Edit tour

Windows Analysis Report
https://talktalk770.weebly.com/

Overview

General Information

Sample URL:	https://talktalk770.weebly.com/
Analysis ID:	1589264
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish10

Yara detected HtmlPhish20

Detected non-DNS traffic on DNS port

Executes massive DNS lookups (> 100)

HTML body contains low number of good links

HTML page contains string obfuscation

HTML title does not match URL

No HTML title found

Suricata IDS alerts with low severity for network traffic

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2000,i,17465243282939486776,3817739708234424106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://talktalk770.weebly.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author
dropped/chromecache_952	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security
dropped/chromecache_952	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
dropped/chromecache_1101	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security
dropped/chromecache_1101	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
2.4.pages.csv	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-12T00:12:32.405910+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50471	34.111.113.62	443	TCP
2025-01-12T00:12:32.592721+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50511	34.111.113.62	443	TCP
2025-01-12T00:12:34.605705+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50660	57.129.18.109	443	TCP
2025-01-12T00:12:36.375263+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50922	96.46.186.65	443	TCP
2025-01-12T00:12:36.602954+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50926	35.214.199.88	443	TCP

ET PHISHING Phishing Landing via Weebly.com M1 2016-02-02

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-12T00:11:19.163689+0100	2032366	2	Possible Social Engineering Attempted	74.115.51.8	443	192.168.2.4	49741	TCP

ET PHISHING Phishing Landing via Weebly.com M2 2016-02-02

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-12T00:11:19.163689+0100	2032367	2	Possible Social Engineering Attempted	74.115.51.8	443	192.168.2.4	49741	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://talktalk770.weebly.com/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://talktalk770.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]	Avira URL Cloud: Label: phishing
Source: https://talktalk770.weebly.com/ajax/apps/formSubmitAjax.php	Avira URL Cloud: Label: phishing
Source: https://talktalk770.weebly.com/files/theme/plugins.js?1736412329	Avira URL Cloud: Label: phishing
Source: https://talktalk770.weebly.com/files/theme/jquery.revealer.js?1736412329	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://talktalk770.weebly.com/	Joe Sandbox AI: Score: 9 Reasons: The brand 'TalkTalk' is a well-known telecommunications company in the UK., The legitimate domain for TalkTalk is 'talktalk.co.uk'., The URL 'talktalk770.weebly.com' does not match the legitimate domain., The use of 'weebly.com', a free website builder, is suspicious for a well-known brand., The presence of numbers '770' in the subdomain is unusual and could indicate phishing., The URL structure suggests a potential phishing attempt as it does not align with the official domain. DOM: 1.1.pages.csv
Source: https://talktalk770.weebly.com/home.html	Joe Sandbox AI: Score: 9 Reasons: TalkTalk is a well-known telecommunications company in the UK., The legitimate domain for TalkTalk is talktalk.co.uk., The URL provided is talktalk770.weebly.com, which does not match the legitimate domain., The use of 'weebly.com' suggests a free website hosting service, which is often used for phishing., The subdomain 'talktalk770' is suspicious and not associated with the official TalkTalk domain., The presence of input fields for 'Email Address' and 'password' on a non-legitimate domain is a common phishing tactic. DOM: 2.4.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: dropped/chromecache_952, type: DROPPED
Source: Yara match	File source: dropped/chromecache_1101, type: DROPPED

Yara detected HtmlPhish20

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_952, type: DROPPED
Source: Yara match	File source: dropped/chromecache_1101, type: DROPPED

Source: https://talktalk770.weebly.com/	HTTP Parser: Number of links: 1
Source: https://talktalk770.weebly.com/home.html	HTTP Parser: Number of links: 1
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: Number of links: 0

Source: https://2353bee1e702193d8a081ea08f00dcb6.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1

HTTP Parser: Found new string: script (function() {var u = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-Cd8i-54KLlkcsTvA0VmjIice7YGsMjjgjkapboWvTd8Dq9Y8-2p4PeT6hhgl6EAhtuuoABUXxSxptoIqh09J0ZFXdWeGSPKDCaVB_Qu84tsfsO6oWLCimCEDbk5ne1hp8IqYHObSOnzmRcAIlIO18WjFs3GkA6G0EZlfW7F1_GAPJcFcbpJ6vFk_BpG4DYVU-bplqirAb69LCYmWRMgP5f0mKTHhXpo49YYXpFcw7IMMfn9wI&dbm_d=AKAmf-CYWR3YKXshE4JIvm_Oac9h_bytbwT-pezT_ixJkGMDhzS6PMr45IXemSzBiNDlkgtK3co0V3dPLknHBk7WRq9k641U3hXVi8HQjtSVK8vl8qukcdMwClTH0Bz3oBrZbLESR-JFbESR-BzQc3inMWtOfEC0MhFWOx9DOOEphgs5gIP4-xl52b3642bYVRttpTsJQu1NzdOFaEvqudJlOCUos6QrHR5yfTm2PSjOo2vUS6dHbI4p8fVBBEdr39QYQRDM-fPgt9LvjfjYfRwTKo6lKdVnWMc4bW2re7XLZnjmBzwWcqVWdNR8_DjqvWZF3SfRKZXPf-lp7RTlgsbjxY_vFYtY6VuY1EWXrgfGVj9HPZWxGvMF-f9-BfItWZc9MDEs8ujKUahWZFPdeXKMe1mjR2x0R1GWtHjrX7E3JthbjVlfZM8HrGQ0kTZXr8pgdGBVGQl2IVyMp4CwrUf8jptrKsLThbmj75Vb0cotrBHsCD0_ucBT0UE_HQ1wt91ka8Y7fDnN-f5D1Wh9J7fIAulGfHGi6rm8gp_hkriltcgNNedbJdeupNcToP1wbPyyy4JdJjDejpBIFH16hAPoQ0CphiO1EIbMc02JAAYKFsMrwGuM8_jbz6pmBvh09oFWGOcmQQfPpUk-_VD3CjQUgsu--l0MhctKwabHNAXDLFZegGmLn5pOlo4...

Source: https://talktalk770.weebly.com/	HTTP Parser: Title: Home does not match URL
Source: https://talktalk770.weebly.com/home.html	HTTP Parser: Title: Home does not match URL

Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: HTML title missing
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: HTML title missing
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: HTML title missing

Source: https://talktalk770.weebly.com/	HTTP Parser: Form action: https://talktalk770.weebly.com/ajax/apps/formSubmitAjax.php
Source: https://talktalk770.weebly.com/home.html	HTTP Parser: Form action: https://talktalk770.weebly.com/ajax/apps/formSubmitAjax.php

Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: Iframe src: javascript:false
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: Iframe src: javascript:false
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: Iframe src: javascript:false
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: Iframe src: javascript:false

Source: https://apps.talktalk.co.uk/appsuite/

HTTP Parser: <input type="password" .../> found

Source: https://talktalk770.weebly.com/	HTTP Parser: No favicon
Source: https://talktalk770.weebly.com/	HTTP Parser: No favicon
Source: https://talktalk770.weebly.com/home.html	HTTP Parser: No favicon
Source: https://talktalk770.weebly.com/home.html	HTTP Parser: No favicon
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No favicon
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No favicon

Source: https://talktalk770.weebly.com/	HTTP Parser: No <meta name="author".. found
Source: https://talktalk770.weebly.com/home.html	HTTP Parser: No <meta name="author".. found
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No <meta name="author".. found
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No <meta name="author".. found
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No <meta name="author".. found
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No <meta name="author".. found

Source: https://talktalk770.weebly.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://talktalk770.weebly.com/home.html	HTTP Parser: No <meta name="copyright".. found
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No <meta name="copyright".. found
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No <meta name="copyright".. found
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No <meta name="copyright".. found
Source: https://apps.talktalk.co.uk/appsuite/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.4:50652 -> 1.1.1.1:53

Source: global traffic

DNS traffic detected: number of DNS queries: 183

Source: Network traffic	Suricata IDS: 2032366 - Severity 2 - ET PHISHING Phishing Landing via Weebly.com M1 2016-02-02 : 74.115.51.8:443 -> 192.168.2.4:49741
Source: Network traffic	Suricata IDS: 2032367 - Severity 2 - ET PHISHING Phishing Landing via Weebly.com M2 2016-02-02 : 74.115.51.8:443 -> 192.168.2.4:49741
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50471 -> 34.111.113.62:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50511 -> 34.111.113.62:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50926 -> 35.214.199.88:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50922 -> 96.46.186.65:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50660 -> 57.129.18.109:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.113
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.112
Source: unknown	TCP traffic detected without corresponding DNS query: 217.182.178.228
Source: unknown	TCP traffic detected without corresponding DNS query: 217.182.178.228
Source: unknown	TCP traffic detected without corresponding DNS query: 217.182.178.228
Source: unknown	TCP traffic detected without corresponding DNS query: 217.182.178.228

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/MutationObserver.js HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1736414015 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/templateArtifacts.js?1736414015 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /css/sites.css?buildTime=1736370530 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/old/fancybox.css?1736370530 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/social-icons.css?buildtime=1736370530 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Karla/font.css?2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto_Mono/font.css?2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Oswald/font.css?2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/tak_orig.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/tannn_orig.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/MutationObserver.js HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.8.3.min.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lang/en/stl.js?buildTime=1736370530& HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/site/main.js?buildTime=1736370530 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/templateArtifacts.js?1736414015 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/tak_orig.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/tannn_orig.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /js/site/footerSignup.js?buildTime=1736455907 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.8.3.min.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lang/en/stl.js?buildTime=1736370530& HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/images/arrow-light.svg?1736414015 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://talktalk770.weebly.com/files/main_style.css?1736414015Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /js/site/main.js?buildTime=1736370530 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/plugins.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /js/site/main-customer-accounts-site.js?buildTime=1736370530 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.pxuMenu.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.trend.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.revealer.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/custom-1.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /js/site/footerSignup.js?buildTime=1736455907 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto_Mono/regular.woff2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://talktalk770.weebly.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Karla/bold.woff2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://talktalk770.weebly.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn2.editmysite.com/fonts/Karla/font.css?2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Oswald/bold.woff2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://talktalk770.weebly.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn2.editmysite.com/fonts/Oswald/font.css?2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/background-images/1757667267.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/images/arrow-light.svg?1736414015 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.pxuMenu.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.revealer.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/jquery.trend.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/custom-1.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /files/theme/plugins.js?1736412329 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /js/site/main-customer-accounts-site.js?buildTime=1736370530 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/wsnbn/snowday262.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?_=1736637081406 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/background-images/1757667267.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
Source: global traffic	HTTP traffic detected: GET /js/wsnbn/snowday262.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?_=1736637081406 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=23ed650a-6bc4-4697-a99f-3aa9d3ec9cd2
Source: global traffic	HTTP traffic detected: GET /home.html HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1736414015 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://talktalk770.weebly.com/home.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /files/templateArtifacts.js?1736414015 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/home.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/tak_1.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://talktalk770.weebly.com/home.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/tannn_1.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://talktalk770.weebly.com/home.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /files/templateArtifacts.js?1736414015 HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/tak_1.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /uploads/1/5/1/8/151886692/tannn_1.png HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637096.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?_=1736637096235 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637096.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?_=1736637096235 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=23ed650a-6bc4-4697-a99f-3aa9d3ec9cd2
Source: global traffic	HTTP traffic detected: GET /appsuite/ HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/index.html.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://apps.talktalk.co.uksec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/lib/polyfills/text-encode-transform.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://apps.talktalk.co.uksec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/polyfills.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://apps.talktalk.co.uksec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/assets/preload-helper-DVsEscEQ.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://apps.talktalk.co.uksec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/precore.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://apps.talktalk.co.uksec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/index.html.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/polyfills.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/lib/polyfills/text-encode-transform.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/assets/preload-helper-DVsEscEQ.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/bundles/boot.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/themes/default/illustrations/error-generic.svg HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/service-worker.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://apps.talktalk.co.uk/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/precore.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/favicon.ico HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/pwa.json HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/ HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/themes/default/logo_512.png HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/api/apps/manifests?action=config&version=8.32.1 HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/themes/default/illustrations/error-generic.svg HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/favicon.ico HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/bundles/boot.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/themes/default/logo_512.png HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/manifests HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/favicon.svg?version=1703779530 HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/api/apps/manifests?action=config&version=8.32.1 HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/antiphishing/antiphishing-9209b04e.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.dumpster-f4301a77.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/minimalapiconsent.0e902e90.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/uk.co.talktalk-e4375173.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/office/main.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/uk.co.talktalk/preload-helper.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/guard/i18n.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/antiphishing.6fb231d8.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.blackwhitelist.811cfd8a.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.dumpster.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/externalcontentpopup.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.gdpr.db34b815.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/mandatorywizard.894649b8.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/minimalapiconsent.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/mx-checker.e099b1ce.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.unsubscribe.abf79198.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/switchboard-CyjQ4kEt.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.godaddy.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.iol-smb-a7782bdb.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/uk.co.talktalk/translations-369373da.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/guidedtours/i18n-ORsXC62r.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/ai-4qA6hrTY.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/announcements.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/contactsdumpster.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/loginproxy.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/popkeep.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/tetpopups.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/ox-metrics.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core/boot/login/redeem-token.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.alt-login/register.0cd180a7.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/appsuite-tet/i18n-Bz_U5kkj.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/uk.co.talktalk/login/register-50911d18.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/loginproxy/register.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.iol-smb/preload-helper.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/underscore.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/jquery.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/themes/uk.co.talktalk/favicon.ico HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/api/login?action=autologin&client=open-xchange-appsuite&rampup=false&version=8.32.1 HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/api/login?action=autologin&client=open-xchange-appsuite&rampup=false&version=8.32.1 HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/office/main.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/guidedtours/i18n.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/guard/i18n.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/antiphishing.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.blackwhitelist.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.dumpster.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/externalcontentpopup.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.gdpr.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/mandatorywizard.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/minimalapiconsent.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/mx-checker.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.unsubscribe.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/switchboard.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.godaddy.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/appsuite-tet/i18n.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/announcements.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/loginproxy.en_GB.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.alt-login/forgot-password-link.07472780.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.login.links/register.363e034b.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/com.cm4all/com.cm4all/login/register.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox.iol-smb/login/register-d612f300.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/com.kun/login/register.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/uk.co.talktalk/login/structure-fff59e05.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/common-7ecc8b2c.css HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"; locale=en_GB
Source: global traffic	HTTP traffic detected: GET /appsuite/uk.co.talktalk/environment-banner/register-25035e2c.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"
Source: global traffic	HTTP traffic detected: GET /appsuite/uk.co.talktalk/common.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"; locale=en_GB
Source: global traffic	HTTP traffic detected: GET /appsuite/uk.co.talktalk/cmp.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"; locale=en_GB
Source: global traffic	HTTP traffic detected: GET /appsuite/uk.co.talktalk/tradehouse.js HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"; locale=en_GB
Source: global traffic	HTTP traffic detected: GET /appsuite/styles-646813f1.css HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"; locale=en_GB
Source: global traffic	HTTP traffic detected: GET /appsuite/themes/uk.co.talktalk/talktalk_logo.png HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"; locale=en_GB
Source: global traffic	HTTP traffic detected: GET /appsuite/themes/uk.co.talktalk/images/spam.png HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"; locale=en_GB
Source: global traffic	HTTP traffic detected: GET /appsuite/themes/uk.co.talktalk/TalkTalkIcons.woff HTTP/1.1Host: apps.talktalk.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36version: 1703779530Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: appsuite-middleware-route="d39ab719fe553e02"; locale=en_GB
Source: global traffic	HTTP traffic detected: GET /js/talktalk.js HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/pageview?session=true&random=89809631&consent=false&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/wrapperMessagingWithoutDetection.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/talktalk.js HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/pageview?session=true&random=89809631&consent=false&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/4.27.3/gdpr-tcf.00cd3b6a2692e330e4ec.bundle.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mms/v2/get_site_data?hasCsp=true&href=https%3A%2F%2Fapps.talktalk.co.uk&account_id=1948 HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/wrapperMessagingWithoutDetection.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mms/v2/get_site_data?hasCsp=true&href=https%3A%2F%2Fapps.talktalk.co.uk&account_id=1948 HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrapper/v2/meta-data?hasCsp=true&accountId=1948&env=prod&metadata=%7B%22gdpr%22%3A%7B%7D%7D&propertyId=34301&scriptVersion=4.27.3&scriptType=unified HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/4.27.3/gdpr-tcf.00cd3b6a2692e330e4ec.bundle.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrapper/v2/meta-data?hasCsp=true&accountId=1948&env=prod&metadata=%7B%22gdpr%22%3A%7B%7D%7D&propertyId=34301&scriptVersion=4.27.3&scriptType=unified HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrapper/v2/messages?hasCsp=true&env=prod&body=%7B%22accountId%22%3A1948%2C%22campaignEnv%22%3A%22prod%22%2C%22campaigns%22%3A%7B%22gdpr%22%3A%7B%22consentStatus%22%3A%7B%7D%2C%22targetingParams%22%3A%7B%7D%7D%7D%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22hasCSP%22%3Atrue%2C%22includeData%22%3A%7B%22localState%22%3A%7B%22type%22%3A%22string%22%7D%2C%22actions%22%3A%7B%22type%22%3A%22RecordString%22%7D%2C%22cookies%22%3A%7B%22type%22%3A%22RecordString%22%7D%7D%2C%22propertyHref%22%3A%22https%3A%2F%2Fapps.talktalk.co.uk%22%7D&localState=null&metadata=%7B%22gdpr%22%3A%7B%22applies%22%3Afalse%7D%7D&nonKeyedLocalState=null&ch=440076383440076383c1d9&scriptVersion=4.27.3&scriptType=unified HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/tagger/30415131/1736637137927 HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/view/banner/javascript/ajax/crossdomain/zone?zid=506&pid=0&consent=true&tagid=EWvDBP37qQw0PhGcxJwS&viewable=true&txid=47089564&refresh_count=0&sver=1&pvid=92917596&resolution=1280x907&random=33602881&millis=1736637137929&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/view/banner/javascript/ajax/crossdomain/zone?zid=630&pid=0&consent=true&tagid=bNsm89ueUddglAE1vKOj&txid=15797597&refresh_count=0&sver=1&pvid=92917596&resolution=1280x907&random=91136947&millis=1736637137930&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrapper/v2/messages?hasCsp=true&env=prod&body=%7B%22accountId%22%3A1948%2C%22campaignEnv%22%3A%22prod%22%2C%22campaigns%22%3A%7B%22gdpr%22%3A%7B%22consentStatus%22%3A%7B%7D%2C%22targetingParams%22%3A%7B%7D%7D%7D%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22hasCSP%22%3Atrue%2C%22includeData%22%3A%7B%22localState%22%3A%7B%22type%22%3A%22string%22%7D%2C%22actions%22%3A%7B%22type%22%3A%22RecordString%22%7D%2C%22cookies%22%3A%7B%22type%22%3A%22RecordString%22%7D%7D%2C%22propertyHref%22%3A%22https%3A%2F%2Fapps.talktalk.co.uk%22%7D&localState=null&metadata=%7B%22gdpr%22%3A%7B%22applies%22%3Afalse%7D%7D&nonKeyedLocalState=null&ch=440076383440076383c1d9&scriptVersion=4.27.3&scriptType=unified HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/view/banner/javascript/ajax/crossdomain/zone?zid=607&pid=0&consent=true&tagid=bvafzhc7DOaUFMyfnLVF&viewable=true&txid=48758355&refresh_count=0&sver=1&pvid=92917596&resolution=1280x907&random=63053322&millis=1736637137930&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ats-modules/0a5e590a-af2a-4b82-aa7b-f4158e626809/ats.js HTTP/1.1Host: ats-wrapper.privacymanager.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/tagger/30415131/1736637137927 HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/view/banner/javascript/ajax/crossdomain/zone?zid=630&pid=0&consent=true&tagid=bNsm89ueUddglAE1vKOj&txid=15797597&refresh_count=0&sver=1&pvid=92917596&resolution=1280x907&random=91136947&millis=1736637137930&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/view/banner/javascript/ajax/crossdomain/zone?zid=506&pid=0&consent=true&tagid=EWvDBP37qQw0PhGcxJwS&viewable=true&txid=47089564&refresh_count=0&sver=1&pvid=92917596&resolution=1280x907&random=33602881&millis=1736637137929&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /servlet/view/banner/javascript/ajax/crossdomain/zone?zid=607&pid=0&consent=true&tagid=bvafzhc7DOaUFMyfnLVF&viewable=true&txid=48758355&refresh_count=0&sver=1&pvid=92917596&resolution=1280x907&random=63053322&millis=1736637137930&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/viewability2.js HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AVPUID=2ed42e2d064b0762b473f192240331fd
Source: global traffic	HTTP traffic detected: GET /js/prebid-tradehouse-9.11.0-gdpr.js HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AVPUID=49e10f251e834329df1984656dc0a91e
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrapper/v2/pv-data?hasCsp=true&env=prod&ch=440076383440076383c1d9&scriptVersion=4.27.3&scriptType=unified HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/viewability2.js HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AVPUID=b205759de760758e9ecfdf2aec5eae49
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ats-modules/0a5e590a-af2a-4b82-aa7b-f4158e626809/ats.js HTTP/1.1Host: ats-wrapper.privacymanager.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/identity/envelope?pid=13235 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/prebid-tradehouse-9.11.0-gdpr.js HTTP/1.1Host: tradecore.tradehouse.mediaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AVPUID=0fc8cbda5ad38a6d2e2662c41c0d2b45
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=a65bpx9&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?gdpr_applies=false&c=17728 HTTP/1.1Host: id.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fapps.talktalk.co.uk&pubid=6b4befd3-bb9d-413d-bf7b-146588adacea HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=1119609 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fapps.talktalk.co.uk%2F&domain=apps.talktalk.co.uk&cw=1&lsw=1&gdpr=0 HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=1119611 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid HTTP/1.1Host: mp.4dex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJzeW5jcyI6eyIzM2Fjcm9zcyI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMjAzOTUxMDk2WiIsImVwbGFubmluZyI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMjAzOTQ4MDk2WiIsImltcHJvdmVkaWdpdGFsIjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4yMDM5NDg5MTZaIiwidHJpcGxlbGlmdCI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMjAzOTQ1NTc2WiJ9LCJ1aWRzIjp7ImFkYWdpbyI6eyJ1aWQiOiI2MmZlYjYzMy01OGU1LTQ0YjMtOWViMi04MzA5ZjBlNDc4MGIiLCJleHBpcmVzIjoiMjAyNS0wMy0xMlQyMzoxMjoyMi4wMzc0MzU4NzRaIn19LCJiZGF5IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4wMzcyMjgyNjRaIn0=
Source: global traffic	HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=c7ecb492-2096-78cf-ba9c-48cc663749d1#1736637142096#1
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=a65bpx9&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=beb8670a-646c-4cf0-a211-73ab4a2643bb
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?gdpr_applies=false&c=17728 HTTP/1.1Host: id.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; pid=663029469554053203; sasd2=q=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638722339422217805&o=1; sasd=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /hbjson HTTP/1.1Host: grid.bidswitch.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=1d6a8984-b181-4633-b7dd-ba96dd59764f
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=9.11.0&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&tmax=1200&gdpr=false HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/bid?src=prebid_prebid_9.11.0 HTTP/1.1Host: ap.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZHzbnPOO5wQdmjM6ID
Source: global traffic	HTTP traffic detected: GET /id?gdpr_applies=false&c=17728 HTTP/1.1Host: id.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=b74b370c6603a90653038a464f3a29da; _cc_cc="ACZ4nGNQSDI3STI2N0g2MzMwTrQ0MDM1NjC2SDQxM0kzTjSyTElkAIL0pl%2FXGBAAAEjnCwE%3D"; _cc_aud="ABR4nGNgYGBIb%2Fp1jQEOACE4Aro%3D"
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid HTTP/1.1Host: mp.4dex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJzeW5jcyI6eyIzM2Fjcm9zcyI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMzQ5OTk1ODgxWiIsIm9wZW54IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NzA0MjFaIiwicnRiaG91c2UiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjM0OTk1MzQ2MVoiLCJ0cmlwbGVsaWZ0IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NTI0MDFaIn0sInVpZHMiOnsiYWRhZ2lvIjp7InVpZCI6IjkzOWE4OGYxLWNkY2MtNDIxNC04OTFlLTlmMzdkYjU3ZmU4OSIsImV4cGlyZXMiOiIyMDI1LTAzLTEyVDIzOjEyOjIyLjAxNDk2MzA4M1oifX0sImJkYXkiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjAxNDYyMjM5M1oifQ==
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fapps.talktalk.co.uk%2F&domain=apps.talktalk.co.uk&cw=1&lsw=1&gdpr=0 HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fapps.talktalk.co.uk%2F&domain=apps.talktalk.co.uk&cw=1&lsw=1&gdpr=0 HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=c7ecb492-2096-78cf-ba9c-48cc663749d1#1736637142096#1
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbjson HTTP/1.1Host: grid.bidswitch.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; pid=663029469554053203; sasd2=q=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638722339422217805&o=1; sasd=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=645f4be4-bdbe-49ac-87fb-abbdbf67bd8b
Source: global traffic	HTTP traffic detected: GET /id?gdpr_applies=false&c=17728 HTTP/1.1Host: id.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=b74b370c6603a90653038a464f3a29da; _cc_cc="ACZ4nGNQSDI3STI2N0g2MzMwTrQ0MDM1NjC2SDQxM0kzTjSyTElkAIL0pl%2FXGRAAAEjzCwI%3D"; _cc_aud="ABR4nGNgYGBIb%2Fp1nQEOACFDArs%3D"
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=9.11.0&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&tmax=1200&gdpr=false HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/bid?src=prebid_prebid_9.11.0 HTTP/1.1Host: ap.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fapps.talktalk.co.uk%2F&domain=apps.talktalk.co.uk&cw=1&lsw=1&gdpr=0 HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/latest/adagio.js HTTP/1.1Host: script.4dex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJzeW5jcyI6eyIzM2Fjcm9zcyI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMzQ5OTk1ODgxWiIsIm9wZW54IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NzA0MjFaIiwicnRiaG91c2UiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjM0OTk1MzQ2MVoiLCJ0cmlwbGVsaWZ0IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NTI0MDFaIn0sInVpZHMiOnsiYWRhZ2lvIjp7InVpZCI6IjkzOWE4OGYxLWNkY2MtNDIxNC04OTFlLTlmMzdkYjU3ZmU4OSIsImV4cGlyZXMiOiIyMDI1LTAzLTEyVDIzOjEyOjIyLjAxNDk2MzA4M1oifX0sImJkYXkiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjAxNDYyMjM5M1oifQ==
Source: global traffic	HTTP traffic detected: GET /configs/6b4befd3-bb9d-413d-bf7b-146588adacea HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/v2/449.json HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=c7ecb492-2096-78cf-ba9c-48cc663749d1#1736637142096#2
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /err/?ec=6&ev=1200&pla=MP_Z23yLHH4VI_MPU&int=PREBID&pltfm=&node=&dm=apps.talktalk.co.uk HTTP/1.1Host: s.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /err/?ec=6&ev=1200&pla=MP_Z23yLHH4VI_Leaderboard&int=PREBID&pltfm=&node=&dm=apps.talktalk.co.uk HTTP/1.1Host: s.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/latest/adagio.js HTTP/1.1Host: script.4dex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJzeW5jcyI6eyIzM2Fjcm9zcyI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMzQ5OTk1ODgxWiIsIm9wZW54IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NzA0MjFaIiwicnRiaG91c2UiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjM0OTk1MzQ2MVoiLCJ0cmlwbGVsaWZ0IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NTI0MDFaIn0sInVpZHMiOnsiYWRhZ2lvIjp7InVpZCI6IjkzOWE4OGYxLWNkY2MtNDIxNC04OTFlLTlmMzdkYjU3ZmU4OSIsImV4cGlyZXMiOiIyMDI1LTAzLTEyVDIzOjEyOjIyLjAxNDk2MzA4M1oifX0sImJkYXkiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjAxNDYyMjM5M1oifQ==If-None-Match: "15bd4869216609f1ef060f2f770aef45"If-Modified-Since: Tue, 07 Jan 2025 10:15:50 GMT
Source: global traffic	HTTP traffic detected: GET /a/latest/adagio.js HTTP/1.1Host: script.4dex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJzeW5jcyI6eyIzM2Fjcm9zcyI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMzQ5OTk1ODgxWiIsIm9wZW54IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NzA0MjFaIiwicnRiaG91c2UiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjM0OTk1MzQ2MVoiLCJ0cmlwbGVsaWZ0IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NTI0MDFaIn0sInVpZHMiOnsiYWRhZ2lvIjp7InVpZCI6IjkzOWE4OGYxLWNkY2MtNDIxNC04OTFlLTlmMzdkYjU3ZmU4OSIsImV4cGlyZXMiOiIyMDI1LTAzLTEyVDIzOjEyOjIyLjAxNDk2MzA4M1oifX0sImJkYXkiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjAxNDYyMjM5M1oifQ==
Source: global traffic	HTTP traffic detected: GET /sync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dtriplelift%26it%3Dadg-pb-clt%26uid%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /dahhc4ozyvjm6/script.js HTTP/1.1Host: cadmus.script.acConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/v2/449.json HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=c7ecb492-2096-78cf-ba9c-48cc663749d1#1736637142096#3
Source: global traffic	HTTP traffic detected: GET /err/?ec=6&ev=1200&pla=MP_Z23yLHH4VI_MPU&int=PREBID&pltfm=&node=&dm=apps.talktalk.co.uk HTTP/1.1Host: s.richaudience.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /err/?ec=6&ev=1200&pla=MP_Z23yLHH4VI_Leaderboard&int=PREBID&pltfm=&node=&dm=apps.talktalk.co.uk HTTP/1.1Host: s.richaudience.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/latest/adagio.js HTTP/1.1Host: script.4dex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJzeW5jcyI6eyIzM2Fjcm9zcyI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMzQ5OTk1ODgxWiIsIm9wZW54IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NzA0MjFaIiwicnRiaG91c2UiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjM0OTk1MzQ2MVoiLCJ0cmlwbGVsaWZ0IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NTI0MDFaIn0sInVpZHMiOnsiYWRhZ2lvIjp7InVpZCI6IjkzOWE4OGYxLWNkY2MtNDIxNC04OTFlLTlmMzdkYjU3ZmU4OSIsImV4cGlyZXMiOiIyMDI1LTAzLTEyVDIzOjEyOjIyLjAxNDk2MzA4M1oifX0sImJkYXkiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjAxNDYyMjM5M1oifQ==If-None-Match: "15bd4869216609f1ef060f2f770aef45"If-Modified-Since: Tue, 07 Jan 2025 10:15:50 GMT
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202501030302/pubads_impl.js?cb=31089528 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&pr=https%3A%2F%2Ftalktalk770.weebly.com%2F&pid=X6OdSjdZxHcHW&cb=0&ws=300x250&v=24.1212.711&t=2000&slots=%5B%7B%22sd%22%3A%22Prebid_Container15529074%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%2C%22320x320%22%2C%22300x200%22%2C%22300x50%22%2C%22300x100%22%2C%22250x250%22%2C%22200x200%22%2C%22336x320%22%2C%22300x300%22%2C%22320x50%22%5D%2C%22sn%22%3A%22%2F22786333977%2Fapps.talktalk.co.uk_displaystandard_300x250_login_bottom%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=dfa2b852-f286-4780-a466-875a1c03f964&pubid=6b4befd3-bb9d-413d-bf7b-146588adacea&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202501030302&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&pr=https%3A%2F%2Ftalktalk770.weebly.com%2F&pid=rMQy0Q67c0bgb&cb=0&ws=728x90&v=24.1212.711&t=2000&slots=%5B%7B%22sd%22%3A%22Prebid_Container21737975%22%2C%22s%22%3A%5B%22728x90%22%2C%22468x60%22%2C%22300x50%22%2C%22300x100%22%2C%22320x50%22%5D%2C%22sn%22%3A%22%2F22786333977%2Fapps.talktalk.co.uk_displaystandard_728x90_login_top%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=dfa2b852-f286-4780-a466-875a1c03f964&pubid=6b4befd3-bb9d-413d-bf7b-146588adacea&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dahhc4ozyvjm6/script.js HTTP/1.1Host: cadmus.script.acConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dtriplelift%26it%3Dadg-pb-clt%26uid%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /sync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dtriplelift%26it%3Dadg-pb-clt%26uid%3D%24UID&ld=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /configs/6b4befd3-bb9d-413d-bf7b-146588adacea HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uspd/1/be96b820e5daac93?ruidm=1&du=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Deplanning%26it%3Dadg-pb-clt%26uid%3D%24UID HTTP/1.1Host: ads.us.e-planning.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202501030302&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apps.talktalk.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dtriplelift%26it%3Dadg-pb-clt%26uid%3D%24UID&ld=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=4099209890275096559476; tluid=4099209890275096559476
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dtriplelift%26it%3Dadg-pb-clt%26uid%3D%24UID&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIgAIQi8uPvcUyCgoIoQEQi8uPvcUyCgoI4gEQi8uPvcUyCgoI5gEQi8uPvcUyCgoIhwIQi8uPvcUyCgkIOhCLy4-9xTIKCQgbEIvLj73FMgoKCIwCEIvLj73FMgoKCL8CEIvLj73FMgoJCF8Qi8uPvcUy; receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dtriplelift%26it%3Dadg-pb-clt%26uid%3D%24UID&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=beb8670a-646c-4cf0-a211-73ab4a2643bb
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&pr=https%3A%2F%2Ftalktalk770.weebly.com%2F&pid=X6OdSjdZxHcHW&cb=0&ws=300x250&v=24.1212.711&t=2000&slots=%5B%7B%22sd%22%3A%22Prebid_Container15529074%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%2C%22320x320%22%2C%22300x200%22%2C%22300x50%22%2C%22300x100%22%2C%22250x250%22%2C%22200x200%22%2C%22336x320%22%2C%22300x300%22%2C%22320x50%22%5D%2C%22sn%22%3A%22%2F22786333977%2Fapps.talktalk.co.uk_displaystandard_300x250_login_bottom%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=dfa2b852-f286-4780-a466-875a1c03f964&pubid=6b4befd3-bb9d-413d-bf7b-146588adacea&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&pr=https%3A%2F%2Ftalktalk770.weebly.com%2F&pid=rMQy0Q67c0bgb&cb=0&ws=728x90&v=24.1212.711&t=2000&slots=%5B%7B%22sd%22%3A%22Prebid_Container21737975%22%2C%22s%22%3A%5B%22728x90%22%2C%22468x60%22%2C%22300x50%22%2C%22300x100%22%2C%22320x50%22%5D%2C%22sn%22%3A%22%2F22786333977%2Fapps.talktalk.co.uk_displaystandard_728x90_login_top%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=dfa2b852-f286-4780-a466-875a1c03f964&pubid=6b4befd3-bb9d-413d-bf7b-146588adacea&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202501030302&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/88342?bidder_id=246498&bidder_uuid=3159321825024285870831 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/js/car.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveAccept: application/javascriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/3159321825024285870831?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uspd/1/be96b820e5daac93?ct=1&ruidm=1&du=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Deplanning%26it%3Dadg-pb-clt%26uid%3D%24UID HTTP/1.1Host: ads.us.e-planning.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CT=1
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2887700627638155&correlator=3060502384863617&eid=31089671%2C31089200%2C31089528%2C83321072%2C31089253&output=ldjh&gdfp_req=1&vrg=202501030302&ptt=17&impl=fifs&gdpr=0&iu_parts=22786333977%2Capps.talktalk.co.uk_displaystandard_728x90_login_top&enc_prev_ius=%2F0%2F1&prev_iu_szs=728x90%7C468x60%7C300x50%7C300x100%7C320x50&ifi=1&didk=477881799&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1736637144880&lmt=1736637144&adxs=276&adys=98&biw=1280&bih=907&isw=728&ish=90&scr_x=0&scr_y=0&btvi=0&ucis=rfutr46gcbf6&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=3&nhd=1&url=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&ref=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&top=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&vis=1&psz=728x-1&msz=728x-1&fws=256&ohw=0&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1736637138929&idt=5922&prev_scp=amznbid%3D1%26amznp%3D1%26hb_bidder%3Dix%26hb_adid%3D28a3eb3e8d436a%26hb_pb%3D0.22%26hb_size%3D728x90%26hb_source%3Dclient%26hb_format%3Dbanner%26hb_adomain%3Ddell.com%26hb_dsp%3D81%26hb_crid%3D33959350&cust_params=amznbid%3D0%26amznp%3D0&adks=3161023586&frm=23&eoidce=1&td=1&egid=15786 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sync? HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIgAIQrNGPvcUyCgoIoQEQrNGPvcUyCgoI4gEQrNGPvcUyCgoI5gEQrNGPvcUyCgoIhwIQrNGPvcUyCgkIOhCs0Y-9xTIKCQgbEKzRj73FMgoKCIwCEKzRj73FMgoKCL8CEKzRj73FMgoJCF8QrNGPvcUy; receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=3390473262285885&correlator=2608971284095198&eid=31083346%2C31089671%2C31089674%2C31089528%2C83321073%2C31089253&output=ldjh&gdfp_req=1&vrg=202501030302&ptt=17&impl=fifs&gdpr=0&iu_parts=22786333977%2Capps.talktalk.co.uk_displaystandard_300x250_login_bottom&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C336x280%7C320x320%7C300x200%7C300x50%7C300x100%7C250x250%7C200x200%7C336x320%7C300x300%7C320x50&ifi=1&didk=93859726&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1736637144824&lmt=1736637144&adxs=155&adys=529&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=ilt518vlfu97&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=3&nhd=1&url=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&ref=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&top=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&vis=1&psz=300x-1&msz=300x-1&fws=256&ohw=0&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1736637138959&idt=5804&prev_scp=amznbid%3D1%26amznp%3D1%26hb_bidder%3Dix%26hb_adid%3D305ac27409d2c38%26hb_pb%3D0.05%26hb_size%3D300x250%26hb_source%3Dclient%26hb_format%3Dbanner%26hb_adomain%3Dadobe.com%26hb_dsp%3D81%26hb_crid%3D29239865&cust_params=amznbid%3D0%26amznp%3D0&adks=3655555281&frm=23&eoidce=1&gblpids=apps.talktalk.co.uk_displaystandard_300x250_Login_bottom&td=1&egid=15786 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /s/88342?bidder_id=246498&bidder_uuid=4099209890275096559476 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/88342?bidder_id=246498&bidder_uuid=3159321825024285870831&_li_chk=true&previous_uuid=58d555af4c8e4afb9d25cc578a0dec7b HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=58d555af-4c8e-4afb-9d25-cc578a0dec7b
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=beb8670a-646c-4cf0-a211-73ab4a2643bb&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=4099209890275096559476; tluid=4099209890275096559476
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dtriplelift%26it%3Dadg-pb-clt%26uid%3D%24UID&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIgAIQrNGPvcUyCgoIoQEQrNGPvcUyCgoI4gEQrNGPvcUyCgoI5gEQrNGPvcUyCgoIhwIQrNGPvcUyCgkIOhCs0Y-9xTIKCQgbEKzRj73FMgoKCIwCEKzRj73FMgoKCL8CEKzRj73FMgoJCF8QrNGPvcUy; receive-cookie-deprecation=1; tluidp=4099209890275096559476; tluid=4099209890275096559476
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=beb8670a-646c-4cf0-a211-73ab4a2643bb; TDCPM=CAESFgoHc3Z4OXQ1MBILCMS9xavup9k9EAUYASABKAIyCwj8s8jYhKjZPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=fradagio-pbs&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012410292120000/amp4ads-v0.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9msLnM7oUwVvDfEhlyRzYU\|t
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzE1OTMyMTgyNTAyNDI4NTg3MDgzMQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzE1OTMyMTgyNTAyNDI4NTg3MDgzMQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?gdpr=0&gdpr_consent= HTTP/1.1Host: tradehouse-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/4099209890275096559476?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync? HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIgAIQrNGPvcUyCgoIoQEQrNGPvcUyCgoI4gEQrNGPvcUyCgoI5gEQrNGPvcUyCgoIhwIQrNGPvcUyCgkIOhCs0Y-9xTIKCQgbEKzRj73FMgoKCIwCEKzRj73FMgoKCL8CEKzRj73FMgoJCF8QrNGPvcUy; receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /syncframe?origin=criteoPrebidAdapter&topUrl=apps.talktalk.co.uk&gpp= HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=QD0xYl8wJTJCNzhUdzJ3YmpFdmxFMGlGNVBrVyUyQmM3Y2olMkJrMmxsRHFvaUNlaGpvd1dyRTglMkZiRVZFUHQzUkklMkJ6amE2Y3lUUHl3SU1ZNUU1eTg5NEV2SmZrbDVrWE9aV2Y3REp4JTJGa0t3eDJkMU9reFNPOFlSaUhaOGxyRWxONVEzV0FvOGEzNw
Source: global traffic	HTTP traffic detected: GET /dcf3528a0b8aa83634892d50e91c306e/?ord=8240503542 HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcf3528a0b8aa83634892d50e91c306e/?ord=4921707118 HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon?informer=13418513 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u
Source: global traffic	HTTP traffic detected: GET /s/88342?bidder_id=246498&bidder_uuid=4099209890275096559476&_li_chk=true&previous_uuid=5416180b82494171ae1f404e9ca808bf HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=5416180b-8249-4171-ae1f-404e9ca808bf
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm=&google_sc=&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dtriplelift%26it%3Dadg-pb-clt%26uid%3D%24UID&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=4099209890275096559476; tluid=4099209890275096559476
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=beb8670a-646c-4cf0-a211-73ab4a2643bb&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=triplelift&it=adg-pb-clt&uid=3159321825024285870831 HTTP/1.1Host: u.4dex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJzeW5jcyI6eyIzM2Fjcm9zcyI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMzQ5OTk1ODgxWiIsIm9wZW54IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NzA0MjFaIiwicnRiaG91c2UiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjM0OTk1MzQ2MVoiLCJ0cmlwbGVsaWZ0IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NTI0MDFaIn0sInVpZHMiOnsiYWRhZ2lvIjp7InVpZCI6IjkzOWE4OGYxLWNkY2MtNDIxNC04OTFlLTlmMzdkYjU3ZmU4OSIsImV4cGlyZXMiOiIyMDI1LTAzLTEyVDIzOjEyOjIyLjAxNDk2MzA4M1oifX0sImJkYXkiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjAxNDYyMjM5M1oifQ==
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=4099209890275096559476; tluid=4099209890275096559476
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-gqUKcRlE2oSCacnDmpwIfLmB6tlNxIZ45HdY7AvNGg--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?gdpr=0&gdpr_consent= HTTP/1.1Host: tradehouse-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?cc=1&gdpr=0&gdpr_consent= HTTP/1.1Host: tradehouse-d.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=68cb6027-e3b9-42ee-bc29-eac30af31385\|1736637148
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDA5OTIwOTg5MDI3NTA5NjU1OTQ3Ng%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlQZ98ePgbd1LL426Dd_PimuaTkurtRMaQb9dIDuwL-HlUQ5PKCbSj1EUjy
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=fradagio-pbs&gdpr=0&gdpr_consent=&us_privacy=&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=6O8CrdwAbvdj7X72ugIy_1736637148195; ts=1736637148
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-96b851f9-7bb6-567e-717a-e943de1df0ac$ip$8.46.123.189&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9PPFg6pU0falsIufkso4cs\|t
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2/232/runner.html HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=3159321825024285870831 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9msLnM7oUwVvDfEhlyRzYU\|t
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=58d555af-4c8e-4afb-9d25-cc578a0dec7b&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=83&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=49&gdpr=0&gdpr_consent= HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=triplelift&user_id=3159321825024285870831&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/trl?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/v3/pr?exlist=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain&dcc=tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9msLnM7oUwVvDfEhlyRzYU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcf3528a0b8aa83634892d50e91c306e/?ord=8240503542&rd=1 HTTP/1.1Host: sync.richaudience.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=f1461603-8f9c-47eb-9269-1zz1736637148
Source: global traffic	HTTP traffic detected: GET /beacon?informer=13418513 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=triplelift&it=adg-pb-clt&uid=4099209890275096559476 HTTP/1.1Host: u.4dex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJzeW5jcyI6eyIzM2Fjcm9zcyI6IjIwMjUtMDEtMTFUMjM6MTI6MjIuMzQ5OTk1ODgxWiIsIm9wZW54IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NzA0MjFaIiwicnRiaG91c2UiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjM0OTk1MzQ2MVoiLCJ0cmlwbGVsaWZ0IjoiMjAyNS0wMS0xMVQyMzoxMjoyMi4zNDk5NTI0MDFaIn0sInVpZHMiOnsiYWRhZ2lvIjp7InVpZCI6IjkzOWE4OGYxLWNkY2MtNDIxNC04OTFlLTlmMzdkYjU3ZmU4OSIsImV4cGlyZXMiOiIyMDI1LTAzLTEyVDIzOjEyOjIyLjAxNDk2MzA4M1oifX0sImJkYXkiOiIyMDI1LTAxLTExVDIzOjEyOjIyLjAxNDYyMjM5M1oifQ==
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=68cb6027-e3b9-42ee-bc29-eac30af31385\|1736637148
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=146&gdpr={0,1}&gdpr_consent={consent_string}&gdpr=&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; pid=663029469554053203; receive-cookie-deprecation=1; sasd2=q=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638722339422217805&o=1; sasd=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=criteoPrebidAdapter&domain=apps.talktalk.co.uk&sn=ChromeSyncframe&so=0&topUrl=apps.talktalk.co.uk&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gum.criteo.com/syncframe?origin=criteoPrebidAdapter&topUrl=apps.talktalk.co.uk&gpp=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=QD0xYl8wJTJCNzhUdzJ3YmpFdmxFMGlGNVBrVyUyQmM3Y2olMkJrMmxsRHFvaUNlaGpvd1dyRTglMkZiRVZFUHQzUkklMkJ6amE2Y3lUUHl3SU1ZNUU1eTg5NEV2SmZrbDVrWE9aV2Y3REp4JTJGa0t3eDJkMU9reFNPOFlSaUhaOGxyRWxONVEzV0FvOGEzNw; uid=bcc42c3d-0af2-4389-b314-c089cca79755
Source: global traffic	HTTP traffic detected: GET /usersync/triplelift/?gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcf3528a0b8aa83634892d50e91c306e/?ord=4921707118&rd=1 HTTP/1.1Host: sync.richaudience.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=06380fd4-5228-4859-91fb-1zz1736637148
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=84625877&p=157660&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=sovrn&gdpr=&gdpr_consent=&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D108%263pid%3D%24UID&gdpr=&gdpr_consent= HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=e3b12303-5694-c6e3-26f1-a0bc06e7eb98 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9msLnM7oUwVvDfEhlyRzYU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /server_match?partner_id=1790&r=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dimprovedigital%26it%3Dadg-pb-clt%26uid%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?cc=1&gdpr=0&gdpr_consent= HTTP/1.1Host: tradehouse-d.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; pd=v2\|1736637149\|iKgavPkWvMgy; i=6d261964-9def-45e9-a5eb-309392c48e5f\|1736637149
Source: global traffic	HTTP traffic detected: GET /77781087eb9a0621642f9ebec6beb8d1.gif?puid=[UID]&redir=[RED]&gdpr=&gdpr_consent= HTTP/1.1Host: cs.krushmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rtbhouse&uid=RvahZfiMhKoJu9DvTEKlsUgflrcdVXNju76RbWp03cI&pi=fradagio-pbs&gdpr=0&gdpr_consent=&us_privacy=&tc=1 HTTP/1.1Host: u.4dex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1736637148754&gdpr=&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub10014056052800&gdpr=&gdpr_consent= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=bb675f7e-4a3e-7d19-e6ff-222b6ed42078&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=beb8670a-646c-4cf0-a211-73ab4a2643bb; TDCPM=CAESFgoHc3Z4OXQ1MBILCOCag7Pup9k9EAUYASABKAIyCwjSkIbghKjZPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=3cc4b2f6-c7e1-439a-8174-b6dbb96bcabf&r=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dopenx%26it%3Dadg-pb-clt%26uid%3D%7BOPENX_ID%7D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; pd=v2\|1736637149\|iKgavPkWvMgy; i=6d261964-9def-45e9-a5eb-309392c48e5f\|1736637149
Source: global traffic	HTTP traffic detected: GET /sync/openx/2fa0393a-da92-ef50-d728-34de9183ed31?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNz6gmcCEBvIHbSgu81OPNRig_3XCegFEgEBAQFMhGeMZwAAAAAA_eMAAA&S=AQAAAhQlV_TwbdgrCYXZiW8hho0
Source: global traffic	HTTP traffic detected: GET /triplelift HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=OTcwODhjYjQtODM0OS0yM2JkLWYzMWYtNzg5MmE0MzZlZTE4 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012410292120000/v0/amp-ad-exit-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012410292120000/v0/amp-analytics-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012410292120000/v0/amp-fit-text-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012410292120000/v0/amp-form-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=aps&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user-sync/amazon/redirect?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=QD0xYl8wJTJCNzhUdzJ3YmpFdmxFMGlGNVBrVyUyQmM3Y2olMkJrMmxsRHFvaUNlaGpvd1dyRTglMkZiRVZFUHQzUkklMkJ6amE2Y3lUUHl3SU1ZNUU1eTg5NEV2SmZrbDVrWE9aV2Y3REp4JTJGa0t3eDJkMU9reFNPOFlSaUhaOGxyRWxONVEzV0FvOGEzNw; uid=bcc42c3d-0af2-4389-b314-c089cca79755
Source: global traffic	HTTP traffic detected: GET /e1edfb9aa2a9066a203a7fce17c3a388.gif?puid=%5BUID%5D&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dacuity.com%26id%3D%5BUID%5D&gdpr=0 HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?pubid=11405&redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dloopme.com%26id%3D%7Bviewer_token%7D&gdpr=0 HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=113&callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /server_match?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dazerion.com%26id%3D%7BPUB_USER_ID%7D&gdpr=0 HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/cs/amazon?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: trace-eu.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=JljebmeC+t7ZPZQVGk4h5w==
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=e3b12303-5694-c6e3-26f1-a0bc06e7eb98 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9PPFg6pU0falsIufkso4cs
Source: global traffic	HTTP traffic detected: GET /tamptsync?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dym.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: sync-amz.ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_281.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://2353bee1e702193d8a081ea08f00dcb6.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://2353bee1e702193d8a081ea08f00dcb6.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /server_match?partner_id=2048&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richaudience.com%2F056f32ee5cf49404607e368bd8d3f2af%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.richaudience.com%2Fa566db6afba33978322ef47fa16ca6fe%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D$UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u; ljtrtbexp=eJxlkEkOgDAMA%2F%2FSM4dmaRa%2Bhvg7olSCmOM4sWLnaNx2cvFQc82tmVV2Al5zVsqbM9OnYs4ylhLVE70ywY0QYAUewOBn8PMzN4sukx0yQ%2BfV4M3XGQVBASLobwF%2BQASP1Kw84hv6vABP8FGH
Source: global traffic	HTTP traffic detected: GET /merge?pid=76&3pid=d78981be-a08a-4714-a143-948d16651f2a&gdpr=&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u; ljtrtbexp=eJxlkEkOgDAMA%2F%2FSM4dmaRa%2Bhvg7olSCmOM4sWLnaNx2cvFQc82tmVV2Al5zVsqbM9OnYs4ylhLVE70ywY0QYAUewOBn8PMzN4sukx0yQ%2BfV4M3XGQVBASLobwF%2BQASP1Kw84hv6vABP8FGH
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.richaudience.com%2Fa939d25b950298d0a5d324cea4fcd3d1%2F%3Fuid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=openx&it=adg-pb-clt&uid=328022a8-e300-48d6-b394-c55c2d61b44a HTTP/1.1Host: u.4dex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=10251C91-83A6-44D2-8672-A4A9C194681E HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=bb675f7e-4a3e-7d19-e6ff-222b6ed42078&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=beb8670a-646c-4cf0-a211-73ab4a2643bb; TDCPM=CAESFgoHc3Z4OXQ1MBILCOCag7Pup9k9EAUYASABKAIyCwjSkIbghKjZPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=10251C91-83A6-44D2-8672-A4A9C194681E&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9msLnM7oUwVvDfEhlyRzYU
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=QD0xYl8wJTJCNzhUdzJ3YmpFdmxFMGlGNVBrVyUyQmM3Y2olMkJrMmxsRHFvaUNlaGpvd1dyRTglMkZiRVZFUHQzUkklMkJ6amE2Y3lUUHl3SU1ZNUU1eTg5NEV2SmZrbDVrWE9aV2Y3REp4JTJGa0t3eDJkMU9reFNPOFlSaUhaOGxyRWxONVEzV0FvOGEzNw; uid=bcc42c3d-0af2-4389-b314-c089cca79755
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2 HTTP/1.1Host: b1sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDA5OTIwOTg5MDI3NTA5NjU1OTQ3Ng%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE; APC=AfxxVi6Y6IiuM_kCZ2C474KwKpq7nnNvcd3SHlUPjPkr2itn72E3GQ
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=criteoPrebidAdapter&domain=apps.talktalk.co.uk&sn=ChromeSyncframe&so=0&topUrl=apps.talktalk.co.uk&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gum.criteo.com/syncframe?origin=criteoPrebidAdapter&topUrl=apps.talktalk.co.uk&gpp=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=QD0xYl8wJTJCNzhUdzJ3YmpFdmxFMGlGNVBrVyUyQmM3Y2olMkJrMmxsRHFvaUNlaGpvd1dyRTglMkZiRVZFUHQzUkklMkJ6amE2Y3lUUHl3SU1ZNUU1eTg5NEV2SmZrbDVrWE9aV2Y3REp4JTJGa0t3eDJkMU9reFNPOFlSaUhaOGxyRWxONVEzV0FvOGEzNw; uid=bcc42c3d-0af2-4389-b314-c089cca79755
Source: global traffic	HTTP traffic detected: GET /?partner=214&mapped=10251C91-83A6-44D2-8672-A4A9C194681E&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=MTAyNTFDOTEtODNBNi00NEQyLTg2NzItQTRBOUMxOTQ2ODFF&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE; APC=AfxxVi6Y6IiuM_kCZ2C474KwKpq7nnNvcd3SHlUPjPkr2itn72E3GQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=ECUckYOmRNKGcqSpwZRoHg%3D%3D&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE; APC=AfxxVi6Y6IiuM_kCZ2C474KwKpq7nnNvcd3SHlUPjPkr2itn72E3GQ
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=beb8670a-646c-4cf0-a211-73ab4a2643bb; TDCPM=CAESFgoHc3Z4OXQ1MBILCOCag7Pup9k9EAUYASABKAIyCwjSkIbghKjZPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; pid=663029469554053203; receive-cookie-deprecation=1; sasd2=q=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638722339422217805&o=1; sasd=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /s/v3/pr?exlist=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain&dcc=tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9msLnM7oUwVvDfEhlyRzYU
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=10251C91-83A6-44D2-8672-A4A9C194681E&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/openx/2fa0393a-da92-ef50-d728-34de9183ed31?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNz6gmcCEBvIHbSgu81OPNRig_3XCegFEgEBAQFMhGeMZwAAAAAA_eMAAA&S=AQAAAhQlV_TwbdgrCYXZiW8hho0
Source: global traffic	HTTP traffic detected: GET /ul_cb/server_match?partner_id=1790&r=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dimprovedigital%26it%3Dadg-pb-clt%26uid%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=40e6ea1a-d9ee-4f6e-accc-2732e1e6ad2a; tuuid_lu=1736637150
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=smart-adserver&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=beb8670a-646c-4cf0-a211-73ab4a2643bb; TDCPM=CAESFgoHc3Z4OXQ1MBILCOCag7Pup9k9EAUYASACKAIyCwjSkIbghKjZPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE; APC=AfxxVi6Y6IiuM_kCZ2C474KwKpq7nnNvcd3SHlUPjPkr2itn72E3GQ
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=acuity.com&id=4a48311d-3330-4bf4-9fd5-11af81574bcb HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9msLnM7oUwVvDfEhlyRzYU
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=k3eNWWeC+t4HOLzCMGeTJA==
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=OTcwODhjYjQtODM0OS0yM2JkLWYzMWYtNzg5MmE0MzZlZTE4 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE; APC=AfxxVi6Y6IiuM_kCZ2C474KwKpq7nnNvcd3SHlUPjPkr2itn72E3GQ
Source: global traffic	HTTP traffic detected: GET /sync?ssp=criteo&custom_data=1sLcKV9sbVlnbDRCNXhpdzVGNU5iNUZzb29WUGF2WSUyQmZ2Ujl5WUZIcEo5bUpLUyUyRkNKTXhrNHlkZnBxcVJoYmJ1MmhBMURHTmRHeTJMU0dJamJISG9FZ0clMkZFeXJNQmZaSnpyMSUyQkdVd1MxOW05SjJFN3E0d0xFQXY4SHJxazR0aXVuamRFdkZIancxenYzNGFyckQ3MzJxQSUyQjZ5S3duYmFkV0J6eCUyRnhiWXd0SmlIeUtsckpDWWdvY1Y1TGRZUmpQSXMlMkJIbVc1REljTkRsUWVDMXNNaEZ6TVNZbVZ1NFhnc2ZPN0VoMHhyU2FvWFdTMHkwV1o0dW9aMDVMWUQlMkZtSTRYSE5OYw&gpp=&gpp_sid=&gdpr=0&gdpr_consent=&us_privacy=&cr_user_id=k-JW5i-NOmbR6ChIAa1Sd6UgqRwzN_foyZCtvStw HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=themediagrid&gdpr=0 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=loopme.com&id=1525c4ac-dadf-4137-a3b7-5aac436728bb&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9msLnM7oUwVvDfEhlyRzYU
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=smaato.com&id=37c58103ee HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9msLnM7oUwVvDfEhlyRzYU
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=baidu.com&id=22210ca7808a0d042r7omg00m5ssx5l5 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9PPFg6pU0falsIufkso4cs
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&ts=1736637150839.2&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212954090724953%3As1%3D1736637149735%3Ats%3D1736637149735
Source: global traffic	HTTP traffic detected: GET /ul_cb/server_match?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dazerion.com%26id%3D%7BPUB_USER_ID%7D&gdpr=0 HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid_lu=1736637150; tuuid=2642f41d-0094-4ab9-a7a8-9c03db6bf8b0
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=5416180b-8249-4171-ae1f-404e9ca808bf&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjZhN2Q5NWI2LWExNGMtNDUzZC05YzUxLWZiNWU2OWRkN2ZkMCIsImwiOjE3MzY2MzcxNDk1ODIsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=83&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=dcfeeb19-4276-4a8f-b50d-57b6c0c25ca6#1736637149582
Source: global traffic	HTTP traffic detected: GET /sync?_reach=1&vxii_pdid=58d555af-4c8e-4afb-9d25-cc578a0dec7b&vxii_pid=12&vxii_pid1=7006&vxii_rcid=6a7d95b6-a14c-453d-9c51-fb5e69dd7fd0&vxii_rmax=3 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjZhN2Q5NWI2LWExNGMtNDUzZC05YzUxLWZiNWU2OWRkN2ZkMCIsImwiOjE3MzY2MzcxNDk1ODIsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /usersync/triplelift/?gdpr=0&gdpr_consent=&gpp=&gpp_sid=&s=2 HTTP/1.1Host: b1sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEG0juINxlUWyWhxDVzh0Puc&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=cnv.com&id=AQAJ_cL5xKdNQwJKvSb9AQEBAQEBAQCVVqL4cQEBAJVWovhx&expiration=1736723551&is_secure=true&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9msLnM7oUwVvDfEhlyRzYU
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=83&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=dcfeeb19-4276-4a8f-b50d-57b6c0c25ca6#1736637149582
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDc9Yu8BjABOgT87-jmQgT-z5KO.R7QHVy4drquXZunYefWpqlQGgKshkRO7P2P2hd4QPfc
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=b62f8e24-5e76-4430-a071-7ef1198e6a77\|1736637149589
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEMmwgrvvBaRnNS_ZDz8qIPs&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&obuid=12eb4f51-f7e5-4608-9209-8e09f165cc13&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=kliEWZfFmkeV8WQMh0P0
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3702&xuid=b62f8e24-5e76-4430-a071-7ef1198e6a77&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-Q5IuELJE2oQf40EgAz4nmKDrpGKPgAojzNCDtdvudg--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-96b851f9-7bb6-567e-717a-e943de1df0ac$ip$8.46.123.189&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE; APC=AfxxVi6Y6IiuM_kCZ2C474KwKpq7nnNvcd3SHlUPjPkr2itn72E3GQ
Source: global traffic	HTTP traffic detected: GET /cookie-sync/trl?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /cookie-sync/trl?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /sync?ssp=triplelift&user_id=3159321825024285870831&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=bcc42c3d-0af2-4389-b314-c089cca79755; cto_bundle=A33dBV8wbXE4YkpEMFNZS21yeENHY2xxUGZKSWNCciUyRnVBYkFocmcxeW1PNVYzaE9Hc0taUkVxZGNjSXk2YmpxTXk4YUtvQzdWeklVRU9HQlhiYjZZckd0c0hqdDJHMVc5NWlnaSUyQnBSVUZZWDFnVHh1cFc2NXNwdkRmME9DSjhoQnpLa2w1czRhcUxEdkpDN3ZhZnpuRGJUSVp3JTNEJTNE
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=49&gdpr=0&gdpr_consent= HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7733111983758050163
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=improvedigital&it=adg-pb-clt&uid=40e6ea1a-d9ee-4f6e-accc-2732e1e6ad2a HTTP/1.1Host: u.4dex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=75&issi=1&partneruserid=beb8670a-646c-4cf0-a211-73ab4a2643bb&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; pid=663029469554053203; receive-cookie-deprecation=1; sasd2=q=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638722339422217805&o=1; sasd=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /ps/?_=1736637150839.&ri=0015a00002oUk4aAAC&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212954090724953%3As1%3D1736637149735%3Ats%3D1736637149735
Source: global traffic	HTTP traffic detected: GET /ps/?ts=1736637150839.6&ri=129&us_privacy=&gpp_sid=&gpp=&ru=https%3A%2F%2Ft.adx.opera.com%2Fpub%2Fsync%3Fpubid%3Dpub11169426274368%26coppa%3D%26us_privacy%3D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212954090724953%3As1%3D1736637149735%3Ats%3D1736637149735
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=10251C91-83A6-44D2-8672-A4A9C194681E&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNz6gmcCEBvIHbSgu81OPNRig_3XCegFEgEBAQFMhGeMZwAAAAAA_eMAAA&S=AQAAAhQlV_TwbdgrCYXZiW8hho0
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsscIMacMKM9LqSVZlMXduB6rFBMnIDiCYhpJsAkiNV1j9OwSX7_o3rf7TIa0yr6uJq1MzgoG-5YC9c-yNI4qbwu6yIdkUre3paapPWvKPzKcvl4j82vLKYILLQVGk0t3Prh7zadCGY4OXtWpaoxcZdWSsvmlS7OmULTO1bCxdFt5qoalGgUbrWPwyiKp6GSwKP8oxEIbgIwSATRsY5vUJCdNTe-rNEmd1N5xBvZ1PhLRTKzkIv1ueOm-WMmepP5S7aFMOnIcZJX4UwVlSPQwxW9XDx0tYBsCFX_WoKuRJoijYWh-GgcCDfLCCqjTxhme-PjXoXl_A4jcpPbPrD9fu-h5PfN1-PTRC12ERIgghwgSUyR7jrlm-_YErVXb2wDn1f_fbUdncdNDxkB2h6tu4rTwYlw2na9mFjb6zHe9-k9sefIebIWvnDcewTtG4V975ILv3Xoecpi5X-sTA5lkihqFXd_sKb21Upe-UqvtK5l9OLghfjd0Gv1Rrad7EhZCLH8PlbIsZU-rr0XDwMJJ-gwl9z4l4wfO9HHEBI2o7EisNPeEmlIUSUlvC6HdUN7keK-cin8VLcYgmTq2z_qczpf42nk-asi7L2aEZqFbv0H9DJLhOh9H68YmBksJX8lvZ2zACp_ySUTqmvaHuS9BCfDHk9lAIBNjS0WFj4h-_kSsOfboXbhFggMRo60R-bV0ejrWw9zF-mCfBuVi4oaiQY_jym-TTuOz4n_j6qo8YCVO21lteDNVdPkUB8tQIXRybAOt3a60Xe0A9nGke12phLs5YCL34_TdIQ-rD1TTco3kArhX3dfav0mvu-Y_r1o0KUz_7bkkUfirSCG38aB8k_YrJyOOUG9ChDi50iZsFgJyS6rs_t-DHn49MWJ75gqoAU8jDPo-KLKmfEfAlxL2hrBgE0jScFCm-0OqdBvgAxHzOn2dCu_uDHHVeXct_HG0nKgZhuMJcebk7HmID80UoizSpzNJOAS2pSmf6uzLnUQZ5wPw-RVKHDT_GtwgQzLZWqI5AWsNoh7C1X04QDyffZtjaedR07MR_SQCcAOTXc3TcK25Za4UCkutPTV9f7yqK0xoJFu7lTFiam9eTaepHPHF9RTflkpa5CdOGfq622U8MJ0mqoczgl5koW9-OXDzPtx0tjb6S3b7_vBlTdVGxMf1eT72pTv8opI56-xOtWbmQ8PxgUIfGdl0xjNh6O_Fcv1pktSm7JYhsTtZMi1oKEu4Z0sAXqdaVwOM8VG_u5-0qDJnpCeIJUiig-5Uxlf7_MJBZUp59gnZrANvehpetnWYv5RuVXJCCcBwnsE6DeIDED2r6tmfi-Gi1MrpM3g3fOpq9nIXsrV1youvH2rMkF-M708m4wcVcm7qRLaxPW9zcW39biTiuPu1enrjFw4KyOmfsWmq7ISyotgZiat05vMXzaqC20Vbrh_4HbeB_lHB21kPiYNFSLqLcvMP_O3-fzNVdMnLfNho15W7dTCRp-1S1HT5y3ui_gSwkOwyHDtZ65SJLbKj3QNfWnrDtZMDpaJIHGBOp-b3hE&sai=AMfl-YQr0y0u4D0rsRxc4DnhSetqKnZ4_OsstCqjxWiF6U8reHweZbFOu5b1r4UXrj7ghlDKwqL1gPkgBUQhbVZtXp2OvD78p26mGUMfKhNZZreoee8KzNBNX3zI6LlradqQd2cIHRjFEAb4DfXX8IpMQYKduTbyA9tNmQXGvUyy_S-yaRsVY2ojERpLLa15JZwiOJnanYed_wjIdVWxidQ8b173x_bsLO4hXH7MNoge4fI0rjIEQi9YV76LVzCvl60Vz3H8H0790aBTyppT6L4SqPpHq6HhncdCl3NFmfuBpj9bjDRx_uc&sig=Cg0ArKJSzNDxSujk8QF3EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9pcm9ib3QuY29t&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1359&cbvp=1&cstd=1349&cisv=r20250108.51763&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, not-navigation-source, not-triggerReferer: https://2353bee1e702193d8a081ea08f00dcb6.safeframe.googlesyndication.com/Accept-Encoding: gzip, defla
Source: global traffic	HTTP traffic detected: GET /sadbundle/15449214280305384078/index.html?ev=01_253 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://2353bee1e702193d8a081ea08f00dcb6.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; pid=663029469554053203; receive-cookie-deprecation=1; sasd2=q=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638722339422217805&o=1; sasd=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=3159321825024285870831 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9PPFg6pU0falsIufkso4cs
Source: global traffic	HTTP traffic detected: GET /verify.js?ctx=22028527&cmp=32927927&sid=6921079&plc=411654966&crt=227524103&advid=9251674&adsrv=1&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&unit=728x90&prr=1&turl=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&aucmp=22080093835&auevent=ABAjH0htc-RI27SNFbNB_v9ol3fi&autt=1&ppid=103&aucrtv=618557214&auorder=1019743255&pltfrm=1&ausite=18022376301&auxch=1&aufilter1=849131&c1=849131&adid=&app=&dup=&gmnpo=&isdvvid=&supplySource=&tagtype=&aUrlD=-1&brid=3&bridua=3&brver=117.0.0.0&brh=3&vavbkt=&lvvn=28&fcifrms=10&winh=90&winw=728&chro=1&noc=4&wouh=984&wouw=1280&htmlmsging=1&refD=2&scah=984&scaw=1280&jsver=7057&uid=1736637151024177&srcurlD=1&ttfrms=61&num=6&dvp_isOnHead=0&flvr=1&ver=7057&jsCallback=__verify_callback_1736637151024177&jsTagObjCallback=__tagObject_callback_1736637151024177&ssl=1&m1=96&blkmode=2&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=38260804504.366264&ee_dp_sukv=38260804504.366264&dvp_tukv=9613644610.659935&ee_dp_tukv=9613644610.659935&dvp_strhd=0.5999999999767169&dvpx_strhd=0.5999999999767169&eparams=DC4FC%3Dl9EEADTbpTauTau2AAD%5DE2%3D%3CE2%3D%3C%5D4%40%5DF%3CTauU2%3F4r92%3A%3Fl9EEADTbpTauTau2AAD%5DE2%3D%3CE2%3D%3C%5D4%40%5DF%3CTar9EEADTbpTauTau2AAD%5DE2%3D%3CE2%3D%3C%5D4%40%5DF%3CTar9EEADTbpTauTauabdb366%606f_a%60hb5g2_g%6062_g7__543e%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3EU2%26C%3Dl9EEADTbpTauTau2AAD%5DE2%3D%3CE2%3D%3C%5D4%40%5DF%3CTau2AADF%3AE6Tau&referrer=https%3A%2F%2F2353bee1e702193d8a081ea08f00dcb6.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html%3Fn%3D1&dvp_rdyst=interactive&dvp_excm=2 HTTP/1.1Host: rtb0.doubleverify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://2353bee1e702193d8a081ea08f00dcb6.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=4&gdpr=0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=dcfeeb19-4276-4a8f-b50d-57b6c0c25ca6#1736637149582
Source: global traffic	HTTP traffic detected: GET /sync?ssp=the33across&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=6d261964-9def-45e9-a5eb-309392c48e5f\|1736637149; pd=v2\|1736637149.1\|iKgavPkWvMgy.mmf8uYbwg2hE
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID} HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=b62f8e24-5e76-4430-a071-7ef1198e6a77\|1736637149589
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=beb8670a-646c-4cf0-a211-73ab4a2643bb&ttd_puid=bb675f7e-4a3e-7d19-e6ff-222b6ed42078&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=6d261964-9def-45e9-a5eb-309392c48e5f\|1736637149; pd=v2\|1736637149.1\|iKgavPkWvMgy.mmf8uYbwg2hE
Source: global traffic	HTTP traffic detected: GET /ups/58350/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00002oUk4aAAC&ru=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3D33across%26it%3Dadg-pb-clt%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNz6gmcCEBvIHbSgu81OPNRig_3XCegFEgEBAQFMhGeMZwAAAAAA_eMAAA&S=AQAAAhQlV_TwbdgrCYXZiW8hho0
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=6d261964-9def-45e9-a5eb-309392c48e5f\|1736637149; pd=v2\|1736637149.1\|iKgavPkWvMgy.mmf8uYbwg2hE
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1955&partner_device_id=b8f455c1-6f6f-4799-b5dc-60adc56f7cae HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEClN-tsFVzIMrBiBxmTLdTo&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=6d261964-9def-45e9-a5eb-309392c48e5f\|1736637149; pd=v2\|1736637149.1\|iKgavPkWvMgy.mmf8uYbwg2hE
Source: global traffic	HTTP traffic detected: GET /usersync/triplelift/?gdpr=0&gdpr_consent=&gpp=&gpp_sid=&obuid=683f645f-b09f-498b-99a1-9a0759708933&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=kliEWZfFmkeV8WQMh0P0
Source: global traffic	HTTP traffic detected: GET /sync?ssp=themediagrid&gdpr=0 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.talktalk.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=brgeu23&ttd_tpi=1&TTD_PUID=6a7d95b6-a14c-453d-9c51-fb5e69dd7fd0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=beb8670a-646c-4cf0-a211-73ab4a2643bb; TDCPM=CAESFgoHc3Z4OXQ1MBILCOCag7Pup9k9EAUYASABKAIyCwjqr5j_hKjZPRAFOAFaDnNtYXJ0LWFkc2VydmVyYAI.
Source: global traffic	HTTP traffic detected: GET /usersync/triplelift/?gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=kliEWZfFmkeV8WQMh0P0
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=sovrn&gdpr=&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=6O8CrdwAbvdj7X72ugIy_1736637148195; ts=1736637148
Source: global traffic	HTTP traffic detected: GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=_mazoGO__LFEJCdcVXokXMeDdlEP-_VSJ-5gnKcFtETw5kr6tRXLKrpcZpwUC-V3KXv44uLqaWDm-c0qEhjkApoRYYaIg-3_T41MoRsZI-0.; uuid2=6844335515357940101
Source: global traffic	HTTP traffic detected: GET /s/x/ae12848777b41970a5f2?gdpr=&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9msLnM7oUwVvDfEhlyRzYU
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=_mazoGO__LFEJCdcVXokXMeDdlEP-_VSJ-5gnKcFtETw5kr6tRXLKrpcZpwUC-V3KXv44uLqaWDm-c0qEhjkApoRYYaIg-3_T41MoRsZI-0.; uuid2=6844335515357940101
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=9&gdpr=0 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tradehouse-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7733111983758050163
Source: global traffic	HTTP traffic detected: GET /sync/prebid?r=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3Dff96d1aa62deeebd%26fi%3D0b6f23bc6d82347f%26uid%3D%24%7BUID%7D HTTP/1.1Host: rtb.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.us.e-planning.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=6d261964-9def-45e9-a5eb-309392c48e5f\|1736637149; pd=v2\|1736637149.1\|iKgavPkWvMgy.mmf8uYbwg2hE
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3D8103fa85295fbe60%26fi%3D0b6f23bc6d82347f%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.us.e-planning.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=_mazoGO__LFEJCdcVXokXMeDdlEP-_VSJ-5gnKcFtETw5kr6tRXLKrpcZpwUC-V3KXv44uLqaWDm-c0qEhjkApoRYYaIg-3_T41MoRsZI-0.; uuid2=6844335515357940101
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=M5SSWYZN-12-9XYK HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u; ljtrtbexp=eJxlkEkOgDAMA%2F%2FSM4dmaRa%2Bhvg7olSCmOM4sWLnaNx2cvFQc82tmVV2Al5zVsqbM9OnYs4ylhLVE70ywY0QYAUewOBn8PMzN4sukx0yQ%2BfV4M3XGQVBASLobwF%2BQASP1Kw84hv6vABP8FGH; _ljtrtb_76=d78981be-a08a-4714-a143-948d16651f2a
Source: global traffic	HTTP traffic detected: GET /merge?pid=106&3pid=663029469554053203&gdpr=0&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u; ljtrtbexp=eJxlkEkOgDAMA%2F%2FSM4dmaRa%2Bhvg7olSCmOM4sWLnaNx2cvFQc82tmVV2Al5zVsqbM9OnYs4ylhLVE70ywY0QYAUewOBn8PMzN4sukx0yQ%2BfV4M3XGQVBASLobwF%2BQASP1Kw84hv6vABP8FGH; _ljtrtb_76=d78981be-a08a-4714-a143-948d16651f2a
Source: global traffic	HTTP traffic detected: GET /merge?3pid=OPUdc74586cd6484defa10b89daa5d2b832&gdpr=&gdpr_consent=&pid=103 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u; ljtrtbexp=eJxlkEkOgDAMA%2F%2FSM4dmaRa%2Bhvg7olSCmOM4sWLnaNx2cvFQc82tmVV2Al5zVsqbM9OnYs4ylhLVE70ywY0QYAUewOBn8PMzN4sukx0yQ%2BfV4M3XGQVBASLobwF%2BQASP1Kw84hv6vABP8FGH; _ljtrtb_76=d78981be-a08a-4714-a143-948d16651f2a
Source: global traffic	HTTP traffic detected: GET /sync?ssp=fmx&us_privacy=&gdpr=&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=2d4bcca8-77e8-4a99-a68a-f5d3d4019521; c=1736637151; tuuid_lu=1736637151
Source: global traffic	HTTP traffic detected: GET /merge?pid=83&3pid=M5SSWYZN-12-9XYK HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u; ljtrtbexp=eJxlkEkOgDAMA%2F%2FSM4dmaRa%2Bhvg7olSCmOM4sWLnaNx2cvFQc82tmVV2Al5zVsqbM9OnYs4ylhLVE70ywY0QYAUewOBn8PMzN4sukx0yQ%2BfV4M3XGQVBASLobwF%2BQASP1Kw84hv6vABP8FGH; _ljtrtb_76=d78981be-a08a-4714-a143-948d16651f2a
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D92%25263pid%253D%2524UID%26gdpr%3D%26gdpr_consent%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=_mazoGO__LFEJCdcVXokXMeDdlEP-_VSJ-5gnKcFtETw5kr6tRXLKrpcZpwUC-V3KXv44uLqaWDm-c0qEhjkApoRYYaIg-3_T41MoRsZI-0.; uuid2=6844335515357940101
Source: global traffic	HTTP traffic detected: GET /merge?pid=108&3pid=4ad7cf37d3 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u; ljtrtbexp=eJxlkEkOgDAMA%2F%2FSM4dmaRa%2Bhvg7olSCmOM4sWLnaNx2cvFQc82tmVV2Al5zVsqbM9OnYs4ylhLVE70ywY0QYAUewOBn8PMzN4sukx0yQ%2BfV4M3XGQVBASLobwF%2BQASP1Kw84hv6vABP8FGH; _ljtrtb_76=d78981be-a08a-4714-a143-948d16651f2a
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEIUkKwe62rcTNCLGbX30P5o&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=10251C91-83A6-44D2-8672-A4A9C194681E; chkChromeAb67Sec=1; pi=157660:2; DPSync4=1737763200%3A219_226_227_197; SyncRTB4=1737763200%3A220_201_13_56_251_21_54_71%7C1737849600%3A35%7C1737158400%3A223
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3107&partner_device_id=xEF_FccQQYcYfrS0Tdmx HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync-amz.ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=5F212319CBE740DD9F254BC46D7B2408 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u; ljtrtbexp=eJxlkEkOgDAMA%2F%2FSM4dmaRa%2Bhvg7olSCmOM4sWLnaNx2cvFQc82tmVV2Al5zVsqbM9OnYs4ylhLVE70ywY0QYAUewOBn8PMzN4sukx0yQ%2BfV4M3XGQVBASLobwF%2BQASP1Kw84hv6vABP8FGH; _ljtrtb_76=d78981be-a08a-4714-a143-948d16651f2a
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=10251C91-83A6-44D2-8672-A4A9C194681E; chkChromeAb67Sec=1; pi=157660:2; DPSync4=1737763200%3A219_226_227_197; SyncRTB4=1737763200%3A220_201_13_56_251_21_54_71%7C1737849600%3A35%7C1737158400%3A223
Source: global traffic	HTTP traffic detected: GET /triplelift HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=B7E3F9B1FF1049358EC3CE755E2EFA64
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3702&xuid=b62f8e24-5e76-4430-a071-7ef1198e6a77&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=_mazoGO__LFEJCdcVXokXMeDdlEP-_VSJ-5gnKcFtETw5kr6tRXLKrpcZpwUC-V3KXv44uLqaWDm-c0qEhjkApoRYYaIg-3_T41MoRsZI-0.; uuid2=6844335515357940101
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=10251C91-83A6-44D2-8672-A4A9C194681E&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dsp/google/cookiematch/beacon?gdpr=&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_IQABZH33sJYiZARWaomX1u; ljtrtbexp=eJxlkEkOgDAMA%2F%2FSM4dmaRa%2Bhvg7olSCmOM4sWLnaNx2cvFQc82tmVV2Al5zVsqbM9OnYs4ylhLVE70ywY0QYAUewOBn8PMzN4sukx0yQ%2BfV4M3XGQVBASLobwF%2BQASP1Kw84hv6vABP8FGH; _ljtrtb_76=d78981be-a08a-4714-a143-948d16651f2a
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7255&xuid=AAKo707PBfYAABZOJjvdIA&dongle=bzwx&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNz6gmcCEBvIHbSgu81OPNRig_3XCegFEgEBAQFMhGeMZwAAAAAA_eMAAA&S=AQAAAhQlV_TwbdgrCYXZiW8hho0
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.richaudience.com%252Fa939d25b950298d0a5d324cea4fcd3d1%252F%253Fuid%253D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=_mazoGO__LFEJCdcVXokXMeDdlEP-_VSJ-5gnKcFtETw5kr6tRXLKrpcZpwUC-V3KXv44uLqaWDm-c0qEhjkApoRYYaIg-3_T41MoRsZI-0.; uuid2=6844335515357940101
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE; APC=AfxxVi6Y6IiuM_kCZ2C474KwKpq7nnNvcd3SHlUPjPkr2itn72E3GQ
Source: global traffic	HTTP traffic detected: GET /ul_cb/server_match?partner_id=2048&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richaudience.com%2F056f32ee5cf49404607e368bd8d3f2af%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=195cd12e-df0e-42de-a9cc-8e3e1f94143e; tuuid_lu=1736637151
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE; APC=AfxxVi6Y6IiuM_kCZ2C474KwKpq7nnNvcd3SHlUPjPkr2itn72E3GQ
Source: global traffic	HTTP traffic detected: GET /xuid?mid=4771&xuid=7733111983758050163&dongle=d407&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /xuid?mid=6732&dongle=38F&xuid=AQAG7hxT74TaZgJ8mL4vAQEBAQEBAQCVVqLwqAEBAJVWovCo&expiration=1736723549&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=beb8670a-646c-4cf0-a211-73ab4a2643bb; TDCPM=CAESFgoHc3Z4OXQ1MBILCOCag7Pup9k9EAUYASABKAIyCwjqr5j_hKjZPRAFOAFaDnNtYXJ0LWFkc2VydmVyYAI.
Source: global traffic	HTTP traffic detected: GET /esb/4/1/3fb8/7bb4893a30d21aef/retargetly_030920.js HTTP/1.1Host: s.e-planning.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.us.e-planning.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: E=AEkTMpxuUY2aBGs6
Source: global traffic	HTTP traffic detected: GET /f7872c90c5d3791e2b51f7edce1a0a5d/?p=25BiP9IMgN&r=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fuid%3D[PDID]%26dc%3Dfabfd6762b833237%26fi%3D0b6f23bc6d82347f HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.us.e-planning.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=06380fd4-5228-4859-91fb-1zz1736637148; raibs=1
Source: global traffic	HTTP traffic detected: GET /esb/4/0/1992d/f6ee63a0c2353004/lotame20220615.js HTTP/1.1Host: s.e-planning.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.us.e-planning.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: E=AEkTMpxuUY2aBGs6
Source: global traffic	HTTP traffic detected: GET /getuid?url=https%3A%2F%2Fsync.richaudience.com%2F1a12a024f8f9561c49164bbaf87ed164%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D[sas_uid]&gdpr=0&gdpr_consent=&nwid=2441/ HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; pid=663029469554053203; receive-cookie-deprecation=1; sasd2=q=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638722339422217805&o=1; sasd=%24qc%3D1500046361%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /visitor/bsync?uid=c05209c1b960e64d4699c73af4326d4b&name=adpone&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fsync.richaudience.com%2F8794e6f6b403f691cc8dd13eaa9ab8ad%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D%5BBUYER_ID%5D HTTP/1.1Host: visitor-adpone.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=beb8670a-646c-4cf0-a211-73ab4a2643bb&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=10251C91-83A6-44D2-8672-A4A9C194681E; chkChromeAb67Sec=1; pi=157660:2; DPSync4=1737763200%3A219_226_227_197; SyncRTB4=1737763200%3A220_201_13_56_251_21_54_71%7C1737849600%3A35%7C1737158400%3A223
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=ym.com&id=xEF_FccQQYcYfrS0Tdmx&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync-amz.ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A9msLnM7oUwVvDfEhlyRzYU
Source: global traffic	HTTP traffic detected: GET /redirectuser?r=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3De64f73568d2b3c34%26fi%3D0b6f23bc6d82347f%26uid%3D%24UID&partner=eplanning HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.us.e-planning.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a566db6afba33978322ef47fa16ca6fe/?gdpr=0&euconsent=&uid=J_IQABZH33sJYiZARWaomX1u HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=06380fd4-5228-4859-91fb-1zz1736637148; raibs=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yieldmo_dbm&google_hm=eEVGX0ZjY1FRWWNZZnJTMFRkbXg= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync-amz.ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlDzaLpBM4AA6Nd6d8gvMeEMw-Awa7urHV2X6U2SB-ju7PM832-FJwVOsYPsxE; APC=AfxxVi6Y6IiuM_kCZ2C474KwKpq7nnNvcd3SHlUPjPkr2itn72E3GQ
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=160648&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160648%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync-pm.ads.yieldmo.com%252Fsync%253Fpn_id%253Dpub%2526id%253D%2523PMUID%2526gdpr%253DPM_GDPR%2526gdpr_consent%253DPM_CONSENT HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync-amz.ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=10251C91-83A6-44D2-8672-A4A9C194681E; chkChromeAb67Sec=1; pi=157660:2; DPSync4=1737763200%3A219_226_227_197; SyncRTB4=1737763200%3A220_201_13_56_251_21_54_71%7C1737849600%3A35%7C1737158400%3A223
Source: global traffic	HTTP traffic detected: GET /qmap?c=1389&tp=STSC&tpid=dcfeeb19-4276-4a8f-b50d-57b6c0c25ca6-6782fadd-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3Ddcfeeb19-4276-4a8f-b50d-57b6c0c25ca6-6782fadd-5553%26partner_url%3Dhttps%253A%252F%252Feb2.3lift.com%252Fxuid%253Fmid%253D3646%2526xuid%253Ddcfeeb19-4276-4a8f-b50d-57b6c0c25ca6-6782fadd-5553%2526dongle%253D1fa5%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=b74b370c6603a90653038a464f3a29da; _cc_cc="ACZ4nGNQSDI3STI2N0g2MzMwTrQ0MDM1NjC2SDQxM0kzTjSyTElkAIL0pl83GBAAAEj%2FCwM%3D"; _cc_aud="ABR4nGNgYGBIb%2Fp1gwEOACFOArw%3D"
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7969&xuid=8E40104CDEEE41DDADDE5438B62C7349&dongle=yf3 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831
Source: global traffic	HTTP traffic detected: GET /xuid?mid=6732&dongle=38F&xuid=AQAG_FJMgTPtAQJchP4HAQEBAQEBAQCVVqL78AEBAJVWovvw&expiration=1736723551&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluidp=3159321825024285870831; tluid=3159321825024285870831

