-Type: image/jpeg Server: AmazonS3 X-LLID: fe12a1ff2f96225b58e0fc2696e332ad Age: 89976 Date: Thu, 12 Dec 2024 18:57:42 GMT Last-Modified: Wed, 11 Dec 2024 17:58:07 GMT Content-Length: 99278 Connection: close
2024-12-12 18:57:43 UTC	16016	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: 47 7a 28 fb 47 0c b4 bc 5f 37 0c bf 96 f7 51 d5 b2 df ab ba 5f 08 ec e9 b3 ca d6 57 b4 32 a4 d8 f5 57 db 58 6b aa 26 64 46 3a ac 25 69 c0 dc 8c b8 99 1e f2 ea 05 a7 d9 88 99 a6 55 53 f2 ec 24 86 df e2 b9 b7 f6 30 df 4e 9a 0d f9 ce 7e 8b 8b 7f 66 d7 56 bd 2e 66 4b c5 2e b2 9d d4 ef 54 1b 8f 33 89 d5 69 3b 6c 63 7a e0 97 48 5c 29 54 f6 ee b6 14 eb 0f 29 da 35 58 5d ab 59 ac 40 e9 8e dd 51 95 4d 61 8d c9 77 42 ab 5d ec 55 eb 96 2f f8 f9 37 e3 02 4d 4a fa 0f 57 6c ea f3 3b f5 c5 43 c8 67 9c 67 b5 a0 56 ab 1f 67 bf 80 ea ea e5 04 c3 90 24 68 3e a2 ab 2d 3d c9 6e 11 be 96 25 5d d2 b3 32 63 48 8a e7 f6 f7 c6 8b ea 9e 54 13 8f 71 fc 57 ce 67 35 eb cf 84 2d f9 95 47 3f 60 8e c3 a4 65 7a 05 e8 7a da e5 e1 fb 9a ad f8 fb 40 07 a2 f6 7a 7e 07 47 c0 b5 ab a1 c8 0e 40 Data Ascii: Gz(G_7Q_W2WXk&dF:%iUS$0N~fV.fK.T3i;lczH\)T)5X]Y@QMawB]U/7MJWl;CggVg$h>-=n%]2cHTqWg5-G?`ezz@z~G@
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: b7 cd 2b 89 35 a1 52 f4 74 d3 c2 36 ca e1 aa 1a cd 4e de 1c 2a 85 60 ad 70 41 e1 33 1c 10 58 4c 5e da 24 30 8f b9 7b 14 0c 24 87 28 b6 41 74 d8 ef aa ef 16 6d ed 17 4e 39 76 9e 42 79 0b 41 c3 27 d1 5c 3c f8 62 be a4 02 5b e8 a9 9a 58 e7 af e0 42 78 19 60 64 75 25 7f f7 8f ed 5d 4f 3d c1 c1 20 76 f0 80 56 b9 20 90 3a c8 38 73 50 69 e2 65 52 31 4c 88 24 62 19 02 93 19 14 06 96 41 ae fc 7f 22 6c 3c 96 ba be da dd 45 5e af 4e c1 c8 6c f1 b2 41 e9 75 86 ce 9d 7e 19 ff 00 2c e3 1a f6 1c 86 b7 f1 4f 5a 9d f5 60 25 b3 c8 1d 17 44 64 ad e4 b2 8b 48 8c 1f c5 3c 26 d0 1b d5 48 ca ec ed c9 96 4e 6b d0 0b dc 23 44 1c 38 4c 50 69 1b 20 ad d0 16 3c 6c 81 b9 2c 27 42 a2 af 56 ef 8d c9 8c 6d 36 0b 1d ab af 5f 83 7c b3 1f 19 f8 0d cb 6d 04 cc 3a 8e a8 89 ec f8 63 cc c5 ed Data Ascii: +5Rt6N*`pA3XL^$0{$(AtmN9vByA'\<b[XBx`du%]O= vV :8sPieR1L$bA"l<E^NlAu~,OZ`%DdH<&HNk#D8LPi <l,'BVm6_\|m:c
2024-12-12 18:57:43 UTC	15226	IN	Data Raw: 80 3a 3a 9d 12 aa 89 1e d8 65 65 43 a8 ef e1 52 d7 5a a8 e4 a7 ec 35 b4 ea 93 5d 76 01 fd 41 c4 58 a7 17 c9 04 93 48 f3 5a a7 83 e4 6b 1c 41 ad 53 c0 b4 5e 3c 52 65 64 c7 14 42 a5 d6 75 3a 24 8b b0 9f 32 c9 6e 26 04 1c 73 0d 4b 40 df 4f 55 51 c9 bd 65 1a 4e d1 f8 2a 73 ed 4e a9 a5 93 c1 34 fe 1d 93 1c 52 38 49 6a 8d 56 7b 45 4a de f1 fc 65 61 74 ed 75 8d 4d 16 36 3a 35 a0 72 c9 6b 9c 0e a1 4e 0f 2a 2c a9 37 48 50 59 45 3e 5d 65 7d fa 9f da b6 c3 ab 28 4e 67 c5 3e 25 76 46 73 08 3a aa e2 ce ec 43 9e e1 a1 47 04 5d 8f 67 20 f3 4b a3 82 79 0a 8b 31 f6 ba 38 9e 47 41 c8 11 d6 ea 70 79 5a e2 72 1b a8 96 0d 71 89 98 e8 c8 70 35 0a 6c 19 5f e1 f2 51 39 97 d5 45 d4 4d 81 72 b1 c5 92 2a 05 d3 91 5c 99 cc 88 1f 09 20 7c a5 5c 8a 53 4b 8c 22 9c c9 eb 75 49 a1 67 9d Data Ascii: ::eeCRZ5]vAXHZkAS^<RedBu:$2n&sK@OUQeNsN4R8IjV{EJeatuM6:5rkN,7HPYE>]e}(Ng>%vFs:CG]g Ky18GApyZrqp5l_Q9EMr*\ \|\SK"uIg
2024-12-12 18:57:43 UTC	1079	IN	Data Raw: 6b 10 47 95 71 74 8b 68 2a 29 c3 de d0 35 a8 4d 96 cf a0 ff 00 dc 77 fd 99 f2 1f f2 7f cf 40 bb b6 f8 7c 3f 5f ee 7c 44 35 59 ba e2 fb 81 c7 2e 99 b6 b0 59 6d 5d bd 7a b7 dc 73 41 73 7e 01 73 ed 5d fd 71 77 13 74 2a 32 de 0c 63 34 48 d3 b1 85 2a a8 98 30 a4 67 b6 34 1a 46 c7 44 8c f0 10 71 c5 0a 21 75 13 32 17 a6 d2 44 25 d7 42 b0 5a a3 04 5a a0 61 d5 41 15 18 07 04 11 09 41 18 e7 a0 cd de 81 08 4a 0c c7 51 32 a8 25 6d 53 65 40 4f 09 29 c6 7b 29 f9 08 5c 18 e5 51 cd bc 62 b9 db 35 e1 5b 8f 6f 95 8f 8b c4 06 18 3e a9 6c d7 4f 95 cd 68 56 4e 98 96 3b a9 50 98 9b 52 12 38 3a 16 24 b1 ac 1a 24 62 a3 1a 20 d3 b5 00 f0 50 0e 2f 41 22 73 d0 68 b7 75 52 0a d2 4a 02 76 20 09 60 b2 60 f0 13 07 80 81 97 1a 04 0c a0 94 8a 20 e0 47 0a 94 b0 a7 6d 4e 42 76 c4 f0 46 96 Data Ascii: kGqth)5Mw@\|?_\|D5Y.Ym]zsAs~s]qwt2c4H*0g4FDq!u2D%BZZaAAJQ2%mSe@O){)\Qb5[o>lOhVN;PR8:$$b P/A"shuRJv `` GmNBvF
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: d5 45 8d e5 4b 16 aa 55 05 c2 0d 42 4a 8b 08 5a 6c a5 43 98 d4 2a 27 60 ba 46 94 39 a1 01 1c 92 86 a0 10 4f 50 80 63 e4 40 45 dd ba 46 9e 37 55 00 5c 54 d5 05 44 30 dd 56 02 60 d4 f0 59 75 91 80 8a 59 40 09 60 03 73 ea 4a 0f 26 82 11 83 c9 4b 9a 9e 0b 2e 32 47 4d 53 c1 72 44 e9 63 f5 4f 09 bb a2 33 b2 b4 4b 02 6e 7b 48 72 58 5c d9 d2 47 40 8c 1f 20 d2 04 b0 32 1d e1 18 3c a3 2e 20 a0 10 c8 82 70 7a 01 f5 aa 65 4d 74 6d 78 a1 4c 94 bc cf 19 be 17 34 8a 82 16 fd 7b 39 7b fa f3 e5 e7 1c af 1c e8 25 36 a0 aa e9 95 e5 76 e8 ac 22 8a dc ce 0e 4f 20 b5 41 65 c1 c8 19 32 52 ed 42 15 93 f1 72 9e d7 8b a9 11 a5 e1 f9 07 36 56 9a d1 67 63 7d 76 6a f1 f9 50 48 05 ca 65 6d ae c2 66 cd 04 7b 4d 51 b7 96 d3 60 13 e4 d1 d5 59 e0 e5 44 73 68 11 85 65 e8 2d 20 38 d7 d4 ac Data Ascii: EKUBJZlC*'`F9OPc@EF7U\TD0V`YuY@`sJ&K.2GMSrDcO3Kn{HrX\G@ 2<. pzeMtmxL4{9{%6v"O Ae2RBr6Vgc}vjPHemf{MQ`YDshe- 8
2024-12-12 18:57:43 UTC	16384	IN	Data Raw: 01 c0 12 80 3b 8c e3 e5 9e 60 f1 f2 b7 52 80 ba 9d f8 cc 2d 6b db 50 35 48 cd ee f1 4f b6 ca 14 03 44 78 07 42 9c 06 3e 3c 40 6c 6a 98 49 1c 91 81 46 84 1a 4e f1 68 aa 00 3c 8e 42 46 d9 a8 30 43 93 ca 04 fb ac 80 22 1e 5e 42 40 7e 88 02 5e 23 9d bb ad 52 83 57 4f 8e 58 7e 08 20 ee a8 35 07 44 01 d8 59 65 b6 71 40 5e 63 e4 82 dd 50 49 fb 80 a0 1a f7 03 aa 00 4c 87 b4 0b 20 02 33 8d d4 40 35 ee aa 54 90 49 42 80 1e 40 36 94 aa a2 bb 22 5a 14 95 10 09 6b aa 17 29 d5 69 49 59 37 da 85 4a 69 7f a2 4b 94 ac 35 28 8a 82 03 6d 54 56 90 b4 52 a2 d1 01 24 1f e2 b3 fb c3 f6 a6 97 df bf 7a 3f ed a7 31 fe 5b f9 b8 94 77 7e da e2 fc 77 f9 b5 ff 00 5f f6 af 99 23 75 97 0d 7d 54 11 1b a8 a5 62 a2 7a 71 50 54 6e 4d 62 1a ea 04 83 b7 84 c3 bb 88 32 19 10 10 4a e4 86 51 31 Data Ascii: ;`R-kP5HODxB><@ljIFNh<BF0C"^B@~^#RWOX~ 5DYeq@^cPIL 3@5TIB@6"Zk)iIY7JiK5(mTVR$z?1[w~w_#u}TbzqPTnMb2JQ1
2024-12-12 18:57:43 UTC	1421	IN	Data Raw: aa 06 10 77 d8 5b 4a a4 14 7c 88 1d d3 e8 80 04 0a 20 15 05 87 6a 81 83 9a da 94 12 66 b6 88 38 7b 4d 10 64 7d d0 a8 88 b1 2c 2b 96 08 c7 96 9b a8 ba ba 3a fb 16 d8 3c ab a2 01 ae bb 52 e5 fd 5e 8f 5f 6c 5a 45 3e 36 45 c5 2b e8 9b b3 5e d3 e4 e3 e3 78 ab 4d 0a 31 2b 69 72 0b e9 1c c9 d8 0f f1 0f da b3 bd 42 f5 be f7 fb b2 2b f6 ff 00 95 1f fe 3f f3 31 a3 bb f6 d7 cc 7e 3b fc da ff 00 af fb 57 ce 13 c5 ba 32 d5 c5 2b e8 f7 9e 1e 6f e6 fe 3c 58 0e 63 1b ee fd ea 2d 35 73 6d ae 55 be 1b ce 1c 1c b1 04 8e a4 72 1e bd 0a aa 3a eb d4 1a f6 c8 c0 f6 dd ae 59 3a b5 a8 26 83 75 6c 92 e2 bb 22 07 32 e1 33 0f 52 35 4c ab 93 23 4c 60 a6 94 6e 84 52 c9 96 51 3e 14 1e 51 18 cb 50 59 31 cc 24 7a 23 03 91 04 7f 14 60 72 38 47 4e a8 c2 6e ee d8 13 c3 3b b2 09 8d 13 c2 6e Data Ascii: w[J\| jf8{Md},+:<R^_lZE>6E+^xM1+irB+?1~;W2+o<Xc-5smUr:Y:&ul"23R5L#L`nRQ>QPY1$z#`r8GNn;n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49901	104.18.24.111	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:42 UTC	658	OUT	POST /f2815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2 HTTP/1.1 Host: eagerknight.com Connection: keep-alive Content-Length: 270 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ebaumsworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:42 UTC	270	OUT	Data Raw: 7b 22 70 69 64 22 3a 22 41 2d 36 33 30 46 44 43 38 30 41 36 30 30 32 31 39 45 44 46 42 30 41 43 43 43 2d 32 22 2c 22 70 76 22 3a 22 30 75 66 36 38 62 34 33 65 39 62 38 62 61 31 31 65 66 38 33 63 32 39 35 64 38 31 34 64 66 32 64 39 35 22 2c 22 74 70 22 3a 7b 22 6e 70 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 68 22 3a 22 65 62 61 75 6d 73 77 6f 72 6c 64 2e 63 6f 6d 22 2c 22 70 70 22 3a 22 2f 22 7d 2c 22 6a 73 76 22 3a 22 32 2e 35 38 2e 30 22 2c 22 63 22 3a 7b 22 64 62 6c 22 3a 74 72 75 65 2c 22 64 69 73 22 3a 31 39 2c 22 64 66 6c 61 67 73 22 3a 38 37 31 33 2c 22 64 74 22 3a 31 35 30 30 37 7d 2c 22 73 69 64 22 3a 22 35 2d 36 66 35 63 66 38 35 36 33 64 30 61 35 36 37 63 37 33 64 62 64 38 30 61 32 65 37 33 37 34 61 35 2d 36 37 36 33 36 35 32 64 37 35 37 33 32 Data Ascii: {"pid":"A-630FDC80A600219EDFB0ACCC-2","pv":"0uf68b43e9b8ba11ef83c295d814df2d95","tp":{"np":"default","ph":"ebaumsworld.com","pp":"/"},"jsv":"2.58.0","c":{"dbl":true,"dis":19,"dflags":8713,"dt":15007},"sid":"5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732
2024-12-12 18:57:43 UTC	848	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:43 GMT Content-Type: application/json; charset=utf-8 Content-Length: 3 Connection: close access-control-allow-credentials: true access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie access-control-allow-methods: POST, OPTIONS access-control-allow-origin: https://ebaumsworld.com Cache-Control: no-cache, no-store, must-revalidate expires: Thu, 12 Dec 2024 18:57:42 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding, Origin x-buildname: hoothoot x-buildnumber: 1553448542 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8f0ff1145a8942c4-EWR
2024-12-12 18:57:43 UTC	3	IN	Data Raw: 7b 7d 0a Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49904	104.18.24.111	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	394	OUT	GET /u/f3815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2 HTTP/1.1 Host: eagerknight.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:43 UTC	609	IN	HTTP/1.1 400 Bad Request Date: Thu, 12 Dec 2024 18:57:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 23 Connection: close Cache-Control: no-cache, no-store, must-revalidate expires: Thu, 12 Dec 2024 18:57:42 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding x-buildname: hoothoot x-buildnumber: 1553448542 x-content-type-options: nosniff x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8f0ff1164970420d-EWR
2024-12-12 18:57:43 UTC	23	IN	Data Raw: 75 6e 6b 6e 6f 77 6e 20 72 65 71 75 65 73 74 20 66 6f 72 6d 61 74 0a Data Ascii: unknown request format

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49905	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	1088	OUT	GET /thumbs/2024/11/19/110355/87637163/dirt1.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:44 UTC	371	IN	HTTP/1.1 200 OK x-amz-id-2: HT8sukF2wUP0MkPeaWl2De3+DsZ810JhaC7WMQoo5Bfj1z4FZyKVsiG/6tH6Qkz0cZ34aWGkNZU= x-amz-request-id: 6M3E3MNRZW3KY280 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 9077cbc856c90f5ad4201957629a31b5 Age: 1997628 Date: Thu, 12 Dec 2024 18:57:43 GMT Last-Modified: Tue, 19 Nov 2024 16:03:56 GMT Content-Length: 211043 Connection: close
2024-12-12 18:57:44 UTC	14078	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 6f 1d f0 d2 a3 91 5c 17 d0 5a 88 00 0d 40 a9 b5 a1 14 aa 1c 98 29 1d 2d f8 d4 7b 51 5c 10 60 89 63 61 63 4d 64 42 74 41 c8 88 7c ba d3 f6 20 e2 1a 98 2a a7 ec 36 84 0f e8 6e 3d 46 de 55 2f 28 99 e0 8c 94 9f 9e 97 b1 0a 05 8d 36 3a 6e d0 53 e6 1c 05 21 28 b8 b7 5f 0a 52 98 d5 01 10 47 45 01 4a 0b e2 18 da f6 e8 54 2e 7c e8 e1 23 55 0e 0b 20 5f 7a 6d e3 4f d6 3e 27 8a 96 d2 53 7b db e3 4f 8b 0e 68 f5 13 db db e9 58 bf 8d e8 e2 c4 ed 21 6e e4 50 91 f3 a4 51 c1 93 02 74 e5 d0 90 6e a4 8d 75 34 7a d8 fd 91 a0 29 b9 66 5c 8b b1 4e a6 c4 79 d1 eb 64 db 22 83 09 7d c2 64 53 25 99 0c b6 ab 80 95 03 6f 1a f7 3e 3e 90 78 fd a7 a6 87 3e d4 14 97 9c 00 e8 15 d2 be 92 ab 43 c7 b6 e3 82 91 fa 42 e2 f4 99 32 24 84 e5 9f 48 b9 eb 4d 16 4a 16 a2 b4 80 4d c0 e8 2b 46 b4 18 Data Ascii: o\Z@)-{Q\`cacMdBtA\| *6n=FU/(6:nS!(_RGEJT.\|#U _zmO>'S{OhX!nPQtnu4z)f\Nyd"}dS%o>>x>CB2$HMJM+F
2024-12-12 18:57:44 UTC	1577	IN	Data Raw: e4 d8 97 22 80 ea 5b 92 da 95 71 64 93 71 e9 bf c6 f6 a8 b4 b0 ae 83 bf 30 90 ac 47 20 cd 46 05 71 3d f5 a9 d9 18 9d b6 f6 dc 50 f1 27 c0 d4 aa 8e d2 d0 87 11 89 c9 c7 95 1e 7c 08 8e be 1e 88 b4 bc b5 37 e9 48 58 3a 69 d4 6b 4f 95 50 2a 36 27 81 8f ca 39 05 fc 4b 58 f7 24 c7 fa 9f a8 69 c4 a0 82 1c 1a 10 35 f0 a3 d8 87 eb 05 91 c7 21 30 98 72 2b 12 5a 7d 17 6e 6b 2e 35 b1 25 5f 8f 53 47 b1 09 e3 64 79 4d 48 01 c5 08 eb 09 6f aa d4 35 15 52 85 c5 89 52 5b 2c 04 84 90 e1 58 05 ed 4d c0 d6 d5 52 1a 8b 21 c9 72 1a 98 7a 3b a9 43 cd 1d c1 29 f9 89 f2 b7 87 e3 53 6d 43 50 8c 93 e7 20 fa e6 bb e8 71 d5 0d c9 b5 81 58 f1 a6 b4 50 30 e9 d9 29 72 cc 70 e0 b8 61 1e d2 76 db e5 14 84 de a4 9b 8d 66 24 36 fb 6d b2 c2 65 ec 42 94 96 5d d4 25 63 a2 93 f8 54 5e b2 8b ad Data Ascii: "[qdq0G Fq=P'\|7HX:ikOP*6'9KX$i5!0r+Z}nk.5%_SGdyMHo5RR[,XMR!rz;C)SmCP qXP0)rpavf$6meB]%cT^
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 57 d4 78 47 d1 14 06 dd 80 85 33 b6 ce 69 6d ca 1e 35 29 2b 6e 37 51 96 7f 0f e1 3c 81 95 b5 90 e3 51 9d 42 ee 14 bd 82 fa fc 6d 52 f1 54 68 a8 79 07 db 1f 6b 72 c1 e4 c3 8a bc 74 97 7a 21 0a da 94 fc 40 b5 43 c1 46 b5 36 a6 7b 53 63 3e 72 9f b3 de 45 89 61 d9 dc 57 3e 67 b0 01 26 3b 96 20 7c 2e 6b 8b 27 c6 d2 e7 4d 7e 4f 22 d0 a7 1d c1 77 57 82 3d ed 98 53 59 11 bd 5e e3 17 71 16 1e 36 d0 57 97 9f e2 dd 3f aa 3a eb f2 0b cb 27 7c 2f ee 57 2b 06 52 e2 e5 95 f5 ee 20 80 58 db 65 8b 68 ab 8a f3 32 75 f2 d7 7a b3 b7 07 6e 97 4e 59 a8 f8 b7 7a 78 7f 28 4b 49 61 e1 8e c9 92 37 30 e1 da 6f f8 d2 4f 8e e3 b2 56 d8 d0 9c 73 b8 5c 93 06 50 58 c8 b5 96 c5 6a a7 a2 3e 77 10 0f f0 a4 eb 5b 53 be d6 8c c6 fd 2a b5 3e 4b 31 ae e4 f1 de 4f 1d 31 43 4a e3 59 52 7d 10 e4 Data Ascii: WxG3im5)+n7Q<QBmRThykrtz!@CF6{Sc>rEaW>g&; \|.k'M~O"wW=SY^q6W?:'\|/W+R Xeh2uznNYzx(KIa70oOVs\PXj>w[S*>K1O1CJYR}
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: fc 2a 44 24 5a 74 a0 42 35 a6 fd 3c 2a aa 30 a2 2d 54 12 00 9a 44 b4 16 a3 e1 49 8a 18 59 4d ea 44 02 db 74 3a f9 50 29 0f 68 8f ca 82 58 e8 c1 1b 92 00 e9 56 46 a3 d3 36 37 34 d0 9c 9d 68 82 c2 52 90 76 db 4a f9 57 69 d4 fd 22 b5 84 39 a4 01 d0 54 a2 c3 2c 2d 4c 96 c2 d4 9f 3a 0a 4e 42 c2 01 26 f4 9a 1c c0 7a 1b 4f 80 bd 49 16 b0 77 b6 3c a8 23 90 60 40 a0 87 63 dd b6 f0 a0 39 1e 58 50 51 e1 48 34 04 9e fb 69 1d 68 0e 40 54 00 1a e8 29 4a 1a 72 51 5d f1 ee 63 7d bc e3 6a 18 f2 87 79 46 68 2a 37 1f 8e 4e 88 5a 85 97 21 c1 e4 81 d2 f5 bf 53 af ee bc f8 38 fb bd b5 82 8e 37 31 ff 00 65 3b 69 27 98 e5 64 64 72 ae 7d 72 12 e9 91 99 9e f9 3b e5 3a b5 5c ed 27 cb c3 e1 5f 45 7e 38 eb 0b 43 e3 79 5a f6 6f 79 37 8c 95 c7 e2 b8 15 88 2f b3 0a 1c 64 25 b7 37 10 6c Data Ascii: D$ZtB5<0-TDIYMDt:P)hXVF674hRvJWi"9T,-L:NB&zOIw<#`@c9XPQH4ih@T)JrQ]c}jyFh*7NZ!S871e;i'ddr}r;:\'_E~8CyZoy7/d%7l
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 15 6a 89 66 90 8d e7 c2 f8 7f 1d e0 d8 78 f8 5e 3b 89 63 13 8c 64 02 e4 56 c0 0b 71 76 b6 e5 aa d7 fd f4 a6 48 d1 96 1e 59 ee 1b c4 b0 cd 72 0e e3 72 88 bc 66 0c 90 0c 78 ef ad 29 f7 47 c6 fa d8 0f 2a 97 63 3b 54 45 cc b8 b7 0b e6 3d bd 5e 77 82 88 59 9f a8 46 f8 99 66 82 5d 0a 48 ea 94 12 2b 2c 91 75 06 b8 74 67 3e 3f a3 f0 23 2b 3d 8e e6 18 89 5f d7 d2 83 fd 2a 53 04 fe 9b e0 da cb 49 36 da 47 95 78 79 be db 71 47 b7 82 de 09 47 6f f8 db 31 18 f7 03 41 b4 95 1b 28 0d 6d 7d 3a d6 d8 f1 b6 67 d9 70 5f 08 c7 c7 76 2a dc 7d 2d b5 19 86 ca 9f 7d cb 00 96 fc 54 a2 7c 2b a9 51 a3 cc f6 b2 84 e4 9c 03 8a f2 0c c1 9a f6 5f 1f 07 8c c4 0a 7b 33 c8 1e 75 29 65 b6 d3 a9 0c 0e aa 51 b7 88 ad 6b d7 e5 b9 7e f6 73 eb b9 fd d2 89 07 21 99 1d a7 75 b6 f8 e4 29 22 1c 2c Data Ascii: jfx^;cdVqvHYrrfx)Gc;TE=^wYFf]H+,utg>?#+=_SI6GxyqGGo1A(m}:gp_v*}-}T\|+Q_{3u)eQk~s!u)",
2024-12-12 18:57:44 UTC	7320	IN	Data Raw: c9 e1 3d 94 68 64 79 1b 88 53 5c a7 ba 92 d0 14 fb 8a 00 a5 4d c5 bd f6 a7 53 62 0d 2d c0 cc 2a 95 2b 21 93 5c b9 72 1f 96 97 49 19 07 df 3b d6 a0 af 98 a8 a8 5f 52 68 80 3a 6d f6 db dc 76 39 b7 0a 73 07 96 96 1d ce f0 e6 c4 09 2d a9 03 73 98 d5 fa 5a 73 f1 03 4b d6 6d 6a 34 56 bc ee 5c 7e ca 72 4c 96 2a 06 3d 8d 99 82 a9 98 dc b4 86 5b 5a 03 4b 3b d4 db 6c 94 ec 05 25 5a 2b 53 46 e5 14 2f 2d ee 5c cc ac 39 12 5c cd a6 5c d4 ed 3f 4a fb 8a f7 14 95 9b 7e 82 40 d8 40 be a3 4a a5 4f d4 5c 89 0f 62 79 91 e1 fd c2 e2 79 59 4e db 17 97 59 c4 66 02 c1 48 53 52 4e 85 43 4d 01 3d 48 aa 6a 09 1b 7e ea f8 bc ae 1f dd dc 84 a7 9d f7 31 9c 9e 19 f6 5f 76 db 2c de 85 29 57 99 4d bc 75 bd a8 ab 01 ef b6 f9 dc af 1b 99 c4 f2 71 12 d3 0e 64 e0 2d ec 62 a6 46 43 8c 28 b6 Data Ascii: =hdyS\MSb-+!\rI;_Rh:mv9s-sZsKmj4V\~rL=[ZK;l%Z+SF/-\9\\?J~@@JO\byyYNYfHSRNCM=Hj~1_v,)WMuqd-bFC(
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 84 ed 93 1e 04 11 64 db 45 b6 5d b7 4d 3a d5 36 38 61 e8 87 f6 b3 8c 79 b9 90 f1 bc c7 96 b9 a8 43 ee 49 53 48 57 c3 c2 e2 8e 61 02 99 9c d7 b6 cd c5 58 e1 bd b5 56 22 73 4f c7 70 65 65 48 53 cf 32 96 dc 06 e2 e6 d7 34 c2 0e 80 77 41 b5 e4 f8 1c e9 5f a2 a9 73 70 ec 65 5b 51 1e 96 dc 2c a5 cb 1b f9 da a2 cc 11 82 b1 bd ef cd 18 cd 2c 64 04 06 94 df b6 a5 43 69 29 51 29 f4 ed 09 48 b9 b9 d2 84 9c 6a 54 a2 2d 9d e6 f9 8e 4f 2e 7e 39 39 19 f9 5c 64 62 96 a7 64 b6 ba d3 69 79 42 e1 85 85 5b 6a 85 1e b4 4e 86 be ee 47 2c 47 3f fb 2b 79 33 70 10 9b 97 c7 22 c7 87 0b 2f 19 1e dc 84 98 4f 00 50 b1 d1 77 4a c5 d4 75 a7 56 09 49 cd 06 67 e6 a1 63 86 32 3e 56 43 6c 3c 50 f2 31 89 3e 86 d4 a1 ea 3a f9 d2 83 49 12 47 8f 3e 6c c8 ca 7c 09 2f 92 12 43 88 07 72 4e 9e 3a Data Ascii: dE]M:68ayCISHWaXV"sOpeeHS24wA_spe[Q,,dCi)Q)HjT-O.~99\dbdiyB[jNG,G?+y3p"/OPwJuVIgc2>VCl<P1>:IG>l\|/CrN:
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: a0 95 a4 94 28 14 74 f3 15 12 52 14 ce 91 1a 4b cf 3c ca 50 c5 94 82 db 69 55 f7 00 47 4a 37 06 ce c4 76 e5 d0 e7 68 b0 1e f3 0b f7 32 38 82 9d c7 d0 82 94 24 9e b5 bd 5b 48 c1 ff 00 63 91 bc b9 96 47 2c ce 36 90 94 27 ea 9c 08 dc 34 d1 47 c6 b3 b3 6c d2 a9 8c 29 0d a4 5d b6 c8 db a2 94 3a 2a 92 2a 0d e5 f6 45 20 b1 0b ba 28 48 5a 14 e4 46 c5 81 b6 df 42 b5 35 78 d6 e4 d8 ca 79 84 a9 5d cc 98 cb ee 09 20 4e 74 84 29 5b 12 09 51 b6 b5 72 4f 83 42 e2 4e 42 6e 34 c7 7f 0c b6 a3 22 42 9a 51 8f ab 69 17 b0 59 74 79 d2 90 82 ab e5 bc 78 c4 7e 63 ed 95 ae 33 63 e7 27 70 bd ff 00 9a a9 68 f5 13 67 53 7e d6 23 b4 be d9 71 b2 ea ba 0f 93 c0 8b f9 d0 e0 52 74 b3 86 c0 83 90 80 8c 72 59 6a 13 4e 0d cb 79 27 50 3c 4e ef 3a 88 22 d3 23 77 21 e3 5d a1 c9 3a e7 1c 9b ca Data Ascii: (tRK<PiUGJ7vh28$[HcG,6'4Gl)]:**E (HZFB5xy] Nt)[QrOBNBn4"BQiYtyx~c3c'phgS~#qRtrYjNy'P<N:"#w!]:
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 56 5b 32 ea 63 6e ec f6 bf 91 f6 5f 94 ad 84 bf 23 fa 24 99 6e 23 8c 72 92 ca d8 8b 3d 2d 78 b3 bb c8 8a d1 6a 0d 79 2d 3e cf 7d e4 73 de d7 c9 66 3c e4 23 2d 01 77 4b f0 e6 82 e2 14 15 a2 94 37 5c 5e de 34 dd 64 86 a4 d4 b8 4e 45 f6 d5 df 4c b2 27 4a 93 27 b4 f9 ec 9a 7d ac 8e 47 1a 52 84 3a e2 fa ac a2 d6 be be 54 b8 89 af a1 5c 73 1f f2 e2 e4 72 df cf e6 bb 5f dc 9c 2f 70 b8 cc 15 a9 e2 b7 e4 a1 19 05 37 6b ec 48 bd 94 af 0e 94 e4 98 32 a4 9e c2 77 6b b6 d9 78 13 73 fd bb c8 c5 c4 3e a5 7d 1c b6 91 ee b4 a0 34 37 b7 8a 81 d6 af 41 72 62 cf b8 0c 94 fc 9f 20 c3 b1 8f c6 4c c7 45 c6 e2 d8 6d f9 4e 45 5d ca b6 8d ed a4 d8 e9 7a 34 26 4a d9 de 49 dc 28 cc f1 95 bb c8 f3 af 63 b8 fb 0e a7 02 cb 2b 91 68 2c be 6c f2 5a 09 00 b7 ee 58 ee 03 ad 03 2d 79 f9 57 Data Ascii: V[2cn_#$n#r=-xjy->}sf<#-wK7\^4dNEL'J'}GR:T\sr_/p7kH2wkxs>}47Arb LEmNE]z4&JI(c+h,lZX-yW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49906	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	935	OUT	GET /thumbs/2024/12/11/031836/87646374/shape.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0
2024-12-12 18:57:43 UTC	369	IN	HTTP/1.1 200 OK x-amz-id-2: UcbZNfLbqzZ1Ms9d1/7K8gXUI3dd6dH4c9T2XClTaOIRGNr5tpHersaNgE/yPMC2eA/MiVAElt0= x-amz-request-id: 1EGJE3Z8PAH6V5ZV Content-Type: image/jpeg Server: AmazonS3 X-LLID: deda37079161b5197ef13d42d86182d2 Age: 81547 Date: Thu, 12 Dec 2024 18:57:43 GMT Last-Modified: Wed, 11 Dec 2024 20:18:37 GMT Content-Length: 174139 Connection: close
2024-12-12 18:57:43 UTC	6840	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 9e a4 fc 69 cd 30 9b b6 5b 72 6d 66 da 86 e8 3a df ce 99 c5 23 b9 ca 91 f0 ab 90 aa a8 cc 01 3b 2b 48 8a d7 52 7d 5d 68 52 68 8f a0 d0 10 02 6e 68 c2 5b 0b d0 59 78 78 95 f0 aa c6 55 93 5e 27 90 fe 99 38 c8 7c 61 32 b0 b1 b9 20 8f 88 b5 5e b7 08 ba b5 65 7e 63 98 63 1c 22 23 37 a8 28 24 df e6 4d 69 6f 91 23 e5 78 c9 30 27 58 9d 40 be a5 f5 d3 e1 51 7a c6 b7 03 38 8e 25 e4 ca 87 f5 58 73 7e 9d fe 07 68 f8 81 57 d7 a5 1d 9d b2 c5 d7 84 ef 88 fb 35 73 38 be 3b 33 33 07 dd 05 a4 78 6c 03 31 16 d0 37 8d 6f 76 c7 cb 8b f4 dd ab 9a 65 64 cb 97 97 36 5c 8c f2 c9 33 17 32 3f d4 d7 3f 8b e3 5c 9d 96 6c ed ea 9e 33 06 5d af 99 c7 71 fc b4 73 e7 34 8b 10 1f 97 24 67 d5 1b ff 00 39 f8 55 74 ef 82 ed d3 2c f7 47 23 8d 9b cd 3c d8 f9 52 65 c0 57 d5 2c c7 a9 f2 5b 53 ee Data Ascii: i0[rmf:#;+HR}]hRhnh[YxxU^'8\|a2 ^e~cc"#7($Mio#x0'X@Qz8%Xs~hW5s8;33xl17oved6\32??\l3]qs4$g9Ut,G#<ReW,[S
2024-12-12 18:57:44 UTC	5336	IN	Data Raw: fe 2d 65 33 ed 1e f2 e4 f8 b9 e3 68 72 5d 93 63 47 ec b1 bc 45 4f 4f 49 f2 a9 ec d1 52 ae ff 00 ae e0 39 ef 6b f4 f1 9c 7e 61 41 fd 5c 31 df 63 37 89 b7 41 5c 7d 9a 61 51 a3 f0 ec a4 16 0c 00 d7 5a cb 0d 35 67 2b 32 31 10 86 53 70 34 15 d1 a4 6b 0a b2 71 e2 0c 1f 6f e5 28 25 7e 75 b1 e5 4b cb 96 49 27 2d 21 b9 04 81 f2 a7 09 10 02 e1 46 97 a0 aa df da a4 4a fb 6f 76 45 36 1f 31 6a a8 96 b2 f1 65 cb ef 1f 98 0f f7 d5 6f f0 9a 0e 4c 23 0a dd fa 56 08 0d 97 9b 04 31 80 97 b8 14 61 50 02 cb 3e 48 37 36 1e 75 d1 ae b2 13 02 27 43 e9 6a 76 cc 04 59 73 bd 80 6b 5f e1 59 eb 33 52 41 ca 4a e5 b6 83 a1 ae fe 9d 15 22 38 21 67 99 11 05 ed 6b d7 4d d5 ae ba ba c7 02 89 0e 14 6b a5 c0 17 b7 ca bc af 6b 57 56 ba 8f 04 92 5f c0 f8 1a e6 ea 98 69 35 53 fb ab b7 ff 00 59 Data Ascii: -e3hr]cGEOOIR9k~aA\1c7A\}aQZ5g+21Sp4kqo(%~uKI'-!FJovE61jeoL#V1aP>H76u'CjvYsk_Y3RAJ"8!gkMkkWV_i5SY
2024-12-12 18:57:44 UTC	14480	IN	Data Raw: ac be 2b b8 5e b1 b1 73 54 93 73 9c 4e 3a 87 97 2a 34 04 5c 6b d6 a3 c6 b5 97 0c 71 dd c5 c4 f2 25 86 2e 4a 48 63 fa 80 36 fe da 9f 1a af 34 7c 9f 72 f1 98 18 ed 33 cc b2 37 e0 8d 0d c9 34 f5 e9 a7 e6 e7 7c bf 76 f3 59 ce cc b9 0f 8f 0b 12 16 34 f2 f8 d7 56 9d 78 45 d9 5a ca c4 86 76 bb ee 05 b5 dd d6 df 7d 5e 09 13 4b cc ac b1 c1 89 97 20 86 db 54 13 70 82 f6 24 8a ad 77 b2 af c6 61 ca 3b af 8b 4c 2e ec e4 31 e2 01 63 bf b8 14 74 67 3d 5a be 93 d1 b9 8f 2b da 85 19 50 ab c6 d7 16 d2 bd 2d f5 cc 71 f5 ef ca b6 e5 23 99 82 69 5e 5f 67 f1 b8 77 ce 60 a4 72 e7 70 f4 d8 68 a2 ba 26 d9 e1 0b 17 05 93 8f 9d 84 fd bf 9f 61 8f 3b 6e e3 72 09 d6 1c 9b 7d 37 fe 5b 57 0f 7f 47 eb fe 51 d3 d7 b4 df 8a 5d 2e 24 d8 99 4f 8f 92 19 72 a2 6d ae bd 3e 5f 65 75 7a 7d f3 6e Data Ascii: +^sTsN:*4\kq%.JHc64\|r374\|vY4VxEZv}^K Tp$wa;L.1ctg=Z+P-q#i^_gw`rph&a;nr}7[WGQ].$Orm>_euz}n
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 5c 9d cc 6d 4b 22 46 53 1b 5b 2f 43 4b 2a b1 32 e3 db c2 d6 a3 27 84 89 88 64 1e 90 3e 27 ca a6 d5 4d 5b 8c 40 00 0d 73 20 fc 23 c6 94 b9 55 9c 3a 07 ed 8f 6d 47 2e 7b 66 e4 47 64 8b fc bb f5 56 f3 15 d3 a6 ac 6d 76 58 a1 32 4b 12 5e f1 a0 b7 db 57 61 c4 ad 17 b9 38 6b 58 26 88 6a 40 63 88 62 9b dd 23 68 72 77 7c 3e 35 51 14 ba 68 23 47 91 17 40 a7 72 22 f8 df c6 aa 91 2f 20 56 01 ba 05 24 74 21 ad 70 3e 15 9e 55 35 26 9e 74 46 b9 f7 54 30 f4 83 6e bf 0a 17 22 01 9f 90 a4 b1 72 d2 7f 20 fa 88 f8 8a 8b 57 21 af 14 dc ac 93 09 d3 a3 78 1f 0f 85 4a 96 8c 29 25 b8 f7 d1 94 8e 8c 7e 9a d7 56 7b 1c 62 65 0f 74 81 aa 11 eb 27 a5 fe 15 b4 ac a8 5e 5e 29 25 da aa a5 77 e8 36 f5 35 5a d4 e1 b4 7c 7c d8 d8 e0 4f ab 9d 23 07 53 4f 68 70 87 93 c2 9e 19 55 a4 02 39 64 Data Ascii: \mK"FS[/CK*2'd>'M[@s #U:mG.{fGdVmvX2K^Wa8kX&j@cb#hrw\|>5Qh#G@r"/ V$t!p>U5&tFT0n"r W!xJ)%~V{bet'^^)%w65Z\|\|O#SOhpU9d
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 8e b4 c2 19 d5 da c1 d4 10 07 a7 e3 f3 a3 24 1a 42 76 30 d8 19 bf 14 e3 cb cb e5 4d 1b 37 18 c6 1c 61 0e d0 23 71 ee 06 fe 1e aa 0b e6 33 89 8d 2e 76 52 43 89 0b ca ea 57 f2 f4 dc 6c 7f 0f fe 35 7d 7a 66 e5 cb ec f6 78 f5 af 3d c7 1f 33 93 c6 cc 82 2c 71 24 60 32 48 2f 66 01 6d ed 8f 8d 7b 3e 19 d5 f1 be b7 76 3b 48 86 de 23 b3 a2 82 7b a7 21 ca b7 ea 24 97 c5 63 1a 7b 6b f1 b8 ac 75 d7 c5 d5 dd dd 77 df c7 f0 c7 12 93 cf c3 f2 72 f2 5b c4 72 9d f8 ea d6 00 ca 00 b4 9a 78 5b 4a 7e 43 b3 4d 33 c3 4e 0f 9f c5 c6 68 cf 25 23 3c 59 ab b7 27 cd 48 36 0d f3 b0 aa d7 67 1f b1 eb 6d bf c2 d8 72 c4 2b 8b 2b 2a e4 71 36 ba 4b 20 b9 41 f1 b5 6f ae d9 9c bc ed 7a ee b7 1f 95 53 b8 f8 e9 32 f7 cf c7 3a 64 63 cb 27 e7 08 47 ab 5f 98 e9 59 ef 1e af ab db 35 bc fc 8e ed Data Ascii: $Bv0M7a#q3.vRCWl5}zfx=3,q$`2H/fm{>v;H#{!$c{kuwr[rx[J~CM3Nh%#<Y'H6gmr++*q6K AozS2:dc'G_Y5
2024-12-12 18:57:44 UTC	6328	IN	Data Raw: c8 8d bd 44 01 ad 67 39 50 ac 55 b3 20 e9 a8 fe da eb d3 5e 18 ed 4c 84 4c 9d 7a 7c 2b e0 5e d3 66 24 52 34 64 a9 3a d5 c0 f0 40 7a 53 26 4a b8 1a 50 1a 7b d6 36 22 80 90 4d 13 8b 5b 5a 58 34 32 47 b8 9d b4 60 35 51 32 1d 6e 45 18 09 53 20 74 34 60 26 0b 0c 86 e7 43 53 80 8a 48 19 7e 9a 02 3f 72 48 ed 70 49 14 60 2d 1d 8b da ef dc bc ba 43 3a db 8c c5 3e e6 6b ae 80 91 d2 3b fc 7c 69 ed c4 4d 75 de 53 3a 2e 3b 09 22 c2 1b 04 4b ec e3 46 3f 02 fc ab 93 7d d3 95 63 17 15 de 66 79 75 77 d6 ff 00 3a 88 47 d0 c2 90 61 04 17 24 f8 9a 09 37 15 c1 a7 23 9c b8 b3 6e 38 8c 0c 93 81 ab 6d 1d 00 f9 b5 aa a4 0d 9e 5c 78 79 2f e9 cf 29 89 f7 bb 7b 69 e9 d8 cb a1 5b 1b 93 61 d6 9d d4 e0 cc 39 32 25 8b 2a 59 1f 7a e3 a8 65 62 05 ca de d5 37 5e 17 03 a9 76 c8 2c 45 81 d7 Data Ascii: Dg9PU ^LLz\|+^f$R4d:@zS&JP{6"M[ZX42G`5Q2nES t4`&CSH~?rHpI`-C:>k;\|iMuS:.;"KF?}cfyuw:Ga$7#n8m\xy/){i[a92%*Yzeb7^v,E
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: d3 a2 d9 3a 82 3a 75 ae 6e dd 95 09 e6 e4 b3 5f 27 74 8c 65 65 3e 90 c0 11 a1 f2 ae 4b 44 45 93 c9 66 1d ec 36 83 7e 8a 2c 05 67 6b 49 4b e4 e6 b9 34 1f 42 15 a8 b4 64 33 77 0e 52 b7 e6 42 a7 e3 51 68 69 91 dc 50 18 59 59 2c c4 54 d5 2b 9c 87 23 bc 28 8f 43 e1 52 09 e6 c9 6f 6f d5 a9 bd 5c 80 09 90 7a ad 55 05 45 24 cb 75 d2 b5 d6 24 b7 2d b7 4b 71 5b c1 80 b2 31 de 01 ea 6a a1 3c 62 91 9c 79 55 c0 77 c3 71 32 c9 36 e5 52 e3 c6 de 15 a4 0b 14 7f a7 c1 8d a4 81 ca e6 b0 2b 1b 5b d6 b6 fe 5a 60 c6 18 13 1b b3 db 2d c9 7c ae 53 28 a6 ee 87 db 83 57 fb 18 9b d5 0c 18 70 51 a6 4c 1b 20 70 66 98 7b 9e ae 88 80 d8 df e7 4b 07 20 dc ec 73 8c cc d1 09 36 c6 75 04 6b f3 f9 52 a2 c4 6f 2a 49 8c 64 ff 00 30 9e a8 46 a2 b2 b5 95 73 6e 5f 90 9a 3e 41 d6 fb 95 9c ed 0c Data Ascii: ::un_'tee>KDEf6~,gkIK4Bd3wRBQhiPYY,T+#(CRoo\zUE$u$-Kq[1j<byUwq26R+[Z`-\|S(WpQL pf{K s6ukRo*Id0Fsn_>A
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 1a ad 35 a2 96 49 0a fa 9e c3 a3 53 88 6a d0 86 60 cc 08 f2 65 a6 a8 d2 26 53 25 8b b7 4b 6c 3d 2a 29 85 9a 29 19 99 95 86 d4 ea 9e 02 a4 23 ca cf 61 8c 18 26 f3 6b 00 9f 50 3f 1b f8 52 18 09 1c d3 62 c6 12 49 40 c8 73 f4 0d 50 03 fd f4 e2 a5 4f c6 e7 26 0e 54 ab b0 83 30 dc 0b ff 00 37 9d 22 7b de 97 31 67 91 df d1 d3 e1 48 12 65 24 50 a8 d7 5f 1b f9 52 ab d4 77 11 ba 49 03 0d 23 5a ad 78 67 d9 15 4e fb cb 69 72 8c 0a da 06 b5 bc 6b 3d f9 ae 8e 9f 83 4e d0 41 14 45 00 b9 45 b8 07 cf e3 57 27 0c 7b 79 a4 3d f5 33 23 4a e0 fa 8f e0 5d 45 45 e5 5d 73 85 0e 3c 90 bb 89 d1 46 a0 55 ea ad 92 e1 e7 b8 62 48 20 1d 2f e7 4f 68 ca 85 ee 1c 97 91 55 2e 16 fd 6f d6 a0 d5 d1 33 3c 86 30 db 55 05 89 f0 34 1a 39 1c c9 f9 37 3a 9d 2a a2 45 c4 63 62 55 54 88 d0 69 f1 a6 Data Ascii: 5ISj`e&S%Kl=))#a&kP?RbI@sPO&T07"{1gHe$P_RwI#ZxgNirk=NAEEW'{y=3#J]EE]s<FUbH /OhU.o3<0U497:EcbUTi
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 22 40 db 43 36 a3 ed a3 46 d9 2a e3 d9 48 8a 20 6e 17 a5 6d b0 95 75 c2 75 8b 14 31 6b a5 61 57 29 6e 7e 7a ff 00 51 80 2f d2 5c 0a bd 0a d3 3e e7 03 62 97 d4 04 17 14 f7 f9 4d aa da a8 92 1f 4e 8b e0 2b 5d 0a 05 3e 97 b0 1f 6d 41 9d 76 c1 53 92 d7 34 aa a1 77 3c 01 e7 1d 89 0a 7c 29 42 a9 63 76 29 76 3d 3a 0a 64 92 29 5a c6 30 3d 3d 4f fe 15 50 c4 e3 db d9 2e 7a f9 f4 3f 6d a9 81 fc 7c d2 cb 97 0a 4c fe e4 3b ac 54 8d 00 a7 66 4e 5c 5c ae 38 9d 9b 8d cc 72 91 60 e2 e2 6c 96 71 b5 5a 3b 5d 0f 5f 73 5f c3 6a db af 4c 45 6f ad 9c 97 f7 5f ed 0f 39 c3 e7 24 3f a9 c7 c9 86 65 dd 14 fe a0 db 7a 7a be 35 9f 77 5e 27 94 1e bf 5f ed db 31 43 ee 4e 03 37 80 80 b6 48 69 01 3e 93 18 d3 f8 d7 37 57 6f 95 c3 1e ed ee bd 96 55 3f 3f b8 9a 17 31 8c 7b d8 5e 32 de 5f 1b Data Ascii: "@C6F*H nmuu1kaW)n~zQ/\>bMN+]>mAvS4w<\|)Bcv)v=:d)Z0==OP.z?m\|L;TfN\\8r`lqZ;]_s_jLEo_9$?ezz5w^'_1CN7Hi>7WoU??1{^2_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49902	152.199.21.175	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	1000	OUT	GET /7778/amp.min.js HTTP/1.1 Host: amp.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:43 UTC	433	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 255 Cache-Control: max-age=3600 Content-Type: text/javascript Date: Thu, 12 Dec 2024 18:57:43 GMT Etag: "0x8D7A5E4331F1063+ident" Expires: Thu, 12 Dec 2024 19:57:43 GMT Last-Modified: Fri, 31 Jan 2020 00:26:22 GMT Server: ECAcc (lhc/794F) Vary: Accept-Encoding X-AspNet-Version: 4.0.30319 X-Cache: HIT X-Powered-By: ASP.NET Content-Length: 2210 Connection: close
2024-12-12 18:57:43 UTC	2210	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 6c 69 63 65 28 31 29 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 26 22 29 3b 69 66 28 2f 5e 77 6f 6d 70 7c 26 77 6f 6d 70 2f 2e 74 65 73 74 28 65 29 29 74 72 79 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 4d 61 73 6b 22 29 3b 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 65 61 64 22 29 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 Data Ascii: (function(){var e=location.search.slice(1).replace(/\?/g,"&");if(/^womp\|&womp/.test(e))try{var t=function(){var e=document.getElementById("wMask");e&&e.parentNode.removeChild(e)},o=function(){var e=document.querySelector("head"),t=document.createElement("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49909	104.17.248.203	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	548	OUT	GET /web-vitals@3.5.2/dist/web-vitals.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:43 UTC	576	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"1bff-XBuNuslfZI/SL2xuiJqqum43R9A" via: 1.1 fly.io fly-request-id: 01JDRVA2WDMDE5764WCMEHMEEY-lga CF-Cache-Status: HIT Age: 1250353 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f0ff11839e1432b-EWR
2024-12-12 18:57:43 UTC	793	IN	Data Raw: 31 62 66 66 0d 0a 76 61 72 20 77 65 62 56 69 74 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 74 2c 72 2c 69 2c 6f 2c 61 3d 2d 31 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 70 65 72 73 69 73 74 65 64 26 26 28 61 3d 6e 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 6e 29 29 7d 29 2c 21 30 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 Data Ascii: 1bffvar webVitals=function(e){"use strict";var n,t,r,i,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByT
2024-12-12 18:57:43 UTC	1369	IN	Data Raw: 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 74 7c 7c 7b 7d 29 29 2c 72 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 2e 76 61 6c 75 65 3e 3d 30 26 26 28 61 7c 7c 72 29 26 26 28 28 6f 3d 6e 2e 76 61 6c 75 65 2d 28 69 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 29 26 26 28 Data Ascii: erver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},t\|\|{})),r}}catch(e){}},l=function(e,n,t,r){var i,o;return function(a){n.value>=0&&(a\|\|r)&&((o=n.value-(i\|\|0))\|\|void 0===i)&&(
2024-12-12 18:57:43 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 2c 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 3d 43 28 29 2c 69 3d 66 28 22 46 43 50 22 29 2c 6f 3d 64 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 73 28 29 2c 30 29 2c 69 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 74 28 21 30 29 29 29 7d 29 29 7d 29 29 3b Data Ascii: ction(e,n){n=n\|\|{},L((function(){var t,r=C(),i=f("FCP"),o=d("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(o.disconnect(),e.startTime<r.firstHiddenTime&&(i.value=Math.max(e.startTime-s(),0),i.entries.push(e),t(!0)))}))}));
2024-12-12 18:57:43 UTC	1369	IN	Data Raw: 28 65 2c 6e 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 28 65 2c 6e 29 2c 69 28 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 74 2c 49 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 2c 72 2c 49 29 7d 3b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 74 2c 49 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 2c 72 2c 49 29 7d 28 6e 2c 65 29 3a 41 28 6e 2c 65 29 7d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5b 22 6d 6f 75 73 65 64 6f Data Ascii: (e,n){var t=function(){A(e,n),i()},r=function(){i()},i=function(){removeEventListener("pointerup",t,I),removeEventListener("pointercancel",r,I)};addEventListener("pointerup",t,I),addEventListener("pointercancel",r,I)}(n,e):A(n,e)}},k=function(e){["mousedo
2024-12-12 18:57:43 UTC	1369	IN	Data Raw: 6e 74 72 69 65 73 3a 5b 65 5d 7d 3b 4a 5b 72 2e 69 64 5d 3d 72 2c 47 2e 70 75 73 68 28 72 29 7d 47 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6c 61 74 65 6e 63 79 2d 65 2e 6c 61 74 65 6e 63 79 7d 29 29 2c 47 2e 73 70 6c 69 63 65 28 31 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 65 6c 65 74 65 20 4a 5b 65 2e 69 64 5d 7d 29 29 7d 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 2c 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 6a 28 29 3b 76 61 72 20 72 2c 69 3d 66 28 22 49 4e 50 22 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 Data Ascii: ntries:[e]};J[r.id]=r,G.push(r)}G.sort((function(e,n){return n.latency-e.latency})),G.splice(10).forEach((function(e){delete J[e.id]}))}},Q=function(e,n){n=n\|\|{},L((function(){var t;j();var r,i=f("INP"),o=function(e){e.forEach((function(e){(e.interactionI
2024-12-12 18:57:43 UTC	906	IN	Data Raw: 65 6e 65 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 75 2c 30 29 7d 29 2c 21 30 29 7d 29 29 2c 70 28 75 29 2c 63 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 3d 66 28 22 4c 43 50 22 29 2c 74 3d 6c 28 65 2c 69 2c 55 2c 6e 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 76 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 72 2e 74 69 6d 65 53 74 61 6d 70 2c 57 5b 69 2e 69 64 5d 3d 21 30 2c 74 28 21 30 29 7d 29 29 7d 29 29 7d 7d 29 29 7d 2c 59 3d 5b 38 30 30 2c 31 38 30 30 5d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 4c 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ener(e,(function(){return setTimeout(u,0)}),!0)})),p(u),c((function(r){i=f("LCP"),t=l(e,i,U,n.reportAllChanges),v((function(){i.value=performance.now()-r.timeStamp,W[i.id]=!0,t(!0)}))}))}}))},Y=[800,1800],Z=function e(n){document.prerendering?L((function(
2024-12-12 18:57:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49908	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	937	OUT	GET /thumbs/2024/11/13/013050/87634329/comics1.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0
2024-12-12 18:57:44 UTC	383	IN	HTTP/1.1 200 OK x-amz-id-2: uYGy7PTw0qnI7jSVG3Nft0lcaRcLa2SYfA+fslIETQiOsbHlX7uGacqajcH6HhWBUqFFvGx3MG3dq3PU7y9gcQ== x-amz-request-id: VCTJ8Z3G8XPAN5FX Content-Type: image/jpeg Server: AmazonS3 X-LLID: cf7071ec8f74dfe7a6c6563d77607777 Age: 2507212 Date: Thu, 12 Dec 2024 18:57:43 GMT Last-Modified: Wed, 13 Nov 2024 18:30:51 GMT Content-Length: 255243 Connection: close
2024-12-12 18:57:44 UTC	14066	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: d3 ec af 4f d5 a9 47 2a 29 a9 24 c2 e1 f3 0d 52 d5 2b d4 5b 4d 63 6d 0b 49 6a d4 0a 1d 4a 56 da 49 1b 16 a7 00 52 13 bb ad 56 02 d2 aa 76 e9 dd 5d 92 52 7a eb 38 92 d3 03 38 ac 3f 27 b2 5a 2d 90 a3 a5 bc de fd 3d 4a 19 ae 49 71 5a 6d c9 75 29 0a 92 e3 49 65 a0 e2 d0 dc 99 55 2b 6b b2 eb b1 d5 8a a9 c4 4f 48 93 98 d5 97 27 b5 da e0 5e 32 b6 2e 57 7c b2 ff 00 39 a6 a7 31 64 49 7c c0 2f 34 e2 de 92 a5 a5 2d 24 2d 2d 83 19 a5 b9 b1 88 fb c0 49 a9 71 d7 a8 c9 42 1e ef 8f df 33 ec b3 f8 4b 93 60 b1 84 f1 4e 3f b4 e3 dc 61 06 53 72 9e c8 be 93 7f a0 65 ae 31 dc 63 b0 1a 49 5b 28 02 b5 40 52 42 14 1c d4 17 43 6f c8 b9 05 ab 8a b3 8b 94 b1 6e c8 f2 4c 83 21 9a d3 f1 67 ca 72 0a 2d 56 27 af 41 51 62 c5 88 94 bd 15 0d 39 0a 1c 60 68 da 94 e8 65 62 af b2 c2 d6 e6 b0 Data Ascii: OG*)$R+[McmIjJVIRVv]Rz88?'Z-=JIqZmu)IeU+kOH'^2.W\|91dI\|/4-$--IqB3K`N?aSre1cI[(@RBConL!gr-V'AQb9`heb
2024-12-12 18:57:44 UTC	8232	IN	Data Raw: 37 04 42 67 6a 85 0a 4e f4 ae 84 77 50 e9 f8 7a 68 0d d9 11 67 fb 1a cb 95 73 80 66 4d f6 8d 9c dd 40 bb 5a 90 0a 87 1d 5d a6 b8 54 89 6c a4 15 0f ca 64 b8 b2 97 50 0a 43 2a a1 48 ec 14 03 b1 ef 5d a8 99 3f b4 3e 67 7a db 21 99 f0 9e c5 91 74 b7 ce 61 61 d6 9e 62 33 ec 4e 4b ad 29 15 42 d0 50 d8 50 5a 4e d3 d3 e1 a0 17 1e d3 2e bf 9d fb 65 e0 0b 88 70 b8 a5 e0 56 16 1e 5a a9 5f 52 2c 26 a3 ac 74 e9 d1 4d 91 a0 24 2a d3 52 09 03 c8 2a 09 1f 3e d5 fb 40 d0 11 b7 80 ef d3 a4 5d b9 f3 12 ba dc 9f b8 4c c2 39 46 ea 88 a1 f7 56 fa db 81 76 8d 0e f3 15 b4 97 54 a2 10 91 39 49 42 7b 27 6d 13 40 34 04 5f e2 fe 29 c6 f9 bf 2c f7 e7 8e e5 0d 3a c2 ae dc ad 12 2d b2 f1 1d 5e 9d ca d9 36 cd 68 8c 98 17 28 8f 23 69 6d c8 eb 51 71 b5 02 3a 85 24 d5 2b 20 80 f0 f1 96 53 Data Ascii: 7BgjNwPzhgsfM@Z]TldPCH]?>gz!taab3NK)BPPZN.epVZ_R,&tM$R*>@]L9FVvT9IB{'m@4_),:-^6h(#imQq:$+ S
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: fc f4 05 a7 a0 2a 27 a0 d0 1c 19 d2 bd 55 fa 68 fc 29 ef f3 d5 1b d4 bc 68 64 81 10 ee f5 9c 1d 0f e1 49 f0 d6 b5 ac 9c d7 67 5e 94 06 9d 35 36 50 63 12 cc 47 f1 56 b4 d6 33 25 9d ba 4d 7d ea 55 7a ed a1 d6 d4 c7 27 06 7c f0 e4 b0 3c a0 a2 0f 61 ad 2d 8b 43 9f 1f 3b 53 65 b5 6f eb e1 ae 3c 8a 1c 1e 96 3c bd 6a 4b 14 7a d0 eb 96 e7 65 35 32 77 d7 3b dc bb dc 67 fd c2 ff 00 dc 17 36 ff 00 f1 0f 23 ff 00 b3 1f d5 33 6c cd 69 ba 3e 55 f5 e7 1d a7 d7 ef f2 ba ff 00 71 8e 11 ff 00 58 ff 00 da 2b 9e 80 9f fa 00 d0 06 80 34 01 a0 0d 00 68 03 40 1a 00 d0 06 80 34 01 a0 0d 01 6f 53 f6 7c 74 05 07 7f b3 40 01 7b 85 52 41 1f d6 06 a3 40 56 b5 e9 a0 29 fe 1e c7 40 71 a0 64 36 2b 9d ce f5 64 b7 5e 21 ce bc e3 6a 61 bb fd ad 87 90 b7 e1 2a 4a 3d 46 04 86 d2 77 36 5c 47 Data Ascii: 'Uh)hdIg^56PcGV3%M}Uz'\|<a-C;Seo<<jKze52w;g6#3li>UqX+4h@4oS\|t@{RA@V)@qd6+d^!jaJ=Fw6\G
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 43 6f b5 2d a4 3a c3 ec a9 0b 43 a9 58 04 2d 05 2a 5a 54 82 08 20 a5 47 ed d5 5e 87 39 08 7d d7 fb 50 bf fb 87 ce f8 97 26 b3 72 3c ec 02 3e 1a c5 e2 d5 92 bd 05 b5 89 8b b6 5d 18 fd f9 b7 3a ca d0 43 ce a9 a4 32 b4 3a bd a5 95 a9 49 aa 90 5b 71 22 47 fb 83 b8 07 8d 38 03 11 46 27 c7 16 55 42 8d 21 49 7a f5 7a 94 b4 bd 71 ba 48 4a 76 fd 4c c9 09 4a 03 8a 22 b4 09 4a 50 90 48 42 52 93 4d 49 23 d8 a6 d0 b0 12 a4 d4 27 f0 8f 85 3b 7e 8e e3 40 35 d9 57 06 f0 de 75 25 f9 b9 8f 16 62 b9 34 e9 1f f4 8b 8d c6 d3 11 f9 2e 7c d6 fa db 2e 28 fc ca b4 03 2d ee 47 db 84 de 68 bd 70 1d ca c5 7e 87 8f 45 e1 ac d2 06 43 2e c3 22 31 54 59 d0 18 7a 3a 9e 65 af 48 a4 b6 f2 10 c0 4b 5f b3 45 10 7b 68 09 64 8d c9 41 ec a5 a4 ab 62 96 28 2a a3 e5 35 a9 e8 4f c3 40 46 5e 09 f6 Data Ascii: Co-:CX-ZT G^9}P&r<>]:C2:I[q"G8F'UB!IzzqHJvLJ"JPHBRMI#';~@5Wu%b4.\|.(-Ghp~EC."1TYz:eHK_E{hdAb(5O@F^
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 9c 87 c3 79 7e 33 6a c7 38 7f 30 b6 df 6d 38 65 ba 2d 9e 3d 8d 95 2d 8b 84 28 b0 59 43 0c a6 44 09 29 66 4b 5e 44 0e ab 6c 03 f1 d6 59 b1 64 ad a6 ea 25 c9 6e 36 5c 6e 8a b5 7b 0e ff 00 fc 3b 7c 3a 6b 03 a0 34 00 07 60 7a e8 4a 12 7e d7 94 a7 a1 f3 82 d6 d1 09 5f 2d e5 48 0e 1e cb 08 7d 08 a8 a7 c2 94 d7 d9 70 bf 91 4f 91 f2 bc 8f e6 32 51 84 84 80 00 a0 02 80 6b a4 c4 ae 80 34 01 a0 0d 00 68 03 40 1a 00 d0 06 80 34 01 a0 0d 01 e4 df 81 1e 07 b8 d7 aa 7a 92 1d c8 27 a9 4f 6a f5 a6 aa ea 98 92 8a 4a 57 d5 69 0b 3f 15 79 bf a7 51 d2 8a b4 1b 1b 48 aa 50 90 7e 40 0d 4f 4a 10 54 26 bf b3 52 ae c2 a0 8f be bd b5 3f 49 20 37 12 12 9f 32 96 68 d8 00 9d c7 b5 13 d4 57 ee ae a9 6e 55 16 ec 0b 1b 47 1f 66 97 c7 19 44 0c 7e 5a 1b 77 b4 b9 4c a9 86 69 d8 90 b7 94 dd Data Ascii: y~3j80m8e-=-(YCD)fK^DlYd%n6\n{;\|:k4`zJ~_-H}pO2Qk4h@4z'OjJWi?yQHP~@OJT&R?I 72hWnUGfD~ZwLi
2024-12-12 18:57:44 UTC	16320	IN	Data Raw: 85 19 b6 69 96 a2 ca 8a 18 b5 3b 16 31 62 e5 29 df 55 25 12 1f 53 c9 09 07 73 68 70 0a 6b 8f dd cb 6c 8e 9d 2e ab c1 9d 3e dd 15 15 a5 37 e2 89 31 64 c5 a3 60 9c 69 76 e4 1e 37 f6 a7 66 e0 87 e1 d8 5f b9 dd 79 1b 92 16 db 53 21 48 44 75 28 98 cc d5 77 39 6f a4 aa 88 5b ca 8a 92 a3 5e a3 bf 0a ed f9 f2 5e 72 e4 9a af 05 e3 f6 1d 8f 9b 8a 89 2c 54 87 e6 29 3d b9 f1 b7 30 72 86 35 76 83 17 dc 56 69 8f a3 13 6e d9 12 75 d2 ef 02 c5 7b 94 fd ce 5c 16 a6 ce 69 32 5c 8b b8 22 3b af 16 d2 37 2b b5 2b d2 ba eb bf 6c e3 d9 cf 4f e6 65 4e e7 c9 a2 85 6f c0 75 f2 3f 6e be eb 63 c3 95 1a 37 2c f1 c7 36 5a 96 82 8f e1 8e 42 c4 13 0b d6 4f f5 55 36 da e2 c0 a8 e9 5f 40 fd 9a ce dd a7 0e f5 6e af e0 cb 2e e9 95 fd 69 5b ec fd c4 4a bf f1 d6 05 c7 57 68 77 8e 4e e0 5c cf Data Ascii: i;1b)U%Sshpkl.>71d`iv7f_yS!HDu(w9o[^^r,T)=0r5vVinu{\i2\";7++lOeNou?nc7,6ZBOU6_@n.i[JWhwN\