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: talktalk770.weebly.com
Source: global traffic	DNS traffic detected: DNS query: cdn2.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: ec.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: apps.talktalk.co.uk
Source: global traffic	DNS traffic detected: DNS query: tradecore.tradehouse.media
Source: global traffic	DNS traffic detected: DNS query: cdn.privacy-mgmt.com
Source: global traffic	DNS traffic detected: DNS query: ats-wrapper.privacymanager.io
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: geo.privacymanager.io
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: api.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: id.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: grid.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: prg.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: shb.richaudience.com
Source: global traffic	DNS traffic detected: DNS query: htlb.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: grid-bidder.criteo.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: tlx.3lift.com
Source: global traffic	DNS traffic detected: DNS query: mp.4dex.io
Source: global traffic	DNS traffic detected: DNS query: rtb.openx.net
Source: global traffic	DNS traffic detected: DNS query: btlr.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: hbopenbid.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: fastlane.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: lb.eu-1-id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: script.4dex.io
Source: global traffic	DNS traffic detected: DNS query: config.aps.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: s.richaudience.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: cadmus.script.ac
Source: global traffic	DNS traffic detected: DNS query: aax.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ads.us.e-planning.net
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: cdn.ampproject.org
Source: global traffic	DNS traffic detected: DNS query: triplelift-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: sync.richaudience.com
Source: global traffic	DNS traffic detected: DNS query: tradehouse-d.openx.net
Source: global traffic	DNS traffic detected: DNS query: js-sec.indexww.com
Source: global traffic	DNS traffic detected: DNS query: ssc-cms.33across.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: u.4dex.io
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: ad.turn.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: cs.krushmedia.com
Source: global traffic	DNS traffic detected: DNS query: ssbsync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: s.ad.smaato.net
Source: global traffic	DNS traffic detected: DNS query: pixel-eu.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: t.adx.opera.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: pixel-us-east.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: ice.360yield.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: u.openx.net
Source: global traffic	DNS traffic detected: DNS query: ssp-sync.criteo.com
Source: global traffic	DNS traffic detected: DNS query: csync.loopme.me
Source: global traffic	DNS traffic detected: DNS query: onetag-sys.com
Source: global traffic	DNS traffic detected: DNS query: ad.360yield.com
Source: global traffic	DNS traffic detected: DNS query: trace-eu.mediago.io
Source: global traffic	DNS traffic detected: DNS query: sync-amz.ads.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: cs.admanmedia.com
Source: global traffic	DNS traffic detected: DNS query: amazon-tam-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: cdn.doubleverify.com
Source: global traffic	DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: hde.tynt.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: b1sync.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: rtb-csync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net

Source: unknown

HTTP traffic detected: POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: talktalk770.weebly.comConnection: keep-aliveContent-Length: 83sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/json; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://talktalk770.weebly.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://talktalk770.weebly.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINVersion: 1703779530Latest-Version: 1703779530Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Sat, 11 Jan 2025 23:12:06 GMTReferrer-Policy: originAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.talktalk.co.ukVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINVersion: 1703779530Latest-Version: 1703779530Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Sat, 11 Jan 2025 23:12:07 GMTReferrer-Policy: originAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.talktalk.co.ukVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINVersion: 1703779530Latest-Version: 1703779530Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Sat, 11 Jan 2025 23:12:07 GMTReferrer-Policy: originAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.talktalk.co.ukVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINVersion: 1703779530Latest-Version: 1703779530Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Sat, 11 Jan 2025 23:12:07 GMTAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.talktalk.co.ukReferrer-Policy: originVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINVersion: 1703779530Latest-Version: 1703779530Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Sat, 11 Jan 2025 23:12:07 GMTReferrer-Policy: originAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.talktalk.co.ukVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 157Connection: closeDate: Sat, 11 Jan 2025 23:12:21 GMTX-Powered-By: ExpressAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, SP_SCRIPT_VERSIONAccess-Control-Allow-Methods: GET, PUT, POST, DELETECache-Control: no-cache, no-storeStrict-Transport-Security: max-age=15552000; includeSubDomainsContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniffVary: Accept-EncodingX-Cache: Error from cloudfrontVia: 1.1 9276702fee01c12b5affcc505e68b2d4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: CDG55-P2X-Amz-Cf-Id: -pVwVqerMKGTq8hexvdvCtrEcSUp68rt8pLdYsiQWhKfQwSirz_u8g==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: OXGW/0.0.0Date: Sat, 11 Jan 2025 23:12:22 GMTContent-Type: text/htmlContent-Length: 103Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0strict-transport-security: max-age=16000000; includeSubDomains; preload;connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: OXGW/0.0.0Date: Sat, 11 Jan 2025 23:12:23 GMTContent-Type: text/htmlContent-Length: 103Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0strict-transport-security: max-age=16000000; includeSubDomains; preload;connection: close

Source: chromecache_1111.2.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_919.2.dr, chromecache_960.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_905.2.dr, chromecache_1160.2.dr, chromecache_929.2.dr, chromecache_1030.2.dr	String found in binary or memory: http://pixelunion.net
Source: chromecache_964.2.dr, chromecache_1067.2.dr, chromecache_915.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_1145.2.dr, chromecache_1033.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_1067.2.dr, chromecache_915.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_1125.2.dr, chromecache_1031.2.dr	String found in binary or memory: http://www.google-analytics.com
Source: chromecache_1097.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=10251C91-83A6-4
Source: chromecache_1171.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=ym.com&id=xEF_FccQQYcYfrS0Tdmx&gdpr=0
Source: chromecache_1081.2.dr, chromecache_1059.2.dr, chromecache_1091.2.dr, chromecache_1093.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-
Source: chromecache_1083.2.dr	String found in binary or memory: https://ad.360yield.com/server_match?partner_id=2048&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richa
Source: chromecache_1087.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_1087.2.dr	String found in binary or memory: https://ad.doubleclick.net/
Source: chromecache_931.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=9&gdpr=0
Source: chromecache_1083.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156538&gdpr=0&gdpr_consent=&predirect=https%3A
Source: chromecache_921.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156631&s=&predirect=https%3A%2F%2Fu-ams03.e-pl
Source: chromecache_1083.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.richaudience.com%2Fa566db6a
Source: chromecache_1166.2.dr, chromecache_1132.2.dr	String found in binary or memory: https://api.rlcdn.com/api/identity/envelope?pid=$
Source: chromecache_959.2.dr, chromecache_1117.2.dr	String found in binary or memory: https://apps.talktalk.co.uk
Source: chromecache_959.2.dr, chromecache_1117.2.dr	String found in binary or memory: https://ats-wrapper.privacymanager.io/ats-modules/0a5e590a-af2a-4b82-aa7b-f4158e626809/ats.js
Source: chromecache_1048.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/openx?puid=95475c7b-dfe0-4b9c-a80e-64b9d5f363d9&cb=https%3A%2F%2
Source: chromecache_1171.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=561118&ev=1&rurl=https%3a%2f%2fads.yieldmo.com/v000/sync?user
Source: chromecache_972.2.dr, chromecache_1185.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=85161
Source: chromecache_972.2.dr, chromecache_1185.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=749920
Source: chromecache_1097.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=10251C91-83A6-44D2-8672-A4A9C194681E&gdpr=0&
Source: chromecache_1097.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_959.2.dr, chromecache_1117.2.dr	String found in binary or memory: https://cdn.privacy-mgmt.com
Source: chromecache_959.2.dr, chromecache_1117.2.dr	String found in binary or memory: https://cdn.privacy-mgmt.com/unified/wrapperMessagingWithoutDetection.js
Source: chromecache_995.2.dr, chromecache_1107.2.dr	String found in binary or memory: https://cdn2.editmysite.com/js/
Source: chromecache_952.2.dr, chromecache_1101.2.dr	String found in binary or memory: https://cdn2.editmysite.com/js/jquery-1.8.3.min.js
Source: chromecache_1048.2.dr	String found in binary or memory: https://ce.lijit.com/merge?pid=76&3pid=d264f8fd-dedc-4013-b881-4edd8e5282f0&gdpr=&gdpr_consent=
Source: chromecache_916.2.dr, chromecache_979.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_916.2.dr, chromecache_979.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_1086.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0
Source: chromecache_1086.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0
Source: chromecache_1097.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=ECUckYOmRNKGcqSpwZRoHg%3D%3
Source: chromecache_1097.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_1097.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MTAyNTFDOTEtODNBNi00NEQyLTg2NzItQTR
Source: chromecache_1171.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c
Source: chromecache_959.2.dr, chromecache_1117.2.dr	String found in binary or memory: https://cmp.inmobi.com
Source: chromecache_921.2.dr	String found in binary or memory: https://cs.krushmedia.com/ec2cf90fdaaf74e7d94341d9392b3202.gif?redir=https%3A%2F%2Fu-ams03.e-plannin
Source: chromecache_892.2.dr	String found in binary or memory: https://developers.google.com/open-source/licenses/bsd
Source: chromecache_916.2.dr, chromecache_979.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_916.2.dr, chromecache_979.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_916.2.dr, chromecache_979.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_1097.2.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_1086.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.ne
Source: chromecache_921.2.dr	String found in binary or memory: https://eb2.3lift.com/sync?redir=https%3A%2F%2Fsync.e-planning.net%2Fum%3Fuid%3D%24UID%26dc%3D4d76b6
Source: chromecache_1116.2.dr, chromecache_1154.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_1154.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_1116.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_1154.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_1116.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_1116.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_1116.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_1082.2.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_1201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUje6bg.woff2)
Source: chromecache_1201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUjm6bnEr.woff2
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_1055.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_1201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUJiZTaR.woff2)
Source: chromecache_1201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2)
Source: chromecache_1201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUhiZTaR.woff2)
Source: chromecache_1201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUliZTaR.woff2)
Source: chromecache_1201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUtiZTaR.woff2)
Source: chromecache_1201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xTDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vrtSM1J-gEPT5Ese6hmH
Source: chromecache_1201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xdDF4xlVMF-BfR8bXMIjhOsXG-q2oeuFoqFrlnAIe2Imhk1T8rbociI
Source: chromecache_972.2.dr, chromecache_1185.2.dr	String found in binary or memory: https://gist.github.com/megawac/8201012
Source: chromecache_972.2.dr, chromecache_1185.2.dr	String found in binary or memory: https://gist.github.com/megawac/8355978
Source: chromecache_972.2.dr, chromecache_1185.2.dr	String found in binary or memory: https://github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp
Source: chromecache_1087.2.dr, chromecache_1082.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_972.2.dr, chromecache_1185.2.dr	String found in binary or memory: https://github.com/megawac/MutationObserver.js
Source: chromecache_1087.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_1166.2.dr, chromecache_1132.2.dr	String found in binary or memory: https://gum.criteo.com/sid/json?origin=prebid
Source: chromecache_921.2.dr	String found in binary or memory: https://gw-iad-bid.ymmobi.com/adx/user/sync?pubid=ZXBsYW5uaW5n&gdpr=$
Source: chromecache_1083.2.dr, chromecache_1139.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.richaudience.com%2Fa939d25b950298d0a5d324cea4fcd3d1%2
Source: chromecache_921.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3D8103fa85295fbe60%26fi%3
Source: chromecache_1086.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=$
Source: chromecache_931.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID
Source: chromecache_1048.2.dr	String found in binary or memory: https://id.rlcdn.com/709996.gif
Source: chromecache_1048.2.dr	String found in binary or memory: https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=1227b3b7-2cf0
Source: chromecache_921.2.dr	String found in binary or memory: https://inv-nets.admixer.net/adxcm.aspx?ssp=0CC7386A-D5A3-4B90-AEEB-3E67F8FEF4D3%26rurl%3Dhttps%3A%2
Source: chromecache_1166.2.dr, chromecache_1132.2.dr	String found in binary or memory: https://lexicon.33across.com/v1/envelope
Source: chromecache_1139.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_1097.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_1171.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=yieldmo&ttd_tpi=1&ttd_puid=xEF_FccQQYcYfrS0Tdmx
Source: chromecache_1166.2.dr, chromecache_1132.2.dr	String found in binary or memory: https://match.adsrvr.org/track/rid?ttd_pid=$
Source: chromecache_921.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=H7IJBRjH
Source: chromecache_1052.2.dr, chromecache_998.2.dr, chromecache_892.2.dr, chromecache_1066.2.dr, chromecache_1038.2.dr	String found in binary or memory: https://mths.be/cssescape
Source: chromecache_1097.2.dr	String found in binary or memory: https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=10251C91-83A6-44D2-86
Source: chromecache_921.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?pubId=5927d926323dc2c
Source: chromecache_1087.2.dr	String found in binary or memory: https://pagead2.googlesyndication-cn.com/
Source: chromecache_1054.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_1087.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: chromecache_1116.2.dr, chromecache_1154.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=colleague-executed&name=
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_964.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_1004.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_1087.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_1003.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_1154.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_1116.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_1054.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_1087.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_1089.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_1154.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_1116.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_931.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0
Source: chromecache_1097.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=10251C91-83A6-44D2-8672-A4A9C194681E&gdpr=0&gdpr_co
Source: chromecache_1166.2.dr, chromecache_1132.2.dr	String found in binary or memory: https://pixel.quantserve.com/pixel?d=
Source: chromecache_931.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=b8f455c1-6f6f-4799-b5dc-
Source: chromecache_979.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_1097.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/10251C91-83A6-44D2-8672-A4A9C194681E?gdpr=0&gdpr_consent=
Source: chromecache_921.2.dr	String found in binary or memory: https://prebid-match.dotomi.com/match/bounce/current?networkId=72582&version=1&rurl=https%3A%2F%2Fu-
Source: chromecache_921.2.dr	String found in binary or memory: https://prebid.a-mo.net/cchain/0?gdpr=
Source: chromecache_964.2.dr	String found in binary or memory: https://publickeyservice.msmt.gcp.privacysandboxservices.com
Source: chromecache_921.2.dr	String found in binary or memory: https://rtb.gumgum.com/usync/15581?r=https%3A%2F%2Fsync.e-planning.net%2Fum%3Fdc%3D1a6b1d3b3872943b%
Source: chromecache_1166.2.dr, chromecache_1132.2.dr	String found in binary or memory: https://rtb.openx.net/openrtbb/prebidjs
Source: chromecache_1048.2.dr	String found in binary or memory: https://rtb.openx.net/sync/dds
Source: chromecache_921.2.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?r=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3Dff96d1aa62deeeb
Source: chromecache_921.2.dr	String found in binary or memory: https://s.e-planning.net/esb/4/0/1992d/f6ee63a0c2353004/lotame20220615.js
Source: chromecache_921.2.dr	String found in binary or memory: https://s.e-planning.net/esb/4/1/3fb8/7bb4893a30d21aef/retargetly_030920.js
Source: chromecache_1111.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_1111.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_921.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?&p=12186&endpoint=eu
Source: chromecache_1082.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_1082.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_1125.2.dr, chromecache_1031.2.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: chromecache_1125.2.dr, chromecache_1031.2.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: chromecache_921.2.dr	String found in binary or memory: https://ssp.disqus.com/redirectuser?r=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3De64f73568d2b3
Source: chromecache_1181.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_1125.2.dr, chromecache_1031.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_979.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_916.2.dr, chromecache_979.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_916.2.dr, chromecache_979.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_916.2.dr, chromecache_979.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_1171.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?sub=yieldmo&redir%3Dhttps%3A%2F%2Fads.yieldmo.com%2Fv000%2Fsync
Source: chromecache_921.2.dr	String found in binary or memory: https://sync.admanmedia.com/pbs.gif?redir=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3D9937b3fd6
Source: chromecache_931.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=
Source: chromecache_921.2.dr	String found in binary or memory: https://sync.richaudience.com/f7872c90c5d3791e2b51f7edce1a0a5d/?p=25BiP9IMgN&r=https%3A%2F%2Fu-ams03
Source: chromecache_1139.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?url=https%3A%2F%2Fsync.richaudience.com%2F1a12a024f8f9561c4916
Source: chromecache_1048.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=268
Source: chromecache_1022.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/15238/lt.min.js
Source: chromecache_907.2.dr, chromecache_1103.2.dr	String found in binary or memory: https://talktalk770.weebly.com
Source: chromecache_952.2.dr	String found in binary or memory: https://talktalk770.weebly.com/
Source: chromecache_1101.2.dr	String found in binary or memory: https://talktalk770.weebly.com/home.html
Source: chromecache_1101.2.dr	String found in binary or memory: https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tak_1.png
Source: chromecache_952.2.dr	String found in binary or memory: https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tak_orig.png
Source: chromecache_1101.2.dr	String found in binary or memory: https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tannn_1.png
Source: chromecache_952.2.dr	String found in binary or memory: https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tannn_orig.png
Source: chromecache_1116.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_1116.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_959.2.dr, chromecache_1117.2.dr	String found in binary or memory: https://tradecore.tradehouse.media/servlet/player?zid=2354
Source: chromecache_919.2.dr, chromecache_960.2.dr	String found in binary or memory: https://twitter.com/jacobrossi/status/480596438489890816
Source: chromecache_921.2.dr	String found in binary or memory: https://u-ams.4dex.io/ortb/usync.html?r=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fuid%3D%7BuserId%
Source: chromecache_921.2.dr	String found in binary or memory: https://u.4dex.io/setuid?bidder=eplanning&it=adg-pb-clt&uid=AEkTMpxuUY2aBGs6
Source: chromecache_1166.2.dr, chromecache_1132.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/pd
Source: chromecache_1097.2.dr	String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=10251C91-83A6-44D2-8672-A4A9C194
Source: chromecache_1097.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_1166.2.dr, chromecache_1132.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/$
Source: chromecache_1097.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=10251C91-83A6-44D2-8672-A4A9C194681E&re
Source: chromecache_931.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com
Source: chromecache_1139.2.dr	String found in binary or memory: https://visitor-adpone.omnitagjs.com/visitor/bsync?uid=c05209c1b960e64d4699c73af4326d4b&name=adpone&
Source: chromecache_1171.2.dr	String found in binary or memory: https://wt.rqtrk.eu?pid=fc4e1fcf-7b7a-41b5-a689-0f1570fe8fea&src=www&type=100&sid=0&uid=xEF_FccQQYcY
Source: chromecache_1031.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: chromecache_1116.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_1125.2.dr, chromecache_1031.2.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?
Source: chromecache_952.2.dr, chromecache_1101.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_933.2.dr, chromecache_1135.2.dr, chromecache_988.2.dr, chromecache_916.2.dr, chromecache_979.2.dr, chromecache_1164.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_1116.2.dr, chromecache_1154.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_964.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_964.2.dr	String found in binary or memory: https://www.googleadservices.com/.well-known/private-aggregation/report-shared-storage
Source: chromecache_964.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_964.2.dr	String found in binary or memory: https://www.googletagservices.com/agrp/
Source: chromecache_916.2.dr, chromecache_979.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__.
Source: chromecache_933.2.dr, chromecache_1135.2.dr, chromecache_1164.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js
Source: chromecache_988.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Source: chromecache_952.2.dr, chromecache_1101.2.dr	String found in binary or memory: https://www.weebly.com/signup?utm_source=internal&utm_medium=footer
Source: chromecache_1048.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=openx

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 51225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 51201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 51119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51139
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 50964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51133
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292

Source: classification engine

Classification label: mal80.phis.win@43/520@515/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2000,i,17465243282939486776,3817739708234424106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://talktalk770.weebly.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2000,i,17465243282939486776,3817739708234424106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://talktalk770.weebly.com/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://talktalk770.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]	100%	Avira URL Cloud	phishing
https://talktalk770.weebly.com/ajax/apps/formSubmitAjax.php	100%	Avira URL Cloud	phishing
https://b1sync.outbrain.com/usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2	0%	Avira URL Cloud	safe
https://u-ams.4dex.io/ortb/usync.html?r=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fuid%3D%7BuserId%	0%	Avira URL Cloud	safe
https://talktalk770.weebly.com/files/theme/plugins.js?1736412329	100%	Avira URL Cloud	phishing
https://talktalk770.weebly.com/files/theme/jquery.revealer.js?1736412329	100%	Avira URL Cloud	phishing
https://bugs.webkit.org/show_bug.cgi?id=85161	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	216.58.206.34	true	false	high
um.simpli.fi	35.204.201.36	true	false	high
global.px.quantserve.com	91.228.74.166	true	false	high
http.tt.xion.oxcs.net	153.92.124.237	true	false	high
id5-sync.com	141.95.98.64	true	false	high
cs.admanmedia.com	80.77.87.163	true	false	high
live.primis.tech	13.32.99.104	true	false	high
rtb.openx.net	35.227.252.103	true	false	high
cdn.w55c.net	35.210.130.15	true	false	high
geo.privacymanager.io	13.32.99.122	true	false	high
mwzeom.zeotap.com	104.22.51.98	true	false	high
btlr-eu-central-1.sharethrough.com	3.126.92.214	true	false	high
www.google.com	142.250.186.164	true	false	high
imagsync-lhrpairbc.pubmatic.com	185.64.191.214	true	false	high
sync.intentiq.com	3.160.150.74	true	false	high
lb.eu-1-id5-sync.com	141.95.33.120	true	false	high
id.rlcdn.com	35.244.174.68	true	false	high
talktalk770.weebly.com	74.115.51.8	true	true	unknown
match.adsrvr.org	15.197.193.217	true	false	high
dsp-cookie.adfarm1.adition.com	80.82.210.217	true	false	high
match.prod.bidr.io	34.252.79.168	true	false	high
pagead-googlehosted.l.google.com	216.58.206.65	true	false	high
creativecdn.com	185.184.8.90	true	false	high
pugm-lhrc.pubmnet.com	185.64.190.78	true	false	high
googleads4.g.doubleclick.net	172.217.16.194	true	false	high
d1giprow6b9psh.cloudfront.net	3.161.119.41	true	false	high
uip.semasio.net	77.243.51.122	true	false	high
zeta-ssp-385516103.us-east-1.elb.amazonaws.com	52.207.79.239	true	false	high
events-ssc.33across.com	34.117.239.71	true	false	high
nld-prebid.a-mx.net	163.5.194.35	true	false	high
ep2.adtrafficquality.google	216.58.206.65	true	false	high
pixel-sync.sitescout.com	34.36.216.150	true	false	high
pixel.onaudience.com	54.38.113.8	true	false	high
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	high
tradehouse-d.openx.net	34.98.64.218	true	false	high
euw-ice.360yield.com	52.213.29.116	true	false	high
sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com	52.211.248.252	true	false	high
d1ykf07e75w7ss.cloudfront.net	108.138.3.93	true	false	high
googleads.g.doubleclick.net	142.250.186.130	true	false	high
in-ftd-104.nl3.vip.prod.criteo.com	178.250.1.57	true	false	high
presentation-ams1.turn.com	46.228.164.11	true	false	high
rtb.adgrx.com	52.19.224.221	true	false	high
config.aps.amazon-adsystem.com	18.245.31.92	true	false	high
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	high
bidberry.net	57.129.39.243	true	false	high
cadmus.script.ac	104.18.22.145	true	false	high
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	44.240.99.243	true	false	high
www.googletagservices.com	142.250.185.194	true	false	high
id.crwdcntrl.net	52.17.153.181	true	false	high
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	high
nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com	13.50.192.155	true	false	high
weebly.map.fastly.net	151.101.1.46	true	false	high
de.tynt.com	67.202.105.33	true	false	high
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false	high
hde.tynt.com	67.202.105.34	true	false	high
pixel-eu.onaudience.com	54.38.113.4	true	false	high
core.iprom.net	195.5.165.20	true	false	high
api.rlcdn.com	34.120.133.55	true	false	high
sync.admanmedia.com	8.2.110.17	true	false	high
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	high
sync.richaudience.com	148.251.20.73	true	false	high
rtb.adentifi.com	18.204.134.151	true	false	high
id.a-mx.com	79.127.216.47	true	false	high
ad.mrtnsvr.com	34.102.163.6	true	false	high
sync.srv.stackadapt.com	3.211.75.57	true	false	high
thrtle.com	34.233.219.14	true	false	high
s.e-planning.net	193.3.178.1	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
rtb-csync-euw2.smartadserver.com	217.182.178.233	true	false	high
zagreb-stable-europe-west4.pumpkin.uverse.iponweb.net	35.214.183.184	true	false	high
ssp.ads.betweendigital.com	96.46.186.65	true	false	high
pippio.com	107.178.254.65	true	false	high
sync.ipredictive.com	3.223.17.167	true	false	high
ep1.adtrafficquality.google	172.217.18.2	true	false	high
s.amazon-adsystem.com	98.82.157.137	true	false	high
ad.doubleclick.net	142.250.185.230	true	false	high
aax-eu.amazon-adsystem.com	52.94.222.140	true	false	high
ipac.ctnsnet.com	35.186.193.173	true	false	high
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
match.adsby.bidtheatre.com	64.227.64.62	true	false	high
trace-eu.mediago.io	35.214.168.80	true	false	high
ib.anycast.adnxs.com	185.89.210.46	true	false	high
s.richaudience.com	178.63.241.79	true	false	high
dsp.nrich.ai	51.255.68.171	true	false	high
u-ams.4dex.io	34.1.227.231	true	false	high
aorta.clickagy.com	3.89.18.81	true	false	high
uipus.semasio.net	50.57.31.206	true	false	high
ws.rqtrk.eu	57.129.18.109	true	false	high
eu-eb2.3lift.com	76.223.111.18	true	false	high
rtbc-ew1.doubleverify.com	130.211.44.5	true	false	high
script.4dex.io	104.26.9.169	true	false	high
hbopenbid-ams.pubmnet.com	185.64.189.112	true	false	high
sync.crwdcntrl.net	52.49.239.226	true	false	high
rtb-csync-euw1.smartadserver.com	89.149.193.89	true	false	high
ats-wrapper.privacymanager.io	13.33.187.21	true	false	high
cm.g.doubleclick.net	172.217.16.130	true	false	high
eu-tlx.3lift.com	3.78.168.176	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	54.76.91.170	true	false	high
idaas-ext.cph.liveintent.com	3.225.89.177	true	false	high
sync.1rx.io	46.228.174.117	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=beb8670a-646c-4cf0-a211-73ab4a2643bb&ttd_puid=ae8a3531-9f1e-4021-ab85-7a93216379c1%2C%2C	false		high
https://ad.turn.com/r/cs?pid=45&id=RX-80e8082b-2220-483d-8780-249634a56970-003&rndcb=2560774626	false		high
https://apps.talktalk.co.uk/appsuite/io.ox/mx-checker.e099b1ce.js	false		high
https://gum.criteo.com/syncframe?origin=criteoPrebidAdapter&topUrl=apps.talktalk.co.uk&gpp=	false		high
https://apps.talktalk.co.uk/appsuite/io.ox/mandatorywizard.894649b8.js	false		high
https://ssp-sync.criteo.com/user-sync/match?p=&u=2674f29e-fdc4-4b07-b8e3-7814e28bca30	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7458799798667573616&gdpr=0&gdpr_consent=	false		high
https://apps.talktalk.co.uk/appsuite/ai-4qA6hrTY.js	false		high
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=M5SSWYZN-12-9XYK	false		high
https://sync.crwdcntrl.net/map/c=14544/tp=BIDB/gdpr=0/gdpr_consent=?https%3A%2F%2Fbidberry.net%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D%26redirect%3D	false		high
https://id.rlcdn.com/709996.gif	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=6844335515357940101&gdpr=0&gdpr_consent=	false		high
https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.richaudience.com%2Fa566db6afba33978322ef47fa16ca6fe%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D$UID	false		high
https://pixel-eu.onaudience.com/?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m%26redir%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253D39puKE4JaRTnVRhYnUVUSgUn%2526gdpr%253D0%2526gdpr_consent%253D	false		high
https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/translations-369373da.js	false		high
https://apps.talktalk.co.uk/appsuite/uk.co.talktalk-e4375173.js	false		high
https://apps.talktalk.co.uk/appsuite/io.ox/guidedtours/i18n.en_GB.js	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=98724743&p=157660&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=	false		high
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://ce.lijit.com/merge?3pid=OPUdc74586cd6484defa10b89daa5d2b832&gdpr=&gdpr_consent=&pid=103	false		high
https://eb2.3lift.com/xuid?mid=7255&xuid=AAKo707PBfYAABZOJjvdIA&dongle=bzwx&gdpr=0	false		high
https://apps.talktalk.co.uk/appsuite/io.ox/externalcontentpopup.en_GB.js	false		high
https://us-u.openx.net/w/1.0/sd?id=537072968&val=2674f29e-fdc4-4b07-b8e3-7814e28bca30&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://apps.talktalk.co.uk/appsuite/io.ox/announcements.js	false		high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D92%25263pid%253D%2524UID%26gdpr%3D%26gdpr_consent%3D	false		high
https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent	false		high
https://pixel.onaudience.com/?partner=147&mapped=beb8670a-646c-4cf0-a211-73ab4a2643bb&icm&cver&gdpr=0&gdpr=0&gdpr_consent=&gdpr_consent=&redirect=https%3a%2f%2fimage2.pubmatic.com%2fAdServer%2fPug%3fvcode%3dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw&piggybackCookie=39puKE4JaRTnVRhYnUVUSgUn	false		high
https://ssbsync.smartadserver.com/api/sync?callerId=146&gdpr={0,1}&gdpr_consent={consent_string}&gdpr=&gdpr_consent=	false		high
https://rtb.gumgum.com/usync/15581?r=https%3A%2F%2Fsync.e-planning.net%2Fum%3Fdc%3D1a6b1d3b3872943b%26fi%3D0b6f23bc6d82347f%26uid%3D	false		high
https://tradehouse-d.openx.net/w/1.0/pd?gdpr=0&gdpr_consent=	false		high
https://tradecore.tradehouse.media/js/talktalk.js	false		high
https://talktalk770.weebly.com/files/theme/jquery.revealer.js?1736412329	true	Avira URL Cloud: phishing	unknown
https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7458799794335971696&gdpr=0&gdpr_consent=	false		high
https://t.adx.opera.com/pub/sync?pubid=pub11169426274368&coppa=&us_privacy=	false		high
https://onetag-sys.com/match/?int_id=113&callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0	false		high
https://cdn2.editmysite.com/fonts/Oswald/font.css?2	false		high
https://apps.talktalk.co.uk/appsuite/favicon.ico	false		high
https://tlx.3lift.com/header/auction?lib=prebid&v=9.11.0&referrer=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&tmax=1200&gdpr=false	false		high
https://rtb.adentifi.com/CookieSyncTripleLift?gdpr=0&gdpr_consent=	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://s.amazon-adsystem.com/dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0	false		high
https://talktalk770.weebly.com/ajax/apps/formSubmitAjax.php	true	Avira URL Cloud: phishing	unknown
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=outbrain.com&id=683f645f-b09f-498b-99a1-9a0759708933&gdpr=0	false		high
https://s0.2mdn.net/sadbundle/15449214280305384078/index.html?ev=01_253	false		high
https://apps.talktalk.co.uk/appsuite/styles-646813f1.css	false		high
https://cdn.ampproject.org/rtv/012410292120000/v0/amp-analytics-0.1.mjs	false		high
https://match.prod.bidr.io/cookie-sync/svr?gdpr=&gdpr_consent=	false		high
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false		high
https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/common.js	false		high
https://talktalk770.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]	true	Avira URL Cloud: phishing	unknown
https://apps.talktalk.co.uk/appsuite/jquery.js	false		high
https://aax-eu.amazon-adsystem.com/s/x/ae12848777b41970a5f2?gdpr=&gdpr_consent=	false		high
https://u.openx.net/w/1.0/cm?id=3cc4b2f6-c7e1-439a-8174-b6dbb96bcabf&r=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dopenx%26it%3Dadg-pb-clt%26uid%3D%7BOPENX_ID%7D	false		high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEHb-NBjztYzYrdmLumX3TE4&google_cver=1	false		high
https://talktalk770.weebly.com/files/theme/plugins.js?1736412329	true	Avira URL Cloud: phishing	unknown
https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/login/register-50911d18.js	false		high
https://um.simpli.fi/lj_match?r=1736637149919&gdpr=&gdpr_consent=	false		high
https://u.4dex.io/setuid?bidder=triplelift&it=adg-pb-clt&uid=3159321825024285870831	false		high
https://ups.analytics.yahoo.com/ups/58679/cms?partner_id=DELI&gdpr=0	false		high
https://ce.lijit.com/merge?pid=43&&3pid=oWWwD_Ez7Qy6MbsI8zGlCqVivg-6YuxY9WPmvXA5	false		high
https://cdn2.editmysite.com/fonts/Karla/font.css?2	false		high
https://apps.talktalk.co.uk/appsuite/io.ox.dumpster-f4301a77.js	false		high
https://apps.talktalk.co.uk/appsuite/index.html.js	false		high
https://dis.criteo.com/dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b	false		high
https://apps.talktalk.co.uk/appsuite/lib/polyfills/text-encode-transform.js	false		high
https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=4921707118&rd=1	false		high
https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	false		high
https://pm.w55c.net/ping_match.gif?st=TRIPLELIFT&rurl=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D6019%26xuid%3D_wfivefivec_%26dongle%3D465e%26gdpr=0%26gdpr_consent=	false		high
https://sync.richaudience.com/a566db6afba33978322ef47fa16ca6fe/?gdpr=0&euconsent=&uid=J_IQABZH33sJYiZARWaomX1u	false		high
https://tradecore.tradehouse.media/servlet/tagger/30415131/1736637137927	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7458799790044084591&gdpr=0&gdpr_consent=	false		high
https://b1sync.outbrain.com/usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2	false	Avira URL Cloud: safe	unknown
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=outbrain.com&id=12eb4f51-f7e5-4608-9209-8e09f165cc13&gdpr=0	false		high
https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID	false		high
https://grid.bidswitch.net/hbjson	false		high
https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=10251C91-83A6-44D2-8672-A4A9C194681E	false		high
https://apps.talktalk.co.uk/appsuite/io.ox.gdpr.en_GB.js	false		high
https://ce.lijit.com/merge?pid=92&3pid=6844335515357940101&gdpr=&gdpr_consent=	false		high
https://apps.talktalk.co.uk/appsuite/io.ox.dumpster.js	false		high
https://pr-bh.ybp.yahoo.com/sync/triplelift/4099209890275096559476?gdpr=0&gdpr_consent=	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://inv-nets.admixer.net/adxcm.aspx?ssp=0CC7386A-D5A3-4B90-AEEB-3E67F8FEF4D3%26rurl%3Dhttps%3A%2	chromecache_921.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_916.2.dr, chromecache_979.2.dr	false		high
https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=10251C91-83A6-4	chromecache_1097.2.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_1154.2.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_1116.2.dr	false		high
https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=10251C91-83A6-44D2-8672-A4A9C194	chromecache_1097.2.dr	false		high
https://sync.smartadserver.com/getuid?url=https%3A%2F%2Fsync.richaudience.com%2F1a12a024f8f9561c4916	chromecache_1139.2.dr	false		high
https://twitter.com/jacobrossi/status/480596438489890816	chromecache_919.2.dr, chromecache_960.2.dr	false		high
https://googleads.g.doubleclick.net/	chromecache_1087.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_1087.2.dr, chromecache_1082.2.dr	false		high
https://cloud.google.com/contact	chromecache_916.2.dr, chromecache_979.2.dr	false		high
https://www.google.%/ads/ga-audiences?	chromecache_1031.2.dr	false		high
https://www.google.com/recaptcha/api.js	chromecache_952.2.dr, chromecache_1101.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=85161	chromecache_972.2.dr, chromecache_1185.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/open-source/licenses/bsd	chromecache_892.2.dr	false		high
https://cdn.privacy-mgmt.com	chromecache_959.2.dr, chromecache_1117.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_916.2.dr, chromecache_979.2.dr	false		high
https://u-ams.4dex.io/ortb/usync.html?r=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fuid%3D%7BuserId%	chromecache_921.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.115.51.8	talktalk770.weebly.com	United States	27647	WEEBLYUS	true
74.115.51.9	unknown	United States	27647	WEEBLYUS	false
34.160.236.64	tagr-pixel-nginx-odr-euw4.mookie1.com	United States	2686	ATGS-MMD-ASUS	false
3.126.92.214	btlr-eu-central-1.sharethrough.com	United States	16509	AMAZON-02US	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
104.22.17.141	api.retargetly.com	United States	13335	CLOUDFLARENETUS	false
35.214.199.88	dorpat.geo.iponweb.net	United States	19527	GOOGLE-2US	false
151.101.1.46	weebly.map.fastly.net	United States	54113	FASTLYUS	false
172.217.18.2	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
172.217.18.1	unknown	United States	15169	GOOGLEUS	false
13.33.187.94	unknown	United States	16509	AMAZON-02US	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.230	ad.doubleclick.net	United States	15169	GOOGLEUS	false
35.214.138.30	envoy-hl.envoy-csync.core-002-ew4.ov1o.com	United States	19527	GOOGLE-2US	false
63.34.161.76	unknown	United States	16509	AMAZON-02US	false
141.95.98.64	id5-sync.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
104.18.24.18	js-sec.indexww.com	United States	13335	CLOUDFLARENETUS	false
18.245.31.92	config.aps.amazon-adsystem.com	United States	16509	AMAZON-02US	false
185.255.84.153	visitor-fra02.omnitagjs.com	France	200271	IGUANE-FR	false
44.240.99.243	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.157.230.4	unknown	United States	16509	AMAZON-02US	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
52.94.222.140	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
153.92.124.237	http.tt.xion.oxcs.net	Germany	60664	X-IONDE	false
87.248.119.252	dcs-ups.g03.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
172.217.18.97	unknown	United States	15169	GOOGLEUS	false
142.250.186.134	unknown	United States	15169	GOOGLEUS	false
185.89.210.46	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
178.63.241.79	s.richaudience.com	Germany	24940	HETZNER-ASDE	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
178.250.1.4	ssp-bidder.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
130.211.44.5	rtbc-ew1.doubleverify.com	United States	15169	GOOGLEUS	false
52.49.239.226	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
104.26.9.169	script.4dex.io	United States	13335	CLOUDFLARENETUS	false
34.253.31.90	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
148.251.20.73	sync.richaudience.com	Germany	24940	HETZNER-ASDE	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
57.129.39.243	bidberry.net	Belgium	2686	ATGS-MMD-ASUS	false
172.217.16.130	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
162.19.138.118	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
162.19.138.116	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
52.213.83.168	rtb.gumgum.com	United States	16509	AMAZON-02US	false
151.101.193.108	prod.appnexus.map.fastly.net	United States	54113	FASTLYUS	false
3.160.150.74	sync.intentiq.com	United States	16509	AMAZON-02US	false
3.127.30.65	sonata-notifications.taptapnetworks.com	United States	16509	AMAZON-02US	false
34.1.227.231	u-ams.4dex.io	United States	2686	ATGS-MMD-ASUS	false
5.196.111.69	unknown	France	16276	OVHFR	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
116.202.167.133	inv-nets.admixer.net	Germany	24940	HETZNER-ASDE	false
104.248.92.90	tradecore.tradehouse.media	United States	14061	DIGITALOCEAN-ASNUS	false
13.35.57.137	unknown	United States	16509	AMAZON-02US	false
54.38.113.4	pixel-eu.onaudience.com	France	16276	OVHFR	false
178.250.1.57	in-ftd-104.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
178.250.1.56	in-ftd-65.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
64.202.112.223	unknown	United States	22075	AS-OUTBRAINUS	false
52.17.153.181	id.crwdcntrl.net	United States	16509	AMAZON-02US	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
34.117.239.71	events-ssc.33across.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
34.248.74.5	unknown	United States	16509	AMAZON-02US	false
142.250.185.129	cdn-content.ampproject.org	United States	15169	GOOGLEUS	false
81.17.55.113	unknown	Netherlands	24588	NETPROVODOV-ASRU	false
3.223.17.167	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
81.17.55.112	unknown	Netherlands	24588	NETPROVODOV-ASRU	false
52.19.224.221	rtb.adgrx.com	United States	16509	AMAZON-02US	false
195.5.165.20	core.iprom.net	Slovenia	44968	IPROM-ASSI	false
80.77.87.216	cs.krushmedia.com	United Kingdom	46636	NATCOWEBUS	false
54.38.113.8	pixel.onaudience.com	France	16276	OVHFR	false
34.246.77.188	unknown	United States	16509	AMAZON-02US	false
67.202.105.33	de.tynt.com	United States	32748	STEADFASTUS	false
51.222.241.145	wt.rqtrk.eu	France	16276	OVHFR	false
167.71.130.132	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
176.9.112.17	shb.richaudience.com	Germany	24940	HETZNER-ASDE	false
104.18.27.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
217.182.178.228	unknown	France	16276	OVHFR	false
104.26.8.169	unknown	United States	13335	CLOUDFLARENETUS	false
67.202.105.34	hde.tynt.com	United States	32748	STEADFASTUS	false
8.2.110.17	sync.admanmedia.com	United States	46636	NATCOWEBUS	false
57.129.18.109	ws.rqtrk.eu	Belgium	2686	ATGS-MMD-ASUS	false
35.186.253.211	unknown	United States	15169	GOOGLEUS	false
80.77.87.108	eexsync.com	United Kingdom	46636	NATCOWEBUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
54.156.21.112	unknown	United States	14618	AMAZON-AESUS	false
35.186.193.173	ipac.ctnsnet.com	United States	15169	GOOGLEUS	false
51.89.9.253	onetag-sys.com	France	16276	OVHFR	false
3.89.18.81	aorta.clickagy.com	United States	14618	AMAZON-AESUS	false
13.32.99.104	live.primis.tech	United States	16509	AMAZON-02US	false
18.245.31.123	unknown	United States	16509	AMAZON-02US	false
96.46.186.65	ssp.ads.betweendigital.com	United States	7979	SERVERS-COMUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.166	s0.2mdn.net	United States	15169	GOOGLEUS	false
217.182.178.233	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
91.228.74.166	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
35.210.130.15	cdn.w55c.net	United States	19527	GOOGLE-2US	false
104.18.34.178	mp.4dex.io	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589264
Start date and time:	2025-01-12 00:10:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://talktalk770.weebly.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@43/520@515/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 64.233.167.84, 172.217.16.206, 142.250.184.238, 142.250.185.206, 142.250.186.170, 142.250.184.227, 142.250.186.40, 216.58.206.74, 142.250.184.234, 142.250.185.138, 142.250.184.202, 172.217.18.10, 142.250.181.234, 142.250.186.74, 142.250.185.74, 142.250.185.106, 142.250.186.42, 172.217.16.202, 142.250.186.138, 216.58.206.42, 172.217.18.106, 216.58.212.170, 142.250.74.202, 172.217.18.3, 142.250.186.136, 142.250.184.195, 199.232.210.172, 192.229.221.95, 142.250.181.238, 142.250.184.206, 142.250.186.78, 216.58.206.78, 142.250.185.142, 172.217.16.138, 142.250.186.106, 216.58.212.174, 142.250.185.131, 172.217.18.14, 172.217.18.110, 69.173.156.139, 142.250.185.226, 13.107.42.14, 13.107.21.237, 204.79.197.237, 142.250.184.193, 172.217.16.194, 142.250.185.225, 172.217.18.98, 216.58.212.138, 64.158.223.140, 184.28.88.244, 2.23.245.145, 142.250.186.130, 69.173.144.138, 69.173.144.139, 69.173.144.165, 69.173.146.5, 151.101.2.49, 151.101.194.49, 151.101.130.49, 151
Excluded domains from analysis (whitelisted): uipglob.trafficmanager.net, slscr.update.microsoft.com, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, l-0005.l-msedge.net, cdn.doubleverify.com.edgesuite.net, clients2.google.com, ocsp.digicert.com, update.googleapis.com, www.gstatic.com, rtb-csync-geo.usersync-prod-sas.akadns.net, 441e80a594f839abb072b05656603517.safeframe.googlesyndication.com, fonts.googleapis.com, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, pixel-us-east.rubiconproject.net.akadns.net, a-emea.rfihub.com.akadns.net, pagead2.googlesyndication.com, edgedl.me.gvt1.com, c.bing.com, e6603.g.akamaiedge.net, eus.rubiconproject.com.edgekey.net, map.media6degrees.com.cdn.cloudflare.net, a1241.dsct.akamai.net, clients.l.google.com, h2.shared.global.fastly.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, bs-geo.dvgtm.akadns.net, track.adformnet.akadns.net, tagged-by.rubiconproject.net.a
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://talktalk770.weebly.com/