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 3d 11 7a c3 b5 5d 7e 98 b2 71 2b aa 76 32 ca a9 8b 05 95 28 9a 4b 63 d3 3c 43 1f bb e2 b8 c5 93 1c bf e5 73 f3 9b d5 96 2a 62 dc b3 0b a3 4c b1 32 e0 e3 75 05 e7 9b 8e 03 60 f8 0a 54 d0 55 4a 52 aa 75 fb b5 36 52 e5 9f 0b 7b 2b 36 d2 8f 87 90 a3 eb fa 75 66 50 6d f1 7e 44 6f 23 e4 5e 59 e3 a7 6d 6b b7 4f e3 07 6c ca 4c c2 e0 71 13 e1 de a1 fd 53 2f 84 d0 7a 65 2a 0a 41 4f 5e d5 ae a9 5b f5 3e 93 6b e2 e9 aa b7 98 e5 a1 9f a9 f5 23 84 17 03 ed 38 d1 4d 2a 08 71 0a 47 5f b6 b4 d5 9e c6 48 8d 5f cb 83 94 06 49 c1 d6 ce 32 ba 5a 1d b2 5f f8 c5 82 dc 30 e2 c2 db b9 58 e4 cd 98 d4 2b 83 04 7e 10 5c 8e f3 2b 41 ea 85 b6 7c 08 d7 84 d4 7d a7 d6 d2 ca cb 43 d1 01 db 50 58 ae 80 34 01 a0 0d 00 68 03 40 1a 01 29 df ae bf 33 6a 0f 4c a6 a0 06 80 34 01 a0 0d 00 68 03 Data Ascii: =z]~q+v2(Kc<CsbL2u`TUJRu6R{+6ufPm~Do#^YmkOlLqS/zeAO^[>k#8M*qG_H_I2Z_0X+~\+A\|}CPX4h@)3jL4h
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 32 21 ba 94 ad b7 d0 ea 4b 4e b6 b4 28 14 ad 2a 41 29 21 40 82 14 47 63 ad b1 df aa 86 59 28 3d de d9 f2 b6 ec 37 2c 8b 82 9f 90 93 07 18 86 ce 51 c4 cb 5a d6 b5 b9 87 cf 79 d8 e2 0e e5 95 1d d6 a9 8d 2e 3e da d5 2c 2a 37 81 d7 91 cd c0 b7 29 4b 43 82 60 8a 82 a4 9e b4 d7 84 9c 33 ab 74 33 9c 87 8e 65 d1 32 2b 27 24 f1 ec 66 6e 79 1d 8e 23 b6 cb fe 29 25 e6 e2 37 7e b2 bc b4 bc a8 cd ca 5e d0 cc b8 ae a0 bd 15 6b 3e 98 dc eb 6e 14 87 77 b7 e8 e1 cb 57 e9 66 56 44 5a e2 fe 0a ca b3 5e 61 e6 9e 5a cd a3 e5 dc 56 cd f2 e6 20 60 f1 ed 77 43 67 b9 3d 19 6a 53 f3 1d 9a 98 72 25 34 b0 76 46 6a 94 d8 b5 b7 5f 30 09 56 bb ad c9 a5 6b 06 69 08 6e 66 11 38 93 97 a3 ff 00 7b 5c af 96 47 e3 2c 8a cc 6e 36 6c c2 e1 02 d1 7a 8e e5 de c8 c2 94 c5 b6 77 d4 5a 1e 69 5f 4e Data Ascii: 2!KN(A)!@GcY(=7,QZy.>,7)KC`3t3e2+'$fny#)%7~^k>nwWfVDZ^aZV `wCg=jSr%4vFj_0Vkinf8{\G,n6lzwZi_N
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 4c bf ca 3c 33 ed 71 57 0b bc 0b 2f 32 4d 8e 9e 50 93 8f 34 b7 6e 4a b0 cb 92 21 c7 82 de d5 20 b4 dc c7 90 e8 90 ea 2a b6 d8 42 f6 a5 45 5b 75 f4 1d a3 8d 4b b4 da 39 b2 59 a6 3e 1c 4f 85 db b9 53 19 c1 73 dc ba 14 36 f8 f4 5b a1 cb e2 2e 1d 84 da 53 64 b3 5a c3 49 fc b6 5c e6 13 bd 13 27 25 80 85 00 e2 52 cc 6a ec 6d bf 51 05 d5 7d 76 94 50 8c 2c 4b b6 9a 41 4a 14 09 06 94 a8 5a 8d 40 f1 2a 34 2a fb 4e 9d 45 0b bd 06 45 41 42 40 3d 47 41 fa b5 0f 51 22 5f 20 6c 34 51 21 53 03 2d 01 b5 4d 1a 04 a8 9e d5 21 35 fd 27 5a e2 d0 e2 e4 2d 64 e0 32 84 b7 44 c6 98 84 ad c0 aa 42 97 44 b6 ee e4 aa a3 7a 7f 76 aa d6 9d 53 db a7 c7 5b e4 88 39 f1 3b 26 79 f3 cd 0e c3 b3 71 ef 25 d8 60 46 45 b6 cd 81 fb 81 c5 22 60 b0 a3 21 2a 6a dc 85 da 6c 77 5b d3 31 19 40 1b 5a Data Ascii: L<3qW/2MP4nJ! BE[uK9Y>OSs6[.SdZI\'%RjmQ}vP,KAJZ@4NEEAB@=GAQ"_ l4Q!S-M!5'Z-d2DBDzvS[9;&yq%`FE"`!jlw[1@Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49907	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	1095	OUT	GET /thumbs/2024/11/21/120458/87638488/timing-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|
2024-12-12 18:57:44 UTC	371	IN	HTTP/1.1 200 OK x-amz-id-2: gb3y0mtFsr/nveSglmwDFAJO7PPkPmEjRqA+mG8Vc3lU9hhFM/+5WPkhA5ySEexuMoyZWawy1tY= x-amz-request-id: SAYR4T6KFMW2T6XB Content-Type: image/jpeg Server: AmazonS3 X-LLID: 4ac5a9b7e3dac19812787bf84274db10 Age: 1821165 Date: Thu, 12 Dec 2024 18:57:43 GMT Last-Modified: Thu, 21 Nov 2024 17:04:59 GMT Content-Length: 282680 Connection: close
2024-12-12 18:57:44 UTC	16013	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-12-12 18:57:44 UTC	16019	IN	Data Raw: a1 e6 c1 16 42 d7 64 52 2f d7 18 db 1a 8b ea d1 35 2d 73 bb b9 48 98 33 b3 66 00 c4 16 b7 f9 4b 3e d2 3c b6 92 7b e9 42 69 1a d1 58 5b ab 06 55 82 48 b3 d6 58 0d a9 5a 49 ad 95 ba 73 1d a5 b9 18 db 31 da 79 3a 7b a3 c0 e8 ed 67 0f 81 65 7d 3f 88 27 99 a7 92 18 7b f1 6f 41 c6 a8 47 3d 8d 2a 68 69 18 52 31 6e ae 42 e6 31 30 ab a3 e1 42 c1 4f 0e d7 72 c8 58 c7 6a c1 d2 ce 50 dc 46 8a 99 b5 2b 07 0f 86 3e 2e 46 cb 7f 2e 1c 2a 8c 8a a4 75 4d 28 eb 00 67 55 fa fa 26 5d 8b e7 f0 a5 8c 84 e4 67 27 b2 3b 91 a4 84 24 17 21 5b 8c 2a 17 91 0b 89 54 5e 4d 2f d5 39 fa 71 ad 44 05 89 09 b5 95 3d 62 d8 53 32 02 fa 0b 49 1b 94 6d 23 29 12 aa 21 27 a3 1d 54 73 2f d8 dc 21 8f 8a f2 d7 63 38 60 29 28 fa 9d d3 ac 5b 65 f8 b7 9c 7d 73 6b 77 26 1d b9 3d a0 7e 7d 0d aa d4 7c 46 Data Ascii: BdR/5-sH3fK><{BiX[UHXZIs1y:{ge}?'{oAG=hiR1nB10BOrXjPF+>.F.uM(gU&]g';$![*T^M/9qD=bS2Im#)!'Ts/!c8`)([e}skw&=~}\|F
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 45 65 03 f4 93 d9 c5 0c e5 b9 44 f6 44 e1 79 20 56 56 7a 65 51 2a 54 e4 56 56 51 3f 46 7a 63 e8 1f 41 45 65 02 82 cf 52 10 08 94 0a ca 61 59 ec e3 d1 c7 b0 28 14 e7 76 fb a7 84 e3 df e4 c2 74 a8 bd 39 dd ea 14 3e cd 72 05 13 d0 04 0e 14 87 25 cb 0a 36 f6 6b 51 6a 2d 4d 6a 2d 4e 62 95 8a 41 85 2c 98 51 58 c2 8a ce 53 64 ca 6b d3 4a ca ca ca f3 5e 68 3d 07 a2 e4 e7 27 39 02 b2 9c fc 26 ca 9c fc af 34 1c b2 8b 97 92 f2 5e 49 c7 be 53 3e c8 a6 a7 7d d6 56 51 2b c9 79 2c af 24 d7 a2 f4 5c b2 b2 83 90 28 a2 9a 82 c2 c2 2e 5e 4b c9 17 26 b9 67 b7 5c ac af 25 e4 b3 9e 80 e1 17 65 0e e8 9c 22 fc ac a1 d1 a5 79 27 9c ad 7f da 54 e4 e5 95 95 9f a4 20 11 6a 2d 58 43 e8 28 ac a0 81 45 04 11 e8 e5 95 94 c2 81 ec e4 51 fb 65 02 89 ec d0 9f f6 90 a7 b9 79 af 24 5d de 99 Data Ascii: EeDDy VVzeQ*TVVQ?FzcAEeRaY(vt9>r%6kQj-Mj-NbA,QXSdkJ^h='9&4^IS>}VQ+y,$\(.^K&g\%e"y'T j-XC(EQey$]
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 4e 66 48 8c a3 1a 6c 78 4e 8d 06 14 1a 9e 16 10 09 c1 01 d3 2b 2b cd 39 c9 ae 4e 72 6b 97 92 f3 41 d9 5f d1 e4 2c a2 e5 e4 bc 97 92 2f 5e 68 bd 07 a1 22 8e 44 64 4e 7a f2 5e 69 cf ee 1e 8c ab e5 5e 6b cd 7c ab e5 5e 4b 2b 2b 2b c9 79 2c ac a0 50 72 91 cb cb ae 16 10 0b 0b 08 fd b0 56 13 13 5c 9c f4 5e 9a f5 e6 8b d3 5e bc d3 5e 9d 22 6b 81 59 09 d8 44 29 0e 17 92 2e 50 1c 84 10 4d 0b 0b fa fd 58 e9 94 7a 82 bc 97 92 3d 0f d0 e2 81 40 a2 53 4a 88 26 84 d0 8b 54 8d ec 58 9c d5 f6 40 e5 35 a4 a3 19 c7 82 6b 53 02 98 76 9b a1 0b 09 a1 3b a8 40 20 d5 e2 bc 57 82 11 a6 45 94 61 46 14 60 46 2c 2f 04 f6 2f 05 e2 9c 10 08 8e de 2b c5 79 2f 24 1d d9 cf 4d 72 73 ce 3c ca 6b ca f9 3b 39 eb c9 17 2f 24 4a f2 29 ce 2b 25 39 c5 07 14 5e 72 c9 70 be 55 e6 8b 97 9a 73 fb Data Ascii: NfHlxN++9NrkA_,/^h"DdNz^i^k\|^K+++y,PrV\^^^"kYD).PMXz=@SJ&TX@5kSv;@ WEaF`F,//+y/$Mrs<k;9/$J)+%9^rpUs
2024-12-12 18:57:44 UTC	13568	IN	Data Raw: fa 87 9f b2 1a de a2 f6 2d 51 53 d1 dc ec 49 37 a7 39 d1 75 3f 4b f3 f9 1c ef d7 af 62 4d 2c 3f af fc c6 b3 29 fa 07 96 97 df fd 6e e4 32 49 a6 fd 75 bf 14 d0 fe b5 c5 05 66 7e b8 c3 15 c7 7a 67 54 08 f4 67 11 85 c7 d3 1e bc 90 53 f5 0f 00 02 b7 af 78 25 73 73 86 70 38 0c 3a 6f 5c d8 8e cd 6f 54 50 4e b5 c3 84 ba 9e 65 c1 69 3e 6f 6c 71 4d 49 9f dc 5a 4a f2 49 ee 7a 96 48 f6 8e de bc b3 7b 3f 94 5b 92 7f 63 73 17 c6 79 cf 21 64 57 bd 81 62 16 37 d9 ba c9 d5 af 65 71 e8 22 6f b5 f8 50 75 ef 6c f1 86 be 0f 77 6b aa 32 ff 00 bf 77 d6 1d ff 00 b8 f9 95 e9 6c 6f f7 d1 71 f9 36 17 60 16 36 1b 2d 5d af f5 15 bb db 6e db ef 0d 7b 6f d7 9b 8b 9f 31 c4 e3 30 37 87 44 d7 47 c3 7e 19 4f 0e 98 0a 5c 0e df 9d ae 01 3c ea 2e 13 62 17 43 c0 f6 2f 97 6f ea 17 5a 8d ff 00 Data Ascii: -QSI79u?KbM,?)n2Iuf~zgTgSx%ssp8:o\oTPNei>olqMIZJIzH{?[csy!dWb7eq"oPulwk2wloq6`6-]n{o107DG~O\<.bC/oZ
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: ea aa 9d 43 56 4d a6 ea be 8f 5b ec df d8 8d ac 1b cd 5f ed 6f 24 d3 db e1 7f b6 bc 2f 6c ff 00 54 fb 36 2a 56 bd 8f fa ff 00 e9 2f d8 bb bc 03 9b 73 cf 56 f2 bf 60 7e dd eb 79 4f a2 78 ec 8c a5 5e 9c b1 b8 ea 27 91 eb 91 d5 17 75 9c c1 d3 58 7b fc a2 78 f0 8d b3 82 27 da 47 e5 0c 32 06 86 3d 99 d3 39 ef b5 ca f5 f5 8c f4 2d b9 97 eb 5e 10 52 8f 67 15 ee 19 c6 b7 87 90 f1 5e 2c c9 29 6c d9 b6 7c 17 7c f6 35 af c8 27 7b 21 89 d3 c4 ea f6 4c 76 6c ea a0 bf 3c 6e 7d 99 b7 2e ad 24 7e c8 a9 69 b7 2e 5d d9 ec e7 d8 c1 a1 a9 7f 71 42 b9 75 6a 50 6a fd 6f eb a9 b9 b8 bf c3 75 1a 1d 4d 4d 2d 89 36 7a 08 a2 ab 5d db 20 5b b7 fc 1d 80 db 7a fe 9e d1 dc 4f 80 59 ae 36 be 9f da 4b 36 ff 00 48 c8 ab 3e 6d 3e ba ef ec d3 a8 f2 1e 31 eb da 97 75 50 e9 36 33 54 af cd b6 Data Ascii: CVM[_o$/lT6*V/sV`~yOx^'uX{x'G2=9-^Rg^,)l\|\|5'{!Lvl<n}.$~i.]qBujPjouMM-6z] [zOY6K6H>m>1uP63T
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 3e fe ad e6 fb 9b f5 57 45 cc 4f ab bd eb c8 bd 7b b3 e4 1e ab d1 f3 9d 5f a3 fd 75 b5 f4 97 21 fd 94 86 f5 2e 1a f7 6d 9c e6 e8 b6 d5 2e 3d db 88 e4 0e da b2 3d 9e df 6f aa 41 b7 5f 06 df 5c 76 ec a3 aa 92 18 f5 9c 55 b7 a5 ad c5 e6 a9 26 8a ce c3 58 fd 7f 2f 6b df ba af a3 dc 3e be ba 59 19 1e bc 46 76 35 9c f8 a8 6e 6f 43 15 4b 73 19 26 de 4b f3 c1 16 cb 77 6f 89 fa 2f 51 bd 6f b5 3d 29 c7 78 ac d7 f8 8f 18 d4 d6 de fb 6b 4d ad b1 b8 f6 df 35 da cb 6f 77 b8 ba 64 88 d7 b0 f9 21 7b 58 44 a8 51 2c a9 24 c5 b1 cc 35 0c 89 f5 47 c5 4a db 84 21 92 c9 5e 21 ac 86 59 e4 af 0c 94 28 69 f6 10 cb 52 d0 30 d1 71 93 e3 cb d9 5b c9 ba 8f 9a 15 a1 d3 d8 b7 63 d7 fa a6 eb 38 f0 27 c8 f8 af 22 bb a7 01 8e 47 79 94 68 73 fb b6 79 4f 2f a9 4a 3f 28 f4 67 66 75 1c 5b f8 Data Ascii: >WEO{_u!.m.==oA_\vU&X/k>YFv5noCKs&Kwo/Qo=)xkM5owd!{XDQ,$5GJ!^!Y(iR0q[c8'"GyhsyO/J?(gfu[
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: e1 df a3 3c fb d6 7e bf e0 f4 fd a9 e9 8e 1b 43 da 9f b4 76 39 75 2e 2d fb 0b cb e4 e4 34 fd ed a1 d3 52 f5 ef 3e e2 9e c4 d7 fb 8b 5c ce 77 cb 79 67 b2 6b 70 3a 7b 0f 64 6a f9 d7 2a f5 0e b3 93 b7 61 c9 79 55 4e 73 bc 7e a7 57 53 49 77 96 fa 12 ac dc af 9b f1 1a 7a 5e 0d ec ae 33 ff 00 a5 77 3b 0e 77 c4 f4 3e 88 fd 82 a3 c5 a3 e6 db 4f 55 fb 27 5b ec 2d 3f 2c f6 7e af 83 fb 5b 9d d0 da f1 8e 7f c2 b9 26 c7 67 16 de 47 f2 39 34 7e c8 f6 17 aa fd 5d ab df e8 36 da d8 f8 85 4e 2f aa ad 66 2d 3f 0e 64 16 e1 d5 d4 84 6f f6 30 68 a0 b9 c6 f4 7b 1b bc d1 fa 8d 0c 56 f9 74 8f bd c8 3d af c2 38 68 e6 de cc e6 9c d2 ff 00 fa cc b7 25 da 7f ba 72 fc 3a d7 cc 64 63 1b 0b e3 9e 66 c2 c8 2c 96 0d 4b c5 9b 91 ed 18 d3 26 e3 51 5d af dc 6a 67 16 f9 1e a6 35 fe 67 a5 ad Data Ascii: <~Cv9u.-4R>\wygkp:{dj*ayUNs~WSIwz^3w;w>OU'[-?,~[&gG94~]6N/f-?do0h{Vt=8h%r:dcf,K&Q]jg5g
2024-12-12 18:57:44 UTC	16320	IN	Data Raw: 1c b0 11 19 c4 92 55 6f 80 52 6f 51 cf de 30 97 77 66 65 ea 05 e8 c5 dc ee 46 a3 d3 2b 7e 63 e5 50 60 46 24 12 e4 72 7f ac 14 0d aa 42 0d 05 08 e5 46 8d 94 08 e3 9a e3 d5 6f c6 bb 2b 22 3c 47 5e dd cd ff 00 f8 ba ff 00 6d 43 18 8d db ee 32 e3 51 6b 7e 56 b7 8d 18 72 d0 fd 99 91 82 cf 17 ac a9 be 84 d6 69 8b 27 ee 63 81 b6 a3 48 2d bb e1 51 c8 85 19 14 ee ed 91 a2 d6 f7 4e d1 55 f4 88 be 96 02 a4 55 8e 74 70 76 b9 26 c0 0f 3a 96 f3 3c f2 41 22 c7 14 40 58 9d 7c 4d 47 93 93 b9 26 91 f6 0c 61 e0 a7 c6 b0 f1 21 77 98 16 2c ea 4d 86 bd 41 a9 d7 27 0c 22 c8 43 42 54 dc 6d 3e 55 10 95 fb 12 c5 79 10 8f 85 49 26 44 83 6b b5 b7 79 8a 83 ed e5 84 f2 d0 b8 8d d3 cf 1d f4 35 34 84 6e c4 8b fe 58 f3 e8 4f f6 56 20 55 67 8b ed f7 46 e1 6f d4 78 d3 e4 ba 48 f3 ca aa b0 Data Ascii: UoRoQ0wfeF+~cP`F$rBFo+"<G^mC2Qk~Vri'cH-QNUUtpv&:<A"@X\|MG&a!w,MA'"CBTm>UyI&Dky54nXOV UgFoxH
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: a5 a4 53 e5 23 6e 86 41 7b db c4 da b1 32 60 e3 9d e4 8c 7a fb 03 6a 8f f7 d1 e6 31 6d 85 9e 4d b0 f2 a1 06 e7 5d 03 37 85 24 79 59 2d 95 99 00 53 90 6f b8 12 06 84 9f 1a cc 5c 11 f6 d1 35 86 4e 62 35 d5 db c6 df 2a 73 94 27 98 90 5a 09 08 fa 90 75 2b e7 58 d3 1c df b3 93 28 05 49 e5 16 5e df 95 ea 39 30 72 17 2b 23 04 03 91 24 67 7c 76 22 df ed a8 57 b8 ad 82 31 cc d1 48 ad 76 dd e4 d6 e8 2b 02 0c 68 dd b8 e9 24 ee 66 7a ac ac 47 50 09 f0 a1 8d 29 6e 3f 01 83 2e 3c aa 41 50 c7 c0 f9 9f 85 14 82 57 91 f2 20 0f 26 57 67 64 9a fc 3a 81 51 32 ce f9 99 59 a2 c6 79 1c 88 e3 0d d4 11 f1 a1 0e 34 77 c9 3e b9 63 be ff 00 49 ea d6 a9 46 7e 23 4f c6 eb 04 8f b7 63 29 1a 7f 7d 41 95 8e 18 03 dd 88 61 b9 fd 36 2a de 96 fe 15 83 0c d1 cf 8f 96 81 a4 0b 88 2e a1 89 f4 Data Ascii: S#nA{2`zj1mM]7$yY-So\5Nb5s'Zu+X(I^90r+#$g\|v"W1Hv+h$fzGP)n?.<APW &Wgd:Q2Yy4w>cIF~#Oc)}Aa6.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49911	104.17.159.113	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	498	OUT	GET /vendor/c4e51996-fae5-4bf6-a8df-737a5f5ef12c/lightbox_inline.js HTTP/1.1 Host: www.lightboxcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=RQje5m9V93xZexqKLSx9kDM0hM87Uvj76KuuSCUq8wE-1734029862070-0.0.1.1-604800000
2024-12-12 18:57:44 UTC	701	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:43 GMT Content-Type: application/javascript Content-Length: 2379 Connection: close Content-MD5: WuQN1lTNxDgy363p5pd6YA== Last-Modified: Thu, 15 Sep 2022 08:07:05 GMT ETag: 0x8DA96F14793D8E4 x-ms-request-id: 3d8b2328-a01e-0004-58fa-3fedb2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding CF-Cache-Status: HIT Age: 216 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8f0ff1195bf98c17-EWR
2024-12-12 18:57:44 UTC	668	IN	Data Raw: 77 69 6e 64 6f 77 2e 6c 69 67 68 74 62 6f 78 6a 73 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 20 28 63 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 20 64 29 20 7b 20 64 20 26 26 20 28 64 20 2b 3d 20 28 2f 5c 3f 2f 2e 74 65 73 74 28 64 29 20 3f 20 22 26 22 20 3a 20 22 3f 22 29 20 2b 20 22 6c 76 3d 31 22 29 3b 20 63 5b 62 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 69 20 3d 20 77 69 6e 64 6f 77 2c 20 68 20 3d 20 64 6f 63 75 6d 65 6e 74 2c 20 6a 20 3d 20 62 2c 20 67 20 3d 20 68 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 20 6c 20 3d 20 22 6c 6f 61 64 22 2c 20 6b 20 3d 20 30 3b 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 62 28 29 20 7b 20 61 2e 50 28 6c 29 3b 20 61 2e 77 20 3d 20 31 3b 20 63 Data Ascii: window.lightboxjs \|\| function (c) { function g(b, d) { d && (d += (/\?/.test(d) ? "&" : "?") + "lv=1"); c[b] \|\| function () { var i = window, h = document, j = b, g = h.location.protocol, l = "load", k = 0; (function () { function b() { a.P(l); a.w = 1; c
2024-12-12 18:57:44 UTC	1369	IN	Data Raw: 68 20 3d 20 7b 7d 3b 20 61 2e 65 68 20 3d 20 7b 7d 3b 20 61 2e 70 68 20 3d 20 7b 7d 3b 20 61 2e 6c 20 3d 20 64 20 3f 20 64 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 5c 2f 2f 2c 20 28 67 20 3d 3d 20 22 68 74 74 70 73 3a 22 20 3f 20 67 20 3a 20 22 68 74 74 70 3a 22 29 20 2b 20 22 2f 2f 22 29 20 3a 20 64 3b 20 61 2e 70 20 3d 20 7b 20 30 3a 20 2b 6e 65 77 20 44 61 74 65 20 7d 3b 20 61 2e 50 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 62 29 20 7b 20 61 2e 70 5b 62 5d 20 3d 20 6e 65 77 20 44 61 74 65 20 2d 20 61 2e 70 5b 30 5d 20 7d 3b 20 61 2e 77 20 26 26 20 62 28 29 3b 20 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 3f 20 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6c 2c 20 62 2c 20 21 31 29 20 3a 20 69 2e 61 74 74 61 63 68 45 76 65 6e 74 28 Data Ascii: h = {}; a.eh = {}; a.ph = {}; a.l = d ? d.replace(/^\/\//, (g == "https:" ? g : "http:") + "//") : d; a.p = { 0: +new Date }; a.P = function (b) { a.p[b] = new Date - a.p[0] }; a.w && b(); i.addEventListener ? i.addEventListener(l, b, !1) : i.attachEvent(
2024-12-12 18:57:44 UTC	342	IN	Data Raw: 28 7b 7d 29 3b 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 34 65 35 31 39 39 36 2d 66 61 65 35 2d 34 62 66 36 2d 61 38 64 66 2d 37 33 37 61 35 66 35 65 66 31 32 63 27 29 20 21 3d 20 6e 75 6c 6c 29 20 7b 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 34 65 35 31 39 39 36 2d 66 61 65 35 2d 34 62 66 36 2d 61 38 64 66 2d 37 33 37 61 35 66 35 65 66 31 32 63 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 20 7d 20 77 69 6e 64 6f 77 2e 6c 69 67 68 74 62 6f 78 6c 69 62 20 3d 20 6c 69 67 68 74 62 6f 78 6a 73 2e 72 65 71 75 69 72 65 28 22 6c 69 67 68 74 62 6f 78 6c 69 62 22 2c 20 22 2f 2f 77 77 77 2e 6c 69 67 68 74 62 6f 78 63 64 6e 2e 63 6f 6d 2f 76 65 Data Ascii: ({}); if (document.getElementById('c4e51996-fae5-4bf6-a8df-737a5f5ef12c') != null) { document.getElementById('c4e51996-fae5-4bf6-a8df-737a5f5ef12c').style.display = 'none'; } window.lightboxlib = lightboxjs.require("lightboxlib", "//www.lightboxcdn.com/ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49910	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	943	OUT	GET /thumbs/2024/12/05/035257/87643946/randoms-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0
2024-12-12 18:57:44 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: v785fNzswFGjUpvf/ogjNWTSHtFVqqTt0nCVU2ait+uvGMq8BVfjVq2Ujs7bpIpTVsnYoKnCzg0= x-amz-request-id: EZPP32BJAHHZDRP4 Content-Type: image/jpeg Server: AmazonS3 X-LLID: ea929f6f55c977225dfb177392f56cad Age: 597886 Date: Thu, 12 Dec 2024 18:57:44 GMT Last-Modified: Thu, 05 Dec 2024 20:52:58 GMT Content-Length: 407615 Connection: close
2024-12-12 18:57:44 UTC	14079	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: e6 a3 52 a8 d6 ac 69 a9 1d 72 a1 9e a8 c7 2d 2a a7 c4 24 61 a1 d2 9c e5 33 ba 16 c7 1a 42 4c e3 09 4f 6e 99 d9 3b ba 18 6d 48 55 be 54 e6 04 5b 87 f1 5b 47 0f 07 51 56 ae 6d 53 aa d1 2f 9c a4 53 3f 54 e2 ad 39 6a 46 37 2b 78 80 4e b4 af 56 c2 26 13 72 f9 a5 39 01 67 4d aa 63 1b d5 4a 43 2d 49 8b d5 d7 8a 6d 52 36 65 e7 fb 16 4f c7 fe 8d 57 16 da e3 ad 86 da e7 31 3b 3a af a2 b9 10 04 13 31 3f b2 e0 d8 de 8f 87 74 6e c5 f2 d4 e4 4c 90 17 2f 81 2b d4 1c 4a a7 90 8d 9b 95 19 90 0f 5d 0e 4a a8 82 c7 54 65 b2 5b 24 1a 24 c2 e3 a1 b6 65 0c 1c cf d0 b2 7c ac a8 aa 56 56 9e 61 6a d3 bd 04 31 9d ca 26 5e 5b ab c9 21 35 ff 00 a0 e3 de 5f a5 7f 29 d5 20 f8 60 13 5e e7 97 62 bd bf 8c 1e 2f 4b e4 ea 94 4e b9 6c 9b 49 f0 ee 78 26 55 9f 4b aa 31 cf 13 f4 6a af d1 79 4b Data Ascii: Rir-*$a3BLOn;mHUT[[GQVmS/S?T9jF7+xNV&r9gMcJC-ImR6eOW1;:1?tnL/+J]JTe[$$e\|VVaj1&^[!5_) `^b/KNlIx&UK1jyK
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: b2 c5 76 16 56 d0 bd 05 c3 c5 da 38 cc 37 5b f5 37 98 e8 43 75 73 6a ca e8 43 6a c5 2f a1 7f 3c 33 87 40 7d 50 4a 64 d2 40 f3 02 62 45 d8 f4 d7 97 40 f2 bd 0d d5 e6 7d 06 19 ed f2 e5 7d 2f 92 0d de 0c 0d 13 0a d5 7f 7c d3 d6 d6 1d 65 bb e6 f6 82 ad d3 57 5a fb 0a b3 e6 dc f4 77 4b 29 2a cc 98 1f ea cd cb ca 0b 66 2a ad 68 ea 94 dd 85 b1 f7 64 fa 8b f4 1f 21 98 88 fc 94 9d db 7a 88 cb 0e 1b 03 a9 0a 4b 06 a8 f0 aa c3 2a 2c 90 de 13 c9 1c 5c 54 62 92 3c 84 a5 82 92 d4 91 03 ae a4 e0 ab aa 9d cb e6 5a b5 4f 6e 9c d4 e2 4f d2 31 93 f4 9f ae 70 43 fa eb 99 5f a4 50 2e 54 0f a1 8a c8 ce 48 eb 91 e5 7e 55 49 dd 3b ba 06 1a a6 ba bc ca cf a5 89 80 d9 5f 1b ab 73 29 f7 2c 85 81 6f 6a d4 3a f4 a7 10 55 b1 4e e9 0b b6 f5 7d 54 5e 53 7a bf 2e 9b 5d 3a 12 74 63 51 4b Data Ascii: vV87[7CusjCj/<3@}PJd@bE@}}/\|eWZwK)fhd!zK*,\Tb<ZOnO1pC_P.TH~UI;_s),oj:UN}T^Sz.]:tcQK
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: fa 93 ef c0 cf 1c 4f ab 32 5c 6b 23 ec b3 d9 c6 37 77 d2 19 dc a2 39 8d 5c 45 7c 5f 2c 18 2c a7 e5 32 0a 50 b2 57 cb 6d 21 b4 21 69 f3 52 bc 49 6c 92 b6 f8 cf fa 94 3b ee 1b 42 b2 53 05 09 fb 50 f2 1b 5a 91 8d 3c a7 71 6d 94 67 18 95 84 90 a5 72 96 9c 5e 2a 0a 94 53 0d 49 2b 69 1c 94 36 9c 1e 18 a2 83 85 e6 c0 54 e4 0c 13 49 c0 a5 2c 7c 43 1b 60 2b 04 74 62 de 43 78 fc e0 a5 07 16 ac 42 38 20 b3 c2 27 30 30 3f e5 9c 78 89 13 54 8c 4b ee a8 b2 c2 7c 92 a4 24 87 50 15 21 f4 a9 2a 4a f1 96 52 a2 a6 42 88 86 ca f1 35 c8 38 88 60 05 28 0c 54 ce 54 95 28 a9 b7 52 bc f7 18 12 46 14 93 89 4f 19 e3 83 06 5c d0 fd d3 82 8d 48 52 20 29 cc 4b 26 6a d2 04 54 31 66 e4 87 9a 50 56 0f e3 89 6f cf 24 3a 10 de b6 d7 80 64 7b 61 1c e2 be a7 ea 7e bc 7b 8c 40 cf 2c 0a 38 af Data Ascii: O2\k#7w9\E\|_,,2PWm!!iRIl;BSPZ<qmgr^SI+i6TI,\|C`+tbCxB8 '00?xTK\|$P!JRB58`(TT(RFO\HR )K&jT1fPVo$:d{a~{@,8
2024-12-12 18:57:44 UTC	80	IN	Data Raw: 1b 1e 60 a5 6a 6b 15 c6 15 f1 8a 7f c4 1b 01 cf dd 87 31 0d 95 07 40 42 0f fd 58 3c 97 22 bc b0 d5 70 6c 3d f1 a0 2d f4 a7 1f 92 15 8f 38 55 8f ff 00 dc a8 1c 00 9c ff 00 ae 07 01 3c 17 15 1a 9d 4b c8 74 6c a3 1b 88 d3 01 e5 25 21 e7 52 33 Data Ascii: `jk1@BX<"pl=-8U<Ktl%!R3
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 5d 98 b8 f6 0d 34 8e 1d 6b e4 01 c0 c2 a4 5b 29 69 7b 9c 60 7f 12 30 67 80 c0 38 cf 2e 30 10 70 0c 29 e3 38 cf 2c 50 0a 3e 3e e9 f6 c2 9c 29 c2 3d 3e b9 c6 72 70 e7 38 3d 79 19 e3 ce 7d 31 0b e3 10 a0 70 e2 86 11 c6 0c e7 09 f7 c4 1f 64 0c 53 7e ca 4f 19 e3 c0 e3 dc 01 80 1c 03 18 51 4e 7c 47 96 a5 29 b5 38 94 3a 25 12 8c 50 f2 2d 30 16 95 a0 b6 50 3c b0 7f 10 94 15 62 59 e7 1c 60 f0 d1 f8 d6 8e 17 8e 82 31 cf e4 5a 69 2b 4b f0 d4 de 47 96 50 52 b0 42 80 c7 c7 18 95 83 80 71 8a f7 c5 27 1c 57 f6 fe 10 a2 90 32 4b be 47 9e 00 40 5e 20 7c 49 5f 0e e4 57 4b 6b 05 bc 90 b4 14 b0 f2 3c 7e 5f 24 b5 08 0c 50 e5 2c 92 b6 a2 be b5 b8 a4 f9 a4 24 27 16 d9 39 3a de 34 14 bd b9 d6 2d 16 76 09 32 50 e2 dc c6 da 90 9c fb 99 31 f1 cb 99 cf a5 0d 15 a9 c7 5b 48 7a 4f c9 Data Ascii: ]4k[)i{`0g8.0p)8,P>>)=>rp8=y}1pdS~OQN\|G)8:%P-0P<bY`1Zi+KGPRBq'W2KG@^ \|I_WKk<~_$P,$'9:4-v2P1[HzO
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 34 9f 11 e6 15 8a 7d 23 11 29 3e 2a 5f c9 8e c2 29 4a 47 91 07 c4 c4 86 eb ca 43 41 b4 fc 84 06 dc 5f 8a 62 a5 dc 4b 08 0a 90 52 bc 5a 90 d2 5d 92 86 10 b9 88 6d 32 1f 52 88 79 47 14 af 7f 3c 43 fe 39 f3 1c 5a b1 0b c5 b7 ce 46 8d e5 8e a3 c4 94 95 18 0b 6d 92 ab 68 ee c7 79 68 59 53 3e 45 69 c0 92 00 2b 50 a2 42 43 4f ad 48 71 48 f1 25 87 3c 8f 28 2f 33 f3 08 bf d8 6c b6 12 25 bf f2 64 84 af 1e 1f c8 a3 3e 3c f8 4e 7c 47 12 8e 0e 20 63 78 46 7b 1f 4e 7f af 8c e0 67 86 78 67 c6 33 e3 cf 8f 3c 0e 78 11 9b 23 40 cd 7a 3a 31 4c 37 9f 02 73 e2 18 58 04 fd a0 e7 ed 90 70 c4 6b 11 0a 32 b1 ba 26 57 9f e3 ec f0 75 c4 8c 34 af a3 1b 6a c5 18 97 ee 06 46 7e d5 58 b9 ae 30 1d bf 7d 6a 16 0c 4a 36 b5 2b 82 ac 18 30 2f 12 a4 9c d3 61 fc ed ec 7c a6 5b e0 05 2f 93 80 Data Ascii: 4}#)>*_)JGCA_bKRZ]m2RyG<C9ZFmhyhYS>Ei+PBCOHqH%<(/3l%d><N\|G cxF{Ngxg3<x#@z:1L7sXpk2&Wu4jF~X0}jJ6+0/a\|[/
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 3e 74 fc ee 47 5b 77 12 cb a3 6c b0 64 ea c7 af b6 91 ff 00 8c 5f 2d 9b 4e b8 9f ae 08 b6 9b 63 11 35 7b 5d 62 a1 c8 7d 9f d8 f5 2c d4 ef dd 43 bc 2e 6d 6d b5 63 5f e5 37 35 42 cf 7c d3 36 49 7a ff 00 5b c6 61 da 6e ca db 6a 03 da c7 5f ee 52 66 42 db 69 0d 7a 97 2d 85 c7 e1 54 4a 04 05 20 36 86 10 93 7d d7 ba b6 c4 e1 77 7e d2 e3 d7 ec 15 1b 04 89 8e 70 60 b5 e7 32 3a 1a 44 57 b4 fa 79 c9 b4 aa ec bd 6d 35 db fd 52 e6 41 95 21 95 de d9 a7 9d f9 e6 5d 8f dc 30 2c ac 2c 74 bd c2 66 b3 6d d4 dd a5 41 b3 d0 6d 54 b5 b6 70 7b c3 48 72 91 7d 27 35 00 37 ac b4 bc bd fc 8c 28 9b 8c b6 d8 b6 ab dc ef a3 b3 6d 5b 5f 6c d1 bb 91 16 55 6e b7 55 6a d3 aa 8c e3 17 55 db d6 81 63 b1 e9 fb a5 76 b9 5b 16 aa c5 c4 74 ab c6 35 6f 4c bf 3a 45 4f eb cd 9b 82 67 eb 84 97 d1 Data Ascii: >tG[wld_-Nc5{]b},C.mmc_75B\|6Iz[anj_RfBiz-TJ 6}w~p`2:DWym5RA!]0,,tfmAmTp{Hr}'57(m[_lUnUjUcv[t5oL:EOg
2024-12-12 18:57:44 UTC	16320	IN	Data Raw: 8b 51 32 64 bb 4b d6 b5 f4 42 d2 eb 68 dc 21 d8 75 b6 e2 f3 76 7d 29 b2 88 10 e4 6a 1a de bf 55 d9 9a 5d 5d 03 55 0e 22 1d f6 b6 de db 79 45 6b 0a 95 30 fa fa 0e c9 5d 7e ce a3 d7 e9 6f 72 b0 d7 aa e1 f6 1d 9c d7 2c bb 02 ee 44 5f cd bf 2a 24 66 aa 98 87 55 78 d3 32 6c b6 86 19 73 43 e8 d7 b7 2d 1a b2 b6 d1 dc ec 2a ba ed e2 bf af 34 3a 7d 1a 2f 5f 76 5e d3 b7 7e cf dd d5 5a ba ee cb ba e9 da ca 2d 22 6e 12 d7 67 71 7d b0 b1 49 63 ab d1 47 ff 00 5c 57 41 5f bb 7f ed be 5b 4d 7e c7 a6 6a 52 e3 96 ae 06 b5 9b 49 2b b1 d6 a7 38 98 8c 49 2e a4 2d de 6b 1c 7d 0f d4 db 27 e7 a8 74 38 2b 9a 90 a5 de 2e 69 44 e8 92 4a ac 42 10 6c 2e 9e 83 2e 86 f1 f5 a3 5e 9a b9 28 a6 0b 53 aa e3 e1 bd fb d4 0d a8 ec c9 ce c8 b7 ec 28 22 57 64 76 5b 90 35 34 de 4f 91 a3 52 90 dd Data Ascii: Q2dKBh!uv})jU]]U"yEk0]~or,D_$fUx2lsC-4:}/_v^~Z-"ngq}IcG\WA_[M~jRI+8I.-k}'t8+.iDJBl..^(S("Wdv[54OR
2024-12-12 18:57:44 UTC	16384	IN	Data Raw: 8a be 6c 8b 09 f3 50 cd 5a ec a4 d9 75 e6 9d af 37 61 ab 5a 52 d8 ed 9a 85 bd 94 44 f5 b6 cd 3f b3 ab 75 da e8 95 9d 72 ce b1 b1 df de fe bc 8d 86 4e c1 a9 69 5a 1e df 67 72 d6 cd 79 d4 1f ae 31 7b 36 cf 68 fd 6f d3 7a e7 51 bb ec 1d ca 83 56 d8 7f 60 35 75 69 2f f6 1e bd 23 74 da b7 15 d4 ed 32 fb 13 60 56 d3 a9 ec 3b 1d 6c d5 75 39 86 d7 ea 57 eb cf 6c ec 96 bd e9 d7 33 b5 ed 93 51 d1 2f a9 7a c3 61 a2 d6 f7 6b 9b a5 e9 3d 9f 9d df 4d d5 9a 56 e9 dc 9a 0f 6f cd e9 fe cc fd 7f b9 d8 91 dc fd a2 7b 53 7c 7e 22 9a 6e 9e cf ca 04 e5 c4 9d 12 5b 56 90 5d ff 00 5d 8c ba 7f 6f 7f d9 ef eb dd f7 6c f7 fc 7f d2 1b b7 32 ab f4 8a ad 83 4b fa 89 a4 42 15 9d 11 a2 d2 a6 3d 1e 93 56 3f 29 a9 46 07 69 ad 46 39 b7 4e 51 7b 66 d8 1c c9 13 ac a4 e7 da 95 a9 b6 26 a0 11 Data Ascii: lPZu7aZRD?urNiZgry1{6hozQV`5ui/#t2`V;lu9Wl3Q/zak=MVo{S\|~"n[V]]ol2KB=V?)FiF9NQ{f&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49912	104.26.10.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:43 UTC	358	OUT	GET /scripts/ta.js HTTP/1.1 Host: static.trueanthem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:44 UTC	1235	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:44 GMT Content-Type: text/javascript Content-Length: 731 Connection: close x-goog-generation: 1680495923461532 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 731 x-goog-hash: crc32c=cFyq6Q== x-goog-hash: md5=LVEAlqx4oP86QO2uXZwMkg== x-goog-storage-class: STANDARD x-guploader-uploadid: AFiumC4lL2Xh-JyMEkKppPTUHtOq8e68yaYqNyA4jb8yfHAmAqtU5kZWgi54hSAu8YrW-ExHJu0 expires: Thu, 12 Dec 2024 18:37:36 GMT Cache-Control: public, max-age=86400 Age: 1301 last-modified: Mon, 03 Apr 2023 04:25:23 GMT etag: "2d510096ac78a0ff3a40edae5d9c0c92" vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tr88nnrd%2BCQAq7t6LX%2BiO%2FhfdmBowSJcdKwQkOZEU2LsZIGMcDHvg8xMW%2F%2FZfE73Sxmh2x10VBVmlOHy%2BDCGsOIuuSFGu4n4RAGh%2BZip2ub%2BsT0ogVR521EWk1oAkLT7ZUQjzB5mEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f0ff11b2ca84327-EWR
2024-12-12 18:57:44 UTC	215	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 32 35 26 6d 69 6e 5f 72 74 74 3d 31 36 33 30 26 72 74 74 5f 76 61 72 3d 36 37 39 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 33 26 72 65 63 76 5f 62 79 74 65 73 3d 39 33 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 39 31 34 31 31 26 63 77 6e 64 3d 32 34 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 34 35 35 33 39 61 64 65 61 66 33 30 63 61 30 26 74 73 3d 36 32 39 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1725&min_rtt=1630&rtt_var=679&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=936&delivery_rate=1791411&cwnd=245&unsent_bytes=0&cid=945539adeaf30ca0&ts=629&x=0"
2024-12-12 18:57:44 UTC	731	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 32 36 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 55 52 4c 5f 52 4f 4f 54 3a 22 2f 2f 62 2e 74 72 75 65 61 6e 74 68 65 6d 2e 63 6f 6d 22 2c 50 41 47 45 5f 53 4f 43 49 41 4c 5f 53 44 4b 5f 52 4f 4f 54 3a 22 2f 2f 73 74 61 74 69 63 2e 74 72 75 65 61 6e 74 68 65 6d 2e 63 6f 6d 2f 73 63 72 69 70 74 73 22 7d 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 61 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 28 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 68 3d 28 29 3d 3e 22 63 33 34 33 Data Ascii: (()=>{var e={726:e=>{e.exports={URL_ROOT:"//b.trueanthem.com",PAGE_SOCIAL_SDK_ROOT:"//static.trueanthem.com/scripts"}}},t={};function n(r){var a=t[r];if(void 0!==a)return a.exports;var o=t[r]={exports:{}};return e[r](o,o.exports,n),o.exports}n.h=()=>"c343

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49914	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:44 UTC	1246	OUT	GET /thumbs/2024/01/09/043149/87494120/cringe.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-12-12 18:57:44 UTC	372	IN	HTTP/1.1 200 OK x-amz-id-2: P2lz2pr7RJxeWBrjabdIU1whyX27cQGmMdWDlKYCvu/9+FNXzWM2Ssrx51sp5pbd5q1BwNYHOW4= x-amz-request-id: YRK4GNXBRNBHP3WA Content-Type: image/jpeg Server: AmazonS3 X-LLID: bbd82377c46fe1c69a8728c1feddb710 Age: 29193954 Date: Thu, 12 Dec 2024 18:57:44 GMT Last-Modified: Tue, 09 Jan 2024 21:31:51 GMT Content-Length: 218671 Connection: close
2024-12-12 18:57:44 UTC	6837	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 55 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 Data Ascii: ExifII*DuckyU/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF x
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: df 33 11 5d ca da 1b f7 33 35 29 5d b2 30 cc 74 21 d7 2a 42 2b b6 e4 84 9d d1 13 30 a8 86 13 ab 7f 6a 66 3a c5 94 42 85 3e 64 76 ea 3b 62 c2 00 96 f2 4c c4 00 05 ff 00 17 64 2d 90 05 2a 2a 12 90 44 ff 00 08 84 48 dd bc ad 2e 4d 03 e2 31 6a d0 9d 89 77 d1 25 4a 5b bc dd 68 0f 62 02 8c fd b2 31 75 4a 6e b4 2c 6a 76 ea 25 ed 8d 98 d1 9d a0 cb 45 07 52 35 1a 45 d5 16 c7 0a 5b 73 e9 af 61 86 81 5a d0 e5 64 1f f7 c4 95 1d a3 60 48 dd 10 cb 16 c7 0f bc 82 34 d3 b0 c4 8d 06 92 f2 48 99 07 ec 82 02 00 d4 e0 5a a5 28 09 04 69 5a cc 40 67 66 9d 79 69 3b 4f 43 10 2b 66 da 27 52 3a f5 88 60 81 49 d8 94 a9 5d bd b0 41 32 72 b7 81 56 d1 a4 49 06 90 06 e0 60 dc 93 9a c2 43 89 48 e9 28 92 19 db 4e 27 af 6c 40 26 08 5d 0b 12 1f 14 12 49 a0 48 f8 62 6a 9b 00 76 57 34 c9 47 Data Ascii: 3]35)]0t!B+0jf:B>dv;bLd-*DH.M1jw%J[hb1uJn,jv%ER5E[saZd`H4HZ(iZ@gfyi;OC+f'R:`I]A2rVI`CH(N'l@&]IHbjvW4G
2024-12-12 18:57:45 UTC	15472	IN	Data Raw: 4b 1d d2 8d 28 40 9d 4a 34 fb 3a ca 26 49 0b b8 b0 11 dd db ac 43 41 32 22 dd d7 36 16 09 eb 0c 40 e2 f4 c6 bf 2f 97 6d ff 00 f1 12 3e e8 b2 ae 04 be c5 cd 41 d0 fd f3 8d 15 bb 46 56 1a 64 02 76 8d 0c 68 c7 71 1d a0 2e 28 92 fd cd b6 56 a0 86 95 30 a5 1d 25 1d 2c 34 91 5d 81 9e b0 e3 ee 27 e4 df ae 5e f9 ce 48 9c 8f db 1d 6c 3d 69 2b 79 90 e2 c7 b1 1b 65 35 b5 2a a4 4a 94 99 00 b5 a8 ee 2a 9c 58 f0 a4 32 cd a0 6e b7 1c c7 59 29 65 e9 25 6a 1a 4f b0 c2 ac 64 79 45 46 31 fb 6b 54 a8 5a d5 f9 60 00 07 60 89 f1 a1 1e 78 06 7a e9 67 b7 32 68 58 52 54 9e be 7e dd 3d d2 9c 47 89 09 6c b0 61 cb 31 ca d7 bc b6 84 ea 80 03 63 62 41 52 1d 60 f1 22 a7 9e 40 6a ae 37 16 ea 27 45 48 40 58 00 24 ae 5f b4 45 aa 82 79 41 5e 4d 59 93 57 04 cb a1 97 5f b2 2c a5 24 8b 64 90 Data Ascii: K(@J4:&ICA2"6@/m>AFVdvhq.(V0%,4]'^Hl=i+ye5JX2nY)e%jOdyEF1kTZ``xzg2hXRT~=Gla1cbAR`"@j7'EH@X$_EyA^MYW_,$d
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: b9 62 64 f9 84 eb ef 31 f7 af 52 b4 47 27 36 8c 9c bd 08 37 f3 de af 30 0a 54 cb 73 97 6a 5f 8b a7 85 d4 93 3f b2 3a 9f 60 ca ab d4 bf ff 00 f2 ce 1f b1 b7 f0 7f e8 7d 08 b6 d6 e9 81 d4 1e 91 f9 93 3e 64 79 45 50 50 c0 1a 81 ac 50 ac 33 a9 bd 9f f0 c0 d9 52 a4 19 b4 76 8d 61 24 78 47 2a 48 50 90 eb 38 90 68 e7 c8 eb d2 19 bd 08 e2 2b 62 4f a1 8a cf 29 66 45 53 da 7d b1 92 f5 83 d3 fa 7b c0 e6 94 84 a3 15 b7 3d 7d 9c ea 70 1a 4c fc 51 04 54 d8 4a 53 d2 01 8e a5 f7 c3 71 00 95 f5 f6 d9 a1 56 f3 23 29 c5 d8 d6 a7 23 d8 e5 fe 23 3c a4 ba e1 3d 86 67 51 1b eb 74 78 6e cb e5 63 4b 60 6e d0 7d a0 08 67 a9 42 46 04 04 09 74 81 01 bd c2 1b 91 06 c2 41 56 9d 7b e2 79 04 49 8b 6e 43 c5 f0 f6 43 53 26 a2 ba c0 97 4a d0 72 fa fc fa 04 69 16 da d2 84 f9 0f fc ba 4c e4 Data Ascii: bd1RG'670Tsj_?:`}>dyEPPP3Rva$xG*HP8h+bO)fES}{=}pLQTJSqV#)##<=gQtxncK`n}gBFtAV{yInCCS&JriL
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: c5 0d 02 67 0a ba 32 7c 27 f6 43 a6 07 01 e4 a8 4c 74 89 dc 4b 1c 3a ea 42 7d 90 f5 ae a4 09 ef bc 4c c9 fc 23 7a 12 fb 09 d5 4e 9d d0 d5 7a 98 1f c9 34 fa 7e 54 f1 a4 a8 7f 34 cf df 38 e8 51 9e 0f db ff 00 f7 09 42 85 5e 10 47 43 a4 39 e5 72 2d 58 e3 b1 4b 64 fb ff 00 8c 06 66 85 c6 13 33 ec 89 21 54 32 92 00 94 f4 81 21 d3 31 45 2a 1e 28 65 58 21 b0 9b 89 5b 67 79 e9 ec 8b 12 20 0d d7 49 12 9f df 0f 52 53 03 71 49 29 06 7f ed 28 b9 12 ac 04 e2 82 53 b8 74 06 24 86 c2 95 55 0d bc a9 8d 0c 58 40 4d f2 46 b0 f5 24 27 50 f0 4c c6 91 75 2c 80 4d ad 28 53 73 9e 80 88 bd 01 e7 b7 d4 52 a9 aa ac b2 e9 b3 ff 00 54 25 2f fc 91 1f 4e fa be b5 47 23 b2 53 6c 69 f4 b8 85 00 74 26 71 f5 9e 83 8a a3 12 45 f9 fa 14 9a 76 3d 48 dd ee b5 69 95 25 0d 00 a8 71 e0 09 da 94 Data Ascii: g2\|'CLtK:B}L#zNz4~T48QB^GC9r-XKdf3!T2!1E*(eX![gy IRSqI)(St$UX@MF$'PLu,M(SsRT%/NG#Slit&qEv=Hi%q
2024-12-12 18:57:45 UTC	6328	IN	Data Raw: 5d 3b e3 cc 64 47 b6 c5 d7 7a 12 1e 23 68 05 28 dc 27 d2 7a 46 1b e5 e2 76 3a 78 78 8f 9b 65 32 68 99 da 25 e6 77 81 28 e6 df 27 23 bb 45 03 7e e5 5c e0 aa 25 c2 54 67 db ef 8a 9d 4e ae 3d 87 46 01 70 40 a7 71 5d a0 fe e8 5b d5 9a 1e 88 71 fe a0 54 b4 cf a4 c7 ed 88 46 2c cf 41 fd 89 d5 30 2d 6a 53 a2 47 6e 8a 30 c8 e5 66 7a 0d cc 9e a2 98 bf 20 44 a2 ca ee 73 e7 51 57 00 a8 61 04 28 10 48 3d 21 b2 3d 08 68 94 ac 75 ec bf 4e 0a fa a7 49 46 34 a5 90 d3 48 5a 7e dc c5 ca d8 ae d4 a8 2a 36 61 6a a2 59 95 87 d6 0f 18 d4 3b 8b d7 55 db 52 13 5c 10 54 82 47 fc 53 3f 84 74 31 3e 5a 1c be d5 19 4a ac 17 27 a8 ee 6b a3 b8 2c a4 b4 48 dd 32 04 e7 16 ba 7c 1c ab 28 24 7b 1d ee d7 4b 6b 45 42 dc 9a a7 30 04 c9 26 70 99 5f 05 a9 66 02 44 c3 6a d5 51 44 97 35 d8 3c 40 Data Ascii: ];dGz#h('zFv:xxe2h%w('#E~\%TgN=Fp@q][qTF,A0-jSGn0fz DsQWa(H=!=huNIF4HZ~*6ajY;UR\TGS?t1>ZJ'k,H2\|(${KkEB0&p_fDjQD5<@
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: f3 3e 46 e4 7b ae 5f 55 8a d1 da 52 d5 05 33 9e 5a df 6d 2a 50 3d 93 9a a7 1d 4c 0e 10 8b b3 7f c1 3e 7a 7a e1 8a ab aa 69 aa 2b 54 91 56 e8 4e ed 48 dc 4c 84 e3 8f 9f b1 ca c6 fc 2b 92 19 5e a8 f1 ec a7 8b 73 5b 8e 43 70 a0 42 ed f4 6b 65 aa 5a 74 cd 4a 79 6e 19 27 6f 5f b6 3d 1f af a2 e3 2c c7 d8 ae b0 3c 38 cb 25 c8 72 9c 6d 8b ae 45 6f 36 fa 95 25 3b 1a 9c ce d9 09 18 e6 fb 0c a9 b3 d2 fa 7c 2d 21 e3 45 5a a7 07 8f a8 1a 18 e0 dc f4 bc 74 0e fc c4 9b 99 8c 57 4c 95 a0 5d ea 89 93 2e ce 80 41 54 5a 8c 65 6a ef 33 8b ea 89 6c ea 53 d4 f5 89 b0 36 6c 4c 1e a7 db 15 ee 2f 23 09 57 61 8a ac 86 4e 01 1b 7b 68 96 b3 86 81 c1 d0 fa 54 3c 26 71 16 2c 48 e2 a9 dd cd 94 6b 15 b2 d4 82 c9 2a 12 13 f6 69 ef 89 82 c8 07 41 26 73 eb 0e 96 80 d4 10 b7 aa ac 57 20 ca Data Ascii: >F{_UR3ZmP=L>zzi+TVNHL+^s[CpBkeZtJyn'o_=,<8%rmEo6%;\|-!EZtWL].ATZej3lS6lL/#WaN{hT<&q,HkiA&sW
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: ba b5 1e 78 db 83 cf d8 da bc 2a 94 fe d8 89 35 24 0c 8f f5 37 17 d3 51 b4 b2 15 b5 13 1a 89 7b 62 bb 21 b6 61 f7 b1 eb 70 b6 ae a1 2b f2 aa 08 9a 16 9e d3 f6 45 6b 1e a3 d6 c3 51 db 75 f5 4b 5a 5d b8 ac b3 3d 12 85 a8 12 3b ba c5 b4 c2 8b 1e 66 85 ab 43 28 bb ba 96 1e aa 79 a6 db 01 0b 0b 70 92 7b 3b e2 f5 d7 4c aa dd 86 48 18 0e 37 45 80 d5 ff 00 d4 05 34 6b 59 a7 42 83 01 d3 bd 21 c3 22 15 23 dd 23 0c b1 f1 33 65 cf 27 2e f2 46 51 c8 f9 21 4d 65 54 e9 87 8a 9d 95 00 94 b4 54 65 b4 7b 07 64 74 f0 76 78 a8 31 b7 27 a6 78 45 cd 3c 59 e9 02 d7 54 02 93 5f 4b 48 16 52 41 48 52 dd 94 f5 fb 67 1c 1f 61 6f 35 cb 2b a1 04 2f d5 4f 30 d9 ec b5 16 0b 16 49 fa 7d a6 b5 c2 f5 43 4c d3 b8 e2 d5 ac c6 9d 0c 27 5f 14 13 7b 09 35 1c d5 ca 57 27 b7 bd 92 dc 5f 03 50 5a Data Ascii: x*5$7Q{b!ap+EkQuKZ]=;fC(yp{;LH7E4kYB!"##3e'.FQ!MeTTe{dtvx1'xE<YT_KHRAHRgao5+/O0I}CL'_{5W'_PZ
2024-12-12 18:57:45 UTC	13568	IN	Data Raw: 50 dc b4 07 41 a8 8b 5b 30 bc 92 4f 99 ee 35 70 ab a0 7a 86 87 ce 62 9a a0 6d 4b b4 a4 a1 c0 92 35 29 50 d6 62 26 ac 8a b2 93 f3 ae 47 f5 39 f4 c7 95 fe a9 c6 dc 8d 78 ae e3 57 16 5d a2 17 12 2a 05 32 ca b7 25 a9 48 90 3a 09 c5 b5 b2 1d 29 19 8d 7d 5f 3e a7 58 e3 a9 a5 e4 74 db b2 9c 65 04 85 d2 5e 6d 8c ac 2b b2 61 65 13 1a 46 aa e1 c1 65 a9 ae 9d ab e2 5f c5 9c 55 7d 57 38 cf 2c 74 39 c9 5c 5c 6d 37 c3 ab b5 58 dd 4a 92 87 08 d4 9f 29 5a 08 e5 f6 bd 36 1c db 38 3d 27 43 ed 19 31 57 8b d5 8f 2c 03 9b 78 b7 99 a9 c5 6f 1d 5c 08 ac 33 5a ad 55 60 0a 84 a3 50 7b ba 18 f3 bd af 49 7c 5a d7 54 7a ef 59 f6 2a e6 b2 56 71 22 bd 55 76 85 04 ea 0c 72 6a f5 83 d6 79 10 02 aa d4 51 b5 27 ec 8b 38 93 5b d5 fc 9b b7 52 55 dc eb 85 25 2c d7 54 a3 20 84 6a 75 8b b1 e0 Data Ascii: PA[0O5pzbmK5)Pb&G9xW]2%H:)}_>Xte^m+aeFe_U}W8,t9\\m7XJ)Z68='C1W,xo\3ZU`P{I\|ZTzYVq"UvrjyQ'8[RU%,T ju
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 11 64 8d ea f6 4c 40 91 10 39 6d 39 02 6a 5a f2 8a b5 32 91 3d 44 38 b7 d5 0f 6b 53 ed 57 5b d2 da 94 0b 89 1a 91 d5 53 80 e4 76 f1 b7 b1 14 7a 84 e1 eb 66 60 c2 7c e6 37 04 99 85 a6 62 7f 74 10 73 9d 21 11 0e 31 e9 27 16 b8 5c d2 bb 95 28 34 e1 7d 55 32 7d da c1 08 ad 92 a1 f4 d1 c4 f6 0b 62 6e 36 fb 52 3f 54 69 23 f3 48 4f 61 9f 49 44 d5 0b c8 4f ac f5 97 88 e1 b9 47 f4 4f 22 5b 2a a9 5a 6c 6d 4d c9 84 87 1a 50 d0 02 a1 d4 0f 6c 59 04 ca 64 89 8b e4 18 17 27 54 b7 79 c5 2e ec 3e 8d 80 86 18 75 0b 51 98 d2 6d fc 40 f7 c2 d9 08 c5 aa fc 76 a5 8a 54 ac af 73 7d 1c 12 d3 d9 28 8a 82 62 05 fa c7 45 70 a2 76 8a a9 90 ed 33 89 2d b8 85 24 14 ad 2a 12 21 42 2d 43 56 ed 94 23 d6 97 a5 9f fa 63 93 bd 98 62 6c 8f e8 5a bd ae b6 94 27 4a 65 b8 49 52 4f 66 d9 c6 9c Data Ascii: dL@9m9jZ2=D8kSW[Svzf`\|7bts!1'\(4}U2}bn6R?Ti#HOaIDOGO"[ZlmMPlYd'Ty.>uQm@vTs}(bEpv3-$!B-CV#cblZ'JeIROf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49920	104.18.24.111	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:44 UTC	392	OUT	GET /f2815bf33c6dc8/36021cf3063613d1664c0eb36c6b7a38ea7ef2 HTTP/1.1 Host: eagerknight.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:45 UTC	593	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:44 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate expires: Thu, 12 Dec 2024 18:57:43 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding x-buildname: hoothoot x-buildnumber: 1553448542 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Last-Modified: Thu, 12 Dec 2024 18:57:44 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8f0ff11f7947c335-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49915	13.227.8.2	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:44 UTC	372	OUT	GET /modules.675199526fcb21f102e5.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:45 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 227718 Connection: close Date: Tue, 10 Dec 2024 14:10:24 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "acb4d2a336af2d9eae3deb70e89cb560" Last-Modified: Tue, 10 Dec 2024 14:06:32 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a0e0d3e0dbd48638b1d23188b5e70fdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: JENkag4vL8SHd4zoRumPlUxIAEWw5K9fphXyzMwAVPRjJglCRg58_w== Age: 190041
2024-12-12 18:57:45 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 37 35 31 39 39 35 32 36 66 63 62 32 31 66 31 30 32 65 35 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.675199526fcb21f102e5.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 6f 67 2e 64 65 62 75 67 28 22 55 73 65 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 41 50 49 20 63 61 6c 6c 20 73 75 63 63 65 73 73 66 75 6c 2e 22 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 65 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 29 2c 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 55 73 65 72 20 41 74 74 72 69 62 75 74 65 73 20 76 61 6c 69 64 61 74 69 6f 6e 20 41 50 49 20 63 61 6c 6c 20 66 61 69 6c 65 64 2e 22 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 26 26 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 7c 7c 22 75 6e 6b 6e 6f 77 6e 5f 66 61 69 6c 75 72 65 22 29 7d 29 2c 22 Data Ascii: og.debug("User validation API call successful.","userAttributes",e)}),"userAttributes"),hj.tryCatch((function(e){hj.log.debug("User Attributes validation API call failed.","userAttributes",e.responseText&&JSON.parse(e.responseText)\|\|"unknown_failure")}),"
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 29 7d 7d 7d 28 29 2c 6e 3d 76 6f 69 64 20 30 21 3d 3d 74 2c 6f 3d 6e 75 6c 6c 21 3d 3d 69 2e 67 65 74 28 29 3b 72 65 74 75 72 6e 20 6e 26 26 69 2e 73 65 74 28 7b 72 65 66 65 72 72 65 72 3a 74 7d 29 2c 6f 7c 7c 6e 7d 7d 2c 36 31 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 3d 28 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 29 7d 29 2e 74 65 73 74 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 21 6e 61 76 69 67 61 74 6f 72 29 72 65 74 75 72 6e 22 4e 6f 20 55 73 65 72 2d 41 67 65 6e 74 20 50 72 6f 76 69 64 65 64 22 3b 69 66 28 6e 75 6c 6c 21 Data Ascii: )}}}(),n=void 0!==t,o=null!==i.get();return n&&i.set({referrer:t}),o\|\|n}},6175:function(e,t,n){"use strict";n.d(t,{K:function(){return i}});var r,o,i=((o=function(){return r()}).test=r=function(){var e;if(!navigator)return"No User-Agent Provided";if(null!