Input	Output
URL: https://talktalk770.weebly.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://talktalk770.weebly.com
URL: https://talktalk770.weebly.com/... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate platform element setup code. It does not exhibit any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code primarily focuses on loading platform dependencies and initializing a custom platform element. There are no obvious signs of malicious intent, and the behavior is consistent with typical platform element development practices." }
function setupElement355594769200347925() { var requireFunc = window.platformElementRequire \|\| window.require; // Relies on a global require, specific to platform elements requireFunc([ 'w-global', 'underscore', 'jquery', 'backbone', 'util/platform/elements/PlatformElement', 'util/platform/elements/PlatformElementSettings' ], function( _W, _, $, Backbone, PlatformElement, PlatformElementSettings ) { var dependencies = null \|\| []; var platform_element_id = "848857247979793891-1.0.1"; if (typeof _W.loadedPlatformDependencies === 'undefined') { _W.loadedPlatformDependencies = []; } if (typeof _W.platformElements === 'undefined') { _W.platformElements = []; } if (typeof _W.platformElements[platform_element_id] === 'undefined') { _W.platformElements[platform_element_id] = {}; _W.platformElements[platform_element_id].deferredObject = new $.Deferred(); _W.platformElements[platform_element_id].deferredPromise = _W.platformElements[platform_element_id].deferredObject.promise(); } if(_.intersection(_W.loadedPlatformDependencies, dependencies).length !== dependencies.length){ _.reduce(dependencies, function(promise, nextScript){ _W.loadedPlatformDependencies.push(nextScript); return promise.then(function(){ return $.getScript(nextScript); }); }, $().promise()).then(function(){ _W.platformElements[platform_element_id].deferredObject.resolve(); }); } if (dependencies.length === 0){ _W.platformElements[platform_element_id].deferredObject.resolve(); } _W.platformElements[platform_element_id].deferredPromise.done(function(){ var _ElementDefinition = /** * This is required for element rendering to be possible * @type {PlatformElement} */ (function() { var ColoredBox = PlatformElement.extend({ initialize: function() { } }); return ColoredBox; })(); if (typeof _ElementDefinition == 'undefined' \|\| typeof _ElementDefinition == 'null') { var _ElementDefinition = PlatformElement.extend({}); } var _Element = _ElementDefinition.extend({ initialize: function() { // we still want to call the initialize function defined by the developer // however, we don't want to call it until placeholders have been replaced this.placeholderInterval = setInterval(function() { // so use setInterval to check for placeholders. if (this.$('.platform-element-child-placeholder').length == 0) { clearInterval(this.placeholderInterval); this.constructor.__super__.initialize.apply(this); } }.bind(this), 100); } }); _Element.prototype.settings = new PlatformElementSettings({"top_padding_each":[{"top_padding_index":0},{"top_padding_index":1},{"top_padding_index":2},{"top_padding_index":3},{"top_padding_index":4},{"top_padding_index":5},{"top_padding_index":6},{"top_padding_index":7},{"top_padding_index":8},{"top_padding_index":9},{"top_padding_index":10},{"top_padding_index":11},{"top_padding_index":12},{"top_padding_index":13},{"top_padding_index":14},{"top_padding_index":15},{"top_padding_index":16},{"top_padding_index":17},{"top_padding_index":18},{"top_padding_index":19}],"bottom_padding_each":[{"bottom_padding_index":0},{"bottom_padding_index":1},{"bottom_padding_index":2},{"bottom_padding_index":3},{"bottom_padding_index":4},{"bottom_padding_index":5},{"bottom_padding_index":6},{"bottom_padding_index":7},{"bottom_padding_index":8},{"bottom_padding_index":9},{"bottom_padding_index":10},{"bottom_padding_index":11},{"bottom_padding_index":12},{"bottom_padding_index":13},{"bottom_padding_index":14},{"bottom_padding_index":15},{"bottom_padding_index":16},{"bottom_padding_index":17},{"bottom_padding_index":18},{"bottom_padding_index":19}],"left_padding_each":[{"left_padding_index":0},{"left_padding_index":1},{"left_padding_index":2},{"left_padding_index":3},{"left_padding_index":4},{"left_padding_index":5},{"left_padding_index":6},{"left_padding_index":7},{"le
URL: https://talktalk770.weebly.com/... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that performs common web page modifications, such as adjusting the appearance of social media buttons and setting the minimum height of an iframe. The script uses standard DOM manipulation techniques and does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The use of jQuery or Prototype libraries is also a common practice for web development. Overall, this script seems to be a benign, well-intentioned piece of code with no clear malicious intent." }
(function(jQuery) { try { if (jQuery) { jQuery('div.blog-social div.fb-like').attr('class', 'blog-social-item blog-fb-like'); var $commentFrame = jQuery('#commentArea iframe'); if ($commentFrame.length > 0) { var frameHeight = jQuery($commentFrame[0].contentWindow.document).height() + 50; $commentFrame.css('min-height', frameHeight + 'px'); } if (jQuery('.product-button').length > 0){ jQuery(document).ready(function(){ jQuery('.product-button').parent().each(function(index, product){ if(jQuery(product).attr('target') == 'paypal'){ if (!jQuery(product).find('> [name="bn"]').length){ jQuery('<input>').attr({ type: 'hidden', name: 'bn', value: 'DragAndDropBuil_SP_EC' }).appendTo(product); } } }); }); } } else { // Prototype $$('div.blog-social div.fb-like').each(function(div) { div.className = 'blog-social-item blog-fb-like'; }); $$('#commentArea iframe').each(function(iframe) { iframe.style.minHeight = '410px'; }); } } catch(ex) {} })(window._W && _W.jQuery);
URL: https://talktalk770.weebly.com/home.html... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate platform element setup code. It does not exhibit any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code primarily focuses on loading platform dependencies and initializing a custom platform element. There are no suspicious behaviors or obfuscation observed, and the script seems to be part of a larger, legitimate web application." }
function setupElement844839775968180420() { var requireFunc = window.platformElementRequire \|\| window.require; // Relies on a global require, specific to platform elements requireFunc([ 'w-global', 'underscore', 'jquery', 'backbone', 'util/platform/elements/PlatformElement', 'util/platform/elements/PlatformElementSettings' ], function( _W, _, $, Backbone, PlatformElement, PlatformElementSettings ) { var dependencies = null \|\| []; var platform_element_id = "848857247979793891-1.0.1"; if (typeof _W.loadedPlatformDependencies === 'undefined') { _W.loadedPlatformDependencies = []; } if (typeof _W.platformElements === 'undefined') { _W.platformElements = []; } if (typeof _W.platformElements[platform_element_id] === 'undefined') { _W.platformElements[platform_element_id] = {}; _W.platformElements[platform_element_id].deferredObject = new $.Deferred(); _W.platformElements[platform_element_id].deferredPromise = _W.platformElements[platform_element_id].deferredObject.promise(); } if(_.intersection(_W.loadedPlatformDependencies, dependencies).length !== dependencies.length){ _.reduce(dependencies, function(promise, nextScript){ _W.loadedPlatformDependencies.push(nextScript); return promise.then(function(){ return $.getScript(nextScript); }); }, $().promise()).then(function(){ _W.platformElements[platform_element_id].deferredObject.resolve(); }); } if (dependencies.length === 0){ _W.platformElements[platform_element_id].deferredObject.resolve(); } _W.platformElements[platform_element_id].deferredPromise.done(function(){ var _ElementDefinition = /** * This is required for element rendering to be possible * @type {PlatformElement} */ (function() { var ColoredBox = PlatformElement.extend({ initialize: function() { } }); return ColoredBox; })(); if (typeof _ElementDefinition == 'undefined' \|\| typeof _ElementDefinition == 'null') { var _ElementDefinition = PlatformElement.extend({}); } var _Element = _ElementDefinition.extend({ initialize: function() { // we still want to call the initialize function defined by the developer // however, we don't want to call it until placeholders have been replaced this.placeholderInterval = setInterval(function() { // so use setInterval to check for placeholders. if (this.$('.platform-element-child-placeholder').length == 0) { clearInterval(this.placeholderInterval); this.constructor.__super__.initialize.apply(this); } }.bind(this), 100); } }); _Element.prototype.settings = new PlatformElementSettings({"top_padding_each":[{"top_padding_index":0},{"top_padding_index":1},{"top_padding_index":2},{"top_padding_index":3},{"top_padding_index":4},{"top_padding_index":5},{"top_padding_index":6},{"top_padding_index":7},{"top_padding_index":8},{"top_padding_index":9},{"top_padding_index":10},{"top_padding_index":11},{"top_padding_index":12},{"top_padding_index":13},{"top_padding_index":14},{"top_padding_index":15},{"top_padding_index":16},{"top_padding_index":17},{"top_padding_index":18},{"top_padding_index":19}],"bottom_padding_each":[{"bottom_padding_index":0},{"bottom_padding_index":1},{"bottom_padding_index":2},{"bottom_padding_index":3},{"bottom_padding_index":4},{"bottom_padding_index":5},{"bottom_padding_index":6},{"bottom_padding_index":7},{"bottom_padding_index":8},{"bottom_padding_index":9},{"bottom_padding_index":10},{"bottom_padding_index":11},{"bottom_padding_index":12},{"bottom_padding_index":13},{"bottom_padding_index":14},{"bottom_padding_index":15},{"bottom_padding_index":16},{"bottom_padding_index":17},{"bottom_padding_index":18},{"bottom_padding_index":19}],"left_padding_each":[{"left_padding_index":0},{"left_padding_index":1},{"left_padding_index":2},{"left_padding_index":3},{"left_padding_index":4},{"left_padding_index":5},{"left_padding_index":6},{"left_padding_index":7},{"le
URL: https://2353bee1e702193d8a081ea08f00dcb6.safeframe... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script appears to be sending data to a Google advertising domain, which is a common practice for analytics and tracking purposes. However, the use of obfuscated URLs and the large amount of encoded data being sent raises some concerns about the nature of the data being transmitted. Further review may be necessary to determine if the script is engaging in any suspicious or malicious behavior." }
(function() {var u = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-Cd8i-54KLlkcsTvA0VmjIice7YGsMjjgjkapboWvTd8Dq9Y8-2p4PeT6hhgl6EAhtuuoABUXxSxptoIqh09J0ZFXdWeGSPKDCaVB_Qu84tsfsO6oWLCimCEDbk5ne1hp8IqYHObSOnzmRcAIlIO18WjFs3GkA6G0EZlfW7F1_GAPJcFcbpJ6vFk_BpG4DYVU-bplqirAb69LCYmWRMgP5f0mKTHhXpo49YYXpFcw7IMMfn9wI&dbm_d=AKAmf-CYWR3YKXshE4JIvm_Oac9h_bytbwT-pezT_ixJkGMDhzS6PMr45IXemSzBiNDlkgtK3co0V3dPLknHBk7WRq9k641U3hXVi8HQjtSVK8vl8qukcdMwClTH0Bz3oBrZbLESR-JFbESR-BzQc3inMWtOfEC0MhFWOx9DOOEphgs5gIP4-xl52b3642bYVRttpTsJQu1NzdOFaEvqudJlOCUos6QrHR5yfTm2PSjOo2vUS6dHbI4p8fVBBEdr39QYQRDM-fPgt9LvjfjYfRwTKo6lKdVnWMc4bW2re7XLZnjmBzwWcqVWdNR8_DjqvWZF3SfRKZXPf-lp7RTlgsbjxY_vFYtY6VuY1EWXrgfGVj9HPZWxGvMF-f9-BfItWZc9MDEs8ujKUahWZFPdeXKMe1mjR2x0R1GWtHjrX7E3JthbjVlfZM8HrGQ0kTZXr8pgdGBVGQl2IVyMp4CwrUf8jptrKsLThbmj75Vb0cotrBHsCD0_ucBT0UE_HQ1wt91ka8Y7fDnN-f5D1Wh9J7fIAulGfHGi6rm8gp_hkriltcgNNedbJdeupNcToP1wbPyyy4JdJjDejpBIFH16hAPoQ0CphiO1EIbMc02JAAYKFsMrwGuM8_jbz6pmBvh09oFWGOcmQQfPpUk-_VD3CjQUgsu--l0MhctKwabHNAXDLFZegGmLn5pOlo4jBz6o5J_KRgyyOqDRVQ8GMZrUAbKXpPi2BRXX1mSCUq8vxmKhdmzExq7h50p5txY9pdN6w3A5xOnW3mVQRV-mDrnKAPSTACYrV1Gmay7KjLTG9mzQRc07ohJ_RPXIXL-lE5C72J9h-pHUiT7eG8KUFoWg6tycap5WLYEvDFrLgr81rF0SnTH9VzKNYC7F1O6uQ6CE6lxZL12vaqHhz3qOwoKW_SzkEQhVVrGKgy9PaYejESGe4ZjztPpTiniKqjQma5CVR0C66O6nbqDtvOnmZHpjF_g7GhInWSsGYnJrCfm1JcmAmjbWjY0dCS5XTv_vlGDmaj41rJpVLtYvOwDHscUYN3pO5McGY0rsbggCWX57osVoHMUWRhYFzYer3i1ZQosJ0lUmtD-bRMSjUj4gHpW3ebIQMe-Hy9KzYwT9arvVPrDya476vyWSsYpjf-ADDi2vb5CON94gPR-WkdCY71f1jlXBv4kiEIRtv4tAvKsa9JBBNlATxoUXg7sz3ql9Uk27aIK4wjb8lHIkoc1abWntTLMhIGlHrnl5JYgXiHwa0RmWgeEunIWtTu4X9C7fCLxPD8U0c3h-i46xwceXCy4Rlkl2M9jbVZ_n4LgzAVEWu5ugI9JqvoQ8gAsqnCCENMTu0t7gbfIXw_Ffl7oOiXBcX6-452qAvkIEuWuDMd2i4TR6SEB87V7US4WnStVxnHDik2Y1dQAmqqNdHtCQsKqKBhct6lm39vwmtqu56H-WV84koul2PTFsWyBIiL53soqqk6M0f-Ta5o4oaVXLOFHvrZ4jgh34VjxSrgmFb-nYkgJaPFLEc-ucqwV5vrHN2dnXaeYNdtmobsa4PvVxh7j24vBPAgQJ5OZqzAmIeSxNblSJbefD0ThJH8sJfiRDhHtO206Lk_FcaQiBks6rseHe19T62zqqZA50khp0EyR_94MpqiLN-LuU4bfV8aXhGtEQE0bc9kw7NhNZ2THjhs1S1UUgseyhx0UYMCQvL6MpAsnDh9oGrPppeo33C6RKwASDFqP2unPOMladn-3nZ7NC31Hu4MCqGcTeexIieG_QE79WVboRB6KZMDRJWYCKinQvkPSZKoYmvgrC_5YvEFmi8jiOeh7Wt0ziL30-jm7JQXx_DHVehp_0sQDJ6uH7YnbXR_7GE20gp6zxfcENHg68-fUj0RgOOkAkgEGCx9WR-BEgGDhMjZcYWwGinjwcY1BHq3ZcDVbsAyGCjcRWC6U6WfIWfPUs3aBE6zhsFAw3XwJJv_v86bxspcnbYUVyg95DZ2CTgvRs8-Mb3LD2yfIhtfvU0btrGieh7-Q8iWS350eswAB_ZLcT9JuythH1jVYggRYbSXniad4PSZ0241VfnX_kzVa9aY9XqbJhKIguVKYsXjUHyXflaDkkfuWsAx4vMGoY2OkvTt33bom-MFSk4EAdFcN4lEnOUyG4_meZDRmRIpUkemwrvCtThX7ZlCe8JDWuKcIyU_o1q3SaLsLiduTeJHtWSyZM34y6mqSQ6n0dV-mJ4fyL1I76Imi-216bTVUFu47OW6NZNk_kv_VEhcAhzBfPclLfLjDsebRJLkjPIi4drLN6kuVC1vfRdY6vX_5ytKXfzY0AoIWCuYOUzo7tZUWkzDhO0JLTWz_Pae1oIduNOtacp-myULHzqzkbMXPw68MBEPNna4-lT2ANEVelwU3OOiGXrF9--eHQi36Em_B91V6d1fOKB5L5Q-MFk9tG8KEvRkt_SrqM1iu-AHc0wzZFLRNJOvJ7G0BinddCuLDigqZk91ySIzeGtJHKuyTwV5SFVjd7MJlI7zZcQAPSb-eN-eFsmNU-ESkAh7-5onypIqgdvIQ8Xzq-nChXzXSS6wyr3US-Hp0ll1L3YO38WgBpj0gdHOpWx8fM_6k5TV945mqogcaJFbsfC5mBrS9_HKfdvasBlQcK6_kNPjkEsKvHdeIWU2d2-0IWqfllq6mCPhY-iRjdmEGKrdx1N-hMrEaqMAkanzE9vZyoaeTRk-WxzOsZ9pShHhGcro_MmrzWqYQcC_nct9_DS2UTpRPBubkSFFgPcyGDiBt4tuPNGprc1cFRHSfQqBWiJGcotnTsYzrz9Cr6kDsDYcYvP8uhb2nYTSy4dieT-Bw0dLn8o3YUBARCtiP5Nz656sZFRTiBq6IA__qsa8XAd4bcPdo96zHr59w9E7HtNy975NWMQ1LcWLdmNzOYAm8fVs02iT8uiJqiGi4QwZmRhNisu1LnyKr2f90sb4UdmKRTfwg7XaVuc4LQClWAJ0uma-Hktz91VCNVDJjHBz0kL4BxxmZSu8H0l_zupgZNZZtDI2EWyOqJBS60jxPUOiw0cm9860waBk55XM42_2vznJpIynFYUmk3cdB9YONM7Ksg4gVoDWeFhPgpAdqBmFAZXvLhn_fNYJiDi_XpePJ3ndF_liIqZ1SNDn_Tgisfe6TWjmF4KFc6RAJaWIwVITWrkXUYYlfjur5-z1JgRwSDsaIhRu8C8MmWjfltRmeiJUJoGx86iWx3NzgQ_poegfhaPjKXE5lf4jz-yKTE9tpPbcQ55GENYKlLvPVgm8v4FD3N3dYpSwiEtqJ5SjXTGGPFuLRvFNbbvT26YSdEFp6L4wmNkpqN4wQk8wHcdIjwnCDBgbAm7ty9UOehKbJ-NC4i13dFjHwcXJ_FLd1qr1YWi5-rudPHO2mUr1zrc7K1iBF74TDjKxtitUD7pHNL2CcKBONWu0th9XlzNY5PFdAWCwIhSiIhdFpmY_4xY_DJyx-5OMNMEsnV7MLM7ky_xMq1rokR1utj2JEYORd_jM6nh7SFqaXth5Cbxfhcb2rqVnHGlnguQT4IXr6oNpq_bBlZmw9g7MoUgRW4cJIDZcen-___C-464nSDHfFgl5B0AQM21c3GTkjkLvG6FoY6tQMdhgOBM46eg63bk7ITcWOJzsbbCujt1AVnhAmTWzsieiqvGXTZvlf_soW
URL: https://talktalk770.weebly.com/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that aims to ensure the visibility of certain content (`.cc_links`) on a web page. It uses standard DOM manipulation techniques and does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The script is wrapped in a try-catch block, which is a common practice to handle potential errors. While the repeated execution of the `forceShowCcLinksForever` function every 10 seconds could be considered aggressive DOM manipulation, it is likely done to ensure the content remains visible, which is a common practice for certain types of content. Overall, the script appears to be a benign implementation with no clear malicious intent." }
(function(jQuery) { try { function forceShowCcLinks() { var ccLinks = document.querySelector('.cc_links'); if (!ccLinks) { return; } var ccLinksVisible = jQuery(ccLinks).is(':visible'); if (ccLinksVisible) { return; } ccLinks.style.display = 'block'; var ccParent = ccLinks.parentElement; var ccParentVisible = jQuery(ccParent).is(':visible'); if (ccParentVisible) { return; } ccParent.style.display = 'block'; var ccGrandparent = ccParent.parentElement; var ccGrandparentVisible = jQuery(ccGrandparent).is(':visible'); if (ccGrandparentVisible) { return; } ccGrandparent.style.display = 'block'; } function forceShowCcLinksForever() { var tenSeconds = 10000; forceShowCcLinks(); setTimeout(forceShowCcLinksForever, tenSeconds); } jQuery(document).ready(forceShowCcLinksForever); } catch(ex) {} })(window._W && _W.jQuery);
URL: https://2353bee1e702193d8a081ea08f00dcb6.safeframe... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a part of the Closure Library, which is a well-known and trusted JavaScript library maintained by Google. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code seems to be focused on handling URLs and creating safe script URLs, which are common and legitimate use cases. Overall, this script poses a low risk and is likely part of a larger, legitimate application." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/ SPDX-License-Identifier: Apache-2.0 / var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={message:fa(v)};var c=void 0===c?{}:c;this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta=c};var w=function(a){w[" "](a);return a};w[" "]=function(){};var ia=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?#]\|$))?([^?#]+)?(?:\\?([^#]))?(?:#([\\s\\S]))?$");var ja=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)};var ka=RegExp("^https?://(\\w\|-)+\\.cdn\\.ampproject\\.(net\|org)(\\?\|/\|$)"),ma=function(){var a=la;this.g=x;this.h=a},na=function(a,b){this.url=a;this.j=!!b;this.depth=null};function oa(a){f.google_image_requests\|\|(f.google_image_requests=[]);var b=f.document;b=void 0===b?document:b;b=b.createElement("img");b.src=a;f.google_image_requests.push(b)};var y=function(){this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"string"==typeof c&&(c=c.split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(String(a))},sa=function(a){var b="https://pagead2.googlesyndication.com/pagead/gen_204?id=jserror&",c=ra(a)-27;if(0>c)return"";a.g.sort(function(za,Aa){return za-Aa});for(var d=null,e="",k=0;k<a.g.length;k++)for(var g=a.g[k],A=a.h[g],O=0;O<A.length;O++){if(!c){d=null==d?g:d;break}var q=qa(A[O],a.i,",$");if(q){q=e+q;if(c>=q.length){c-=q.length;b+=q;e=a.i;break}d=null==d?g:d}}a="";null!=d&&(a=e+"trn="+d);return b+a},ra=function(a){var b=1,c;for(c in a.h)b=c.length>b?c.length:b;return 3997-b-a.i.length-1};var ta=function(a){if(.01>Math.random())try{if(a instanceof y)var b=a;else b=new y,ja(a,function(d,e){var k=b,g=k.o++;d=z(e,d);k.g.push(g);k.h[g]=d});var c=sa(b);c&&oa(c)}catch(d){}};var fa=function(a){var b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n")}catch(e){b=c}}return b};({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js")));({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S])$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secureframe\.doubleclick\.net\|[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.usercontent\.goog)$/,wa=/^(pagead2\.googlesyndication\.com\|googleads\.g\.doubleclick\.net)$/;var xa=function(a){return function(b){var c=a.hostname,d=va.test(c)\|\|wa.test(c);c=[c];var e=r;r=void 0;if(!d){if(e)throw Error(e());if(c&&0<c.length)throw Error("["+c.map(String).join(",")+"]");throw Error(String(d));}b=(d=aa())?d
URL: https://talktalk770.weebly.com/... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This script appears to be a standard Google Analytics tracking implementation, which is a common and legitimate practice. It sets up the Google Analytics tracking object, configures the tracking domain, and asynchronously loads the Google Analytics script. The script does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The use of the Google Analytics platform is a well-established and trusted practice for website analytics, so this script is considered low risk." }
var _gaq = _gaq \|\| []; _gaq.push(['_setAccount', 'UA-7870337-1']); _gaq.push(['_setDomainName', 'none']); _gaq.push(['_setAllowLinker', true]); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; // NOTE: keep the [1] if you replace this code. Otherwise cookie banner scripts won't be first on the page var s = document.getElementsByTagName('script')[1]; s.parentNode.insertBefore(ga, s); })(); _W.Analytics = _W.Analytics \|\| {'trackers': {}}; _W.Analytics.trackers.wGA = '_gaq';
URL: https://2353bee1e702193d8a081ea08f00dcb6.safeframe... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate concerns, including external data transmission, the use of fallback domains, and aggressive DOM manipulation. While the intent is not entirely clear, the script's complexity and obfuscation suggest the need for further review. The risk score is in the medium range, indicating the script requires closer inspection to determine its true purpose and potential impact." }
(function() {if (!window.GoogleTyFxhY \|\| typeof window.GoogleTyFxhY.push !== 'function') {window.GoogleTyFxhY = [];}window.GoogleTyFxhY.push({'_scs_': 'ByAJL3fqCZ5CbJrDjjuwPitDEmAcAAAAAOAHgBAI','_bgu_': 'https://pagead2.googlesyndication.com/bg/-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM.js','_bgp_': 'tUwpQM0cvcvgJdkiCbYSfPfK9ZbiryKfXH/uoGprmqMGPlDpBoubT6vLZAjp3EMNdS27PVzJqv+STHDDQ93GwTasUbKUgGwyaHSh6w6cP/jKKvufUtrs4NiEgZuuG/f0YOqGcPNzA3FqBc8icLd7gao/zHlZP+w/s6J4NOi/jHbICYfF05leNhpFb09ApjApe6YB5+Q59GRstKA5CHtdZbgIQJjNIoNu7+EeF3pFSk9sW9vzWbWl79Wlcy2h0czZq5NMbUBVG2vhAZAlV0R0rDa7KJeOXRvDP8yze8RrtjlO+Nv77Eq3fOyMB21xxd7KxxjQrpA+jllBwV9FhDVRNt+E0Dti705Ki/3jbw4YNCOd3pPFC+LlFa2KVWif6jx2Rl6Qvp2A6DTdnr8IP/+rLEbfgD22/vO0k8RtMlTBRyrpXPcCqSz8sy7aDQxb4X8Jqffk6Q/DF4Pxpx5r2vozv1eWaPvlgB/a9xM3hDbzu+/ux1hfVTsvwYszMxD9TvBl1AnSoHw4XvicLNNBfnkvYCF/zeSkmlA4eYhQtq8j0ox22ZN6syp1BZoY93tM32GHdjbtmEOZ6OsEsiQbEvkBZ1PC1V3hIsbzbZtxSPu2ar8xIHjkkVthrrhvl3DGFJTrV4EeQQMkLzCgFiYjbCMdSjAHr+osAhG0BZB+4dvYbUc08USlDfCay5DaGfJ23UjClFBoUPh1TwQPY6ze2z5X689gGe7xb3C2RFWrpw8JEiMjOva7w48w/NTSDWbIiBmY/13ugD6f6/qJULK+BNcatAGElWBCX4MFgUJhh6oXQWvTixS7O9epvBLoLSmEc9qCcuub579Wj5N/ZNHalCXLluRd72WUJc1pRN8OyzNWKi9h6KF99JOKQCrJduERl+773ixh8bJpEQf6N2AZgCWPDCp0sAtqhMg1yXaeJlKf2HzAOQf1zfU+1NlZcMt/mYc9CA1Rt/hSqQYkr5dREyotesIW/Hh6VUfV9LKbF/jJSUGn9DcJcTUJWqg1wzqs9LnUz8ulOphvaNm6lJC1EkKZOKT3fl9Xq1Zk4ukOjH2tcPjP4dmJBqyfDoBd3WOurIHH9BE7inKs9nXqVep41PmGrm6YT0vepANihpptEhH+FsRqNGsl82yx5pG3F5MV2uxSDBVxso8FThYR24pSMj/EqaFUo2Tk3TGd0NaDiWaJ15+vDc3AkrLkBuwmVdc+5JqTXc/sYi5lXGSjzyuMtEQsMpB60RvrW8w/XhTSOgHZ6Du1kcfPuCGq2HrSZARZjLgQl/iFCuzq3eEB+tmbIHWiOFtI+BRUOW+o2hjvQKteQEiKrDW7DC55l8gU7nlmxP4aRjbrjs4e09mbj/0/v7zgKy4tBm9vMEoinJHDkX0lJxPV5qW7ovqNGCezzZ61zv6ASwvezf9lo3xo7zPvy8BftkCn7lnNMPv0Yi3vLt9aqThu21u5/OyGlMl/IpULaXJmcmHFDl/iwCyuE5ovJkgXECqsG6oDMQp9m152KZMb0PDifittcaD6AqBAeFa2AWNB5tBpg0vNVGMjXkp6QihAWR0J8IGFolgdkYmtmTQmvMxlGNXKW/6ajJ3hkTm6PzetguzP6rbFiEsLs+ms+RnYFD8G80qE6PIB1qWnUUuwSIoWI9be3DUdYvPT9WBX6p/dfVZlS+pvCFTYYa/aCnPyQz1fVXoVuf6+G/SCXZCvvKiGq2vvzGOpFgERRRGUw/R9Y4gwTKihCS5EvWd0TCEElUTdV9eV3rZxC1mt1aYTM74J2IEOLe1o6B38HjaRcLPH1pcummppE2TIiBM6H7ld57GDE9lOmslfkiXNA9+Bobd6WDdj5ys1oc/6kgJcUWU9Cf46eprFxVD46DBIxt/GHrtGhHxzrRVSMSu8Dvy8BYNqJB9oYR0KCikdQOS6HdQNIF5u1n7KzPefBIDmHJuwxUMDpaeYp0LxN1DvTOBXpHcYO9EleRDwB0SzOo7dpPKUOmMNjAuwvvD9iSMy3Q+8Hhfu9q3F2O1LP/miiLF3u517Tu1mJ1zaZi6vU95UKVpOGxbAJ6ShMxi0BBGQAQ5PX+LV7fK3IhXZufjK8axhD5yVgBmAqpW0PY8+K5JpLIFp0s6mpCvsQOfcZgpNpFTkd5jYB15NPL57UZkVAJYRtkGbupHUP+Yur0rpdZdWfETSbe446TI3vk5VfEQsR5fpFZgkEXRoArohs6vOhlSwHVgRkFveHVytlmmG8X2THlcYP+JG/Q5FYcL61XhSCP4714VEzIV1OOJtzEQhdv6relIMCW6ZksqJQ4IkI8ZF0EDKT8BwdPX+XEzi/rgaBRlgRAFQmFn33y5+ccB6EuS6wE1APWgs+w5py89aWuheXs29p7ggeQ/KCDZ8XR8O4s6VBvZXz+nIJRlvfq7GfhQTRuINH1w6Rq1UiSzHknOQ6JEpm+3gDub5AvDMQ5houqpvt9j9eo9ZGaednxPfTw8UXbzpfg88ahajUonmbS4Utqbjw65FE2uYDy0PuQWJnNthFn144oLKaKPTwQ0+3dRH3gROnZNncgL+M9aX2NwdW62l15KnJJfMdPVc4R5PNFE9J4/pgGR3yRX1LsM54m7NYLBr90NO+Cndpd6uJMI1y3c5/Rz5EIwJEnc5HDDtlEvwKe2Ou2BuBvJHHfVwm28aHyeJI/a9YwkOeIIlubkrZVWTWI1UQSEoNZTNIS374eNyaG2kEw2akrewEWMSu4AKksP27EGdZvli2zIGwfgAbkvmc3/UepuhgZM77WkL7jIwPrLQhfJkvuSJbfUzOMbmmR1mQqkAHrjL4SmYaDQ3pPzaAq7FE8jkSI6d68ifGeBQ3xYJC1Y6EB2qF/uFQ5g7KDFJKS++ikD3DU5oqR1jhlM86A9NFPmIv1Le5BbDNzcaK75bmB8LcQrZdRMWiYuwNZla7bLmVUBbazjM6X5p/4ofEGVuFmiPueMxEpv/gobe7ihcl+Zrie5cwSocQ11VLumZEqkWmR4ZCgKFG9yYKINAKceg9uJmqgKMaYmMlWTCIVFDxXF8v5Lea8mVvScXfDlEs1/Q4dvmajge7uWvfCiW0Y/x6S2C9FGUeOZh/5U9I8Jg1MfnflZEsxZ+wREIt0GN2r6VMEcJfNAynBoLVCxXoJgLil48VzJIbxBVOkoG8ObWe3EyuADo71rsyF8CG0PU2y0CBqAqaJw98Pxt+rhsAMsNk1S0tt5ot8sATJy0EksHnOfqEklG7GSU5cFH3ziIFhVj7U7IY+mV4TAvrN3rPh7Kna2wUzrRX3chKne9f8pM22hlSYDjFjD1k8gxvH3zMki3Ot/XQ3FIZxJrDDw5qGEFkd/y++2oZUoRKZb+VVpCTgqQ+4D3xyyNabSZQ46kXx2ezPfhK/Yxhiu2J1sw7C+8kdxjuuuOaj+hA+7BtS/RPuerni6lwTCPvJ4RnRxK3VaiwEg5Tw8BRPi1Xqd+l+/Obkb1dhjiKDfncZDKMbPrnpdptlJdFLjVIRxZ/98I4JfnC/GXwwXNpgMcdC6/Lp4K1Q7H80of3y0pM047FcFFmUTrmTf7KPsRVEqqAhrK9/XOcdFf/I9QfV9L1LFdHgzGN0w60bv25A906lnlIJwzhVMTQ6iRpadR4CGL6VXNV1utDsFU95G548I8mCYWbpASrCxn/dLYpPZv1Nm0Fl9huwfaDXd9oB9AynqMUXtHGPnb8bdiH
URL: https://441e80a594f839abb072b05656603517.safeframe... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a part of the Closure Library, which is a well-known and widely used JavaScript library developed by Google. The code does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code seems to be focused on handling URLs and creating trusted types, which are common practices in web development. While the code uses some legacy APIs like `XDomainRequest`, these are not inherently malicious and are likely used for compatibility reasons. Overall, the code appears to be benign and part of a legitimate library, so the risk score is low." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/ SPDX-License-Identifier: Apache-2.0 / var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={message:fa(v)};var c=void 0===c?{}:c;this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta=c};var w=function(a){w[" "](a);return a};w[" "]=function(){};var ia=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?#]\|$))?([^?#]+)?(?:\\?([^#]))?(?:#([\\s\\S]))?$");var ja=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)};var ka=RegExp("^https?://(\\w\|-)+\\.cdn\\.ampproject\\.(net\|org)(\\?\|/\|$)"),ma=function(){var a=la;this.g=x;this.h=a},na=function(a,b){this.url=a;this.j=!!b;this.depth=null};function oa(a){f.google_image_requests\|\|(f.google_image_requests=[]);var b=f.document;b=void 0===b?document:b;b=b.createElement("img");b.src=a;f.google_image_requests.push(b)};var y=function(){this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"string"==typeof c&&(c=c.split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(String(a))},sa=function(a){var b="https://pagead2.googlesyndication.com/pagead/gen_204?id=jserror&",c=ra(a)-27;if(0>c)return"";a.g.sort(function(za,Aa){return za-Aa});for(var d=null,e="",k=0;k<a.g.length;k++)for(var g=a.g[k],A=a.h[g],O=0;O<A.length;O++){if(!c){d=null==d?g:d;break}var q=qa(A[O],a.i,",$");if(q){q=e+q;if(c>=q.length){c-=q.length;b+=q;e=a.i;break}d=null==d?g:d}}a="";null!=d&&(a=e+"trn="+d);return b+a},ra=function(a){var b=1,c;for(c in a.h)b=c.length>b?c.length:b;return 3997-b-a.i.length-1};var ta=function(a){if(.01>Math.random())try{if(a instanceof y)var b=a;else b=new y,ja(a,function(d,e){var k=b,g=k.o++;d=z(e,d);k.g.push(g);k.h[g]=d});var c=sa(b);c&&oa(c)}catch(d){}};var fa=function(a){var b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n *","g"),"\n")}catch(e){b=c}}return b};({})[3]=da(p(new n(l,"https://s0.
URL: https://2353bee1e702193d8a081ea08f00dcb6.safeframe... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a part of the Closure Library, which is a well-known and widely used JavaScript library developed by Google. The code does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. It primarily handles the loading and bootstrapping of rendering libraries for various ad formats, including lightbox, push-down, and expandable ads. While the code uses some legacy practices like `XDomainRequest`, these are not inherently malicious and are likely used for compatibility reasons. Overall, the script seems to be focused on legitimate ad-related functionality, with no clear signs of malicious intent." }
(function() {(function(){/Copyright The Closure Library Authors.SPDX-License-Identifier: Apache-2.0/var g=this\|\|self,k=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var e=c.slice();e.push.apply(e,arguments);return a.apply(this,e)}};var l=function(a){a=a?a.toLowerCase():"";switch(a){case "normal":return"normal";case "lightbox":return"lightbox";case "push_down":return"push_down"}return null};function m(a,b){for(var c in a)b.call(void 0,a[c],c,a)};var n={o:"ad_container_id",D:"hideObjects",J:"mtfTop",I:"mtfLeft",N:"zindex",u:"mtfDuration",M:"wmode",K:"preferFlash",A:"as_kw",B:"as_lat",C:"as_lng",F:"mtfIFPath",v:"expansionMode",L:"mtfRenderFloatInplace",s:"debugjs",G:"dcapp",m:"breakoutiframe",H:"inMobileAdSdk"},q=function(a){m(a,function(b,c){if(c.toLowerCase()in p){var e=p[c.toLowerCase()];c in a&&delete a[c];a[e]=b}})},p=function(){var a={};m(n,function(b){a[b.toLowerCase()]=b});return a}();var t=function(a){this.g=a;a:{for(c in a.displayConfigParameters){b:if(a=r,typeof a==="string")a=typeof c!=="string"\|\|c.length!=1?-1:a.indexOf(c,0);else{for(var b=0;b<a.length;b++)if(b in a&&a[b]===c){a=b;break b}a=-1}if(!(a>=0)){var c=!0;break a}}c=!1}this.j=c},r=["ad_container_id"],v=function(a){return a.j?a.g.displayConfigParameters:a.g.creativeParameters};/Copyright Google LLCSPDX-License-Identifier: Apache-2.0/var w={};var x=function(a){if(w!==w)throw Error("Bad secret");this.g=a};x.prototype.toString=function(){return this.g};new x("about:blank");new x("about:invalid#zClosurez");var y=[],z=function(a){console.warn("A URL with content '"+a+"' was sanitized away.")};y.indexOf(z)===-1&&y.push(z);var A={pattern:/rendering_lib_((?:[0-9_]+)\|(?:latest))\.js$/,i:"rendering_lib_db_$1.js"},B={pattern:/\/[a-z_0-9]+_rendering_lib/,i:"/iframe_buster"},C={pattern:/(.\/)(._)rendering_lib_((?:[0-9_]+)\|(?:latest))\.js$/,i:"$1inapp_html_inpage_rendering_lib_$3.js"},D={pattern:/\/[0-9]+\/[a-z_0-9]+rendering_lib.+$/,i:"/ads/studio/cached_libs/modernizr_2.8.3_ec185bb44fe5e6bf7455d6e8ef37ed0e_no-classes.js"},H=function(a){var b=v(a),c=a.g.renderingLibraryData,e=c.renderingLibrary,d=c.version;if(!/express\|image_gallery\|dfa7banner\|inapp\|obb/.test(e)&&(d=="latest"\|\|E(d,"200_74")>=0)){a:{for(d=0;d<a.g.primaryFiles.length;++d){var f=a.g.primaryFiles[d].expandingDisplayProperties;if(f&&l(f.expansionMode)=="lightbox"){d=!0;break a}}d=!1}d=!d&&window.mraid!=null}else d=!1;d&&(e=e.replace(C.pattern,C.i));b.debugjs=="true"&&(e=e.replace(A.pattern,A.i));(b=g.self==g.top)\|\|(b=window.Y&&window.Y.SandBox&&window.Y.SandBox.vendor,d=window.$sf&&window.$sf.ext,f=window.$WLXRmAd,b=!!(window.IN_ADSENSE_IFRAME\|\|b\|\|d\|\|f));if(!b){a:if(b=v(a).breakoutiframe)b=!!b&&"true"==b.toLowerCase();else{b=a.g.primaryFiles;for(d=0;d<b.length;d++){f=b[d].renderAs;var h=(parseInt(b[d].width,10)\|\|0)==0&&(parseInt(b[d].height,10)\|\|0)==0;if(f=="EXPANDABLE"\|\|f=="FLOATING"&&!h){b=!0;break a}}b=!1}b=!b}if(b\|\|a.g.previewMode){a:{a=e;b=F();for(d=0;d<b.renderingLibraries.length;d++)if(f=b.renderingLibraries[d],f.url==a&&f.bootstrapFunction){a=f;break a}a=null}a?a.bootstrapFunction():(a=F(),G(e,!1,void 0,void 0,void 0,!0),a.renderingLibraries.push({version:c.version,url:e,loading:!0,bootstrapFunction:null}))}else c=e.replace(B.pattern,B.i),G(c,!0)},E=function(a,b){a=I(a);b=I(b);for(var c=Math.min(a.length,b.length),e=0;e<c;e++)if(a[e]!=b[e])return a[e]-b[e];return a.length-b.length},I=function(a){a=a.split("_");for(var b=[],c=0;c<a.length;c++)b.push(parseInt(a[c],10));return b},G=function(a,b,c,e,d,f){var h=document.createElement("script");h.src=a;h.type=c?c:"text/javascript";h.async=!!b;f&&(h.crossOrigin="anonymous");e&&(h.onload=e);d&&(h.onerror=d);var u;(a=document.getElementsByTagName("head"))&&a.length!=0?u=a[0]:u=document.documentElement;u.appendChild(h)},F=function(){return window.dclkStudioV3=window.dclkStudioV3\|\|{creatives:[],renderingLibraries:[],creativeCount:1,startTimes:{}}},J=function(a){try{if((a["cps-top-iframe-beacon"]?a["cps-top-iframe-beacon"]:null)!=
URL: https://talktalk770.weebly.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Mark as spam", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Email Address", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://talktalk770.weebly.com/ Model: Joe Sandbox AI	{ "brands": [ "TalkTalk" ] }
	{ "brands": [ "TalkTalk" ] }
URL: https://talktalk770.weebly.com/ Model: Joe Sandbox AI	```json{ "legit_domain": "talktalk.co.uk", "classification": "wellknown", "reasons": [ "The brand 'TalkTalk' is a well-known telecommunications company in the UK.", "The legitimate domain for TalkTalk is 'talktalk.co.uk'.", "The URL 'talktalk770.weebly.com' does not match the legitimate domain.", "The use of 'weebly.com', a free website builder, is suspicious for a well-known brand.", "The presence of numbers '770' in the subdomain is unusual and could indicate phishing.", "The URL structure suggests a potential phishing attempt as it does not align with the official domain." ], "riskscore": 9} Google indexed: False
URL: talktalk770.weebly.com Brands: TalkTalk Input Fields: Email Address, Password
URL: https://talktalk770.weebly.com/home.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Login to discover your new TalkTalk Mail today", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Email Address", "password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://talktalk770.weebly.com/home.html Model: Joe Sandbox AI	{ "brands": [ "TalkTalk" ] }
	{ "brands": [ "TalkTalk" ] }
URL: https://talktalk770.weebly.com/home.html Model: Joe Sandbox AI	```json{ "legit_domain": "talktalk.co.uk", "classification": "wellknown", "reasons": [ "TalkTalk is a well-known telecommunications company in the UK.", "The legitimate domain for TalkTalk is talktalk.co.uk.", "The URL provided is talktalk770.weebly.com, which does not match the legitimate domain.", "The use of 'weebly.com' suggests a free website hosting service, which is often used for phishing.", "The subdomain 'talktalk770' is suspicious and not associated with the official TalkTalk domain.", "The presence of input fields for 'Email Address' and 'password' on a non-legitimate domain is a common phishing tactic." ], "riskscore": 9} Google indexed: False
URL: talktalk770.weebly.com Brands: TalkTalk Input Fields: Email Address, password
URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Login to discover your new TalkTalk Mail today", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Your TalkTalk email address:", "Your password:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	{ "brands": [ "TalkTalk" ] }
	{ "brands": [ "TalkTalk" ] }
URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	```json{ "legit_domain": "talktalk.co.uk", "classification": "wellknown", "reasons": [ "The brand 'TalkTalk' is a well-known telecommunications company in the UK.", "The URL 'apps.talktalk.co.uk' is a subdomain of 'talktalk.co.uk', which is the legitimate domain for TalkTalk.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields are consistent with what would be expected for a legitimate TalkTalk service login page." ], "riskscore": 1}
URL: apps.talktalk.co.uk Brands: TalkTalk Input Fields: Your TalkTalk email address:, Your password:
URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Login to discover your new TalkTalk Mail today", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Your TalkTalk email address:", "Your password:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	{ "brands": [ "TalkTalk" ] }
	{ "brands": [ "TalkTalk" ] }
URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Login to discover your new TalkTalk Mail today", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Your TalkTalk email address:", "Your password:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	{ "brands": [ "TalkTalk" ] }
	{ "brands": [ "TalkTalk" ] }
URL: https://apps.talktalk.co.uk/appsuite/ Model: Joe Sandbox AI	```json{ "legit_domain": "talktalk.co.uk", "classification": "wellknown", "reasons": [ "The brand 'TalkTalk' is a well-known telecommunications company in the UK.", "The URL 'apps.talktalk.co.uk' is a subdomain of 'talktalk.co.uk', which matches the legitimate domain for TalkTalk.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields are consistent with what would be expected for a legitimate TalkTalk service login page." ], "riskscore": 1}
URL: apps.talktalk.co.uk Brands: TalkTalk Input Fields: Your TalkTalk email address:, Your password:

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	45877
Entropy (8bit):	4.956710178074938
Encrypted:	false
SSDEEP:	768:lCBaz8/sEgxyG5abm0m19so6cragZRJezVXCQgAGCiTPFE/2:lCBaz8/svhEm0IsqragZRJ0CQgAGCiT3
MD5:	641A46918534883C6CDFF35E0AFC502B
SHA1:	F140841F16A9F3EBE3A5AFDFDDDC5C6FD7A4DB9A
SHA-256:	2391C6684CDA48B07AE69E33490FD9308E3801F540525521844845C0955C6164
SHA-512:	3DB5634248DDFA9BB86AFDF45E7E64E9F848EB9B6E3FB62E7E09F7CFB642AC6A783A97EBDF774E09C41011C8417B41ABDC6ACF01CFB750D4C60195EDD7F12435
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/files/main_style.css?1736414015
Preview:	ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, div.paragraph, blockquote, fieldset, input { margin: 0; padding: 0; }.ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, p, blockquote, fieldset, input { margin: 0; padding: 0; }. input[type="text"], input[type="email"], textarea { -webkit-box-shadow: none; -moz-box-shadow: none; box-shadow: none; -webkit-appearance: none; -moz-appearance: none; appearance: none; text-shadow: none; }. input[type="text"]:focus, input[type="email"]:focus, textarea:focus { border: 1px solid #777777; }. textarea { resize: none; }. select { -webkit-appearance: none; -moz-appearance: none; appearance: none; text-indent: 0.01px; text-overflow: ''; }. .wsite-form-field input[type="radio"], .wsite-form-field input[type="checkbox"], .wsite-form-field #wsite-search-sidebar .wsite-search-facet-availability input[type=checkbox], .wsite-form-field #wsite-search-sidebar .wsite-search-facet-checkbox input[type=checkbox], .wsite-com-product-option-group

Chrome Cache Entry: 1001

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstYxwqmRGLx__xoXFKKbjz_zGeoogQ-sk6JdoFoeeXG0Kt-_0AQscESfDY_6lzMKswsTKVWbcs0JQQUGvvsjS8OZ47UiBEgfUsg_03Awywi8SAJTl85RZHd8AEfewHgFk0pIjcLz7cIYqGsB8adaBDym3k09bdd8Sr7cB_eMRBp5yuRjkOe-OKbhvKmlpQ7l7KcCQ&sai=AMfl-YRoU84rBAh_3oQ2dsLWWcf3-4Lrqh8aCTfzhojpnVmcjd8Kldufl93PmF2CMx17kiXXpqk8pYmluLUxfz-iiab5bMmk6pdNCjsmrgRwKiDUN0M1gQdWR0thAdY6CTmGNBoERr1hvRLqTmaI6uSw&sig=Cg0ArKJSzHtAalPsXr8gEAE&cid=CAQSTgCa7L7dJPLjmdSDwq_-CCZYaJ2sfChvLlWiUwwhBPpMPSzNBGYoZ54fq6YRrewf7g-L9fcXyj1ImeHS643dLydeQZDbI2o_IEz_5dhivhgB&id=lidar2&mcvt=1004&p=98,276,188,1004&tm=1022.6000000000058&tu=18.20000000001164&mtos=1004,1004,1004,1004,1004&tos=1004,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3161023586&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=3256994900&rst=1736637146272&rpt=3242&isd=0&lsd=0&met=ce&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1002

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	3.840223928941852
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHXAC/HfI4:YGKed2pHXI4
MD5:	2B10F2ECAEB05ED9F61299877AE57299
SHA1:	9BC0D55F458E1EB66CA778E4322D46D0175D6D8C
SHA-256:	8F8BA42D03A7C5A04626835A48B8212F61A3440E51D66B4B866A8D20ACF32F57
SHA-512:	B73C28C40A33F471BFC9893FD79C6835837E28EF770F352B2A63CB3EC68ADCEB042B8A91E31C23C5E4BDBE246053A55214FC77A00C7DEB50D41E154E66969AD9
Malicious:	false
Reputation:	low
Preview:	{"country":"US","region":"NY"}

Chrome Cache Entry: 1003

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3237)
Category:	downloaded
Size (bytes):	11822
Entropy (8bit):	5.31177654130854
Encrypted:	false
SSDEEP:	192:X+5WzIjblzXpfBfj+0eh73RvCyZRbkRGE7gr4Dz9LkSR8MWQYBE:O5WEzv0nZRYgr2CQY+
MD5:	1A4651E1105224B375C4A43F77254C07
SHA1:	35CCF976A6875B20B4C0144B70A70ACA3A511AB0
SHA-256:	39761E2A7CB0E42A8B09FBBF0D2C4CD9FB0C1568C045B1C5E387177DDA8FF064
SHA-512:	373E37A6E202D6EAAB71B7409914E3105D4CF1E53C1CDE78E41D6E88E1CE3242B76FA5A2D7F46E36D4E8546B0FF535E2AF32FA65783DB4EC5A504888C83A63B9
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20250108/r20110914/elements/html/omrhp.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .var ea=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},m;if(typeof Object.setPrototypeOf=="function")m=Object.setPrototypeOf;else{var n;a:{var fa={a:!0},p={};try{p.__proto__=fa;n=p.a;break

Chrome Cache Entry: 1004

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3148)
Category:	downloaded
Size (bytes):	20763
Entropy (8bit):	5.5341175332250785
Encrypted:	false
SSDEEP:	384:ElV/QT/xSkryInZ9iggcbRk4i0mlU9cizsyYBCQHdrORZWP60RLKI2HB8am+I7Ea:ElV/q/xSkrpnBuT0m+9cigXCcdrOvWxj
MD5:	621EF82BE7E3C87AE98FEA4572896275
SHA1:	F97A9C55BB47E63B9C7D63BDE3D5A20FAAE7181B
SHA-256:	AD135CCCBDC03A022ED8B29E712BD362940EFF33A079C60F1172A6449CC3D1C1
SHA-512:	401A53B7197E6CBDBA7EBB08A107AB9466F9A44F4B6DF9461944B65A4ED2A06D45A58EACD68FCC671030AD0034CB00B21D33E7CA2F18BAA8A6312C93A6FE3548
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250108/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ka(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ka;return p.apply(null,arguments)}function la(a){return a}function ma(a,b){function c(){}c.prototype=b.prototype;a.N=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.O=function(d,f,g){for(var e=

Chrome Cache Entry: 1005

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1640
Entropy (8bit):	7.865694686452205
Encrypted:	false
SSDEEP:	24:vQb9RrrtryczIdh/FUwAyM+Nfx3J+3wT0FIwyzd/5scmfKJxt135JoxxUoQGBn:voHndvz2/F1Z5+U1lh/5scHJxpJoxx9
MD5:	BAFB0EE781322FE9C89EACEDBF843183
SHA1:	22CA7B9BF574579ECB02F135175F15513F263FB4
SHA-256:	EA0D2104C35A5606CE75277C93F8BA86A4EECA9D52D13D22AB2D19EE503848ED
SHA-512:	4CA5244CA3CA92F084901091B0AEFB7E061C7DC28E3093D2D4ADA92325F3738D8AA3336FA641C2FABB176AEEB9B66A9DA64BA7C182B2A391A0C3E32E691E79C5
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/themes/default/illustrations/error-generic.svg
Preview:	.......VN....DKj..[..E.I..c...K-..v.Y.......}..g.X..%.o....Tm....B.HW..D6...M ..Ml...\|+.?...../..z....7.M.M{..?.........v@ ..K.r...o...k...?.y.V..._...v\...........?...-.~..+4....W.....Y....~z....C.k.)F~.M}.w....-....(.\...W..s:.=sN....m....;.N....m_..!8M.m.r.Y..........%...yD.A#w...EO...,.q-.i.F%E.?P.y.i..(L.....3...v>.vAx.G.SJ.`O.....\$......G....]jV9..P......]..q...-w...U..^...%.E8Oj...W...\w<...v..k0..'.T:S.U..^................!W.S1..UR.8A.l....H..O...?.A.."Sw.X..Q...."X..@.........s.5.E...[i..4.Y..c..p....(c=f...4..?..2.\|.W........jr...P..Z.....-.Tq5.fov^.Jy.X.(/.9.I.}........d..7.Q{...s.........B.9*E...?...l......o......y;..M'W.b.4A%jt<.r.n.bD.ta.M.V....n.SI...GGh.Z..d..B..+........D..4..,......H..+....-).NWb....(:..5.D.....1Z......p..D...-I.v...M...4......8U.-.Vot.W3.\!...V .C...;2.I>...r+...J.3.Ja.6.m....M3....Y.tJ 3....A..m.6.m..E....ef........u...7.F....._..3/{lM.....<X.......F.J..F.(...^=}.....r.....I.26...@.y.a.4NP.-m

Chrome Cache Entry: 1006

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=&gpp=&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1007

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156538&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fsync.richaudience.com%2Fa8c1b6a2754b510b088f624c91944bf3%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 1008

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	832
Entropy (8bit):	7.7322449025515425
Encrypted:	false
SSDEEP:	24:JSxBJ8FQx13dyc8CTZttwZMTWnWW0qAb4mr:JM4c3vbttPT8g9
MD5:	9489AD239690BC76354E6789D2AADF2A
SHA1:	E4B56E96DEC49BE760EB9E22BFF55ADDEF121AAE
SHA-256:	DB49A917026B856F53FFEDB4A93836C9FECB1669BFC0447DC2FC7D1ADB94211A
SHA-512:	0B9F6896090EACFF0C2D9C4CCBB8201F40CD2A22D8AEB6E83959F17945D90059E0BEF6B9C6CCB3F62E347D295E9B3F84C7396C2F7CD8E618A07058AAC3D9E92F
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/ai-4qA6hrTY.js
Preview:	.....Z.M..y...3 .w'f....,FF%.<.........u"%...bM.-".a!bV..s..6.>x......yn}..F...k.%7.....y..].I...f~..C=..uq...pP......l"...5!.H.."......9..X.. .lpQ..}...>..".3..q.M........K../&$.......s.,......!..z...x..7O.?.n.j...(g.G9.....Z.......y.."^.y...7_..........Q....Jd..,.Gh.w.M....E....`...S.jk...........[.x.%/0.-H.....C\..V3......./....s..)..d6sO....'...I'=.C.Z...-....E_.#..N.;.K.....[!.K.jK....K.+..9.{....U............,.......`.y.....5....M.._..> ......../c.Qtl......T..L....\|......q(..j..x....~~. ........'......ZD....E.^"..a..C.&E.......J.[......cA{egb=9!.....@@Gd...k.$....z....\..\.(..I..RZk..4...(/.O...R.].Xh......5$.K.$.\..p....t.hI}'X6"......uC.}z...Y&P.....4X.S.,...31.....v...t.UJ.....]..._F...e/7..y.Kk-.K...SG.a$..O~...F.2..:+Y.....wU.9D....;....P.R..k...#....jy...=...v....

Chrome Cache Entry: 1009

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 112 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2605
Entropy (8bit):	7.581585353922263
Encrypted:	false
SSDEEP:	48:j+AvnLOQzNxz21J3e+AKMI/mnnuSTkUdTvRzU9EBjjrlsSIILrt+KrP5kc:RxLCS+AzamnnuSQUdT5YCBjrlrIU7P51
MD5:	B0DEECBF47DCAC5CFACE4029A87DEFB9
SHA1:	4DF826F549BC272C30B8386D556BB5CF37E78D25
SHA-256:	4B13C1FEA5639C15297707C0876D4532BA7084E7E452488DC7AF46774374FC86
SHA-512:	025E2FEB7BD81239A5A0858DA47A6070FEDB4359D79FF381F69B6FAE6B10372586491D0A0929224467FB2033D9CF1D9850DCBB02FCF9F46DA8E44B14BB038325
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/themes/uk.co.talktalk/talktalk_logo.png
Preview:	.PNG........IHDR...p........."Gy\|....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8321665b-8e18-4268-b2f1-b00483c64e0c" xmpMM:DocumentID="xmp.did:51FDEAFA389411E7AE18B5BA82655CF4" xmpMM:InstanceID="xmp.iid:51FDEAF9389411E7AE18B5BA82655CF4" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1b75e45a-b338-4ae8-a9c8-356dd16d4448" stRef:documentID="adobe:docid:photoshop:1207d7f8-7f65-117a-9020-b27e957994d1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...O...=IDATx..Z.lVE

Chrome Cache Entry: 1010

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1333
Entropy (8bit):	7.854456902378936
Encrypted:	false
SSDEEP:	24:5zNZmgk4mcuy/CK+SmjRJZu50B8u34mMqfa0YLlXN9EXfJgFoo00/:5hM0z/CK+hkU3fNa8BgFoo00/
MD5:	7212E6903A74367ED1D6285D2AB77043
SHA1:	76BA668CC222A4B0BD13C550A98776EEEE370B2C
SHA-256:	D2334B967F491D81EE8D05236E816896167B4AA532C5257765294DA6111ED3C9
SHA-512:	3393CA54B7C33B9DFFB24724B228713AD9A5385927AE656E5DA60C12DB194DCE0F73EC46948A143758796505D894050EA0E1B4E23EBFB665C6808AF935ED0A97
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/mx-checker.e099b1ce.js
Preview:	.....~.f.~..g...$%].SJ...D.\...6.....ddb$.i.v.H+.Z.{.@..Q6..D.C..u.+......"lA@..j..n.1_..m.5....w..7.s..nw.m0....G.~..6KD.`.1\T........~..'.]0Jo6<...qK.......@.:.....ym.........Y...%.L<?..)LN.Y.9).3..y1w.oLd-i...E.R^.R.A@.%.mvS/}s1...c>...R..I.Z.&...e..\|...c:.<.:A]3......9..4eA..s..%...0...Z..U.0...).h.=7:.q.~..@...nQ..X.H:....'4[..y.KA...S..`S.2. `.....:].....!>.nc\|..g..p..._..&.H~.H".T..8.Z.......h.....3...(!',.2=.R.v....K.....!.?..E7.O.E.......>~.O..sV>..l.._.y.........[.+...n..n...;..\x..<.1..%`"......[(..>...gFv.}+g.}.........v.$........4[+.i.....".....u.\.J....6...^o$...P..e......lD... .......A....b+h.7...t...U~[....uIC.56>..TA..]a.......9..J..&...<.^_.......sC.8B.Ue6..D8D....Jr_..m.]..Av.y....X...I.X......z2..mg}\|.#YY \.@...q.....B..P.0/.$$v=...G ...;;..M#.".......edm...f,2Q.Q.f..-MJ..hak.f.#.../.8..X.$...k.../.........cC.)...c...A.?..E..DL....2w#.2.0@...Y...U..8...<3=-t......f..X.]..!".t.f.......j.T.g........*L.&..MO..T@YGU

Chrome Cache Entry: 1012

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61304
Entropy (8bit):	5.994302730149907
Encrypted:	false
SSDEEP:	1536:UIkaatEBFtVtnmStnzItn+4IGt1trr4BfJmQmmZpZ0Zh:FkpEBFtfnmInzin+4IE/rr4BfJmQmET2
MD5:	40C8AB503A5AE125E9E919EE6DA2CFFD
SHA1:	D51F5E3E88BC115A52EF721695B75A5EB8641189
SHA-256:	B6A5898DBA0684A1CF2EFF9426B6F468039736D322D187EBFFA95FC8A174A91F
SHA-512:	22A62AA312DC993F76FBA31995775A0ABF154008AB204D2D80AA976FCAD85DFDCCCF68C3A9B148A26073794957FF2DB571D5891F74F7653E1595AB186AD898B5
Malicious:	false
Reputation:	low
Preview:	{"/22786333977/apps.talktalk.co.uk_displaystandard_728x90_login_top":["html",0,null,null,0,100,728,0,1,null,null,null,1,[["ID=56d6ab38928e4128:T=1736637147:RT=1736637147:S=ALNI_Ma49qZXuMPgVEdEW2-e0ivrT-aflQ",1770333147,"/","talktalk.co.uk",1],["UID=00000fb452a7f66c:T=1736637147:RT=1736637147:S=ALNI_MaDftryuDqTkM795qH5ZV98ckGbDQ",1770333147,"/","talktalk.co.uk",2]],[138402836221],[6094372239],[5206671035],[3072062848],null,null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CPfZucLl7ooDFTGmgwcd2nUGQw",null,null,null,null,null,null,null,null,["012410292120000"],null,null,null,null,null,"rfutr46gcbf6",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=6d7a3f56718f0726:T=1736637147:RT=1736637147:S=AA-Afjaw3S3szF3OaGvFAk7WJ6lD",1752189147,"/","talktalk.co.uk"]],[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-

Chrome Cache Entry: 1013

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	5.067466976036875
Encrypted:	false
SSDEEP:	3:IDwjiH3WZNdwfOZo1MKBTV0pCuAb96wfLLn:Isjo4wmZoDqpCV96eL
MD5:	F0CEF40BAC24197F3A04D9E6762CD587
SHA1:	55CAB0DEEA056065BBDAF751095DD743412BD70D
SHA-256:	3BC719477C674531ADBD532AA75EDAC450F78EF6FFD18F1BDBFA228775D7D74C
SHA-512:	3B981CF80D1FD0F63FA6C95C9F9815BA64D2A3DA15E5E6DB84CEEE0F92BF9373B286D657F0322382C5E4A04C0A38CD17E03F19A90C22166B369AC586826C79AE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgme_wmwjYcv1RIFDeeNQA4SBQ3OQUx6EgUNMELrIg==?alt=proto
Preview:	CkgKEQ3njUAOGgQICRgBGgQIVhgCCioNzkFMehoECEsYAiodCApSGQoPIUAjPyouJSYkLSs9XygsEAEY/////w8KBw0wQusiGgA=

Chrome Cache Entry: 1014

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	908
Entropy (8bit):	7.735212742378815
Encrypted:	false
SSDEEP:	24:SrFZaRnNuyvmOllhAwsg39l3xr90aGyI8E+JrgO1l4Bb:UFkRNueyQVi7wJ8gA
MD5:	FD324481E2CE560D1D3543463B7108A4
SHA1:	5729C96BD7B6EBD6720A98809F45756EAE576B83
SHA-256:	01430655D49A99864EED4B87B0085FCE5C907D575CCA62B159BB52FAD5D6C9B8
SHA-512:	27B6DDE507A33837F70BEF73342114DCA643DCE06246B6F021BF2C6ACB0278A34045980E9F358C73B81F10BE15F55CE332DABCE9CAE5B60519163AE2EA06EF20
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/contactsdumpster.js
Preview:	.N...ZjN......1 ).b6.5.2Rl,..x`....VG.....?T...E..X$..B.t"!b..N/.<.8..... ...f.L.B..z..S.?....P.=....2..j5../.Q..0......w.5.....g..9...d..T_.z....,oV......fY.9)......H...u>.@!......7....B..P...:bd.T@.`.J.@m''UU.mP/...3.j...$...W.?Wh...-.G.i...;.....$\|x..ELI$.d.'..l..;.R..f....$.%f..UU......7.z.N..x.<Q.{u....N.9.\|.....8.J.k.H..LZ......3V>......'l...zX...Ad+..^$....Q.S..(m..v"..xH........J@^8.....?.......`.......)..;w.jJ>p.V:.Z..jC.w..=.=)..]....N.H..)X...\N.&.V...7...M.....n...d.0..~.z....;H.rC@&m.4.9!.aJM#..........$.-..0.._.....b.yb..V...e.G...Bw.}.$..E'..s..]......=.....ZLB..N.../.-...k.%H<..N..6....'E!..K.E....v.d.C.~....)n..q...\|......$..6.F.....$.dE.....[Kk.I.....I......a.,.,n.^..3E.K.$.OJ..^;H.w.y.Y>".GGqXG...}~......6;..^].!#,.......J..^e..T..>.;...9...]2..m....~[.:8@N.Lt@........I..@.........v..2...(j.o.!.m..~.,"...#.G.vq/j..0v.,.4.>.......... :P6..

Chrome Cache Entry: 1015

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (1630)
Category:	dropped
Size (bytes):	7160
Entropy (8bit):	4.819263409497788
Encrypted:	false
SSDEEP:	192:tUpqUXGMhJpJuMEpVyfWsgBm6zCg/8LWLEBOqpJ:tUpqUXGMbpJudWgBrb/8LWIJ
MD5:	AE81AB7069097A055829FB9919258138
SHA1:	7DC529F16FB595BBBFC5937ADFE1D0A5CF563F8A
SHA-256:	5A630B41E7C3D34392BCB150A5731B6261BC6314D71D5DB8407A646AF15BF8AF
SHA-512:	923F0E92ED682F638ECA768065630AD26195F03CFD54BA235531C50D587321E45D0E0000E811F943557BA08D9C8A21A3F4B430433370C28C456ACD6B094C63DE
Malicious:	false
Reputation:	low
Preview:	// Gets converted to _W.Weebly = window.Weebly \|\| {};.Weebly.templates = {...'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul class=\"wsite-search-facet-entries clearfix\">\n\t\t\t{{#facet_entries}}\n\t\t\t\t<li>\n\t\t\t\t\t<label title=\"{{name}}\" style=\"background-color:{{display_value}};\" {{#active}}class=\"active\"{{\/active}}>\n\t\t\t\t\t\t<input type=\"checkbox\" class=\"w-input-offscreen\" name=\"{{filter_text}}\" value=\"1\" tabindex=\"-1\" \/>\n\t\t\t\t\t<\/label>\n\t\t\t\t<\/li>\n\t\t\t{{\/facet_entries}}\n\t\t<\/ul>\n\t<\/form>\n<\/li>\n",...'search/filter/search-facet-checkbox': "<li class=\"wsite-search-facet wsite-search-facet-checkbox\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t{{#facet_entries}}\n\t\t\t\t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{f

Chrome Cache Entry: 1017

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	964
Entropy (8bit):	7.756362486782755
Encrypted:	false
SSDEEP:	24:XKVFTl9obY4cB5GzXGY0W255cJWuVlvbtkzJNSDrFU8:6l4cBYz2HCJj7vbaNL8
MD5:	82B8281F4AFD1413480D350A5CD84CA2
SHA1:	E6E205A524A1506959913A21A73F6000AC9065B6
SHA-256:	23698B2F75A7021783E5724D2B34EC6C10FF444963E60F05BAD02605B31538B4
SHA-512:	13F5EFDC0242D5A917E843B53EC5DC08EA7EB69E9F1E852E1CF84EB5B32B55CFA3EA82938A6DDBC9AD3F1EAD69FF70C808CEA2E97CCE12997567EAC7CCF5D1AF
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/appsuite-tet/i18n-Bz_U5kkj.js
Preview:	..........!.j@.-...k)"2...z.r...~...Gld.. ..t/.%..E...w...]....W..W....!7....3l.+."...N....[......7.+.}.fG..i.V..u........d/.....\|r.5<..^.a.#....\...W\|M...........4...+...YH.Q$0...dd.-..\~8Y%$..E....\|..j.S$5#.y.P....5bd..T....^..y.^.r.!.o.oqMS..<..<.....b..D_6....[.bMZ_.%..eE.&e.lA>(RL..P...?.9~....f..j..3<.j..12...Xu.Ky...u@.x..:...ux2.y..C>.e.'..A...'....N.._Su......2c.....}a.%]{@..x.ni"~.nef..;[.).....iM?..r....E.?.V.....4.>...........T.<.f...J*Y...r.6iN .^........+t.%...._D..4...(.y.[3C.).#.bV.S.2.%+..4+i..+.n.Y1.......-..^..H).3........1.Ht..Ja.....x..d."..A.s)Z. ".X..M.P.D0C.FZ...2...J.....+A.D!&/>B.k..d...#..Q"..Y..4.C...[.0..+..}.u..2(..Q.n..!Ebh..2..$=......0!.I.....3`....1..J.DB...4....Vc..W.$....h....@.SK.4yb<._n.V:..bt..i.Z)e.mM...7.b..K....Tm....._......"c..t..;.l..T..........nl.n.p.D.....8.H....bC..X..B(...e.1...I.H......f]m`xPtu.....[C....)....2b..:.hjb...W.%].t@.+.6zM^.V....25..7

Chrome Cache Entry: 1018

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17514
Entropy (8bit):	6.016683582885523
Encrypted:	false
SSDEEP:	384:yrdyqB08qUUoM6F0uVcIkA4VdGpqZVtfRl3XHwrHLH:y5h9P3KVn5fT3XHwPH
MD5:	9E2D67349F8CF012719DDB6D3DD300DE
SHA1:	1905AB5ABA0A9192D5FD8712A6EBC692F4A02342
SHA-256:	2A0B224EBB2E3EB20CECB18A73B40F82A9F7262AF00067E3EDB7FBAB5ED8B866
SHA-512:	E8100FC827C873AEB9741025FF3AC05C8DC90B1B8B58DE1F9F17F8CF51A954A93D33DD7F28634ECEE0E70AD6BAF9B37B2462AB01E5E4187E59D59BA201449622
Malicious:	false
Reputation:	low
URL:	https://ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gpt&tv=m202501030302&st=env
Preview:	{"sodar_query_id":"2_qCZ9GKF-CSjuwPi7aq-Ao","injector_basename":"sodar2","bg_hash_basename":"-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM","bg_binary":"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

Chrome Cache Entry: 1020

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/ct/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D&_test=Z4L63gAR0bDPWgAZ
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 1021

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1824
Entropy (8bit):	7.890994572025052
Encrypted:	false
SSDEEP:	48:RzcKdmT79eIcund8p8r1JmA47mRLyhmqliwobv:RAKdevcuds/9cLUmqlgbv
MD5:	C11FE38124FEDA12655698973AF27CAF
SHA1:	BB7B527526B99D0CA4C81E5B02FBDF7470A5963E
SHA-256:	EB288C3A19C8E7CBE8ACC4EFABDB8069C95BBDBDB5C60540AE5F8267676C467C
SHA-512:	04388F67F08D63D539396000A866FAB560713EFC8C477F72B5F1954C2B282C2CFA1A814A5BCCF1F72F90CCB20BC9E9D1630D5D0C798AE50E6E707F405FECD143
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/login/structure-fff59e05.js
Preview:	.5........k..v..j8...+]..p..1....C;$;..........(%)0..w....T..+]9......;.,.QI\|..}..A.a.E..D...,\..>..Q.....p..-...XI.M...PX..X..%.@...^."q......s....T..9.j.J..=..yp.rL.o'....Q.9R][.7..:=..M....v.x.Q:O.....\I`J..C...:9.L..d..E.nO.h.1.U.OL.E..?.4.-.y$tv.T&..Z.,.&#.<.\|..N=....8\.......VY.....p.......W.$.U..[J....z...,.R.u..L!HNj{..@..xR...-].i^...k.y8..pJ+.Y.B{.h..N.....}.e.....;..Pu..$5....o.o./&YK..%.....Sw....!..PJeI..?@ <.[...a.....o...q)..>l....H..V..L."...6..s.(.#.1.9i.IsW...i...N.....\.S......=P8{..z6:...=.]<...q.=..k.S`..X..Z.:.BO.......M..`.\&.`..k.Z..X.{......S.-...(^3.........Hy.?.R..WC......`.}HL.(.'K.mkH;....:s.<..@6.$k.E............X.........>..u..%g.D.....#..h.#...t@.&'..........\..g..O....[.Ej9G2......a^....\\.....n..._.r...._.H..1...X.....q....Z.l........U......a.Q...6.......;.7..0...r.........M..\.....p2`.^k..\|w.'.6w....#%...&..rH.....Y'V....!.j_.X./..........0q.....ql.Q.....J..\.....T.F..F....>...$....mP.q..#..Y

Chrome Cache Entry: 1022

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	566
Entropy (8bit):	5.067763497346412
Encrypted:	false
SSDEEP:	12:2rjJYn08pigLK1Im1s4H+nMWm3HnkaeH6EchQuHnRhczQZWyYqno:2rlOpifvF+MdHVeHpchQuHRSQZWso
MD5:	17C614E0FAD1C499BEC3A7D0A21555F7
SHA1:	10260E0F66AB969E225B4B982860D1FBFEC68B0F
SHA-256:	4F618D20D85F3163D72432606F3AFA3C17B6C79954F967EC3DF9A710503C9DF4
SHA-512:	AD630193DD5FF4C83F029D210D1ADA2F7BA73E2153EB345FF0F594969A3ED21799C3FA995BA68B83FCF609E910D95520152A2669B207CC1E6432582DFABEA567
Malicious:	false
Reputation:	low
URL:	https://s.e-planning.net/esb/4/0/1992d/f6ee63a0c2353004/lotame20220615.js
Preview:	(function() {..! function() {...var lotameClientId = '15238';...var lotameTagInput = {....data: {},....config: {.....clientId: Number(lotameClientId)....}...};....var lotameConfig = lotameTagInput.config \|\| {};...var namespace = window['lotame_' + lotameConfig.clientId] = {};...namespace.config = lotameConfig;...namespace.data = lotameTagInput.data \|\| {};...namespace.cmd = namespace.cmd \|\| [];..} ();...var s = document.createElement("script");..s.src = "https://tags.crwdcntrl.net/lt/c/15238/lt.min.js";..s.async = "async";..document.body.appendChild(s);..})();.