2024-12-12 18:57:46 UTC	15899	IN	Data Raw: 69 67 6e 65 64 53 6c 6f 74 3b 29 73 3d 73 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 3b 72 65 74 75 72 6e 20 75 28 68 6a 2e 68 71 28 73 29 2e 70 61 72 65 6e 74 28 29 2c 22 3e 22 2b 6f 2b 6e 29 7d 72 65 74 75 72 6e 20 75 28 65 2e 70 61 72 65 6e 74 28 29 2c 22 3e 22 2b 6f 2b 6e 29 7d 29 2c 22 63 6f 6d 6d 6f 6e 22 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 22 29 29 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 65 2e 69 6e 64 65 78 4f 66 28 22 79 75 69 5f 22 29 3e 2d 31 29 26 26 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 6e 2c 22 5c 5c 24 31 22 29 29 2e 73 70 6c 69 74 28 2f Data Ascii: ignedSlot;)s=s.assignedSlot;return u(hj.hq(s).parent(),">"+o+n)}return u(e.parent(),">"+o+n)}),"common"),l=function(e){var r=[];return!(void 0===(e=hj.hq.trim((e\|\|"").replace(/\s\s+/g," ")))\|\|""===e\|\|e.indexOf("yui_")>-1)&&((e=e.replace(n,"\\$1")).split(/
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 46 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 76 61 72 20 47 3d 21 31 2c 59 3d 28 30 2c 57 2e 74 55 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 61 3b 28 30 2c 63 2e 4e 29 28 28 61 3d 7b 7d 2c 61 5b 69 2e 73 2e 52 45 43 4f 52 44 49 4e 47 5f 48 45 4c Data Ascii: d():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},F.apply(this,arguments)}var G=!1,Y=(0,W.tU)((function(e,t,n,r,o){var a;(0,c.N)((a={},a[i.s.RECORDING_HEL
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 6e 6f 64 65 49 64 28 65 29 69 6e 20 74 2e 6e 6f 64 65 73 7d 29 2c 22 4e 6f 64 65 4d 61 70 2e 68 61 73 22 29 2c 74 68 69 73 2e 64 65 6c 65 74 65 4e 6f 64 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 2e 6e 6f 64 65 49 64 28 65 29 3b 64 65 6c 65 74 65 20 74 2e 6e 6f 64 65 73 5b 6e 5d 2c 64 65 6c 65 74 65 20 74 2e 76 61 6c 75 65 73 5b 6e 5d 7d 29 2c 22 4e 6f 64 65 4d 61 70 2e 64 65 6c 65 74 65 4e 6f 64 65 22 29 2c 74 68 69 73 2e 6b 65 79 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 2e 6e 6f 64 65 73 29 74 2e 69 73 49 6e 64 65 78 28 6e 29 26 Data Ascii: function(e){return t.nodeId(e)in t.nodes}),"NodeMap.has"),this.deleteNode=hj.tryCatch((function(e){var n=t.nodeId(e);delete t.nodes[n],delete t.values[n]}),"NodeMap.deleteNode"),this.keys=hj.tryCatch((function(){var e=[];for(var n in t.nodes)t.isIndex(n)&
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 74 79 6c 65 53 68 65 65 74 73 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 6f 3d 74 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 6f 3d 5b 5d 2c 69 3d 30 3b 69 3c 72 2e 63 73 73 52 75 6c 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6f 2e 70 75 73 68 28 72 2e 63 73 73 52 75 6c 65 73 5b 69 5d 2e 63 73 73 54 65 78 74 29 3b 76 61 72 20 61 3d 6e 28 29 3b 72 65 74 75 72 6e 20 72 2e 6f 77 6e 65 72 48 6f 73 74 4e 6f 64 65 3d 74 2e 68 6f 73 74 2c 72 2e 73 68 65 65 74 49 64 3d 61 2c 65 2e 70 75 73 68 28 7b 69 64 3a 61 2c 72 75 6c 65 73 3a 6f 7d 29 2c 65 7d 29 2c 5b 5d 29 3b 72 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 52 75 6c 65 73 3d 6f 7d 72 65 74 Data Ascii: tyleSheets.length>0){var o=t.adoptedStyleSheets.reduce((function(e,r){for(var o=[],i=0;i<r.cssRules.length;i++)o.push(r.cssRules[i].cssText);var a=n();return r.ownerHostNode=t.host,r.sheetId=a,e.push({id:a,rules:o}),e}),[]);r.adoptedStyleSheetsRules=o}ret
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 65 29 2c 69 3d 30 2c 61 3d 65 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 69 2b 2b 29 6e 2e 70 75 73 68 28 7b 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 3a 72 2c 72 75 6c 65 3a 65 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 5b 69 5d 2e 63 73 73 54 65 78 74 2c 6e 6f 64 65 49 64 3a 6f 2c 69 6e 64 65 78 3a 61 2b 69 7d 29 3b 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 6e 29 7d 29 29 7d 29 2c 31 30 30 29 7d 29 2c 22 68 6a 2e 63 73 73 42 6c 6f 62 73 2e 61 70 70 6c 79 22 29 2c 65 29 7d 29 2c 22 68 6a 2e 63 73 73 42 6c 6f 62 73 22 29 28 29 7d 2c 32 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 35 35 34 Data Ascii: e),i=0,a=e.sheet.cssRules.length;i<a;i++)n.push({parentSelector:r,rule:e.sheet.cssRules[i].cssText,nodeId:o,index:a+i});t.forEach((function(e){e(n)}))}),100)}),"hj.cssBlobs.apply"),e)}),"hj.cssBlobs")()},219:function(e,t,n){"use strict";n.r(t);var r=n(554
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6e 3d 74 2e 64 6f 6e 65 2c 61 3d 74 2e 76 61 6c 75 65 3b 69 66 28 69 2e 73 74 61 72 74 28 29 2c 6e 29 7b 76 61 72 20 73 3d 6f 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2b 74 2e 6c 65 6e 67 74 68 7d 29 2c 30 29 2c 63 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 73 29 2c 75 3d 30 3b 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 73 65 74 28 65 2c 75 29 2c 75 2b 3d 65 2e 6c 65 6e 67 74 68 7d 29 29 2c 7b 74 69 6d 65 3a 69 2e 65 6e 64 28 29 2c 63 6f 6d 70 72 65 73 73 65 64 3a 63 7d 7d 72 65 74 75 72 6e 20 6f 2e 70 75 73 68 28 61 29 2c 69 2e 69 6e 63 72 28 29 2c 72 2e 72 65 61 64 28 29 2e 74 68 65 6e 28 65 29 7d 29 29 29 2e 74 68 65 6e 28 28 66 Data Ascii: {var n=t.done,a=t.value;if(i.start(),n){var s=o.reduce((function(e,t){return e+t.length}),0),c=new Uint8Array(s),u=0;return o.forEach((function(e){c.set(e,u),u+=e.length})),{time:i.end(),compressed:c}}return o.push(a),i.incr(),r.read().then(e)}))).then((f
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 6f 72 74 61 6e 74 22 29 2c 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 22 2c 22 6e 6f 6e 65 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 65 7d 7d 28 29 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 61 28 22 55 6e 61 62 6c 65 20 74 6f 20 61 63 63 65 73 73 20 61 6e 20 49 46 72 61 6d 65 20 63 6f 6e 74 65 78 74 2c 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 70 72 6f 70 65 72 74 79 2e 22 29 2c 65 3b 72 3d 6e 7d 76 61 72 20 6f 3d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 6e 61 6d 65 3a 74 29 7c 7c 74 3b 72 65 74 75 72 6e 20 6f 3f 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3f 72 2e 63 6f Data Ascii: ortant"),e.style.setProperty("pointer-events","none","important"),document.body.appendChild(e),e}}();if(!n)return a("Unable to access an IFrame context, using default property."),e;r=n}var o=("function"==typeof e?e.name:t)\|\|t;return o?r.contentWindow?r.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49923	199.232.193.131	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:44 UTC	558	OUT	GET /static/chunks/813.d750b07ac83d91f0d8a7.js HTTP/1.1 Host: ads.blogherads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:45 UTC	641	IN	HTTP/1.1 200 OK Connection: close Content-Length: 297617 x-amz-id-2: fEyBEfAQi3/0nDTEdQ/astVRG0I5qIPHPCZaNsHRklUrb4bo0VSPQAkSmDN8PzZczPSCLf4JaVo= x-amz-request-id: 2NSPXT45VE5QJHAB Last-Modified: Thu, 14 Nov 2024 18:14:39 GMT ETag: "20cdc1e221884a76fe884cb6999a4866" x-amz-server-side-encryption: AES256 Content-Type: application/javascript Cache-Control: max-age=14400, stale-while-revalidate=3600 Accept-Ranges: bytes Date: Thu, 12 Dec 2024 18:57:45 GMT Via: 1.1 varnish Age: 4616 X-Served-By: cache-ewr-kewr1740030-EWR X-Cache: HIT X-Cache-Hits: 417 X-Timer: S1734029865.033936,VS0,VE0 Access-Control-Allow-Origin: *
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 31 33 2e 64 37 35 30 62 30 37 61 63 38 33 64 39 31 66 30 64 38 61 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 73 6b 65 20 4d 65 64 69 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 2a 2f 0a 28 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 3d 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 31 33 5d 2c 7b 31 31 37 36 32 3a 28 65 2c 74 2c 6e 29 Data Ascii: /! For license information please see 813.d750b07ac83d91f0d8a7.js.LICENSE.txt //* Copyright 2024 Penske Media Corporation. All Rights Reserved. */(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[813],{11762:(e,t,n)
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 63 3d 6e 65 77 20 41 72 72 61 79 28 61 3e 33 3f 61 2d 33 3a 30 29 2c 75 3d 33 3b 75 3c 61 3b 75 2b 2b 29 63 5b 75 2d 33 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 75 5d 3b 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 5b 69 2c 6f 5d 2e 63 6f 6e 63 61 74 28 63 29 29 7d 7d 69 66 28 4a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 50 29 29 7b 76 61 72 20 69 3d 7b 6f 6e 53 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 2c 21 31 29 7d 2c 6f 6e 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 3e 31 3f 74 2d 31 3a 30 29 2c 69 3d 31 3b 69 3c 74 3b Data Ascii: a=arguments.length,c=new Array(a>3?a-3:0),u=3;u<a;u++)c[u-3]=arguments[u];e.apply(void 0,[i,o].concat(c))}}if(J.hasOwnProperty(P)){var i={onSuccess:function(e){return r(e,!1)},onError:function(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 6e 29 7b 72 65 74 75 72 6e 20 42 28 79 2e 66 65 61 74 75 72 65 5b 31 5d 2c 65 2c 74 2c 6e 29 7d 29 2c 43 29 3b 64 2e 6f 6e 28 6c 2e 71 59 2e 41 55 43 54 49 4f 4e 5f 45 4e 44 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 6b 65 79 73 28 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 7d 29 29 7d 2c 74 3d 7b 73 74 6f 72 61 67 65 42 6c 6f 63 6b 65 64 3a 65 28 77 29 2c 62 69 64 64 65 72 73 42 6c 6f 63 6b 65 64 3a 65 28 45 29 2c 61 6e 61 6c 79 74 69 63 73 42 6c 6f 63 6b 65 64 3a 65 28 4f 29 2c 75 66 70 64 42 6c 6f 63 6b 65 64 3a 65 28 53 29 2c 65 69 64 73 42 6c 6f 63 6b 65 64 3a 65 28 49 29 2c Data Ascii: n){return B(y.feature[1],e,t,n)}),C);d.on(l.qY.AUCTION_END,(function(){var e=function(e){return Array.from(e.keys()).filter((function(e){return null!=e}))},t={storageBlocked:e(w),biddersBlocked:e(E),analyticsBlocked:e(O),ufpdBlocked:e(S),eidsBlocked:e(I),
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 5d 3d 74 2e 76 61 6c 75 65 73 5b 72 5d 29 2c 65 7d 29 2c 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 2e 76 61 6c 75 65 73 29 2e 6c 65 6e 67 74 68 3e 30 29 29 3b 76 61 72 20 74 2c 6e 2c 69 7d 76 61 72 20 51 3d 7b 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4b 28 65 29 7d 2c 32 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 2e 6d 6f 64 65 6c 47 72 6f 75 70 73 29 7c 7c 30 3d 3d 3d 65 2e 6d 6f 64 65 6c 47 72 6f 75 70 73 2e 6c 65 6e 67 74 68 29 26 26 28 65 2e 6d 6f 64 65 6c 57 65 69 67 68 74 53 75 6d 3d 30 2c 65 2e 6d 6f 64 65 6c 47 72 6f 75 70 73 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 Data Ascii: ]=t.values[r]),e}),{}),Object.keys(t.values).length>0));var t,n,i}var Q={1:function(e){return K(e)},2:function(e){return!(!Array.isArray(e.modelGroups)\|\|0===e.modelGroups.length)&&(e.modelWeightSum=0,e.modelGroups.every((function(t){return!("number"!=type
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 29 2c 65 7d 28 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 2c 69 29 7b 28 30 2c 66 2e 41 29 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 5f 73 74 6f 72 61 67 65 3d 74 2c 74 68 69 73 2e 5f 70 72 65 66 65 72 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 6e 2c 74 68 69 73 2e 5f 73 74 6f 72 61 67 65 4e 61 6d 65 3d 72 2c 74 68 69 73 2e 5f 6c 6f 67 49 6e 66 6f 3d 69 7d 72 65 74 75 72 6e 28 30 2c 70 2e 41 29 28 65 2c 5b 7b 6b 65 79 3a 22 72 65 61 64 43 6f 6f 6b 69 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 74 6f 72 61 67 65 2e 63 6f 6f 6b 69 65 73 41 72 65 45 6e 61 62 6c 65 64 28 29 3f 74 68 69 73 2e 5f 73 74 6f 72 61 67 65 2e 67 65 74 43 6f 6f 6b 69 65 28 65 29 Data Ascii: ),e}(),O=function(){function e(t,n,r,i){(0,f.A)(this,e),this._storage=t,this._preferLocalStorage=n,this._storageName=r,this._logInfo=i}return(0,p.A)(e,[{key:"readCookie",value:function(e){return this._storage.cookiesAreEnabled()?this._storage.getCookie(e)
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 29 7d 29 29 7d 7d 7d 7d 76 61 72 20 68 3d 21 28 6e 75 6c 6c 21 3d 3d 28 69 3d 70 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 2e 6c 61 74 65 73 74 54 6f 6b 65 6e 29 7c 7c 63 26 26 63 2e 69 64 65 6e 74 69 74 79 5f 65 78 70 69 72 65 73 3e 70 2e 6c 61 74 65 73 74 54 6f 6b 65 6e 2e 69 64 65 6e 74 69 74 79 5f 65 78 70 69 72 65 73 2c 6d 3d 68 3f 63 3a 70 2e 6c 61 74 65 73 74 54 6f 6b 65 6e 3b 69 66 28 6e 28 22 55 49 44 32 20 6d 6f 64 75 6c 65 20 73 65 6c 65 63 74 65 64 20 6c 61 74 65 73 74 20 74 6f 6b 65 6e 22 2c 68 2c 6d 29 2c 21 6d 7c 7c 44 61 74 65 2e 6e 6f 77 28 29 3e 6d 2e 72 65 66 72 65 73 68 5f 65 78 70 69 72 65 73 29 72 65 74 75 72 6e 20 6e 28 22 4e 65 77 65 73 74 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 6b 65 6e 20 69 73 20 65 78 70 69 72 65 64 20 61 Data Ascii: )}))}}}}var h=!(null!==(i=p)&&void 0!==i&&i.latestToken)\|\|c&&c.identity_expires>p.latestToken.identity_expires,m=h?c:p.latestToken;if(n("UID2 module selected latest token",h,m),!m\|\|Date.now()>m.refresh_expires)return n("Newest available token is expired a
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 61 72 20 6f 3d 28 30 2c 67 2e 63 79 29 28 65 5b 74 5d 29 3f 28 30 2c 72 2e 41 29 28 65 5b 74 5d 29 2e 72 65 76 65 72 73 65 28 29 3a 5b 5d 3b 6e 5b 74 5d 3d 6f 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 68 61 73 28 65 29 3f 69 2e 67 65 74 28 65 29 3a 65 7d 29 29 7d 29 29 2c 48 3d 6e 7d 65 6c 73 65 20 48 3d 7b 7d 7d 28 74 2e 69 64 50 72 69 6f 72 69 74 79 2c 57 29 2c 69 65 28 7b 72 65 61 64 79 3a 21 30 7d 29 29 29 7d 29 29 2c 28 30 2c 63 2e 6d 29 28 29 2e 67 65 74 55 73 65 72 49 64 73 3d 75 65 2c 28 30 2c 63 2e 6d 29 28 29 2e 67 65 74 55 73 65 72 49 64 73 41 73 45 69 64 73 3d 73 65 2c 28 30 2c 63 2e 6d 29 28 29 2e 67 65 74 45 6e 63 72 79 70 74 65 64 45 69 64 73 46 6f 72 53 6f 75 72 63 65 3d 49 65 28 6c 65 29 2c 28 30 2c Data Ascii: ar o=(0,g.cy)(e[t])?(0,r.A)(e[t]).reverse():[];n[t]=o.map((function(e){return i.has(e)?i.get(e):e}))})),H=n}else H={}}(t.idPriority,W),ie({ready:!0})))})),(0,c.m)().getUserIds=ue,(0,c.m)().getUserIdsAsEids=se,(0,c.m)().getEncryptedEidsForSource=Ie(le),(0,
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 75 63 74 69 6f 6e 49 64 3a 6e 2c 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 3a 6f 2c 61 64 55 6e 69 74 73 3a 28 30 2c 61 2e 47 6f 29 28 43 29 2c 6c 61 62 65 6c 73 3a 69 2c 73 72 63 3a 22 63 6c 69 65 6e 74 22 2c 6d 65 74 72 69 63 73 3a 75 7d 29 2c 61 75 63 74 69 6f 6e 53 74 61 72 74 3a 74 2c 74 69 6d 65 6f 75 74 3a 72 2c 72 65 66 65 72 65 72 49 6e 66 6f 3a 76 2c 6d 65 74 72 69 63 73 3a 75 7d 29 2c 64 3d 4e 5b 65 5d 3b 64 7c 7c 28 30 2c 61 2e 76 56 29 28 22 54 72 79 69 6e 67 20 74 6f 20 6d 61 6b 65 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 62 69 64 64 65 72 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 3a 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 2c 64 26 26 73 2e 62 69 64 73 26 26 30 21 3d 3d 73 2e 62 69 64 73 2e 6c 65 6e 67 74 68 26 26 68 Data Ascii: uctionId:n,bidderRequestId:o,adUnits:(0,a.Go)(C),labels:i,src:"client",metrics:u}),auctionStart:t,timeout:r,refererInfo:v,metrics:u}),d=N[e];d\|\|(0,a.vV)("Trying to make a request for bidder that does not exist: ".concat(e)),d&&s.bids&&0!==s.bids.length&&h
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 61 3b 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 21 3d 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 61 6c 29 7c 7c 6f 2e 24 57 2e 67 65 74 43 6f 6e 66 69 67 28 22 64 69 73 61 62 6c 65 41 6a 61 78 54 69 6d 65 6f 75 74 22 29 7c 7c 28 61 3d 63 2e 74 69 6d 65 6f 75 74 28 65 2c 74 29 2c 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 73 69 67 6e 61 6c 3a 61 2e 73 69 67 6e 61 6c 7d 2c 6e 29 29 3b 76 61 72 20 75 3d 63 2e 66 65 74 63 68 28 74 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 64 6f 6e 65 29 26 26 28 Data Ascii: ,i=function(t,n){var r,i,a;null==e\|\|null!=(null===(r=n)\|\|void 0===r?void 0:r.signal)\|\|o.$W.getConfig("disableAjaxTimeout")\|\|(a=c.timeout(e,t),n=Object.assign({signal:a.signal},n));var u=c.fetch(t,n);return null!=(null===(i=a)\|\|void 0===i?void 0:i.done)&&(
2024-12-12 18:57:45 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 3d 3d 3d 72 7d 29 29 29 2c 6e 75 6c 6c 3d 3d 6e 3f 69 5b 30 5d 3a 69 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 73 26 26 6e 75 6c 6c 21 3d 65 2e 62 69 64 73 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 49 64 3d 3d 3d 6e 7d 29 29 7d 29 29 7d 7d 2c 67 65 74 42 69 64 52 65 71 75 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 72 65 71 75 65 73 74 49 64 3b 69 66 28 6e 75 6c 6c 21 3d 6e 29 72 65 74 75 72 6e 20 65 28 29 2e 66 6c 61 74 4d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 42 69 64 52 65 71 75 Data Ascii: nction(e){return e.bidderRequestId===r}))),null==n?i[0]:i.find((function(e){return e.bids&&null!=e.bids.find((function(e){return e.bidId===n}))}))}},getBidRequest:function(t){var n=t.requestId;if(null!=n)return e().flatMap((function(e){return e.getBidRequ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49919	52.222.144.12	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:44 UTC	571	OUT	GET /skeleton.js?ab=1&zoneid=9402702_advertisement_ HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:45 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17 Connection: close Date: Thu, 12 Dec 2024 16:57:50 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Aug 2020 23:54:35 GMT ETag: "53fab767ecbd3bf07990b10246befbd4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ab98259c2b5c7fba2ccac74c507f520c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: ODE5mkPrKxeeuc9vSe856zQ7yl5OBN7jpSiWBadTF7xzfxt1UYByJg== Age: 7196
2024-12-12 18:57:45 UTC	17	IN	Data Raw: 22 61 64 20 70 6c 61 63 65 68 6f 6c 64 65 72 22 3b Data Ascii: "ad placeholder";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49917	91.228.74.200	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:44 UTC	353	OUT	GET /quant.js HTTP/1.1 Host: secure.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:45 UTC	295	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:45 GMT Content-Type: application/javascript Content-Length: 23145 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=604800 Etag: "mLYq618hJoRcW1Crupr2OQ==" Expires: Thu, 19 Dec 2024 18:57:45 GMT Vary: Accept-Encoding
2024-12-12 18:57:45 UTC	16089	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 33 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 63 61 73 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 71 63 53 65 73 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 72 28 29 3b 72 65 74 75 72 6e 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 28 65 2b 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 25 31 36 7c 30 3b Data Ascii: /* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;
2024-12-12 18:57:45 UTC	7056	IN	Data Raw: 31 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3f 5a 28 65 29 3a 5f 28 65 2c 21 30 29 2c 6f 3d 21 30 7d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 28 74 3d 44 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2c 30 29 29 2e 73 70 6c 69 63 65 28 31 2c 30 2c 6e 29 2c 4a 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 3b 72 3d 21 31 2c 71 65 26 26 4b 28 29 7d 72 65 74 75 72 6e 20 6f 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 61 2c 69 2c 63 2c 75 2c 73 3d 5b 5d 2c 6c 3d 5b 5d 2c 66 3d 74 7c 7c 5f 3b 69 66 28 28 72 3d 44 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 29 26 26 72 2e 6c 65 6e Data Ascii: 1;if(arguments.length){for(n=function(e){r?Z(e):_(e,!0),o=!0},e=0;e<arguments.length;e++)(t=De.call(arguments[e],0)).splice(1,0,n),J.apply(null,t);r=!1,qe&&K()}return o},J=function(e,t){var n,r,o,a,i,c,u,s=[],l=[],f=t\|\|_;if((r=De.call(arguments,2))&&r.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49924	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:44 UTC	1249	OUT	GET /thumbs/2024/11/11/040543/87633123/skylabbig.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-12-12 18:57:45 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: /F2OftZVeyvFgZsrw5Bbzzl0ipMqcg5P/4YtUl38CkTjF8kOVjKze36g0enhXx1Baa1enHKaiF0= x-amz-request-id: RJYFJNEZQMYZ6D9E Content-Type: image/jpeg Server: AmazonS3 Age: 2670722 Date: Thu, 12 Dec 2024 18:57:45 GMT Last-Modified: Mon, 11 Nov 2024 21:05:44 GMT X-LLID: e969fec2e7b348bba3019111f3c39e88 Content-Length: 82872 Connection: close
2024-12-12 18:57:45 UTC	14079	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f3 11 4b 07 d1 f8 2d 22 2a a7 90 64 11 08 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwt"4K-"*d
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: d2 41 67 94 34 40 1a d6 b5 ad 6b 5a 70 92 bb 70 56 b5 a5 af 47 b2 03 ea 31 bf a0 ce 90 f5 1e d2 a2 34 d0 d5 61 68 37 a6 f1 a4 4d 32 b6 7d f5 ec 70 7d 4e 29 2f fa 9b 35 79 15 b6 cb 38 80 1f 99 43 db 96 18 ae ef 20 3d 5c 8b 9b 18 88 c6 d0 f8 5a f9 16 ca 8d 9c aa a5 f0 19 29 d4 58 50 c7 8f 07 3a 56 0d 23 81 8d ad 7a 69 6b 5e da fb 4f 29 bf fb e3 bd 11 92 33 13 5b bd e0 22 b5 c5 8f 5d 68 fb 6f e1 bc 52 5f f6 0d 06 a7 2d 1c f3 f2 2d 55 d8 59 a0 33 af 47 26 7b 72 8d 38 8d 9d 5a d7 14 c8 74 8a 9a 16 58 73 10 2c 8e 2a dc 9b a9 7c b4 82 8b 03 e5 c8 2a 2e f5 1e c3 e4 3d f6 82 df a7 22 33 c4 3c 3d 8d 96 07 b0 8d 6a 38 9d 14 0a a0 f5 df a9 f7 df ae a9 0f fb 46 78 bb b6 5a aa 17 76 6b c4 ba 3f 09 54 23 d7 90 0e c4 6d 64 7e 16 b1 ce f2 7e 8f d3 e7 74 9a e8 1f 2b 6a 35 Data Ascii: Ag4@kZppVG14ah7M2}p}N)/5y8C =\Z)XP:V#zik^O)3["]hoR_--UY3G&{r8ZtXs,\|.="3<=j8FxZvk?T#md~~t+j5
2024-12-12 18:57:46 UTC	1632	IN	Data Raw: e2 8d 94 7e f1 ba 8f 25 52 bb 4e d2 7f de 6a ad c1 aa b8 f7 15 51 fc 32 9f fc b2 a0 e4 7a 90 e4 4d 21 c2 50 19 0b a2 03 57 a4 52 77 e1 44 e8 51 f8 8a 2c 99 1b 27 7f 05 8d fd 9b 43 a4 4d f9 2e df ba 04 36 14 bc 6a 75 41 30 8f 24 de 2a 98 dc 9a 3d d5 d2 54 6d 06 9b 0d a7 a0 19 e5 fb 20 d7 20 74 8a 1f 8a 5a 98 69 89 92 79 99 ff 00 62 b2 e3 ae ea c8 87 03 c9 02 00 9f fe 15 4e 2e 4d d0 c7 66 71 dc 8e 3a 6d 88 86 85 d8 1f d4 2a a6 31 07 23 30 8f 48 f3 be 7c 8a 02 a0 fc d2 bb 6a de d5 e9 5a 37 ea b7 e6 9f 57 ea 58 06 5d 27 f6 55 29 9c 88 29 e6 49 32 89 f7 dc 3c d6 97 46 cf 3d 2b 7f 75 a1 e9 3e f0 07 81 b1 5a 2d 63 38 02 67 48 ea 84 97 f0 69 41 a2 08 0d 03 73 53 49 d8 a4 78 5d 54 f7 ea 34 2a 62 25 c9 bb 82 e2 e0 a9 cd 81 2b a7 a5 d2 32 96 d3 3e 49 ee 67 d5 ce 6c Data Ascii: ~%RNjQ2zM!PWRwDQ,'CM.6juA0$=Tm tZiybN.Mfq:m1#0H\|jZ7WX]'U))I2<F=+u>Z-c8gHiAsSIx]T4*b%+2>Igl
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 78 85 a1 33 2a 27 e0 b4 6f e4 ad 04 83 8e 97 ec b4 1a c1 9d 15 43 48 e6 27 7a d2 29 88 7d d9 c4 2e 97 4f a4 23 60 7e cb 03 5b 48 b9 02 c6 bd 82 5c 33 58 85 93 e4 82 d2 9b 36 94 66 65 36 bd 33 4a a9 5d 0d 47 0d db 93 e0 4d c7 15 5d 8d 0f c3 6e 28 b7 30 a8 93 b7 50 c2 a0 e1 67 59 70 84 45 28 6a 2c 86 cf 32 a9 53 b0 32 55 5a 93 b5 03 92 74 66 55 56 99 0e 21 4d 9f 9e e4 5e f3 51 de 4a d2 bf 75 79 0f 60 f3 43 f8 23 19 fb e7 25 8a f5 5c 5f cb 72 0d b0 10 3d 44 60 6a d9 2b 15 5f 30 16 2a cd 1b 83 6e b1 92 29 8d 9f bc 89 c2 31 14 d7 68 da 4e fc 2d cc f1 44 54 61 ca 1c 15 3d 25 94 df d2 e1 21 0a 74 de 1a 66 d9 a0 ea 60 33 68 f2 55 6a 3f 15 9a 15 36 66 e2 53 18 e2 e0 33 47 d4 df db e5 61 6d 95 af ea 6d dd 25 76 a0 f1 cd 13 4c bb 76 22 85 39 6e 6a 72 57 3e 0b 6d fe Data Ascii: x3'oCH'z)}.O#`~[H\3X6fe63J]GM]n(0PgYpE(j,2S2UZtfUV!M^QJuy`C#%\_r=D`j+_0n)1hN-DTa=%!tf`3hUj?6fS3Gamm%vLv"9njrW>m
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: dc b6 70 6f c1 d7 88 98 5c 0d 58 02 27 8c e1 80 79 fb 86 42 73 c3 7e 1a 89 36 67 ec f4 ca e6 07 0d ce ce 61 71 89 ba d8 fd aa 63 2c 5b 67 14 89 8d 8d 99 17 24 ca 86 34 85 da c2 ab dc 4e 39 3e e5 bc b5 14 22 8d 25 d1 22 a8 e0 e6 04 4b 5c 00 af 10 50 9e 3f 65 f6 47 a2 d2 95 51 86 96 e3 5e be 44 e2 52 93 38 a2 16 f4 c5 c9 f5 39 15 1b 51 1a 45 35 76 ab f3 c4 50 bc 68 45 cf 32 a3 92 c0 97 e4 49 5d 4d 5c a7 15 16 5d 8e 75 12 87 89 4b e2 22 bc 5e ec 29 5c 54 6d 95 1c 2e dc 02 a8 01 80 91 9d f1 55 12 fa 2a 17 fd be 33 87 d0 52 3c 0d 54 a1 1f 0b 30 e1 cc ef 4b 11 d9 fb 82 1c 09 4f 52 aa 54 cf 97 e2 a6 6c d7 d0 94 18 cd 8d 1f 07 89 e7 e0 bb 21 47 89 5e 75 d5 4a a4 2f 59 67 86 72 d8 0e 78 82 0f 55 02 55 3d ab 8b 1d f6 c8 0e 50 71 b1 36 cf c1 80 aa 13 e6 ae 2b 12 17 Data Ascii: po\X'yBs~6gaqc,[g$4N9>"%"K\P?eGQ^DR89QE5vPhE2I]M\]uK"^)\Tm.U*3R<T0KORTl!G^uJ/YgrxUU=Pq6+
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 93 52 fe 7f da f1 f3 c3 1d d2 aa 7c 65 ef a4 bf b2 39 bd 7f 78 77 3e e3 09 51 4f d2 88 35 4e 21 08 3d e7 31 6e c3 f4 04 ef 9b c2 73 f0 7c cb ae ee 9f 96 88 52 ff 00 11 03 91 aa 42 68 81 0b 66 cc 10 8f 11 d5 a0 f9 8d f1 1e 04 a5 0a 9d 61 42 5e 14 a2 10 a7 bc 36 15 63 7a 61 60 fe eb 83 2e 22 13 10 58 3f 0c 27 5f 0e 51 4b 84 a7 10 d6 cc d9 3a 4d 88 7a 89 87 d4 20 c1 86 c5 c5 10 f2 44 f4 c5 10 06 cf 05 4a 3d b0 51 cb 7d 40 1f 09 47 c0 1e 10 a1 ce e5 81 b3 6e 15 39 7d 12 a1 94 85 f0 3f a4 a4 92 72 2d 09 8d 01 75 ea 6e 2e a9 66 37 6b bf 64 63 1b 8b b9 80 96 31 9d 12 5c b1 62 d8 02 00 80 11 2f 12 ed 75 18 53 c4 a7 7a 97 2e 2e 59 70 7a 9a 6a 2a a2 7f 74 d5 c5 5e 9f ed 67 fa ff 00 25 fc a3 8d 46 fc 55 8b 15 0c 46 80 d7 52 f5 f7 e6 0f 84 85 27 cb 65 a5 45 58 d9 eb Data Ascii: R\|e9xw>QO5N!=1ns\|RBhfaB^6cza`."X?'_QK:Mz DJ=Q}@Gn9}?r-un.f7kdc1\b/uSz..Ypzj*t^g%FUFR'eEX
2024-12-12 18:57:46 UTC	1625	IN	Data Raw: dd 8f 1b 0d 5b 72 47 13 8a a7 2d 0a 45 22 97 9c eb 25 b7 c3 a1 65 59 53 28 65 8b a9 94 21 ee 21 fa 91 5a 3f 41 b4 a0 9f 89 36 41 ca e9 98 fa cf ff 00 55 d0 c7 9b 18 c7 97 0d b4 bd 72 6d 2e e4 5d a4 c5 9d 1c a5 32 ba 93 23 26 ea 2a c9 5a 75 d7 db a9 6c fa f9 4e 5d 4a e8 63 f8 0f 36 22 84 9f d3 6d 0c 38 41 c5 de ed b1 45 2a a6 71 1f 3a f4 ea 50 63 83 1a 1e 6c e1 f6 97 ae 58 8b b9 15 49 2c 90 97 d0 8e 06 23 d5 22 58 13 8a b6 b2 b2 d1 a1 48 e5 39 4a 38 4c 39 4b 16 2d 6c 99 8f c3 db 94 93 b6 ca a7 4f a7 42 8d 17 42 2f 3b 42 79 d6 4f 36 3c 92 28 ac db 48 b4 4a 84 95 6e 21 d3 91 15 ef 6e 4b 64 45 be 55 a9 1f d3 da fd e6 61 37 72 5d 9c 6c c7 f9 a3 fb 56 49 0e 27 2b 14 4a 43 8a 26 a9 8d 0f 26 8c 0d a5 93 5c da 66 8e 13 0d 37 6d 1b 68 4b 95 e9 66 3e 1d 4f 45 d6 8e Data Ascii: [rG-E"%eYS(e!!Z?A6AUrm.]2#&ZulN]Jc6"m8AEq:PclXI,#"XH9J8L9K-lOBB/;ByO6<(HJn!nKdEUa7r]lVI'+JC&&\f7mhKf>OE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49925	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:45 UTC	1247	OUT	GET /thumbs/2024/11/08/045032/87632310/1968big.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _ga=GA1.2.1729578817.1734029844; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-12-12 18:57:45 UTC	370	IN	HTTP/1.1 200 OK x-amz-id-2: Xg9PTf5mqazp4Y0zymhr2THdo/KxslbVjtSpddxphEwj779p86bA7EmMFACJn1UOzVN+isJRejw= x-amz-request-id: RGGVNECK6S9GS656 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 88a24df4a41b95cee5d7ef7077085190 Age: 2927233 Date: Thu, 12 Dec 2024 18:57:45 GMT Last-Modified: Fri, 08 Nov 2024 21:50:33 GMT Content-Length: 92672 Connection: close