Chrome Cache Entry: 1024

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33171)
Category:	dropped
Size (bytes):	108793
Entropy (8bit):	5.600036786979696
Encrypted:	false
SSDEEP:	1536:tA5g/tiPUS53YTJY4E0IROr0dEqGWid9CyqiB6wy0otPqrCQSt:J/tQl8QEIsWidAZQSt
MD5:	87E95428A8B0E012EBB4DC76E03DD4D3
SHA1:	87797A1FC0273C46141932002650871947456E05
SHA-256:	CAE38254501183C097D7265BBE05EA62340F4DCA2D59172F5913719DFFA7509B
SHA-512:	E4E79B17DD7E84DA577774B11F7CEE2CF66484BA52F245C7827FFCC567085F73D2BEADA6CA41B435F33835FF6347496CAC30C6DF976DE29019851D728922504B
Malicious:	false
Reputation:	low
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",u={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in u?f=u:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 1030

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2828
Entropy (8bit):	4.536070396957773
Encrypted:	false
SSDEEP:	48:PTBE0ZpntMb0/6aYkuvll/JGd6vpYQ6Kq3hUyvKrcJcyd6GR4y0IB7KPa0TTM:77ZpntMgSaYDvll/YAvpYjKq31vKrcBH
MD5:	C22AB67199A33D876512504CDA4FF55B
SHA1:	36E96EAE4644B6028532974FE5186A072792CB37
SHA-256:	C4CD233D3D6B0F184E99D5017E521B4C6F9106D3E546864A8BA516189B934311
SHA-512:	9C11487F2A00B4DCA9C04294F4F422AE0DF00828DE989AD64F506446C72E91E64D0B47EC243AE75B3EB88CA5C882E65C9A8F6D99B0C8BED4541F767A3DC1C31B
Malicious:	false
Reputation:	low
Preview:	/!. Revealer 2.0.0. . Copyright 2015, Pixel Union - http://pixelunion.net. * Released under the MIT license. */.(function($){. // check for trend event (make sure jquery.trend is included). if (typeof $.event.special.trend !== "object") {. console.warn("Please make sure jquery.trend is included! Otherwise revealer won't work.");. }.. // Simple requestAnimationFrame polyfill. var raf = window.requestAnimationFrame \|\|. window.mozRequestAnimationFrame \|\|. window.webkitRequestAnimationFrame \|\|. function(fn) { window.setTimeout(fn, 1000/60); }... // Public API. var methods = {. isVisible: function(el) {. return !!el.data("revealer-visible");. },.. show: function(el, force) {. // Check state. if (methods.isVisible(el)) {. el.removeClass("animating animating-in");. el.off("revealer-animating revealer-show");. return;. }.. // Remove previous event listeners. el.data("revealer-visible", true);. el.off("tre

Chrome Cache Entry: 1031

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	downloaded
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
URL:	https://ssl.google-analytics.com/ga.js
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 1033

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	886
Entropy (8bit):	5.035010292982074
Encrypted:	false
SSDEEP:	12:TMHdt0ubqt7/KYslXXHlPeaxMwm5EIDXqBJVJ/hlIJi2y1dQ9/01klp0u:2dtjbqt7L8FPeaxMwm+ID63zbF+MOf0u
MD5:	552EB2E04260FC0733E5633D15C6AEAA
SHA1:	0A9EFCC3B0EBABB23A49A00061FD8200EDED1613
SHA-256:	705FF3240DE004523FF9D628B28AAD705AD3F0CEB046312495265A4042C67570
SHA-512:	16CD125A26B1604144D6A64F45D1064FF2A71DA412CF61C829914E00C2E4AA275A172D0872A9533F79D5FC2D2BE82A7DFE3FE5F12048C23AF927A7CB35D571CF
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/files/theme/images/arrow-light.svg?1736414015
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="22px" height="11px" viewBox="0 0 22 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 39.1 (31720) - http://www.bohemiancoding.com/sketch -->. <title>Group</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="UI-Kit" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="square">. <g id="Ui-Kit" transform="translate(-61.000000, -697.000000)" stroke="#FFFFFF" stroke-width="1.5">. <g id="Group" transform="translate(62.000000, 698.000000)">. <path d="M0,5 L19,5" id="Line"></path>. <path d="M16,0.5 L20,5.02" id="Line"></path>. <path d="M16,9.02493763 L20,5.02493763" id="Line"></path>. </g>. </g>. </g>.</svg>.

Chrome Cache Entry: 1034

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	7.6587987845856045
Encrypted:	false
SSDEEP:	12:DSxnZ+yf1Y9DVMo3gWcdv3VeHcphM1DzlJM1PQimnF5xf0GhBbP:Ox4yNYvMoup3Vp81byPW30yBz
MD5:	7D8D40C6F67D89D4D92A17535BC4BE35
SHA1:	4B4D0EDA3F5D07A2F23779E299FF60C6FF919AFC
SHA-256:	9691846F01704AF2AB31E8C85F88E3E07867D74478013C8AEAD569DFCA30B0C7
SHA-512:	B67D063AD7498DDD714379AF48E86DEDB42978481B028270FCEEE8D396914EAC7C6E340184E9AAC733F7FB81003B64FA4A52079E9D27DD9200357DF40B052051
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.unsubscribe.en_GB.js
Preview:	.............u..)v..7Lf..@.`i.._......;...iBq...(......(.1....O.v..9.m..w.b..!g....v....M..Y._......".@.H....a....l.2T.u.U..&....}....... G..\nr..r.T.\n.._.y<./B$C.M!................!4jwHyL5$......].Ob'2..7pk.]......M.wHQ..8}Iz[Nr...............!..dhw.e.].a.#.....a.t.n....k.+.Q]oH....'..eW.7......0....=].z...EF.!.>..^`.._.k...4.i..O...7....Qr..N..Y..g<..6..). ..$.H......M..Q.Gn.!.D...Epg5...n........t.m*}.%...<.h\|..#.8F....w.B\...\vu....0.z'.1Y..mF"?\.......U.D.f..cB.];.....]N...XH=.'y..a<p...2.EuB.e^.{8Dk.I...:..b..T..........Q.oJ.y.].a.K.Mk.L.7..\....9)B..F5,..`.q..l..b.)..V^.yv~......p.sRXW..t..d.e

Chrome Cache Entry: 1035

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:Rv:J
MD5:	B519D08EF66FD54910EDBEDBA6181EC2
SHA1:	8D06436C33A3086259F2F1CCAF03425707EEFF17
SHA-256:	101EAD936A2281D53DCC064B7E2A2AB0D53B92EF3EF7B34B668673007895C860
SHA-512:	F7195D19D40B60AA9F992C5830F88DCBED7348521EEEB426A2544A18F9E13EFBE4ACFBF03D9A3961AE8174572E5ABA28D9013AB6B4849A18EF35508B1E011C14
Malicious:	false
Reputation:	low
URL:	https://cadmus.script.ac/dahhc4ozyvjm6/script.js
Preview:	//.

Chrome Cache Entry: 1036

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	160255
Entropy (8bit):	5.197948179602433
Encrypted:	false
SSDEEP:	768:vCWTAyC3pWWfxuWmeuUXCoA+eACrJQCrJFdCrJxfISYC5n3xSEeX13TAfENtzRC4:PTA3Ehjm/nteX13TAfetzArDBVvA5
MD5:	EA06A4A0A473E3527170A161BF999F4D
SHA1:	AA55CE56F16D99D3ACF157CFFEFF80716FA8C1E3
SHA-256:	A9D71756522E7AE94B93A30C45FB51FA255D23144E4FF6E94834F6611C050291
SHA-512:	0F7BED3BC6D935860982B99478385D9079F1E3E1B4977ADA2433DAD27C7B5848BEA51D932C161EA89D98DBE7605A0E675A67FE9F255048C85369027F37315644
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/unified/4.27.3/gdpr-tcf.00cd3b6a2692e330e4ec.bundle.js
Preview:	(window._sp_wp_jsonp=window._sp_wp_jsonp\|\|[]).push([[4,3],{183:function(t,e,r){"use strict";r.r(e),r.d(e,"default",(function(){return P}));r(22),r(27),r(55),r(28),r(29),r(72),r(137),r(102),r(104),r(52),r(50),r(51),r(30),r(31),r(32),r(189),r(190),r(33),r(70),r(53),r(34),r(54),r(56),r(69),r(35),r(73);var n=r(0),o=r(14),i=r(60),u=r(195),a=r(202),c=r(201),s=null,f=r(148);function l(t){return(l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function p(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function y(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?p(Object(r),!0).forEach((function(e){S(t,e,r[e])})):Object.getOwnPropertyDescriptors

Chrome Cache Entry: 1037

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12312, version 1.0
Category:	downloaded
Size (bytes):	12312
Entropy (8bit):	7.9814318047061645
Encrypted:	false
SSDEEP:	192:U+hJ110ca/vfBKWejY7gYiqRnAPxzoZHR8Kgj9NdV8WeIBt5VeQDB/MDHqCjOQJq:UOJ1OtojYBnAPVobNUdV8Wn9b+btE
MD5:	15D3370712CC87AEE4D35BA16E639E42
SHA1:	2FD44D7078073A47D4AB29418E1909B306367033
SHA-256:	7295944E0067D71C5D5276D397DC0299AFB519F277BA644AEC0B96343E4185D1
SHA-512:	89AC5D1E432AE59B42C809043249627B28CDC3A5CCED20181F7305144BD7D5E102A1A9FC5A9758A75A17D0B3921481420A50F4D3E66CF8652D98FBA624011F94
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Roboto_Mono/regular.woff2
Preview:	wOF2......0.......W.../..........................6.`?STATH..6.....`....B..6.$..B. .... ....D.".8....-.r...C.<C.../p.[.L.....8...K.+...1......+.\$...R...O:Z.\.V...Or..a..t..R...r. A".HM....W_...?z7.Y....@...<.T..T..I.K.NE(5..mv8..,..A...iE.....1sF..9.n.til.....".c.....s....Y.B...}3...-$.e..+W..$ob@...a.K....m.Q.I..I...Z.?...u~.!.-..-.......Z.........9...Y.3....A{.........$....Q..F{.....e.K.c..q_&.....E.......I............A.:.m2fr..}..S...j.:."Y..\+r.^=\.V.u.....!.j"...a0...Q...Y[^...rC.@.......}`..-.M....b. 7f.@...~.......?...G..r..c.c.......i#... ... .i.S...m..V:k.r+!...........(.A. ..;..1.N...>K..e....2...B:...D../.F.&......bw......1..Bx"\|.H....`"..J..?$...._....[.`."&.TZ...U\|g.&....."!.c..@..dz$.n..>........../>..8.q.c.c.c.c...6.......!.yT.Ba.............V....YU..MiNMk.oTw....h~/o..}...OLX.u........+.ryg.ug\.......k.m...l...862.yx\|...;.......1..;.G........6.E.....S'.N.r...F..Aff........{..)..`.A.n..cv...XZ^:..s..f...V..... ...06..E.KvV.4.&.y.l/...!..H.

Chrome Cache Entry: 1038

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5046)
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	5.174773058802083
Encrypted:	false
SSDEEP:	96:FvllJxvYaYpoVGeMQYqMvs5PPm2nrH8U1pdcT9ixh6fNFhRVnKCRxk5REAS:lbvApkG1QnymPmsHzWT9ixAfhzng5RE9
MD5:	CE5E814551CD6E176324DD1D13B8A6FD
SHA1:	87D01E6C75C922B8C6C38223C3D271E3C90D38C7
SHA-256:	07C69616BDA6F173CFF340EF0153E8166FAF10BCD3921FBD66EC3DF89E73176B
SHA-512:	AA2A5528953121ED9E1F43B010BA139DA0B4F732BEF1894774D4F840EC5CC2CDDFFCB4FDD8FF251805F5388C8A646EE70F5E99758D5F9DC0E630FBC4B23AD9EE
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012410292120000/v0/amp-fit-text-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2410292120000",n:"amp-fit-text",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:i}=Array,{hasOwnProperty:e,toString:o}=Object.prototype;function r(t){const n=parseFloat(t);return"number"==typeof(i=n)&&isFinite(i)?n:void 0;var i}var s=["Webkit","webkit","Moz","moz","ms","O","o"];function l(t){const n=t.replace(/[A-Z]/g,(t=>"-"+t.toLowerCase()));return s.some((t=>n.startsWith(t+"-")))?`-${n}`:n}function c(t,i,e){if(i.startsWith("--"))return i;n\|\|(n=Object.create(null));let o=n[i];if(!o\|\|e){if(o=i,void 0===t[i]){const n=function(t){return t.charAt(0).toUpperCase()+t.slice(1)}(i),e=function(t,n){for(let i=0;i<s.length;i++){const e=s[i]+n;if(void 0!==t[e])return e}return""}(t,n);void 0!==t[e]&&(o=e)}e\|\|(n[i]=o)}return o}function f(t,n,i,e,o){const r=c(t.style,n,o);if(!r)return;const s=e?i+e:i;t.style.setProperty(l(r),s)}function u(t){return`${t}px`}function a(t){return CSS.escape(t)}var h="i-amphtml-fit-text-measurer",m="i-amphtml-fit-text-content",

Chrome Cache Entry: 1040

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.066108939837481
Encrypted:	false
SSDEEP:	3:pmhnSQY:qnSN
MD5:	77994BFB61FDCE667D3156A9D4C689B6
SHA1:	B1F5BCA8CD1828390A1D2C91F15A6729A6E3CF88
SHA-256:	E50511643D79FF0554785748D9D943DC12D0BE2FE4E6BEB6DD41528C9D81C6EC
SHA-512:	571F1313AD9B714187732419C3B3EB5756097DA0F1F1E64C7BCF80BC3E8850FD7F0D915C33AF419081AC43899384856719AC4835A3C5D4C75B374D33B487DFD8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmNcP2md4OkLhIFDaLkuUISBQ2c425n?alt=proto
Preview:	ChIKBw2i5LlCGgAKBw2c425nGgA=

Chrome Cache Entry: 1041

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32147)
Category:	dropped
Size (bytes):	480909
Entropy (8bit):	5.418878253776284
Encrypted:	false
SSDEEP:	6144:TW8OfwjsL0W6FYEeiFzRNIHftOma4kbEamIia49AnbViWMXb9exQ:Sfwja+yU49An5iWOqQ
MD5:	016FFAE66513FCAE583BCC64A0B66869
SHA1:	CD2CCF7CC47BD6ADBC1FB46F8A88D610824F7037
SHA-256:	55F966D09AFC4A653A1F26B57E57412D5C42191D5692157D94110B23CA74C9D2
SHA-512:	0BEE2BCC0C4DED18A2DEB9B811234C555FA4D2F5D061A853C1443B6AFCA7AF813E396668AA7543586ECB9EFB8DA901CF3FAC33E396EB85D48B84D5F2CB8B963A
Malicious:	false
Reputation:	low
Preview:	(function(e){var t=window["publishedWBJP"];window["publishedWBJP"]=function o(s,a){var l,u,c=0,d=[];for(;c<s.length;c++){u=s[c];if(n[u])d.push.apply(d,n[u]);n[u]=0}for(l in a){if(Object.prototype.hasOwnProperty.call(a,l)){e[l]=a[l]}}if(t)t(s,a);while(d.length)d.shift().call(null,r);if(a[0]){i[0]=0;return r(0)}};var i={};var n={2:0};function r(t){if(i[t])return i[t].exports;var n=i[t]={exports:{},id:t,loaded:false};e[t].call(n.exports,n,n.exports,r);n.loaded=true;return n.exports}r.e=function e(t,i){if(n[t]===0)return i.call(null,r);if(n[t]!==undefined){n[t].push(i)}else{n[t]=[i];var o=document.getElementsByTagName("head")[0];var s=document.createElement("script");s.type="text/javascript";s.charset="utf-8";s.async=true;s.src=r.p+""+{11:"5ab2b9565867ea666fb8",12:"616c4dd0568c07183a5d",13:"392868449bcd750dc40a",14:"959616cc5e24d1c02d25",15:"b6353cc0e423d7a50e8c",16:"054f225d281471b09455",17:"2e90ceda1aa59119b0b5",18:"afaef63f10fcebc93d78"}[t]+".js";o.appendChild(s)}};r.m=e;r.c=i;r.p="http

Chrome Cache Entry: 1043

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1227)
Category:	downloaded
Size (bytes):	10838
Entropy (8bit):	4.990742320491477
Encrypted:	false
SSDEEP:	192:dGggqM/k4Rh8MQLGETZT6OCUr/6Ak1DCfHgMlfwydlEBu:dgZRh8MQLGETZTHTMDCfl7nEBu
MD5:	AADDC66C283EC19435C7F9924C1D3121
SHA1:	704FF72FF2EAC7FF990CE68B4BF35D82F8747978
SHA-256:	F27D9E5F8C19B88DAC22C6F254F899D5F36A910AA82D30B10955C621DE93E2B9
SHA-512:	8178BC5BB35CC0B855E847154065BB5151A749A456EBC5FBE8432E6CBD21278CF7370418A89A222E283909E5997B37FDBAD781C02D54A1FF6D579DCD993A5E1C
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/minimalapiconsent.en_GB.js
Preview:	<html lang="en">..<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <style type="text/css">. body {. width: 100%;. height: 100%;. display: grid;. font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";. }.. #box {. display: flex;. flex-direction: column;. align-items: center;. align-self: center;. }.. svg {. margin: 1rem 0 2rem 0;. max-width: 100%;. }.. h1 {. font-weight: 500;. font-size: 1.5rem;. line-height: 2rem;. margin: 0 0 0.5rem 0;. }.. @media screen and (min-width: 540px) {. #box {. padding: 48px;. border: 1px solid #ddd;. border-radius: 16px;. margin: auto;. box-shadow: 0 24px 80px 0 rgba(0, 0, 0, 0.10);. }. }. </style>.</head>..<body class="unselectable">.. <div id="box">. <svg

Chrome Cache Entry: 1044

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	2.8722910533148776
Encrypted:	false
SSDEEP:	24:suJa888888888888888888888888884JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJCJw:0yTTTTTTTTTTTTT0
MD5:	CD381052CCFFDB3FE5850050DCBDBE22
SHA1:	DFC774D0FAAA34C882B5C53380003E8D61CF2620
SHA-256:	C7919584D30AB90FE680A39E13CAA764D903E4C10F968BDA4D79FB30370DDA87
SHA-512:	837FE82E60095C14CDF7D858527919561092126202B851FF71122E3C0CAD81112BFDCA4189E6F5661178E2B0DC57B09E0E3F067CD43F7CBC1F230F60737672B1
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... ..........................U...F...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...F...U...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<.................<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...G...................C...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<

Chrome Cache Entry: 1045

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	downloaded
Size (bytes):	2690
Entropy (8bit):	5.398083497267717
Encrypted:	false
SSDEEP:	48:Otg7xNqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:rN7Qabhiwdicju8WhRHMnTx
MD5:	2669D16AAE166D157B8434762A199620
SHA1:	CA7E08D45D0D469ED57825C28CB214F421311F97
SHA-256:	944A37F694B55DE268A0BF52DBAE4E12F12C4AE09EE5C8D213BA05075C2865DD
SHA-512:	51CCCC87145F0B0098B81BEA1506C726BB249E65F3B5FCC853F1FC4D4E55716F1F9318E43A2A0B31DFC4C968C14EBAF1EEFB9331C6DCE1B561459883DA7E9432
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250108/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(let c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 1046

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 471, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	60600
Entropy (8bit):	7.9765514067636625
Encrypted:	false
SSDEEP:	1536:+su8E9R+an2chA5m1pOtA6eQZfjkvFlbeFuieU:nI+al1s0QZfjkzqFkU
MD5:	4DC4AF4CA3295F7ADFB222C89A658447
SHA1:	96EEF9518174DFD4F0ED64EA82C2164A9114AF95
SHA-256:	FF95D27D18D5AAE72E8665328841F3A07BEBD9CA093D3CE03B5B33738D09171C
SHA-512:	E5D44217ED07B58B48D300517E2CFF76136DAEC4FA3145EB8A17DAABD82879CFA26AFF6FC95CAB6D3D827664F82FCB5ACF04235CCCD111025777CDFF0355BC82
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tannn_orig.png
Preview:	.PNG........IHDR................$....IDATx...K.Z....B.... .Y.:..#.1.9X.a.0F..`....r...\E"R...B.@.]l.N.Y......(..I....''i^..B.!....H.B.!...$!..B..H.B.!...$!..B..H.B.!..B.$..B.!.IB.!..B.$..B.!.IB.!..B.$..B.!."I.!..B(....XP......!.<.5.#.X...wG.Sv}..\...XW.FR..?...uY.d.E...PVL.(C....{U..j..;.!."I..SI.....B.?FB.\z^,...[5k.......HF_.(.;.!....~..g.X../.O..%....L.F...=.....M....).K.2..\.\..!W$.."....+..P$)....8.i..&....H....H...3rOM..W.....s..H.B..]..6..~\|..:.._m. ].H>M;..H.X..!..x...H>.g$..Z.:.U..5E."I..[.I.$.<.Jeu.....o.s.IM..2:N.......:Z.\..H.."I.$.IB.E."9K..2!T...cJ....H.N.HR$)..I.$!.".."._8....;.T.7.U.-D..$E.......W:....+....".r7=...O._`.B....^.;../.....]C.oM...:K...<..m..M.8.U......)...a.=...+B.h.L.Z..WW...C.L.Z..{.zv<..:..s........B./f.m...9.6.mc,g*.n. ;va.....S.}.....1..Z0.~H?B.evno.H..]y=._T.....E}.!G.Z.Y'.....0u..Q.G..T....B{.o.a......l...,.h.}+..x..t!".6......j;.1.......j....y.. .k<.K..$.......e..O.)D2.....5.ul\._.h....HJQ...b.A......

Chrome Cache Entry: 1047

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	514
Entropy (8bit):	7.570620405658771
Encrypted:	false
SSDEEP:	12:AF1LZWB2RL/aFafS7zsoq+PYj5Okcpr7VcEJF:A7LZWIpawS3soej5bcpruEr
MD5:	198DAD1A3639F92978DFAAE702DCF951
SHA1:	FA1DF9FFA3105DFDB1FD4BF4FAB539D4B500C35B
SHA-256:	CF772EC025CE7522E70CF6131127E09D18D0A5315E7538BB4462CE933579D84E
SHA-512:	E8D3742C7E90AEB9A6721F551D92414D941DF49F0D11CD0BAEA33AF0112826715A23D183A37F56B278C12005F01C4D8951DDD31C931847CB0C54B95871CDE096
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.iol-smb/preload-helper.js
Preview:	....d5....du......l.....b..C*Y...._.u.C.QwG.no...3..~o.s....!..........XW.G.V4u).....(//...U.:3$.+=.T.Iv&Gk..8.....f^.!..l........\P...K..e1v..g....Gh..;.Z#.r^=.........RX....qe....k......'f....m7.4k.C.....vh..MG.l.b..@V`.#.j&.n.3...AS.9..I>.t...P......E.....I.~.=.w&......&p..<.8...(.>..D...Z.T.....3....#Y..Xk$.+....X...=RA....3@..\|4y..A.M$....zK5..Q.RXqY.........r.....&L@.._D.X..W...... ......Y.[....YY.H+..}C.8.YV...........<.#c...)&.tw)..!..!..%.k+.cHezV6.?..:8.V9<..\.qt...+.FZ...J2.....

Chrome Cache Entry: 1048

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (609)
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	5.414529446970325
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVIn2bu2zIQGhOHOJlxThUsc8DRkoQxkHtnTks0m+lnOGoQL:2e2C6hHfhiVIns/W/Fdc8LtpZW
MD5:	8769755BB7FFC00598962B230B9070BF
SHA1:	F14B7E6DD472031B389483E06773F2ED4B7F594D
SHA-256:	6EFDAAB46328C3C3DE32E4C05681C95C3CA4DF47FE338C99658540D55AC7BEB8
SHA-512:	39597052ABC01495B1C17DEB9BCC5DBB3AA7FDE9B380CEAC66E3FA6B8BB99178AC3051DD79FCF1BE33889C627941BC1960B06D9431ECACD7C155A50F02208C28
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=&gdpr_consent=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://ce.lijit.com/merge?pid=76&3pid=d264f8fd-dedc-4013-b881-4edd8e5282f0&gdpr=&gdpr_consent="><img src="https://x.bidswitch.net/sync?ssp=openx"><img src="https://id.rlcdn.com/709996.gif"><img src="https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=1227b3b7-2cf0-5f28-0814-b388d32efd60"><img src="https://sync.srv.stackadapt.com/sync?nid=268"><img src="https://b1sync.zemanta.com/usersync/openx?puid=95475c7b-dfe0-4b9c-a80e-64b9d5f363d9&cb=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D560843120%26val%3D__ZUID__"><img src="https://rtb.openx.net/sync/dds">..</body>.</html>.

Chrome Cache Entry: 1049

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/2fa0393a-da92-ef50-d728-34de9183ed31?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1050

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073028&val=b62f8e24-5e76-4430-a071-7ef1198e6a77
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1051

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.62086201259659
Encrypted:	false
SSDEEP:	3:YxhAIUz1fRMI+aSWEHREXTyJshCNNpAcANQDxPlaBY:YnlUz1fRMItluiDAshWAcANQtPlae
MD5:	1F115F8860CA363D172BD0A9AD040AEC
SHA1:	53D0A119FDCB9A87973A0085AE58B61CD01D1708
SHA-256:	5963BA08986661406FF00516776BCEBD6241857919D683B4F4AE32722E7E0CDB
SHA-512:	0C576071F280DD56C5F3E506CB53B1C3763F48D009615A9904F2DB84CC16EDAC2880181FBEBB8DED759C060775815F157E062A03ECBDC186CC154597B585AB4D
Malicious:	false
Reputation:	low
Preview:	{"TDID":"beb8670a-646c-4cf0-a211-73ab4a2643bb","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-12-11T23:12:22"}

Chrome Cache Entry: 1052

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14814)
Category:	downloaded
Size (bytes):	14931
Entropy (8bit):	5.302008632648062
Encrypted:	false
SSDEEP:	384:xlJ8mveR3bwIcLxj/vCLjzOc55unq5mJJMz3REiQz3y5:i2Wbw3L9vCLjzP55uq5mnGCiQe5
MD5:	CC013D52D9CE98BECCC5FF2221639BE4
SHA1:	DFC6A3F6BBA5918BD8D1B2E15205FFB58C653FC9
SHA-256:	10DE50050F69B2B9C126DA057556FDB447A99FB0BFADEB97E41D044FF0C8797F
SHA-512:	E832F628A7E27D28FE7202A7520516228E851AEF80D33DF4EDB596FCA983B8CC624C3B24EDA8F8BB5F9FDF8FC955C7BA250DEE2735C41C63CB7B3D42F3CF57CD
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012410292120000/v0/amp-ad-exit-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2410292120000",n:"amp-ad-exit",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:e}=Array,{hasOwnProperty:i,toString:r}=Object.prototype;function s(t){const n=Object.getOwnPropertyDescriptor(t,"message");if(null!=n&&n.writable)return t;const{message:e,stack:i}=t,r=new Error(e);for(const n in t)r[n]=t[n];return r.stack=i,r}function o(t){let n=null,e="";for(const t of arguments)t instanceof Error&&!n?n=s(t):(e&&(e+=" "),e+=t);return n?e&&(n.message=e+": "+n.message):n=new Error(e),n}function c(t){var n,e;null===(n=(e=self).__AMP_REPORT_ERROR)\|\|void 0===n\|\|n.call(e,t)}function u(t){return JSON.parse(t)}var l=/(?:^[#?]?\|&)([^=&]+)(?:=([^&]*))?/g;function a(t,n=""){try{return decodeURIComponent(t)}catch(t){return n}}function f(t){const{location:n}=t\|\|self;return function(t){const n=function(t){const n=Object.create(null);return n}();if(!t)return n;let e;for(;e=l.exec(t);){const t=a(e[1],e[1]),i=e[2]?a(e[2].replace(/\+/g," "),e[2]):"";n[t]=i}return n}(

Chrome Cache Entry: 1053

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	7.812891443747064
Encrypted:	false
SSDEEP:	24:x+tjuPA1UYqQOqbz+8nZ6SOjXx0BeJ/UKFjmiO6i853F8BdBv/owyH:x+tjA7bo+vjGW/UKBvV8lHi
MD5:	E99496BE1998B1BCFA56245033A7B0AD
SHA1:	542883085F603F0E66792AB231E7A869E8936F04
SHA-256:	F0C09C3F290655C03E1160F91A190946F4FBF54756FD38485522470934BD25DA
SHA-512:	FE264E57292916889F091433E895FFCA26A4A4039DC42C3EE3AF3277CDBF8E2F07AB9632F6A47DEEC187D597672F0443F42D541E32355945C255C9448FD92181
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/office/main.js
Preview:	.........../z.....n.d+..8J..U..... S..\....y$...;.S.X[D,...Y.L.DBD.0...C.A..Z..[.;]...!.q.4...E_.B..aC.....8V.H.(L..;...e...R...Y......$..m0.X.+.....(V..Ru.F.t.......t<,...8F. .,.P...g?..-.B...a.....m.u..'\|A^.b...o....6..w..e.9....m....Y.+ ...}.h]..6..u.8.T.T..6pvC._.....=..3.A..{]...z...w"!.P.......\|.~._QA.e._.Pa..m.Q...=!.....N..J/..:d..E...)...)@Q...G...1.6...u.S.?.{.E..Z......M.E.....U..`f.&.N.G..P.....I.~...].F.P....D....}JT;.)..UX....$..%jG..TP.A...Q..F......9....<.....<<..)..SZ..c.h..Y=....Y...t.......A.\M.^...7.<.L.=....Z.G3......w......}[nk.T.m...f.......8...[Y.D_W.`t.+~.,.?.3....\|YF...[...G...}...XQO5.W.^.".}%5...........:../.P`8.E..SB.2#...gL.'t.......Y...{.H6'....}-.bm..-d..C...K.......X.g......%X..W.<...sk..s....#.~,E............@..@.$................L..9..._..YY.$.....c..G.M....w.E.x.d.d=..SM)...Q=U.G.f.{......E.pa/XQ.o.^w...TQ..H...z..ke.a.H.h.~..[^p.`..K..-....K].K.....f..a>.....-..77....}.J...2..tK...?...G...;..hK.U

Chrome Cache Entry: 1054

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3611)
Category:	downloaded
Size (bytes):	36924
Entropy (8bit):	5.465157772168646
Encrypted:	false
SSDEEP:	768:4lJJ1h1UJUjn6tPQ7ehxWfXI2/t5ZcYsKEZ:4lJHh1UJKnH7eaI2/XZcYsKU
MD5:	C2FC24A2ABF54F0671CBC6E3DDA6FC6D
SHA1:	11E779C4134CF029DB0C7D528C4ADAF0B35A1B2D
SHA-256:	1EB6DD002AE44EEE7377AFBCAAA162F55F4E78742E33F4351DF20F585B17E325
SHA-512:	88A041EE8960CB31A3CC1DC46786EEAC88B01F61201DC02084E127494113054B7972B512FDAA9FDC501BF669C77E17919ED241DED12E9743721B5BE29A5A0ADD
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20250108/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=ba(this);function t(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var h=a[d];if(!(h in c))break a;c=c[h]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&p(c,a,{configurable:!0,writable:!0,value:b})}} .t("Symbol",function(a){function b(g){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(g\|\|"")+"_"+h++,g)}function c(g,e){this.g=g;p(this,"description",{configurable:!0,writable:!0,value:e})}if(a)return a;c.p

Chrome Cache Entry: 1055

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	17382
Entropy (8bit):	5.32057419546909
Encrypted:	false
SSDEEP:	192:NedB0q4KfqKrbqGIwV4MHP7leA85q1bfqbrbqGIwV4RePqceZFgqsmfqmrbqGIwY:48UqY49f7qY4H4AqY4d
MD5:	CBD1AA6BFC2FCB82143EE4E794C19660
SHA1:	E26ABC004EC2CF733B2DAC424F829563345EE21E
SHA-256:	38FC8BD10FE5C3A319B678004E342299DB15405CE7AC8690D43AD2F052ADE908
SHA-512:	4792F99F399CC4A2275BE0D96DE17E20D6A242BA131F75A4571F900888C316AA3EA69A7AD72AFFBD835F2CA35D1AD3756FAC2C114F3861DB0FB7EE7ABEDE3CD9
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open%20Sans%3A400%2C700%7COpen%20Sans%3A300%2C400
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 1057

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzE1OTMyMTgyNTAyNDI4NTg3MDgzMQ%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1058

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563), with no line terminators
Category:	dropped
Size (bytes):	563
Entropy (8bit):	5.101503777856484
Encrypted:	false
SSDEEP:	12:2JqxHVKm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2Jxfm8uVCxwgxkHEZ1VZflok
MD5:	0217022163599E2C9264464D791936C7
SHA1:	26C6DF51A35065FBD0EBBAE9EFE7C43BDB42051B
SHA-256:	14A6AD6C4E525C583315699125B49A9BAA4F84BB7D75387B3EA33ADADEBCF94C
SHA-512:	6C862A0C57EDD28B9E34D0D8B76566EB151482997E7D365D5598C7E8FADFAE6DE78FCD24B8ABD59B2127695912B6C9ACD49EDF95D827DEFBAC3CE2639765841D
Malicious:	false
Reputation:	low
Preview:	(function () {try {const accountId = "6b4befd3-bb9d-413d-bf7b-146588adacea";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 1059

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	195
Entropy (8bit):	4.918920435540943
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaRMcrjntoZRZc2IBeX:8DIGoXbfCYKpEeYSdeRZuBeX
MD5:	102C2BCBE87C7E5CB5FC86629EF139A7
SHA1:	C2349AA9E2DA8E18C18C06C2A5A71CAFE85F10D1
SHA-256:	6AD80B4F6AEE99A3BE8C4DF1B21FCCF5A5A73E72E27C500532545378FEBDD6D1
SHA-512:	CB35359EA031F140454E5692D3C0960FE02620D9E8C48615D14F7AC130A99C6DC506EE4C89C2BB8D29F7B72E8C9199CCA758C7AE6BDBC976F264E03F8CBD836F
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain","cb":"0"})

Chrome Cache Entry: 1060

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	5093
Entropy (8bit):	7.960759336243288
Encrypted:	false
SSDEEP:	96:oP3alhZd44puXTmBaxD30RkftAdEUzoF5dTCke3viBbzuxqOyI29U4:2arPt0Dmu30RStANQxAqBbzKB+
MD5:	4B7587C7183C029BE21AAAE16C626B89
SHA1:	7A1E6219CA6F795986529F0E5701F051B31CA260
SHA-256:	7FCFC3270316786E5BADA47220294025FBD95188DE4362CC209B3DFA3FE03C0F
SHA-512:	A2D33A09526D356754E33E02DC9396805EF6B2EA67A77846ACB1DF169F818A1CE5E2728F6DFB450AA88137AA53FAA79CEA00B970ECD5B6C9B991B689C83E98DE
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/guard/i18n.js
Preview:	.2PDT.z..!........./..;%.Hv.e.V.." ..Qc$.......u..~.U...9...!.G...k..jF..6...o4...u.r...`....ll.....H^v...C?..u(..^.&}.[...2......;......&..4.R..5U...9.....P..-.Us..D...W.O.LB.0._'..e=.QJ..g.UQ...\.f.;)...1.2&Q.sB.[V.N$..d.A&Y...&m.1)j.uR..Y..#.C(.N.."$o.I.8..s.u..B.2...N.?'.......C...W......t......t...{.(...W.<...c.7.,.s.8...;...>b....=J!.....e\|..\|.n....n..&}.f...Y8D......q].$.uj(EW..We.T..L2[.....}p..ida'.^.g.=...3......Lv.T.;.Cm.z.'.#k...p...v7.sAj..>.7~t...b^{C.."..E...!#~)...........SH..k>6.n.V. ..J.t...@.....B...............{?....X......C......\|.yu.......9.9..j...\....`._.{....a..v.-t. m.as..4..k..U%7..[I....C.._.IzL2...Ns2+E.hs.TZ..S..A.A..p.M.........^.OA....4.EX`#$t.......>...70!L?M.7.[..6.4~.........\|.R6.D...e..4ILI1A@m8=...%.....%d...li,>..s:..{...I..Nm.:@...[...qZ"..x3.i...\.1G.6~...ZPP...4....2.r...........+.\..1.N.....a.$..L.A.g.f9...-2..u.#...5."uY.0.!.\!.^....3..W.i2..`.14..`.....Y..a.=..AM..8.. .g........xs..

Chrome Cache Entry: 1061

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1241
Entropy (8bit):	7.8453370838822005
Encrypted:	false
SSDEEP:	24:HqdE8E57diMq8kHZoUcMaVEimEEd+G2zwnWmknbUeb/hMwekXCJm1Czj5:HsEwMq8kHZzcHfc4G2MWmknbJb/BekXU
MD5:	3B9C4DE1AC11D81166FA789015EE1B8F
SHA1:	0427278FD5618786A0C61B49B1CAB32EBDD3B1EB
SHA-256:	14A6523A896ABEA784B416172FBE78C0C3B571D7563A79CE4779FF72F4D395CD
SHA-512:	97F29C6DF687026F95AE66AC545DBA2EB6B82CE129C7B26F3B4E250DBBB78A9263B69858F1A3ABDA7F6F1E2300074691FF534D1CF3A51CE9C519D61F4DFA95E6
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/styles-646813f1.css
Preview:	.}...Z..T\\|[. p......~.0 3......Pec.4......)# ..\.....y1.7YWe.c...CQ#..nO..0.......1....!(B'P..5B'Te.g..m.E(..U..F.....\|./.""....o;.t.}U.Z..(...S.`=....'+.s:..)../.._...........a.p..\|..`G...-..DG.jC]..R.95.l... .......!Q...&....9+.m_...N...~.^..7A.m`b......kJ.9cu....,..P..pFs..)..5".m....m8..p....`[..4......f..W./Hm......8./....g....m.?..L....,/[..J.9.l....)......w?.p......3Y..z..V.w.4..f..,........S.....YV.m."...&?....3..h.\|.{E.M...b...N.l...2..\|.%.-S...e-...%r..QR.R.........!.o..U6....[\|.(..."s....&^.> $..Z..F.$......\|...;r.7p..........}=Ny[..).3..:dc.?YyE........+)....,.........H..t..m=gd..7....+....#\...[ .-.X.....gl...Q..V...:_7..k..QE...IL.......w1...uf...5P.Q..5..6..L._o..X.f.k.G..c..x.........M.-.b_....! ....W.....i.........&]ck.`.........n..Y.).....wc.i.B...Mc.d5G.....z`.K.....a...C......i.. .T.D.....@r."c_,...6.e...n..\|.=...z./.'.*.'iIq...e.9\|..o$.i..y..-G....e.....{..m.y.G`<.l...i.+.&.{D0....P6....\|..)DDg.)..I.8.K..0.....OI.

Chrome Cache Entry: 1062

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	285528
Entropy (8bit):	5.536126998056567
Encrypted:	false
SSDEEP:	6144:niIlBIc4CfOV2E7iIbPTBKdxjUNCjZCwvkiIlBIf1WtCb:niIlBIc4CGVX7iIbPTBKdmNCjkwvkiIG
MD5:	B01E6E1A4CFD77353CE79CBB89B8DE8F
SHA1:	EDED8D170AACC7561629AC0FD404EEC0819CFCE3
SHA-256:	B16B8C97C0572BC65E4B2A17D9D183209A42737E0C4CFB649212358CA2F6064C
SHA-512:	28137ABC1691FFD9367B9DA02B217559136D83757D695B594EB5DDC7D6A8CCE4223BCF3AC2FA21AF0E7D9F269F97543125988A6C4335C6DBC8D5B10456DF2305
Malicious:	false
Reputation:	low
Preview:	!function(){var e={781:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.checkGppCaliforniaConsent=void 0;var r=n(3230);t.checkGppCaliforniaConsent=e=>{const t={sectionId:"",consent:!1};return e&&(t.consent=!(1!==e.SaleOptOutNotice\|\|1!==e.SharingOptOutNotice\|\|0!==e.SensitiveDataLimitUseNotice&&1!==e.SensitiveDataLimitUseNotice\|\|2!==e.SaleOptOut\|\|2!==e.SharingOptOut\|\|"[0,0,0,0,0,0,0,0,0]"!==JSON.stringify(e.SensitiveDataProcessing)\|\|"[0,0]"!==JSON.stringify(e.KnownChildSensitiveDataConsents)\|\|0!==e.PersonalDataConsents&&2!==e.PersonalDataConsents\|\|!1!=!!e.Gpc),t.sectionId=r.GPP_SECTION_IDS.CALIFORNIA),t}},2988:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.checkGppColoradoConsent=void 0;var r=n(3230);t.checkGppColoradoConsent=e=>{const t={sectionId:"",consent:!1};return e&&(t.consent=1===e.SharingNotice&&1===e.SaleOptOutNotice&&1===e.TargetedAdvertisingOptOutNotice&&2===e.SaleOptOut&&2===e.TargetedAdvertisingOptOut&&"[0,0,0,

Chrome Cache Entry: 1063

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1264
Entropy (8bit):	4.938365243435912
Encrypted:	false
SSDEEP:	24:R3OYNC+QWWCIVLqiMlMfP3OYsweQWWhVL3L90QP3OYN7AQWW2VLcxbp:hOWC8IVLqiMlMfPOLWVL3L90QPOCCVLs
MD5:	775B24A6BF448EF1741A248F4D0D1798
SHA1:	C744599BC3828D7CF61211F932A658893EB0ED19
SHA-256:	3579BAD82B0DBE568857F5550630F16E8B3CC434C0E4D3D04549033B7B8EB814
SHA-512:	A62A5F40F91669AEFFE51D424BA9BE6B21CA1F496A1048665D25EA8552CF45DE4A5CE2C339CCC4EC866EB0725EF1E6645D1D92A3161AA149FE938C16BFA44D15
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Oswald/font.css?2
Preview:	.@font-face {. font-family: 'Oswald';. font-style: normal;. font-weight: 300;. src: url('./light.eot'); /* IE9 Compat Modes /. src: url('./light.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./light.woff2') format('woff2'), / Super Modern Browsers /. url('./light.woff') format('woff'), / Modern Browsers /. url('./light.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Oswald';. font-style: normal;. font-weight: 400;. src: url('./regular.eot'); / IE9 Compat Modes /. src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./regular.woff2') format('woff2'), / Super Modern Browsers /. url('./regular.woff') format('woff'), / Modern Browsers /. url('./regular.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Oswald';. font-style: normal;. font-weight: 700;. src: url('./bold.eot'); / IE9 Compat Modes */. src: url('./bold.e

Chrome Cache Entry: 1064

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive/check?partner_id=1955&partner_device_id=b8f455c1-6f6f-4799-b5dc-60adc56f7cae
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 1065

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	118
Entropy (8bit):	4.6210204155397765
Encrypted:	false
SSDEEP:	3:YPgbVHJHKQJXZjHvAMJdUC5DA6GKaG2LcW:YobfjPHT5ZaG2AW
MD5:	F6BF880CA34C3E868763365FDC30B392
SHA1:	9B1B41E6AAE16E4FDCC28DBE92679D564352C8C5
SHA-256:	B884D8BFFBC6E1C794D4EAE301A9698B535F857D1837B9B9D60C4651A78A2E1E
SHA-512:	E6B361C088C285DD06A08B7CA42539887FD02B850664E353137A9CCA698560F9DB45B05BFE3F48A1F7EF307F2876005F83ADCD06C10F76CB30111E304D89294E
Malicious:	false
Reputation:	low
Preview:	{"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request","http_response_code":400},"id":null}

Chrome Cache Entry: 1066

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65534)
Category:	downloaded
Size (bytes):	96782
Entropy (8bit):	5.288273972918726
Encrypted:	false
SSDEEP:	1536:aJ31uKQnof0HduoEtIyanRYgUGp1vbYxG:MFut3uoEtvanUG3
MD5:	1D792C313CCAE2C00C75D5054C396ABF
SHA1:	D519E98D37C21F38AAEEBDF843F3D4ADC419AFF1
SHA-256:	70107FFC32AD4D71CD60326200274C1E8BACE923519C617881C1C26335D47F8C
SHA-512:	CED1DAEC1A7EB8012DD6E30753B945839B096D10D57D1FC7A7696CD53E4778045D27261DE5BC18BE86502F7A9BBC980622B7DF5908F1E5CA2A5C3B25B53F1B26
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012410292120000/v0/amp-analytics-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2410292120000",n:"amp-analytics",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function s(){return i\|\|(i=Promise.resolve(void 0))}var e=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}},{isArray:n}=Array;function r(t,i){for(let s=0;s<t.length;s++)if(i(t[s],s,t))return s;return-1}function o(t,i){const s=t.length-i.length;return s>=0&&t.indexOf(i,s)==s}function h(t,i,s){const e=s\|\|1;for(let s=0;s<e;s++){let s=0;if(t=t.replace(/\${([^{}]*)}/g,((t,e)=>(s++,i(e)))),!s)break}return t}var{hasOwnProperty:u,toString:c}=Object.prototype;function a(t){return"[object Object]"===c.call(t)}function l(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function f(t,i){return u.call(t,i)}function d(t,i,s=10){const e=[],n=[];for(n.push({t:t,s:i,d:0});n.length>0;){const{d:t,s:i,t:r}=n.shift();if(e.includes(i))throw new Error("Source object has a circular reference.");if(e.push(i),r!==i)if(t>s)Object.assign(r,i);else for(c

Chrome Cache Entry: 1067

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	dropped
Size (bytes):	507546
Entropy (8bit):	5.518030906930185
Encrypted:	false
SSDEEP:	6144:VAnIRJNdjjFsADCkTo36j6x/xxi0TScLh9R314gAguLbldG8N8:qMpZ9oRx/Oep3148CbldGl
MD5:	7AC6A74A34A2F6EC5685D1D5F479A4E7
SHA1:	EEA786C082CE5D68EDCA5D695B0F8F586C473B3C
SHA-256:	B7CA699A9E63B78A440E271384779DB6596EBC76C1ED8208D151475FF796190E
SHA-512:	DBBC15BE7C47265E1C8605A6F3DB23C4208F6CC67DD09557D736F01C32C46B307B40669953BA2ECF458CA4A97EB6F3B9D0F328379032BA7A89AD24CD9D91BA99
Malicious:	false
Reputation:	low
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ba,ca,fa,wa,ya,Da,Fa,

Chrome Cache Entry: 1068

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (428)
Category:	downloaded
Size (bytes):	466
Entropy (8bit):	5.016206528451947
Encrypted:	false
SSDEEP:	12:qqGajMVQgl4SI30SIiKB4HDQJ8VvFSt/vE05WLY:q91l4SI0S7KB4U8tE95WU
MD5:	F574502AB0DCB493B7B19F3B28E961D2
SHA1:	927946204426BEA61BC79F73469484812FC0D64B
SHA-256:	E1EB8714B30C12AD08E5AC9253494A226FD593D3C04CC5CD6D12FCF3EA133A6D
SHA-512:	F46F238A029B0A06CD4225499B3E4073AE48431E2AF1C3AA42E69249C16C7962D5D17F8BBD24355335FFA354AF5BDF221A8EAC235086D219C91575C14B9367D0
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/com.kun/login/register.js
Preview:	import r from"../../jquery.js";import o from"../../ox.js";import n from"../../underscore.js";import{addReadyListener as a}from"../../io.ox/core/events.js";o.serverConfig.signinTheme&&o.serverConfig.signinTheme.trim().toLowerCase()==="com.kun"&&a("capabilities:server",()=>{n({"#favicon-ico":"favicon.ico","#favicon":"favicon.ico"}).forEach((i,e)=>{r(`head ${e}`).attr({href:`themes/com.kun/${i}`}).detach().appendTo("head")})});.//# sourceMappingURL=register.js.map.

Chrome Cache Entry: 1069

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	466
Entropy (8bit):	7.4723440602822455
Encrypted:	false
SSDEEP:	6:2zDdIVVt5owbyE9hUhJfhURNbBCqKn5zZNDykD+8COi256UxGpU/7E8XSIDJVKyx:2vdIwweEreuKXzP5e25d8w7nYyVw9VYj
MD5:	A031236D2A9771A539CBFC3D8FBDB839
SHA1:	AB3C7F727171C549F00B7A1E4B9440009358E370
SHA-256:	AE77AC38A9A9494388E391834890B279EEB3E24F71AE797E245113472A805B64
SHA-512:	5A72C6B9CAEC27C029DFC50F7CC517CE8F01E6D11267B9BA15BEAA91D6FEE79152776757C50CE0F066CA379A5C0680B956E1C87E1D33AFBF05CD764D20A76D08
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.dumpster.en_GB.js
Preview:	.h....w......&.Ke.R&.Ys@......XWEQ...:].Tt,..n:WH..S_.....h...c.m@...Be..v..,..Y2.z..p..N...n....n.MO......':lqb.t.;,:I.........0.`S.....>.....}...k....Ne.."..V5.=.Ttf.z%.YD..Z...==..p..u.....(T.....d\.W5..$(...S.G....:....^oL..quh.]%n.q#q..F....3.Z..k..6*ld........K...!X.P....q" ....h..$...96....d...X.!.x....b._...q..'."~..(..6p..z[k..1.n...\..A....Z-n.F.@...%.#.....#p.5..l.a.........d..lK.S.`..s.....n.;.m..V0....(.y..v.V..:.l...p.['.@..-..%...,.

Chrome Cache Entry: 1070

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	2082
Entropy (8bit):	7.879199186794241
Encrypted:	false
SSDEEP:	48:i0GQYtieFfEh2ch6gQALlQ0JdMzaxfzabHNogHkoOcMdB1upM:izRrALl2aJAkoOcMEpM
MD5:	A8F7409E9A99E9DD3F2006F4DC2374CE
SHA1:	2220760DCB52548BA94570D28403816C6CBC2350
SHA-256:	C033D0BCC7A081787871D40E27369705B8149A79D019C383C43FD0B06D974562
SHA-512:	44AC72140735F7DD7DF9C93BD422B06054B51CF725AF170EA84FC5AC9253ACDB62F90DB7DC6FFB13B2FC410C8EA289F78F175DC3CDC034EB7D985668E5D307BA
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/index.html.js
Preview:	.j...2U...Z#...S.s...)...J...x...SJ..J.z=.....}H.&B.TO.,........b.........~s;....7B&.....u.....G..V..;HJ.4.:.w....Ux.e4.w.9P`Nj.U....Mu.....7..\...i.l.h.......A.....z.+.......0....,.w....k..UB.ux".ALUk.X...h{.......C.0.V8....b.....0....dj1.z`.r..1..4b..&69......:C.:.DC& _....J.......T(pa;....-sES.V..."[$z...7...y....S..Sm=.@~...0.&......&..9b..4.A..t...7. 4WX....P9.....9b&..f..<..n.c..PxJUhS,2mN.....r...?'.a....?\G.6..M........M...x...X........Xm...fHxp....M..Ehkly..C..j....A..n.X.......2.x5.,..}....W.....\|...,R.n....vT......L.0Q'VbT....,..D@a#..d.....O8..@.1..nY.......:.,.$..Ei..(.z..F"..L.....a(.l..UaE.......7c.ud.O..u....N..@.f..Zuuu3.)..O3.D .......W{}..w?...\|.O..;...e...\|...\|../....?.a....).^.T...A.Jdh....v.....Zn.QX...i..u..d@9.q.[z...b.;..R ../..{...7.......",. 7:A..'..cEc..p.F%...U....J..E.....Ar.?.46m.$W..$H....?...r.A...l%F..V$.....-..,."+.......#.....b.....BN....)...@...}&.).....B..,...>.....'.`.....$.>.......,I....

Chrome Cache Entry: 1071

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 17359
Category:	downloaded
Size (bytes):	4175
Entropy (8bit):	7.942107626090522
Encrypted:	false
SSDEEP:	96:xlXQ5qYMmAl7caYGs4vI6p6Vf6yLSkD8oJbK/4UVQOt3eDAnBf:vXEqYMmAlKGGthvX1JbKpZBf
MD5:	4415D47BD3A5A779A65DA9118FA89CBB
SHA1:	DF49C1EB670B1257BD9AB34EBC4C09B70A64101F
SHA-256:	20E3499E9B6FA5CCA1B9F4CAC40304DBEBA6B5E7921AD72632E2E0A543B69CC0
SHA-512:	A4762EE1F01E540A68B03BEE0F38CEC34D26F1366D45B18E64CF5C50E73965C99B1008AA9744CF74819F551EDE8AF7870C349B4C92327D23D73ABA9A4E0E1F37
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/
Preview:	...........<M..uw...[.......Q.{b.,;J..M...]h.......{zm.$..CnqrI..$....e..T.#.@.....w.R.Z........w..._...Gd.......").....sg..._.!d...$ZP.@O.B'...t,..}.U..S.'.....E.S.f)x$.\..S..).s8..Rd0.9.8.`.-..r!.3.q..M}.....`xD2.YVd.&z.m.H..R.rqD*.~..4.K...d..y.".....`.E....'.6&...^.4-.GhI.J....R.V-p..p}D.HD.........H.B:.>I.dc..?.8...i.zP.I.gb.R.W0.i....i..kP.M.L.o...T..Q.+.nA..4..K...p...w.2~E$.S/..%..G............H.O...@E...,..+.........c.....Z.:L.\.rt1.r>.@N....\|......._..AM=..%.C%..9..\.0R.....#.5....\|.2...\...X..J...Q9g\|L.UCN...2.2..4.>.H.4.g..K&.....8.C~{.A..OR.....c....O..RAc.5.1SyJ.c..p].KS6.>..1A..Yu=/.f....v.B1.1.3%.BC.E..L.............b....px.jZ@..m..7j?&.g'...N....i.....?.Fh.A..;.4..G.H...6C.{0<l.....+.E..Q.a.!(Q.!s.....Ga..........[...Z.F.y...TC.....Z.~7..Qr.1.[.........8k.^4k5.;...)..'q.w.}IcV.6..f.[g..W...8...i~M...5..9............m.`..F....a...=..7....bT.ty.bM.k.NGm....Ra.T .....TC...e .}..@)&x_W,V......V9vHxG.r..HU..."4.c.Sy.H.v#E

Chrome Cache Entry: 1072

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1463
Entropy (8bit):	7.869465095274779
Encrypted:	false
SSDEEP:	24:1f54J9ttKbv2wG+irRjaBWHXysFMoED8CQBHt++ADiVZVGOapkVfu2tv3JkyYldU:1f54z7KRGfrrXOaCQBHtzA2V77aqdu21
MD5:	19977EE548D0236B0DEC7A0066FF6549
SHA1:	FE97D1D71C1E5DDF14335F1C626453A86D3977F4
SHA-256:	5BD89EB479F6BE694703D4289CF4E96AA0F1F9D687805BB69A7254BB7E1618E1
SHA-512:	7FED8489821B459769C6D2382439B146FE532C170DBDD089C2EBC26400722B50F27BA67AD287251071CC85E7F4AE67E82AB37BD699C3E719FB594A061571AF88
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/ox-metrics.js
Preview:	.....~.f.~..g...,%]..7.).5ga.-..h..}...)..D"....r&....E.j(.z..#...a.R".,.o......P.q....-...s.0g.../....:.e.%...Y..L..0...&...Q!......ei3...m.....).s...gg<.s.......;.....-/z...4....q].i..J.:..)L....=...a.1.b..?3.-H..vY.C.bP.hM.Y.l..o.'"...Ga.]+...Z#..54.../X.bL.}.s'.......2..C.."ht.+i....>..%.........{.#..B.V.........9...60..{.A..../s.........C.).:. `.....:\.....A>..b\|..g..p..._..&...\..EV................bAmK..6.J"..p8nHP..FEvb2......e..l.t..".....L..\|.t"...d..\cK....4".v...@..J.......(.l'...(.y...>}.&.Os/.\|..._......^.w..eU...eQ..L.$.y0. .C...+xk/...s...5..^f.O;#m....<9..OcE........@..\.IB...TSZ.O..uZ. _..........4.Fg}.g..D..m..n..].....+E..Go.^:.p;..Kn....7.M.T.UIq....^.oo.^2.t.,n..x.A.......yIC.6!V].!..^b...........)..S...OC.....q#.[n.C .JU.F..7..I,.....@A.Mf?..q...Q;..w.y.hy.NV....5..z..'r.D.^.L...V0Y.3<...........wo.B...G_ve#.....3.i..@..Y.......P.z..W&g..ZQ..9~..0.-m}..f6.n.=6..N.M.;.HU.b(y<N...f..F 1S\|..[R..$......c.q...B.t.

Chrome Cache Entry: 1073

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	3697
Entropy (8bit):	4.707743528907903
Encrypted:	false
SSDEEP:	96:r4QJODZATiN1C81vwuMymZgpqVf9oF2VdP5k6ya/e3Hgqj9DdZda1SO:XJ6ZATiq81vDtNh8dP5k6yAeXgqj9B7Y
MD5:	AC373D716AFE4270DF40F60417B0F418
SHA1:	ABA148148C771BB66B0B4AEAB6EAC8EB40352745
SHA-256:	F75570C56743E8C705CB06F5F1F9B1F8F2CC13119F5E2ACDA2F3BB8D987DE94A
SHA-512:	3FAF2FE9C98144F41A3AB614E23E1D488AAEB2C944A3C736C196C69175C96E4D78D2FD69C0B05A5DDCAAB819C0FCA2BE40DC2C178257E2D0AFA2523072CDA985
Malicious:	false
Reputation:	low
Preview:	/===================================================.= Weebly Horizontal Site Menu =.===================================================/..(function($) {.. /*. . * Generate a flexible responsive menu from the default navigation templates. . Groups overflowing nav items into a "more" menu item. . /.. var Menu = function(menu, settings) {. this.$menu = $(menu);. this.settings = settings;. this.$more = $('\. <li class="menu-more has-submenu ' + settings.parentClass + '"> \. <a href="#" class="more-link ' + settings.parentLinkClass + '">' + settings.moreLinkHtml + '</a> \. <div class="' + settings.containerClass + '" style="display:none"> \. <ul class="' + settings.listClass + '" data-menu-more /> \. </div> \. </li>');.. this.init();. };.. /*. . * Initialize the menu on load and on resize. . /.. Menu.prototype.init = function() {. var self = this;.. $('body').addClass("mor

Chrome Cache Entry: 1074

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 1075

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9880), with no line terminators
Category:	dropped
Size (bytes):	9880
Entropy (8bit):	5.203049711898341
Encrypted:	false
SSDEEP:	192:L6MBUUk1PvFCO0CO0COOz2iJsHqlUnv8hY866Bv8J8w8k:uMBUUk1P9CO0CO0COOCiJsHql48hY8py
MD5:	D3DF0DA0411D0F9D973FEB484D9257A9
SHA1:	6C1C65F5BF3BDE8811D52727F7BF2A9D37CF0BD8
SHA-256:	7DDEE48D852E33E99616C2897CCB875E27014CC49286376A441685FF16D219B9
SHA-512:	540E0754EEF760360EE32AD85D59551C297223EA339692BCF5B064C98964A50A3E42E1DBE0B128899B9C8FC8056C7D535998C4A7A2751397FBF92FCACEFBDF53
Malicious:	false
Reputation:	low
Preview:	window.mraidDetected=false;try{if(parent&&parent.mraid){window.mraidDetected=true}}catch(err){}if(typeof(AdvertViewability)==="undefined"){window.AdvertViewability=function(){this.initialize.apply(this,arguments);if(!this.parentTagId\|\|this.parentTagId.length<=0){window.AdvertViewabilityRegistry.push(this)}else{if(parent.AVP&&parent.AVP.viewabilitySupport){parent.AVP.viewabilityRegistry.push(this)}else{if(AVP&&AVP.viewabilitySupport){AVP.viewabilityRegistry.push(this)}}}};window.AdvertViewabilityRegistry=[];window.AdvertViewability.prototype={initialize:function(d,c,e,h,f,g){this.tagId=d;this.parentTagId=c;this.baseUrl=e;this.beaconUrl=h;this.beaconData=f;if("context" in window&&"initialIntersection" in window.context){var b=function(){return((window.innerWidthwindow.innerHeight)>=242500)?0.3:0.5};var a=((window.context.initialIntersection.intersectionRect.widthwindow.context.initialIntersection.intersectionRect.height)/(window.innerWidth*window.innerHeight));this.viewableState=(this.

Chrome Cache Entry: 1076

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (1630)
Category:	downloaded
Size (bytes):	7160
Entropy (8bit):	4.819263409497788
Encrypted:	false
SSDEEP:	192:tUpqUXGMhJpJuMEpVyfWsgBm6zCg/8LWLEBOqpJ:tUpqUXGMbpJudWgBrb/8LWIJ
MD5:	AE81AB7069097A055829FB9919258138
SHA1:	7DC529F16FB595BBBFC5937ADFE1D0A5CF563F8A
SHA-256:	5A630B41E7C3D34392BCB150A5731B6261BC6314D71D5DB8407A646AF15BF8AF
SHA-512:	923F0E92ED682F638ECA768065630AD26195F03CFD54BA235531C50D587321E45D0E0000E811F943557BA08D9C8A21A3F4B430433370C28C456ACD6B094C63DE
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/files/templateArtifacts.js?1736414015
Preview:	// Gets converted to _W.Weebly = window.Weebly \|\| {};.Weebly.templates = {...'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul class=\"wsite-search-facet-entries clearfix\">\n\t\t\t{{#facet_entries}}\n\t\t\t\t<li>\n\t\t\t\t\t<label title=\"{{name}}\" style=\"background-color:{{display_value}};\" {{#active}}class=\"active\"{{\/active}}>\n\t\t\t\t\t\t<input type=\"checkbox\" class=\"w-input-offscreen\" name=\"{{filter_text}}\" value=\"1\" tabindex=\"-1\" \/>\n\t\t\t\t\t<\/label>\n\t\t\t\t<\/li>\n\t\t\t{{\/facet_entries}}\n\t\t<\/ul>\n\t<\/form>\n<\/li>\n",...'search/filter/search-facet-checkbox': "<li class=\"wsite-search-facet wsite-search-facet-checkbox\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t{{#facet_entries}}\n\t\t\t\t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{f

Chrome Cache Entry: 1077

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53867)
Category:	downloaded
Size (bytes):	55134
Entropy (8bit):	5.702232148791689
Encrypted:	false
SSDEEP:	768:jEiPAeoa9vySust0GTzOwaosKf/1gR3ARHNL5vsaeHJ9ibZlPqy5iHMfa+:jEirvmkOnosyORwRr0J9Uq2
MD5:	8B0CCE3B1EBF7A94348320551F0093EF
SHA1:	433867B75985AACAF92CA2AC1F278174509E6076
SHA-256:	F99ACB7AFF3429A4A5E4B1F93826E76461EEEB22D26F7B511AEC1AC4656752C3
SHA-512:	972868D461F9B39F68D87335682680F1BD51F5D9B51E65E41F9A4757678653DFF870E580A92C5973757022C6DD1C9F8B1E613267C6E96F045989FBCDA22B1791
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function F(O){return O}var T=function(O,n,C,V,w,E,x,h,m,r,q,R){for(q=80,r=95;;)try{if(q==13)break;else{if(q==91)return h;if(q==79)return r=95,h;q==V?q=l.console?8:79:q==8?(l.console[E](R.message),q=79):q==19?(r=95,q=V):q==80?(m=l.trustedTypes,h=w,q=O):q==C?(r=n,h=m.createPolicy(x,{createHTML:W,createScript:W,createScriptURL:W}),q=79):q==O&&(q=m&&m.createPolicy?C:91)}}catch(e){if(r==95)throw e;r==n&&(R=e,q=19)}},l=this\|\|self,W=function(O){return F.call(this,O)};(0,eval)(function(O,n){return(n=T(7,32,61,62,null,"error","bg"))&&O.eval(n.createScript("1"))===1?function(C){return n.createScript(C)}:function(C){return""+C}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJza

Chrome Cache Entry: 1078

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	828
Entropy (8bit):	7.763127583084722
Encrypted:	false
SSDEEP:	24:/AIpr0tJU1OYeToet3ewV0rJCA1UOaPPU2Mc4FpTgRwZ:/AIpr0sVeTtuePA1UONcgKRwZ
MD5:	12B2536DFAEE6721602E50A711CD5B7B
SHA1:	C2FFB3229D3DC7E16EB5268B948230088B5493A5
SHA-256:	61F5030BFAA29ED0B29957E9B4017559B04DD58191C237D68A3BBAF5AB042C61
SHA-512:	19DBD0D28C11B9A626424D8F11B307A9D8BEFDC8E6A1600EB0EC52F710249FD6DDB11DE02B59B3472095473F93CF8808ABD2B0808E97C794A470FA2A426C1538
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.iol-smb/login/register-d612f300.js
Preview:	.......y.u........p..h.Xgki?o..vfv/.}....I....d...r...F...CA.J..g.%%..<.x.M......9.u.....z.o..".....N.....h.}.Vh.2Rx...W.0g..Eb....WX...>./.Cz3...^....l.=P-.E.S...;.~.D....V..7..?.....2.....i4.,.3.<. 6...X..Lc.T..v...b.....u{/.!..f.....}cb.51..!=.%.D..uc.{..c.=p..n"./.I.......d..Kxd.n\|{x@...`...C.l.t.0..3<..=<.....F....3..T..9....Ut....^...x..w.......].Th.....#.u....+.."\]@....6^....".-B.Xi...D.W=.....0....Z..Ha..}....".4c.....c....m@\.M...=.1.`.G.M..BH>.2.u.....g..Yb..a..^....5\....t..d)..\..z....I.k..#*.N.....).8..(.q.$......m.....e.X.3.E..(H..\h...Y..#..~#g.`K......#.4.VD..[.....O.~Gd3.....nsf..=D$4..... Z.........".........F.l^.. ...SZz.+......6m...V?.X#.E.m..O......'}v!g..A.0..g....B...5...2u.j4\|..YN..5.M......S.-a..q.%.....7\..:Rp2................P....y..N...\.'

Chrome Cache Entry: 1079

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1332
Entropy (8bit):	7.848419186866918
Encrypted:	false
SSDEEP:	24:niwGQiULVNT4/NnlAPStAjctuq6O1cOZykL3GhKRqEGDAOrzVsNYq0i:iwWULX8hqat3uCxZVL2hKRPUAOwF3
MD5:	F5D5471B28A90798555A029A4C611F88
SHA1:	33007DE4DFF88ADB10690513EE4C286431250E35
SHA-256:	B24118339889BA24AE6AFB2279F083775A063550D7903E3C66616AE7E903FDF5
SHA-512:	DF566E9AF83BC8785093DD2CFC3123D95028C745B9728450AAC4DB4CBA42DE4324A4C19502267D73FC39F210D534DED8589807BF153C8FE9CFA973B61F86CA8D
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/mandatorywizard.894649b8.js
Preview:	......u....\|..6.d.4;.)....:.....I.f......J$...?.'..H.K..k%......p....W.w9...X3..wP-..m1.j..B8{.~\|}.^..x.J..!.JuK.<.k...}T.$3..P.J,....0..D....m.}.m..me.[.....=.x'.y$'.'V.m.U.j...w.v.e....K<= ..f..V....4..y\u^.6....V7.v.y..C..6l...&l.9.......~.........!.u&X..RN.:/. .U.W......C..M...uP...p.b.oV..I.0+.XS..e.M.....i.cv....H..z......R@..j...-m..CGS....m.=. .m.$..............?S.../.}.&....sDL.xm..l.............z.T.h..l.....n....b(t........n...w..........&...=k..vH...[..m.?(.\|...s xoBT./\|..P.......S......2y}.JI......l...O>...^\|x......Wr....."f.l,E.&.Hw....le.z...6.s.......V)m....]Z".R..k.NL.M,..../p."%...y Q}.C.L.x.......;.....`.........n.....^Z.`5P.W..2..`.n".f....od.RV.zXO...g.....:[...<.r......M.k..Vq2........Y(@z.C..;.fk.C.4...f..u#..qIV..&...b-...z..za.8......2..y.z.k.....EZ6.X..C..tf{t.~..q.....b].).(.C.....)....HL.^63LE!{.e....r.%.Ip@.*...$L......ca]S..i?.j...]..e...`l..~......M7?.......0'....5a...Ib.<..s.5.....I...