2024-12-12 18:57:45 UTC	14079	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d2 da bc 66 3c 3a 4a 10 d0 16 68 62 ad Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwt"5f<:Jhb
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 63 d9 46 d4 36 b6 c6 94 77 ea cf 94 cc 39 3e ae cc 8b a9 bf 5d 0e b7 61 7e 70 3b f4 50 52 8c a1 f6 50 ed d5 72 90 78 6c 4c b9 aa d7 7d 45 ad 2d 59 a3 7e 07 0f 8f 92 63 64 78 a4 37 6a 41 06 e5 e9 25 f3 f2 f2 f2 0d da 58 96 c0 75 60 ef 0f 89 5f 4a c1 14 48 18 b1 07 bf 2f 26 66 62 d9 d0 03 f1 d9 7f 77 bb cf ca 1c aa be 33 c6 60 30 fa bd 60 0c 03 c0 88 71 10 c7 2c 37 23 c0 da 0c 93 fa 8f e1 2d 81 ba 8a 6d a7 03 3e af d4 cd 62 d6 95 cd 79 e4 b1 2b 77 dd 61 3d eb 33 44 ec f6 e0 07 51 72 6b 06 f5 4b 1b 90 8e 27 9a d1 ce eb c8 76 13 6d 2a 42 61 d7 47 bc 83 35 76 01 da 43 5d 66 9d 27 1a eb 0a b3 b6 1c 1c 38 64 68 3e a2 54 10 08 59 3a 1c 0d 61 6e fb ef be c3 77 de 2b 07 8a 66 4c 00 60 60 e5 cb 03 c0 8c 56 7a cf 18 1d 78 f8 f8 7a fc 1d 58 7e 21 35 08 cf 0f 57 a3 eb Data Ascii: cF6w9>]a~p;PRPrxlL}E-Y~cdx7jA%Xu`_JH/&fbw3`0`q,7#-m>by+wa=3DQrkK'vm*BaG5vC]f'8dh>TY:anw+fL``VzxzX~!5W
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 85 8e 4d fb 0e 57 87 66 2b 34 af 96 1e 66 b4 4f 26 f6 09 a1 bd e5 97 d1 e7 c6 42 81 0a 82 83 60 08 75 59 89 3d 82 8e c3 b4 a2 8a 3b 6a 08 3c d6 5c cb 50 b2 43 4f 89 ff 00 a6 cb ac ec e1 09 ca 9c d0 01 00 ae 8a 28 49 aa 63 4e 89 af 66 52 9d 84 97 2f fa 64 d5 a7 fc 2f 1e c9 44 a3 da 25 0e 6e 1f e5 61 b4 ca 0a 89 ed ac 64 83 d1 10 48 3a 8f 77 65 74 51 ec 1e de 5c 04 9f d7 3f a0 5e d6 4f 98 fe bd ab ed bf ba 68 6e 9e 27 c5 3e 1c 34 b2 cb df 73 2b e4 13 66 9c c8 fd 23 ba c3 4c 63 65 78 f3 0a 75 5f 92 e0 40 31 f6 aa e1 1e 4a ca cb 2d d5 5c 10 00 9d 96 54 55 53 cb 21 30 9a 39 82 a9 b8 91 b8 c4 b3 2b 82 dd 01 c5 98 51 64 70 77 23 d9 0a cb 3b 2d c9 39 c2 c3 6f 10 1c d0 cd 97 f1 41 05 44 62 91 b2 03 70 b2 d2 a9 84 59 3c ba ce 58 9c dd f5 3e 21 c5 af 77 00 17 2b 0b Data Ascii: MWf+4fO&B`uY=;j<\PCO(IcNfR/d/D%nadH:wetQ\?^Ohn'>4s+f#Lcexu_@1J-\TUS!09+Qdpw#;-9oADbpY<X>!w+
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: c5 df 3f f8 5b bc 47 a4 4d 2c 71 92 d7 ff 00 b2 71 78 ca de 22 9c 77 6d 1d e2 6e 54 82 ee 21 61 05 c3 aa 68 9c ea de c9 91 ba ad bf 50 8e 2f 14 c6 81 a5 cf 92 96 1c d2 47 dd 26 e1 4b 18 ad 2a a2 8b 0a c7 81 c4 eb d7 6d 88 e8 76 b6 31 d5 4a ea be 4b 37 a2 c4 62 71 f1 cd 0e 26 90 b3 50 ad d8 dd 8d 7e 8b 71 03 9e fd 55 a9 be fa 05 24 bc 45 94 1c 91 d0 a1 bb ad 13 9b c4 0d 14 92 4b bd 63 18 fb dd b5 53 df 24 2e 8c f4 1a 2c 55 6b bc 0d 3e 2b 1e 74 c4 c4 b1 a1 9c 53 36 f6 a2 6b a3 69 79 39 ba 82 a7 83 f7 6f 2e 6f 42 86 23 09 43 a8 e1 2a 5c 2c a6 d4 04 f0 f8 a7 37 f7 82 87 c1 66 9e 43 5e 7d 87 cb 8a 84 33 5c c0 a6 ef 5b 6a a8 1b 87 96 6a e8 d2 b7 93 3d fd 5d b1 cd 52 37 9a 1d 4a 6f de 59 bb ae 52 48 75 42 11 52 9d 3b b2 03 c3 d8 cf 23 5a b9 74 ec 00 ac bf 66 d7 Data Ascii: ?[GM,qqx"wmnT!ahP/G&Kmv1JK7bq&P~qU$EKcS$.,Uk>+tS6kiy9o.oB#C\,7fC^}3\[jj=]R7JoYRHuBR;#Ztf
2024-12-12 18:57:46 UTC	16320	IN	Data Raw: 8a 48 80 4e c4 0c 52 ce 74 46 e4 70 34 b8 6a 45 6b 70 a5 b7 80 6d 1e 36 fb 25 f5 57 ed 11 6a 81 8a 39 62 b6 db b0 94 72 5a 42 2e 4b 2a 13 c9 c4 85 39 d3 3b b3 b9 47 11 dc ce 89 40 e6 53 84 cc 22 b9 50 8e b1 93 e4 5d a7 91 d3 14 35 2f 6b 63 73 a0 8c 0c c6 51 5c 12 cb 2e 5c c3 4c d1 cc ba d8 3e 45 ec ae 18 6a 3a 9c 04 f9 1f 63 a7 72 d0 5a ea 3f de 6a 6a ac 30 fd be cc 31 ea fa e7 24 3d f6 64 3e da ba 85 09 27 6a 06 73 61 c0 fb 3d f1 92 61 72 d3 9a d1 83 82 52 96 18 98 6c 21 cc b6 c7 24 23 57 53 b9 53 a8 7c f5 6c 46 29 b4 85 80 1e a3 f2 23 79 82 b4 7d 25 19 b8 95 37 86 00 dc 01 10 84 f3 e0 2b 64 48 f8 d1 93 06 4c d4 30 9e 6b a8 91 58 32 37 06 41 60 43 71 3b f7 11 c0 c6 62 ee 29 94 30 ee 84 8c 40 d1 84 22 a3 9e 26 2e 88 33 60 47 18 6d af ba c0 fa 7e d1 2e 68 Data Ascii: HNRtFp4jEkpm6%Wj9brZB.K*9;G@S"P]5/kcsQ\.\L>Ej:crZ?jj01$=d>'jsa=arRl!$#WSS\|lF)#y}%7+dHL0kX27A`Cq;b)0@"&.3`Gm~.h
2024-12-12 18:57:46 UTC	13121	IN	Data Raw: 58 61 10 01 81 43 b6 18 86 68 8b dd 0c 32 d1 70 c5 86 90 6b bb 57 1f a8 9c b9 8b 33 93 86 e2 50 40 58 99 f0 9b a8 3c 4c 92 c7 8f 2b 0f bb 4a 08 42 02 2c 3c 20 24 3a b4 58 d6 34 b1 ed 41 f5 37 f1 11 2a 46 8a 5d 77 32 fd 1c 43 f5 0c 90 f8 c2 7d c3 9b 7b c5 4a 4a 81 ae 53 9a 84 b1 a6 06 20 36 86 76 ba 8c a0 29 a1 0b fd 44 55 0d 4c d2 de e3 b6 b8 2d 2a 0b 44 92 f6 91 ff 00 3c 04 36 45 20 e2 24 ea 22 f5 0e a8 1a 10 31 e8 8c 01 30 4a 2e 63 89 53 9d 4e 7c 53 33 6b 9c ea 1e 27 09 44 3c 94 44 cc d7 84 97 38 65 bd ad e2 4a 61 01 81 51 6b ca c9 72 a6 bc f1 e7 3f e3 5d 43 2e c8 ff 00 8d 3f e4 c2 2c a4 ff 00 15 28 8c 7c 2d f4 f7 0e bc 2d fb ff 00 a4 ff 00 dd ef 14 ae a2 89 72 d6 2a 2b c9 09 21 c5 90 cb 97 4b de 80 9a 98 e5 d0 57 32 cc 4a d2 e5 55 b0 94 36 ba 07 fa 25 Data Ascii: XaCh2pkW3P@X<L+JB,< $:X4A7F]w2C}{JJS 6v)DUL-D<6E $"10J.cSN\|S3k'D<D8eJaQkr?]C.?,(\|--r*+!KW2JU6%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49927	44.214.102.204	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:45 UTC	984	OUT	GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0&x=0&m=0&y=7256&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&i=Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World&tz=300&_acct=anon&sn=1&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1 Host: ping.chartbeat.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:45 UTC	246	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cross-Origin-Resource-Policy: cross-origin Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0
2024-12-12 18:57:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49930	199.232.193.131	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:45 UTC	559	OUT	GET /static/chunks/6141.f311ade597f0537989f7.js HTTP/1.1 Host: ads.blogherads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:46 UTC	641	IN	HTTP/1.1 200 OK Connection: close Content-Length: 103863 x-amz-id-2: /gYvZFY1kFY4tEjOr7DJpeP0PR6uDucwqWEv6ugzu0pEIEwLsvZfQYZuk/7KJMv3/VcBdKng0u8= x-amz-request-id: 515S8ME4QFJRZHH9 Last-Modified: Wed, 04 Dec 2024 21:45:17 GMT ETag: "e86a1232b1711558647c3fe2cca656ff" x-amz-server-side-encryption: AES256 Content-Type: application/javascript Cache-Control: max-age=14400, stale-while-revalidate=3600 Accept-Ranges: bytes Date: Thu, 12 Dec 2024 18:57:45 GMT Via: 1.1 varnish Age: 4616 X-Served-By: cache-ewr-kewr1740078-EWR X-Cache: HIT X-Cache-Hits: 423 X-Timer: S1734029866.866342,VS0,VE0 Access-Control-Allow-Origin: *
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 31 34 31 2e 66 33 31 31 61 64 65 35 39 37 66 30 35 33 37 39 38 39 66 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 73 6b 65 20 4d 65 64 69 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 2a 2f 0a 28 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 3d 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 34 31 5d 2c 7b 38 33 37 34 39 3a 28 74 2c 65 2c Data Ascii: /! For license information please see 6141.f311ade597f0537989f7.js.LICENSE.txt //* Copyright 2024 Penske Media Corporation. All Rights Reserved. */(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[6141],{83749:(t,e,
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 6e 74 2e 74 72 61 63 6b 29 2c 74 68 69 73 2e 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 76 61 6c 75 65 73 29 2c 74 68 69 73 7d 2c 65 2e 74 72 61 63 6b 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 74 68 69 73 2e 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 65 76 65 6e 74 73 29 2c 65 3d 6f 2e 61 73 73 69 67 6e 28 74 68 69 73 2e 67 65 74 54 72 61 63 6b 56 61 6c 75 65 73 28 29 2c 65 29 2c 74 68 69 73 2e 61 64 64 52 65 63 6f 72 64 28 74 2c 65 2c 72 2c 6e 29 2c 74 68 69 73 7d 2c 65 2e 74 72 61 63 6b 50 61 67 65 76 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 74 68 69 73 2e 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 70 61 67 65 76 69 65 77 73 29 2c 74 68 69 Data Ascii: nt.track),this.client.track.values),this},e.trackEvent=function(t,e,r,n){return t\|\|(t=this.client.track.events),e=o.assign(this.getTrackValues(),e),this.addRecord(t,e,r,n),this},e.trackPageview=function(t,e,r){return t\|\|(t=this.client.track.pageviews),thi
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 36 3a 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3e 3e 74 2f 34 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 28 5b 31 65 37 5d 2b 2d 31 65 33 2b 2d 34 65 33 2b 2d 38 65 33 2b 2d 31 65 31 31 29 2e 72 65 70 6c 61 63 65 28 2f 5b 30 31 38 5d 2f 67 2c 24 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 74 5d 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 74 29 7b 76 61 72 20 65 3d 22 22 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 65 2b 3d 72 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 72 5d 29 2b 22 26 22 29 3b 72 65 74 75 72 6e 20 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f Data Ascii: 6:16*Math.random())>>t/4).toString(16):([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,$)}function N(t,e){return(null==e?void 0:e[t])\|\|""}function L(t){var e="";for(var r in t)t.hasOwnProperty(r)&&(e+=r+"="+encodeURIComponent(t[r])+"&");return e=e.replace(/
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 29 3b 63 61 73 65 22 73 22 3a 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 2e 24 73 29 3b 63 61 73 65 22 73 73 22 3a 72 65 74 75 72 6e 20 6a 2e 73 28 65 2e 24 73 2c 32 2c 22 30 22 29 3b 63 61 73 65 22 53 53 53 22 3a 72 65 74 75 72 6e 20 6a 2e 73 28 65 2e 24 6d 73 2c 33 2c 22 30 22 29 3b 63 61 73 65 22 5a 22 3a 72 65 74 75 72 6e 20 6f 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 74 29 7c 7c 6f 2e 72 65 70 6c 61 63 65 28 22 3a 22 2c 22 22 29 7d 29 29 7d 2c 6d 2e 75 74 63 4f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 35 2a 2d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 24 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2f 31 35 29 7d 2c 6d 2e 64 69 66 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 70 2c 64 29 7b 76 61 Data Ascii: );case"s":return String(e.$s);case"ss":return j.s(e.$s,2,"0");case"SSS":return j.s(e.$ms,3,"0");case"Z":return o}return null}(t)\|\|o.replace(":","")}))},m.utcOffset=function(){return 15*-Math.round(this.$d.getTimezoneOffset()/15)},m.diff=function(n,p,d){va
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6e 3d 72 28 37 34 34 31 37 29 2c 6f 3d 72 28 35 35 32 33 29 2c 69 3d 72 28 33 31 37 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 69 28 72 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 73 3d 74 79 70 65 6f 66 20 65 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 73 3f 6e 28 72 29 26 26 6f 28 65 2c 72 2e 6c 65 6e 67 74 68 29 3a 22 73 74 72 69 6e 67 22 3d 3d 73 26 26 65 20 69 6e 20 72 29 7b 76 61 72 20 61 3d 72 5b 65 5d 3b 72 65 74 75 72 6e 20 74 3d 3d 74 3f 74 3d 3d 3d 61 3a 61 21 3d 61 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 37 30 36 36 37 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 Data Ascii: {var n=r(74417),o=r(5523),i=r(31755);t.exports=function(t,e,r){if(!i(r))return!1;var s=typeof e;if("number"==s?n(r)&&o(e,r.length):"string"==s&&e in r){var a=r[e];return t==t?t===a:a!=a}return!1}},70667:t=>{t.exports=function(t){return"number"==typeof t&&
2024-12-12 18:57:46 UTC	16384	IN	Data Raw: 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 74 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 72 7d 7d 7d 7d 2c 31 31 37 39 33 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 34 35 38 30 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 3d 6e 28 74 29 7d 7d 2c 36 32 32 35 30 3a 74 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 76 6f 69 64 20 30 3d 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d Data Ascii: ncompatible receiver, "+t+" required");return r}}}},11793:(t,e,r)=>{"use strict";var n=r(45807);t.exports=Array.isArray\|\|function(t){return"Array"===n(t)}},62250:t=>{"use strict";var e="object"==typeof document&&document.all;t.exports=void 0===e&&void 0!=
2024-12-12 18:57:46 UTC	5559	IN	Data Raw: 26 26 51 28 56 2c 65 2c 6e 29 7d 2c 61 74 3d 63 26 26 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 3d 79 28 51 28 7b 7d 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 28 74 68 69 73 2c 22 61 22 2c 7b 76 61 6c 75 65 3a 37 7d 29 2e 61 7d 7d 29 29 2e 61 7d 29 29 3f 73 74 3a 51 2c 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 72 74 5b 74 5d 3d 79 28 7a 29 3b 72 65 74 75 72 6e 20 47 28 72 2c 7b 74 79 70 65 3a 48 2c 74 61 67 3a 74 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 65 7d 29 2c 63 7c 7c 28 72 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 65 29 2c 72 7d 2c 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 74 3d 3d 3d 56 26 26 75 74 28 6e 74 2c 65 2c 72 29 2c 64 28 74 29 Data Ascii: &&Q(V,e,n)},at=c&&f((function(){return 7!==y(Q({},"a",{get:function(){return Q(this,"a",{value:7}).a}})).a}))?st:Q,ct=function(t,e){var r=rt[t]=y(z);return G(r,{type:H,tag:t,description:e}),c\|\|(r.description=e),r},ut=function(t,e,r){t===V&&ut(nt,e,r),d(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49934	104.17.247.203	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:45 UTC	373	OUT	GET /web-vitals@3.5.2/dist/web-vitals.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:46 UTC	576	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"1bff-XBuNuslfZI/SL2xuiJqqum43R9A" via: 1.1 fly.io fly-request-id: 01JDRVA2WDMDE5764WCMEHMEEY-lga CF-Cache-Status: HIT Age: 1250356 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f0ff126685c9e17-EWR
2024-12-12 18:57:46 UTC	793	IN	Data Raw: 31 62 66 66 0d 0a 76 61 72 20 77 65 62 56 69 74 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 74 2c 72 2c 69 2c 6f 2c 61 3d 2d 31 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 70 65 72 73 69 73 74 65 64 26 26 28 61 3d 6e 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 6e 29 29 7d 29 2c 21 30 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 Data Ascii: 1bffvar webVitals=function(e){"use strict";var n,t,r,i,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByT
2024-12-12 18:57:46 UTC	1369	IN	Data Raw: 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 74 7c 7c 7b 7d 29 29 2c 72 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 2e 76 61 6c 75 65 3e 3d 30 26 26 28 61 7c 7c 72 29 26 26 28 28 6f 3d 6e 2e 76 61 6c 75 65 2d 28 69 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 29 26 26 28 Data Ascii: erver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},t\|\|{})),r}}catch(e){}},l=function(e,n,t,r){var i,o;return function(a){n.value>=0&&(a\|\|r)&&((o=n.value-(i\|\|0))\|\|void 0===i)&&(
2024-12-12 18:57:46 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 2c 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 3d 43 28 29 2c 69 3d 66 28 22 46 43 50 22 29 2c 6f 3d 64 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 73 28 29 2c 30 29 2c 69 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 74 28 21 30 29 29 29 7d 29 29 7d 29 29 3b Data Ascii: ction(e,n){n=n\|\|{},L((function(){var t,r=C(),i=f("FCP"),o=d("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(o.disconnect(),e.startTime<r.firstHiddenTime&&(i.value=Math.max(e.startTime-s(),0),i.entries.push(e),t(!0)))}))}));
2024-12-12 18:57:46 UTC	1369	IN	Data Raw: 28 65 2c 6e 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 28 65 2c 6e 29 2c 69 28 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 74 2c 49 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 2c 72 2c 49 29 7d 3b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 74 2c 49 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 2c 72 2c 49 29 7d 28 6e 2c 65 29 3a 41 28 6e 2c 65 29 7d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5b 22 6d 6f 75 73 65 64 6f Data Ascii: (e,n){var t=function(){A(e,n),i()},r=function(){i()},i=function(){removeEventListener("pointerup",t,I),removeEventListener("pointercancel",r,I)};addEventListener("pointerup",t,I),addEventListener("pointercancel",r,I)}(n,e):A(n,e)}},k=function(e){["mousedo
2024-12-12 18:57:46 UTC	1369	IN	Data Raw: 6e 74 72 69 65 73 3a 5b 65 5d 7d 3b 4a 5b 72 2e 69 64 5d 3d 72 2c 47 2e 70 75 73 68 28 72 29 7d 47 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6c 61 74 65 6e 63 79 2d 65 2e 6c 61 74 65 6e 63 79 7d 29 29 2c 47 2e 73 70 6c 69 63 65 28 31 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 65 6c 65 74 65 20 4a 5b 65 2e 69 64 5d 7d 29 29 7d 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 2c 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 6a 28 29 3b 76 61 72 20 72 2c 69 3d 66 28 22 49 4e 50 22 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 Data Ascii: ntries:[e]};J[r.id]=r,G.push(r)}G.sort((function(e,n){return n.latency-e.latency})),G.splice(10).forEach((function(e){delete J[e.id]}))}},Q=function(e,n){n=n\|\|{},L((function(){var t;j();var r,i=f("INP"),o=function(e){e.forEach((function(e){(e.interactionI
2024-12-12 18:57:46 UTC	906	IN	Data Raw: 65 6e 65 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 75 2c 30 29 7d 29 2c 21 30 29 7d 29 29 2c 70 28 75 29 2c 63 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 3d 66 28 22 4c 43 50 22 29 2c 74 3d 6c 28 65 2c 69 2c 55 2c 6e 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 76 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 72 2e 74 69 6d 65 53 74 61 6d 70 2c 57 5b 69 2e 69 64 5d 3d 21 30 2c 74 28 21 30 29 7d 29 29 7d 29 29 7d 7d 29 29 7d 2c 59 3d 5b 38 30 30 2c 31 38 30 30 5d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 4c 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ener(e,(function(){return setTimeout(u,0)}),!0)})),p(u),c((function(r){i=f("LCP"),t=l(e,i,U,n.reportAllChanges),v((function(){i.value=performance.now()-r.timeStamp,W[i.id]=!0,t(!0)}))}))}}))},Y=[800,1800],Z=function e(n){document.prerendering?L((function(
2024-12-12 18:57:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49935	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:46 UTC	1299	OUT	GET /thumbs/2024/11/19/110355/87637163/dirt1.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga=GA1.1.1729578817.1734029844; _ga_V5XPPXMJTV=GS1.1.1734029863.1.0.1734029863.0.0.0
2024-12-12 18:57:46 UTC	371	IN	HTTP/1.1 200 OK x-amz-id-2: HT8sukF2wUP0MkPeaWl2De3+DsZ810JhaC7WMQoo5Bfj1z4FZyKVsiG/6tH6Qkz0cZ34aWGkNZU= x-amz-request-id: 6M3E3MNRZW3KY280 Content-Type: image/jpeg Server: AmazonS3 X-LLID: 2dbd726fc769c224c72b1831eecb60f4 Age: 1997631 Date: Thu, 12 Dec 2024 18:57:46 GMT Last-Modified: Tue, 19 Nov 2024 16:03:56 GMT Content-Length: 211043 Connection: close
2024-12-12 18:57:46 UTC	14078	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 6f 1d f0 d2 a3 91 5c 17 d0 5a 88 00 0d 40 a9 b5 a1 14 aa 1c 98 29 1d 2d f8 d4 7b 51 5c 10 60 89 63 61 63 4d 64 42 74 41 c8 88 7c ba d3 f6 20 e2 1a 98 2a a7 ec 36 84 0f e8 6e 3d 46 de 55 2f 28 99 e0 8c 94 9f 9e 97 b1 0a 05 8d 36 3a 6e d0 53 e6 1c 05 21 28 b8 b7 5f 0a 52 98 d5 01 10 47 45 01 4a 0b e2 18 da f6 e8 54 2e 7c e8 e1 23 55 0e 0b 20 5f 7a 6d e3 4f d6 3e 27 8a 96 d2 53 7b db e3 4f 8b 0e 68 f5 13 db db e9 58 bf 8d e8 e2 c4 ed 21 6e e4 50 91 f3 a4 51 c1 93 02 74 e5 d0 90 6e a4 8d 75 34 7a d8 fd 91 a0 29 b9 66 5c 8b b1 4e a6 c4 79 d1 eb 64 db 22 83 09 7d c2 64 53 25 99 0c b6 ab 80 95 03 6f 1a f7 3e 3e 90 78 fd a7 a6 87 3e d4 14 97 9c 00 e8 15 d2 be 92 ab 43 c7 b6 e3 82 91 fa 42 e2 f4 99 32 24 84 e5 9f 48 b9 eb 4d 16 4a 16 a2 b4 80 4d c0 e8 2b 46 b4 18 Data Ascii: o\Z@)-{Q\`cacMdBtA\| *6n=FU/(6:nS!(_RGEJT.\|#U _zmO>'S{OhX!nPQtnu4z)f\Nyd"}dS%o>>x>CB2$HMJM+F
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: e4 d8 97 22 80 ea 5b 92 da 95 71 64 93 71 e9 bf c6 f6 a8 b4 b0 ae 83 bf 30 90 ac 47 20 cd 46 05 71 3d f5 a9 d9 18 9d b6 f6 dc 50 f1 27 c0 d4 aa 8e d2 d0 87 11 89 c9 c7 95 1e 7c 08 8e be 1e 88 b4 bc b5 37 e9 48 58 3a 69 d4 6b 4f 95 50 2a 36 27 81 8f ca 39 05 fc 4b 58 f7 24 c7 fa 9f a8 69 c4 a0 82 1c 1a 10 35 f0 a3 d8 87 eb 05 91 c7 21 30 98 72 2b 12 5a 7d 17 6e 6b 2e 35 b1 25 5f 8f 53 47 b1 09 e3 64 79 4d 48 01 c5 08 eb 09 6f aa d4 35 15 52 85 c5 89 52 5b 2c 04 84 90 e1 58 05 ed 4d c0 d6 d5 52 1a 8b 21 c9 72 1a 98 7a 3b a9 43 cd 1d c1 29 f9 89 f2 b7 87 e3 53 6d 43 50 8c 93 e7 20 fa e6 bb e8 71 d5 0d c9 b5 81 58 f1 a6 b4 50 30 e9 d9 29 72 cc 70 e0 b8 61 1e d2 76 db e5 14 84 de a4 9b 8d 66 24 36 fb 6d b2 c2 65 ec 42 94 96 5d d4 25 63 a2 93 f8 54 5e b2 8b ad Data Ascii: "[qdq0G Fq=P'\|7HX:ikOP*6'9KX$i5!0r+Z}nk.5%_SGdyMHo5RR[,XMR!rz;C)SmCP qXP0)rpavf$6meB]%cT^
2024-12-12 18:57:47 UTC	15016	IN	Data Raw: ba eb 55 54 45 9c 11 c3 c4 dc 74 95 dc a6 ae 18 95 be a2 86 b8 cb 88 f4 ee 34 9e 85 2b 26 29 38 39 31 fd 44 d9 34 a4 61 ad c3 58 b0 20 aa 89 09 0d 54 63 6b 6d d4 51 22 90 83 8c 52 bf 84 d2 e4 82 44 2f e3 c8 3e 9b d8 75 a5 20 20 38 e5 29 5a 0a a9 10 a0 63 5d b0 16 36 14 a4 20 eb df f9 56 44 54 61 df 12 a1 6f 73 fc 37 63 f8 7f 53 ff 00 5d 74 f5 dc c9 8e 6f 07 5e 2b a4 c4 e6 37 f9 8d 36 5c ff 00 a4 16 17 b7 f5 ef f9 7d 71 f6 bc 1d 9d 5f 27 33 91 1f 40 08 d6 b8 dd 64 ea 61 e9 8b 71 d3 f1 a5 c5 92 0b e8 11 e5 55 02 00 b8 49 4d 88 1f 8d 10 29 00 18 47 88 a2 02 43 d3 14 9b 11 6a b8 21 b1 73 51 ad 6b d0 ea 3a bd 45 ad b0 05 43 50 58 a8 32 9b 54 f1 90 80 5e ca 68 e2 c7 01 a9 8f 6a b8 09 0f 0c 0d 69 40 9b 06 96 d2 4d ac 41 a3 88 a4 39 31 f7 74 20 d1 c4 61 81 8b 1d Data Ascii: UTEt4+&)891D4aX TckmQ"RD/>u 8)Zc]6 VDTaos7cS]to^+76\}q_'3@daqUIM)GCj!sQk:ECPX2T^hji@MA91t a
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 5d 0e df 52 68 96 76 bf 31 97 8b 99 39 67 1c 5c fc 8c a5 85 48 91 d6 eb b7 5a ac 39 5b 33 b6 14 4c fb c1 9f e4 99 48 05 b0 a2 c3 7f 30 75 1d 52 ab 7c 2b 64 e0 c3 d6 86 9e da fd d9 73 be 0b 0a 3f 1b cf 41 46 6e 13 37 11 1d 79 01 67 68 fc 69 db b5 c7 62 eb 8a ac 90 72 fe fd 72 9e e7 c8 62 3b cb 31 31 28 36 fa 64 d9 21 20 f8 0a cd f6 1b 1f a5 17 5f 01 7b dc c6 47 0b f9 5b 50 b7 c4 27 a1 ae aa 33 9a db 99 d3 ef 17 b7 ea cb 45 87 cd e3 a5 6a 62 22 36 c8 0d f5 d2 de 15 d5 e0 c6 c7 3a db 61 2f b4 f3 cd ad 61 49 04 28 20 1d 00 eb 48 91 a6 57 26 e3 79 29 0c e1 b8 f4 77 7d a6 52 03 92 a4 24 a4 a9 f1 f3 81 7f 8d eb 4a 30 26 58 79 12 fd 85 b3 29 8d 85 8f ee 95 7d 15 e4 3f 3a da b6 33 61 4d ce cc 62 e0 3f c4 31 79 6f f0 87 17 e4 52 15 23 95 4c 84 9b 4c 7b 71 ba 9b 6d Data Ascii: ]Rhv19g\HZ9[3LH0uR\|+ds?AFn7yghibrrb;11(6d! _{G[P'3Ejb"6:a/aI( HW&y)w}R$J0&Xy)}?:3aMb?1yoR#LL{qm
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 65 a5 43 c4 11 a8 ae bc 2f 4d 4f 3f 22 2b 4c c6 1e 46 39 41 6f 80 12 ea 02 c2 53 f3 59 5d 0d 6c 64 c7 3e 25 c8 67 61 27 c3 c8 41 74 b1 94 c2 c8 44 88 2b 4e a1 36 b1 15 cd 9a 92 6b 89 c1 df ae d3 73 b9 dc e7 89 71 7e 4d 39 a6 d8 7f 29 09 03 20 b2 6e 8f 75 03 6a d4 7c 75 eb 5e 13 d2 c7 af 57 a4 94 17 78 f1 71 f1 fc 90 ca 8a bf a9 6d e3 ee 21 e4 0f 42 90 7c 6f 5e 8d 1c 9c 71 05 5e 81 e8 0a eb 5a 12 16 e1 3a d0 34 86 f7 94 74 1e 54 9b 25 e8 37 ad f2 09 bd a8 4c 04 ca 7f 43 63 fb e9 80 dc f3 fa 1d 7a d3 4a 40 67 7d d0 a1 d6 d6 e9 54 90 c6 97 54 77 55 40 08 1c 3d 7c e9 80 89 c5 75 f1 a0 06 f7 75 a0 04 4b 37 37 26 80 04 8d 6d f0 a0 07 38 88 3b 93 f1 a9 63 48 ea e7 f9 71 a7 6a 3b bb f1 fe 85 ff 00 30 ae 9e b7 93 9f b1 e0 e9 d5 75 9c c7 3f be fa 3f f9 58 ff 00 ed Data Ascii: eC/MO?"+LF9AoSY]ld>%ga'AtD+N6ksq~M9) nuj\|u^Wxqm!B\|o^q^Z:4tT%7LCczJ@g}TTwU@=\|uuK77&m8;cHqj;0u??X
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 5a 96 ca 0a f4 5e d1 b8 7c 6b a2 8e 52 39 ed 5d 4f 95 75 5c 55 a4 43 13 ac 94 24 f8 fe 35 40 33 48 4e eb ae f6 b7 85 5d 49 68 46 e2 6e 8e b4 e4 86 c2 42 48 20 d2 12 17 b1 ad 87 4a 4d 9a 2a 9d 58 41 03 43 e1 5f 15 63 f4 11 49 20 8d 2a 10 cf 92 2f 73 4c 02 54 01 3f 37 4a 00 f8 f4 00 0e 94 98 d0 02 6d 48 a0 97 17 a1 a6 08 00 5d c5 a8 28 34 69 b4 9e 80 83 4d 6e 07 33 b9 1c f1 25 ee 5a e8 49 dd 17 3a ff 00 b8 47 5b 15 d8 de be 8b ab fd 51 f1 5d bb 7d f7 3a 33 d9 55 b2 e7 08 61 31 59 6c 7d 2b 09 f6 c0 1a a9 4a ae 6f 91 fe c4 f5 8a 43 ee 6d d7 a2 e3 50 e4 dc 84 67 23 37 ec fb 80 a6 fb 37 ba 91 ed ad 27 a7 90 af 01 b6 f2 68 7a 58 7f a3 39 3d dd a9 98 e9 7d cb e5 92 62 34 5a b3 d1 da dc 8f 42 4e d6 fc 11 e0 2b ee be 3d 7f c7 59 fa 1f 3d dc fe ef ff 00 22 58 3c 76 Data Ascii: Z^\|kR9]Ou\UC$5@3HN]IhFnBH JMXAC_cI /sLT?7JmH](4iMn3%ZI:G[Q]}:3Ua1Yl}+JoCmPg#77'hzX9=}b4ZBN+=Y="X<v
2024-12-12 18:57:47 UTC	4424	IN	Data Raw: 3b ed 26 fe 62 bd 1e 97 2a ee f7 3c fe d3 99 32 ce 1b 8c 72 0e 4d 94 7e 17 1d c2 4b cc 18 a4 7d 7c 88 cd fb 81 86 d4 6c 0b aa f0 15 eb d5 1e 5b 1a 79 ff 00 1d ca f1 49 4a c7 65 92 5a 92 d5 80 4e fd e4 a6 d6 4d cf 9d 27 56 07 72 3e dd 61 a5 8e d7 e3 a1 94 02 97 59 86 85 28 9e a5 0d 8b de bc 1c b6 fb cf 5e 9f d4 5d f7 11 09 2c 71 c8 05 20 d8 24 ed 00 e8 07 e1 5d 18 7c 9c d9 5e c6 0a 96 b1 b8 7a b7 58 7c df 95 6a 86 36 97 0d 8e be 35 48 42 47 1c d0 eb 56 80 6c 7d 7a 75 aa 44 b1 bd 4a 05 27 fb 6a 84 22 5a b4 34 00 89 c5 75 a1 80 de e1 1a ff 00 6d 48 08 95 fe 9a 00 5b 1d 35 40 48 e1 20 7a 3f 1d 6a 0a a9 30 86 81 e9 f0 a9 2c 91 30 9e 9e 3e 75 0c 0e 93 7d 82 00 07 75 07 8f fe a5 bf ff 00 4f 57 67 4f c9 c9 d9 f0 74 5a bb 8e 53 9f bf 7d 1f fc ac 7f f6 cf fc 15 67 Data Ascii: ;&b*<2rM~K}\|l[yIJeZNM'Vr>aY(^],q $]\|^zX\|j65HBGVl}zuDJ'j"Z4umH[5@H z?j0,0>u}uOWgOtZS}g
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 82 b9 73 ea 6f 4b 68 69 0e 30 97 50 23 a1 4c 80 a4 80 36 8f c2 b3 c2 9a 2b 91 48 fd e1 c0 54 8e 19 c5 32 ea 41 4b b8 e9 4a 61 20 0e 96 48 b0 27 f3 ae c3 13 97 59 7c de 71 e7 64 c7 5c 85 c7 4e db ad 06 fa a3 ca a6 c0 46 16 e3 8e a8 97 09 56 f2 14 a7 3c 6d e2 29 01 bb be c9 39 76 2e 07 29 e4 3c 31 4a 2e 63 f9 24 37 02 9b 70 e9 bf 6d 85 87 4a 75 03 30 f7 5b 85 4c e1 7d c9 e4 5c 56 5b 25 9d 93 dd 31 9e 7a e9 47 b6 ea 8b 82 df 86 ea b0 15 e2 bb 6d 9f e5 23 1d c7 f8 3b 72 39 96 55 f5 0f 7d 88 ac 01 1e 28 f1 2b 72 c9 e9 4b 50 35 57 01 e1 99 df b7 3e 41 c7 5f e5 3c 8e 04 bc 86 69 c4 fb f8 58 eb 4a d3 18 fc 96 72 de 3a d5 54 8b 9a 67 bc d9 9e 6f 87 e0 73 79 cf 6c 9d 4b 59 8c 58 0a c9 3e 10 16 e2 e3 28 5c ec f1 16 d7 a5 53 64 c1 c9 3e 4b dc 1e 5d cc a5 2a 7f 22 cd Data Ascii: soKhi0P#L6+HT2AKJa H'Y\|qd\NFV<m)9v.)<1J.c$7pmJu0[L}\V[%1zGm#;r9U}(+rKP5W>A_<iXJr:TgosylKYX>(\Sd>K]*"