Chrome Cache Entry: 1080

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	566
Entropy (8bit):	5.3726171013636845
Encrypted:	false
SSDEEP:	12:LvmoVt0/DxB/NN/s8g3G+2bVeQXe8LWX+8QA4F//AV8/fBU:D1Vt0rxB/fsdWZVvp6X+JA4FgV0q
MD5:	CCA2C2B3DBBA53CE0D7019613C1851FC
SHA1:	5A1777AC9CEEEC15D51FD4B1A22C63520783F77D
SHA-256:	02313F91C68F93CBA7411EBD3B832CF1E55CEE1E2CBFA1C6909E27A13E878B60
SHA-512:	73B51F29F535F9421165C8D39583561310F92FDC3F3F5B3AAAD7C92EB48E0274BD320371B8B93AC9D3BD6868287BD31EF291D4381CD6CF7D5CEF49C14F3B966A
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.godaddy.en_GB.js
Preview:	var e={"Project-Id-Version":"Open-Xchange 7","Report-Msgid-Bugs-To":"","POT-Creation-Date":"","PO-Revision-Date":"2023-03-22 14:23+0100","Last-Translator":"NAME <EMAIL>",Language:"en_GB","Language-Team":"OX <i18n@open-xchange.com>","Content-Type":"text/plain; charset=UTF-8","Content-Transfer-Encoding":"8bit","Plural-Forms":"nplurals=2; plural=(n != 1);","MIME-Version":"1.0","X-Generator":"Poedit 3.2.2"};const a={headers:e,"\0Ask me later.":["Ask me later"],"\0Close.":["Close"]};export{a as default,e as headers};.//# sourceMappingURL=io.ox.godaddy.en_GB.js.map.

Chrome Cache Entry: 1081

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	195
Entropy (8bit):	4.918920435540943
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaRMcrjntoZRZc2IBeX:8DIGoXbfCYKpEeYSdeRZuBeX
MD5:	102C2BCBE87C7E5CB5FC86629EF139A7
SHA1:	C2349AA9E2DA8E18C18C06C2A5A71CAFE85F10D1
SHA-256:	6AD80B4F6AEE99A3BE8C4DF1B21FCCF5A5A73E72E27C500532545378FEBDD6D1
SHA-512:	CB35359EA031F140454E5692D3C0960FE02620D9E8C48615D14F7AC130A99C6DC506EE4C89C2BB8D29F7B72E8C9199CCA758C7AE6BDBC976F264E03F8CBD836F
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&pr=https%3A%2F%2Ftalktalk770.weebly.com%2F&pid=rMQy0Q67c0bgb&cb=0&ws=728x90&v=24.1212.711&t=2000&slots=%5B%7B%22sd%22%3A%22Prebid_Container21737975%22%2C%22s%22%3A%5B%22728x90%22%2C%22468x60%22%2C%22300x50%22%2C%22300x100%22%2C%22320x50%22%5D%2C%22sn%22%3A%22%2F22786333977%2Fapps.talktalk.co.uk_displaystandard_728x90_login_top%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=dfa2b852-f286-4780-a466-875a1c03f964&pubid=6b4befd3-bb9d-413d-bf7b-146588adacea&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain","cb":"0"})

Chrome Cache Entry: 1082

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1748)
Category:	downloaded
Size (bytes):	3596
Entropy (8bit):	5.444209745064718
Encrypted:	false
SSDEEP:	96:YY7YNYR1m5ABePKTBxj6kDxx12yS1M9O84itGGyBoirdxM6j:t86+A4STflDp9B4YL8oi5xM6j
MD5:	D92FD68178888768C733A4365A56FC3D
SHA1:	55916ED75FD5C9DF0A7447298E2BCA559CC9583A
SHA-256:	E573D7D4E3679F1D578E544C5B807AA4FF21E208BAF12E48AA0D09B2B3938F04
SHA-512:	37CAEE932A7038636D84720960420E701C7659C873188CA400EE0196868D9C5A09BB31F566699ACF54DB0F0FC42BD769F1A141A213C2127C38CE839DACCA8BE5
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self;/ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 .*/ .var f={};function g(){if(f!==f)throw Error("Bad secret");};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function k(a){return a.toString().indexOf("`")===-1}const l=k(a=>a``)\|\|k(a=>a`\0`)\|\|k(a=>a`\n`)\|\|k(a=>a`\u0000`),m=h``&&h`\0`&&h`\n`&&h`\u0000`;let n=globalThis.trustedTypes,p;function q(){let a=null;if(!n)return a;try{const b=d=>d;a=n.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(b){throw b;}return a};var r=class{constructor(a){g();this.g=a}toString(){return this.g+""}};function t(a){p===void 0&&(p=q());var b=p;return new r(b?b.createScriptURL(a):a)};var v=class{constructor(a){g();this.h=a}toString(){return this.h}};new v("about:blank");new v("about:invalid#zClosurez");const w=[];var x=a=>{console.warn(`A URL with content '${a}' was sanitized away.`)};w.ind

Chrome Cache Entry: 1083

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1855
Entropy (8bit):	5.512977092345568
Encrypted:	false
SSDEEP:	48:GpT0xxkprqqlwO4FNkLv/zo4MQkn3MG4ppcXkB:I0xypGqlwjNVnzcnpp8kB
MD5:	8BC3BFDEF0D5F4FC1FC540BB9EEEB926
SHA1:	91C38F03CC0CECC1D2E063F584E75250C81FA2CB
SHA-256:	4C6A79A75ECCF14D5390334DB17D7001095FF47A1C7B90D2EECB848A0003E8AE
SHA-512:	B462F0B02224E9416C0CED74AC1EF7458F41F451EA7528A10C7035F7BCB2EE45C79C49DDB7A2B6F08850302A3E48503DDEB8D3A8C1540BC3C79F5AF35C2EA54A
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=8240503542&rd=1
Preview:	<!DOCTYPE html>...<html lang="en">...<head>...<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />...<script>...function loadSyncPixel(pixelUrl){....var avImgSync = document.createElement('img');....avImgSync.width = "1";....avImgSync.height = "1";....avImgSync.style.width = "0px";....avImgSync.style.height = "0px";....avImgSync.style.cssFloat = "left";....avImgSync.src = pixelUrl;....document.body.appendChild(avImgSync);....}......function loadSyncScript(pixelUrl){....var raSrcSync = document.createElement("script");....raSrcSync.src = pixelUrl;....raSrcSync.type = "text/javascript";....document.body.appendChild(raSrcSync);.....}......function loadSyncIframe(pixelUrl){....var raIfSync = document.createElement("iframe");....raIfSync.src = pixelUrl;....raIfSync.setAttribute('frameborder','0');....raIfSync.setAttribute('scrolling','no');....raIfSync.setAttribute('width','0');....raIfSync.setAttribute('height','0');....document.body.appendChild(raIfSync);.....}....</scrip

Chrome Cache Entry: 1084

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1710
Entropy (8bit):	4.9314724103036545
Encrypted:	false
SSDEEP:	48:8OLWVL3L90QKOCCVLcxbKY3QLV4/VLdlL+LIKY3QCyVL0Nnp:8OLWVL3ZwOCCVLfYgLV4/VLdlMFYgCyO
MD5:	922930888BC544E58FC2692226682CF3
SHA1:	A913741C42EA82DC87D8C873CA28C638FFBE7FD7
SHA-256:	25CE2816A5A963942B0334337F6B6C931EE73CF0FCC1C976355353659C89C75B
SHA-512:	BC77409A2086CDBA174433D08848176BC54C4956DFCE629BCA27EC2EE8E679F445908B057EC9E1042F77C82B113B18F783A5F879200FD706F8471177EDE0A4CA
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Karla/font.css?2
Preview:	.@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 400;. src: url('./regular.eot'); /* IE9 Compat Modes /. src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./regular.woff2') format('woff2'), / Super Modern Browsers /. url('./regular.woff') format('woff'), / Modern Browsers /. url('./regular.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 700;. src: url('./bold.eot'); / IE9 Compat Modes /. src: url('./bold.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./bold.woff2') format('woff2'), / Super Modern Browsers /. url('./bold.woff') format('woff'), / Modern Browsers /. url('./bold.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Karla';. font-style: italic;. font-weight: 400;. src: url('./italic.eot'); / IE9 Compat Modes */. src: url('./italic.eot?#

Chrome Cache Entry: 1085

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	4.510249130615254
Encrypted:	false
SSDEEP:	6:rrBHI/4JsjDEXTdPEIU+ADtp2hEEXTx+tA7An:RHIgJsjDEXpPEt+ADtp2bXF+SA
MD5:	D142043E7C28C2B9A3B8BB5FEACF8E44
SHA1:	7E3F4DC19881787C46F83A1510C228B5DA704015
SHA-256:	0A752AA0ADD0F77796CC010E43EAC30FA86E74CE6803BDFD27F0A10AA65A9D20
SHA-512:	D6A1637F38E7D6946ABB5F67B2CCD517FB301E0BCEA531E1F4B40166C43A7631CD3B03189048D26710496D2ECFEE207ED4110D6520FC1DB3483C6B7AB298B4D7
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/mms/v2/get_site_data?hasCsp=true&href=https%3A%2F%2Fapps.talktalk.co.uk&account_id=1948
Preview:	{. "stage_message_limit" : 1,. "site_id" : 34301,. "public_campaign_type_priority" : [ 1 ],. "multi_campaign_enabled" : true,. "stage_campaign_type_priority" : [ ],. "public_message_limit" : 1.}

Chrome Cache Entry: 1086

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (645), with no line terminators
Category:	downloaded
Size (bytes):	645
Entropy (8bit):	5.100314231589721
Encrypted:	false
SSDEEP:	12:kxP4L8BM4FoCpbqWGYsH8KBG6FkKOWGQL8BM4ZpbqWGZc+L8BM4ZeDWQ:kDB7FokGfcKBG6FkKNGVB/GZqBtQ
MD5:	3B14B86F97F7D1E66C05D48E3852657C
SHA1:	C5C7B255084724A7399FB52A9204E0608FB8A6B5
SHA-256:	A08ACD55BB001AA85CED7F4F93A4A1446CA18A17689E872B59A9DA81EBE0CD45
SHA-512:	05C7CAFC0A2BE52A377858A7869E0AB276604C7E873042C9CE2BF9D0ED1E7BAF451156D457738907049C92CB340D9B80F160F8E602E030CF65EB653A2F0786D6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=COvpMxCxv_HRAhie3vmmAjAB&v=APEucNXjgSm9_t_VNCWwEN4bxU6OMF6TmYYMMxxM-ITfv4PJBVTDdJ_Nd5_jkWOtDdF_LUtQ78fiBDmWfdSVY8sncc4wpXF7T83EYzhidn8nJIJ2U3pcrWk
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/></body></html>

Chrome Cache Entry: 1087

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3147)
Category:	downloaded
Size (bytes):	107369
Entropy (8bit):	5.533163001133015
Encrypted:	false
SSDEEP:	1536:MYF1EQGfJuI5cxaIrTX6M4VAR9kD2PAa21O/fVtDjzHk:BHr76MaAbk6PAa4OXVRnE
MD5:	D555466BAF6D62237EA837C4F9A096B2
SHA1:	B82F48CFB9F5D8FB48001E7AB9D33338596ECEC2
SHA-256:	D22438A908FB754C1BD6E2F368E8F43BCC5092C126B5688D0CC14B0804727585
SHA-512:	024241582ACCD23BEA36D07AC76CB878EF5AF37E6F511037A332A9A607E836592F577D9AB8C98119D7385AA65CD0622A0FBDF088AD2FB2067275F201B2BF4A9B
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,g){this.hc=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.hc};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 1088

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2082
Entropy (8bit):	7.879199186794241
Encrypted:	false
SSDEEP:	48:i0GQYtieFfEh2ch6gQALlQ0JdMzaxfzabHNogHkoOcMdB1upM:izRrALl2aJAkoOcMEpM
MD5:	A8F7409E9A99E9DD3F2006F4DC2374CE
SHA1:	2220760DCB52548BA94570D28403816C6CBC2350
SHA-256:	C033D0BCC7A081787871D40E27369705B8149A79D019C383C43FD0B06D974562
SHA-512:	44AC72140735F7DD7DF9C93BD422B06054B51CF725AF170EA84FC5AC9253ACDB62F90DB7DC6FFB13B2FC410C8EA289F78F175DC3CDC034EB7D985668E5D307BA
Malicious:	false
Reputation:	low
Preview:	.j...2U...Z#...S.s...)...J...x...SJ..J.z=.....}H.&B.TO.,........b.........~s;....7B&.....u.....G..V..;HJ.4.:.w....Ux.e4.w.9P`Nj.U....Mu.....7..\...i.l.h.......A.....z.+.......0....,.w....k..UB.ux".ALUk.X...h{.......C.0.V8....b.....0....dj1.z`.r..1..4b..&69......:C.:.DC& _....J.......T(pa;....-sES.V..."[$z...7...y....S..Sm=.@~...0.&......&..9b..4.A..t...7. 4WX....P9.....9b&..f..<..n.c..PxJUhS,2mN.....r...?'.a....?\G.6..M........M...x...X........Xm...fHxp....M..Ehkly..C..j....A..n.X.......2.x5.,..}....W.....\|...,R.n....vT......L.0Q'VbT....,..D@a#..d.....O8..@.1..nY.......:.,.$..Ei..(.z..F"..L.....a(.l..UaE.......7c.ud.O..u....N..@.f..Zuuu3.)..O3.D .......W{}..w?...\|.O..;...e...\|...\|../....?.a....).^.T...A.Jdh....v.....Zn.QX...i..u..d@9.q.[z...b.;..R ../..{...7.......",. 7:A..'..cEc..p.F%...U....J..E.....Ar.?.46m.$W..$H....?...r.A...l%F..V$.....-..,."+.......#.....b.....BN....)...@...}&.).....B..,...>.....'.`.....$.>.......,I....

Chrome Cache Entry: 1089

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.415126169481686
Encrypted:	false
SSDEEP:	24:4HksMq5/Jz2pRNrBZJuvu8goqc0ioNhc+r4+mI:2nz2bNrVENtmN+X+j
MD5:	2B2520932CD0EB0CEFFF1AE9CAA9F68A
SHA1:	58010D3EE42CAD03E5DDE374586106EA20872916
SHA-256:	DB570CDAA4331049ED8414D85DDEC4BEE349AF33E4C4CCAE85BB9FD108FAF51E
SHA-512:	13ECFA6AD884411F2791F97FCEBC902F94DEA9F76BE1B93658976647704D4D329DC523368B2CE301169C84E7E2C4E22439597418C1AC3D1F7E20D85AB98DDCD3
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="DfVibvVgAB4qzUOCYDq3Tw">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1736637149621');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 1090

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://s.richaudience.com/err/?ec=6&ev=1200&pla=MP_Z23yLHH4VI_MPU&int=PREBID&pltfm=&node=&dm=apps.talktalk.co.uk
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1091

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	195
Entropy (8bit):	4.918920435540943
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaRMcrjntoZRZc2IBeX:8DIGoXbfCYKpEeYSdeRZuBeX
MD5:	102C2BCBE87C7E5CB5FC86629EF139A7
SHA1:	C2349AA9E2DA8E18C18C06C2A5A71CAFE85F10D1
SHA-256:	6AD80B4F6AEE99A3BE8C4DF1B21FCCF5A5A73E72E27C500532545378FEBDD6D1
SHA-512:	CB35359EA031F140454E5692D3C0960FE02620D9E8C48615D14F7AC130A99C6DC506EE4C89C2BB8D29F7B72E8C9199CCA758C7AE6BDBC976F264E03F8CBD836F
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&pr=https%3A%2F%2Ftalktalk770.weebly.com%2F&pid=X6OdSjdZxHcHW&cb=0&ws=300x250&v=24.1212.711&t=2000&slots=%5B%7B%22sd%22%3A%22Prebid_Container15529074%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%2C%22320x320%22%2C%22300x200%22%2C%22300x50%22%2C%22300x100%22%2C%22250x250%22%2C%22200x200%22%2C%22336x320%22%2C%22300x300%22%2C%22320x50%22%5D%2C%22sn%22%3A%22%2F22786333977%2Fapps.talktalk.co.uk_displaystandard_300x250_login_bottom%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=dfa2b852-f286-4780-a466-875a1c03f964&pubid=6b4befd3-bb9d-413d-bf7b-146588adacea&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain","cb":"0"})

Chrome Cache Entry: 1092

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/sync?pn_id=rc&id=M5SSWYZN-12-9XYK
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1093

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	195
Entropy (8bit):	4.918920435540943
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaRMcrjntoZRZc2IBeX:8DIGoXbfCYKpEeYSdeRZuBeX
MD5:	102C2BCBE87C7E5CB5FC86629EF139A7
SHA1:	C2349AA9E2DA8E18C18C06C2A5A71CAFE85F10D1
SHA-256:	6AD80B4F6AEE99A3BE8C4DF1B21FCCF5A5A73E72E27C500532545378FEBDD6D1
SHA-512:	CB35359EA031F140454E5692D3C0960FE02620D9E8C48615D14F7AC130A99C6DC506EE4C89C2BB8D29F7B72E8C9199CCA758C7AE6BDBC976F264E03F8CBD836F
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_ym_n-Azerion_n-baidu_n-acuityads_cnv_n-Outbrain","cb":"0"})

Chrome Cache Entry: 1094

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 1095

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072977&val=dcfeeb19-4276-4a8f-b50d-57b6c0c25ca6-6782fadd-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1096

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=beb8670a-646c-4cf0-a211-73ab4a2643bb&ttd_puid=bb675f7e-4a3e-7d19-e6ff-222b6ed42078&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1097

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2446), with no line terminators
Category:	downloaded
Size (bytes):	2446
Entropy (8bit):	5.637541429523425
Encrypted:	false
SSDEEP:	48:jq8jARjANGglRFn2Bq+2BqQxR2BqhybCsGJdTBS5sPPvQh18q:+8kRkNGgTFn2Bq+2BqU2BqhybCsyrS5B
MD5:	4B9113D61C26BF838BD333262C59C228
SHA1:	9AB45131EADF22D375CBB0C2F734665D7ABE6E44
SHA-256:	238B66131CA40A166293722E3DA77B39F97C79E232C4038167202A1D3BA02AA9
SHA-512:	ADAA0F47DD79ACF593E48E62A5803261CA6D8D5BA57519484DE373D9ED8F418411D773FE388FB6A71E132964C9F6DC0AFB23BD546C059536FB3D3E1ABEA757AF
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=84625877&p=157660&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=
Preview:	PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=10251C91-83A6-44D2-8672-A4A9C194681E&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=10251C91-83A6-44D2-8672-A4A9C194681E&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=10251C91-83A6-44D2-8672-A4A9C194681E&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=10251C91-83A6-44D2-8672-A4A9C194681E');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MTAyNTFDOTEtODNBNi00NEQyLTg2NzItQTRBOUMxOTQ2ODFF&gdpr=0&gdpr_consent=&google_cm');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=ECUckYOmRNKGcqSpwZRoHg%3D%3D&gdpr=0&gdpr_consent=&google_cm');PubMatic.loadAsyncImagePixel('https://cm.g.dou

Chrome Cache Entry: 1098

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	629
Entropy (8bit):	7.65735592128868
Encrypted:	false
SSDEEP:	12:7r5RmuNVVJZqgRdF2ewGz+2RAhG1BtRDJKhKoNwQ2IpuJ83i2jF8DbTlqjiL7I:71DNHu4ztWhG17RohJCIpumzm3lq87I
MD5:	ECC7D36AE2BFC9EEC54C294F43621435
SHA1:	35347A9C058366AF8057D1FB76411007E3A85959
SHA-256:	A7871D864EFCDA42AE598A8B0B81342DC5EDBDB8D8391C2AA18D1CDEF050DD18
SHA-512:	ABF83AADDB701B82790922C37DD4C6514538A750B9C7DCD9C8E1BF7A420B674FC8647623E0E8791DAF21EF3C8E3D7C8555D252F7B720DFB5FA14E5E82E0B8B79
Malicious:	false
Reputation:	low
Preview:	.....Z+...Br.U-.\|.j'{.r_..+)., .:qM..\|.G...E$7..:...n6...MY..u...$.`.]O...........%..w....?...a{2.Eng.h.q..Y..[.{.........B.......c.._/`.1..O...YY.b...E.F..BTr....W..a.P..-?I.H~.[v..4u....I.........s..^.A1.k..bl.Y8/: .......Ee.@..7...N.._..).v......R..(ZhCT...,A.....RY2...>..a...4....49...tq..-...E....+...7...\|.......u..~..........H a.h..a.T.&...'2CJ...$%f...8#{,.S............*..J..1.......Q..H..KT@......FW.^.8......2..sq..a....0...x.F'...T.:.\|.y.Za.Q..]_z.... ....fn$....\|(...@...p....l......z.b1k..z0.......9Bk\Z..9."`.uRPNc.i..r....[%...W...!.q.&...P..yh.6..6E...vd....W...)....X..N...w..R...

Chrome Cache Entry: 1099

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	612
Entropy (8bit):	7.648202845195059
Encrypted:	false
SSDEEP:	12:bnB/8g1WcAHVLaeh4krmARPh7CfHD1SjOfJAfCCOr1cxLIA0rTMOa23Ze:bnB/pWcA1LaeSe94HDt4Bd+A0Pg
MD5:	161A9050F5498234665737D30BD3AE9D
SHA1:	EF2E1F4E1E1EC47CDF96ABD6111EA02AEF88E456
SHA-256:	8BC9D34B69634E6AB90EE4C7531CD720DFCD12B19A0D13020EAF1AFE2DF24904
SHA-512:	68843609379A927A5D663AB9F1AA714946D17508282C383161D377C3B8FE0FE57603EC9EDB412A08A296A534ECFEB05E52D2242360C3AAE1715F40CC93E8878F
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/jquery.js
Preview:	........ez.%.....L.C..i....<...{e.).p.....5..`s...j..T..@.V<9..~S8.......b.p;.q....a].......(..5..\|@;..vZ..j:.H.\..uW......Q"...:1..YV.C...V.h.._.a...5.."k.,.:.p.[(.P.kM.. .#w.c,)o..G;<vJ.T!.y.W..._../G.."..m`..\|....q....7...4W...h.C.v..8Dg..u.3...9.........h..`.GZ .....3z..9.8.....txz....vR..{u..(AhA....a.Ua.....B.^..t.W...3.n..L.....l...$.........k6...b...^.,..J...9&.7..>1l...6Z.Zw.].~#4Z..9..5..a.f.n}9`3L...x.t.?..`+=..5!2y.......p8.M.N.?..h8.o.<iI...i.7`Rb..-9.z..-.....Z.HR>v^..4.....p..#../.<.%.}c.)..>2.9F...KQ.Cg:z....FH...'.^....Y...T%..\..?.\7.#.....)ytY..O..j.. c

Chrome Cache Entry: 1100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 73, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2439
Entropy (8bit):	7.809290806755739
Encrypted:	false
SSDEEP:	48:i5MbYTn7ruuHkJVK1wAUc2zptwQ1U3t7ddSIT+gZFlI7Thc:i5McvrKvAUNzptwQ1rpelV
MD5:	6CDE551752C3DDF86B64DD5C0158FD13
SHA1:	B8C39ED9A617C68D52AD9893A7FE9409FA561C63
SHA-256:	CCFDE13123C12CE3F6BED6057742CE94960882A3C5B70C1C3B29C58CF170D748
SHA-512:	1E5EFBC5146B9C192A3C45CF69B8D2B693567E222A90E36084B673DD70656AEC2132A1FC812FAF6ABD1E264DD92ACF262C2E1BE87447BDF78AFEFB01E2B935C6
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tak_orig.png
Preview:	.PNG........IHDR.......I......<......PLTE.......N.Ip............Em. O.............$S.7a.............p.......Tx..........x........Go.k........q..#R....9d.}..Bj..........(V.......o..Aj.Sx......\..[~....>g............w..z..!P.d..............b...........\|..?h....4_.<f..............=f.t..6a....8c.....X.@h.u........8b.:d.......................3_.v......^.....e..i.....y....,Y.......1]....c.....Ns.r......Z.n..0\....]......."Q.^..Ot..............O................5`........Rw....Ou.......2^........X\|....Jq.......Z}..../[........-Z....Ck....m..`..Kq.......Dl.f..Lr.......g........Ms..............&T.@i.h.......%T.j..)W.........Y}....................'U.Ho.......{......)s}.....IDATx...YO.Q....X.......R\p.Wp.A......s.13-w.......7g...$..?...l......`..`..`.@..@................`..`..`.@..@................`..`..`.@..@.......{...Q.......C...=...>.k.....&O....<......i..h.//..N]....i.lT\.....L...P..\|...+....r.b..6......z..7....8mb).n...h.).n..K..[Q1

Chrome Cache Entry: 1101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2439), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	31567
Entropy (8bit):	5.380461848386933
Encrypted:	false
SSDEEP:	768:8IRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7Sr1q1:8IRIOITIwIgIiKZgNDfIwIGI5IVJ7SqT
MD5:	8D69CCC06FC0022839E3D53CD28571EC
SHA1:	61923EFABA691C7B19CD90F4BCD707C7F1AB3EE1
SHA-256:	06CDD020F88F779BBE96FBB0589A34086BDA025E0AECEC43B97BA0C63FB92C0E
SHA-512:	DE56DCCBDD08C5B09E57009A886C1E9B99214652AA940BFFA2FF093A049F1DFE02A3F8577835BC7B554BAB8C2D524C025CA98B66DBFBEC05C1A28349C7407D09
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/home.html
Preview:	<!DOCTYPE html>.<html lang="en">..<head>...<title>Home</title><meta property="og:site_name" content="" />.<meta property="og:title" content="Home" />.<meta property="og:description" content="" />.<meta property="og:image" content="https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tak_1.png" />.<meta property="og:image" content="https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tannn_1.png" />.<meta property="og:url" content="https://talktalk770.weebly.com/home.html" />....<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1.0"/>.. <link href="//fonts.googleapis.com/css?family=Karla:400,700\|Oswald:700\|Roboto+Mono:400,400i,700,700i" rel="stylesheet">. <script src="/files/theme/MutationObserver.js"></script>. <style>. .navbar__logo .icon,. .navbar__center .navbar__logo:after {. color: #2990ea !important;. }.. .header-prompt .navbar__link--login,. .header-prompt .navb

Chrome Cache Entry: 1103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (446)
Category:	downloaded
Size (bytes):	469
Entropy (8bit):	5.273063673033862
Encrypted:	false
SSDEEP:	12:hYjx7QqJmwhpyRDRR3KxDyW9PzXe7CW5VE58jT9ZKUa:hYj1fRIRR3zYkCW5VE5oTaUa
MD5:	028335A5F087F984FEC8016D0871CAA5
SHA1:	9FC035F50DDA4A012EB20DA783860C756D24739F
SHA-256:	7B9FF2CCA6739D699D06DD2E802EB255BE52E846E2748F04D54E09781634849F
SHA-512:	E76CD61388CB62AB5F036787F89CFA954EF44EEADE36DE42A5008444B09408933D30098C7736856B67449822198F881E93577864C9FECDAD98D11639F4407411
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/ajax/apps/formSubmitAjax.php
Preview:	<!DOCTYPE html>.<html>.<head><meta name="format-detection" content="telephone=no"><script type="text/javascript">function ret(){parent.postMessage && parent.postMessage(document.getElementById('response').childNodes[0].nodeValue,'https://talktalk770.weebly.com');}</script></head><body onload='ret()'><div id='response'>{"success":true,"action":"redirect","data":{"location":"https:\/\/apps.talktalk.co.uk\/appsuite\/","ucfid":"815126533391843474"}}</div></body></html>

Chrome Cache Entry: 1104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	47024
Entropy (8bit):	7.994994956267926
Encrypted:	true
SSDEEP:	768:ySvPAEUyNNYss9hA+NPSQBYnureO2EzBBIFCxR73o0Lw8cFHg9nscD:yW3jYs9+NrBg/SzBBIsxR7teHgKi
MD5:	41C1C92863E15CDA28085EE44A4EA8BD
SHA1:	2164A6A5F5C327FCC2794DE97E162877101855BE
SHA-256:	8CC23AAA6F60977FF8DC275181B005AC405589811C9D29191306FA6813FE33A5
SHA-512:	AA23BE078C396FCD4CC3A84E46DBCE2FCF916E6DD4821917828EE4013E3FBEE471858E850EAFB50E220F4DE928862D3E3133430198579B76359242AAE61C95F9
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/core.en_GB.js
Preview:	[.CUHW;.=...cwC..z...-.c\9V.n)....of..~...n....n.W3q.@%........O.Z.3.a.a.e.....k...n..G>T.{..26.~.t.9..c.V]. =.T.=.U$."H..~...g.}...{`......2....gR.,.2)S.....6.Y7...A...\|.j).....3.c.8.\)..=(....7.?vz..:gN.........c.+...$......u&"..}..1......5u..`Js?....b.a.T...H4...../?....W....J..Q...I...n[$.. ~'..'..e.........'.7..{..............O.{..,.h...e...p..,\|...{....?$....[_..C.{..............m4.\....;)J..76Q\....$.....wI...h.yz.}..[........f.A5.dn+....M.oJ.=.]&84I...D..v.O...o...........7.Fq.^.....a...<:....l.....]../..#....y..2.8.xU.......K..4j+.m...-..#.....G.t..>).#srgr..+{....,.ya..J.U^.3.....z.~'"..5.J3_K`<_.6..'-j.y.....\|..1...+7m..O.5.#-...Yu..Yu4.Sb.....].M..E..&.. Z.xO....kd.Q.].m....W.!Y..%...g..............W..:..........b....Q.!.r(Z..PG{....y9<..d.<..?%...:4.....=....=U.z.h..!J..G!...H.\..F.~..:?v`.J:....P..Dt..#........h......&...}.?.q..........mls;.k...8r.qo......F/...)S..Y.<Q.`...q.-...:S...y+_.$?.--..\....1...p1&@....>......l..i....

Chrome Cache Entry: 1105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	7.826790565464395
Encrypted:	false
SSDEEP:	24:hyQaNDBafY4nCxECYly1wX2At7kzlLb8tvtkFFHXClimowaktSm:hOQAlxErly1wXNkzlLbCvtCI+wzIm
MD5:	406CD9D50893EC628888016C92551DB1
SHA1:	1B051B021DA70F861AA1167B4C1004AC7B84B44B
SHA-256:	E5BFF7004E2A93987D5F37F745C17040AECC108B391EA2B47DBDE7071DA7FDAC
SHA-512:	C29D4453BFA6E57522F62B125A3F497348338C7F15428E22472A32931BBBF6A82DC0E6692FF6E2C567215ED3B1015641C1288EDEE87D99087C9FBB24BFACF4CA
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.iol-smb-a7782bdb.js
Preview:	.....o...7?_.y....S.k)j..g.T...,...i..-......4...Y....."..4...u.2..Vb.xLt ].\|...8...q.....W._L...^.........p.7.Q0....B\.f...A(b4..]<">..l........O..3.h...:..Z...L...{....mR..\|..y......L.p.J...pK.....:M.\..r..8..............O.....C.......13.eE...e....,.l..v....%.[.X.n..X..P..e....5ZY...f.../......X..\.o...3WH.y.R...\.W....R.........O.nK.R`5:x...{})M.\@.]_ST........Zw.E.A^0Vu.IT9...M...(.sq.Y..){T?....j..g..Z.y..s.U..+M.QX.....}.y..<2%.~..K.\|...f.R.i.R...P...V......(...[^..j.,c..'/...%..=.N.()2...wh..-. .......S...-.Y..&62...S.g.B...(....LV1......D...04.+1..F...a...q.<'/."..8..&.........6/(.7.scZ..lf.I}B..fKQ).3..S.b#..j'.r.E...s.....;O.a..Hx.RI.#&B.%.q'...'..[b3...r......{...,.h..$,9......e...=Q..Z..V.Any.(.8`....\|l-G.-..>.&..R...u".......u.r.......+..9.N......2...\J....(....x.S..u..-...^h...}.,.I..$.\...Z..b..z....1....ec.B._....sjZ....o..ey.Lm.B..X.Xs}m....9....]\|..k.X.N.).Yt#.%Li........z.[...:...@....?.....2.V..NA>.....6I

Chrome Cache Entry: 1106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1052
Entropy (8bit):	7.823735185686902
Encrypted:	false
SSDEEP:	24:5i46IcgA/HdpWNMIlkLbUk7iDpc2rba8MLQyxSYAwQkrot:E4WHeMIlO4kstrELQ1Jky
MD5:	55FC472380FCBD868CC1B96546272B3F
SHA1:	5CE0AA1C32E2C06CE0EAF97970A1EF9794DFE770
SHA-256:	3F43FC40EB73317B44AB89900F0560B88E2F925EBD4612DD2C8DF1F396D5C94B
SHA-512:	A55948841EEA5D62B5C146B40E9219AD27B39077D903784FFB09E865033FC98355F5A1CA5A74AFA29883893E8E7DD17EA27D73CD97A3951C6FAE0A71B85ED48D
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/announcements.js
Preview:	.1.........Y...{jE.XKQ1......<U~.wi..o[.....6.}lQ...........tT....Cf+....Bo}..B4C..Z6.....7..L[...Uv`..(...v...v.u`..r...W.l.&....M...L.pz{....(.......y..r....9..99....&..p...]......b...!.Y.`..h..J.6.C.e.....F.!._...\|....O....9...A....Kl.D]".....A].M.I.#.~.)..{..y.D........&"#;..8..l...~...m.l.;.U.E...[.iC.f........uA..ll.&..%)'.......$.. !.[.jVSX........RoQ.<.@a.W..$...q+..2.l.d.@.]......^.B_....q.P.5V...9=.......g.Q.'d..vH....X.?0..N...Z.^3>'...a?..9nD.6G....N.^.qc......l..@L...lt1T{.........D....L.L0^v......6...*:.#5........+y...\.N..)....Q..K'c.g..a;]..ZJ"$x}.Y3E.-..`.....w.Jk..=.j.\|..DQt.....0B....R...\FJ...R..r..#!q........A.E..r...pc.J;.....E@...1;.".ykR..p{.{+EW'n&..C.rf./J......x...ckd.g..a.?.......c..^..S.D.x%.!..-..=....#.v..H...F.@....F..R.s..2.3.Y.}C..@.K2..$.{yC.. ....1....2...6.......eK);kka....}z,C.g.Fm.'...?...1vu...!.8Yw..e..O..R.....\|I..6+...n.-{(@+.Ih._#8...")t}u.P.d.b.w.9.i[.H...v."f..~.\|7@FJp.-.(.aGr...

Chrome Cache Entry: 1107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3600), with no line terminators
Category:	downloaded
Size (bytes):	3600
Entropy (8bit):	5.0991703557984245
Encrypted:	false
SSDEEP:	48:kAvNhI9OKn/hQVBVan40yt00nzt/VRgj9o91PYczAz9AfK9TPBlVnIkKYeE5W:kAvOpZ+B8R0FVRjrTEzmfgmzPr
MD5:	40B81B2D52BA9D2E2C64C31FF6A24CD7
SHA1:	6B5689250661646ECBB841F2475F1556A113373C
SHA-256:	E06BACA13F25DF9C7D684FC1B1FDFBBBB95070A1D5A9CD648632DA7BCCC90B96
SHA-512:	5657EE166A1EFF5DEEA7A0125EDD6178541396DCCB035785F5790BC1C57DEE6B0E1C9D063D00333E95667F699D99172796CE301EDD1DF2C4BFF02D25536F0D0C
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1736455907
Preview:	(function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={exports:{},id:n,loaded:false};t[n].call(i.exports,i,i.exports,r);i.loaded=true;return i.exports}r.m=t;r.c=e;r.p="https://cdn2.editmysite.com/js/";r.p="https://"+window.ASSETS_BASE+"/js/"\|\|r.p;return r(0)})({0:function(t,e,r){t.exports=r(610)},610:function(t,e){(function(t,e){var r={height:62,mobileHeight:124,getHeight:function(){if(u()){return r.mobileHeight}return r.height}};function n(e,n){var u=t("#weebly-footer-signup-container-v3");if(!u.length){return}i(e,n);r.element=u;r.iframe=t("#weebly-footer-signup-iframe");if(!o()){r.element.remove();return}a();s();l();t(window).on({resize:p(l,500),scroll:p(l,500)})}function i(e,r){var n='<link href="//'+e+"/css/free-footer-v3.css?buildtime="+r+'" rel="stylesheet">';t(n).appendTo("head")}function o(){var e=t("body");var r=!!document.getElementById("kb-container");var n=e.hasClass("splash-page");return!(r\|\|n)}function a(){var e=t("body");e.css({minHeight:"100%",posit

Chrome Cache Entry: 1108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (540)
Category:	downloaded
Size (bytes):	587
Entropy (8bit):	5.2288046770396965
Encrypted:	false
SSDEEP:	12:jpdM4SzxIuI+YWK3/ebzA45AA4Tg5hFqwgEIVgAWr+OEIVgAW3LRg:jpIm+b2GbV5mTKLqxVXWqcVXW3Ng
MD5:	4D1F7528DEF2D0E1C49CFB690AF561C8
SHA1:	394A916B8B2AF4229B2E4B1A43EF0CE81E66C922
SHA-256:	CC90122BFC32713E120F09289185724CB97F632A1691E1A9A83A08ED9B98512E
SHA-512:	075FA0F8019312C9EC60E09778F703ECAA48866D51B5EE7E3569EBDC0EE2EF001282B4F819F045A848A6FD36BECAFFC361FB0A29FC391AEBD9C65C56C3CA5004
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.alt-login/register.0cd180a7.js
Preview:	import e from"../ox.js";import a from"../underscore.js";import i from"../jquery.js";const r=e.serverConfig&&e.serverConfig.loginPage,o=a.extend({de_DE:"E-Mail",en_US:"Email",en_GB:"Email",es_ES:"Correo electr\xF3nico",es_MX:"Correo electr\xF3nico",fr_CA:"Courrier \xE9lectronique",fr_FR:"Courriel",it_IT:"Indirizzo di posta"},r&&r.emailLabel\|\|{});i('label[for="io-ox-login-username"]').attr("data-i18n","Email").data("translations",o).text(o[e.language]\|\|o.en_US);i("#io-ox-login-username").attr("data-i18n","Email").data("translations",o);.//# sourceMappingURL=register.0cd180a7.js.map.

Chrome Cache Entry: 1109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	5.144914654764811
Encrypted:	false
SSDEEP:	6:72Lu+bQwKQd77GQC+5QnLYiuabMIgBRRURoOk7eIAEbe7RRt/KMHv:KSGNdU2QRuwgB3URFSAe63tjv
MD5:	2701FDC16661EC832EA8588D3D36523A
SHA1:	87FAD96816E02452AF4AE6B112625491F281E24C
SHA-256:	2E9C05B23E66E45B3453C912B5D97543613423492C7AD0EC6FFDC3443F756416
SHA-512:	4AB1382193A784C94B0AD7C4D6D6C198063CEEC9D02EB5FD9815BAC2A3BBD74E5A6CC0589E3E1277B182DEC5A38C251F45FCF6470C45D0C8196984C3D90C1A24
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/tradehouse.js
Preview:	import{_ as t}from"./preload-helper.js";import o from"../ox.js";const i=async function(){o.serverConfig.talktalk&&(t(()=>import("./cmp.js"),[],import.meta.url).then(({default:r})=>r.loadCmpScript()),await t(()=>Promise.resolve({}),["../styles-646813f1.css"],import.meta.url))};i();.//# sourceMappingURL=tradehouse.js.map.

Chrome Cache Entry: 1110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3697
Entropy (8bit):	4.707743528907903
Encrypted:	false
SSDEEP:	96:r4QJODZATiN1C81vwuMymZgpqVf9oF2VdP5k6ya/e3Hgqj9DdZda1SO:XJ6ZATiq81vDtNh8dP5k6yAeXgqj9B7Y
MD5:	AC373D716AFE4270DF40F60417B0F418
SHA1:	ABA148148C771BB66B0B4AEAB6EAC8EB40352745
SHA-256:	F75570C56743E8C705CB06F5F1F9B1F8F2CC13119F5E2ACDA2F3BB8D987DE94A
SHA-512:	3FAF2FE9C98144F41A3AB614E23E1D488AAEB2C944A3C736C196C69175C96E4D78D2FD69C0B05A5DDCAAB819C0FCA2BE40DC2C178257E2D0AFA2523072CDA985
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/files/theme/jquery.pxuMenu.js?1736412329
Preview:	/===================================================.= Weebly Horizontal Site Menu =.===================================================/..(function($) {.. /*. . * Generate a flexible responsive menu from the default navigation templates. . Groups overflowing nav items into a "more" menu item. . /.. var Menu = function(menu, settings) {. this.$menu = $(menu);. this.settings = settings;. this.$more = $('\. <li class="menu-more has-submenu ' + settings.parentClass + '"> \. <a href="#" class="more-link ' + settings.parentLinkClass + '">' + settings.moreLinkHtml + '</a> \. <div class="' + settings.containerClass + '" style="display:none"> \. <ul class="' + settings.listClass + '" data-menu-more /> \. </div> \. </li>');.. this.init();. };.. /*. . * Initialize the menu on load and on resize. . /.. Menu.prototype.init = function() {. var self = this;.. $('body').addClass("mor

Chrome Cache Entry: 1111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2979)
Category:	downloaded
Size (bytes):	119478
Entropy (8bit):	5.545955144754686
Encrypted:	false
SSDEEP:	3072:hAbDIAwieSmNHEK5G6P+X/SjyqprlvgUyl:hvt5G6P+X/yriUe
MD5:	6ED4DD0A3A461810DFACCA999142E255
SHA1:	5157C998BDDD79543F23BF0A726E69F502FEDD4E
SHA-256:	D0D116B21C9AC496C162F9074C75CE227719D025422A1794A57F497718F87CEE
SHA-512:	BC2B45509D6EA8606F7EFB364529AD92FC7EA7CDDF81B73CE3912C0E2BC9BCBBC0ADA00E65D494C9F7F7953450E43972289C31FD65D163F88DDA8BB3E2BA5149
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_281.js
Preview:	(function(){var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},fa=da(this),n=function(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.n("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ca(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f

Chrome Cache Entry: 1112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	602
Entropy (8bit):	7.683664254516192
Encrypted:	false
SSDEEP:	12:8+2FFPvM6wud1JlCcsNWlYZUmUDx5XGgunjg/Z7LPU9bOv07zlDGR8jcC:/EFMN+1XCFQlXF/XGgf69b97BiRQF
MD5:	193952BDB795BBAA624F889C042B20B7
SHA1:	92F6199ECEDCF2F8E8396C8733A96F156A5E47F8
SHA-256:	252AAC1A1D459A0C19C1382D9DF48BBD98E4B5C828BAA2F1BC9A30D044FCA8C4
SHA-512:	E6B1BA1BFDC63198C3AFE16A8BAC301BC80B563A8E4CBA60F7942BD94BE38590690309D13F87CEBB69DB19FD34C7ABA50949769DA45DF26CD1705E778F97C4C0
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/underscore.js
Preview:	......f.=..b.Ce.#"2.._J....u..O......7.sbNiP...^.V..Vm.}(w._....V.F.....q.\|/..rl..wU:~_.:..l_.qSk8..Vt^.W...{.._`...7....p.S.p2.O(;2.+...erwl].v..;.....9o.....p..h+0....CC.\|e.z4.Q...P.T.~..:...~..}....A4G..kv.CWL.d.......a..k[.................+=8...._Ds0.HS..>.@..N...&. ...1.Q.+....!...uw...A[ .Q.'a.H7a9...v.(r8f.(.>#..&x?Y..=.s8<........Q.l.Z...b..RL&b0[..=...KpX.I.....N.7..I.%.3Qi...;.....)....Fb2kW.=1.h>...u.%..9..Mi.[.s.&..u...._.!K1..J.B..a..Y.h..c..0..Lzbh.P......{....,RB............q.......!..1..#.Z...9....7..K.v.'X.\|.........N........E8....1Rm..C<.`[.....

Chrome Cache Entry: 1113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1139
Entropy (8bit):	7.820423735122374
Encrypted:	false
SSDEEP:	24:b1Ovxv+EhlG1q5lN4qCnoGk1YQUvMEY8HpzMFeZ3nR:QZvG1q5zCpHQUDZpR
MD5:	74E34F521739588ED74D16B4BA912EF3
SHA1:	4D60AC007CA848E42386CDE4A3D1DB6ABD9CDCB6
SHA-256:	2B72E9FA4E0903C113447232886EE814F536AB14EE3006387193D3767C3C4725
SHA-512:	9D1498019ADBCE37067FD8CF2BAF49BC355E1B7D92F1916CECDC752651FBE5E33F1A7D886ABA4C8696A03F01AD51CE04F09D6E261593AF706AC2154D87A0AB96
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/uk.co.talktalk-e4375173.js
Preview:	.....ZjN....u....I....d.L..h.]...~....Dj.I..V..CD..<...-o...RC..yr.J..N..d..3Af.N6N..%........6@YK.^.`.v.f%J...\|......=.P.....5+.o........w......Z...;p......!.;.."......Q...[.............h.q...:.q{.f?j...x-F.....S..k.........r.[.0..V.\.x...(...AI...,( .y.\|@^....<....F/^..9@$.p......^.9G.(.v0_P7K...Zr......./j.L....V%.y.vzo...9.r....S.{.P....4.../.7..;..E..u......"......x..2......G6x5...W.<R.....x./...shdWW4...2.&.F...w.9c..#A..5.../d.J.\<.gl1f..'...u....Q.5.[.tJQ.1guT`T.p6...s.o...G.....R,.d-...Tzt.T.:.:H......m. #.....e,....x[.S.~.{......Zj...<.\..L.......>,..U.@ .).....0....Q...'T.XQ..-`R-.S.2dm.J.zA....K...n..L....f8...Nm^...k..-.p.p.......Q).3...f.8eS......F...3.....;O..^b]$..TA.CL..K..^F.\|...Kli.Qe.........r..I.b.r..<fW......}.O .p@.....H.E.q`.......r.....g.D.....-@,E....r.^........)..S..SEfE..=..Hh.RJ.+lG...#..sJaBj"GpS..h...%...h^'.$...B@`.5?x)..F19...E>.0]..6-k?...9J.\|:..S.G.),.*.2.+..Gj..+.....a:.4x..6

Chrome Cache Entry: 1114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1640
Entropy (8bit):	7.865694686452205
Encrypted:	false
SSDEEP:	24:vQb9RrrtryczIdh/FUwAyM+Nfx3J+3wT0FIwyzd/5scmfKJxt135JoxxUoQGBn:voHndvz2/F1Z5+U1lh/5scHJxpJoxx9
MD5:	BAFB0EE781322FE9C89EACEDBF843183
SHA1:	22CA7B9BF574579ECB02F135175F15513F263FB4
SHA-256:	EA0D2104C35A5606CE75277C93F8BA86A4EECA9D52D13D22AB2D19EE503848ED
SHA-512:	4CA5244CA3CA92F084901091B0AEFB7E061C7DC28E3093D2D4ADA92325F3738D8AA3336FA641C2FABB176AEEB9B66A9DA64BA7C182B2A391A0C3E32E691E79C5
Malicious:	false
Reputation:	low
Preview:	.......VN....DKj..[..E.I..c...K-..v.Y.......}..g.X..%.o....Tm....B.HW..D6...M ..Ml...\|+.?...../..z....7.M.M{..?.........v@ ..K.r...o...k...?.y.V..._...v\...........?...-.~..+4....W.....Y....~z....C.k.)F~.M}.w....-....(.\...W..s:.=sN....m....;.N....m_..!8M.m.r.Y..........%...yD.A#w...EO...,.q-.i.F%E.?P.y.i..(L.....3...v>.vAx.G.SJ.`O.....\$......G....]jV9..P......]..q...-w...U..^...%.E8Oj...W...\w<...v..k0..'.T:S.U..^................!W.S1..UR.8A.l....H..O...?.A.."Sw.X..Q...."X..@.........s.5.E...[i..4.Y..c..p....(c=f...4..?..2.\|.W........jr...P..Z.....-.Tq5.fov^.Jy.X.(/.9.I.}........d..7.Q{...s.........B.9*E...?...l......o......y;..M'W.b.4A%jt<.r.n.bD.ta.M.V....n.SI...GGh.Z..d..B..+........D..4..,......H..+....-).NWb....(:..5.D.....1Z......p..D...-I.v...M...4......8U.-.Vot.W3.\!...V .C...;2.I>...r+...J.3.Ja.6.m....M3....Y.tJ 3....A..m.6.m..E....ef........u...7.F....._..3/{lM.....<X.......F.J..F.(...^=}.....r.....I.26...@.y.a.4NP.-m

Chrome Cache Entry: 1115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9880), with no line terminators
Category:	downloaded
Size (bytes):	9880
Entropy (8bit):	5.203049711898341
Encrypted:	false
SSDEEP:	192:L6MBUUk1PvFCO0CO0COOz2iJsHqlUnv8hY866Bv8J8w8k:uMBUUk1P9CO0CO0COOCiJsHql48hY8py
MD5:	D3DF0DA0411D0F9D973FEB484D9257A9
SHA1:	6C1C65F5BF3BDE8811D52727F7BF2A9D37CF0BD8
SHA-256:	7DDEE48D852E33E99616C2897CCB875E27014CC49286376A441685FF16D219B9
SHA-512:	540E0754EEF760360EE32AD85D59551C297223EA339692BCF5B064C98964A50A3E42E1DBE0B128899B9C8FC8056C7D535998C4A7A2751397FBF92FCACEFBDF53
Malicious:	false
Reputation:	low
URL:	https://tradecore.tradehouse.media/js/viewability2.js
Preview:	window.mraidDetected=false;try{if(parent&&parent.mraid){window.mraidDetected=true}}catch(err){}if(typeof(AdvertViewability)==="undefined"){window.AdvertViewability=function(){this.initialize.apply(this,arguments);if(!this.parentTagId\|\|this.parentTagId.length<=0){window.AdvertViewabilityRegistry.push(this)}else{if(parent.AVP&&parent.AVP.viewabilitySupport){parent.AVP.viewabilityRegistry.push(this)}else{if(AVP&&AVP.viewabilitySupport){AVP.viewabilityRegistry.push(this)}}}};window.AdvertViewabilityRegistry=[];window.AdvertViewability.prototype={initialize:function(d,c,e,h,f,g){this.tagId=d;this.parentTagId=c;this.baseUrl=e;this.beaconUrl=h;this.beaconData=f;if("context" in window&&"initialIntersection" in window.context){var b=function(){return((window.innerWidthwindow.innerHeight)>=242500)?0.3:0.5};var a=((window.context.initialIntersection.intersectionRect.widthwindow.context.initialIntersection.intersectionRect.height)/(window.innerWidth*window.innerHeight));this.viewableState=(this.

Chrome Cache Entry: 1116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	downloaded
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2.js
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 1117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (1734), with CRLF line terminators
Category:	downloaded
Size (bytes):	63931
Entropy (8bit):	4.950105392687923
Encrypted:	false
SSDEEP:	768:ARqHKkiA6AOaLnOtmEs+qp6yhCQ1CAHHPxEXTBo8D/yFc7oTkIg:A0HiA6BaitmExq0yoXTBoVc2g
MD5:	8C5A53DBD4CA76B420A8BD50A17E6EE7
SHA1:	3209E70583A1E1141EFB36B3E35B5C423951FCD7
SHA-256:	B61EA665D519A5DE06F42C078924CC07FCBC59A548ED7083A8858CB42A31A6C2
SHA-512:	4A53865A74B2FF6965BEF36FCA561B000519DA32F8B3EA22BCDFE47175B979AC36AED898FBDFC5B58CB34BF429441202DD398EAD80ABC46ECF493ACCFCE45449
Malicious:	false
Reputation:	low
URL:	https://tradecore.tradehouse.media/js/talktalk.js
Preview:	var AVP_CMPVENDOR = (document.location.toString().indexOf("appsstaging.talktalk.co.uk") !== -1) ? 'inmobi' : 'sourcepoint';....if (AVP_CMPVENDOR === 'inmobi') {.. try {.. if (localStorage.getItem('_cmpShown') === null && sessionStorage.getItem('_cmpShown') !== null) {.. localStorage.setItem('_cmpShown', sessionStorage.getItem('_cmpShown'));.. }.. if (localStorage.getItem('_acceptanceState') === null && sessionStorage.getItem('_acceptanceState') !== null) {.. localStorage.setItem('_acceptanceState', sessionStorage.getItem('_acceptanceState'));.. }.. if (localStorage.getItem('_gppHash') === null && sessionStorage.getItem('_gppHash') !== null) {.. localStorage.setItem('_gppHash', sessionStorage.getItem('_gppHash'));.. }.. } catch (err) { console.log(err); }.. !function(){var e="appsstaging.talktalk.co.uk",t=document.createElement("script"),a=document.getElementsByTagName("script")[0],i="https://cmp.inmobi.com".concat("/choice/","3u-Xr_66xMjXM","/",e,"/c

Chrome Cache Entry: 1118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1159
Entropy (8bit):	7.829160265305652
Encrypted:	false
SSDEEP:	24:DYFgZglz2Uw0vVGBSYOpkSUCnHpMRbcLlsIrpuLpQpBEE:DYrA0NdjpkSUCHOwsIrpcu3EE
MD5:	F9C9C00750D20F6E09C32C36A12363ED
SHA1:	6A17078E43682B8D147CFC50D3CE4317FE242550
SHA-256:	B20946A3A823FA30778446B6A8DD8E14620826B6DC345AB7A51B7DB658881C3D
SHA-512:	4ED9E54DF1AF17C9CC84D6F99B15875F2F519309DBD799E4E415ED97B4A535CE3503E1997C14A09A46768EA5508201A4AF1A2FFE91B3BF0D1D3D233640568A0D
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/core/boot/login/redeem-token.js
Preview:	......l..\N/tAD.$...e..D%.......E.DJ}........5.P...&.....SY...o..3!....y.y..!.J].......a.....KDS....r..Y.s..B..,-......d..IV#.aQV....)..."....H0.k........-..d..nX..\.R.....L.~).?...R^..../.G....E<.$...\].."%3..^..oS...-.F......ClX..N..o.3.]'.ci.l\..6K-g(.#.d.......T....l.......e.4....J.s..!..dH.)...3..&....d.....N.`.Jsw)..R6.EC$#..DQg.Jpd....-.D....r.?.pQ..o.NK...!.rm...2}.......P.=..I.C.<.../.@E..j+.R...A...P~.`(.AO.t....X..l.($....s.%....>.,#.a....D...6.cJ1...E..;.<..3...T\|G.@........D.A...B.0p.@.. .V...cx~.....1.s..`.............E.....7I.....a.. .......H5+..:.r.Y.S?L.{I....7{.m.:.7.]..:Hp.tzG..i..e.sy.mr\|R.f..VY.......`.. .....,CC.SJ!P.G.4./...\|?...H...t.q.Ai.`..c....3......U..................3m....`..G.B..%..1WZT.u.I..b.Ro<...(........I.......U......7M..Lc.goW*z..)...U._X..~.....u%..(..s.....k'.....Y.7e..Q..W.Hb.....=.6..f.-.#.....o...&....P6.....Zz..KI.Pp.E.....v..T...).z.....\?`.A.1..?+..!.UU...G}..."n..:`.{W.'....y.

Chrome Cache Entry: 1119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	5.20642151337204
Encrypted:	false
SSDEEP:	3:IDwjiH3WZNdwfOZo1MKBTV0pCuAb96wfLE0Kth5TqY:Isjo4wmZoDqpCV96eQzP
MD5:	DE0FD8E79B6F8ECAD6B6BDDBB0E7B1A3
SHA1:	3679C897F1DE828C48D885B97F5A1CEB23C504C8
SHA-256:	0827FED7CA6E71FF06F011D82600A7D18E97464615023D5F8DC73103BE2A5F77
SHA-512:	EFBDFA5D3F0E00983373CFD38BEA39BF818AC4544D15D6B02B9B2180F5AC3BE1651D918B95220E11A60DD13C29286E197643C5398540A4ED3C52257AA420EFEB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgme_wmwjYcv1RIFDeeNQA4SBQ3OQUx6EgUNMELrIhIQCU9o5bWV0hv-EgUNpQPhzg==?alt=proto
Preview:	CkgKEQ3njUAOGgQICRgBGgQIVhgCCioNzkFMehoECEsYAiodCApSGQoPIUAjPyouJSYkLSs9XygsEAEY/////w8KBw0wQusiGgAKCQoHDaUD4c4aAA==

Chrome Cache Entry: 1120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63062)
Category:	downloaded
Size (bytes):	63245
Entropy (8bit):	5.3256728084015945
Encrypted:	false
SSDEEP:	1536:zh3T2Yu/slA/TW83Kg4oOWn2LW1qLGm7cspu:z2shvg4vW1qCm7cspu
MD5:	15BD4869216609F1EF060F2F770AEF45
SHA1:	5DFF01FE9C0C04A51FEB998F791B427F937859B9
SHA-256:	07B3FEA34AAAE441D8C91E458251C60099D6A3BB37441B4EA7B98D5EC07EFD88
SHA-512:	BFA2BF27221DFB2D46154B8093C1F5F29A6B61EEBF1F17F61214B47CAA02A2B83B823B65595E9AD1EAB9E0A517595749E7CEAC4B834FCC984F0F1DFCA3A410FF
Malicious:	false
Reputation:	low
URL:	https://script.4dex.io/a/latest/adagio.js
Preview:	// hash: Wbc0ibJ0IpHFwnUFi7h/y0GEkyLH0KuUbT8wBPbRt26SY8hq9U2vSQuqXdJz5aRKDywBp/ts8SmKkXZKQaCPps6XOPXgBiBvYDPQOea+jSknq5mhNe9Q26U/OJjpVH/R39JH0tya99scDF4PwZTVdi1nLlf/0bGBLs26/HbhP24=.var _ADAGIO=function(e){"use strict";function t(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}function n(e){for(var n=1;n<arguments.length;n++){var i=null!=arguments[n]?arguments[n]:{};n%2?t(Object(i),!0).forEach((function(t){d(e,t,i[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(i)):t(Object(i)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(i,t))}))}return e}function i(e){var t=function(e,t){if("object"!=typeof e\|\|!e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var i=n.call(e,t\|\|"default");if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive

Chrome Cache Entry: 1121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=OTcwODhjYjQtODM0OS0yM2JkLWYzMWYtNzg5MmE0MzZlZTE4
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072399&val=6844335515357940101
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	403
Entropy (8bit):	7.409151857766273
Encrypted:	false
SSDEEP:	6:6CNVxuDrzJtqelxiS53oqnOCYp7WRk5g19/lFDL66/IY3Q7ENU5A:9NqDf3qeqZqnOCYp1gR7fv/Iu0x5A
MD5:	AA9546AC5226CB48F428C644FEBD44F9
SHA1:	8DAB687D37EDFAE2E8E828FAC8C1DCB9EB5646B9
SHA-256:	F904FBEF3777CAD32D9378C12F4C9A7B694FB65871AF2C3C0043917B6517F424
SHA-512:	06D77C7EDEA5502BFB99DA17FC499E1D1168C58BD787708F8240B220BEAE82BCEA337FABD028C23F51B1A01D2E8C03BC42EC7163393F68AF248EA4BEDE5A6F75
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/externalcontentpopup.en_GB.js
Preview:	.........eR..t.....U.............F...R.N]b.\|..@.xm.@.1.....<...(.K...$.e.fh.#.....,H...]....:..=9(@.......sCG......rK.I...6).D...p%....W.....&...k.."..{=...FI.dek.e8;.}.+..==...n...:..\|..WS.r.e)u.^5.%&..$` .U..!..>..X\|.(...p ..7..&..C(l....j....aG-(..V.t...{.h...R.....cX.2..otn.._.......1...!.V.....X.+846....'....`.C.h.}.i.}h......2..$.>.S#+LK0K.l..{..\|.F.\.....->?\i>....a..UZ^.d9

Chrome Cache Entry: 1124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157660&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 1125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	dropped
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 1126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/a566db6afba33978322ef47fa16ca6fe/?gdpr=0&euconsent=&uid=J_IQABZH33sJYiZARWaomX1u
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 1127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	521
Entropy (8bit):	4.56417636149967
Encrypted:	false
SSDEEP:	12:8inWhPzLr5cMw47hprdMwqbz7hxLVoovtjb:8inQPzLr5cMB7hprdM/bz7hhv9b
MD5:	D9188D5B50AA6EB7F1F3791D689FE33F
SHA1:	FFAD7A615B5B2FFCE97F22C8E120F6CD395913BD
SHA-256:	2CAAA31EA75930710FDD8979F2F670D8D89E8DDD3835B5C9246E185401486F46
SHA-512:	0E2169E7D90604366552E580C57CA5423403767E9F41F5C9587C225DE636E6E577B9E7243C602301824DDB949C0203FD0049E5C889476F2978847AD80D51DCF9
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/pwa.json
Preview:	{. "name": "TalkTalk Mail",. "short_name": "TalkTalk Mail",. "icons": [. {. "src": "/appsuite/themes/default/logo_512.png",. "type": "image/png",. "sizes": "512x512",. "purpose": "any". }. ],. "theme_color": "white",. "start_url": "/appsuite/#pwa=true",. "display": "standalone",. "background_color": "white",. "scope": "/appsuite/",. "id": "/appsuite/#pwa=true",. "protocol_handlers": [. {. "protocol": "mailto",. "url": "/appsuite/#app=io.ox/mail&mailto=%s". }. ].}

Chrome Cache Entry: 1130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	656
Entropy (8bit):	7.691202107245766
Encrypted:	false
SSDEEP:	12:LBRsAgv2yGkXkbY43ZbkHQlPZCU5hFVAANYWIxQD3ho1NXUqaNAQ:1Vg7Gq0l1DPf5hFuA6Wd3y1NXzaNAQ
MD5:	79B6C55B38D5D15CB67A8C3666BDB5B3
SHA1:	E7B211AFC05E5C76A08F89D6029FB1CC6040EB88
SHA-256:	3123718C12AC08DFEE2BE6EC4C7D9CA7DEDE647366F8EDC3C6624D92C275EC8E
SHA-512:	89B5DB7DED458BAE61D3848FBF7F9863147DE9AAD7C8E8EFAE0AE4ED4ACE2D69ACD1E9129A3340829FA2E0632667CEDA6C1C3AE5827A5BAB0AB3A1246EE1C918
Malicious:	false
Reputation:	low
Preview:	....dU..,......V..-..'.)6.4.(....c......rQe.....M.oR.x....P.[.$.\.qhT.w?...-Q........Z.../.,..`..TDKu\|A....%.1.v..H..T2..0u......z...i..bp.Y.....qna.h.ir+,u..".....L.)3.o5.....g.\|....(".sB8!.....v#..==..w.tf..J.y...,..P...c...c...G...a.)......W.\|..R.8...#.....<e7.aJ.H)@.l.....U=..T..A..\.j..j..;..-/.XO.`.l...B..=..0Y.........0h...W......=....I?.%....K.p.e%.`.,.....#.......6.1I.W.g.......`...x.......A]......%.b..;.SD;J...%.<.{G..e.e<..2..Z./{..l.e8....+.M'...SND..)).."sL.!..$u...<3...,.l....>.`DI(JE..e.e..ON........a....BYy.T+O^..f.&.pq.I...U...w/Tb.....f.@a.t...,..G..@-Rh..P..o.~gmss..K..a..,G.^.._..]6pu..&...5

Chrome Cache Entry: 1131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2471
Entropy (8bit):	7.892894695490014
Encrypted:	false
SSDEEP:	48:kSgMkt9ruIvIdoheZR/Xa2D01jQJRl1HzxldIWg821lPmTWjc61ly:kSjkt9ruIvPho/T+jQJRzz2WI+nP
MD5:	A2ECFE2F1EE4B65EDFF71FD02EEF82F2
SHA1:	F062D54119184483F6608C869E7D06A0FBBCE5BB
SHA-256:	E1A3C83144FA5752C8668CA056742EC9E6D6DFE5CFB75A97A9E53D1150068F91
SHA-512:	9F3386052A138F62A7CCBC50926F6B53EFB939FECCA7BFB78C398CC67FCC73E5B3D618B62F3A442D8009A354A0AE62B0973A26963AD4E660BB925B5CC3614571
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/en_bl.png
Preview:	.PNG........IHDR................W...nIDATh..Zgo.I.5&..\|&..B.%..q.#.....I...D.p.`@d.$s....d..l.q..o...O...........=^.C..%{jzzz._W.z.!_.~%.,3a.hf..f1D."[.5A...5....ema.k.e.....M....&.236B....PCs....F.v.Z.".5Y.5....:\.dP..h...6..L...........f.....c...8p.....T........i.h....G..9r$.X..222..Z......K.\|..[....7o....S.+...`.......J..1....".......:.%....3g..'66..x...=.....}Odd$..<.....:44..m...\TT....i.o?r.........X.*....X...>j...y.a.v.^.:W..p...W/.7n./pAAAP..(.}{...TXX..t:..s^.....X..-[(--.L......{Z._.<.{g..\|..\.......pK.,..O..[.n..........G.......Mxx8UUU}7`...b`.@.A.=.....T.p.........TQQ...g.d....{..!.p.M.S.^.,D#......6N.c..A...{.......'O...._\....r..Y.q#...W]]...........w..p..m........'...III..7o.L./_...Je[..E...s.N....c........Ox..M.kD.k..`s.......I..+.!.......]S......J....'N..'..k.I..wo..q8..9.....RX.N.\|@(...[.n>ma.x...o..q.....l:Dy}......P...#F........n..T..G..;....gB.g@.A.kZ...S.A...........T..>..v9.v....b...$.>,..1..........W{S

Chrome Cache Entry: 1132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58899)
Category:	dropped
Size (bytes):	440582
Entropy (8bit):	5.406271024302282
Encrypted:	false
SSDEEP:	6144:6p75faegS1Fw9PxW69T2a45UK0ZTBJS5B3DoCLwL:475fRgSFw95z2a45Nu+5ZvLwL
MD5:	7CF5449B4200E977582A99D1325B7A37
SHA1:	C0CE8ED24478C16ED53C375484731BA8B8221904
SHA-256:	39CC9E68DD5C7C86A41144AC90ED1C9E2048D234809EAB297085E9B6A870810A
SHA-512:	0DC67371561BE31249EAE7620B50C51A6ADECF297825BBF8CFF4B078625BAC6677F6DB4BAC34C5B11E2AD1536A89DF364B5E5B841F12880A622628D552D8349E
Malicious:	false
Reputation:	low
Preview:	/* prebid.js v9.11.0.Updated: 2024-09-09.Modules: adagioBidAdapter, appnexusBidAdapter, criteoBidAdapter, ixBidAdapter, gridBidAdapter, gumgumBidAdapter, openxBidAdapter, outbrainBidAdapter, prebidServerBidAdapter, pubmaticBidAdapter, richaudienceBidAdapter, rubiconBidAdapter, sharethroughBidAdapter, smartadserverBidAdapter, sovrnBidAdapter, tripleliftBidAdapter, triplelift_nativeBidAdapter, userId, sharedIdSystem, 33acrossIdSystem, connectIdSystem, criteoIdSystem, euidIdSystem, id5IdSystem, identityLinkIdSystem, lotamePanoramaIdSystem, pairIdSystem, quantcastIdSystem, unifiedIdSystem, uid2IdSystem, consentManagementTcf, schain, rtdModule, adagioRtdProvider, raynRtdProvider */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.(()=>{var r,t={433:(r,t,n)=>{function e(r,t,n,e,o){for(t=t.split?t.split("."):t,e=0;e<t.length;e

Chrome Cache Entry: 1133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	543
Entropy (8bit):	7.564156083953136
Encrypted:	false
SSDEEP:	12:wNz5Z3Qaj4Oq/nfQ0ydzAEEygypp4h8zksZWwo203zhrUfcakjMxLy:wNz5ZgaU/nfRymElH4h8YOcDhA8jMQ
MD5:	5BE1A97C7F9B3CB6F787EEDE27B463D7
SHA1:	972A70D8A3335F120FD28EBD0B7DC3A0A8E63485
SHA-256:	ED0C6D68EEB27F1C05B40833609B206449E8AD66A416B979F672CF22A97D863B
SHA-512:	6DB32F3C3B6982DDEA710F6C26A632F462356823FEB92493AC8218AD616B3FD5B3F9DD58F1C2974D77DEFD11522E7AEA94A04D58DBCCA411CDDB752924836D2A
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.login.links/register.363e034b.js
Preview:	....dU.?.e0.@.23f.*....V..U...n..1uk@...E7%EQ..l..,M...?""....3}.}.nG@.D.....zH..U.\|.."..y...U..X #.J..U\.XB.s..A..4u....}.A.H.[......w.-.#S..........c.....@..tf.p...NM.s.DUi...zR?....J...Y.:...5..)......9.HpHz......J)).Z.'W@s.%nS;x.d..q.a.m.....\.J.d.fYz..]......B"...[...Dzm...!$..2..............Z.<...].B.. .4..h!..K.'.Q..3J.n.C.k .d.s.K.MS..{..?....h..zH...P...y...}7.I..:...u...E.O.".-.._5n.3.Nm..?..Y...lJ.M..?...rN.8..l.r.J....'..d)R..R.+.N.E...n..\|.7n.P.p'=OPKm.......%.. ....X1..f}.b...F.\|T.;.E.C~.sfj.m.MG.?....-:

Chrome Cache Entry: 1134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	521
Entropy (8bit):	5.299590068932483
Encrypted:	false
SSDEEP:	12:YoyE5DF/DEXGKEt+AaX+JB6BcO57bniqHwjQV/fBJ:YbE5DFbc8aOJwk8TV3BJ
MD5:	50000650D8BC80FD84D300034FDFA744
SHA1:	0A4ED63776E9F3A62E2144739B87FE4A1990EC35
SHA-256:	983D7AE963DB1CE21F5F6720C3A4CB7F6B75BDC175B8DD47FE61A48228907F65
SHA-512:	883BA038A02D65A4B84B7CE642AC080BA9C59F566199B1DF2AC4AA2CEA9ADEF2FB0E3B46829F031EB2EC2C9B7DA48041051FE870DC5022416AB93674DFFB8215
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/wrapper/v2/messages?hasCsp=true&env=prod&body=%7B%22accountId%22%3A1948%2C%22campaignEnv%22%3A%22prod%22%2C%22campaigns%22%3A%7B%22gdpr%22%3A%7B%22consentStatus%22%3A%7B%7D%2C%22targetingParams%22%3A%7B%7D%7D%7D%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22hasCSP%22%3Atrue%2C%22includeData%22%3A%7B%22localState%22%3A%7B%22type%22%3A%22string%22%7D%2C%22actions%22%3A%7B%22type%22%3A%22RecordString%22%7D%2C%22cookies%22%3A%7B%22type%22%3A%22RecordString%22%7D%7D%2C%22propertyHref%22%3A%22https%3A%2F%2Fapps.talktalk.co.uk%22%7D&localState=null&metadata=%7B%22gdpr%22%3A%7B%22applies%22%3Afalse%7D%7D&nonKeyedLocalState=null&ch=440076383440076383c1d9&scriptVersion=4.27.3&scriptType=unified
Preview:	{"propertyId":34301,"propertyPriorityData":{"stage_message_limit":1,"site_id":34301,"public_campaign_type_priority":[1],"multi_campaign_enabled":true,"stage_campaign_type_priority":[],"public_message_limit":1},"campaigns":[{"type":"GDPR"}],"errors":[],"localState":"{\"gdpr\":{\"mmsCookies\":[\"_sp_v1_ss=1:H4sIAAAAAAAAAItWqo5RKimOUbKKhjHySnNydGKUUpHYJWCJ6traWFwSSjrUNwiffmKVxQIAfJPS5uEAAAA%3D\"],\"propertyId\":34301,\"messageId\":0}}","nonKeyedLocalState":"{\"gdpr\":{\"_sp_v1_data\":\"920338\",\"_sp_v1_p\":\"322\"}}"}

Chrome Cache Entry: 1135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.775292972832054
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtz1M+sLqo40Y:VKEctKo7LmvtUjPKtX7F1M/LrwUnG
MD5:	60395C591801D7108CD6127480F5A542
SHA1:	397E30BE079D07A8BB3EAD98FD5B7C5B8E1A8134
SHA-256:	32F3AC435D293515FF99B9B4E3E952E470868F70478E76815FCFE202F606ED3F
SHA-512:	219771A3E0FC39247886EE821AB804E913B02C68FEB79F94EE5EC024C02A1E0AD51394E2D89DDFB2BE8F701D4FD7D6F7B0522ED70916C3793D30AEFC5F30548A
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 1136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	823
Entropy (8bit):	7.763576318431592
Encrypted:	false
SSDEEP:	24:rwsYQYHjigO+R9SDhcNfN73YJjbpZb4WnAIgA0:rwEYxPJfNWjbpZHnWA0
MD5:	06209416C0B7F6B676D1D0C28E073A65
SHA1:	5B1A73B3F67C4982248FCFBBFC54006D1FB78F96
SHA-256:	1C764F89F15D0249A276D1A7F02A78A7604F8BE2A3EC2EC24A9AE474B4876658
SHA-512:	018FA9145A18780007B32B603EE7BEFC535EE2CAC495009C5B1BECA8380FF1AB5FCF2C0506FA3160612D1F0375051C5C597997023B5F8D272A1BB7083A1D1EA6
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/loginproxy/register.js
Preview:	.t..d.i....o.%.d. ...Z.`...fh..\|...y].+U.b=..L.!...od.h.7Z.#DlMq.]..SD.G.,..KO.........S...L;(Zn.a.K.F.y~.5.Ym.....0...Pj{.<.D>...V..E.i...J.<....H.1.........?6....lU]B0X..A=.....n..a.=Z..D.D...v....Px-6p....g...o...'..T..:-....j...6c../.o.`.7....c2.....(..i2.J^........b'.1EA..=..........yW.. ..m.`..F......Pbq9.k.*1.&[...h.!6.uAI.L%ef.4\..M.F.+..v."...x...6.O)=.....0l..="...y/.Kl...F.D-...>t...........B.8.''3QE....u..gdi..].....W.vyV.gw0..k`....L..%F.....<.(.......a......4..S.....sEl.....~8...H.+...rA.N#sx.V:..........i..m...)\|..h. ...`......0...3.-.....N....Z.DR.1.5...~0....x...y.xz.K0n:....%'m~...g...v.HY.#..p..K."LI..../....... Y.6h...m.//..A...yw..7.....c.!."...kbf....c.pi}.J...@.vyI....4....e/"&....\|.@,N$..]_.Q..b..#X/..qp.0.0gg..-c0.R..8..z..V.'N`.;..r;./$.~.i..$.!d.......D..

Chrome Cache Entry: 1137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 522, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	151215
Entropy (8bit):	7.993798897410918
Encrypted:	true
SSDEEP:	3072:17IKjF9rvwzc/uu9g6A4xK718VPZnNISEncJrpCWqssw6i/5I7:17IKjFGzc/upOK718tZC4FCCs/iBI7
MD5:	A42BCD7A764D4C2C6E235C8314B77055
SHA1:	4C1972A53D5869A26ED758C0830BA7FECF837021
SHA-256:	17EF00791D6476B4F333436DEDA7E178DE8DF2035EA6A8B9B3FFA162C197917D
SHA-512:	CE3E7434F66A7DFA8B93474081FC870BBAD53217DA12B080F6C56F84BFB06D82A8C2E7A32F1C5A6DD4194C1FB96E53BDED0EF581544C3EB5D2D0A03080100B9E
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/themes/uk.co.talktalk/images/spam.png
Preview:	.PNG........IHDR.............\|..^....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F3DB228347FBE111BF4AB92557233C86" xmpMM:DocumentID="xmp.did:8A596AFE6B3711E981D2CD86DE1C4097" xmpMM:InstanceID="xmp.iid:8A596AFD6B3711E981D2CD86DE1C4097" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f1dad841-2491-40cc-a17a-f00231096f4e" stRef:documentID="adobe:docid:photoshop:78abe651-1a4d-5841-aa54-aa1445ca9938"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..:...J.IDATx...\|\...o

Chrome Cache Entry: 1138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	210892
Entropy (8bit):	5.055260629933718
Encrypted:	false
SSDEEP:	768:tEna6MVmf9++7bqoPtgm0HcBP/ksdB0UB5KUJ0GM5BUUQNE0Lsoptr+pxPcfki2F:tEnMVmfESdPSnHvyptr+pKRG4o6x6
MD5:	025F5BACD3035E5CF943BD87A2FCF845
SHA1:	BC2526C2F2263CE2C3672D99C63E901C0ABF7445
SHA-256:	5ECAB7CE27F2BC2FCDD78CB016D7E8908AF282B3914A1993B26CB7CBC84039B3
SHA-512:	3A5480FBF13149FE7E4D95277FACFF38E9EC8CAFA40EB05A4D2A1A163A4C7680A804D18BA8109D9552CFB16AE52F5507109A34AE41F441876DE48180C167512F
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/css/sites.css?buildTime=1736370530
Preview:	@keyframes spin{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}/! Reflex v1.5.0 - https://github.com/leejordan/reflex /.grid{display:inline-block;display:-ms-flexbox;display:flex;display:inline;zoom:1;-ms-flex-wrap:wrap;flex-wrap:wrap;padding:0;margin:0;position:relative;width:100%;max-width:100%;letter-spacing:-0.31em !important;letter-spacing:normal !important;word-spacing:-0.43em !important;list-style-type:none}.grid:before,.grid:after{letter-spacing:normal;word-spacing:normal;white-space:normal;max-width:100%}.grid :before,.grid :after{letter-spacing:normal;word-spacing:normal;white-space:normal}.grid .grid{-ms-flex:1 1 auto;flex:1 1 auto}.grid {box-sizing:border-box}.grid :before,.grid :after{box-sizing:border-box}[class="grid__col-"]{display:inline-block;display:-ms-flexbox;display:flex;*display:inline;zoom:1;-ms-flex-direction:column;flex-direction:column;letter-spacing:normal;word-spacing:normal;white-space:normal;position:relative;width:100%;vertical-align:

Chrome Cache Entry: 1139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1814
Entropy (8bit):	5.507881679485916
Encrypted:	false
SSDEEP:	48:GpT0xxkprqqlwO4FNkLv/zoJn3MEEssm4xuT1B:I0xypGqlwjNVJcEEXBcT1B
MD5:	B432982AD91C24C39FE60338A8A66288
SHA1:	9830080D216D8991FFCACFE093BBC4CE986012A7
SHA-256:	BB04A4726467792F88C8AE341CBA3A83BE30E40DC0857E901C0DD7F63C5801E0
SHA-512:	8B4AC04BAD2D832FC5B1C515D7C0E21C3C434014F919324A900961169A91BD2125E8F4DEA91D5F7FEC9F6226C3C641C782DC44590371FBF7531A4F41C4A86126
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=4921707118&rd=1
Preview:	<!DOCTYPE html>...<html lang="en">...<head>...<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />...<script>...function loadSyncPixel(pixelUrl){....var avImgSync = document.createElement('img');....avImgSync.width = "1";....avImgSync.height = "1";....avImgSync.style.width = "0px";....avImgSync.style.height = "0px";....avImgSync.style.cssFloat = "left";....avImgSync.src = pixelUrl;....document.body.appendChild(avImgSync);....}......function loadSyncScript(pixelUrl){....var raSrcSync = document.createElement("script");....raSrcSync.src = pixelUrl;....raSrcSync.type = "text/javascript";....document.body.appendChild(raSrcSync);.....}......function loadSyncIframe(pixelUrl){....var raIfSync = document.createElement("iframe");....raIfSync.src = pixelUrl;....raIfSync.setAttribute('frameborder','0');....raIfSync.setAttribute('scrolling','no');....raIfSync.setAttribute('width','0');....raIfSync.setAttribute('height','0');....document.body.appendChild(raIfSync);.....}....</scrip

Chrome Cache Entry: 1140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 199 x 97, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9677
Entropy (8bit):	7.970815897911816
Encrypted:	false
SSDEEP:	192:GVd97ZFfQoDBbxIkFUD/QCEVlcTE85PlcBz6nH89KCCotHkXKp67mkz:KH7ZZDBbKYFHQcFca+x7Pz
MD5:	6E0F7AD31BF187E0D88FC5787573BA71
SHA1:	14E8B85CC32A01C8901E4AC0160582D29A45E9E6
SHA-256:	580EF6409E067A4EC4A427400C7D6216184869E2DA53343DF20753CC1F8A46CD
SHA-512:	A7078CAC9A5319904CB47E01A426EAE30A26D4AF5094438F41360396C280473B9C69748B7E7A603232DA9B6D0F7297FEFB04C434EB8098CC6F89F7183C44AB52
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....U.E.....PLTE................................."""..................$$$...&&&.......................................(((.....................................................................999...........}}}......222///......EEE.....Z6)...ooo.................ZZZ..........{.y[**......R<....................................mU3&....................IJIK+............sF3....Q0#............xrqr.o}M8........ttt^;.............tV.jLBBB.Z@,,,.~`OOO==<mB0..........s.}s666e=-B%....mN.fJxJ6..h..d.pd.qUSST..~aA4444......z.gX.VB.............xogffbbdXWWzcV??>............u^^^.......tfs\PrVG.aEkNA&..........U<K5+8..0.............~.k];;;.......lll.mX........{k_.^LS=3HI1!.(..........yxx][:D-$..............miA...xjrcZeI;5:......:( ~vL.......i.sh..].......j.........".IDATx..ml.q..uw......\......N...,-....(..[_0}AR...1..QZ.m:...TB......!C:.)...../....v5.o}.._....?....k'..?....s..e...&'.....(..#.$....(..x.i.X!..g....5<D\.lp..0.a.5...z.....t.

Chrome Cache Entry: 1142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2512)
Category:	dropped
Size (bytes):	75006
Entropy (8bit):	5.625174285042866
Encrypted:	false
SSDEEP:	768:YdDFSZ8JdMS1xGPlopXbk+KQZPKOf/py7pFw7N5o9qmse9fLrJIWzAfap34VEzH0:6FSZYdMS1xGNopX5LP16FuvqT7bmVF
MD5:	99BBE560926E583B8E99036251DEB783
SHA1:	8D81B73AE06F664F9D9E53DD5829A799BF434491
SHA-256:	648E766BF519673F9A90CC336CBECEDE80DCBE3419B43D36ECBB25D88F5584A3
SHA-512:	EE24915AA5C1C7C1DD571C07EFE46DFC173CB69D2DADC4C32891CE320EEF4FE1CFB614D9C212F16BFE2C83B29C6EEAB6C5A43F8E32D475DA8081B1E2D33869B4
Malicious:	false
Reputation:	low
Preview:	(function e(b,g,d){function c(n,j){if(!g[n]){if(!b[n]){var i=typeof require=="function"&&require;if(!j&&i){return i(n,!0)}if(a){return a(n,!0)}var m=new Error("Cannot find module '"+n+"'");throw m.code="MODULE_NOT_FOUND",m}var h=g[n]={exports:{}};b[n][0].call(h.exports,function(l){var o=b[n][1][l];return c(o?o:l)},h,h.exports,e,b,g,d)}return g[n].exports}var a=typeof require=="function"&&require;for(var f=0;f<d.length;f++){c(d[f])}return c})({1:[function(require,module,exports){var JSON;if(!JSON){JSON={}}(function(){var global=Function("return this")(),JSON=global.JSON;if(!JSON){JSON={}}function f(n){return n<10?"0"+n:n}if(typeof Date.prototype.toJSON!=="function"){Date.prototype.toJSON=function(key){return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+f(this.getUTCMonth()+1)+"-"+f(this.getUTCDate())+"T"+f(this.getUTCHours())+":"+f(this.getUTCMinutes())+":"+f(this.getUTCSeconds())+"Z":null.};String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(key){ret

Chrome Cache Entry: 1143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	629
Entropy (8bit):	7.65735592128868
Encrypted:	false
SSDEEP:	12:7r5RmuNVVJZqgRdF2ewGz+2RAhG1BtRDJKhKoNwQ2IpuJ83i2jF8DbTlqjiL7I:71DNHu4ztWhG17RohJCIpumzm3lq87I
MD5:	ECC7D36AE2BFC9EEC54C294F43621435
SHA1:	35347A9C058366AF8057D1FB76411007E3A85959
SHA-256:	A7871D864EFCDA42AE598A8B0B81342DC5EDBDB8D8391C2AA18D1CDEF050DD18
SHA-512:	ABF83AADDB701B82790922C37DD4C6514538A750B9C7DCD9C8E1BF7A420B674FC8647623E0E8791DAF21EF3C8E3D7C8555D252F7B720DFB5FA14E5E82E0B8B79
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/assets/preload-helper-DVsEscEQ.js
Preview:	.....Z+...Br.U-.\|.j'{.r_..+)., .:qM..\|.G...E$7..:...n6...MY..u...$.`.]O...........%..w....?...a{2.Eng.h.q..Y..[.{.........B.......c.._/`.1..O...YY.b...E.F..BTr....W..a.P..-?I.H~.[v..4u....I.........s..^.A1.k..bl.Y8/: .......Ee.@..7...N.._..).v......R..(ZhCT...,A.....RY2...>..a...4....49...tq..-...E....+...7...\|.......u..~..........H a.h..a.T.&...'2CJ...$%f...8#{,.S............*..J..1.......Q..H..KT@......FW.^.8......2..sq..a....0...x.F'...T.:.\|.y.Za.Q..]_z.... ....fn$....\|(...@...p....l......z.b1k..z0.......9Bk\Z..9."`.uRPNc.i..r....[%...W...!.q.&...P..yh.6..6E...vd....W...)....X..N...w..R...

Chrome Cache Entry: 1144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	4.191445610755576
Encrypted:	false
SSDEEP:	48:9DoH8yAXQ8K5UvCUbpXtlhMVDBilhB7IODnNcynEJPMHErU8ACbtRKO7nhe+:9DlyAXQ8yUdduBiloycKeRg8xbtsO7
MD5:	4D27526198AC873CCEC96935198E0FB9
SHA1:	B98D8B73AD6A0F7477C3397561B4AAB37BF262AA
SHA-256:	40A2146151863BCF46C786D596E81A308D1B0D26D74635BE441E92656F29B1B4
SHA-512:	1EE4B73F4DA9C2B237CD0B820FFAD8E192D9125CE7D75D8A45A8B9642CE5FE85736646CAF12D246A77364C576751C47919997D066587F17575442A9B9F7CC97F
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/favicon.ico
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................................................................................................................................D;3.C;4.D;3.D<3.D<3.D<6.A2".Pc..........M>5.....E;4.D;3.D;3.D<3.F<5.E<4.................................................F?4.ID5.D<37C;3.C;2.C;2.C;2.C;3.D<3LE=3.E=2.D<3.D=3.C<2QC;2.C;2.C;2.C;2.D;3.D;46JB;.G>6.....................................E;4.H<5.D;3]C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2.G<3.G<4.D<3.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3[C=7.C<4.............................H<7.B;1.D<3CC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2nD<3sC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3@B:3.HA2.........................D<3.E<4.C;2.C;2.C;2.C;2.D<2.C;2bD<3pC<2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3lD<3^D;2.C;2.C;2.C;2.C;2.E<3.D<3.........................C;2.D<3FC;2.C;2.C;2.D;2.F=3.E=

Chrome Cache Entry: 1145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	886
Entropy (8bit):	5.035010292982074
Encrypted:	false
SSDEEP:	12:TMHdt0ubqt7/KYslXXHlPeaxMwm5EIDXqBJVJ/hlIJi2y1dQ9/01klp0u:2dtjbqt7L8FPeaxMwm+ID63zbF+MOf0u
MD5:	552EB2E04260FC0733E5633D15C6AEAA
SHA1:	0A9EFCC3B0EBABB23A49A00061FD8200EDED1613
SHA-256:	705FF3240DE004523FF9D628B28AAD705AD3F0CEB046312495265A4042C67570
SHA-512:	16CD125A26B1604144D6A64F45D1064FF2A71DA412CF61C829914E00C2E4AA275A172D0872A9533F79D5FC2D2BE82A7DFE3FE5F12048C23AF927A7CB35D571CF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="22px" height="11px" viewBox="0 0 22 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 39.1 (31720) - http://www.bohemiancoding.com/sketch -->. <title>Group</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="UI-Kit" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="square">. <g id="Ui-Kit" transform="translate(-61.000000, -697.000000)" stroke="#FFFFFF" stroke-width="1.5">. <g id="Group" transform="translate(62.000000, 698.000000)">. <path d="M0,5 L19,5" id="Line"></path>. <path d="M16,0.5 L20,5.02" id="Line"></path>. <path d="M16,9.02493763 L20,5.02493763" id="Line"></path>. </g>. </g>. </g>.</svg>.

Chrome Cache Entry: 1146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 73, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2439
Entropy (8bit):	7.809290806755739
Encrypted:	false
SSDEEP:	48:i5MbYTn7ruuHkJVK1wAUc2zptwQ1U3t7ddSIT+gZFlI7Thc:i5McvrKvAUNzptwQ1rpelV
MD5:	6CDE551752C3DDF86B64DD5C0158FD13
SHA1:	B8C39ED9A617C68D52AD9893A7FE9409FA561C63
SHA-256:	CCFDE13123C12CE3F6BED6057742CE94960882A3C5B70C1C3B29C58CF170D748
SHA-512:	1E5EFBC5146B9C192A3C45CF69B8D2B693567E222A90E36084B673DD70656AEC2132A1FC812FAF6ABD1E264DD92ACF262C2E1BE87447BDF78AFEFB01E2B935C6
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tak_1.png
Preview:	.PNG........IHDR.......I......<......PLTE.......N.Ip............Em. O.............$S.7a.............p.......Tx..........x........Go.k........q..#R....9d.}..Bj..........(V.......o..Aj.Sx......\..[~....>g............w..z..!P.d..............b...........\|..?h....4_.<f..............=f.t..6a....8c.....X.@h.u........8b.:d.......................3_.v......^.....e..i.....y....,Y.......1]....c.....Ns.r......Z.n..0\....]......."Q.^..Ot..............O................5`........Rw....Ou.......2^........X\|....Jq.......Z}..../[........-Z....Ck....m..`..Kq.......Dl.f..Lr.......g........Ms..............&T.@i.h.......%T.j..)W.........Y}....................'U.Ho.......{......)s}.....IDATx...YO.Q....X.......R\p.Wp.A......s.13-w.......7g...$..?...l......`..`..`.@..@................`..`..`.@..@................`..`..`.@..@.......{...Q.......C...=...>.k.....&O....<......i..h.//..N]....i.lT\.....L...P..\|...+....r.b..6......z..7....8mb).n...h.).n..K..[Q1

Chrome Cache Entry: 1147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Public Key
Category:	downloaded
Size (bytes):	829488
Entropy (8bit):	7.999517088167417
Encrypted:	true
SSDEEP:	12288:gwVb8mNVSSP9sKqAbWYt2c9V8CNsQSGASEKV+8Fnyw6RfLVJ7hDf86uVhPbvpLtg:D77G18V90G/tnWfJTDf8Hn6
MD5:	4550B71B858D4449CC214C3C52A538DE
SHA1:	ECC7E4234C5FA2E1E2F30878E4F8748D72D4F7AB
SHA-256:	4DA29C2375D499734F46232AE4B0915325945B77F9970F407FD81488E978E698
SHA-512:	CC54E10AAE88C54D253AF34092A2A98EA6325EE308BA2EE4F97A9F31EBC94438FDBDBC5ED9E3EED20E5084A8D95EF33EA23D33CA436EE6837A0F73FC1AFFFF24
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/bundles/boot.js
Preview:	.T,U)...a.......J....c.q....>........t...$]w]..7...f....... ...PUUUU.>.X....,..\|..<.\|..(...b..(...b..(...b..(...b..(...b..(...b..(...b..(...b..(.=.UX.#.{...z.....z....~.....$.S.+.i./JC.3.7....u....a8p...z.<......4...u./..b8t1..z.<.....6...Fu./..`8r%..z.<......5....u....c8v=..z.<.....7...&u.o.na8q+..z.<.....4...u....b8u7..z.<....6...fu....`8. ....<.....5.........c8.8....<....7.........a..,..........Z4....._.^b..2.........Z6...V.._..`..&..........Z5.........c..>.........Z7...6..?.>a..)...........4........b..5..........6...v....~`..#...........5........~c..;..........7.........ax./....\|.....:4...'....."x..0. ..1.0.0.(..1.8.M0.$.M1.4..0.,..1.<.-..".-..2...*....:.m..&.m..6.............c_.....t....P.9...t....X.9..Nt....T.9...t....\.9...t..].R.....t..].Z...nt....V.....t....^........=.Q.y......=.Y.y..^.....U.y........].y..>...}.S........}.[....~.....W.........._......a.Vw....'.N.G.$PA...:.....&.....A7.i..c.....+.B.\.n=.m....miAde..Ux

Chrome Cache Entry: 1148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	62689
Entropy (8bit):	6.0173873373963485
Encrypted:	false
SSDEEP:	768:sWHkX/uFImbKjLrzbP5TRyJyVyjyXW4rVW4r0Fg174xW4r4fH5TiF:sukPHrpRUWGIlVl0FgF4xlaH5TiF
MD5:	1DA8FDE3174FB4E7466442EAB433B541
SHA1:	AD9E28200E942A4177E12716D82F5BA665D18EBC
SHA-256:	64CAEB61350A729D60C1FE56B5099DFEB3E716C87884B1D208C97CC2766D0EFA
SHA-512:	5642AED7229BC6D79602DEA9180B721776EF323A587837D248DCAC7B7E68EA39898CB8769668EA537C1858AE400E16772C5737ADC25770727CA60E53926CD6B9
Malicious:	false
Reputation:	low
Preview:	{"/22786333977/apps.talktalk.co.uk_displaystandard_300x250_login_bottom":["html",0,null,null,0,320,336,0,1,null,null,null,1,[["ID=fbb1422673ec914e:T=1736637148:RT=1736637148:S=ALNI_Mbh8tWNwqWhRI_KAWVDBQgeGE_M2g",1770333148,"/","talktalk.co.uk",1],["UID=00000fb452d39e76:T=1736637148:RT=1736637148:S=ALNI_MZXJr7ftsW7VhRRvrxEG8I1az7GUw",1770333148,"/","talktalk.co.uk",2]],[138402836221],[6094372239],[5206671035],[3072062848],null,null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CNqh0MLl7ooDFVU5VQgdHS8PMw",null,null,null,null,null,null,null,null,["012410292120000"],null,null,null,null,null,"ilt518vlfu97",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=5e64592190b029d9:T=1736637148:RT=1736637148:S=AA-AfjZ8AinL-8HXLEvP-f4gmMaq",1752189148,"/","talktalk.co.uk"]],[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,mini

Chrome Cache Entry: 1150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	521
Entropy (8bit):	5.293620178099685
Encrypted:	false
SSDEEP:	12:YoyE5DF/DEXGKEt+AaX+JB6BcO57bniqHwjQV/fBlj:YbE5DFbc8aOJwk8TV3Blj
MD5:	40DC66633ED2EB1C79B1DE8A3F28E76E
SHA1:	F403A7709D7AED33C0225B81878C4D63D607998E
SHA-256:	C2DEA6106F07FD337980830CCB55246BB5654F732ABD5A47690178C1184489F7
SHA-512:	836F1400481B3083A009025E4BC5758FC30FFF27F4E78C9F7747EF215B3985DEA22BC948BF407A6E4CB1EAC3BB92343195F48E47E67EB29F199623F76CBA4F1F
Malicious:	false
Reputation:	low
Preview:	{"propertyId":34301,"propertyPriorityData":{"stage_message_limit":1,"site_id":34301,"public_campaign_type_priority":[1],"multi_campaign_enabled":true,"stage_campaign_type_priority":[],"public_message_limit":1},"campaigns":[{"type":"GDPR"}],"errors":[],"localState":"{\"gdpr\":{\"mmsCookies\":[\"_sp_v1_ss=1:H4sIAAAAAAAAAItWqo5RKimOUbKKhjHySnNydGKUUpHYJWCJ6traWFwSSjrUNwiffmKVxQIAfJPS5uEAAAA%3D\"],\"propertyId\":34301,\"messageId\":0}}","nonKeyedLocalState":"{\"gdpr\":{\"_sp_v1_data\":\"920338\",\"_sp_v1_p\":\"511\"}}"}

Chrome Cache Entry: 1151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=&google_gid=CAESEBWizz2r7u_ykKnkVSyfycc&google_cver=1
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 1152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	2.8722910533148776
Encrypted:	false
SSDEEP:	24:suJa888888888888888888888888884JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJCJw:0yTTTTTTTTTTTTT0
MD5:	CD381052CCFFDB3FE5850050DCBDBE22
SHA1:	DFC774D0FAAA34C882B5C53380003E8D61CF2620
SHA-256:	C7919584D30AB90FE680A39E13CAA764D903E4C10F968BDA4D79FB30370DDA87
SHA-512:	837FE82E60095C14CDF7D858527919561092126202B851FF71122E3C0CAD81112BFDCA4189E6F5661178E2B0DC57B09E0E3F067CD43F7CBC1F230F60737672B1
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/favicon.svg?version=1703779530
Preview:	...... .... .........(... ...@..... ..........................U...F...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...F...U...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<.................<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...G...................C...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<

Chrome Cache Entry: 1153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	460
Entropy (8bit):	7.43888637707875
Encrypted:	false
SSDEEP:	12:oNqXRwRZZn1052a82v40xNFeDt9uy8EF0Ym2gpRRTQ0Is1C:w9Zw2a82v49GYuhr7C
MD5:	909CD46E96173BF35B6333BB70B8B34C
SHA1:	71B66734F2034000B7215E9B06A8B3ABB9F3764E
SHA-256:	9CECFFF17C4EB1BCE92DA450CFAFCBB31DBF778CC8C058D68312AB94F631E455
SHA-512:	09AB3DD4021A79967AC6881FE38C21077E29A3CEE9A6DA583B81219285668EE2C2A56F143A9CC567DBA3D8E86E664E6C38F73E0388160526436DC785581A0035
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/cmp.js
Preview:	.....Z........a.&....1...e.r....5h-.o...,.<ZK$.4L..1...#@.... Z$ ......i.N.V28.....*...-.).U..Fo..D......'T.^.QK..z%...v.F.....YKkD.FE.(......Q.......\..L.}T....E.m....e.r.......!.-........l...i%Q...,.q..D.5@.3..b..anl......3..4h...+..)../x.H......s...Y.I.C.....9....%...x..2/... .J...,.yt....X..YI.........>-)..Q.0..z..n...6E.......kj...AD4,.i..E.Fp..(h....;F}2i...6.bA6.\|;1N.K...h..X'.W$1O8hIb...^bI..\|.8=...Fv......2..9.y..i...z

Chrome Cache Entry: 1154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Chrome Cache Entry: 1155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 471, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	60600
Entropy (8bit):	7.9765514067636625
Encrypted:	false
SSDEEP:	1536:+su8E9R+an2chA5m1pOtA6eQZfjkvFlbeFuieU:nI+al1s0QZfjkzqFkU
MD5:	4DC4AF4CA3295F7ADFB222C89A658447
SHA1:	96EEF9518174DFD4F0ED64EA82C2164A9114AF95
SHA-256:	FF95D27D18D5AAE72E8665328841F3A07BEBD9CA093D3CE03B5B33738D09171C
SHA-512:	E5D44217ED07B58B48D300517E2CFF76136DAEC4FA3145EB8A17DAABD82879CFA26AFF6FC95CAB6D3D827664F82FCB5ACF04235CCCD111025777CDFF0355BC82
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tannn_1.png
Preview:	.PNG........IHDR................$....IDATx...K.Z....B.... .Y.:..#.1.9X.a.0F..`....r...\E"R...B.@.]l.N.Y......(..I....''i^..B.!....H.B.!...$!..B..H.B.!...$!..B..H.B.!..B.$..B.!.IB.!..B.$..B.!.IB.!..B.$..B.!."I.!..B(....XP......!.<.5.#.X...wG.Sv}..\...XW.FR..?...uY.d.E...PVL.(C....{U..j..;.!."I..SI.....B.?FB.\z^,...[5k.......HF_.(.;.!....~..g.X../.O..%....L.F...=.....M....).K.2..\.\..!W$.."....+..P$)....8.i..&....H....H...3rOM..W.....s..H.B..]..6..~\|..:.._m. ].H>M;..H.X..!..x...H>.g$..Z.:.U..5E."I..[.I.$.<.Jeu.....o.s.IM..2:N.......:Z.\..H.."I.$.IB.E."9K..2!T...cJ....H.N.HR$)..I.$!.".."._8....;.T.7.U.-D..$E.......W:....+....".r7=...O._`.B....^.;../.....]C.oM...:K...<..m..M.8.U......)...a.=...+B.h.L.Z..WW...C.L.Z..{.zv<..:..s........B./f.m...9.6.mc,g*.n. ;va.....S.}.....1..Z0.~H?B.evno.H..]y=._T.....E}.!G.Z.Y'.....0u..Q.G..T....B{.o.a......l...,.h.}+..x..t!".6......j;.1.......j....y.. .k<.K..$.......e..O.)D2.....5.ul\._.h....HJQ...b.A......

Chrome Cache Entry: 1156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.5251270918749356
Encrypted:	false
SSDEEP:	3:n9m6QiFL4:nVm
MD5:	B205296F7C49C67BAF5B78E8163061A7
SHA1:	828DED5C881601F44CE02CCB9E8B98D214B5E9AA
SHA-256:	281A6CECFF9B473286243BDC58329C1D8141B979E8985EA968D7D975F3A50E05
SHA-512:	ABBB243E84448F153F337C61919C36F68F2503F14F7301A903ED76B5A321C60C09C5E5D1174E77EBE3199A1F7A900A0668555B729F008547DD26A00937FF7B5B
Malicious:	false
Reputation:	low
Preview:	partner parameter must not be null

Chrome Cache Entry: 1157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	4.869741864811224
Encrypted:	false
SSDEEP:	3:JSkEEpwJB+QTVYTra+dgvBB4VMBF/FhMGQH+sQfZ+C6GMKibrC+evg0/Yp6ILMb:7gP+QTVIraigv34+bq+xB+C/grC5g57k
MD5:	FBED87D213B9A2CA8C6013744B5BADFA
SHA1:	5FFA12648FFAACE2A897223FE10C811DB1131EA7
SHA-256:	746BA18CB287037DF23433AE4578926473AA64669F90AC6F0C2FFCCFF84D0BB2
SHA-512:	48829882736C0C68F89A99D83DEF7DF9C6DB04CF242AA08BB11456A806F5A843D1A92581C76BDF7FCF0BE6B09AD50FC6B80C0E2991D7A121481858E9E2462D9A
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.gdpr.db34b815.js
Preview:	import{D as i,g as o,d as r,g as s}from"./io.ox.gdpr/io.ox.gdpr-c98277dd.js";export{i as Dictionary,o as default,r as dictionary,s as gt};.//# sourceMappingURL=io.ox.gdpr.db34b815.js.map.

Chrome Cache Entry: 1158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 471, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	60600
Entropy (8bit):	7.9765514067636625
Encrypted:	false
SSDEEP:	1536:+su8E9R+an2chA5m1pOtA6eQZfjkvFlbeFuieU:nI+al1s0QZfjkzqFkU
MD5:	4DC4AF4CA3295F7ADFB222C89A658447
SHA1:	96EEF9518174DFD4F0ED64EA82C2164A9114AF95
SHA-256:	FF95D27D18D5AAE72E8665328841F3A07BEBD9CA093D3CE03B5B33738D09171C
SHA-512:	E5D44217ED07B58B48D300517E2CFF76136DAEC4FA3145EB8A17DAABD82879CFA26AFF6FC95CAB6D3D827664F82FCB5ACF04235CCCD111025777CDFF0355BC82
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................$....IDATx...K.Z....B.... .Y.:..#.1.9X.a.0F..`....r...\E"R...B.@.]l.N.Y......(..I....''i^..B.!....H.B.!...$!..B..H.B.!...$!..B..H.B.!..B.$..B.!.IB.!..B.$..B.!.IB.!..B.$..B.!."I.!..B(....XP......!.<.5.#.X...wG.Sv}..\...XW.FR..?...uY.d.E...PVL.(C....{U..j..;.!."I..SI.....B.?FB.\z^,...[5k.......HF_.(.;.!....~..g.X../.O..%....L.F...=.....M....).K.2..\.\..!W$.."....+..P$)....8.i..&....H....H...3rOM..W.....s..H.B..]..6..~\|..:.._m. ].H>M;..H.X..!..x...H>.g$..Z.:.U..5E."I..[.I.$.<.Jeu.....o.s.IM..2:N.......:Z.\..H.."I.$.IB.E."9K..2!T...cJ....H.N.HR$)..I.$!.".."._8....;.T.7.U.-D..$E.......W:....+....".r7=...O._`.B....^.;../.....]C.oM...:K...<..m..M.8.U......)...a.=...+B.h.L.Z..WW...C.L.Z..{.zv<..:..s........B./f.m...9.6.mc,g*.n. ;va.....S.}.....1..Z0.~H?B.evno.H..]y=._T.....E}.!G.Z.Y'.....0u..Q.G..T....B{.o.a......l...,.h.}+..x..t!".6......j;.1.......j....y.. .k<.K..$.......e..O.)D2.....5.ul\._.h....HJQ...b.A......

Chrome Cache Entry: 1159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156631&s=&predirect=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3Da208d9366469aa64%26fi%3D0b6f23bc6d82347f%26uid%3D
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 1160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2828
Entropy (8bit):	4.536070396957773
Encrypted:	false
SSDEEP:	48:PTBE0ZpntMb0/6aYkuvll/JGd6vpYQ6Kq3hUyvKrcJcyd6GR4y0IB7KPa0TTM:77ZpntMgSaYDvll/YAvpYjKq31vKrcBH
MD5:	C22AB67199A33D876512504CDA4FF55B
SHA1:	36E96EAE4644B6028532974FE5186A072792CB37
SHA-256:	C4CD233D3D6B0F184E99D5017E521B4C6F9106D3E546864A8BA516189B934311
SHA-512:	9C11487F2A00B4DCA9C04294F4F422AE0DF00828DE989AD64F506446C72E91E64D0B47EC243AE75B3EB88CA5C882E65C9A8F6D99B0C8BED4541F767A3DC1C31B
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/files/theme/jquery.revealer.js?1736412329
Preview:	/!. Revealer 2.0.0. . Copyright 2015, Pixel Union - http://pixelunion.net. * Released under the MIT license. */.(function($){. // check for trend event (make sure jquery.trend is included). if (typeof $.event.special.trend !== "object") {. console.warn("Please make sure jquery.trend is included! Otherwise revealer won't work.");. }.. // Simple requestAnimationFrame polyfill. var raf = window.requestAnimationFrame \|\|. window.mozRequestAnimationFrame \|\|. window.webkitRequestAnimationFrame \|\|. function(fn) { window.setTimeout(fn, 1000/60); }... // Public API. var methods = {. isVisible: function(el) {. return !!el.data("revealer-visible");. },.. show: function(el, force) {. // Check state. if (methods.isVisible(el)) {. el.removeClass("animating animating-in");. el.off("revealer-animating revealer-show");. return;. }.. // Remove previous event listeners. el.data("revealer-visible", true);. el.off("tre

Chrome Cache Entry: 1161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65483)
Category:	downloaded
Size (bytes):	93636
Entropy (8bit):	5.292860855150671
Encrypted:	false
SSDEEP:	1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ
MD5:	3576A6E73C9DCCDBBC4A2CF8FF544AD7
SHA1:	06E872300088B9BA8A08427D28ED0EFCDF9C6FF5
SHA-256:	61C6CAEBD23921741FB5FFE6603F16634FCA9840C2BF56AC8201E9264D6DACCF
SHA-512:	27D41F6CFB8596A183D8261509AEB39FCFFB3C48199C6A4CE6AB45381660C2E8E30E71B9C39163C78E98CEABC887F391B2D723EE5B92B6FBC81E48AC422E522B
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/jquery-1.8.3.min.js
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /.(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t,

Chrome Cache Entry: 1162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	521
Entropy (8bit):	7.562298465956618
Encrypted:	false
SSDEEP:	12:/Un6xdH4FCv/7m8iv4Z9XJlgfbUb2rDncDVgbpwJD+RL3N:/UGHYIi8ivoXJCfb7/yomJDGL9
MD5:	419A9AA35472017EAC4908F2B6CE8555
SHA1:	19C921AD4C7C2F4BC460E5E959981A02009773D4
SHA-256:	92FC9D544F61D6AFBF1354B7FC1026E1738553B36405A03D00C420EC8280B79E
SHA-512:	E37D0F9B5C35DA38D388364C73E1D8FFF035D5BA3DA02EEE5D11EA7705658C39B4F11EC398AA58E593B618A94E2B4A512D572324527C28C0372706FD3310B222
Malicious:	false
Reputation:	low
Preview:	......=..k.'.9U.T..iI...r.....G.(......e..m."...s.k.2a'6..=......X....0..,T...1..D.?i.i....bk.u..6........K0n.....X.i w.7A.NP?".......w.b.+.tP..BC}..(..y..........h.qa$. K.8q....8.....c.$...920f.k$f.".........6....*.C..mH%....E!Y...&.eD.o.7 x........2.Av.. .a~.m1_...n.W...<`.l.-..'...+(..W.q/P.d...ue1.{c.tYw2...o..p...............g.W.`....:..as..5Q....#B.Tg.O.......A.......~..=X.......Wi....dL....$.x.....-.....y..=3...8..T)B............].A.-..R........QO.R.....U..~......A;B.M.~f.

Chrome Cache Entry: 1163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://441e80a594f839abb072b05656603517.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 1164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.775292972832054
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtz1M+sLqo40Y:VKEctKo7LmvtUjPKtX7F1M/LrwUnG
MD5:	60395C591801D7108CD6127480F5A542
SHA1:	397E30BE079D07A8BB3EAD98FD5B7C5B8E1A8134
SHA-256:	32F3AC435D293515FF99B9B4E3E952E470868F70478E76815FCFE202F606ED3F
SHA-512:	219771A3E0FC39247886EE821AB804E913B02C68FEB79F94EE5EC024C02A1E0AD51394E2D89DDFB2BE8F701D4FD7D6F7B0522ED70916C3793D30AEFC5F30548A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?_=1736637096235
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 1165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	217
Entropy (8bit):	4.935410566628108
Encrypted:	false
SSDEEP:	6:7gP+QTVIraineRtsneRtU+bq+xB+C/grC5g5ZeRtZ:7gmSz5++xoCIW5gS
MD5:	23CEBE3680AA17439CFE6D5154FFB5C8
SHA1:	38A363564BDE5353A0E1558901844700C1B4534D
SHA-256:	C0236282FC42D67D26308E6A550117D3FD99B4A97818BDC7F243742E82D8FE07
SHA-512:	6B65DBF86A02146DB630EDE5FF79C98394FF6EFAD89E83F28045931C91D46DF693D6A05C5E4D626AE0B4D86E57AE8CB1FE21A26AF8E2D7144183EE6009CF393A
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.blackwhitelist.811cfd8a.js
Preview:	import{D as i,g as o,d as r,g as s}from"./io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js";export{i as Dictionary,o as default,r as dictionary,s as gt};.//# sourceMappingURL=io.ox.blackwhitelist.811cfd8a.js.map.

Chrome Cache Entry: 1166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58899)
Category:	downloaded
Size (bytes):	440582
Entropy (8bit):	5.406271024302282
Encrypted:	false
SSDEEP:	6144:6p75faegS1Fw9PxW69T2a45UK0ZTBJS5B3DoCLwL:475fRgSFw95z2a45Nu+5ZvLwL
MD5:	7CF5449B4200E977582A99D1325B7A37
SHA1:	C0CE8ED24478C16ED53C375484731BA8B8221904
SHA-256:	39CC9E68DD5C7C86A41144AC90ED1C9E2048D234809EAB297085E9B6A870810A
SHA-512:	0DC67371561BE31249EAE7620B50C51A6ADECF297825BBF8CFF4B078625BAC6677F6DB4BAC34C5B11E2AD1536A89DF364B5E5B841F12880A622628D552D8349E
Malicious:	false
Reputation:	low
URL:	https://tradecore.tradehouse.media/js/prebid-tradehouse-9.11.0-gdpr.js
Preview:	/* prebid.js v9.11.0.Updated: 2024-09-09.Modules: adagioBidAdapter, appnexusBidAdapter, criteoBidAdapter, ixBidAdapter, gridBidAdapter, gumgumBidAdapter, openxBidAdapter, outbrainBidAdapter, prebidServerBidAdapter, pubmaticBidAdapter, richaudienceBidAdapter, rubiconBidAdapter, sharethroughBidAdapter, smartadserverBidAdapter, sovrnBidAdapter, tripleliftBidAdapter, triplelift_nativeBidAdapter, userId, sharedIdSystem, 33acrossIdSystem, connectIdSystem, criteoIdSystem, euidIdSystem, id5IdSystem, identityLinkIdSystem, lotamePanoramaIdSystem, pairIdSystem, quantcastIdSystem, unifiedIdSystem, uid2IdSystem, consentManagementTcf, schain, rtdModule, adagioRtdProvider, raynRtdProvider */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.(()=>{var r,t={433:(r,t,n)=>{function e(r,t,n,e,o){for(t=t.split?t.split("."):t,e=0;e<t.length;e

Chrome Cache Entry: 1167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	4.191445610755576
Encrypted:	false
SSDEEP:	48:9DoH8yAXQ8K5UvCUbpXtlhMVDBilhB7IODnNcynEJPMHErU8ACbtRKO7nhe+:9DlyAXQ8yUdduBiloycKeRg8xbtsO7
MD5:	4D27526198AC873CCEC96935198E0FB9
SHA1:	B98D8B73AD6A0F7477C3397561B4AAB37BF262AA
SHA-256:	40A2146151863BCF46C786D596E81A308D1B0D26D74635BE441E92656F29B1B4
SHA-512:	1EE4B73F4DA9C2B237CD0B820FFAD8E192D9125CE7D75D8A45A8B9642CE5FE85736646CAF12D246A77364C576751C47919997D066587F17575442A9B9F7CC97F
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................................................................................................................................D;3.C;4.D;3.D<3.D<3.D<6.A2".Pc..........M>5.....E;4.D;3.D;3.D<3.F<5.E<4.................................................F?4.ID5.D<37C;3.C;2.C;2.C;2.C;3.D<3LE=3.E=2.D<3.D=3.C<2QC;2.C;2.C;2.C;2.D;3.D;46JB;.G>6.....................................E;4.H<5.D;3]C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2.G<3.G<4.D<3.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3[C=7.C<4.............................H<7.B;1.D<3CC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2nD<3sC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3@B:3.HA2.........................D<3.E<4.C;2.C;2.C;2.C;2.D<2.C;2bD<3pC<2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3lD<3^D;2.C;2.C;2.C;2.C;2.E<3.D<3.........................C;2.D<3FC;2.C;2.C;2.D;2.F=3.E=

Chrome Cache Entry: 1168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32029)
Category:	downloaded
Size (bytes):	534233
Entropy (8bit):	5.3426163690118
Encrypted:	false
SSDEEP:	6144:iocZIvNiY/EZ7NQ//HyBGtUD/4K0x65/hSJi/5Tz:Tj/ybiQD5/Ci1
MD5:	5295FC679EEA80780246F38A98DF4119
SHA1:	AB671B1376AE82788886E2E18C4FDB7B7AC6FCC7
SHA-256:	C1CD4E7693F8C40D13259E8AC271CD0B6870875CA6C69B78D50AEDE9EEB63B67
SHA-512:	875BBDBAA20DEDC45DD6658886DF4B2E04EBA47489A2382F809C3F4EE96817B8A1A99863B812E983BC89AA435E3FA72AC4F0BE0E979241A168B1D2D7B0097CD5
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1736370530
Preview:	(function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:false};e[r].call(i.exports,i,i.exports,n);i.loaded=true;return i.exports}n.m=e;n.c=t;n.p="https://cdn2.editmysite.com/js/";n.p="https://"+window.ASSETS_BASE+"/js/"\|\|n.p;return n(0)})([function(e,t,n){e.exports=n(321)},function(e,t,n){var r;!(r=function(){if(window.Weebly!==undefined&&window.Weebly.jQuery!==undefined){return window.Weebly.jQuery}return window.jQuery}.call(t,n,t,e),r!==undefined&&(e.exports=r))},function(e,t,n){var r,i;!(r=[n(1)],i=function(e){window.Weebly=window._W=window._W\|\|{};window._W.utl=window._W.utl\|\|function(e){window._W.failedTls=window._W.failedTls\|\|[];window._W.failedTls.push(e);return e};window._W.ftl=window._W.ftl\|\|function(e){window._W.failedFtls=window._W.failedFtls\|\|[];window._W.failedFtls.push(e);return""};window._W.utl=window._W.utl\|\|function(e){window._W.failedUtls=window._W.failedUtls\|\|[];window._W.failedUtls.push(e);return""};window._W.stl=window._W.s

Chrome Cache Entry: 1169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3910)
Category:	downloaded
Size (bytes):	3911
Entropy (8bit):	5.0666543016860475
Encrypted:	false
SSDEEP:	48:MV4jWxgDa+AZ5TvUSoekrDSiqfcoj8cqL54QgP2nuwvn:AeLAjYS9sDCkoj8cq9Xn
MD5:	1DCEBBB5A1EB8B028310CEEB72A339B3
SHA1:	E254B7A35AC189FD1CE9CF8BD78593BEBFE27D7D
SHA-256:	865CB87DE9FC4D6530EDCE21F0103107ABAE6ABE45CABDFF2AD9AF067B3D8E0A
SHA-512:	1FE84409EC4FEAF49C31208668D29F215EA8136EA49134171F4A930963745031520068C0E17783EE557FAE24590B4079E8ECEEB010766466D7C8097AE97F1E53
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/css/old/fancybox.css?1736370530
Preview:	/! fancyBox v2.1.0 fancyapps.com \| fancyapps.com/fancybox/#license /.fancybox-wrap,.fancybox-skin,.fancybox-outer,.fancybox-inner,.fancybox-image,.fancybox-wrap iframe,.fancybox-wrap object,.fancybox-nav,.fancybox-nav span,.fancybox-tmp{padding:0;margin:0;border:0;outline:none;vertical-align:top}.fancybox-wrap{position:absolute;top:0;left:0;z-index:8020}.fancybox-skin{position:relative;background:#f9f9f9;color:#444;text-shadow:none;border-radius:4px}.fancybox-opened{z-index:8030}.fancybox-opened .fancybox-skin{box-shadow:0 10px 25px rgba(0,0,0,0.5)}.fancybox-outer,.fancybox-inner{position:relative}.fancybox-inner{overflow:hidden}.fancybox-type-iframe .fancybox-inner{-webkit-overflow-scrolling:touch}.fancybox-error{color:#444;font:14px/20px "Helvetica Neue",Helvetica,Arial,sans-serif;margin:0;padding:15px;white-space:nowrap}.fancybox-image,.fancybox-iframe{display:block;width:100%;height:100%}.fancybox-image{max-width:100%;max-height:100%}#fancybox-loading,.fancybox-close,.fancybox-pr

Chrome Cache Entry: 1170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	22371
Entropy (8bit):	7.991094430526923
Encrypted:	true
SSDEEP:	384:iEFtYMcsYtU3nPeWUe03nPGn8MqpmqVSPoNbTm9+W02VlPhb9z:iEXYyvA3nPmqtIOTI+d2Vlz
MD5:	272B4398AE903853D50FA7CDBC774EA4
SHA1:	14A252CCA7E99A08A405DC62EADCA6FC23D40E72
SHA-256:	33BEA2AC99E3D7865D7B59AB2A1A1CDC1B91C163DBC27AD079DBF911391EB3A3
SHA-512:	64FC43CFD7A2A64DEB7FFF4F0AB36F827F5C13C7F6B69DE38A72A8B85963BBD998BDAB93BD236844337A9138854FE09DA3855C4EEAB6ACE6CAA33F5629A1D41F
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/office/main.en_GB.js
Preview:	[#.B..I...."0n.c....5.z.N.}.Gu.jU.1m....V..\=.......a\|@.mO.o.n.....~.+gH.G.'Id\|4.........>..U.P.@.U........s.}.5.F...n..&.2e...)..kY.d.1..s'..A...?.b.......eZ..K..v.A..N..-..Q-...7g.v.9.. ......i%.~[..IL.1...j.C.......Y..5R\|.\..K.2...\|%'..q:I^..)....'.z.#..#..A.....]...............Pej........F.4...y0$..../...W&q.{....G.......%yI.....\|..)7..\....Y.YH.~.2%.E.k_.F.5....o.....e].....B>s5.....P...).....D....>,..}..~.w/.\|........j&u....%.Z.H........n..w.7.?....#...q.y...(S.a..t.....p..2j....w.......EW~B.^.....3...D.G.[.d..H..i/...7...{).f.[4\q7...MX........R.HqP.&..A.J.C..8.p.+.:...=9.{...5...=`.l..J..s.......o*W.,F.kv.8.........[.f..,..bd.m#..H._...x..x..!..SH.....$2..n..rI.?.....]..........Y.Es.U....b..........j...O.h.B$..........S...O.=6..G)2.X....:..<]..R....vc.{../B...vJ..5G{...ks....[n..z."...z!D..h..I..6.s.@..Mc.#.....5:.fm...}...T.W^.)....#...y...vh..o!e.P..i,..W..\....2[....m.....O..j%.\|A`....]..C`7.{..-...W...%D .!.M.....M[..F7..`.,.T

Chrome Cache Entry: 1171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1193
Entropy (8bit):	5.406513797802129
Encrypted:	false
SSDEEP:	24:2eRK4nNr5mLUjA3DgNr5+fDzaNr5LBRHNr50d3LNr50bfm/54Nr5z:2eRJNkL6s+swdBTsqbu/8Z
MD5:	DDF8FD78123458B3F1CC162DDB938772
SHA1:	F26269C333F2EF1BE93562B5F3AB037C1B5BDDD3
SHA-256:	5DDDABB5AE6F766A22F1DC6AB39BFD24E2F7254F958924FF5D575D220FFCCC2B
SHA-512:	7E51893EAAB4A59A5788BBAABE252E0AE71943B4FC92092137C1A1EE304E622CC656C9DB82DBC8CC69CF2B5E64381D93704D2910863DA066F864228931055866
Malicious:	false
Reputation:	low
URL:	https://sync-amz.ads.yieldmo.com/tamptsync?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dym.com%26id%3D%24UID&gdpr=0
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<img src="https://aax-eu.amazon-adsystem.com/s/ecm3?ex=ym.com&id=xEF_FccQQYcYfrS0Tdmx&gdpr=0" style="display: none;" border="0" height="1" width="1">.<img src="https://sync.1rx.io/usersync2/rmpssp?sub=yieldmo&redir%3Dhttps%3A%2F%2Fads.yieldmo.com%2Fv000%2Fsync%3Fpn_id%3Dunl%26id%3D%5BRX_UUID%5D" style="display: none;" border="0" height="1" width="1">.<img src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=yieldmo&ttd_tpi=1&ttd_puid=xEF_FccQQYcYfrS0Tdmx" style="display: none;" border="0" height="1" width="1">.<img src="https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c" style="display: none;" border="0" height="1" width="1">.<img src="https://bh.contextweb.com/bh/rtset?pid=561118&ev=1&rurl=https%3a%2f%2fads.yieldmo.com/v000/sync?userid=%%VGUID%%&pn_id=pp&us_privacy=&gdpr=0&gdpr_consent=&gpp=&gpp_sid=" style="display: none;" border="0" height="1" width="1">.<img src="https://wt.rqtrk.eu?pid=fc4e1fcf-7b7a-41b5-

Chrome Cache Entry: 1172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53867)
Category:	downloaded
Size (bytes):	55134
Entropy (8bit):	5.702232148791689
Encrypted:	false
SSDEEP:	768:jEiPAeoa9vySust0GTzOwaosKf/1gR3ARHNL5vsaeHJ9ibZlPqy5iHMfa+:jEirvmkOnosyORwRr0J9Uq2
MD5:	8B0CCE3B1EBF7A94348320551F0093EF
SHA1:	433867B75985AACAF92CA2AC1F278174509E6076
SHA-256:	F99ACB7AFF3429A4A5E4B1F93826E76461EEEB22D26F7B511AEC1AC4656752C3
SHA-512:	972868D461F9B39F68D87335682680F1BD51F5D9B51E65E41F9A4757678653DFF870E580A92C5973757022C6DD1C9F8B1E613267C6E96F045989FBCDA22B1791
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function F(O){return O}var T=function(O,n,C,V,w,E,x,h,m,r,q,R){for(q=80,r=95;;)try{if(q==13)break;else{if(q==91)return h;if(q==79)return r=95,h;q==V?q=l.console?8:79:q==8?(l.console[E](R.message),q=79):q==19?(r=95,q=V):q==80?(m=l.trustedTypes,h=w,q=O):q==C?(r=n,h=m.createPolicy(x,{createHTML:W,createScript:W,createScriptURL:W}),q=79):q==O&&(q=m&&m.createPolicy?C:91)}}catch(e){if(r==95)throw e;r==n&&(R=e,q=19)}},l=this\|\|self,W=function(O){return F.call(this,O)};(0,eval)(function(O,n){return(n=T(7,32,61,62,null,"error","bg"))&&O.eval(n.createScript("1"))===1?function(C){return n.createScript(C)}:function(C){return""+C}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJza

Chrome Cache Entry: 1173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	355141
Entropy (8bit):	5.286400238598788
Encrypted:	false
SSDEEP:	6144:HgbA28O5RNS2h4D2PU0l1dCmJX50n3YUCcNL:HgbZZPNS2h4D2Pb1Imp5ICcJ
MD5:	7E51AA38DB51FCEB0AFB5B4671F303D3
SHA1:	A4EAFDAE09AEC82AD158DDBAEB57F537D97E8DBD
SHA-256:	9C234A39335C68EFA876173F1AF885A07EB982FDE169E3627C70956BA0088313
SHA-512:	BEF6CED66BCB754A3C05D9C86D432041159C01A6A250D2EA23402F6C24504C0C10C1916FB5CA4886C66D90E3C581D93A3CCFF4960EF97B1E190416E50011910A
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.1212.711 - 2024-12-12 07:11:37 /.!function(){"use strict";var n=function(t,i){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(n,t){n.__proto__=t}\|\|function(n,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i])},n(t,i)};function t(t,i){if("function"!=typeof i&&null!==i)throw new TypeError("Class extends value "+String(i)+" is not a constructor or null");function e(){this.constructor=t}n(t,i),t.prototype=null===i?Object.create(i):(e.prototype=i.prototype,new e)}var i=function(){return i=Object.assign\|\|function(n){for(var t,i=1,e=arguments.length;i<e;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(n[r]=t[r]);return n},i.apply(this,arguments)};function e(n,t){var i={};for(var e in n)Object.prototype.hasOwnProperty.call(n,e)&&t.indexOf(e)<0&&(i[e]=n[e]);if(null!=n&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(e=Object.getOwnPropertySymbols(n);r<e

Chrome Cache Entry: 1174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563), with no line terminators
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	5.101503777856484
Encrypted:	false
SSDEEP:	12:2JqxHVKm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2Jxfm8uVCxwgxkHEZ1VZflok
MD5:	0217022163599E2C9264464D791936C7
SHA1:	26C6DF51A35065FBD0EBBAE9EFE7C43BDB42051B
SHA-256:	14A6AD6C4E525C583315699125B49A9BAA4F84BB7D75387B3EA33ADADEBCF94C
SHA-512:	6C862A0C57EDD28B9E34D0D8B76566EB151482997E7D365D5598C7E8FADFAE6DE78FCD24B8ABD59B2127695912B6C9ACD49EDF95D827DEFBAC3CE2639765841D
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/6b4befd3-bb9d-413d-bf7b-146588adacea
Preview:	(function () {try {const accountId = "6b4befd3-bb9d-413d-bf7b-146588adacea";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 1175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1966
Entropy (8bit):	7.905484607556819
Encrypted:	false
SSDEEP:	48:MgDcMjuHqqZYL1RtgGjYvEMgWyHFpryHYz0vZ8Cgzo:fyZ6ayZWyH2tGpo
MD5:	BF069D3DD611DB2F9828F2547647B47F
SHA1:	6EAF309B175BBD60FE97ADAE90E6A51E38E672F1
SHA-256:	9CA6483894D547454BC163890210E0300A7D72EF8FF12C05A35DD7C90464ADE6
SHA-512:	EA37CECD55430D8916A778E6BFAE75B117941DDCAC5B995680C638A6C42A4742F12DF508C6DAA4255F34AAFB6419215F952F463ED1CF195B51B9454E20F08751
Malicious:	false
Reputation:	low
Preview:	.<...._.....[=.GJ.e<2..9..I..A.m...(.j-...FG.T......#...,\..@. T...x".B..................b0...H.&...(c$&..y.Z}>8z#..cY./C.p..!.D.t...v......CB.t.........F.t..e...qv[...........S..a..d.....v...y9B.O..y&....Z..N>......!.Ws.1...+..\|......\..}.[+ta\.q..UVv...d.rd.ss._n:..E........&.w...L.-...-].<..-....9:.......]..1...e..=...'.]g9.+[.3.".xiB.....ac.[.5..3.......o\|V.ZG.l<V..~...y.O._..2....0..y}~m.......<.H...H..x......5.+..S9.\..u..9..9~.1.{>1W..lH.!H..$v.X...s....3.-d8....b<.N...*!PQ.x.N`$Z.#..x-Y8..Y9....rx\.....%...h?y...........p...4je....m....hY....5X..A#g.....1.-E.<..p....tfO.).T..0!g..g...U....tN....)T.j@.PO.(....@.....H.q...J.Id..()-.xu.......<@'M#.,.2....T).7.......;........"...AsTi....%hl.....'..I...R.Y.....U......1X...^..`.1.A`5o1.,<...n...y..N....x.Y....f..m..Pi-w.>...un........Q.N..7....v..w.n.........m...Oi"[.d3.......UA...}...9.....SCM.O....~).}.NYB..Vp8O.P....?u.x.`p&.EeG...0n<....n.v...t....`..7.h@.Q..3...?..c.4..;

Chrome Cache Entry: 1176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	2115
Entropy (8bit):	7.912222756608751
Encrypted:	false
SSDEEP:	48:0J+kl1Aj6aj6AQZJR7CQgL02f8k8l4ZkAcfCKD83rP:00EAOfnFNgL07k4l7SrP
MD5:	8D3A56DEBC5630F18F6A1360423A5AC2
SHA1:	57D0738CD35D114DF3EBAF0B64C7FED33DCE55F1
SHA-256:	BE926719092E9BE5ED203535FCB0B0C2A3AB56E5F83F9142F7F62BE28ECE17AD
SHA-512:	C74531B641039803AF81CB0E6CB373F0E10C2D60525B6F87044709357CD6CA05145EFCF026CBC62DA138C079EAE063AE4CCB3EFABDFB63233D31AA44B1D272AB
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/service-worker.js
Preview:	.....2s...j4.K...&{:.0..........N..)e..k.RW~..e.,Cm.Yi..e.f.O......A..]...t1..\.8...~W.....1\|^#L..;...fO..}.H.z^_.0.`.dl.>..:o..)!.$..v.].N:}.;.V......il..OA...3(.I`.h..^...)..U..6Q/.c$...W..dEA....Y.8w.h..Um`}...Kq..4p./.2@...g.D....P%.A.......#E.."..f@.......g]!`$,V....4\LA...u.o....j....\|...l..1.X...+..2aSx......\...h~~....d...>....r6Z,..f...f...\|5..p....,F...xH..p[ME.i...?\..N.-.UE9....0L.7..?.......;d.=,j.H....O..v!.A..jkk.....z./.{ex.C9...;...xu...Hp.i..6.?m..x..]\.S......;.6.6..............gB..uW.4;.\|!U.?..c(&..bW.......F5....Url.g..d.a.Ql.U)....tR.P .....9k0%...$q.....m.b.\.G././..P._.......:..-,...XC..$V7..........a&ubV..$..pi..E.D,.V....N..r....F.A...:S..X.5.;o2... t..)E.....a+p..).wc).u(.~...Q.i .$.@Z&n......J......=..p.W.f....lgj.]..M...bO.JQw.80{...T3.G..xq.9........q0g...c.....S.5r.f".Z.y.G..bW.%k...*e........V5+I!P.m+......p....`.vE...R.lF.....}g..b....g..@...Z.Z.,7....I..:t....l.8g.H........^.`JSP6....:

Chrome Cache Entry: 1177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52990)
Category:	downloaded
Size (bytes):	53044
Entropy (8bit):	5.438374620694402
Encrypted:	false
SSDEEP:	768:Hcrbt0v6S3UbiINuGAIA0XieVpeB6ELQ1GHaLi9:HoBmM9e4E01GHa29
MD5:	0B6AA3AA07869D5163C8D489F7C66256
SHA1:	BD32C24DFC6C71AE54BF2E6473AD61FA6F81BE3B
SHA-256:	3D649C0B3E87FD6ABCB983656A0A1B3923A2A59885C3A30538641FD4F7126CBD
SHA-512:	D754CB423718F3BC335081D41A88386B58E2EB523635BD15773B43495064B52B0FBB9265DA8DD19E47A97CFAA1FABD40C73C36F9684F6C44F2A18E6502F44E88
Malicious:	false
Reputation:	low
URL:	https://acdn.adnxs.com/dmp/async_usersync.html
Preview:	<!DOCTYPE html>.<html>.<head>.</head>.<body>.<script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=function(t,e,n){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},a.t=function(t,e){if(1&e&&(t=a(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)a.d(n,i,function(e){return t[e]}.bind(null,i));return n},a.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return a.d(e,"a",e),e},a.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},a.p="./",a(a.s=114)}({1:functi

Chrome Cache Entry: 1178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1306
Entropy (8bit):	7.8542148703794314
Encrypted:	false
SSDEEP:	24:kYn0ByMI4IodMkj2Fr9szRDUIMirUmHJbRIBEEWgyTN7Y3Wbq+uUb:R4Rax3sNw1iwmxeIth7qWZuUb
MD5:	F0C04D3F68CD42F42FB828F1815BB41F
SHA1:	8A779333B68BA883CA0F749140372A228D72AAD9
SHA-256:	05AE99D41511A0BEBCCB77DACBABB0458C94014E9E95BD786C81C69AA13DE35B
SHA-512:	F8CA701E516954627C01C85A3EA0D7CD51351BE9A3248EB48B050CC963E5736863C7873F5989B79674B6DE1BDB758D6E5E5656C307E098272C264139CC353B5D
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js
Preview:	......u....\|....V..t;{...5._........kF.6.LHD.muq.~..sDu...81M..D...........kuD.>.%..P..<.1.h.[.Ys.\|\..v...k.#.v)k0.........6ND.P.3\..'...h./... 8?.k..7J..<..>rK...t...@....FE].......2v.5a.!.s.....Y.1.Tg9@1.k.N..{....Y.>..XK)z.ev..u.....`"......i.L..kAt...!0v.X@.E>.i._...JO.Qo#T...+.xt=Z(.....`.mj......o.N.U..J{VlU...U ....-..k.I;[.^....?.\|.;A.}.:...m.#...: .t..Ka.y....X.......]....O.. R\.!....W.k(c....j..z.0..{##..9.N^..W..9.%0P."!:.....6......:....g...O7..ot0....~&.L..Y....N.,M.3....y.y.y....\..%....\.......s...f..g..g...+y.....uHxY_..'v......s.nI......f.e..;...b.y....b......[6 ....../.......Zn.w....\|....k..6.sw.fM......r.........p#N'nh.a?Ne].Z.....fB.....2..$._$c..T>...b$f.K.S..*."...j.M.d..Y..W.O...i.........\|..;....\|.l.. ....G..0..KSQSD..X....D._d...s..1..\..u,b4..a.7.:....8.[}8.K.!..@DG.}.ce......P.A.%..X.....\M...Y+QH.a....@<...PEy...i..2#./$).~..W.A.LG..k...".dz.m.].......X..d.E5.MT....m......'GX-e..Z.DI..PV.......#.8?;r.Sx

Chrome Cache Entry: 1179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	521
Entropy (8bit):	7.562298465956618
Encrypted:	false
SSDEEP:	12:/Un6xdH4FCv/7m8iv4Z9XJlgfbUb2rDncDVgbpwJD+RL3N:/UGHYIi8ivoXJCfb7/yomJDGL9
MD5:	419A9AA35472017EAC4908F2B6CE8555
SHA1:	19C921AD4C7C2F4BC460E5E959981A02009773D4
SHA-256:	92FC9D544F61D6AFBF1354B7FC1026E1738553B36405A03D00C420EC8280B79E
SHA-512:	E37D0F9B5C35DA38D388364C73E1D8FFF035D5BA3DA02EEE5D11EA7705658C39B4F11EC398AA58E593B618A94E2B4A512D572324527C28C0372706FD3310B222
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/polyfills.js
Preview:	......=..k.'.9U.T..iI...r.....G.(......e..m."...s.k.2a'6..=......X....0..,T...1..D.?i.i....bk.u..6........K0n.....X.i w.7A.NP?".......w.b.+.tP..BC}..(..y..........h.qa$. K.8q....8.....c.$...920f.k$f.".........6....*.C..mH%....E!Y...&.eD.o.7 x........2.Av.. .a~.m1_...n.W...<`.l.-..'...+(..W.q/P.d...ue1.{c.tYw2...o..p...............g.W.`....:..as..5Q....#B.Tg.O.......A.......~..=X.......Wi....dL....$.x.....-.....y..=3...8..T)B............].A.-..R........QO.R.....U..~......A;B.M.~f.