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: e2 d6 a6 5a 4b 19 04 2a ca 71 4f 24 6d 52 54 9d 6d ad 63 92 f4 c6 9b b6 cf e8 71 e5 a3 77 4d 33 38 7d ca f6 d6 16 13 15 2f 97 e0 b8 ff 00 d1 8c b1 2d 67 31 18 e6 37 25 d2 f1 bf d5 3c 53 60 14 92 6d 7b 57 8f 55 6c 76 86 bf f4 cf 47 0d f9 28 93 8b 5c 9d 6e 70 be e1 64 71 b9 44 c9 4c 7c da d2 ee 25 d9 08 50 4a c0 48 0e 24 2e c0 1d ba 1f ce be a3 a9 95 5e a7 9b d9 a7 1b 0e a9 96 a8 51 9d 6e 3b a4 a2 7a fd 61 36 50 db f9 d7 73 70 73 8e 5c 7a 73 91 fe b2 21 49 5c 77 74 2a 50 be 87 c0 0f 8f 8d 0b 51 49 06 e4 1c 1f 39 87 89 97 c9 76 eb 90 3b 0a 1e 64 97 b3 5c 59 29 05 87 5e 6c 15 fe 9a 15 a0 b8 06 f6 ac ef 8a 56 86 b5 ca d1 45 8c ea b8 1f 25 73 31 85 96 ac 84 5c 8b 29 54 98 0e 92 92 d2 88 fd 64 38 83 d0 83 7b 57 2d f1 ce 86 d4 cc d3 96 5e 38 7c 87 6f 39 0b 90 d9 Data Ascii: ZKqO$mRTmcqwM38}/-g17%<S`m{WUlvG(\npdqDL\|%PJH$.^Qn;za6Psps\zs!I\wtPQI9v;d\Y)^lVE%s1\)Td8{W-^8\|o9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49937	178.79.238.164	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:46 UTC	1306	OUT	GET /thumbs/2024/11/21/120458/87638488/timing-thumb.jpg HTTP/1.1 Host: cdn.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga=GA1.1.1729578817.1734029844; _ga_V5XPPXMJTV=GS1.1.1734029863.1.0.1734029863.0.0.0
2024-12-12 18:57:47 UTC	371	IN	HTTP/1.1 200 OK x-amz-id-2: gb3y0mtFsr/nveSglmwDFAJO7PPkPmEjRqA+mG8Vc3lU9hhFM/+5WPkhA5ySEexuMoyZWawy1tY= x-amz-request-id: SAYR4T6KFMW2T6XB Content-Type: image/jpeg Server: AmazonS3 X-LLID: 8a1aeb915aeb9200568ba43e1f4b19f2 Age: 1821168 Date: Thu, 12 Dec 2024 18:57:46 GMT Last-Modified: Thu, 21 Nov 2024 17:04:59 GMT Content-Length: 282680 Connection: close
2024-12-12 18:57:47 UTC	14078	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-12-12 18:57:47 UTC	8688	IN	Data Raw: ac e6 35 30 26 a9 42 3a 9d 8c 3c 04 e7 83 75 fd a9 25 99 87 06 c1 e8 8c 81 54 12 a8 da d7 8c 68 60 6a 49 39 81 84 94 3a 5b c1 e0 7d 34 99 6d d2 0f a2 f8 d0 3b 39 d1 a2 59 d3 54 32 a3 e4 b9 40 06 35 56 83 d7 0a 70 30 4a fe b4 c6 ae 4a 25 91 87 e9 10 bb 1a e4 61 30 64 ca d8 0a c8 b4 21 c6 a1 0c 09 f9 04 74 12 59 6b 0f 45 d3 6e ae c9 36 bd 3a 4c 8a 1c 6c 40 48 84 ac a5 04 30 7f 21 69 13 90 54 8f 64 6e 73 c9 3c 91 f5 50 9b 17 64 3a 48 e0 e7 ae 91 6e c7 24 17 ec 16 d2 5c 30 a6 a2 c3 6a 72 d0 5b cb f0 60 80 58 c9 40 18 35 6b 06 24 33 b9 6a 19 aa c7 54 e1 72 c1 b1 b9 d1 73 af 94 79 ac f6 8e db 4b b6 8f 37 35 3a 16 da 4c a4 7b 51 b9 d3 a2 b7 49 64 cb 3b ec ec e4 8b 06 88 72 24 f2 a7 99 d9 39 5b ee b8 36 27 6f 08 fd 0a 46 99 b3 78 5b b7 7c ad 36 3b 19 33 c2 fe 20 Data Ascii: 50&B:<u%Th`jI9:[}4m;9YT2@5Vp0JJ%a0d!tYkEn6:Ll@H0!iTdns<Pd:Hn$\0jr[`X@5k$3jTrsyK75:L{QId;r$9[6'oFx[\|6;3
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 3c 64 f2 e6 18 8a 31 e6 5e ed 8a 57 55 2f d2 a2 7b c1 53 bc 06 63 45 e2 41 0e 6b 56 d6 21 f9 6e 8d 60 23 99 ca 34 06 1f a9 ae d5 ef 71 aa 7e 0e 89 c6 a4 65 e7 7a 1a 91 e6 fd f5 35 dd f5 f9 f5 79 ec b6 71 fe d1 8c 91 aa 45 33 43 93 aa 1d 9f 59 66 50 0e 8f 3c 16 ac 66 19 53 71 b8 78 dc 59 d9 f1 d0 07 e9 6f e0 0b 6a 2b e3 c7 17 21 8d 30 94 5b 03 ac ba 34 19 6c 54 60 e7 a2 41 bb 6d 13 a7 69 b1 55 58 c9 5c 68 1d 48 70 eb 36 84 ba d0 9c 04 4f 2c e7 c0 ea 86 99 17 96 d9 6d c6 8a 48 d5 5a 29 be 92 ac 26 6b 21 f4 7e d4 95 41 ca 0e 55 17 aa 71 74 ea e2 45 70 da 3b 00 6d ec 1c c8 46 89 2b 44 d4 d7 59 96 9d 3b 46 cb 73 9d d0 7b 97 7f a9 2c 1c b5 d8 3f 54 83 68 c3 ce 9e 9f 2e 38 d5 28 56 a9 8a b4 a5 64 71 2f 29 31 5c c4 a2 8c 99 50 ac 34 e4 64 aa 8a 74 0c 72 55 28 d7 Data Ascii: <d1^WU/{ScEAkV!n`#4q~ez5yqE3CYfP<fSqxYoj+!0[4lT`AmiUX\hHp6O,mHZ)&k!~AUqtEp;mF+DY;Fs{,?Th.8(Vdq/)1\P4dtrU(
2024-12-12 18:57:47 UTC	3888	IN	Data Raw: a2 1d bc cb 57 ca 42 13 90 9b 6c a6 db 46 d2 65 9e df 91 94 d9 7b 89 70 be 74 d9 72 9c fc 88 82 6c 80 27 bc 14 30 51 6a f0 29 d1 65 7c 19 4e 80 29 2b 82 24 aa bf 15 3a b6 14 d1 61 78 e1 15 ad 52 ac ac ac ac ac ac ac ac fd 0c 4c 08 8e 8e 28 94 4a 0a 34 ef bb 51 40 22 13 42 72 25 14 3a 9e a3 a9 e8 10 52 15 33 93 cf d3 2f da 45 00 58 ec c0 89 ee 0a 05 7c b8 5f 26 53 dc 88 ca 0e 20 d7 9c aa d3 e4 79 e5 3c e5 1f bb 3a 0f a3 0b 09 90 85 f1 e0 35 e4 26 f7 58 5e 20 a2 48 44 92 9f 95 97 14 41 45 e4 07 5b 20 cb 6b 08 d9 29 d6 93 ed a3 61 ce 5f 33 91 99 c5 17 12 9d f7 07 08 b8 9e 80 76 01 1f b8 1d 3b a2 3a 19 0a 74 85 5b 7b b3 a7 80 00 de c8 9c af 22 bb a9 0f f6 6e 41 7c 9a 78 fc 03 9d 92 5e 51 79 4d 25 07 14 1c 72 d7 94 d7 26 95 e6 8b 93 65 39 12 7f 6b 27 21 36 52 Data Ascii: WBlFe{ptrl'0Qj)e\|N)+$:axRL(J4Q@"Br%:R3/EX\|_&S y<:5&X^ HDAE[ k)a_3v;:t[{"nA\|x^QyM%r&e9k'!6R
2024-12-12 18:57:47 UTC	2896	IN	Data Raw: c9 65 3b ed d2 47 22 56 56 72 80 4e 1d 9e 13 d4 85 38 ac a7 1c a9 42 1d 90 7f 89 92 fb b3 aa d7 c9 2b 99 aa 04 47 af 6b 53 21 0c 41 64 ae e8 e4 ab 4e f8 d9 c8 79 23 e1 93 8e ed df 69 d7 62 73 8d 0a c5 a3 63 b3 f8 8e ca f9 90 ea a8 f9 18 98 23 41 c1 49 80 b9 1b 7e 46 c3 44 f9 7e 3b 9a a8 ca 58 1b 60 83 1e cc b4 45 b1 0c 4f df b4 1a f6 d8 f1 f0 09 16 c0 88 84 a4 ca ef 3f 85 ed 93 cc 30 a2 02 86 e8 85 6e 36 40 8f cc f2 51 5c 2d 50 de 0e 51 c8 d7 aa a1 b8 91 80 b5 c0 84 e7 65 33 39 63 42 18 08 94 c0 b0 bc 53 3b 26 95 13 91 72 cf 42 8a 77 d9 ae 4d 7a 63 f2 58 d0 9a c0 9c de c5 65 07 22 53 9d 84 64 4e 39 0e 58 e8 10 47 a8 38 5e 4b c9 1e eb 0b 0b 08 04 e2 bc b0 9c e4 4a 73 b0 a2 7a 0e ca 2d ca 7c 69 d1 77 11 2a f0 e1 78 a8 9b d8 14 c4 02 23 be 17 8a c2 f0 ca f8 Data Ascii: e;G"VVrN8B+GkS!AdNy#ibsc#AI~FD~;X`EO?0n6@Q\-PQe39cBS;&rBwMzcXe"SdN9XG8^KJsz-\|iw*x#
2024-12-12 18:57:47 UTC	14480	IN	Data Raw: d7 f2 36 e9 76 8e a9 05 8d 2d 51 04 e6 76 2c c2 f1 05 06 20 c0 9c c0 17 c8 40 63 c9 50 26 95 e5 84 1e 89 c8 6b 56 16 11 21 3c e5 10 72 d6 e5 39 a5 31 ae 4c 69 4c 6a 6b 53 1b df c7 b0 62 0d 53 0c 27 2c 21 d8 e4 2c 8f a7 3d 48 e9 95 91 d7 1d c1 4e 29 a5 67 a6 42 21 7d 97 92 25 15 1f 64 5c 14 4d 24 c4 de cc fb 3c 77 24 00 3a 17 04 3b 22 42 25 10 8a 25 34 12 99 80 9b df e8 05 38 a2 3a 12 b2 be e3 c0 a7 9e c4 84 ee e8 04 07 4c ac ac f4 fb 2f 20 b3 94 e1 db bf 47 b5 7c 68 33 b3 a3 ca 74 4a 48 72 a6 a8 48 96 91 6a 9a a1 46 b1 6a 91 80 23 f7 63 3c 94 b5 bc 55 79 48 2d 76 43 5d e2 9b 28 21 cf 69 4d 70 c1 3d 40 4d 6a 23 bb 42 9d bd dc ce e0 61 17 65 38 f6 7a b2 cc 88 a0 ef 4a 33 86 b7 bb d3 fe f0 85 62 3c a1 02 7c 09 91 f8 a2 9f 17 92 f8 70 3c 17 8a 78 ca 0c c8 8e Data Ascii: 6v-Qv, @cP&kV!<r91LiLjkSbS',!,=HN)gB!}%d\M$<w$:;"B%%48:L/ G\|h3tJHrHjFj#c<UyH-vC](!iMp=@Mj#Bae8zJ3b<\|p<x
2024-12-12 18:57:47 UTC	13032	IN	Data Raw: 50 c2 1c 26 88 01 1e 1a a4 77 93 a8 ea 9d 39 d6 51 14 a3 e4 db af 32 f9 cb 9b 0f 60 e9 0f 96 82 b3 a5 74 74 dc c4 62 0e 13 e8 d9 2a 77 1c 68 57 38 f1 cc b4 a4 06 5a 8f 00 12 50 00 28 09 7b b5 76 0c 4c 7e 27 8e 47 7c 6c 93 0e 11 34 06 ee 9b f2 37 8e eb 1c d1 76 37 35 b1 3d de 56 1c e0 bf 20 b0 be 47 48 60 9d c0 b2 50 53 9b 91 24 68 02 d3 f7 45 a9 ea 3c 64 a7 b3 c9 11 85 27 74 e6 a0 30 ae a9 10 44 76 01 38 2f 1e ef 09 c8 12 9a 56 51 09 a5 35 16 a0 dc 10 53 90 ff 00 84 15 95 94 d7 23 dd 35 a9 90 e5 36 ba 6c 08 c7 85 28 4e 38 4c 97 05 93 a1 32 74 dd a4 9f 21 ef ca cf d0 ee 8d 59 44 af 24 5c bc 97 92 69 ec 4a 25 3d d8 21 c9 cf 40 e5 31 04 42 c2 c2 68 58 58 58 58 58 4c 6a 68 40 22 13 5b 94 19 d8 35 3c 26 b7 2a 66 e0 4c 30 1e 0b 94 d2 96 bf 5b 6b fb 64 85 b3 45 Data Ascii: P&w9Q2`ttbwhW8ZP({vL~'G\|l47v75=V GH`PS$hE<d't0Dv8/VQ5S#56l(N8L2t!YD$\iJ%=!@1BhXXXXXLjh@"[5<&fL0[kdE
2024-12-12 18:57:47 UTC	8688	IN	Data Raw: b2 3b 6e a5 18 8e ad ca 9b 17 45 af 7c b5 64 b5 73 54 d7 1e 5d c5 6e d6 3c 9b 86 54 8f 8a f2 2e 15 36 c5 f6 62 11 43 15 78 d9 66 fe a6 ea a3 fc 16 b8 b6 ee 9a cc 56 2d 4c e6 57 8c 5d 88 45 a1 d1 da fe 67 59 b5 13 47 cd 68 3e 2a ad 7d 5b 34 a4 7c 90 68 5b 1b 77 ba ce 45 46 4a b3 5b 85 b1 ec a3 7c 51 ef 74 70 c7 4f 69 c5 eb 2f da 5e 52 fd 67 af 6f 43 66 c4 db 6b 92 ea 2f d5 b8 65 a7 62 db d8 c7 5a 92 52 d8 da e0 47 c6 c7 35 cd 63 9b 2c aa ad ab 7a c6 ea dd 39 d8 71 2b 93 d7 d8 5d e4 55 b4 5c 47 92 6f ab de dd bf 94 4f 42 5d 57 2e d9 7e 66 9b 99 e9 2f 71 dd 8d 4e 0b bd 8f 6d 0f b0 78 a8 d1 dd dc 72 68 75 8c b7 42 bf 39 65 fa 9b da 3c 8b 4d 14 be c0 f7 0f c6 3d 8b cd 35 3c c7 84 5f bb 25 8d 8f f7 9b 33 b4 18 db 5c f8 98 dc d8 da d2 f5 5f cd f6 66 ae 6b 5c 8b Data Ascii: ;nE\|dsT]n<T.6bCxfV-LW]EgYGh>*}[4\|h[wEFJ[\|QtpOi/^RgoCfk/ebZRG5c,z9q+]U\GoOB]W.~f/qNmxrhuB9e<M=5<_%3\_fk\
2024-12-12 18:57:47 UTC	1448	IN	Data Raw: 58 1c 0a d7 1b e2 1e be dd 59 d2 7e b0 50 e7 fb 0a 1e b8 a3 bf e3 7a 29 eb 6e a7 d9 f1 fd cf 1d d9 47 c7 a5 e4 ab 8f 71 cd 0d c7 7a e2 3f 5f e8 b7 fb 8f 6c 3f 7d 7b 97 7b c1 fc d0 6d a9 d8 9a a4 3a 6d 9e ef 89 6a 79 23 b8 db 74 fb 8d c3 aa d8 d3 dd d7 d5 b5 5f 90 5a d5 b3 86 6c d9 2f 09 a3 62 dd ce 41 11 d2 6b 65 d4 0b 90 c9 36 cb 85 ec f5 be da e2 5c 9e 9c 5c 43 82 df b5 fa 19 c7 ac e8 26 fd ef 81 93 eb 59 4a 60 9f ab 69 6b a5 8f 62 da 35 2c 55 34 78 26 e7 6d 26 bf d7 32 4a d8 b8 06 be b4 31 70 8a 15 29 d7 e3 51 3e 5b 94 35 51 c9 6a b5 28 e5 33 eb 03 9d 35 57 88 e8 ba 46 0e 3b 69 ce 7e bf f0 29 53 d2 b6 28 9f 15 b9 36 30 98 5a da bf c6 d4 9b dd dc c7 fc bb 9f 35 e3 e4 36 dc c0 6f e5 92 5d 6e 1f b1 78 06 eb 9e f9 2e 3f 1f 29 28 16 ab 16 47 8d a7 ba 57 fe Data Ascii: XY~Pz)nGqz?_l?}{{m:mjy#t_Zl/bAke6\\C&YJ`ikb5,U4x&m&2J1p)Q>[5Qj(35WF;i~)S(60Z56o]nx.?)(GW
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 2d ad 0e b6 21 2b ea c5 13 ea 6a ac c3 0c bc 77 68 1f 06 87 6c e9 3f 85 9e db 99 a9 d8 e2 8d 0d dc 8c 35 99 52 3a 75 6a b9 b6 a9 d9 6c 06 a6 ae ab 36 50 50 36 7f 62 f9 e8 e5 fc d2 69 c3 c8 38 52 02 54 ae 6b 53 e4 76 65 3e 07 e7 21 ec 74 ce 4e 73 80 86 57 07 3e 52 9a e0 f7 6a 36 13 6a 76 7c 33 93 cd c8 f8 5d 2f e3 c5 c6 3a 23 16 ba b4 92 47 fb 23 b9 ab bc f6 f0 7e 09 7b a4 8e 36 06 cb 13 e2 af 15 fb 70 39 da f9 e2 8e 59 9f f2 b4 82 e0 c1 e4 70 72 4a 0e 20 13 85 13 be 57 6a ec 7c 92 f1 c8 64 91 96 65 32 3a 57 1f 28 9f 35 67 5d e4 51 d5 b3 66 dc 75 aa 72 c8 eb d5 7e d6 97 e3 49 a8 b2 cd a4 0e 67 93 ed d4 7c 43 5d 7c ad fc 31 5f a7 ab ae eb 34 43 1b 63 45 eb 2b 51 d9 d0 f1 58 a5 3c 3f 8c 16 ec b4 8c fc 4a b1 3d f1 36 38 ad 5a b1 05 58 47 e4 d0 65 a8 d4 9c 6a Data Ascii: -!+jwhl?5R:ujl6PP6bi8RTkSve>!tNsW>Rj6jv\|3]/:#G#~{6p9YprJ Wj\|de2:W(5g]Qfur~Ig\|C]\|1_4CcE+QX<?J=68ZXGej

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49933	152.199.21.175	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:46 UTC	1271	OUT	GET /7778/amp.min.js HTTP/1.1 Host: amp.ebaumsworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=pli3ald99om2qvuat603cnp657; _gid=GA1.2.1668631425.1734029844; _gat=1; _cb=BHTdVWCmdV3ZIGzdR; _chartbeat2=.1734029848532.1734029848532.1.DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-.1; _cb_svref=external; _pubcid=6d4bba9b-eda6-40fd-af55-8cf6f7d2e950; _pubcid_cst=zix7LPQsHA%3D%3D; _chartbeat5=1052\|0\|%2F\|https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F\|DK-aFXBjjVtrBlS5nTp79XnDkccNH\|\|c\|MpRAaQkDuVBF4EvXCbKOJdB8WD3c\|ebaumsworld.com\|; _awl=2.1734029861.5-6f5cf8563d0a567c73dbd80a2e7374a5-6763652d75732d6561737431-0; _hjSessionUser_1657353=eyJpZCI6IjIxMGU3NmY1LWVlZjQtNTkxNy1hMmUxLWI3ZjVhYmQ1ZTIzMSIsImNyZWF0ZWQiOjE3MzQwMjk4NjE5NzEsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1657353=eyJpZCI6IjY5YmQwNDNlLTJjYzEtNDg1My04NjdhLWJlMzlkNmM0M2FjZiIsImMiOjE3MzQwMjk4NjE5NzIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga=GA1.1.1729578817.1734029844; _ga_V5XPPXMJTV=GS1.1.1734029863.1.0.1734029863.0.0.0
2024-12-12 18:57:47 UTC	433	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 258 Cache-Control: max-age=3600 Content-Type: text/javascript Date: Thu, 12 Dec 2024 18:57:46 GMT Etag: "0x8D7A5E4331F1063+ident" Expires: Thu, 12 Dec 2024 19:57:46 GMT Last-Modified: Fri, 31 Jan 2020 00:26:22 GMT Server: ECAcc (lhc/794F) Vary: Accept-Encoding X-AspNet-Version: 4.0.30319 X-Cache: HIT X-Powered-By: ASP.NET Content-Length: 2210 Connection: close
2024-12-12 18:57:47 UTC	2210	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 6c 69 63 65 28 31 29 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 26 22 29 3b 69 66 28 2f 5e 77 6f 6d 70 7c 26 77 6f 6d 70 2f 2e 74 65 73 74 28 65 29 29 74 72 79 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 4d 61 73 6b 22 29 3b 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 65 61 64 22 29 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 Data Ascii: (function(){var e=location.search.slice(1).replace(/\?/g,"&");if(/^womp\|&womp/.test(e))try{var t=function(){var e=document.getElementById("wMask");e&&e.parentNode.removeChild(e)},o=function(){var e=document.querySelector("head"),t=document.createElement("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49936	199.232.193.131	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:46 UTC	559	OUT	GET /static/chunks/8214.2ec0d8bed4b94798df9a.js HTTP/1.1 Host: ads.blogherads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:47 UTC	610	IN	HTTP/1.1 200 OK Connection: close x-amz-id-2: SjAXIQ0+FT4C1STEf9wMBrbxxLv+ETOXj+3hGh4ox9sadYI6IunIKHYQKTYjKOQPjPBJP25FGhk= x-amz-request-id: MFFK2W9MRGDT5TJ0 Last-Modified: Thu, 12 Dec 2024 17:07:05 GMT ETag: "54fcdc23a81fd977091f321f98c3a6dd" x-amz-server-side-encryption: AES256 Content-Type: text/html Cache-Control: max-age=14400, stale-while-revalidate=3600 Date: Thu, 12 Dec 2024 18:57:46 GMT Via: 1.1 varnish Age: 4618 X-Served-By: cache-nyc-kteb1890071-NYC X-Cache: HIT X-Cache-Hits: 315 X-Timer: S1734029867.872349,VS0,VE0 Access-Control-Allow-Origin: * transfer-encoding: chunked
2024-12-12 18:57:47 UTC	7	IN	Data Raw: 33 35 38 37 39 0d 0a Data Ascii: 35879
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 73 6b 65 20 4d 65 64 69 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 3d 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 32 31 34 2c 33 39 35 39 5d 2c 7b 35 33 37 36 38 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 42 6f 6f 6d 65 72 61 6e 67 3a 28 29 3d 3e 5a 6f 2c 62 6f 6f 74 73 74 72 61 70 3a 28 29 3d 3e 65 72 7d 29 3b 76 61 72 20 6e 3d 69 28 36 33 Data Ascii: /* Copyright 2024 Penske Media Corporation. All Rights Reserved. */"use strict";(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[8214,3959],{53768:(e,t,i)=>{i.r(t),i.d(t,{Boomerang:()=>Zo,bootstrap:()=>er});var n=i(63
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 65 3a 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 2c 69 73 5f 6d 6f 62 69 6c 65 3a 6b 2e 41 2c 70 76 75 75 69 64 3a 28 30 2c 47 2e 50 29 28 29 2c 73 63 72 65 65 6e 5f 73 69 7a 65 3a 60 24 7b 5a 2e 73 63 72 65 65 6e 2e 77 69 64 74 68 7d 78 24 7b 5a 2e 73 63 72 65 65 6e 2e 68 65 69 67 68 74 7d 60 2c 73 69 74 65 5f 69 64 3a 73 2e 41 2e 67 65 74 28 22 73 69 74 65 5f 69 64 22 29 2c 75 73 65 72 5f 61 67 65 6e 74 3a 6e 75 6c 6c 3d 3d 3d 28 72 3d 5a 2e 6e 61 76 69 67 61 74 6f 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 75 73 65 72 41 67 65 6e 74 2c 77 69 6e 64 6f 77 5f 73 69 7a 65 3a 60 24 7b 5a 2e 6f 75 74 65 72 57 69 64 74 68 7d 78 24 7b 5a 2e 6f 75 74 65 72 48 65 69 67 68 74 7d 60 7d 2c 74 68 69 73 Data Ascii: e:window.parent!==window.top,is_mobile:k.A,pvuuid:(0,G.P)(),screen_size:`${Z.screen.width}x${Z.screen.height}`,site_id:s.A.get("site_id"),user_agent:null===(r=Z.navigator)\|\|void 0===r?void 0:r.userAgent,window_size:`${Z.outerWidth}x${Z.outerHeight}`},this
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 2c 41 74 2e 78 48 29 28 74 68 69 73 2e 6e 61 6d 65 2c 31 30 30 29 26 26 28 30 2c 6f 65 2e 41 29 28 29 2e 74 68 65 6e 28 28 65 3d 3e 74 68 69 73 2e 68 61 6e 64 6c 65 43 6f 6e 73 65 6e 74 28 65 29 29 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 69 66 28 21 31 3d 3d 3d 4b 65 2e 62 69 29 72 65 74 75 72 6e 20 76 6f 69 64 28 30 2c 61 2e 4d 44 29 28 60 44 6f 20 6e 6f 74 20 68 61 76 65 20 63 6f 6e 73 65 6e 74 20 74 6f 20 73 65 6e 64 20 64 61 74 61 20 69 6e 20 24 7b 74 68 69 73 2e 67 65 74 4e 61 6d 65 28 29 7d 2e 60 29 3b 6c 65 74 20 74 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 74 72 79 7b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 6e 3d 69 2e 62 6f 6d 62 6f 72 61 2c 73 3d 56 74 2e 74 72 61 6e 73 66 6f 72 6d 45 76 65 6e 74 28 69 2e 65 76 Data Ascii: ,At.xH)(this.name,100)&&(0,oe.A)().then((e=>this.handleConsent(e))).then((()=>{if(!1===Ke.bi)return void(0,a.MD)(`Do not have consent to send data in ${this.getName()}.`);let t="unknown";try{const i=Object.assign({},e),n=i.bombora,s=Vt.transformEvent(i.ev
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 6e 2e 61 64 53 6f 75 72 63 65 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 63 72 65 61 74 69 76 65 49 64 29 7c 7c 22 22 2c 64 65 61 6c 5f 69 64 3a 22 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 22 2c 64 75 72 61 74 69 6f 6e 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 6e 75 6c 6c 21 3d 3d 28 75 3d 6e 2e 61 64 44 75 72 61 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 75 3f 75 3a 30 29 2c 6c 69 6e 65 5f 69 74 65 6d 5f 69 64 3a 22 22 2c 6d 69 6e 5f 73 75 67 67 65 73 74 65 64 5f 64 75 72 61 74 69 6f 6e 3a 30 2c 74 69 74 6c 65 3a 28 6e 75 6c 6c 3d 3d 3d 28 68 3d 6e 2e 61 64 53 6f 75 72 63 65 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 3f 76 6f 69 64 20 30 3a 68 2e 6e 61 6d 65 29 7c 7c 22 22 2c 75 6e 69 76 65 72 73 61 6c 5f Data Ascii: n.adSourceData)\|\|void 0===c?void 0:c.creativeId)\|\|"",deal_id:"",description:"",duration:Math.round(null!==(u=n.adDuration)&&void 0!==u?u:0),line_item_id:"",min_suggested_duration:0,title:(null===(h=n.adSourceData)\|\|void 0===h?void 0:h.name)\|\|"",universal_
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 61 6d 61 7a 6f 6e 5f 76 69 64 65 6f 5f 73 65 6e 64 5f 6b 76 70 73 22 29 3b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 22 65 6e 61 62 6c 65 22 29 2c 22 65 6e 61 62 6c 65 22 3d 3d 3d 65 7d 28 29 26 26 28 69 2e 73 6c 6f 74 50 61 72 61 6d 73 3d 7b 73 74 3a 65 2e 74 61 72 67 65 74 69 6e 67 2e 73 74 7d 29 2c 6e 2e 73 6c 6f 74 73 2e 70 75 73 68 28 69 29 2c 51 69 28 65 2e 63 6f 6e 73 65 6e 74 29 2c 6f 6e 2e 61 70 73 74 61 67 2e 66 65 74 63 68 42 69 64 73 28 6e 2c 28 65 3d 3e 7b 63 6f 6e 73 74 20 69 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 66 69 6c 74 65 72 28 28 65 3d 3e 22 76 69 64 65 6f 22 3d 3d 3d 65 2e 6d 65 64 69 61 54 79 70 65 29 29 3b 6e 75 6c 6c 21 3d 69 26 26 69 2e 6c 65 6e 67 74 68 26 26 73 6e 2e 68 61 6e 64 6c 65 52 65 73 70 6f 6e 73 65 28 69 Data Ascii: amazon_video_send_kvps");return e\|\|(e="enable"),"enable"===e}()&&(i.slotParams={st:e.targeting.st}),n.slots.push(i),Qi(e.consent),on.apstag.fetchBids(n,(e=>{const i=null==e?void 0:e.filter((e=>"video"===e.mediaType));null!=i&&i.length&&sn.handleResponse(i
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 66 69 6e 69 73 68 52 75 6e 28 29 7d 28 69 2c 65 2c 74 29 7d 29 7d 3b 63 6f 6e 73 74 20 77 73 3d 41 73 3b 6c 65 74 20 24 73 2c 49 73 2c 45 73 2c 44 73 3b 63 6f 6e 73 74 20 6b 73 3d 22 70 72 65 62 69 64 5f 70 72 65 61 75 63 74 69 6f 6e 5f 70 72 6f 76 69 64 65 72 22 2c 53 73 3d 6e 65 77 20 6b 65 2e 41 28 6b 73 29 2c 50 73 3d 7b 61 70 70 6e 65 78 75 73 3a 22 22 2c 63 72 69 74 65 6f 5f 64 69 73 70 6c 61 79 3a 22 22 2c 67 75 6d 67 75 6d 3a 22 22 2c 69 6e 64 65 78 65 78 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 69 6e 64 65 78 77 77 2e 63 6f 6d 5c 2f 70 72 69 76 61 63 79 2d 73 61 6e 64 62 6f 78 5c 2f 74 6f 70 69 63 73 2d 61 70 69 2e 68 74 6d 6c 3f 64 65 62 75 67 3d 74 72 75 65 22 2c 6a 75 73 74 70 72 65 6d 69 75 6d 3a 22 22 2c 6b 61 72 67 6f 3a 22 22 2c 72 Data Ascii: finishRun()}(i,e,t)})};const ws=As;let $s,Is,Es,Ds;const ks="prebid_preauction_provider",Ss=new ke.A(ks),Ps={appnexus:"",criteo_display:"",gumgum:"",indexex:"https:\/\/cdn.indexww.com\/privacy-sandbox\/topics-api.html?debug=true",justpremium:"",kargo:"",r
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 29 29 7d 76 61 72 20 56 6f 3d 69 28 34 37 37 36 31 29 2c 4c 6f 3d 69 28 35 30 35 33 36 29 2c 4e 6f 3d 69 28 35 33 38 31 34 29 3b 6c 65 74 20 7a 6f 3d 21 31 2c 6a 6f 3d 21 31 3b 63 6f 6e 73 74 20 46 6f 3d 6e 65 77 20 53 65 74 2c 55 6f 3d 6e 65 77 20 4c 6f 2e 41 28 31 65 33 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 5b 2e 2e 2e 46 6f 5d 2e 66 69 6c 74 65 72 28 28 65 3d 3e 65 2e 73 68 6f 75 6c 64 41 75 74 6f 52 65 66 72 65 73 68 28 29 29 29 3b 65 2e 6c 65 6e 67 74 68 3e 30 26 26 28 30 2c 45 69 2e 6d 31 29 28 65 29 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 71 6f 28 29 7b 6a 6f 26 26 21 7a 6f 26 26 28 30 2c 4e 6f 2e 41 29 28 29 26 26 46 6f 2e 73 69 7a 65 3e 30 26 26 55 6f 2e 73 74 61 72 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 48 6f 28 65 29 7b 65 3f 71 6f 28 29 Data Ascii: ))}var Vo=i(47761),Lo=i(50536),No=i(53814);let zo=!1,jo=!1;const Fo=new Set,Uo=new Lo.A(1e3,(()=>{const e=[...Fo].filter((e=>e.shouldAutoRefresh()));e.length>0&&(0,Ei.m1)(e)}));function qo(){jo&&!zo&&(0,No.A)()&&Fo.size>0&&Uo.start()}function Ho(e){e?qo()
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 61 6d 65 20 70 72 69 76 61 74 65 20 65 6c 65 6d 65 6e 74 73 20 74 77 69 63 65 20 6f 6e 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 28 4c 28 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 65 2e 73 65 74 28 4c 28 65 2c 74 29 2c 69 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 2c 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3d 3d 3d 74 3a 65 2e 68 61 73 28 74 29 29 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 33 3f 74 3a 69 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 69 76 61 74 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 6e 6f 74 20 70 72 Data Ascii: ame private elements twice on an object")}function B(e,t){return e.get(L(e,t))}function V(e,t,i){return e.set(L(e,t),i),i}function L(e,t,i){if("function"==typeof e?e===t:e.has(t))return arguments.length<3?t:i;throw new TypeError("Private element is not pr
2024-12-12 18:57:47 UTC	16384	IN	Data Raw: 3d 3d 3d 28 69 3d 74 2e 65 6e 61 62 6c 65 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 63 61 6c 6c 28 74 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 7d 64 69 73 61 62 6c 65 4f 75 74 73 74 72 65 61 6d 28 29 7b 74 68 69 73 2e 69 73 4f 75 74 73 74 72 65 61 6d 45 6e 61 62 6c 65 64 28 29 26 26 28 74 68 69 73 2e 64 65 66 2e 6f 75 74 73 74 72 65 61 6d 2e 65 6e 61 62 6c 65 64 3d 28 29 3d 3e 21 31 2c 74 68 69 73 2e 73 65 74 53 6c 6f 74 44 65 66 69 6e 69 74 69 6f 6e 46 65 61 74 75 72 65 54 61 72 67 65 74 69 6e 67 28 29 29 7d 73 65 74 53 6c 6f 74 44 65 66 69 6e 69 74 69 6f 6e 46 65 61 74 75 72 65 54 61 72 67 65 74 69 6e 67 28 29 7b 74 68 69 73 2e 69 73 4f 75 74 73 74 72 65 61 6d 45 6e 61 62 6c 65 64 28 29 3f 74 68 69 73 2e 61 64 64 Data Ascii: ===(i=t.enabled)\|\|void 0===i?void 0:i.call(t))&&void 0!==e&&e}disableOutstream(){this.isOutstreamEnabled()&&(this.def.outstream.enabled=()=>!1,this.setSlotDefinitionFeatureTargeting())}setSlotDefinitionFeatureTargeting(){this.isOutstreamEnabled()?this.add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49941	104.26.2.70	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:46 UTC	585	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:47 UTC	1220	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Fri, 13 Dec 2024 18:57:47 GMT Cache-Control: public, max-age=86400 Age: 829112 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1nxifUHgCflMSyVR0EbFCi061lYZBOgVd7%2FcwHkBZWMS8Ev0tLy%2F2mUrypWAylUud7vZjOdwvm34E6EpgaWrh3nr9jbHXBHlcxAmBP103rxaBlfFV%2FFE4JYG9nprFZ6wBg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f0ff12e1cbcde94-EWR
2024-12-12 18:57:47 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 36 33 32 35 26 6d 69 6e 5f 72 74 74 3d 31 36 39 36 26 72 74 74 5f 76 61 72 3d 33 35 34 39 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 37 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 36 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 32 31 36 39 38 26 63 77 6e 64 3d 32 32 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 61 65 37 65 39 61 30 37 35 34 62 30 36 34 30 34 26 74 73 3d 35 32 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=6325&min_rtt=1696&rtt_var=3549&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1163&delivery_rate=1721698&cwnd=229&unsent_bytes=0&cid=ae7e9a0754b06404&ts=521&x=0"
2024-12-12 18:57:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49940	13.226.2.71	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:47 UTC	396	OUT	GET /skeleton.js?ab=1&zoneid=9402702_advertisement_ HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:47 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17 Connection: close Date: Thu, 12 Dec 2024 16:57:50 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Aug 2020 23:54:35 GMT ETag: "53fab767ecbd3bf07990b10246befbd4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d5d5fbb221d1e1e64574f5113ce6ed5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: TLV50-C1 X-Amz-Cf-Id: 42V42T5P3xmP37Ox3gHhtVLQmjC911LfnoiGQxzfc1cQNvrupFtHHw== Age: 7198
2024-12-12 18:57:47 UTC	17	IN	Data Raw: 22 61 64 20 70 6c 61 63 65 68 6f 6c 64 65 72 22 3b Data Ascii: "ad placeholder";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49947	199.232.193.131	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:47 UTC	383	OUT	GET /static/chunks/813.d750b07ac83d91f0d8a7.js HTTP/1.1 Host: ads.blogherads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:47 UTC	641	IN	HTTP/1.1 200 OK Connection: close Content-Length: 297617 x-amz-id-2: fEyBEfAQi3/0nDTEdQ/astVRG0I5qIPHPCZaNsHRklUrb4bo0VSPQAkSmDN8PzZczPSCLf4JaVo= x-amz-request-id: 2NSPXT45VE5QJHAB Last-Modified: Thu, 14 Nov 2024 18:14:39 GMT ETag: "20cdc1e221884a76fe884cb6999a4866" x-amz-server-side-encryption: AES256 Content-Type: application/javascript Cache-Control: max-age=14400, stale-while-revalidate=3600 Accept-Ranges: bytes Date: Thu, 12 Dec 2024 18:57:47 GMT Via: 1.1 varnish Age: 4618 X-Served-By: cache-ewr-kewr1740032-EWR X-Cache: HIT X-Cache-Hits: 261 X-Timer: S1734029868.669097,VS0,VE0 Access-Control-Allow-Origin: *
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 31 33 2e 64 37 35 30 62 30 37 61 63 38 33 64 39 31 66 30 64 38 61 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 73 6b 65 20 4d 65 64 69 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 2a 2f 0a 28 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 3d 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 31 33 5d 2c 7b 31 31 37 36 32 3a 28 65 2c 74 2c 6e 29 Data Ascii: /! For license information please see 813.d750b07ac83d91f0d8a7.js.LICENSE.txt //* Copyright 2024 Penske Media Corporation. All Rights Reserved. */(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[813],{11762:(e,t,n)