Chrome Cache Entry: 1180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	285528
Entropy (8bit):	5.536126998056567
Encrypted:	false
SSDEEP:	6144:niIlBIc4CfOV2E7iIbPTBKdxjUNCjZCwvkiIlBIf1WtCb:niIlBIc4CGVX7iIbPTBKdmNCjkwvkiIG
MD5:	B01E6E1A4CFD77353CE79CBB89B8DE8F
SHA1:	EDED8D170AACC7561629AC0FD404EEC0819CFCE3
SHA-256:	B16B8C97C0572BC65E4B2A17D9D183209A42737E0C4CFB649212358CA2F6064C
SHA-512:	28137ABC1691FFD9367B9DA02B217559136D83757D695B594EB5DDC7D6A8CCE4223BCF3AC2FA21AF0E7D9F269F97543125988A6C4335C6DBC8D5B10456DF2305
Malicious:	false
Reputation:	low
URL:	https://ats-wrapper.privacymanager.io/ats-modules/0a5e590a-af2a-4b82-aa7b-f4158e626809/ats.js
Preview:	!function(){var e={781:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.checkGppCaliforniaConsent=void 0;var r=n(3230);t.checkGppCaliforniaConsent=e=>{const t={sectionId:"",consent:!1};return e&&(t.consent=!(1!==e.SaleOptOutNotice\|\|1!==e.SharingOptOutNotice\|\|0!==e.SensitiveDataLimitUseNotice&&1!==e.SensitiveDataLimitUseNotice\|\|2!==e.SaleOptOut\|\|2!==e.SharingOptOut\|\|"[0,0,0,0,0,0,0,0,0]"!==JSON.stringify(e.SensitiveDataProcessing)\|\|"[0,0]"!==JSON.stringify(e.KnownChildSensitiveDataConsents)\|\|0!==e.PersonalDataConsents&&2!==e.PersonalDataConsents\|\|!1!=!!e.Gpc),t.sectionId=r.GPP_SECTION_IDS.CALIFORNIA),t}},2988:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.checkGppColoradoConsent=void 0;var r=n(3230);t.checkGppColoradoConsent=e=>{const t={sectionId:"",consent:!1};return e&&(t.consent=1===e.SharingNotice&&1===e.SaleOptOutNotice&&1===e.TargetedAdvertisingOptOutNotice&&2===e.SaleOptOut&&2===e.TargetedAdvertisingOptOut&&"[0,0,0,

Chrome Cache Entry: 1181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2920), with no line terminators
Category:	downloaded
Size (bytes):	2920
Entropy (8bit):	5.278382327824268
Encrypted:	false
SSDEEP:	48:0GoPdhpMzANg4+rItkVsjxe3iRfLIzzL9qMEqK/VEjbJtbmsrIonbl8Q6LBI0uBP:poPTdfbiVsjgiRfL2f9sqK/VEjiOnF6K
MD5:	653708AD1BBAE1579927B6391B2A28F3
SHA1:	4261E415C23DFD9D925F071737FB0D236F856F4E
SHA-256:	82D2DC44AAE1EDA52ABC17AFD30C6031B7175C13EE6955410164C66AE755ADFB
SHA-512:	4092D81BEEAADB7ECA73EE279AF0A5289CAF850253464BAA4F7695C49670C05F7E89630807A2C41D3D9CAD75D95A60719FDB1A16265537153952774F7450873C
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/um/ixmatch.html
Preview:	<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;

Chrome Cache Entry: 1182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	4326
Entropy (8bit):	7.954826079109193
Encrypted:	false
SSDEEP:	96:reZFutntF2yh26WzMNWACEKPldsh3+f6YTZAVl5z2:6ZcW6WoO5MZA6YTZB
MD5:	86E85A4B6028D4D80B10218D5467E85F
SHA1:	145C6E7AABD470E17090CC19D904D6915BD35D9F
SHA-256:	4B266C436094C34F13B8C8D3F3959851ACFFD67436487E3916E9B61FD5710320
SHA-512:	1D568D33AFA6B3E4DF83A131315FC68DC57424D146984C2806EB9FB585E8406C256CFBF867DBB355151D4509B040B00CA6D1802D771FB663355D4B840D576464
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/guidedtours/i18n.en_GB.js
Preview:	.PDT.z..!..~...........5!:eyC...nV4..4.....O.)Q. .=..RUK...5....Zr.....L....!YhC.O...el...b,.W.M...UZ.!E"..=T...\|6}{.=........EcM....J....fP...4..oV.r.=v..8.o....z....w7n.[.q.....w........v..j.f.'i..5.r.~K\|..e$.....'...ON.....d........x.AvA..:..#...5...B.o.e...G{0c..Gp...z..Q."..fi.\.V......(.P.4..=.[{......q..7..3.z..Q.C.nY.[.B....R..'....[.m.u...n..\|^1.....w7.U...f..$.7...6.40...b.........g...2..s.. ....s.......>...cd..g.(s..d.2$...T.m..0..F......p...wP%.g6#.w..Z....Op..C..Y....1n..`.R.Z#?n....!+E)..._h..Z...:C.".N._..J..%.}.\....RLT.?SP.....z....m.2......)9@.@z.F..ZY\|...I....E...).....&.....u......P."OC.2tG59....n...`.:/%,.E.LX.s5.9q..h..N..N...~.".L..j8N..$%.j.0DI.=.....T.P.>Q.J.KE. .8..9..IV....@.(.". .;.3x.t/.$@.u.~5.8Rd.2..Y...._Ve..~.^7..E.n.(g.j;.YR....Uv.t..Z...}.y;\|T.y...q.A .....#.C..4;.%..X.9\|L.U...m.....\..e........X...{....61s..:P<.i..d....OT8m_`vW..?.M.-F...o#$n....~......Pi.*Ux.=.h...y..\E.......b[[.,..

Chrome Cache Entry: 1183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 199 x 97, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9677
Entropy (8bit):	7.970815897911816
Encrypted:	false
SSDEEP:	192:GVd97ZFfQoDBbxIkFUD/QCEVlcTE85PlcBz6nH89KCCotHkXKp67mkz:KH7ZZDBbKYFHQcFca+x7Pz
MD5:	6E0F7AD31BF187E0D88FC5787573BA71
SHA1:	14E8B85CC32A01C8901E4AC0160582D29A45E9E6
SHA-256:	580EF6409E067A4EC4A427400C7D6216184869E2DA53343DF20753CC1F8A46CD
SHA-512:	A7078CAC9A5319904CB47E01A426EAE30A26D4AF5094438F41360396C280473B9C69748B7E7A603232DA9B6D0F7297FEFB04C434EB8098CC6F89F7183C44AB52
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
Preview:	.PNG........IHDR.......a.....U.E.....PLTE................................."""..................$$$...&&&.......................................(((.....................................................................999...........}}}......222///......EEE.....Z6)...ooo.................ZZZ..........{.y[**......R<....................................mU3&....................IJIK+............sF3....Q0#............xrqr.o}M8........ttt^;.............tV.jLBBB.Z@,,,.~`OOO==<mB0..........s.}s666e=-B%....mN.fJxJ6..h..d.pd.qUSST..~aA4444......z.gX.VB.............xogffbbdXWWzcV??>............u^^^.......tfs\PrVG.aEkNA&..........U<K5+8..0.............~.k];;;.......lll.mX........{k_.^LS=3HI1!.(..........yxx][:D-$..............miA...xjrcZeI;5:......:( ~vL.......i.sh..].......j.........".IDATx..ml.q..uw......\......N...,-....(..[_0}AR...1..QZ.m:...TB......!C:.)...../....v5.o}.._....?....k'..?....s..e...&'.....(..#.$....(..x.i.X!..g....5<D\.lp..0.a.5...z.....t.

Chrome Cache Entry: 1184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	2.8722910533148776
Encrypted:	false
SSDEEP:	24:suJa888888888888888888888888884JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJCJw:0yTTTTTTTTTTTTT0
MD5:	CD381052CCFFDB3FE5850050DCBDBE22
SHA1:	DFC774D0FAAA34C882B5C53380003E8D61CF2620
SHA-256:	C7919584D30AB90FE680A39E13CAA764D903E4C10F968BDA4D79FB30370DDA87
SHA-512:	837FE82E60095C14CDF7D858527919561092126202B851FF71122E3C0CAD81112BFDCA4189E6F5661178E2B0DC57B09E0E3F067CD43F7CBC1F230F60737672B1
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/favicon.ico
Preview:	...... .... .........(... ...@..... ..........................U...F...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...F...U...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<.................<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...G...................C...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<

Chrome Cache Entry: 1185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	24573
Entropy (8bit):	4.180357727668446
Encrypted:	false
SSDEEP:	384:BRS9Bqoq/onyBpIeggNSNreqfBWddUJtTfw:BRS9BqoTnkSNakIAtTfw
MD5:	E52201E96AF18DD02C85EB627C843491
SHA1:	5BCDD1480B9BEBCDDB0D82083BDF03A7435D59A1
SHA-256:	397452D9F6A2EA6A2135B45C9E40139C68AC6661F3BAB4413E7299586CCB408A
SHA-512:	2DDEA7E1C2127A0B7A2F19764A1AC1CFD26E2D3C3189647FA3BB987FFD1107F30A9BF219D24726047FE84EE72802B515F6290CEFBA02DF1D854C70F0D3A37D8C
Malicious:	false
Reputation:	low
Preview:	/!. Shim for MutationObserver interface. * Author: Graeme Yeates (github.com/megawac). * Repository: https://github.com/megawac/MutationObserver.js. * License: WTFPL V2, 2004 (wtfpl.net).. * Though credit and staring the repo will make me feel pretty, you can modify and redistribute as you please.. * Attempts to follow spec (http:// www.w3.org/TR/dom/#mutation-observers) as closely as possible for native javascript. * See https://github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp for current webkit source c++ implementation. /../. prefix bugs:. - https://bugs.webkit.org/show_bug.cgi?id=85161. - https://bugzilla.mozilla.org/show_bug.cgi?id=749920. * Don't use WebKitMutationObserver as Safari (6.0.5-6.1) use a buggy implementation./.window.MutationObserver = window.MutationObserver \|\| (function(undefined) {. "use strict";. /. @param {function(Array.<MutationRecord>, MutationObserver)} listener. * @constructor. */. function

Chrome Cache Entry: 1186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	15719
Entropy (8bit):	4.6676143215770685
Encrypted:	false
SSDEEP:	384:W+1SbYbddF3bbO0ELZZRZpq0hPvF6b1yX:W+1SbYbddFLilTZpq0VF6b1M
MD5:	214DDE43CEBF15418CDCC76F9677EE46
SHA1:	6E93ACEBFA271D3FCE9626034D03F942D3B628A8
SHA-256:	CFBF67A85C039719090CFF2C4718DE99203B1CED78CFB8FAE5F7240D2F1570B7
SHA-512:	129ED41723FA08403F686DFCCABCF4F2AAB7DDABD0C1802CE52012EA88BF2CB1BC284019179749597A10ACDB4F02B154E89249A14421329EF28B30506A1A8EE8
Malicious:	false
Reputation:	low
Preview:	jQuery(function($) {.. // Mobile sidebars. $.fn.expandableSidebar = function(expandedClass) {. var $me = this;.. $me.on('click', function() {. if(!$me.hasClass(expandedClass)) {. $me.addClass(expandedClass);. } else {. $me.removeClass(expandedClass);. }. });. }.. // Interval loop. $.fn.intervalLoop = function(condition, action, duration, limit) {. var counter = 0;. var looper = setInterval(function(){. if (counter >= limit \|\| $.fn.checkIfElementExists(condition)) {. clearInterval(looper);. } else {. action();. counter++;. }. }, duration);.. if (!condition) action();. }.. // Check if element exists. $.fn.checkIfElementExists = function(selector) {. return $(selector).length;. }.. $.fn.hideDropdowns = function(dropdownClass) {. this. .removeClass(dropdownClass). .find('.wsite-menu-wrap'). .revealer('hide'). .find('.' + dropdownClass). .removeClass(dropdownClass);

Chrome Cache Entry: 1187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23000
Entropy (8bit):	6.228959238644936
Encrypted:	false
SSDEEP:	384:3gop5wAoE22R2GJONvjF22R2GJONvjxbpR/SBKoEmKRKoEql6EAvwaM3FIQIoyKy:w6Rop2IGUjQ2IGUjxbpR/eKBKKl6EOwy
MD5:	E6B94E6E1F34EEA67502F16D4C3044C4
SHA1:	4D89ACDDCF8AC241F6AC9304624565B6A6F51C40
SHA-256:	D20F9A8AE0B83831011A4D114724EEA6730E608F31B20BA1A6FC508A5271D93F
SHA-512:	3F860587C1ABF8A41083F3762404994EC1D4089705D098349C2D92235A550B23446443CB64F329F4515DE326F17E1973407E08C8370ADDD09D99479B38E43719
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2887700627638155&correlator=3060502384863617&eid=31089671%2C31089200%2C31089528%2C83321072%2C31089253&output=ldjh&gdfp_req=1&vrg=202501030302&ptt=17&impl=fifs&gdpr=0&iu_parts=22786333977%2Capps.talktalk.co.uk_displaystandard_728x90_login_top&enc_prev_ius=%2F0%2F1&prev_iu_szs=728x90%7C468x60%7C300x50%7C300x100%7C320x50&ifi=1&didk=477881799&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1736637144880&lmt=1736637144&adxs=276&adys=98&biw=1280&bih=907&isw=728&ish=90&scr_x=0&scr_y=0&btvi=0&ucis=rfutr46gcbf6&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=3&nhd=1&url=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&ref=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&top=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&vis=1&psz=728x-1&msz=728x-1&fws=256&ohw=0&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1736637138929&idt=5922&prev_scp=amznbid%3D1%26amznp%3D1%26hb_bidder%3Dix%26hb_adid%3D28a3eb3e8d436a%26hb_pb%3D0.22%26hb_size%3D728x90%26hb_source%3Dclient%26hb_format%3Dbanner%26hb_adomain%3Ddell.com%26hb_dsp%3D81%26hb_crid%3D33959350&cust_params=amznbid%3D0%26amznp%3D0&adks=3161023586&frm=23&eoidce=1&td=1&egid=15786
Preview:	{"/22786333977/apps.talktalk.co.uk_displaystandard_728x90_login_top":["html",0,null,null,1,90,728,0,1,null,null,1,1,[["ID=542897d5fceec5fc:T=1736637146:RT=1736637146:S=ALNI_MY-TkFkYVrsWG16LpUfXuGCGYl1WA",1770333146,"/","talktalk.co.uk",1],["UID=00000fb452d3c2af:T=1736637146:RT=1736637146:S=ALNI_MYXhJw5i3EOtXraGAp8JOG0socX3w",1770333146,"/","talktalk.co.uk",2]],[138402836221],[6094372239],[5206671035],[3072062848],null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CKrY2MHl7ooDFe6HgwcdzlQokA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"rfutr46gcbf6",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=77afa676f0a02b71:T=1736637146:RT=1736637146:S=AA-AfjYoiovs5MhOgwO8Q-epS5CC",1752189146,"/","talktalk.co.uk"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20250108';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div

Chrome Cache Entry: 1188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	160255
Entropy (8bit):	5.197948179602433
Encrypted:	false
SSDEEP:	768:vCWTAyC3pWWfxuWmeuUXCoA+eACrJQCrJFdCrJxfISYC5n3xSEeX13TAfENtzRC4:PTA3Ehjm/nteX13TAfetzArDBVvA5
MD5:	EA06A4A0A473E3527170A161BF999F4D
SHA1:	AA55CE56F16D99D3ACF157CFFEFF80716FA8C1E3
SHA-256:	A9D71756522E7AE94B93A30C45FB51FA255D23144E4FF6E94834F6611C050291
SHA-512:	0F7BED3BC6D935860982B99478385D9079F1E3E1B4977ADA2433DAD27C7B5848BEA51D932C161EA89D98DBE7605A0E675A67FE9F255048C85369027F37315644
Malicious:	false
Reputation:	low
Preview:	(window._sp_wp_jsonp=window._sp_wp_jsonp\|\|[]).push([[4,3],{183:function(t,e,r){"use strict";r.r(e),r.d(e,"default",(function(){return P}));r(22),r(27),r(55),r(28),r(29),r(72),r(137),r(102),r(104),r(52),r(50),r(51),r(30),r(31),r(32),r(189),r(190),r(33),r(70),r(53),r(34),r(54),r(56),r(69),r(35),r(73);var n=r(0),o=r(14),i=r(60),u=r(195),a=r(202),c=r(201),s=null,f=r(148);function l(t){return(l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function p(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function y(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?p(Object(r),!0).forEach((function(e){S(t,e,r[e])})):Object.getOwnPropertyDescriptors

Chrome Cache Entry: 1189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=20&gdpr=0&gdpr_consent=&gpp=&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	514
Entropy (8bit):	7.570620405658771
Encrypted:	false
SSDEEP:	12:AF1LZWB2RL/aFafS7zsoq+PYj5Okcpr7VcEJF:A7LZWIpawS3soej5bcpruEr
MD5:	198DAD1A3639F92978DFAAE702DCF951
SHA1:	FA1DF9FFA3105DFDB1FD4BF4FAB539D4B500C35B
SHA-256:	CF772EC025CE7522E70CF6131127E09D18D0A5315E7538BB4462CE933579D84E
SHA-512:	E8D3742C7E90AEB9A6721F551D92414D941DF49F0D11CD0BAEA33AF0112826715A23D183A37F56B278C12005F01C4D8951DDD31C931847CB0C54B95871CDE096
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/preload-helper.js
Preview:	....d5....du......l.....b..C*Y...._.u.C.QwG.no...3..~o.s....!..........XW.G.V4u).....(//...U.:3$.+=.T.Iv&Gk..8.....f^.!..l........\P...K..e1v..g....Gh..;.Z#.r^=.........RX....qe....k......'f....m7.4k.C.....vh..MG.l.b..@V`.#.j&.n.3...AS.9..I>.t...P......E.....I.~.=.w&......&p..<.8...(.>..D...Z.T.....3....#Y..Xk$.+....X...=RA....3@..\|4y..A.M$....zK5..Q.RXqY.........r.....&L@.._D.X..W...... ......Y.[....YY.H+..}C.8.YV...........<.#c...)&.tw)..!..!..%.k+.cHezV6.?..:8.V9<..\.qt...+.FZ...J2.....

Chrome Cache Entry: 1191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13080)
Category:	downloaded
Size (bytes):	13081
Entropy (8bit):	4.748626351657001
Encrypted:	false
SSDEEP:	192:ElRWcfub2DJmUDmDrW4xH3gSJJbfebOQzamKy:z3gSJJbfebOQzamKy
MD5:	F7F071FB64B08BDE1DA10B6A5BC4C79C
SHA1:	B0422E3D6B73618BA3F0D0CA402680C838507233
SHA-256:	15C72BBDA39BE9070265462B50D78A241DB22AAE6CA37776A7E124C4D5AF850C
SHA-512:	C19425E163DA5963E5EC59CD5F343B9374B451D71DC6A4AB3CAEBC321A752FF8ABF9129C93BDD812E5869813C5ACCE365BB879ED69AC15B773113283D6EF155D
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/css/social-icons.css?buildtime=1736370530
Preview:	@font-face{font-family:"wsocial";src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1736367064343);src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1736367064343#iefix) format("embedded-opentype"),url(//cdn2.editmysite.com/fonts/wSocial/wsocial.woff?ts=1736367064343) format("woff"),url(//cdn2.editmysite.com/fonts/wSocial/wsocial.ttf?ts=1736367064343) format("truetype"),url(//cdn2.editmysite.com/fonts/wSocial/wsocial.svg?ts=1736367064343#wsocial) format("svg");font-weight:normal;font-style:normal}.wsite-social-dribbble:before{content:"\e60c"}.wsite-com-product-social-dribbble:before{content:"\e60c"}.wsite-social-color .wsite-social-dribbble:before{content:"\e60c";color:#f077a0}.wsite-social-square .wsite-social-dribbble,.wsite-social-square.wsite-social-dribbble{background-color:#f077a0}.wsite-social-square .wsite-social-dribbble:after,.wsite-social-square.wsite-social-dribbble:after{content:"\e60c";color:#ffffff}.wsite-social-mail:before{content:"\e603"}.wsite-com-pro

Chrome Cache Entry: 1192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?gdpr=0
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15719
Entropy (8bit):	4.6676143215770685
Encrypted:	false
SSDEEP:	384:W+1SbYbddF3bbO0ELZZRZpq0hPvF6b1yX:W+1SbYbddFLilTZpq0VF6b1M
MD5:	214DDE43CEBF15418CDCC76F9677EE46
SHA1:	6E93ACEBFA271D3FCE9626034D03F942D3B628A8
SHA-256:	CFBF67A85C039719090CFF2C4718DE99203B1CED78CFB8FAE5F7240D2F1570B7
SHA-512:	129ED41723FA08403F686DFCCABCF4F2AAB7DDABD0C1802CE52012EA88BF2CB1BC284019179749597A10ACDB4F02B154E89249A14421329EF28B30506A1A8EE8
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/files/theme/custom-1.js?1736412329
Preview:	jQuery(function($) {.. // Mobile sidebars. $.fn.expandableSidebar = function(expandedClass) {. var $me = this;.. $me.on('click', function() {. if(!$me.hasClass(expandedClass)) {. $me.addClass(expandedClass);. } else {. $me.removeClass(expandedClass);. }. });. }.. // Interval loop. $.fn.intervalLoop = function(condition, action, duration, limit) {. var counter = 0;. var looper = setInterval(function(){. if (counter >= limit \|\| $.fn.checkIfElementExists(condition)) {. clearInterval(looper);. } else {. action();. counter++;. }. }, duration);.. if (!condition) action();. }.. // Check if element exists. $.fn.checkIfElementExists = function(selector) {. return $(selector).length;. }.. $.fn.hideDropdowns = function(dropdownClass) {. this. .removeClass(dropdownClass). .find('.wsite-menu-wrap'). .revealer('hide'). .find('.' + dropdownClass). .removeClass(dropdownClass);

Chrome Cache Entry: 1194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Public Key
Category:	dropped
Size (bytes):	829488
Entropy (8bit):	7.999517088167417
Encrypted:	true
SSDEEP:	12288:gwVb8mNVSSP9sKqAbWYt2c9V8CNsQSGASEKV+8Fnyw6RfLVJ7hDf86uVhPbvpLtg:D77G18V90G/tnWfJTDf8Hn6
MD5:	4550B71B858D4449CC214C3C52A538DE
SHA1:	ECC7E4234C5FA2E1E2F30878E4F8748D72D4F7AB
SHA-256:	4DA29C2375D499734F46232AE4B0915325945B77F9970F407FD81488E978E698
SHA-512:	CC54E10AAE88C54D253AF34092A2A98EA6325EE308BA2EE4F97A9F31EBC94438FDBDBC5ED9E3EED20E5084A8D95EF33EA23D33CA436EE6837A0F73FC1AFFFF24
Malicious:	false
Reputation:	low
Preview:	.T,U)...a.......J....c.q....>........t...$]w]..7...f....... ...PUUUU.>.X....,..\|..<.\|..(...b..(...b..(...b..(...b..(...b..(...b..(...b..(...b..(.=.UX.#.{...z.....z....~.....$.S.+.i./JC.3.7....u....a8p...z.<......4...u./..b8t1..z.<.....6...Fu./..`8r%..z.<......5....u....c8v=..z.<.....7...&u.o.na8q+..z.<.....4...u....b8u7..z.<....6...fu....`8. ....<.....5.........c8.8....<....7.........a..,..........Z4....._.^b..2.........Z6...V.._..`..&..........Z5.........c..>.........Z7...6..?.>a..)...........4........b..5..........6...v....~`..#...........5........~c..;..........7.........ax./....\|.....:4...'....."x..0. ..1.0.0.(..1.8.M0.$.M1.4..0.,..1.<.-..".-..2...*....:.m..&.m..6.............c_.....t....P.9...t....X.9..Nt....T.9...t....\.9...t..].R.....t..].Z...nt....V.....t....^........=.Q.y......=.Y.y..^.....U.y........].y..>...}.S........}.[....~.....W.........._......a.Vw....'.N.G.$PA...:.....&.....A7.i..c.....+.B.\.n=.m....miAde..Ux

Chrome Cache Entry: 1195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	7.892002730123862
Encrypted:	false
SSDEEP:	48:lFogghBkofmJ4jEQEV4aN/OGQcC6bIKi6Z:HchBAGAQpagGDPbZi6Z
MD5:	8B38E1D4C92EFD9F83A2A0A76E668510
SHA1:	90CE3E1F46655EB85A8D6167B6D486D67F9B18FE
SHA-256:	5A328FA52B1893D5214A6EB11C604CF4422D35C0A155D32A5299B92F5B9944B8
SHA-512:	A6520C6B6554A54DD215ADF198137F38E3B4DE0CCF38972A3B6160AACB6942A33A43DADB6A8C62DC44D64BEB4ED2EC9F7BA39F1C4CE78D83C75EFDC45E379C3A
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/common-7ecc8b2c.css
Preview:	.w...Z.n>.. ...8..t.....A#..v.o...W....%....N"%ot.a;N..\..hL.(_..U....@.........4dA+.P./jv.]?.&.%...p.p..W...FRK...4=A"....s.m..a...}N....q,.@..NA...{f...U...].U,..5C...;..d...}..Z[....PP.mD.~8].?.....K$...`.&..:eep..}.R...r..P`.^...........o'....7...o\|.S.&/...y..#.;>&^.......i...H.^...%H'...}..`(.}..!.t'?...#._.....p.......K+.G...._....Z...D0])V..@m..Q,u.t..G.e.];..)[(..a...VP.i.U.J..P....Y......!.`..a5..?...&.k...h........X9.6...9..1H..Y..vh...9.1...J.a..R-..).l.F..>F9.Z.&u..1....j.6.}kf..2.AB..7..k..Mj4.C..N.f....3...f.S.,U2...O......4.Wh.jf..g.c.\|(..P...\|.n....}M...P.$.....tZ.RSD...25..+Q.Et.&23o..BZ......................c....R#.Gg.R.r...0~Y9..t.<v0......!..j%.Oq..m..9...+.^..,f.@_......:.p....~.G.....%;e...=...u.W......0...O.g-.#......Z..K.H....gA.K:.ykOj.....n..i.Yl.9.s."....@A2.{.....w...?.g..l..&..!Q_..?.c....FWfo..0....H....../.n...E....od..T.tX.\.@...)W.nW..\..]l........cq..f.5\Q..>...zF+.*n..:..).i.y.P.4...~.6,L

Chrome Cache Entry: 1196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 73, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2439
Entropy (8bit):	7.809290806755739
Encrypted:	false
SSDEEP:	48:i5MbYTn7ruuHkJVK1wAUc2zptwQ1U3t7ddSIT+gZFlI7Thc:i5McvrKvAUNzptwQ1rpelV
MD5:	6CDE551752C3DDF86B64DD5C0158FD13
SHA1:	B8C39ED9A617C68D52AD9893A7FE9409FA561C63
SHA-256:	CCFDE13123C12CE3F6BED6057742CE94960882A3C5B70C1C3B29C58CF170D748
SHA-512:	1E5EFBC5146B9C192A3C45CF69B8D2B693567E222A90E36084B673DD70656AEC2132A1FC812FAF6ABD1E264DD92ACF262C2E1BE87447BDF78AFEFB01E2B935C6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......I......<......PLTE.......N.Ip............Em. O.............$S.7a.............p.......Tx..........x........Go.k........q..#R....9d.}..Bj..........(V.......o..Aj.Sx......\..[~....>g............w..z..!P.d..............b...........\|..?h....4_.<f..............=f.t..6a....8c.....X.@h.u........8b.:d.......................3_.v......^.....e..i.....y....,Y.......1]....c.....Ns.r......Z.n..0\....]......."Q.^..Ot..............O................5`........Rw....Ou.......2^........X\|....Jq.......Z}..../[........-Z....Ck....m..`..Kq.......Dl.f..Lr.......g........Ms..............&T.@i.h.......%T.j..)W.........Y}....................'U.Ho.......{......)s}.....IDATx...YO.Q....X.......R\p.Wp.A......s.13-w.......7g...$..?...l......`..`..`.@..@................`..`..`.@..@................`..`..`.@..@.......{...Q.......C...=...>.k.....&O....<......i..h.//..N]....i.lT\.....L...P..\|...+....r.b..6......z..7....8mb).n...h.).n..K..[Q1

Chrome Cache Entry: 1197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	12690
Entropy (8bit):	7.982448252669294
Encrypted:	false
SSDEEP:	384:977Qb4yVEF1zSVJsZgOlc0oKOxvt0kW/qP:Qw1zSsjboPxv2kZP
MD5:	4B4F11FFB799FDF495AA170C0F0CD69A
SHA1:	9C6BC9EB21051E11449D3CB462B459A9C684CCAA
SHA-256:	32C53E77F6B57ACE934BB663058B99D0B56A4499CE45869D488BF5FC76B89B55
SHA-512:	118E37B105EB6A71522F1E012D5E2B9207BCEB9F55877DA8EC042D4403E092010991C44BCD7CB24B97430D0CD9505163B65F05367BBD24238AC85C39F110EFA2
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/manifests
Preview:	[.\.E.q@@...6.L0..).`.. ._...C.Q.oq11(.........L..<W}L..29c.....{.VU.y..UL....p....w.\|@9.3.8.u.4..S.'";.Rc....L....<...K...k..A.....9lZ.&wH..H."..G.Z...m.:(a.D...n\|.!..-..--..Z%&rA.._c.~...d.....7...3c!K?uuU.k$}.i.r.....n..5O.....M.....?...? ff.......u.....M.....L.......B..$.....=.2.B.d......i....HB\|....._.../;Iv&Qx .j>......:...%.......Y..9......uM..{..".p..zlu....I.....K......<..PR{]25.w.O/q.M.z]=.!....e.v...S.ag.8.E.o..M..DU.Az..\|.E^ER.#..1.7....S8.,..H.+.H\|'.e....q..R=f4z...vNRVv....lj.=..k.....g.R35U...bw^..DZ.y.W.G........{.'......2.< .Q..=U?...r.......@+......`?.9L&.S.....2.V...{.<.y?.J..z....,.R.pX...r+...t....[.....s.4KfJC.$Y.@Q.z..0Y7.b...!..u...KI....H.Tb....\...X.!4..j.He'.z...`.G....(...Q,.jp6(f....0 .XU ..hUm.....n...;..>...nPv'...3..ea...2....x.6........\|C....;....b....I......eP9g...v5.s...s.a.j."Y.e.^j..O..$...M..{.C....P.r...}.(...h..}..:..i...<m.N6..._...a.K.[6...0...)...N.......}\b..T.cc&.).`."HK.L{..P..J.#..f.~....$

Chrome Cache Entry: 1198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	dropped
Size (bytes):	103
Entropy (8bit):	4.367895106380381
Encrypted:	false
SSDEEP:	3:qVZxgROb8PtsRb0qHXbZ6iMqHPtsRb0G34:qzxUk8GRHX96iHGtI
MD5:	44971DF1347519C437F0020F8E647BE0
SHA1:	2CF3C3073AD199D59C44DDB81A8E0F848F24B570
SHA-256:	43994A0BF018FD3A37038AC2EA783DF3BB332C894E1B4E9BA5E2D01B467D9107
SHA-512:	0DB2E27A8D3A67563B69F980AA9B8F5F11C744E9A982BFE8D6D2D753855113F383437CAAEE7733D8ABF7A4677C8CF39BE89199C5E54EC95A0BF79907EC74DD7C
Malicious:	false
Reputation:	low
Preview:	<html><head><title>404 Object Not Found</title></head><body><h1>404 Object Not Found</h1></body></html>

Chrome Cache Entry: 1199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31759)
Category:	downloaded
Size (bytes):	110049
Entropy (8bit):	5.608693703636278
Encrypted:	false
SSDEEP:	1536:tMo7S21/wJnFDIYDwyfkv3mwfM8q2tIXmjTNCoJ+0otPqrCQS0:mox1/w8YPwfMqtIoKQS0
MD5:	BB9B25FEDC4BD81EC2E3BFFA8DDA1E19
SHA1:	1B89E2578F97FB38F78879F0F9CC907EFC2DB4FC
SHA-256:	BCAC2F00BF81A839EC20C65BC2BFD947C1FC294C0AF4F729B5395DB93B0470BF
SHA-512:	32ADBE8909CBF0BEE399D653CFB2E063B1489C79D6DE20F14702D717CBFAE757551C96FBF3E5300954B47115D4D64C0C260478BDA5D53092137E0601DE3624E5
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},u=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 1200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	8968
Entropy (8bit):	7.978785192260295
Encrypted:	false
SSDEEP:	192:DmoxnpxCIiyVkJFDgkjX3o4T4Qtdg7bqpUGd:qeTDGDbW7bIf
MD5:	3A0C118A3600FB22399704FC34243D5F
SHA1:	CACFD757859235CD7930A17EE03FAAF1E39A07C7
SHA-256:	026F0837F19F014D7008E871B3DF3D0C2A72093733D745B341E7E57EDA027022
SHA-512:	A9C3BB8EAAFBEF11A9B28BCE0E3AC5E310897EB8DDA17DE5B56192AE8A26BAD599F4E4E452C02FAA09EDCB5014956FC6D52A2600E30C00081665043AF6029CF0
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/guard/i18n.en_GB.js
Preview:	...D..!@.2....j...Mu.;.=..T..r.9.T.. .Q.....?6.....of.t2>I}...Tuo=...q...8.....r........]Z.....)K~.....$.}...Z..$mgn..Q...n.h}>o.K2..,.*j..w.....?..}.fF...Fi.M..Q\|.....u/.k.Y....(..8..V... ~X].@Y..Z......^.Gj2....._...(..;-A]{...>J...9l{\yKB..B.._u.wd.]....:}.../...O...o.g.......:J#R...lgH...N..^...$y.".#bwj.~W.F..a8.O.bI..h..h.....t.O.'.4.}m....Z.+5-..(.\..Ay>y......?<....(..g...).(..{..U.-.x.+.7a2N..._O.......q.y....G.G.......[..K......!..P..&....n.,pWs...l...;.I.j.....r.G.xy.{...@71.....{.2h...)..65XBJ.r.=...C....D...............I.C.=.9..[.....W{2....b...X..O.I)...[...7.jD-we..2.y...e._.;.vd.mx.d%.?S.X.........dH.'.."..<..'0.,..:Br&.}.dV._.?.`........KF....I0.8'@.yK.A...z...</..HH$....S....j..\|5.......A.&.fE.6...Z.Qx.p.w.p.+...-..o....`.{.....@8...I...JaY...Q..6.\|.`A..........q\|.r...K....~..l.).......{.t..n@w.=&.@......d........\|?.h2C`.d..w.;.6..e...P......,.....].N..0+.x....\.]U(.f..bMP\..[.H.0.....E5...J[].+S.f...;.Gv..R.K.>..

Chrome Cache Entry: 1201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12707
Entropy (8bit):	5.562701722773555
Encrypted:	false
SSDEEP:	384:C3wiHs1iHtiH5OiHPiHpiHLvHs1vHtvH5OvHPvHpvHR3tKH3j3i63R3H3l3tKa3G:8H7HMHzHqHoHTHeHVH2HXHBHR3t63j3K
MD5:	C058EB261654679AFBA8678716AFFE47
SHA1:	E59C7C3700002D9CD2977ECCC7FD606F686332FC
SHA-256:	09419025E2510CD0C2B4E071E85D762FF46E0BAB7CA6239322D27EFEFFE2E568
SHA-512:	ED810DB954742FE079ACEADDFCABACC5A9A61C42D23968BE4F11461D87CBB46BF91B02CA20129EE44A8B0481A758A32A2A4ACD809876FE73254809869B63DB94
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Karla:400,700\|Oswald:700\|Roboto+Mono:400,400i,700,700i"
Preview:	/* latin-ext /.@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUjm6bnEr.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUje6bg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Karla';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/karla/v31/qkB9Xv

Chrome Cache Entry: 1202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27315)
Category:	downloaded
Size (bytes):	43845
Entropy (8bit):	5.360744705938291
Encrypted:	false
SSDEEP:	768:nf8/g/Nl1s/seRfo0B2FsKNhdYKriRzCsvAvCuQ:nfUoNlR0NsrDZCuQ
MD5:	B718B99D9966FC655C1ED910F23228D9
SHA1:	BD47856860E32CB4178178889C6ADC70DC2EDDD4
SHA-256:	E253E782F736E74798D173DABE0E2C882E8B0FF55F685090FF3260396A6751BE
SHA-512:	D393C6970A80239655FAC9EE35E619F4A39F8FFFA1F11CCC147CF353EEABF3CAC4BAC34D21683C26B1FA088699BCE4BDCD698B8B92067C81778AF269EE5451AC
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2025-01-10 20:05:42 PST';.var rtb_sync = {"consent_rate":100,"reset_rate":0,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1",

Chrome Cache Entry: 892

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64980)
Category:	downloaded
Size (bytes):	200641
Entropy (8bit):	5.251377306838306
Encrypted:	false
SSDEEP:	1536:jsnCGO+OLHJ4TEzWwy/4dxwE6IckrNdcSRp5m01eicxgmLnCm8WRr0pmVxlN+pZX:tGO+OLHJ4TR/48ERcUdzunLlOxu49s4
MD5:	76EF1D49B11EE00C8F48BED18B5983E6
SHA1:	C83E93277FDCB78B6AD897DECD036A80BB016143
SHA-256:	31C4A9E2A42E8CAFE21488E69ABB8F96688A26E5DB5509EF3619311C485EAE5F
SHA-512:	B93EC84ED4B084C6E7F57771E9812286A8EFAC1436BF7CA0CCE4698B71C2B78E46A747FFB3787BC02034F78DE9A0FA1393433A34FE07A110FFC488C500A864A9
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012410292120000/amp4ads-v0.mjs
Preview:	self.AMP_CONFIG={"v":"012410292120000","type":"production","allow-doc-opt-in":["amp-next-page"],"allow-url-opt-in":[],"canary":0,"a4aProfilingRate":0.01,"doubleclickSraExp":0.01,"doubleclickSraReportExcludedBlock":0.1,"flexAdSlots":0.05,"flexible-bitrate":0.1,"ios-fixed-no-transfer":0,"story-ad-placements":0.01,"story-disable-animations-first-page":1,"story-load-inactive-outside-viewport":1,"amp-sticky-ad-to-amp-ad-v4":0,"story-video-cache-apply-audio":0,"amp-story-subscriptions":1,"interaction-to-next-paint":1,"esm":1};/AMP_CONFIG/;.(()=>{var t,i=class{constructor(){this.j=new e}abort(){if(!this.j.C&&(this.j.C=!0,this.j.N)){const t={"type":"abort","bubbles":!1,"cancelable":!1,"target":this.j,"currentTarget":this.j};this.j.N(t)}}get signal(){return this.j}},e=class{constructor(){this.C=!1,this.N=null}get aborted(){return this.C}get onabort(){return this.N}set onabort(t){this.N=t}};function s(){return t\|\|(t=Promise.resolve(void 0))}var n=class{constructor(){this.promise=new Promise(((

Chrome Cache Entry: 893

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	133050
Entropy (8bit):	5.298385227580004
Encrypted:	false
SSDEEP:	1536:tCusKwXr3AeQP5Kx75Axgz/doaCHqksAVI3b:eKw73bl50uyaiqkT6b
MD5:	E0B4A90400153ECF1BA547EEB74F1546
SHA1:	ED7A65D4C7E44E5469037682E681268BFE2AD7EE
SHA-256:	0ECD3D39EC535810F3C25F129BF9ACFA1D2038ADF02766B461009C348CAF2F2A
SHA-512:	AFF314E18CFC5D7C44DDD8948CF2A34ED01ACCFB9FE018E671AE545B3D32E082E2DF682BDFCBC08CF0D67B171CC7DE48C8F5AB29F885909F776CECB7E071945C
Malicious:	false
Reputation:	low
Preview:	/! BUILD_INFORMATION={"GIT_COMMIT":"0231f17433cfa9fb95b4a664fe46e86a8d9e2488","GIT_TAG":"4.27.3-dev","BUILD_TIMESTAMP":1733851199} /!function(e){function t(t){for(var n,o,a=t[0],i=t[1],s=0,u=[];s<a.length;s++)o=a[s],Object.prototype.hasOwnProperty.call(r,o)&&r[o]&&u.push(r[o][0]),r[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(c&&c(t);u.length;)u.shift()()}var n={},r={8:0};function o(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.e=function(e){var t=[],n=r[e];if(0!==n)if(n)t.push(n[2]);else{var a=new Promise((function(t,o){n=r[e]=[t,o]}));t.push(n[2]=a);var i,s=document.createElement("script");s.charset="utf-8",s.timeout=120,o.nc&&s.setAttribute("nonce",o.nc),s.src=function(e){return o.p+""+({0:"ccpa",1:"ccpa-gpp",2:"custom",3:"gdpr",4:"gdpr-tcf",5:"hbbtv",6:"usnat",7:"usnat-uspapi"}[e]\|\|e)+"."+{0:"0e9b223dcf75d5b6a0c0",1:"53ed60b33c3bcffa70c7",2:"fe83b1f219521bdb73ca",3:"5d08b1

Chrome Cache Entry: 895

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	319
Entropy (8bit):	5.0126871577562
Encrypted:	false
SSDEEP:	6:4+Qd77MoQIxY3r9oc08QCRWCo/vpXM3QaLu+kAALY0/wJHJZyYJN+iJNNF/WHgU:wdMKxIhoc0Ao8SoMYJpAYbzWH7
MD5:	6E3015B4600BD8AF93355B6F68A17C3B
SHA1:	7FD3E1B0BDE638CD64B134F198F79E9F77395D52
SHA-256:	B8F071D680A5441FBAB9C130C650B69E24BF4B9A226621A47C6E43671CD0BCBF
SHA-512:	3313CE6977390204C8E31254EDB75D639357EC4F8D204B85F580AA5CA800F7954E76C3ABC399915A5CC09B60DA7C80A578D6E751EAF6B0632836C49E3D5BDA40
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/translations-369373da.js
Preview:	import t from"../ox.js";import{customize as i}from"../gettext.js";import{gt as o,dictionary as r}from"../uk.co.talktalk-e4375173.js";import"./preload-helper.js";t.serverConfig.talktalk&&(o.pgettext("plugins/portal","Inbox"),o.pgettext("app","Mail"),i("io.ox/core",r));.//# sourceMappingURL=translations-369373da.js.map.

Chrome Cache Entry: 896

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	656
Entropy (8bit):	7.691202107245766
Encrypted:	false
SSDEEP:	12:LBRsAgv2yGkXkbY43ZbkHQlPZCU5hFVAANYWIxQD3ho1NXUqaNAQ:1Vg7Gq0l1DPf5hFuA6Wd3y1NXzaNAQ
MD5:	79B6C55B38D5D15CB67A8C3666BDB5B3
SHA1:	E7B211AFC05E5C76A08F89D6029FB1CC6040EB88
SHA-256:	3123718C12AC08DFEE2BE6EC4C7D9CA7DEDE647366F8EDC3C6624D92C275EC8E
SHA-512:	89B5DB7DED458BAE61D3848FBF7F9863147DE9AAD7C8E8EFAE0AE4ED4ACE2D69ACD1E9129A3340829FA2E0632667CEDA6C1C3AE5827A5BAB0AB3A1246EE1C918
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/lib/polyfills/text-encode-transform.js
Preview:	....dU..,......V..-..'.)6.4.(....c......rQe.....M.oR.x....P.[.$.\.qhT.w?...-Q........Z.../.,..`..TDKu\|A....%.1.v..H..T2..0u......z...i..bp.Y.....qna.h.ir+,u..".....L.)3.o5.....g.\|....(".sB8!.....v#..==..w.tf..J.y...,..P...c...c...G...a.)......W.\|..R.8...#.....<e7.aJ.H)@.l.....U=..T..A..\.j..j..;..-/.XO.`.l...B..=..0Y.........0h...W......=....I?.%....K.p.e%.`.,.....#.......6.1I.W.g.......`...x.......A]......%.b..;.SD;J...%.<.{G..e.e<..2..Z./{..l.e8....+.M'...SND..)).."sL.!..$u...<3...,.l....>.`DI(JE..e.e..ON........a....BYy.T+O^..f.&.pq.I...U...w/Tb.....f.@a.t...,..G..@-Rh..P..o.~gmss..K..a..,G.^.._..]6pu..&...5

Chrome Cache Entry: 897

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (539), with no line terminators
Category:	dropped
Size (bytes):	539
Entropy (8bit):	4.598912011399093
Encrypted:	false
SSDEEP:	12:iWRSafoJfAAf/0HR8/JKAX8iyyyyyyyy9/yF5UFWRSy:iWSa7Af2tAvegy
MD5:	07DA4F027F7F12613DCAE4E26C25A6C5
SHA1:	CDB7051ABE6EEC8126CACE4503A1E94FBE53EA3B
SHA-256:	C25E9C93CD91E782F9FED1463383469EA2A23B80556A6DA6E97D0083170D30D8
SHA-512:	E542E97E814BA1266B55D51CFEFA69BACD2148B24A5AE12493422F2F46AAB4E2AE5C6908EB240E9BC27E764B9F2FBD9A96289F16B0F31F6997340061E7D4B4F9
Malicious:	false
Reputation:	low
Preview:	Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.FetchController.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.Long,java.lang.String,java.lang.String,java.util.List<java.lang.String>,jakarta.servlet.http.HttpServletRequest,jakarta.servlet.http.HttpServletResponse)

Chrome Cache Entry: 898

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Applesoft BASIC program data, first line number 11
Category:	downloaded
Size (bytes):	1358
Entropy (8bit):	7.856866767198822
Encrypted:	false
SSDEEP:	24:EPgTULI6SIIh/RhxQxrcHBxQUqe0Ma4pQ5u6SHdA/LBFdgDw2Sywb5T/5gl6s+N2:EYTqIDHdnCxrcHBxQs0duBdKPaDv7OfO
MD5:	3632C386EF7DC5C067D2111E3F43762D
SHA1:	5BB039861F3321E5FFA189FE96D56848B9FF75DD
SHA-256:	3F67040ADECB93D05E233DA6B8C9519ECFF1C746CEEEB71BA1B8B85E57C2D551
SHA-512:	B1CDA889A989D392FE86EA169C149D700DA37F6D27417CB8A42266CDF76B81A66B73038E2115C551BEE6538FC31184B51988E187FFBCCD3BACA320B9101FDC23
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/externalcontentpopup.js
Preview:	.....~o.......}.Z.....9.+.m........ZN.J".H$.....JM-.}......L.2>.1>.............P.j..b...Ec.N.........2.y....!..&.._.D......h,......%i3..K..\p;..s.[....Oj.;....-.. .1.Xw..j..`..D$...._6-9D..A....:c6h.K.J.W.A.}...XKZ...j..j.....K.u...-ms5...#>...R..O..1M.[.....-.t..>5..fz'...Cs....i7...x.[n..s?.....r.q..^.H;.....w.kB...V......{.Y/0.?...e.[\.z.{7.sp6m+c.........V..1.?...a.L..1...7....O..Yd..W-...p!r.....a..f&#..%.]^.GL.Co...~...3..(..B,.]~..;.Ow.(.{(..>....-B..\|..._......^...7..nys2......In....PB.[..W........I.K.Y...(....l%.(...w..P..\|...gF..}'g.}.....J<....J...1s..0wT......%..v.. _..#yC(...6i.`..z#q.Q..\..t.b..O........./..07..[n..x.73..M5Q.....![...Y.......f.'.b~.l.B"..#.0.......ow.F...P..S...V.B...,N.. !.h.M&.b~P.r^..f$N.......uS,.#e.5....'rr..=".:.F.c.}.x.;x.K.........D.^x."0.u@W.T..4d..cA...jF........Dir>.F;..a.;\r.4.u.g.Me./7.No..3f.`#..).O..S..$...z..3.1.8.s).{.f...\|..(H-@..K.....U1s7.0J#.....Os........r.`.....h..n..-...

Chrome Cache Entry: 899

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10172, version 1.0
Category:	downloaded
Size (bytes):	10172
Entropy (8bit):	7.978541680412634
Encrypted:	false
SSDEEP:	192:+o5ZAH4xyaFcHaUy/ywtQ8m4ExR5jm8HRlx/1a9Pasr:+oIH4nFc6Uy/LtTEx/S8xlvgSsr
MD5:	58E5C92FD1A1FC89B8CA6D74CE4793B8
SHA1:	337771C465778AEED6DE18195E0CBE9D9098D299
SHA-256:	6E059F38D9D643CD149FA02DFD97D6844F9B106198E027F55E2FE1E9A1428ACF
SHA-512:	DB4D4940E92BEACEF54312A93C4C00F3725F2751A2D05C9FCAB49BA65B25A1144DF5FF9279FAD1DDCF2FFF8D7ADEE794BE6D1C374FDA85C32A065D9225F6BBA6
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Oswald/bold.woff2
Preview:	wOF2......'.......R@..'\.........................^..R..l.`?STAT..n....p.'..Z..6.$..0. ..n. ....CE.Z.8.C.7...K.7.b}h......I..o..C.i.:UQr...3}...:.',vb.rH.sO.....%..S.s..).b...Ify......}.....$4.R...:.2....q~.....E.P...T.......C0r...L7.n...nw./rY...Z..h.H.LZeH.(.L..Ew..i9#..7..V`i.%<T.k..Wz..B,.^`...K.....{...`...e9..Z..=:Q.<op[.\..W.......e.O...v..].a..De..W]KE}..`b.I@...WUW<}.L..u^r..a.yXS....C.>?!SP#.W.RL!D..i..K=..[.[#E.,.N.S2.:..{...lc+S.k.mK.n.\u.UV.B..?uY...m.....3......^@......`(!P..P..P..P..A....O7..=...A{.+PP..``0...@t..m6W>0.t....l}G..C.#..P`...mi......].g~...?.k..5.....r........j}mWg...P..x.}.....P.Q...4y8..hl....-}W../.W...T...C..........l.am..(..P...\..^.n..dh..@.} ....=m......F..,I.f.Q.&A..$5......c..I....LuF`PD..R.j.7..?.\|>..~........So..b....E..4..=...U@,..VM.)Q!.t..m..X!7..'...Mf.D..w....a.....m.....^.&M..>...).h.....el.X[K...R..(....]..2.T<<..t0...l.T#FX.Z..u.K7c..?!......].....P.Qjs......YRW....`}.`..#.1..05W]...5.....

Chrome Cache Entry: 900

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1966
Entropy (8bit):	7.905484607556819
Encrypted:	false
SSDEEP:	48:MgDcMjuHqqZYL1RtgGjYvEMgWyHFpryHYz0vZ8Cgzo:fyZ6ayZWyH2tGpo
MD5:	BF069D3DD611DB2F9828F2547647B47F
SHA1:	6EAF309B175BBD60FE97ADAE90E6A51E38E672F1
SHA-256:	9CA6483894D547454BC163890210E0300A7D72EF8FF12C05A35DD7C90464ADE6
SHA-512:	EA37CECD55430D8916A778E6BFAE75B117941DDCAC5B995680C638A6C42A4742F12DF508C6DAA4255F34AAFB6419215F952F463ED1CF195B51B9454E20F08751
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/precore.js
Preview:	.<...._.....[=.GJ.e<2..9..I..A.m...(.j-...FG.T......#...,\..@. T...x".B..................b0...H.&...(c$&..y.Z}>8z#..cY./C.p..!.D.t...v......CB.t.........F.t..e...qv[...........S..a..d.....v...y9B.O..y&....Z..N>......!.Ws.1...+..\|......\..}.[+ta\.q..UVv...d.rd.ss._n:..E........&.w...L.-...-].<..-....9:.......]..1...e..=...'.]g9.+[.3.".xiB.....ac.[.5..3.......o\|V.ZG.l<V..~...y.O._..2....0..y}~m.......<.H...H..x......5.+..S9.\..u..9..9~.1.{>1W..lH.!H..$v.X...s....3.-d8....b<.N...*!PQ.x.N`$Z.#..x-Y8..Y9....rx\.....%...h?y...........p...4je....m....hY....5X..A#g.....1.-E.<..p....tfO.).T..0!g..g...U....tN....)T.j@.PO.(....@.....H.q...J.Id..()-.xu.......<@'M#.,.2....T).7.......;........"...AsTi....%hl.....'..I...R.Y.....U......1X...^..`.1.A`5o1.,<...n...y..N....x.Y....f..m..Pi-w.>...un........Q.N..7....v..w.n.........m...Oi"[.d3.......UA...}...9.....SCM.O....~).}.NYB..Vp8O.P....?u.x.`p&.EeG...0n<....n.v...t....`..7.h@.Q..3...?..c.4..;

Chrome Cache Entry: 901

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (826)
Category:	downloaded
Size (bytes):	2135
Entropy (8bit):	5.199482268913435
Encrypted:	false
SSDEEP:	48:T7HuzBd/LmRF8JGCKE6fYw7yaSNp6zWRxopkNGdaiCMb0jTBV:2HKYGU+j0jP
MD5:	6BAC4792236FA70ABD5352602A0DEB6F
SHA1:	1FA59F652CD428790DBFDFAF8106A01147E77905
SHA-256:	18CBFCB608AF5885F7916274B60578D32006C90E8FCE3D98DBCC89A646707608
SHA-512:	8DCC2B0AB533547B72CDA720CB89B1419FDE47CF1215F75CD824F0592CD275C04F2839F6F13B3332B2B4C08B282BC5C63631EEB9BA93E0C2F33B78EEBD789468
Malicious:	false
Reputation:	low
URL:	https://s.e-planning.net/esb/4/1/3fb8/7bb4893a30d21aef/retargetly_030920.js
Preview:	(function(_w, _p, _t){..var runSecure=function(f, a) {....var r; try{r= f(a)} catch(e){}; return r;...},...getWHref =function(_w_) {....return runSecure(x => x.location.href,_w_);...},...getWDocRef =function(_w_) {....return runSecure(x => x.document.referrer, _w_)...},...getURL = function() {....var th = getWHref(_t);....return th ? th : getWDocRef(_p) \|\| getWDocRef(_w)...},...getDomain = function() {....return (getURL().match(/(?:https?:\/\/)?([^\/?#]+)/) \|\| [])[1];...},...isIfInIf = function(){....return (_p != _t); ...},...isDoubleNonFriendly = function(){....return isIfInIf() && !getWHref(_t) && !getWHref(_p);...},...r = /((lanacion\.com\.ar)\|(ciudad\.com\.ar)\|(cronica\.com\.ar)\|(diariouno\.com\.ar)\|(americatv\.com\.ar)\|(cronicatv\.com\.ar)\|(debate\.com\.mx)\|(elheraldodechihuahua\.com\.mx)\|(elheraldodetabasco\.com\.mx)\|(elheraldodechiapas\.com\.mx)\|(cooperativa\.cl)\|(trome\.pe)\|(elheraldo\.hn)\|(cadena3\.com(\.ar)?)\|(primiciasya\.com)\|(minutouno\.com)\|(ambito\.com(\.ar)?)\|(perfil\

Chrome Cache Entry: 902

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 903

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (313)
Category:	downloaded
Size (bytes):	360
Entropy (8bit):	5.050265925295333
Encrypted:	false
SSDEEP:	6:FKpP7MoQR+GWHyCIQMLYJnLY5VD3qsTSyIdxRWiIdxRMidz9xRdU1Pp1175quPA:FajMaxIpD3FTSyIdxwjdxDxqz1NU
MD5:	B669FAA1AFCAD7F2A6A2753F376B82E7
SHA1:	90861E39C8801E22B4269B2F5BBF68BD9A939D54
SHA-256:	4F0A3AD49FDC95F40C2F9E5292DEF666AF16FCCE28975C4E04EDAC250D6A7D0E
SHA-512:	2304D4F2DC36F4CB7276DB56AD27688CAF2D137D6882F59EA59C9F36AD0644588E379CBD7B04704E1AA33EFDFA719E04D53C3913DB5CC4D7F5FE8F63F6BDBA17
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/environment-banner/register-25035e2c.js
Preview:	import o from"../../ox.js";import t from"../../jquery.js";const r=o.serverConfig.talktalk,n=o.serverConfig.talktalk_environment;r&&n&&String(n).trim().length>0&&t("#tt-banner-bottom-right").length===0&&(t("#tt-banner-bottom-right").remove(),t('<div id="tt-banner-bottom-right">').text(n).appendTo(document.body));.//# sourceMappingURL=register-25035e2c.js.map.

Chrome Cache Entry: 904

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63062)
Category:	dropped
Size (bytes):	63245
Entropy (8bit):	5.3256728084015945
Encrypted:	false
SSDEEP:	1536:zh3T2Yu/slA/TW83Kg4oOWn2LW1qLGm7cspu:z2shvg4vW1qCm7cspu
MD5:	15BD4869216609F1EF060F2F770AEF45
SHA1:	5DFF01FE9C0C04A51FEB998F791B427F937859B9
SHA-256:	07B3FEA34AAAE441D8C91E458251C60099D6A3BB37441B4EA7B98D5EC07EFD88
SHA-512:	BFA2BF27221DFB2D46154B8093C1F5F29A6B61EEBF1F17F61214B47CAA02A2B83B823B65595E9AD1EAB9E0A517595749E7CEAC4B834FCC984F0F1DFCA3A410FF
Malicious:	false
Reputation:	low
Preview:	// hash: Wbc0ibJ0IpHFwnUFi7h/y0GEkyLH0KuUbT8wBPbRt26SY8hq9U2vSQuqXdJz5aRKDywBp/ts8SmKkXZKQaCPps6XOPXgBiBvYDPQOea+jSknq5mhNe9Q26U/OJjpVH/R39JH0tya99scDF4PwZTVdi1nLlf/0bGBLs26/HbhP24=.var _ADAGIO=function(e){"use strict";function t(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}function n(e){for(var n=1;n<arguments.length;n++){var i=null!=arguments[n]?arguments[n]:{};n%2?t(Object(i),!0).forEach((function(t){d(e,t,i[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(i)):t(Object(i)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(i,t))}))}return e}function i(e){var t=function(e,t){if("object"!=typeof e\|\|!e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var i=n.call(e,t\|\|"default");if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive

Chrome Cache Entry: 905

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3775
Entropy (8bit):	4.568691852261433
Encrypted:	false
SSDEEP:	96:UgGKAtQ3k/GNXl2a4GzkNGSmT6xJ5orONPv:zGKAtQ3Lh0FGzvTmJv
MD5:	4BECCEBE0A060B2B2C43DE5C2D4512EF
SHA1:	250A779DD017877B9F360B264CF072D9E87974FF
SHA-256:	446F48F512ECC0B771AF3C21A3036DE3A1C5740D1E6BDBB61448834326D0C738
SHA-512:	09CC7F6AC18777399DCFBC22EA9069779C0D8193A269F672B62D738B79B6EF72AE4A30BD85D111D0E03E9FBA29387B9A91AB6D925F0324D764A27C6416FC5288
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/files/theme/jquery.trend.js?1736412329
Preview:	/!. Trend 0.2.0. . Fail-safe TransitionEnd event for jQuery.. . Adds a new "trend" event that can be used in browsers that don't. * support "transitionend".. . NOTE: Only supports being bound with "jQuery.one".. . Copyright 2014, Pixel Union - http://pixelunion.net. * Released under the MIT license. */.;(function($){.. // Prefixed transitionend event names. var transitionEndEvents =. "webkitTransitionEnd " +. "otransitionend " +. "oTransitionEnd " +. "msTransitionEnd " +. "transitionend";.. // Prefixed transition duration property names. var transitionDurationProperties = [. "transition-duration",. "-moz-transition-duration",. "-webkit-transition-duration",. "-ms-transition-duration",. "-o-transition-duration",. "-khtml-transition-duration". ];.. // Prefixed transition delay property names. var transitionDelayProperties = [. "transition-delay",. "-moz-transition-delay",. "-webkit-transition-delay",. "-ms-transition-dela

Chrome Cache Entry: 906

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.731603849178684
Encrypted:	false
SSDEEP:	3:YxhAIUz1fRMI+aSWEHREXTyJshCNN7kYCiNQDxPrkUnuY:YnlUz1fRMItluiDAshEkYCiNQtPA6
MD5:	6A557F71F45564C8E3902ECD6A07164D
SHA1:	904EC97855BF7578A2590D9D36C5DB195FB32922
SHA-256:	BD523A7947D5FDD80DBB9088E4E25642D1CD9498EF7E6F46FCDC3FA0E495D4F1
SHA-512:	81749BFDAD5C5BF4AC9A610CF55E5616C2AD9BECA0D8540F29E0BBA91E7851D458658AE94F971FF6B940239DCD3845077BC946F671725C91F1E358DEFD7D9EC2
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=a65bpx9&fmt=json
Preview:	{"TDID":"beb8670a-646c-4cf0-a211-73ab4a2643bb","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2025-01-11T23:12:21"}

Chrome Cache Entry: 907

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (447)
Category:	downloaded
Size (bytes):	470
Entropy (8bit):	5.271585610414683
Encrypted:	false
SSDEEP:	12:hYjx7QqJmwhpyRDRR3KxDyW9PzXe7CW5VE5fyeSHK7ca:hYj1fRIRR3zYkCW5VE5fy/La
MD5:	0D485A7FE3D5834592CFE3EDE7777683
SHA1:	7E1B6B9ACFD9102208095E0C29DE529A827CED19
SHA-256:	FF8CEE2C22CD198409DBA7526132D5A6CED21194890AF4F812D3F7A55EFF49FB
SHA-512:	B49A0F995F8AED08EA4A6F2678ADDB1BAFA2054E74B129FBB1DB795ACCCE9B906637982F6B12EE2F3FCB2D75D403679CA31D27FA6402A7B60BDB53973708C258
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/ajax/apps/formSubmitAjax.php
Preview:	<!DOCTYPE html>.<html>.<head><meta name="format-detection" content="telephone=no"><script type="text/javascript">function ret(){parent.postMessage && parent.postMessage(document.getElementById('response').childNodes[0].nodeValue,'https://talktalk770.weebly.com');}</script></head><body onload='ret()'><div id='response'>{"success":true,"action":"redirect","data":{"location":"http:\/\/talktalk770.weebly.com\/home.html","ucfid":"966207471648140949"}}</div></body></html>

Chrome Cache Entry: 908

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=eEVGX0ZjY1FRWWNZZnJTMFRkbXg=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 909

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://2353bee1e702193d8a081ea08f00dcb6.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 910

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	133050
Entropy (8bit):	5.298385227580004
Encrypted:	false
SSDEEP:	1536:tCusKwXr3AeQP5Kx75Axgz/doaCHqksAVI3b:eKw73bl50uyaiqkT6b
MD5:	E0B4A90400153ECF1BA547EEB74F1546
SHA1:	ED7A65D4C7E44E5469037682E681268BFE2AD7EE
SHA-256:	0ECD3D39EC535810F3C25F129BF9ACFA1D2038ADF02766B461009C348CAF2F2A
SHA-512:	AFF314E18CFC5D7C44DDD8948CF2A34ED01ACCFB9FE018E671AE545B3D32E082E2DF682BDFCBC08CF0D67B171CC7DE48C8F5AB29F885909F776CECB7E071945C
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/unified/wrapperMessagingWithoutDetection.js
Preview:	/! BUILD_INFORMATION={"GIT_COMMIT":"0231f17433cfa9fb95b4a664fe46e86a8d9e2488","GIT_TAG":"4.27.3-dev","BUILD_TIMESTAMP":1733851199} /!function(e){function t(t){for(var n,o,a=t[0],i=t[1],s=0,u=[];s<a.length;s++)o=a[s],Object.prototype.hasOwnProperty.call(r,o)&&r[o]&&u.push(r[o][0]),r[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(c&&c(t);u.length;)u.shift()()}var n={},r={8:0};function o(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.e=function(e){var t=[],n=r[e];if(0!==n)if(n)t.push(n[2]);else{var a=new Promise((function(t,o){n=r[e]=[t,o]}));t.push(n[2]=a);var i,s=document.createElement("script");s.charset="utf-8",s.timeout=120,o.nc&&s.setAttribute("nonce",o.nc),s.src=function(e){return o.p+""+({0:"ccpa",1:"ccpa-gpp",2:"custom",3:"gdpr",4:"gdpr-tcf",5:"hbbtv",6:"usnat",7:"usnat-uspapi"}[e]\|\|e)+"."+{0:"0e9b223dcf75d5b6a0c0",1:"53ed60b33c3bcffa70c7",2:"fe83b1f219521bdb73ca",3:"5d08b1

Chrome Cache Entry: 911

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 912

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 913

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 914

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1310
Entropy (8bit):	7.852739159420599
Encrypted:	false
SSDEEP:	24:mJSu2Wq8zf+KQI6kcXocvEUapXqdyd3uzjDCne8WYRH8KcSJuIL3O:YSuVq8zr6kevMpQyd3QynxtH1t+
MD5:	D3617D9AD9550DC43059216A3A24CD0B
SHA1:	61BFAE5016B53FD5FE804B61D4DEEE5CEDA0E485
SHA-256:	E930C0A93A4D14D9139677D6A62DD6BF7FAD77DFA58B98A4A90E7469BCB6BF9B
SHA-512:	18CF870BC7B4DAF12F28A10888CB2D919B901390A9DBC2BD4BC2BB5CCB7A37F98B9CF4FFE4BFF25199D5F7A7B0BD4CB88B96ACA616A270FDC3A68FCC8993C760
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js
Preview:	.....~../.\Nx.....I.2.../aY.6..[e.....E($..D..?...J-.Hd..Q6....qu...Z....=....@Q....8.b.......}..N^.Z{.J..1.HS.....8.w...".EEa.E...4....%.j...?....F..G....t..{..n.....lu.\U..I..B ..m..>.9x..A.)..a.1...@9.w&^.....YCz@w.y..Q^6R...&k.US.....LD...O.n.VML.[Yt..[Cf.X.....:. .U....h..{.iZVAG7.AIW.@....~.]O..EYE.a..N.@k.s.S......t..Yl..l.%]t....:[..y.kAG.3S3.c..6.Q@.m.......Vx....wk.....@s..._..&@T{).H".._.^C..H.WGZ...".u+=.....Y^.GH.a`...k.....s.>t}+..vA~sP. \|..M>..O.\|..YTT~1g}..8T}....l~..o..y...t.r...s.......g..n.=<.i.0.Q_..G.$..s...f..C.@..G..h.b....i...@ux.2^>..#.P....8.&.S.7.j..(...t..%..r.M..E..._...4....yI...5>.m................E?.n........F.v.......F.....$.(...)g.......9.r.....=....?Z^.Y..V.Q....x$+.,.'...lVWL{.;<.SX...w#$.b...C...F.yg#..8..J/....'.J...[.3..8L........f....?e..A.o...M,\|.c..z...!C...b&.9-.b.&..(74..hI.../.b.w..).r....?W^ ......x..,........N._'.5..o.<C..u..".t&....-...#...{....h.....w...& M.$1k*q..TY%....q.e..^)!J.