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 63 3d 6e 65 77 20 41 72 72 61 79 28 61 3e 33 3f 61 2d 33 3a 30 29 2c 75 3d 33 3b 75 3c 61 3b 75 2b 2b 29 63 5b 75 2d 33 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 75 5d 3b 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 5b 69 2c 6f 5d 2e 63 6f 6e 63 61 74 28 63 29 29 7d 7d 69 66 28 4a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 50 29 29 7b 76 61 72 20 69 3d 7b 6f 6e 53 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 2c 21 31 29 7d 2c 6f 6e 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 3e 31 3f 74 2d 31 3a 30 29 2c 69 3d 31 3b 69 3c 74 3b Data Ascii: a=arguments.length,c=new Array(a>3?a-3:0),u=3;u<a;u++)c[u-3]=arguments[u];e.apply(void 0,[i,o].concat(c))}}if(J.hasOwnProperty(P)){var i={onSuccess:function(e){return r(e,!1)},onError:function(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 6e 29 7b 72 65 74 75 72 6e 20 42 28 79 2e 66 65 61 74 75 72 65 5b 31 5d 2c 65 2c 74 2c 6e 29 7d 29 2c 43 29 3b 64 2e 6f 6e 28 6c 2e 71 59 2e 41 55 43 54 49 4f 4e 5f 45 4e 44 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 6b 65 79 73 28 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 7d 29 29 7d 2c 74 3d 7b 73 74 6f 72 61 67 65 42 6c 6f 63 6b 65 64 3a 65 28 77 29 2c 62 69 64 64 65 72 73 42 6c 6f 63 6b 65 64 3a 65 28 45 29 2c 61 6e 61 6c 79 74 69 63 73 42 6c 6f 63 6b 65 64 3a 65 28 4f 29 2c 75 66 70 64 42 6c 6f 63 6b 65 64 3a 65 28 53 29 2c 65 69 64 73 42 6c 6f 63 6b 65 64 3a 65 28 49 29 2c Data Ascii: n){return B(y.feature[1],e,t,n)}),C);d.on(l.qY.AUCTION_END,(function(){var e=function(e){return Array.from(e.keys()).filter((function(e){return null!=e}))},t={storageBlocked:e(w),biddersBlocked:e(E),analyticsBlocked:e(O),ufpdBlocked:e(S),eidsBlocked:e(I),
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 5d 3d 74 2e 76 61 6c 75 65 73 5b 72 5d 29 2c 65 7d 29 2c 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 2e 76 61 6c 75 65 73 29 2e 6c 65 6e 67 74 68 3e 30 29 29 3b 76 61 72 20 74 2c 6e 2c 69 7d 76 61 72 20 51 3d 7b 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4b 28 65 29 7d 2c 32 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 2e 6d 6f 64 65 6c 47 72 6f 75 70 73 29 7c 7c 30 3d 3d 3d 65 2e 6d 6f 64 65 6c 47 72 6f 75 70 73 2e 6c 65 6e 67 74 68 29 26 26 28 65 2e 6d 6f 64 65 6c 57 65 69 67 68 74 53 75 6d 3d 30 2c 65 2e 6d 6f 64 65 6c 47 72 6f 75 70 73 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 Data Ascii: ]=t.values[r]),e}),{}),Object.keys(t.values).length>0));var t,n,i}var Q={1:function(e){return K(e)},2:function(e){return!(!Array.isArray(e.modelGroups)\|\|0===e.modelGroups.length)&&(e.modelWeightSum=0,e.modelGroups.every((function(t){return!("number"!=type
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 29 2c 65 7d 28 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 2c 69 29 7b 28 30 2c 66 2e 41 29 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 5f 73 74 6f 72 61 67 65 3d 74 2c 74 68 69 73 2e 5f 70 72 65 66 65 72 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 6e 2c 74 68 69 73 2e 5f 73 74 6f 72 61 67 65 4e 61 6d 65 3d 72 2c 74 68 69 73 2e 5f 6c 6f 67 49 6e 66 6f 3d 69 7d 72 65 74 75 72 6e 28 30 2c 70 2e 41 29 28 65 2c 5b 7b 6b 65 79 3a 22 72 65 61 64 43 6f 6f 6b 69 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 74 6f 72 61 67 65 2e 63 6f 6f 6b 69 65 73 41 72 65 45 6e 61 62 6c 65 64 28 29 3f 74 68 69 73 2e 5f 73 74 6f 72 61 67 65 2e 67 65 74 43 6f 6f 6b 69 65 28 65 29 Data Ascii: ),e}(),O=function(){function e(t,n,r,i){(0,f.A)(this,e),this._storage=t,this._preferLocalStorage=n,this._storageName=r,this._logInfo=i}return(0,p.A)(e,[{key:"readCookie",value:function(e){return this._storage.cookiesAreEnabled()?this._storage.getCookie(e)
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 29 7d 29 29 7d 7d 7d 7d 76 61 72 20 68 3d 21 28 6e 75 6c 6c 21 3d 3d 28 69 3d 70 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 2e 6c 61 74 65 73 74 54 6f 6b 65 6e 29 7c 7c 63 26 26 63 2e 69 64 65 6e 74 69 74 79 5f 65 78 70 69 72 65 73 3e 70 2e 6c 61 74 65 73 74 54 6f 6b 65 6e 2e 69 64 65 6e 74 69 74 79 5f 65 78 70 69 72 65 73 2c 6d 3d 68 3f 63 3a 70 2e 6c 61 74 65 73 74 54 6f 6b 65 6e 3b 69 66 28 6e 28 22 55 49 44 32 20 6d 6f 64 75 6c 65 20 73 65 6c 65 63 74 65 64 20 6c 61 74 65 73 74 20 74 6f 6b 65 6e 22 2c 68 2c 6d 29 2c 21 6d 7c 7c 44 61 74 65 2e 6e 6f 77 28 29 3e 6d 2e 72 65 66 72 65 73 68 5f 65 78 70 69 72 65 73 29 72 65 74 75 72 6e 20 6e 28 22 4e 65 77 65 73 74 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 6b 65 6e 20 69 73 20 65 78 70 69 72 65 64 20 61 Data Ascii: )}))}}}}var h=!(null!==(i=p)&&void 0!==i&&i.latestToken)\|\|c&&c.identity_expires>p.latestToken.identity_expires,m=h?c:p.latestToken;if(n("UID2 module selected latest token",h,m),!m\|\|Date.now()>m.refresh_expires)return n("Newest available token is expired a
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 61 72 20 6f 3d 28 30 2c 67 2e 63 79 29 28 65 5b 74 5d 29 3f 28 30 2c 72 2e 41 29 28 65 5b 74 5d 29 2e 72 65 76 65 72 73 65 28 29 3a 5b 5d 3b 6e 5b 74 5d 3d 6f 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 68 61 73 28 65 29 3f 69 2e 67 65 74 28 65 29 3a 65 7d 29 29 7d 29 29 2c 48 3d 6e 7d 65 6c 73 65 20 48 3d 7b 7d 7d 28 74 2e 69 64 50 72 69 6f 72 69 74 79 2c 57 29 2c 69 65 28 7b 72 65 61 64 79 3a 21 30 7d 29 29 29 7d 29 29 2c 28 30 2c 63 2e 6d 29 28 29 2e 67 65 74 55 73 65 72 49 64 73 3d 75 65 2c 28 30 2c 63 2e 6d 29 28 29 2e 67 65 74 55 73 65 72 49 64 73 41 73 45 69 64 73 3d 73 65 2c 28 30 2c 63 2e 6d 29 28 29 2e 67 65 74 45 6e 63 72 79 70 74 65 64 45 69 64 73 46 6f 72 53 6f 75 72 63 65 3d 49 65 28 6c 65 29 2c 28 30 2c Data Ascii: ar o=(0,g.cy)(e[t])?(0,r.A)(e[t]).reverse():[];n[t]=o.map((function(e){return i.has(e)?i.get(e):e}))})),H=n}else H={}}(t.idPriority,W),ie({ready:!0})))})),(0,c.m)().getUserIds=ue,(0,c.m)().getUserIdsAsEids=se,(0,c.m)().getEncryptedEidsForSource=Ie(le),(0,
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 75 63 74 69 6f 6e 49 64 3a 6e 2c 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 3a 6f 2c 61 64 55 6e 69 74 73 3a 28 30 2c 61 2e 47 6f 29 28 43 29 2c 6c 61 62 65 6c 73 3a 69 2c 73 72 63 3a 22 63 6c 69 65 6e 74 22 2c 6d 65 74 72 69 63 73 3a 75 7d 29 2c 61 75 63 74 69 6f 6e 53 74 61 72 74 3a 74 2c 74 69 6d 65 6f 75 74 3a 72 2c 72 65 66 65 72 65 72 49 6e 66 6f 3a 76 2c 6d 65 74 72 69 63 73 3a 75 7d 29 2c 64 3d 4e 5b 65 5d 3b 64 7c 7c 28 30 2c 61 2e 76 56 29 28 22 54 72 79 69 6e 67 20 74 6f 20 6d 61 6b 65 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 62 69 64 64 65 72 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 3a 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 2c 64 26 26 73 2e 62 69 64 73 26 26 30 21 3d 3d 73 2e 62 69 64 73 2e 6c 65 6e 67 74 68 26 26 68 Data Ascii: uctionId:n,bidderRequestId:o,adUnits:(0,a.Go)(C),labels:i,src:"client",metrics:u}),auctionStart:t,timeout:r,refererInfo:v,metrics:u}),d=N[e];d\|\|(0,a.vV)("Trying to make a request for bidder that does not exist: ".concat(e)),d&&s.bids&&0!==s.bids.length&&h
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 61 3b 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 21 3d 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 61 6c 29 7c 7c 6f 2e 24 57 2e 67 65 74 43 6f 6e 66 69 67 28 22 64 69 73 61 62 6c 65 41 6a 61 78 54 69 6d 65 6f 75 74 22 29 7c 7c 28 61 3d 63 2e 74 69 6d 65 6f 75 74 28 65 2c 74 29 2c 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 73 69 67 6e 61 6c 3a 61 2e 73 69 67 6e 61 6c 7d 2c 6e 29 29 3b 76 61 72 20 75 3d 63 2e 66 65 74 63 68 28 74 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 64 6f 6e 65 29 26 26 28 Data Ascii: ,i=function(t,n){var r,i,a;null==e\|\|null!=(null===(r=n)\|\|void 0===r?void 0:r.signal)\|\|o.$W.getConfig("disableAjaxTimeout")\|\|(a=c.timeout(e,t),n=Object.assign({signal:a.signal},n));var u=c.fetch(t,n);return null!=(null===(i=a)\|\|void 0===i?void 0:i.done)&&(
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 3d 3d 3d 72 7d 29 29 29 2c 6e 75 6c 6c 3d 3d 6e 3f 69 5b 30 5d 3a 69 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 73 26 26 6e 75 6c 6c 21 3d 65 2e 62 69 64 73 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 49 64 3d 3d 3d 6e 7d 29 29 7d 29 29 7d 7d 2c 67 65 74 42 69 64 52 65 71 75 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 72 65 71 75 65 73 74 49 64 3b 69 66 28 6e 75 6c 6c 21 3d 6e 29 72 65 74 75 72 6e 20 65 28 29 2e 66 6c 61 74 4d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 42 69 64 52 65 71 75 Data Ascii: nction(e){return e.bidderRequestId===r}))),null==n?i[0]:i.find((function(e){return e.bids&&null!=e.bids.find((function(e){return e.bidId===n}))}))}},getBidRequest:function(t){var n=t.requestId;if(null!=n)return e().flatMap((function(e){return e.getBidRequ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49946	104.26.2.70	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:47 UTC	606	OUT	GET /px.gif?ch=1&e=0.5390128062672437 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:47 UTC	1237	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: AFiumC4LmU1eR6dHJNNJlIBExO5Fo4srFhBRMMpeelA8NhvVTwK2w5PBMnl1hzyCpPzxGpqKVW_uxCqglQ x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 03 Dec 2024 07:27:48 GMT Cache-Control: public, max-age=86400 Age: 822223 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Riv2%2FKGKZrmt4SKGtgEyUx3EdGj4I%2B3G5e6XhGpeR7fBzwzgkMf0DEfQ51kis3hp4%2B2EdTwI8Y8Jvk2pVFs5ahAMuI91bTh%2Fj9Sb%2BdiQ%2FWM2nROuEJpXiGLm%2BIwENvKX%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f0ff130fa93428e-EWR
2024-12-12 18:57:47 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 38 32 35 26 6d 69 6e 5f 72 74 74 3d 31 36 32 38 26 72 74 74 5f 76 61 72 3d 37 35 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 38 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 39 33 36 31 31 26 63 77 6e 64 3d 32 32 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 33 66 32 65 61 37 35 31 32 65 66 62 34 38 38 31 26 74 73 3d 34 35 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1825&min_rtt=1628&rtt_var=751&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1184&delivery_rate=1793611&cwnd=222&unsent_bytes=0&cid=3f2ea7512efb4881&ts=451&x=0"
2024-12-12 18:57:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49945	34.195.200.218	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:47 UTC	749	OUT	GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0&x=0&m=0&y=7256&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&i=Funny%20Pictures%2C%20Funny%20Videos%20%7C%20eBaum%27s%20World&tz=300&_acct=anon&sn=1&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1 Host: ping.chartbeat.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:47 UTC	246	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cross-Origin-Resource-Policy: cross-origin Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0
2024-12-12 18:57:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49944	172.217.17.70	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:47 UTC	736	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:48 UTC	734	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/x-icon Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 Date: Thu, 12 Dec 2024 18:57:48 GMT Expires: Fri, 13 Dec 2024 18:57:48 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-12 18:57:48 UTC	656	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-12-12 18:57:48 UTC	422	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49952	104.18.24.111	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:48 UTC	635	OUT	GET /aadetect/px.gif?ch=2&rn=13334&bannnerid=9270018_advertisement_ HTTP/1.1 Host: merequartz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:48 UTC	615	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:48 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: public, max-age=3600 expires: Thu, 12 Dec 2024 10:22:02 GMT last-modified: Wed, 11 Dec 2024 16:11:39 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding x-buildname: hoothoot x-buildnumber: 1553448542 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-rstg via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 34546 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8f0ff136ba5618b4-EWR
2024-12-12 18:57:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49950	157.240.196.15	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:48 UTC	1375	OUT	GET /signals/config/880446388736817?v=2.9.178&r=stable&domain=ebaumsworld.com&hme=28abfdc7e582ae2a8fdd6ac5ebb406923cf601dc2ee488049b0628e75e0f6b36&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:49 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-FY5XOewU' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-12-12 18:57:49 UTC	1672	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-12-12 18:57:49 UTC	892	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-12-12 18:57:49 UTC	15492	IN	Data Raw: 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 0a 2a 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 0a 2a 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 20 54 48 45 20 53 4f 46 54 57 41 52 45 2e 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 Data Ascii: LIABILITY, WHETHER* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.*/(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStar
2024-12-12 18:57:49 UTC	1500	IN	Data Raw: 69 6f 6e 20 67 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 Data Ascii: ion g(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a
2024-12-12 18:57:49 UTC	14884	IN	Data Raw: 41 72 72 61 79 2e 66 72 6f 6d 28 63 2e 76 61 6c 75 65 73 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 61 3d 67 28 61 2c 62 29 3b 76 61 72 20 64 3d 22 22 3b 62 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6a 28 61 29 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 62 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 29 7d 29 3b 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 70 72 65 66 69 78 2c 65 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 65 62 70 5f 70 61 74 68 3b 61 3d 61 2e 70 61 72 61 6d 56 61 6c 75 65 21 3d 6e 75 6c 6c 3f 61 2e Data Ascii: Array.from(c.values())}function h(a,b){a=g(a,b);var d="";b=[].concat(j(a)).sort(function(a,b){return a.paramConfig.query.localeCompare(b.paramConfig.query)});b.forEach(function(a){var b=a.paramConfig.prefix,e=a.paramConfig.ebp_path;a=a.paramValue!=null?a.
2024-12-12 18:57:49 UTC	1500	IN	Data Raw: 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 Data Ascii: on(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded
2024-12-12 18:57:49 UTC	14884	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 6f 28 61 2e 69 64 29 3f 7b 7d 3a 7b 69 61 62 3a 31 7d 7d 29 3b 67 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 21 6f 28 62 29 29 72 65 74 75 72 6e 3b 62 3d 61 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2b 22 5f 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2b 22 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 62 3d 6c 28 62 29 3b 76 61 72 20 64 3d 63 2e 67 65 74 28 22 65 69 64 22 29 3b 69 66 28 64 21 3d 6e 75 6c 6c 26 26 64 21 3d 3d 22 22 7c 7c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 63 2e 61 70 70 65 6e 64 28 22 61 70 63 6d 5f 65 69 64 22 2c 22 31 22 29 3b 64 3d 22 70 63 6d 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 22 2b 62 3b 63 2e 61 70 70 65 6e 64 28 22 65 69 64 Data Ascii: function(a,b){return!o(a.id)?{}:{iab:1}});g.listen(function(b,c){if(!o(b))return;b=a.location.origin+"_"+Date.now()+"_"+Math.random();b=l(b);var d=c.get("eid");if(d!=null&&d!==""\|\|b==null)return;c.append("apcm_eid","1");d="pcm_plugin-set_"+b;c.append("eid
2024-12-12 18:57:49 UTC	1500	IN	Data Raw: 76 65 72 73 69 6f 6e 29 7d 63 61 74 63 68 28 61 29 7b 66 3d 21 30 2c 67 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 65 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 66 29 74 68 72 6f 77 20 67 7d 7d 75 2e 73 65 74 28 71 2c 53 74 72 69 6e 67 28 62 29 29 3b 78 28 64 2c 75 2c 73 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 65 73 73 61 67 65 3d 22 5b 43 6c 69 65 6e 74 48 69 6e 74 20 45 72 72 6f 72 5d 22 2b 61 2e 6d 65 73 73 61 67 65 2c 6a 28 61 29 7d 29 3b 68 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 64 2e 67 65 74 50 69 78 65 6c 28 62 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 62 3d 64 2e 70 6c 75 67 69 Data Ascii: version)}catch(a){f=!0,g=a}finally{try{!e&&h["return"]&&h["return"]()}finally{if(f)throw g}}u.set(q,String(b));x(d,u,s)})["catch"](function(a){a.message="[ClientHint Error]"+a.message,j(a)});h.listen(function(b){b=d.getPixel(b);if(b==null)return;b=d.plugi
2024-12-12 18:57:49 UTC	14884	IN	Data Raw: 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 Data Ascii: led correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbe
2024-12-12 18:57:49 UTC	3867	IN	Data Raw: 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 29 2c 67 3d 21 30 2c 68 28 29 29 3a 73 2e 69 63 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 3d 3d 3d 22 63 6c 6f 73 65 64 22 26 26 28 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 72 65 65 7a 65 22 2c 68 29 2c 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 68 29 29 7d 3b 73 2e 63 72 65 61 74 65 44 61 74 61 43 68 61 6e 6e 65 6c 28 22 66 6f 6f 22 29 7d 7d 63 61 74 63 68 28 61 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 22 6d 65 73 73 61 67 65 22 29 26 26 28 61 2e 6d 65 73 73 61 67 65 3d Data Ascii: w Date().getTime()),g=!0,h()):s.iceConnectionState==="closed"&&(a.removeEventListener("freeze",h),a.removeEventListener("pagehide",h))};s.createDataChannel("foo")}}catch(a){a instanceof Error&&Object.prototype.hasOwnProperty.call(a,"message")&&(a.message=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49949	199.232.193.131	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:48 UTC	384	OUT	GET /static/chunks/6141.f311ade597f0537989f7.js HTTP/1.1 Host: ads.blogherads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:48 UTC	641	IN	HTTP/1.1 200 OK Connection: close Content-Length: 103863 x-amz-id-2: /gYvZFY1kFY4tEjOr7DJpeP0PR6uDucwqWEv6ugzu0pEIEwLsvZfQYZuk/7KJMv3/VcBdKng0u8= x-amz-request-id: 515S8ME4QFJRZHH9 Last-Modified: Wed, 04 Dec 2024 21:45:17 GMT ETag: "e86a1232b1711558647c3fe2cca656ff" x-amz-server-side-encryption: AES256 Content-Type: application/javascript Cache-Control: max-age=14400, stale-while-revalidate=3600 Accept-Ranges: bytes Date: Thu, 12 Dec 2024 18:57:48 GMT Via: 1.1 varnish Age: 4620 X-Served-By: cache-ewr-kewr1740027-EWR X-Cache: HIT X-Cache-Hits: 423 X-Timer: S1734029868.495469,VS0,VE0 Access-Control-Allow-Origin: *
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 31 34 31 2e 66 33 31 31 61 64 65 35 39 37 66 30 35 33 37 39 38 39 66 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 73 6b 65 20 4d 65 64 69 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 2a 2f 0a 28 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 3d 73 65 6c 66 2e 5f 5f 70 6d 63 5f 61 74 6c 61 73 5f 6d 67 5f 77 65 62 70 61 63 6b 5f 6a 73 6f 6e 70 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 34 31 5d 2c 7b 38 33 37 34 39 3a 28 74 2c 65 2c Data Ascii: /! For license information please see 6141.f311ade597f0537989f7.js.LICENSE.txt //* Copyright 2024 Penske Media Corporation. All Rights Reserved. */(self.__pmc_atlas_mg_webpack_jsonp__=self.__pmc_atlas_mg_webpack_jsonp__\|\|[]).push([[6141],{83749:(t,e,
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 6e 74 2e 74 72 61 63 6b 29 2c 74 68 69 73 2e 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 76 61 6c 75 65 73 29 2c 74 68 69 73 7d 2c 65 2e 74 72 61 63 6b 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 74 68 69 73 2e 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 65 76 65 6e 74 73 29 2c 65 3d 6f 2e 61 73 73 69 67 6e 28 74 68 69 73 2e 67 65 74 54 72 61 63 6b 56 61 6c 75 65 73 28 29 2c 65 29 2c 74 68 69 73 2e 61 64 64 52 65 63 6f 72 64 28 74 2c 65 2c 72 2c 6e 29 2c 74 68 69 73 7d 2c 65 2e 74 72 61 63 6b 50 61 67 65 76 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 74 68 69 73 2e 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 70 61 67 65 76 69 65 77 73 29 2c 74 68 69 Data Ascii: nt.track),this.client.track.values),this},e.trackEvent=function(t,e,r,n){return t\|\|(t=this.client.track.events),e=o.assign(this.getTrackValues(),e),this.addRecord(t,e,r,n),this},e.trackPageview=function(t,e,r){return t\|\|(t=this.client.track.pageviews),thi
2024-12-12 18:57:48 UTC	16384	IN	Data Raw: 36 3a 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3e 3e 74 2f 34 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 28 5b 31 65 37 5d 2b 2d 31 65 33 2b 2d 34 65 33 2b 2d 38 65 33 2b 2d 31 65 31 31 29 2e 72 65 70 6c 61 63 65 28 2f 5b 30 31 38 5d 2f 67 2c 24 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 74 5d 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 74 29 7b 76 61 72 20 65 3d 22 22 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 65 2b 3d 72 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 72 5d 29 2b 22 26 22 29 3b 72 65 74 75 72 6e 20 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f Data Ascii: 6:16*Math.random())>>t/4).toString(16):([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,$)}function N(t,e){return(null==e?void 0:e[t])\|\|""}function L(t){var e="";for(var r in t)t.hasOwnProperty(r)&&(e+=r+"="+encodeURIComponent(t[r])+"&");return e=e.replace(/
2024-12-12 18:57:49 UTC	16384	IN	Data Raw: 29 3b 63 61 73 65 22 73 22 3a 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 2e 24 73 29 3b 63 61 73 65 22 73 73 22 3a 72 65 74 75 72 6e 20 6a 2e 73 28 65 2e 24 73 2c 32 2c 22 30 22 29 3b 63 61 73 65 22 53 53 53 22 3a 72 65 74 75 72 6e 20 6a 2e 73 28 65 2e 24 6d 73 2c 33 2c 22 30 22 29 3b 63 61 73 65 22 5a 22 3a 72 65 74 75 72 6e 20 6f 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 74 29 7c 7c 6f 2e 72 65 70 6c 61 63 65 28 22 3a 22 2c 22 22 29 7d 29 29 7d 2c 6d 2e 75 74 63 4f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 35 2a 2d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 24 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2f 31 35 29 7d 2c 6d 2e 64 69 66 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 70 2c 64 29 7b 76 61 Data Ascii: );case"s":return String(e.$s);case"ss":return j.s(e.$s,2,"0");case"SSS":return j.s(e.$ms,3,"0");case"Z":return o}return null}(t)\|\|o.replace(":","")}))},m.utcOffset=function(){return 15*-Math.round(this.$d.getTimezoneOffset()/15)},m.diff=function(n,p,d){va
2024-12-12 18:57:49 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6e 3d 72 28 37 34 34 31 37 29 2c 6f 3d 72 28 35 35 32 33 29 2c 69 3d 72 28 33 31 37 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 69 28 72 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 73 3d 74 79 70 65 6f 66 20 65 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 73 3f 6e 28 72 29 26 26 6f 28 65 2c 72 2e 6c 65 6e 67 74 68 29 3a 22 73 74 72 69 6e 67 22 3d 3d 73 26 26 65 20 69 6e 20 72 29 7b 76 61 72 20 61 3d 72 5b 65 5d 3b 72 65 74 75 72 6e 20 74 3d 3d 74 3f 74 3d 3d 3d 61 3a 61 21 3d 61 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 37 30 36 36 37 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 Data Ascii: {var n=r(74417),o=r(5523),i=r(31755);t.exports=function(t,e,r){if(!i(r))return!1;var s=typeof e;if("number"==s?n(r)&&o(e,r.length):"string"==s&&e in r){var a=r[e];return t==t?t===a:a!=a}return!1}},70667:t=>{t.exports=function(t){return"number"==typeof t&&
2024-12-12 18:57:49 UTC	16384	IN	Data Raw: 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 74 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 72 7d 7d 7d 7d 2c 31 31 37 39 33 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 34 35 38 30 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 3d 6e 28 74 29 7d 7d 2c 36 32 32 35 30 3a 74 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 76 6f 69 64 20 30 3d 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d Data Ascii: ncompatible receiver, "+t+" required");return r}}}},11793:(t,e,r)=>{"use strict";var n=r(45807);t.exports=Array.isArray\|\|function(t){return"Array"===n(t)}},62250:t=>{"use strict";var e="object"==typeof document&&document.all;t.exports=void 0===e&&void 0!=
2024-12-12 18:57:49 UTC	5559	IN	Data Raw: 26 26 51 28 56 2c 65 2c 6e 29 7d 2c 61 74 3d 63 26 26 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 3d 79 28 51 28 7b 7d 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 28 74 68 69 73 2c 22 61 22 2c 7b 76 61 6c 75 65 3a 37 7d 29 2e 61 7d 7d 29 29 2e 61 7d 29 29 3f 73 74 3a 51 2c 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 72 74 5b 74 5d 3d 79 28 7a 29 3b 72 65 74 75 72 6e 20 47 28 72 2c 7b 74 79 70 65 3a 48 2c 74 61 67 3a 74 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 65 7d 29 2c 63 7c 7c 28 72 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 65 29 2c 72 7d 2c 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 74 3d 3d 3d 56 26 26 75 74 28 6e 74 2c 65 2c 72 29 2c 64 28 74 29 Data Ascii: &&Q(V,e,n)},at=c&&f((function(){return 7!==y(Q({},"a",{get:function(){return Q(this,"a",{value:7}).a}})).a}))?st:Q,ct=function(t,e){var r=rt[t]=y(z);return G(r,{type:H,tag:t,description:e}),c\|\|(r.description=e),r},ut=function(t,e,r){t===V&&ut(nt,e,r),d(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49951	44.214.102.204	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 18:57:48 UTC	1050	OUT	GET /ping?h=ebaumsworld.com&p=%2F&u=BHTdVWCmdV3ZIGzdR&d=ebaumsworld.com&g=6425&g0=Homepage&g1=No%20Author&n=1&f=00001&c=0.11&x=0&m=0&y=8341&o=1263&w=907&j=45&R=1&W=0&I=0&E=6&e=6&r=&KK=1052::0::DK-aFXBjjVtrBlS5nTp79XnDkccNH::::c::https%3A%2F%2Febaumsworld.com%2Fuser%2Flogin%2F::MpRAaQkDuVBF4EvXCbKOJdB8WD3c::&PA=https%3A%2F%2Febaumsworld.com%2F&b=16663&t=CSO8m6BVdKQ5DW1oMH67MkxDvbGF2&V=147&tz=300&_acct=anon&sn=2&sv=DjH5dgDDR8r0DAS_8rDeR3EnCZMlf-&sr=external&sd=1&im=062b073f&_ HTTP/1.1 Host: ping.chartbeat.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebaumsworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 18:57:48 UTC	246	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 18:57:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cross-Origin-Resource-Policy: cross-origin Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0
2024-12-12 18:57:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Target ID:	0
Start time:	13:57:03
Start date:	12/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:57:06
Start date:	12/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2184,i,8306864304609640449,17475142728878979676,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:57:11
Start date:	12/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ebaumsworld.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://ebaumsworld.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Windows Analysis Report
http://ebaumsworld.com