Chrome Cache Entry: 915

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	downloaded
Size (bytes):	507546
Entropy (8bit):	5.518030906930185
Encrypted:	false
SSDEEP:	6144:VAnIRJNdjjFsADCkTo36j6x/xxi0TScLh9R314gAguLbldG8N8:qMpZ9oRx/Oep3148CbldGl
MD5:	7AC6A74A34A2F6EC5685D1D5F479A4E7
SHA1:	EEA786C082CE5D68EDCA5D695B0F8F586C473B3C
SHA-256:	B7CA699A9E63B78A440E271384779DB6596EBC76C1ED8208D151475FF796190E
SHA-512:	DBBC15BE7C47265E1C8605A6F3DB23C4208F6CC67DD09557D736F01C32C46B307B40669953BA2ECF458CA4A97EB6F3B9D0F328379032BA7A89AD24CD9D91BA99
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202501030302/pubads_impl.js?cb=31089528
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ba,ca,fa,wa,ya,Da,Fa,

Chrome Cache Entry: 916

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (615)
Category:	dropped
Size (bytes):	559653
Entropy (8bit):	5.705680793726412
Encrypted:	false
SSDEEP:	6144:e+5F5hBntAbdgXNGiFqXD3amOJp/syNILr5caQN+cMc0G:bcb+NGiFO3jGa57QP
MD5:	EB1594CE51B7609363C639ED8D50541A
SHA1:	41248D9D099A67E03C0F123439CA906E7CCCE22C
SHA-256:	FBA14002D8020B52EE5DF50C15A9E3ABEA5A03ACBB5FBAAD2596811F1128F471
SHA-512:	5D18DF2BCBDEE51C7F75AD10EBB3535787C8919E5029874AD8883980588318DA7812041331551B8B0910D5D3DEA2A9324DD33C5146000B8E9A808B4376B724B3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var K=function(){return[function(p,v,T,x,I,O,Y,m,R,L,D,Z,V,g){if((p-2&7)==(g=[6,1,34],p<<g[1]&4\|\|(O=v.vD,x=v.k_,m=v.ZW,Y=["Verify your email",'<div class="'," "],R=v.identifier,L=Y[g[1]]+l[g[0]](g[1],"rc-2fa-background")+Y[2]+l[g[0]](g[2],"rc-2fa-background-override")+'"><div class="'+l[g[0]](g[1],"rc-2fa-container")+Y[2]+l[g[0]](35,"rc-2fa-container-override")+'"><div class="'+l[g[0]](g[2],"rc-2fa-header")+Y[2]+l[g[0]](32,"rc-2fa-header-override")+'">',L=(x==="phone"?L+"Verify your phone":L+Y[0])+.('</div><div class="'+l[g[0]](g[2],"rc-2fa-instructions")+Y[2]+l[g[0]](g[2],"rc-2fa-instructions-override")+'">'),x==

Chrome Cache Entry: 917

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	277
Entropy (8bit):	4.719218697002572
Encrypted:	false
SSDEEP:	6:qyqAfeVKGCt0/gsxHh/Hhf/R92QGkYf1eQ9esdwLkRFYGIskHc/n:LviKVt0/DxB/Bf/DCeQ9evLYF/y8/n
MD5:	F0ABC2E7D7950A84AB9DB0B0E6286203
SHA1:	504FEEE059ED73FFC8DACC3413F0573994CC1913
SHA-256:	64211F8E4B74699651BD0EB3DF741CE5777C73E1B4A96A88630DF4945BDE3F14
SHA-512:	4898664098AEEAB80AD3689966D78D1D755E56D89D0F61CE5B87B06D62B5F8C980E0ABC8E1C455BAE6AEF29FF0C8D9BE317AB25F28AE08FD89BEF243A92B489F
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/appsuite-tet/i18n.en_GB.js
Preview:	var e={"Project-Id-Version":"","Report-Msgid-Bugs-To":"","POT-Creation-Date":"","PO-Revision-Date":"","Last-Translator":"",Language:"","Language-Team":"","Content-Type":"","Content-Transfer-Encoding":"","Plural-Forms":""};const a={headers:e};export{a as default,e as headers};.

Chrome Cache Entry: 918

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1735
Entropy (8bit):	4.926832349800413
Encrypted:	false
SSDEEP:	48:LOLWVL3L90QZOCCVLcxbZY3QLV4/VLdlL+LIZY3QCyVL0NnB:LOLWVL3ZXOCCVLIYgLV4/VLdlMGYgCyA
MD5:	204D9EE2B1BA92DCE365EBF87BB351BD
SHA1:	AD8B5C3B16AC7193EBC1A549A6E62F07D6A792BC
SHA-256:	DC887B20E92D735DCE5C25A3351EF2B8B6B189E856A3EE64CB0429A3D7F46730
SHA-512:	4EC405CFC62934C6B2BCD594F0ABE08549A10EA1198A2C684703DFFE6116AC813AC2DB8AFD5511BBAA8D07E92B1AA9ABE971780575F861EA5AA68CDE168D4EAA
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2
Preview:	.@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 400;. src: url('./regular.eot'); /* IE9 Compat Modes /. src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./regular.woff2') format('woff2'), / Super Modern Browsers /. url('./regular.woff') format('woff'), / Modern Browsers /. url('./regular.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 700;. src: url('./bold.eot'); / IE9 Compat Modes /. src: url('./bold.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('./bold.woff2') format('woff2'), / Super Modern Browsers /. url('./bold.woff') format('woff'), / Modern Browsers /. url('./bold.ttf') format('truetype'); / Safari, Android, iOS /.}..@font-face {. font-family: 'Roboto Mono';. font-style: italic;. font-weight: 400;. src: url('./italic.eot'); / IE9 Compat Modes */. src: u

Chrome Cache Entry: 919

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	67465
Entropy (8bit):	4.809594108927749
Encrypted:	false
SSDEEP:	1536:59rPpU1wHKYTpQ73CHJHDuYL/OHHeZF+YwLMC0ht/uJFO0815wZDk5/2M:59rPpl1NQ73CHJHDuYL/OHHeZF+pLM75
MD5:	2B8D85F1EA01D2C3E8B962EAC8D76A5C
SHA1:	936987A7E08DAA4A916C77D86937EDEE42D657DA
SHA-256:	B6353CA52760ABA4E7547AE9861DB68158DC2AF0F4FEBECE55E5C775EE4449F5
SHA-512:	F64D0E9FC7ED02F4C7B3CF7FD680DF3A6F8F4CEFADEEA63553D0F0A4BB5472ABF5EE754C0E056CD91272F0108910347BA6F3CF23C825FD89260CF0545DD0702A
Malicious:	false
Reputation:	low
Preview:	./! Hammer.JS - v2.0.4 - 2014-09-28. http://hammerjs.github.io/. . Copyright (c) 2014 Jorik Tangelder;. * Licensed under the MIT license /.(function(window, document, exportName, undefined) {. 'use strict';..var VENDOR_PREFIXES = ['', 'webkit', 'moz', 'MS', 'ms', 'o'];.var TEST_ELEMENT = document.createElement('div');..var TYPE_FUNCTION = 'function';..var round = Math.round;.var abs = Math.abs;.var now = Date.now;../. set a timeout with a given scope. * @param {Function} fn. * @param {Number} timeout. * @param {Object} context. * @returns {number}. /.function setTimeoutContext(fn, timeout, context) {. return setTimeout(bindFn(fn, context), timeout);.}../. if the argument is an array, we want to execute the fn on each entry. * if it aint an array we don't want to do a thing.. * this is used by all the methods that accept a single and array argument.. * @param {\|Array} arg. @param {String} fn. * @param {Object} [context]. * @returns {Boolean}. */.function invokeArr

Chrome Cache Entry: 921

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3297
Entropy (8bit):	5.50301998964017
Encrypted:	false
SSDEEP:	96:FiTYruYNWpxMJ7nYeJp1YQguHpAUi4XBexQ+S3lkxI3fOQfpQAnhdbwjQOvOM:ckuYNWpyJ7nYQp1Y9uHpA/4XBexp0+xV
MD5:	5714974D1C870815B883C5B67C38B51B
SHA1:	53BAA7C49F15674F88310F48AA6B10AF78948FAC
SHA-256:	2B666027B2A6FFE84F17D728078E4376EF258C74D99B2F1D1D4B3B4EAFB59FED
SHA-512:	EDA91AF2CC2C8B6976AB41325ABBA5C06E24601401560AF9442D88D98BFED0FCA647065AA3F891C1ABAC28E631535828793A4EA96F3DAEA9372516478D893667
Malicious:	false
Reputation:	low
URL:	https://ads.us.e-planning.net/uspd/1/be96b820e5daac93?ct=1&ruidm=1&du=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Deplanning%26it%3Dadg-pb-clt%26uid%3D%24UID
Preview:	<html><head></head><body>.<iframe src='https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?&p=12186&endpoint=eu'></iframe>.<iframe src='https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156631&s=&predirect=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3Da208d9366469aa64%26fi%3D0b6f23bc6d82347f%26uid%3D'></iframe>.<img src='https://sync.admanmedia.com/pbs.gif?redir=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3D9937b3fd6e9a979a%26fi%3D0b6f23bc6d82347f%26uid%3D%5BUID%5D'>.<script src='https://s.e-planning.net/esb/4/1/3fb8/7bb4893a30d21aef/retargetly_030920.js' data-country='US' data-region='NA'></script>.<iframe src='https://onetag-sys.com/usync/?pubId=5927d926323dc2c'></iframe>.<img src='https://rtb.openx.net/sync/prebid?r=https%3A%2F%2Fu-ams03.e-planning.net%2Fum%3Fdc%3Dff96d1aa62deeebd%26fi%3D0b6f23bc6d82347f%26uid%3D%24%7BUID%7D'>.<script src='https://s.e-planning.net/esb/4/0/1992d/f6ee63a0c2353004/lotame20220615.js' data-country='US' data-region='NA'></script>

Chrome Cache Entry: 922

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	545
Entropy (8bit):	7.562224378975847
Encrypted:	false
SSDEEP:	12:ynJ5nZ4aMPKlzkgszLpTmqID+hKQKHrxRQf0/Iji8J1+GUFbF6N5Cn:+Z44zkgszlTdID+hKQK/C0/IBgtJFwCn
MD5:	286E7E310ED6369D8FF45DD338693E2D
SHA1:	424FEDA77F40CCE782ECE25F9365376C9C227A91
SHA-256:	AF6CE20373E1C321133860B8DCFBB035826C6A5781939D954CE5AE749B78CE3B
SHA-512:	4D394D997C0DF0BD320654D7A8E80F1E043BCC11E25CD56ABB2EFC2CBA4F80FB438E074D9F90FAB47DCFD3B31F11BF5407CF2DA575ED4CCD1A9E1F5E5CBA2908
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/loginproxy.en_GB.js
Preview:	....d3...>/M..U.....K...;..wp9`..c6..L$..6..f.fs.i.d..DD..}.`n....6I.!..C.......pp..i\|.N.tF.F...C.i.C....,JD.7....p.Kt.2.:Jw<...R.L...KPn.J.J.R..^.4.?..`.....z3.4r;...b.GAO..%......Kd.}.'..C..j.....t.!.....6.....$.E..P(.0{..Y..N...4...n..'th...Z.....5.<QC.j]..ML+.~......5......<.<...0).... o\|....P...B.U..wF..(...^c*Y.G......x...L......OMF..n\.T.....l.S..L.....S...1.&.\.......x'.`..J.....[p...`mBH.f...z:..y....{..85.M...3...h..&.i..YH..\|M.}[%.L..l.AjG.EE.d/..Y....i.f../l.......1!...Y..u....P.G .....z.P.R.r6..'...[.

Chrome Cache Entry: 923

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-CsJQLHpeRZGR9GnEP10Ugt1K4hbC0S8D2Pv5uJcT-7OMeu2QUh5chQ33rs3liQcJQRsruvRDKTGPM7h3cVrdQck_bF5WeqLPRpqC581aAWNRYyiOY
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 924

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1098
Entropy (8bit):	7.815559008853845
Encrypted:	false
SSDEEP:	24:m0n+1N6MAgd1h8kW4X4A0JAVsMD3NhMU6AFTwB/QApZjYowEyrL:cNl1d1YgCK3bfFFTE/QApBmES
MD5:	DC28C363C9E455BBEA92B55DE78B3C4C
SHA1:	40C55BF3188F973AE6101CF77BD5358B0A8F1FC1
SHA-256:	96FF25B8501EC1E9FE6CF96653B9ACF7F7C7566CE5A48E667E0F90149F198F90
SHA-512:	81CCAE9D776F45211DE9129A8A35FE048B457D7F7186AAE9C0AAED0D10FF7023702569E7130E0773BD4EAFB29AF03AE9C623E854A581F881E9EE7F20369A2F52
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/switchboard-CyjQ4kEt.js
Preview:	.b.........YP..2:D.XKQ."cY...d.L.........J\..../"..........^f..vv.....F........a7\|...(...v.v..^...,d..N./..la.U.A.]..?...J.l.w..1..v..Z....R......EIz....P..X.....n.......K@.`..;...b..z....m..f.s..p..e#....b.j......\|...b...ArdP.P;.ij..R...C.\|+y~u.3Cb........s.....fB.D......h#.E)._GA....6..... ... ..e....>..H.+.WT..Y..d......8..8.?E..O..\|..U.H...u.%r.s338..D_..:..^!.&?!.m...<VG=..^....:i(L..V...t..ZV..Q...>.'..IJj.^.yZ..Y r?.sxh..6P.+....k....R....6w...>.F..Ab...d.7..6yR.Vm...Z_Um........6....J.l?.........R.A../..p...WPk.B.3..{Ug2S.I.....!....5\|....u.........qg..].Z.T+...u.Q$i{...:.i..t#.guKM..,2.ji...=j...J...A....9.....4.Y......0..e~I..-..B$.$.....8.b<...R......C.....8..HS......%X..F.#.k7....lidl@....Mu:"..4..&\|....DR.Qke".........SA7E.&..}I.....GN..5.;.DvA.<....^..>I(p...]..e...N.e.^....y..pq...y.....`M9.!.63.......R..D.;...0#...F....;..pB...../um..{.)/Cf.....TgbY.\........?.@uC...$}.g-Fm.#....O..R..{tY..mI6....>).>.c......E.

Chrome Cache Entry: 925

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65514)
Category:	downloaded
Size (bytes):	455646
Entropy (8bit):	5.359274814618292
Encrypted:	false
SSDEEP:	6144:KuE8Uygc6f3+t9OnYjdUSFoqmmplNUunWe0H3+oLIWatILCK6:Ku7Ujfub2YLZUEWJ3+olaL
MD5:	B45430B2D85048960826FA3F88EE5D86
SHA1:	851EF1793FDB5A0E7EDB89F6C0D53434A5D21FCA
SHA-256:	15BEA8056CBBA9C0111EB81C6B92D6F4296E5BE70CBA161636ED3016CDD64D34
SHA-512:	ADF56194072F0871DA74E0412BB17A7A639C54E0231CFFBF6AA5A6C2671B635C978ABEBE1D826E210D69306299CAFF9BDD225324AF4AB74403F10E1467757995
Malicious:	false
Reputation:	low
URL:	https://cdn.doubleverify.com/dvbm.js
Preview:	/! v7057 1b756a40 /.var __dv_global_script_start_time__="undefined"!=typeof performance&&"function"==typeof performance.now?performance.now():void 0,__webpack_modules__={2328:function(t,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.DATA_NODE_KEY=e.MONITORING_TAG_ON_TOP_LEVEL_KEY=e.TRACKING_RATE_KEY=e.TRACKING_EVENT_CATEGORY=e.TRACKING_BASE_URL=e.MAX_WINDOW_DEPTH=void 0,e.MAX_WINDOW_DEPTH=20,e.TRACKING_BASE_URL="https://vtrk.doubleverify.com",e.TRACKING_EVENT_CATEGORY="data-transparency",e.TRACKING_RATE_KEY="dv-data-transparency-tracking-rate",e.MONITORING_TAG_ON_TOP_LEVEL_KEY="dv-data-transparency-top-level-monitoring",e.DATA_NODE_KEY="dv-data-transparency-data-node"},9522:function(t,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.Container=void 0;var i=function(){function t(){this.container={}}return Object.defineProperty(t.prototype,"size",{get:function(){return Object.keys(this.container).length},enumerable:!1,configurable:!0}),t.prototype.i

Chrome Cache Entry: 926

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	47515
Entropy (8bit):	7.935761570171392
Encrypted:	false
SSDEEP:	768:YjHKgCKDB8cxyfP6Qgou9J3Bp1vTjp2empKK7JicdvY/32EEEk:YzTqJP6QgouBp2TR7JicBY/34
MD5:	655ABC9DC8EBB6D032F8E65ABD6E0A61
SHA1:	D2D89D3924A334BD5AC89759042FD09311FA8C60
SHA-256:	F791CC34AD5021311C96D9BC57904B726198EF4367E61E1665A6C465E825F7EB
SHA-512:	20B929996A099A87D22C2E1B8E2C11E0AD87F04C9F91FBD4005813E92AC62B122BAB009369A85EDBE82A03AAE6167D19EBBDC66F5439A03932D53312D8DCBA90
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sRGB.........eXIfMM.*.............................J...........R.(...........i.........Z..............................................................y..o....pHYs.........g..R...YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx...\|.....^ @..^..]..Q... z........WE.c....T..(.@...!.t.3...1H..!..>..f.mS.3.3gZX.A#.@G.$@.$@.$....a....l...2.$@.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x....

Chrome Cache Entry: 927

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	4.510249130615254
Encrypted:	false
SSDEEP:	6:rrBHI/4JsjDEXTdPEIU+ADtp2hEEXTx+tA7An:RHIgJsjDEXpPEt+ADtp2bXF+SA
MD5:	D142043E7C28C2B9A3B8BB5FEACF8E44
SHA1:	7E3F4DC19881787C46F83A1510C228B5DA704015
SHA-256:	0A752AA0ADD0F77796CC010E43EAC30FA86E74CE6803BDFD27F0A10AA65A9D20
SHA-512:	D6A1637F38E7D6946ABB5F67B2CCD517FB301E0BCEA531E1F4B40166C43A7631CD3B03189048D26710496D2ECFEE207ED4110D6520FC1DB3483C6B7AB298B4D7
Malicious:	false
Reputation:	low
Preview:	{. "stage_message_limit" : 1,. "site_id" : 34301,. "public_campaign_type_priority" : [ 1 ],. "multi_campaign_enabled" : true,. "stage_campaign_type_priority" : [ ],. "public_message_limit" : 1.}

Chrome Cache Entry: 928

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	416
Entropy (8bit):	7.462920580219108
Encrypted:	false
SSDEEP:	12:zeHTyNJf9SSfQUWWucdpSurFi10zeshWq8F:zKw1SSIsuHurfiyD8F
MD5:	4212802A0F6FDC8FC16F37EC56AA6596
SHA1:	6EF395602B8AD12C5A755B486D887FAAE93BBB34
SHA-256:	C918A728B1A435B936F0EB5737CD04A5AD1716BE135A7B3BCF08377B7673B8EA
SHA-512:	D71C586C37003D52A82387DC5ED02EB17734959B5407771259CF215396A5AA7F249D2392B5F3F9117EB9BE42A7B48A9D7D330265817CB6EC3AF646E0632F0C87
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/announcements.en_GB.js
Preview:	......N....-..X....U[M...........oX.&.....t............V..mL...h@.X...M......R..MI5mQ.#.o.U6..u.-zp.......75.....^zJw.kZ... .).(.X.!.... ..j....o\..mSw...+..N.5.p.P..rcUW.S...X@....A..z........L..7-e..f..$.....0....~...O.%.~m......thSG.!.6.M;.A..T5........&...-..,\J.qyzy..@..V@.X..UU..5.B/..bL.m"$L..T..-a9>.].. ...i88pv...B..........[.<....h.J.\|N...l..j1...p\.O......4S}.......d.....UZ^]..

Chrome Cache Entry: 929

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3775
Entropy (8bit):	4.568691852261433
Encrypted:	false
SSDEEP:	96:UgGKAtQ3k/GNXl2a4GzkNGSmT6xJ5orONPv:zGKAtQ3Lh0FGzvTmJv
MD5:	4BECCEBE0A060B2B2C43DE5C2D4512EF
SHA1:	250A779DD017877B9F360B264CF072D9E87974FF
SHA-256:	446F48F512ECC0B771AF3C21A3036DE3A1C5740D1E6BDBB61448834326D0C738
SHA-512:	09CC7F6AC18777399DCFBC22EA9069779C0D8193A269F672B62D738B79B6EF72AE4A30BD85D111D0E03E9FBA29387B9A91AB6D925F0324D764A27C6416FC5288
Malicious:	false
Reputation:	low
Preview:	/!. Trend 0.2.0. . Fail-safe TransitionEnd event for jQuery.. . Adds a new "trend" event that can be used in browsers that don't. * support "transitionend".. . NOTE: Only supports being bound with "jQuery.one".. . Copyright 2014, Pixel Union - http://pixelunion.net. * Released under the MIT license. */.;(function($){.. // Prefixed transitionend event names. var transitionEndEvents =. "webkitTransitionEnd " +. "otransitionend " +. "oTransitionEnd " +. "msTransitionEnd " +. "transitionend";.. // Prefixed transition duration property names. var transitionDurationProperties = [. "transition-duration",. "-moz-transition-duration",. "-webkit-transition-duration",. "-ms-transition-duration",. "-o-transition-duration",. "-khtml-transition-duration". ];.. // Prefixed transition delay property names. var transitionDelayProperties = [. "transition-delay",. "-moz-transition-delay",. "-webkit-transition-delay",. "-ms-transition-dela

Chrome Cache Entry: 930

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	152
Entropy (8bit):	4.584556549116247
Encrypted:	false
SSDEEP:	3:YVXKQJA68nk/qbSpgmpGTHbS3RlwVDfDnrgGWWm3EIoupAfxigx8Yn:Y9KQOZ/bYATHbShlgTDn0j3EXup6xiOJ
MD5:	85C9183EF41736CCD180B1FBED7BED24
SHA1:	07E0A5AE153EC3FE0CE7828064287DAD2229142D
SHA-256:	59E9225233BCEA69CCF024439D9B3CDE6B3AA59D6E35C8ADC86D85CD6E4CAD7A
SHA-512:	12B1D5FEF50CBA6E953DD159BDEF17846202E3C1062E0D00EE76A6EA9AC23ACC6ABF5B82335FAD58E82E37573BAB2B668AC15987CCD8970F1C7D46CF3FA99B67
Malicious:	false
Reputation:	low
Preview:	{"profile_id":"b74b370c6603a90653038a464f3a29da","core_id":"f12134443c665d08de78ec793d9316d53938751b3fec53dcd3ef9cafb83e45ca","expiry_ts":1737241944203}

Chrome Cache Entry: 931

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (621)
Category:	downloaded
Size (bytes):	820
Entropy (8bit):	5.465387897385564
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVIVIdNcDgubXl2zW2M4pUerirK+c87kjIKHoQL:2e2C6hHfhiVIidNwRbrT4Sy+tEIKj
MD5:	8A17EAE93DDE417955579C5184FE3454
SHA1:	D79827766C179549164CFFA41C3A87FD78FE49F1
SHA-256:	74236A32A763289470406B3B9A0F50FB31AD06A6F164ABBB7E40C852FD3F5B52
SHA-512:	58EC1AF99BA030B10608BC95B050CAB9942A74B608EB027FC4B6079282E4820123D21AB06B2C4F32996EA9C1A6E77C1FCDB4FDE3B4380E1C7137E4850BF6730A
Malicious:	false
Reputation:	low
URL:	https://tradehouse-d.openx.net/w/1.0/pd?cc=1&gdpr=0&gdpr_consent=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID}"><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0"><img src="https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=b8f455c1-6f6f-4799-b5dc-60adc56f7cae"><img src="https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D"><img src="https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID"><img src="https://ad.turn.com/r/cs?pid=9&gdpr=0">..</body>.</html>.

Chrome Cache Entry: 932

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	225
Entropy (8bit):	4.872177949990257
Encrypted:	false
SSDEEP:	6:YCTekALLWvSwtHLjWDcywtHLwNMSuf8m0iD/qjNn:YCeeztHLjicbtHLSPQ81O/4n
MD5:	F88B6B4CC11C20A97A2CF201B7BE5DBF
SHA1:	A18E1EEDCEE504894AE0E0829A598217752E1FF2
SHA-256:	08CAAC443E199D328FDE5DBE2D78CA3A0D344A27B8017D5B43045ED0FD319470
SHA-512:	95BE58A5AB1E8F54B9B670694769430F69E69B9E408F043BA9551B924794B09BC268EEEA57D1065E2E9B7E6ABDC432300BD389E519454D168C6195315C6937F5
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/wrapper/v2/meta-data?hasCsp=true&accountId=1948&env=prod&metadata=%7B%22gdpr%22%3A%7B%7D%7D&propertyId=34301&scriptVersion=4.27.3&scriptType=unified
Preview:	{"gdpr":{"additionsChangeDate":"2023-12-12T16:26:23.360Z","getMessageAlways":false,"legalBasisChangeDate":"2023-12-12T16:26:23.360Z","sample":false,"version":7,"_id":"65782db64f9aee39d217c1d9","applies":false,"sampleRate":1}}

Chrome Cache Entry: 933

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.775292972832054
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtz1M+sLqo40Y:VKEctKo7LmvtUjPKtX7F1M/LrwUnG
MD5:	60395C591801D7108CD6127480F5A542
SHA1:	397E30BE079D07A8BB3EAD98FD5B7C5B8E1A8134
SHA-256:	32F3AC435D293515FF99B9B4E3E952E470868F70478E76815FCFE202F606ED3F
SHA-512:	219771A3E0FC39247886EE821AB804E913B02C68FEB79F94EE5EC024C02A1E0AD51394E2D89DDFB2BE8F701D4FD7D6F7B0522ED70916C3793D30AEFC5F30548A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?_=1736637081406
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 934

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEClN-tsFVzIMrBiBxmTLdTo&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 935

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.798943198033352
Encrypted:	false
SSDEEP:	12:4rUrv0ukP3BfTysn7u2YBOCWaZq46it+V+AfVVYaQizAFv7XPy477TGEi9hMk7D5:4rUrMhYa7u8CWl4dAnYWsxfGEwhrly/6
MD5:	76BB46694152BA4B8B78EAB6646E2C51
SHA1:	39F4EB83E0794E7EDE98E62E30695F52DCD06AF1
SHA-256:	12D753580E29741CDFACA7BA46BD556B3CA28751BC5105AB76DE0D128FA1D33F
SHA-512:	7A620446FB987EC2DB10EFCF531F480F592426A33F404C41BD6FB421EE1086B1AECCEB895DD312B6D7D7DE87EB8FE70D0E159BDCEC0DF88FDF481E4A5068C6A9
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/tetpopups.js
Preview:	.H...ZjN......1 ).b6.5..)6.u.<.nG..9...5.....).;@.Y:.F.......r6.....S.3v7>.....W3e..j ..-.^.98.."KN.F..A.{.Q..0......W.5......'.&....d..U..z....^^.TyCUw....u}RVe........[}..\|....BI........S.-...,.-...6..!BG......z`VB.w..du..*...f...}......w..!.....^.{.L...l..A.-1}.]1..l...9.%.tn.Y,......C.R.k'..@<h....l.Ar'....O..[.U%..D..N&.......3V>..... B..0\|X...Ad+..M$.q..A.3..hn..v".....PS.5p.........[..........j6$._X..M..f6N.h.n..VS.....xV/.......zt9Zb..9.3]v...Y.q93..{[a(....<Du......#~.....t"..Y..fVL./!.....m=7.9!.a.M...4..:.....$.-..0.........yb...$......n3.8H.".N.,V...d]....[.......>..l<._.].;...[.$&....#....N.B./..F..U.v.tzC.~...En..q........H.$..6.......$.dEi..b..v..m9..4..Z.pF...\.........4....n.W...];l..wV....Q......06p.s.V.!.......Q....J..^e._Uw.>.;...9...]Z...........S..-P6.h.....2....h'........\.aA.(..o....F?g...F...d.....Y..E.H.X..(.En.. Z.?N"....U

Chrome Cache Entry: 936

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 937

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (27271)
Category:	downloaded
Size (bytes):	106553
Entropy (8bit):	5.485461170437463
Encrypted:	false
SSDEEP:	1536:5gxVTa8Wz40z2orZzsVylcFYX9aXi3Or+eHkqgl3e1ftZcRIodipuRSy5DXk+I+:qVohcFYN3OrbHzgl3KzcRIppuR3
MD5:	EF9D0F4BBA487403605AEBC5CC3CBA20
SHA1:	D057051D9465214D112BD0761DCBD95164BD57A9
SHA-256:	BC1DC0CBD149824D03E31199C708073FF1D909E7C09EEADB263308C1BC351C5F
SHA-512:	F40FBD85023BFA615D4281F6E55F23947875634C1690048DB2F9B29918D2D664486B4698D4F7FFE4611AF058B12A4B878E0A75E335BE2CD36EAD4F47AD9F9FC0
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 938

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1050
Entropy (8bit):	7.78328455142671
Encrypted:	false
SSDEEP:	24:UwS/GhSP6tuusdAKXCYuUAiY+ET0k2IwVfNA:UwShPKsWKX6elFA
MD5:	6EDEA482DE69ED0652C245FB87D264DE
SHA1:	5B3E11339D7499BFEB884F931F38BC0C77FB5AA0
SHA-256:	65A2F2656B35414488535E8371B4AD3E0D85F3A721008CB54F4697B993221FFB
SHA-512:	E7541FDAFE6252039AE676D8DD8955FB800E60E42084EE3F6ABD8D2BC86C0ABDA8D5BC7188B7A1A92A85D1340DF5533BCBE6E9827DFDFA7EB6495CB902C693E8
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/loginproxy.js
Preview:	.N.....Zo.s9...c@...KJk..ke,..~@....g.....&8..H...q.5.......5-.....\7.t...^.;b!...a.{.......b..w..........CgFl....A.@.....{]...h.~i-;.&...{..`..V.......s.p..~0......ct.....D...S.>m[......%.C.^.H..M..g...t.\|.BeD..ePB..1..V..O"..(.i...g..u.O.......Iyz....pZ.....H...z.w.-... .(...nV..9....CO..Mz.P.IT..)nh$...H...Mg.p6.q.......#...k.g.u.[.!r....XK...&.X...6y.H......S.7....DN..YGa.H..5..7.f.<e...W..z@..{..cU.%`;#..iu.EV...~..F....zD[...._.......0.Fm.Z_.m..'/j.n...?4j........I......STk.!.......6B.Q..Q..S.s....k..5....6....;3...6........F.q..Z..=_.,#}.k@#...dK....U-..<_Z..;.....Pa.\.!..O..7.U.,...N...-..u"bHR....(....X8..kS.u...(..L.e$.HL..N.{p$$N.{C1.nz.<....u......1!l,.._8...@..D.D.L.....nuyv..s..J.L.?.!e.._...x=&....j.^.!......g...]...=[.JK[..'.5&.i0.5.~\Z...:.mp..s]...JT..H.h!)O/....[e...Q.....{.\|...,....e..A.%..cJ.9....6.....7.eJ).0.C.p.>9......6..R......k.1vwy.'.r...-....H....j....A.:..q..M.k...p5Z!8.;...7......c.....X...y.lwU

Chrome Cache Entry: 939

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://s.richaudience.com/err/?ec=6&ev=1200&pla=MP_Z23yLHH4VI_Leaderboard&int=PREBID&pltfm=&node=&dm=apps.talktalk.co.uk
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 940

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1516
Entropy (8bit):	7.8512310780832495
Encrypted:	false
SSDEEP:	24:vKpBxviPrPZDqDEvnsg0FxXgNzr6V4a0JPt0Incvk2IQMkQvvLHwQ4Fqu6:JrSEvsg+XB4aUPtBnEMfbw/qp
MD5:	3387079E64AEEF77115B6694ED51A804
SHA1:	2BA0EAF4E349DC77C2CF5C78EB3C71EEDC03562B
SHA-256:	DDF18332E09563643386A88461406EF0EB8D747FC7CAD2F9EEB9C778E744A65D
SHA-512:	EF6964E4F1516E6421B4657783BF900046380048DE1BE69D23C3775453E6B6BCA1E73EED1989B1B7749F63B6A7B106E1ACC0F958B39AC21A56EAD252A4966EC3
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.godaddy.js
Preview:	.......Yo.s9..&mdav.=?..I...x....#.$...jM.g."\|.....{w....r..@..S.......n....k.w;....!..f...\|.....yD.%y..o.LL...^`...X.=w..c..l<...1f....T..$..]...2.l??....)!.z.)gT..4N..qMM.....t......Z(]...O)d....mw/..1.^...qG....V..P.tz.IG....(b...9.l....}s<"..]...\....B.&^[CH.....-.i..t..~..\.nt.\|.....n.q%Y..}h...h..v+Jf.n6...p.==7"..U....qc.ZsI.`.#i.a.8!.......Ac.TA!.x#.....M.N....RX^o....t..!.L...vr......C.X`.'.G9..eL,......`.b.),...H....qC.8{...}V..........cfI...y%..Yx...Z.$:..b.......]....B.73...$.....f<?..IUF....$..no....~fett...^TI..t~'e....N....1.>x...cBOz....>...r.....h......\..z.[opt.?..K......[}.....oU.o}.F.he6.)..p.<^..y..W+.(.4...+].A....QO.L9.A.....7..[YG.!.A.z.-.....[.........7)...e..6q...K..,.....1.qUq...4....}....Q....y{....(.....:.XbQe~.?gy.m!.LU...";-K..gC`..w...;...T..).......g...>k.l....b.( ..~...\q...JY.^.M)F.Y...1.p.rE.9xm.W..E.-N..g...yq..P....,.o..E..n....7T..S..[./.y.).ilv^.......sj...-.i.?....Y......!.....6..Q.

Chrome Cache Entry: 941

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	4.5838540784173185
Encrypted:	false
SSDEEP:	3:YVXKQJA68nk/qbSpgmpGTHbS3RlwVDfDnrgGWWm3EIoupAfxigZan:Y9KQOZ/bYATHbShlgTDn0j3EXup6xiN
MD5:	4A699AB967F2DD49E4F38AF362B8D024
SHA1:	7D669009289142258EC9DC0C1AD195F63339F727
SHA-256:	228A3C6B3E55CC67FF5EAF704562A801471F2D4C0CF58E8914EA1EE8D5ADC32B
SHA-512:	608DA6A7CA428464072C9AF323E20979DDF7A0284ADA123B5380262CD53ACAD5280E7DC6DFB5FEEF28E5DC7A723D7BC1C0BD7C176FE623023A8C3B99A394BF2C
Malicious:	false
Reputation:	low
URL:	https://id.crwdcntrl.net/id?gdpr_applies=false&c=17728
Preview:	{"profile_id":"b74b370c6603a90653038a464f3a29da","core_id":"f12134443c665d08de78ec793d9316d53938751b3fec53dcd3ef9cafb83e45ca","expiry_ts":1737241943108}

Chrome Cache Entry: 942

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 943

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 944

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 945

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 73, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2439
Entropy (8bit):	7.809290806755739
Encrypted:	false
SSDEEP:	48:i5MbYTn7ruuHkJVK1wAUc2zptwQ1U3t7ddSIT+gZFlI7Thc:i5McvrKvAUNzptwQ1rpelV
MD5:	6CDE551752C3DDF86B64DD5C0158FD13
SHA1:	B8C39ED9A617C68D52AD9893A7FE9409FA561C63
SHA-256:	CCFDE13123C12CE3F6BED6057742CE94960882A3C5B70C1C3B29C58CF170D748
SHA-512:	1E5EFBC5146B9C192A3C45CF69B8D2B693567E222A90E36084B673DD70656AEC2132A1FC812FAF6ABD1E264DD92ACF262C2E1BE87447BDF78AFEFB01E2B935C6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......I......<......PLTE.......N.Ip............Em. O.............$S.7a.............p.......Tx..........x........Go.k........q..#R....9d.}..Bj..........(V.......o..Aj.Sx......\..[~....>g............w..z..!P.d..............b...........\|..?h....4_.<f..............=f.t..6a....8c.....X.@h.u........8b.:d.......................3_.v......^.....e..i.....y....,Y.......1]....c.....Ns.r......Z.n..0\....]......."Q.^..Ot..............O................5`........Rw....Ou.......2^........X\|....Jq.......Z}..../[........-Z....Ck....m..`..Kq.......Dl.f..Lr.......g........Ms..............&T.@i.h.......%T.j..)W.........Y}....................'U.Ho.......{......)s}.....IDATx...YO.Q....X.......R\p.Wp.A......s.13-w.......7g...$..?...l......`..`..`.@..@................`..`..`.@..@................`..`..`.@..@.......{...Q.......C...=...>.k.....&O....<......i..h.//..N]....i.lT\.....L...P..\|...+....r.b..6......z..7....8mb).n...h.).n..K..[Q1

Chrome Cache Entry: 946

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	225
Entropy (8bit):	4.872177949990257
Encrypted:	false
SSDEEP:	6:YCTekALLWvSwtHLjWDcywtHLwNMSuf8m0iD/qjNn:YCeeztHLjicbtHLSPQ81O/4n
MD5:	F88B6B4CC11C20A97A2CF201B7BE5DBF
SHA1:	A18E1EEDCEE504894AE0E0829A598217752E1FF2
SHA-256:	08CAAC443E199D328FDE5DBE2D78CA3A0D344A27B8017D5B43045ED0FD319470
SHA-512:	95BE58A5AB1E8F54B9B670694769430F69E69B9E408F043BA9551B924794B09BC268EEEA57D1065E2E9B7E6ABDC432300BD389E519454D168C6195315C6937F5
Malicious:	false
Reputation:	low
Preview:	{"gdpr":{"additionsChangeDate":"2023-12-12T16:26:23.360Z","getMessageAlways":false,"legalBasisChangeDate":"2023-12-12T16:26:23.360Z","sample":false,"version":7,"_id":"65782db64f9aee39d217c1d9","applies":false,"sampleRate":1}}

Chrome Cache Entry: 947

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32029)
Category:	dropped
Size (bytes):	534233
Entropy (8bit):	5.3426163690118
Encrypted:	false
SSDEEP:	6144:iocZIvNiY/EZ7NQ//HyBGtUD/4K0x65/hSJi/5Tz:Tj/ybiQD5/Ci1
MD5:	5295FC679EEA80780246F38A98DF4119
SHA1:	AB671B1376AE82788886E2E18C4FDB7B7AC6FCC7
SHA-256:	C1CD4E7693F8C40D13259E8AC271CD0B6870875CA6C69B78D50AEDE9EEB63B67
SHA-512:	875BBDBAA20DEDC45DD6658886DF4B2E04EBA47489A2382F809C3F4EE96817B8A1A99863B812E983BC89AA435E3FA72AC4F0BE0E979241A168B1D2D7B0097CD5
Malicious:	false
Reputation:	low
Preview:	(function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:false};e[r].call(i.exports,i,i.exports,n);i.loaded=true;return i.exports}n.m=e;n.c=t;n.p="https://cdn2.editmysite.com/js/";n.p="https://"+window.ASSETS_BASE+"/js/"\|\|n.p;return n(0)})([function(e,t,n){e.exports=n(321)},function(e,t,n){var r;!(r=function(){if(window.Weebly!==undefined&&window.Weebly.jQuery!==undefined){return window.Weebly.jQuery}return window.jQuery}.call(t,n,t,e),r!==undefined&&(e.exports=r))},function(e,t,n){var r,i;!(r=[n(1)],i=function(e){window.Weebly=window._W=window._W\|\|{};window._W.utl=window._W.utl\|\|function(e){window._W.failedTls=window._W.failedTls\|\|[];window._W.failedTls.push(e);return e};window._W.ftl=window._W.ftl\|\|function(e){window._W.failedFtls=window._W.failedFtls\|\|[];window._W.failedFtls.push(e);return""};window._W.utl=window._W.utl\|\|function(e){window._W.failedUtls=window._W.failedUtls\|\|[];window._W.failedUtls.push(e);return""};window._W.stl=window._W.s

Chrome Cache Entry: 948

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (424)
Category:	downloaded
Size (bytes):	483
Entropy (8bit):	5.187598369372473
Encrypted:	false
SSDEEP:	12:7dMVjvP9EBMLlMsV1pO25Ck5130V17rGDRFHHQNHYIe0ab:72PjlMsV1pO25130V1XGNFHQYh
MD5:	ECD43378215E1E07D837DC33F7EEBEB0
SHA1:	FC85EA0DC1BED00C9C295F7AD9A7B4DD931DE6F3
SHA-256:	81063E6E23642D2A30FA32891E9F3271C65EA934C841E88F03D95B935FC6E499
SHA-512:	107FB34905610E95DAE4F0F63D60C1D6FB6FFBF506765D66729615111E1B617102EB3D4E7611CA4DB9E6345CA80AD8E06AA61F365478194C7B6E4754BAEF6931
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.alt-login/forgot-password-link.07472780.js
Preview:	import s from"../ox.js";import n from"../jquery.js";if(s.serverConfig.enhancedPasswordLink){let a=function(e,o){o?e.indexOf("%email%")!==-1?e=e.replace("%email%",encodeURIComponent(o)):(e+=e.indexOf("?")!==-1?"&":"?",e+="user="+encodeURIComponent(o)):e=e.replace("%email%",""),i.attr("href",e)};const i=n("#io-ox-forgot-password a"),t=i.attr("href");a(t,""),n("#io-ox-login-username").change(function(){a(t,n(this).val())})}.//# sourceMappingURL=forgot-password-link.07472780.js.map.

Chrome Cache Entry: 949

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65024)
Category:	dropped
Size (bytes):	188909
Entropy (8bit):	5.041200648730947
Encrypted:	false
SSDEEP:	3072:TvVWO97/ZoIdrvrgc5/f2XP4mTieamfKqz0/pvlU+571iiNbAylRXrhYNrNu35AJ:08AvMpU
MD5:	F35D83B5554D4B4098D115F8C6FA4190
SHA1:	C3A3718A2BCC97956A6FC19341F5CA45883D9C8F
SHA-256:	0F86EAECBB74174EBB700CC768966211E698A7E6BF6B19227CD0B89DB43E14A0
SHA-512:	24F02BC7CAF38B48D5B1017903DC2BAE866CE738AF4F56D398E4F14A42D4B58364224860A29CB6B16E1C8A709CEF13EFB07F584DA1B2DA75BFBCDDA359EF0DDE
Malicious:	false
Reputation:	low
Preview:	.window._W = window.Weebly = window.Weebly \|\| {};._W.getSiteLanguageURL = function(lang){..return '//assets-staging.weebly.net/js/lang/%lang%/stl.js?buildTime=1234&'.replace('%lang%', lang);.}._W.tli=function(s){return s;}._W.siteLang = 'en';._W.ftl=_W.stl=(function() {..var f = function(s) {...var t = tls[s] \|\| s;...var a = Array.prototype.slice.call(arguments, 1);...for (var i = 0; i < a.length; i++) {....t = t.split('{{'+i+'}}').join(a[i]);...}......return t ? t.replace(/^\\s(.+?)\\s$/, '$1') : s;..},..tls = JSON.parse('{\"authorize_net.errors.E_WC_04\":\"Please provide mandatory field.\",\"authorize_net.errors.E_WC_05\":\"Please provide valid credit card number.\",\"authorize_net.errors.E_WC_06\":\"Please provide valid expiration month.\",\"authorize_net.errors.E_WC_07\":\"Please provide valid expiration year.\",\"authorize_net.errors.E_WC_08\":\"Expiration date must be in the future.\",\"authorize_net.errors.E_WC_15\":\"Please provide valid CVV.\",\"authorize_net.errors.E_WC_16\

Chrome Cache Entry: 950

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	30
Entropy (8bit):	3.840223928941852
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHXAC/HfI4:YGKed2pHXI4
MD5:	2B10F2ECAEB05ED9F61299877AE57299
SHA1:	9BC0D55F458E1EB66CA778E4322D46D0175D6D8C
SHA-256:	8F8BA42D03A7C5A04626835A48B8212F61A3440E51D66B4B866A8D20ACF32F57
SHA-512:	B73C28C40A33F471BFC9893FD79C6835837E28EF770F352B2A63CB3EC68ADCEB042B8A91E31C23C5E4BDBE246053A55214FC77A00C7DEB50D41E154E66969AD9
Malicious:	false
Reputation:	low
URL:	https://geo.privacymanager.io/
Preview:	{"country":"US","region":"NY"}

Chrome Cache Entry: 951

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	454
Entropy (8bit):	7.572415477586432
Encrypted:	false
SSDEEP:	12:g+vCHa0bICtJLqWUOs4B6w4aygY1ZMOErXfdVnvTKl:gY3CthO395gYPIrXml
MD5:	FE973CC7234ED6DDB73B14D8027C8F1D
SHA1:	F20AA42246AC12AF75E75C9359C6D101B78C56E2
SHA-256:	67D91D1DE4C582183A30764B90A81DBAF74D7F28BE81EB83444F51734AEB922D
SHA-512:	7B6F390D4EE0D24701C904F092CC3B729894EB30DC112BB8F044FAFB0060F32658A9BA66B4631E5CEE9B5E200172189CB82D5A6042666B8BEDA18C470B2B9E04
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/com.cm4all/com.cm4all/login/register.js
Preview:	....d3..>/W,..(....G.3.,.m.s.n...M..:h...6...}........=[b<..B..E..h(Qz.0'..Z..)$..~$...4..doc..UL.{..<C.J.Q......K..T.Zo...&.!....8..e....M..3....5.9...$[..d.:;;..f.......cd2w^..6....Ah.....j2..8/%...`.47,/.,^9....S#.e.K..@..\|.......8..M.....-?x....4........AC{)D%l8.7 O..>>...P..;A,....Fp.jAu....h......i.K..`..&....H.JmG..'x..s.(R<q\?".*.e}...1.qa.~....LW....[..=..P......S..@.t@.5.5..&...8.^.mH......Z.5h(..b+I......s.....g%..i.....

Chrome Cache Entry: 952

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2439), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	31471
Entropy (8bit):	5.378978189612557
Encrypted:	false
SSDEEP:	768:mIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7Sr1qY:mIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqC
MD5:	A9D2EBD24FFEF1BED753E45F1F62EC8A
SHA1:	7BDB1977CDCECC1A4473425C6DA48BD40CCA4831
SHA-256:	84C67861593C384C6552AC5CDFC97C4A876E60919F6A9214ED8019EBEE714476
SHA-512:	CD98653106A677DFD82959B90B10F79A302233266E8446A6CF328C334E65F7F6887C65C0005B9CD825980693277A2A6229EAB20523FEC25C8C97519C350F014D
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/
Preview:	<!DOCTYPE html>.<html lang="en">..<head>...<title>Home</title><meta property="og:site_name" content="" />.<meta property="og:title" content="My Site" />.<meta property="og:description" content="" />.<meta property="og:image" content="https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tak_orig.png" />.<meta property="og:image" content="https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/tannn_orig.png" />.<meta property="og:url" content="https://talktalk770.weebly.com/" />....<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1.0"/>.. <link href="//fonts.googleapis.com/css?family=Karla:400,700\|Oswald:700\|Roboto+Mono:400,400i,700,700i" rel="stylesheet">. <script src="/files/theme/MutationObserver.js"></script>. <style>. .navbar__logo .icon,. .navbar__center .navbar__logo:after {. color: #2990ea !important;. }.. .header-prompt .navbar__link--login,. .header-prompt .navb

Chrome Cache Entry: 953

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65483)
Category:	dropped
Size (bytes):	93636
Entropy (8bit):	5.292860855150671
Encrypted:	false
SSDEEP:	1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ
MD5:	3576A6E73C9DCCDBBC4A2CF8FF544AD7
SHA1:	06E872300088B9BA8A08427D28ED0EFCDF9C6FF5
SHA-256:	61C6CAEBD23921741FB5FFE6603F16634FCA9840C2BF56AC8201E9264D6DACCF
SHA-512:	27D41F6CFB8596A183D8261509AEB39FCFFB3C48199C6A4CE6AB45381660C2E8E30E71B9C39163C78E98CEABC887F391B2D723EE5B92B6FBC81E48AC422E522B
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /.(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t,

Chrome Cache Entry: 954

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 255 x 198, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	301
Entropy (8bit):	2.759423086377734
Encrypted:	false
SSDEEP:	3:yionv//thPl8Sliok1fKSqjk/ePUs3mAjn666666GrF03tjp:6v/lhP6S0xNKSqjEePfjR6RZ2Np
MD5:	8AB8AABEAB356BBF9C3A7FD370D6DEAF
SHA1:	EE97E590DAA60A51ED028C539AC6AA6CA3115C1D
SHA-256:	7278553BA44412BE9F4F7215402CD7B17822AF273057D341F5CDAF03E5C72F29
SHA-512:	3E63459DDF048889332547E3C7F3667568002805D381C98974F125BC71F85FC89F957AF514F523277685D1D7B5F741A5C197D04A52CC559ED3280177FD71D9F0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............*.......PLTE..........F......IDATx...1......i...!4 ......................................................................................................................................................................................................N..;.2........IEND.B`.

Chrome Cache Entry: 955

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	182
Entropy (8bit):	4.698828353043454
Encrypted:	false
SSDEEP:	3:JSkEEpwJB+QTVYTr3KWGQWALRhAekdVMBF/FhMGQH+sQfZ+C6GMKibrC+evg0/YO:7gP+QTVIr33Tjkd+bq+xB+C/grC5g5/2
MD5:	9F52E15F0DD3FDE0C039C1CE8B13A533
SHA1:	DD4455D689AD5FF2ADAD135B31BF53E0EEA53615
SHA-256:	560B674D8F9E01DE05E57DCDC4199F7737BB151347981A9A5CC2F70380F01082
SHA-512:	0C432ED042F5FD9B6E1E1DE9F450AFCB000F8B3078FDD6A9E4E4C93D70C05904F13874F81D88F48EFEC2765AFB1A21CB9FAFFB0D2786BD8DE43010C5A87A98BD
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/minimalapiconsent.js
Preview:	import{D as i,g as o,d as r,g as s}from"../minimalapiconsent.0e902e90.js";export{i as Dictionary,o as default,r as dictionary,s as gt};.//# sourceMappingURL=minimalapiconsent.js.map.

Chrome Cache Entry: 956

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65402
Entropy (8bit):	6.002456563065244
Encrypted:	false
SSDEEP:	768:HWkkX/uFImb8I+V88o+t8obi8obn8oba8obN+8m+8b8o58o67Ur+8MXkEu0+9+8n:HpkJA8x8L8a8V8C+/+q8I8zUr+HnPMFn
MD5:	85A09E03785232BB0B7B8FE5BE509CAB
SHA1:	85F74F303CF940D5CD2D0B28948326DC0EDE08B6
SHA-256:	481B89561FC6EB45399744B0EC8E34F24159AB8EFBC512617A04EDFF5F607894
SHA-512:	EA0D021A3CE58D5803F2DB2DBB635CB55BCB90B4CDD13FBEF47EBF95BC472269DD6402FB127B05B428B207D1F3CD039EDA09867B873F34A0202AE9A667F18CC1
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3390473262285885&correlator=2608971284095198&eid=31083346%2C31089671%2C31089674%2C31089528%2C83321073%2C31089253&output=ldjh&gdfp_req=1&vrg=202501030302&ptt=17&impl=fifs&gdpr=0&iu_parts=22786333977%2Capps.talktalk.co.uk_displaystandard_300x250_login_bottom&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C336x280%7C320x320%7C300x200%7C300x50%7C300x100%7C250x250%7C200x200%7C336x320%7C300x300%7C320x50&ifi=1&didk=93859726&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1736637144824&lmt=1736637144&adxs=155&adys=529&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=ilt518vlfu97&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=3&nhd=1&url=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&ref=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&top=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&vis=1&psz=300x-1&msz=300x-1&fws=256&ohw=0&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1736637138959&idt=5804&prev_scp=amznbid%3D1%26amznp%3D1%26hb_bidder%3Dix%26hb_adid%3D305ac27409d2c38%26hb_pb%3D0.05%26hb_size%3D300x250%26hb_source%3Dclient%26hb_format%3Dbanner%26hb_adomain%3Dadobe.com%26hb_dsp%3D81%26hb_crid%3D29239865&cust_params=amznbid%3D0%26amznp%3D0&adks=3655555281&frm=23&eoidce=1&gblpids=apps.talktalk.co.uk_displaystandard_300x250_Login_bottom&td=1&egid=15786
Preview:	{"/22786333977/apps.talktalk.co.uk_displaystandard_300x250_login_bottom":["html",0,null,null,0,320,336,0,1,null,null,null,1,[["ID=dd1c448acc7a472b:T=1736637146:RT=1736637146:S=ALNI_MYJ-I_wU07wKlZ3U49pqb0RM6CYAw",1770333146,"/","talktalk.co.uk",1],["UID=00000fb4532229af:T=1736637146:RT=1736637146:S=ALNI_MYvXx4fEtaN4jhX3HnOZ_XuwtZY3Q",1770333146,"/","talktalk.co.uk",2]],[138402836221],[6094372239],[5206671035],[3072062848],null,null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CJmY1sHl7ooDFSTzEQgdevAL_g",null,null,null,null,null,null,null,null,["012410292120000"],null,null,null,null,null,"ilt518vlfu97",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=65b6c4f336faf10c:T=1736637146:RT=1736637146:S=AA-AfjbqWICWhKFwoZQz6oc8z0Wy",1752189146,"/","talktalk.co.uk"]],[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,mini

Chrome Cache Entry: 957

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65024)
Category:	downloaded
Size (bytes):	188909
Entropy (8bit):	5.041200648730947
Encrypted:	false
SSDEEP:	3072:TvVWO97/ZoIdrvrgc5/f2XP4mTieamfKqz0/pvlU+571iiNbAylRXrhYNrNu35AJ:08AvMpU
MD5:	F35D83B5554D4B4098D115F8C6FA4190
SHA1:	C3A3718A2BCC97956A6FC19341F5CA45883D9C8F
SHA-256:	0F86EAECBB74174EBB700CC768966211E698A7E6BF6B19227CD0B89DB43E14A0
SHA-512:	24F02BC7CAF38B48D5B1017903DC2BAE866CE738AF4F56D398E4F14A42D4B58364224860A29CB6B16E1C8A709CEF13EFB07F584DA1B2DA75BFBCDDA359EF0DDE
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1736370530&
Preview:	.window._W = window.Weebly = window.Weebly \|\| {};._W.getSiteLanguageURL = function(lang){..return '//assets-staging.weebly.net/js/lang/%lang%/stl.js?buildTime=1234&'.replace('%lang%', lang);.}._W.tli=function(s){return s;}._W.siteLang = 'en';._W.ftl=_W.stl=(function() {..var f = function(s) {...var t = tls[s] \|\| s;...var a = Array.prototype.slice.call(arguments, 1);...for (var i = 0; i < a.length; i++) {....t = t.split('{{'+i+'}}').join(a[i]);...}......return t ? t.replace(/^\\s(.+?)\\s$/, '$1') : s;..},..tls = JSON.parse('{\"authorize_net.errors.E_WC_04\":\"Please provide mandatory field.\",\"authorize_net.errors.E_WC_05\":\"Please provide valid credit card number.\",\"authorize_net.errors.E_WC_06\":\"Please provide valid expiration month.\",\"authorize_net.errors.E_WC_07\":\"Please provide valid expiration year.\",\"authorize_net.errors.E_WC_08\":\"Expiration date must be in the future.\",\"authorize_net.errors.E_WC_15\":\"Please provide valid CVV.\",\"authorize_net.errors.E_WC_16\

Chrome Cache Entry: 958

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1126
Entropy (8bit):	7.79819006820677
Encrypted:	false
SSDEEP:	24:u1QxXIVc30YODg85/H38aRmkbttdrj9Xm7DdUqOonAk0m6OHk+0NYDP:u18GA6XVHsFitH39WfdqoAkMOE+0NYz
MD5:	B11EBF50BAE1D31FD43BEF4D28613623
SHA1:	A665A72E74B448974804D4A8626CAF952506659C
SHA-256:	7491104A2A15C9E40C060D96268B532E16E5B34BF0AC10FB4254668A2B19AC54
SHA-512:	977110D22B7D235050F55A1823C2DCF1D4AFD1AAF9CB27A34A768A1B4687408DEA928E461F3A79B099AC6C62458B9311F0C312E4725F7891A8A6368B842315F4
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/guidedtours/i18n-ORsXC62r.js
Preview:	.}...o....?_.eA.Hj.T...q.:...6...> S...Z.}.#d.H.W..=.m........fJ'.":......^....D.....9...R...f....3PH.;l..n...[...)...`.V5...6^A..w4.?.w.P...........z...by.....(......~..... ~...............XHa.7..\|.wz......../.kc.P..m.....%_.n1..)G.]..m.Pr9.`......m............\........B.y....e.,p..^.......W......(.O.y..w!.... ...Pa..M.Q...m!.....V..J/..Y.....7T..Vy.EL..f4~8......j@...N...4.Z.5..#b......%._....Ae.4.F....Q.....I.~...].F.R....D+#.m..hv.S......U........".4B.~..(._+......?@a.....b.....>FHH9.......e.N....Xy.'9.N....w.;.....<.L.>...wZ.Gq.O..G.@.....}[~k.T.o...f........1......ey......Pe..`!..n....2.-v....j.M....7.+.&....:.........R..S....:..$..vy..vV(!.H&A...........Z..0.o.z...j.Z.,./GQ,....L/;...a..+!D`j..$....c..{.V...5.(...Zcq..@.xD.W.h.W..N......q.(..HM..*.}.}...O/p.^t}.fR.......Lbi.<G.g....G.]3....."..]2......T.l.h....2.=.l]..A..8P.V.s..a.+.f..(.M$5....q.2..HKi.~..[Np.`.H..G.R,N./..b...Z.u.....]z.B.xs.m.`n(.w..+....T.....=Ru...%.H...

Chrome Cache Entry: 959

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (1734), with CRLF line terminators
Category:	dropped
Size (bytes):	63931
Entropy (8bit):	4.950105392687923
Encrypted:	false
SSDEEP:	768:ARqHKkiA6AOaLnOtmEs+qp6yhCQ1CAHHPxEXTBo8D/yFc7oTkIg:A0HiA6BaitmExq0yoXTBoVc2g
MD5:	8C5A53DBD4CA76B420A8BD50A17E6EE7
SHA1:	3209E70583A1E1141EFB36B3E35B5C423951FCD7
SHA-256:	B61EA665D519A5DE06F42C078924CC07FCBC59A548ED7083A8858CB42A31A6C2
SHA-512:	4A53865A74B2FF6965BEF36FCA561B000519DA32F8B3EA22BCDFE47175B979AC36AED898FBDFC5B58CB34BF429441202DD398EAD80ABC46ECF493ACCFCE45449
Malicious:	false
Reputation:	low
Preview:	var AVP_CMPVENDOR = (document.location.toString().indexOf("appsstaging.talktalk.co.uk") !== -1) ? 'inmobi' : 'sourcepoint';....if (AVP_CMPVENDOR === 'inmobi') {.. try {.. if (localStorage.getItem('_cmpShown') === null && sessionStorage.getItem('_cmpShown') !== null) {.. localStorage.setItem('_cmpShown', sessionStorage.getItem('_cmpShown'));.. }.. if (localStorage.getItem('_acceptanceState') === null && sessionStorage.getItem('_acceptanceState') !== null) {.. localStorage.setItem('_acceptanceState', sessionStorage.getItem('_acceptanceState'));.. }.. if (localStorage.getItem('_gppHash') === null && sessionStorage.getItem('_gppHash') !== null) {.. localStorage.setItem('_gppHash', sessionStorage.getItem('_gppHash'));.. }.. } catch (err) { console.log(err); }.. !function(){var e="appsstaging.talktalk.co.uk",t=document.createElement("script"),a=document.getElementsByTagName("script")[0],i="https://cmp.inmobi.com".concat("/choice/","3u-Xr_66xMjXM","/",e,"/c

Chrome Cache Entry: 960

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	67465
Entropy (8bit):	4.809594108927749
Encrypted:	false
SSDEEP:	1536:59rPpU1wHKYTpQ73CHJHDuYL/OHHeZF+YwLMC0ht/uJFO0815wZDk5/2M:59rPpl1NQ73CHJHDuYL/OHHeZF+pLM75
MD5:	2B8D85F1EA01D2C3E8B962EAC8D76A5C
SHA1:	936987A7E08DAA4A916C77D86937EDEE42D657DA
SHA-256:	B6353CA52760ABA4E7547AE9861DB68158DC2AF0F4FEBECE55E5C775EE4449F5
SHA-512:	F64D0E9FC7ED02F4C7B3CF7FD680DF3A6F8F4CEFADEEA63553D0F0A4BB5472ABF5EE754C0E056CD91272F0108910347BA6F3CF23C825FD89260CF0545DD0702A
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/files/theme/plugins.js?1736412329
Preview:	./! Hammer.JS - v2.0.4 - 2014-09-28. http://hammerjs.github.io/. . Copyright (c) 2014 Jorik Tangelder;. * Licensed under the MIT license /.(function(window, document, exportName, undefined) {. 'use strict';..var VENDOR_PREFIXES = ['', 'webkit', 'moz', 'MS', 'ms', 'o'];.var TEST_ELEMENT = document.createElement('div');..var TYPE_FUNCTION = 'function';..var round = Math.round;.var abs = Math.abs;.var now = Date.now;../. set a timeout with a given scope. * @param {Function} fn. * @param {Number} timeout. * @param {Object} context. * @returns {number}. /.function setTimeoutContext(fn, timeout, context) {. return setTimeout(bindFn(fn, context), timeout);.}../. if the argument is an array, we want to execute the fn on each entry. * if it aint an array we don't want to do a thing.. * this is used by all the methods that accept a single and array argument.. * @param {\|Array} arg. @param {String} fn. * @param {Object} [context]. * @returns {Boolean}. */.function invokeArr

Chrome Cache Entry: 961

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDA5OTIwOTg5MDI3NTA5NjU1OTQ3Ng%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 962

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6207)
Category:	downloaded
Size (bytes):	7339
Entropy (8bit):	5.6356738811676435
Encrypted:	false
SSDEEP:	192:Cz2a4+bJIztxxD58DIxKIGJbL0y3XKxyqzKb9JbAbtLbxp:Cz2LaIzjxD58D1J0GXsyqzI6
MD5:	E342EE18AC99A79EEEE7602A1371A504
SHA1:	4151F0CCF5697238A1E135C63F001028EB1694F0
SHA-256:	D398FB09066D02A472CD16D38DC317DB43BC4F4FCA1656FC53446BAABD4D4261
SHA-512:	F68D0D1B58496CB9326DA946C3FBA105E5451CC72A4D74159FF588AB3BF005EBC87A085C187776D398115640CE3C7DB83546C60511BB114DC9C4F45DCC6DC78E
Malicious:	false
Reputation:	low
URL:	https://rtb0.doubleverify.com/verify.js?ctx=22028527&cmp=32927927&sid=6921079&plc=411654966&crt=227524103&advid=9251674&adsrv=1&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&unit=728x90&prr=1&turl=https%3A%2F%2Fapps.talktalk.co.uk%2Fappsuite%2F&aucmp=22080093835&auevent=ABAjH0htc-RI27SNFbNB_v9ol3fi&autt=1&ppid=103&aucrtv=618557214&auorder=1019743255&pltfrm=1&ausite=18022376301&auxch=1&aufilter1=849131&c1=849131&adid=&app=&dup=&gmnpo=&isdvvid=&supplySource=&tagtype=&aUrlD=-1&brid=3&bridua=3&brver=117.0.0.0&brh=3&vavbkt=&lvvn=28&fcifrms=10&winh=90&winw=728&chro=1&noc=4&wouh=984&wouw=1280&htmlmsging=1&refD=2&scah=984&scaw=1280&jsver=7057&uid=1736637151024177&srcurlD=1&ttfrms=61&num=6&dvp_isOnHead=0&flvr=1&ver=7057&jsCallback=__verify_callback_1736637151024177&jsTagObjCallback=__tagObject_callback_1736637151024177&ssl=1&m1=96&blkmode=2&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=38260804504.366264&ee_dp_sukv=38260804504.366264&dvp_tukv=9613644610.659935&ee_dp_tukv=9613644610.659935&dvp_strhd=0.5999999999767169&dvpx_strhd=0.5999999999767169&eparams=DC4FC%3Dl9EEADTbpTauTau2AAD%5DE2%3D%3CE2%3D%3C%5D4%40%5DF%3CTauU2%3F4r92%3A%3Fl9EEADTbpTauTau2AAD%5DE2%3D%3CE2%3D%3C%5D4%40%5DF%3CTar9EEADTbpTauTau2AAD%5DE2%3D%3CE2%3D%3C%5D4%40%5DF%3CTar9EEADTbpTauTauabdb366%606f_a%60hb5g2_g%6062_g7__543e%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3EU2%26C%3Dl9EEADTbpTauTau2AAD%5DE2%3D%3CE2%3D%3C%5D4%40%5DF%3CTau2AADF%3AE6Tau&referrer=https%3A%2F%2F2353bee1e702193d8a081ea08f00dcb6.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html%3Fn%3D1&dvp_rdyst=interactive&dvp_excm=2
Preview:	var dvObj=$dvbs;var impId='2656b00c20a24cb590a4a538fe63e443';var htmlRate=0;var runTag=0;var forcedCollection=0;var sources=0;var adid='-1137634837689680204';var urlTypeId=17412;var ddt=1;var bundleID='';var date='20250111';var prefix='xrw20240718';dvObj.pubSub.subscribe('BeforeDecisionRender',impId,'AttributeCollection',function(){try{try{!function(){var p={dvp_ac_version:"0820"},v=window,e=0,t=v.navigator,r=v.location,n=window.chrome,g=(Object,parseInt),o=(String.fromCharCode(10),void 0);try{o=window.top}catch(e){}try{for(;v.parent&&v!=v.parent&&v.parent.document&&(v=v.parent,!(10<e++)););}catch(e){}var c={};function h(e,t){c[e]=!!t}function d(e){var t,n=0;for(t in e)e[t]&&(n+=Math.pow(2,t));return n}var l=function(e){for(var t={};0<e;){for(var n=1,r=0;2n<=e;)n=2,r++;t[r]=!0,e-=n}return t}(sources),_=v.document;function b(e){for(var t="",n=0;n<e.length;n++)t+=String.fromCharCode(e[n]-5);return t}h(0,v==o),h(1,_&&""==_.title);try{!function(){if((2==ddt\|\|3==ddt)&&"undefined"!=typeof

Chrome Cache Entry: 963

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	dropped
Size (bytes):	355141
Entropy (8bit):	5.286400238598788
Encrypted:	false
SSDEEP:	6144:HgbA28O5RNS2h4D2PU0l1dCmJX50n3YUCcNL:HgbZZPNS2h4D2Pb1Imp5ICcJ
MD5:	7E51AA38DB51FCEB0AFB5B4671F303D3
SHA1:	A4EAFDAE09AEC82AD158DDBAEB57F537D97E8DBD
SHA-256:	9C234A39335C68EFA876173F1AF885A07EB982FDE169E3627C70956BA0088313
SHA-512:	BEF6CED66BCB754A3C05D9C86D432041159C01A6A250D2EA23402F6C24504C0C10C1916FB5CA4886C66D90E3C581D93A3CCFF4960EF97B1E190416E50011910A
Malicious:	false
Reputation:	low
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.1212.711 - 2024-12-12 07:11:37 /.!function(){"use strict";var n=function(t,i){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(n,t){n.__proto__=t}\|\|function(n,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i])},n(t,i)};function t(t,i){if("function"!=typeof i&&null!==i)throw new TypeError("Class extends value "+String(i)+" is not a constructor or null");function e(){this.constructor=t}n(t,i),t.prototype=null===i?Object.create(i):(e.prototype=i.prototype,new e)}var i=function(){return i=Object.assign\|\|function(n){for(var t,i=1,e=arguments.length;i<e;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(n[r]=t[r]);return n},i.apply(this,arguments)};function e(n,t){var i={};for(var e in n)Object.prototype.hasOwnProperty.call(n,e)&&t.indexOf(e)<0&&(i[e]=n[e]);if(null!=n&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(e=Object.getOwnPropertySymbols(n);r<e

Chrome Cache Entry: 964

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	downloaded
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 965

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1553
Entropy (8bit):	7.861687822973527
Encrypted:	false
SSDEEP:	48:J+ysdljEfJzwKjQ8jHR5eeXfN53h8tv6Do7fPEb:UyQgJ8K5HR5ekfNnavFPEb
MD5:	F07E24D43439518C70D2D0FC79BFFBCA
SHA1:	E27E54424B7668C953166DFCD97864C6557D4CEC
SHA-256:	9A67969A57F3953B3E3EA5AC430C56F31D4C44B6E3915D0A2CA071807C1640EA
SHA-512:	248F3057384E831FC7A919F5305D4C4F07731567FFEFBEC32704CA1F54E0BD3B4E701DF3ECBDF3D4FD0E6381DBB61E4D9612EB6D3448C1A2D4B6E9A5660EEC2C
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.dumpster-f4301a77.js
Preview:	.L.....-...?_xg.'..{2w...4/...>%. Smdj....3.%...Y...E.Ui&..C..?F{.,.CB......Q.......PM.>^b.a...j..?....{r..(......<p..9... l."..#..,.=".eFC.8X...n\93^K5.. gjN-.H{..Z....X2....2.c..\|.C+...g.&."...x....e.".V....@.Q..T.2@e.....v....`..".T. ..N..tD.....V......y.&Z[.'.....-.iO.h....^...z].>.l].r(........h.I:..V2.n...T.W..RF..._..`...h.$.`.=ic.c~.g.).....tS..gc.2.!..[.8e.3.Ka.^......w .L..^rp...`.R..c.EF.+C9.i.\..8.q....-M....p..&.......&.v..,'.jIgG...:4....R..q..qQx...0q..b#.)...X.....P.....L.X..=b12....p...K?6C._..x(!......8...Li.....\|...g..F.?..?........_l.P>.. >S:H.j.G.{.{..;..G..b.^..o.A..$p.B.M........8..#@..$.."...>%.#.....(Te....A.1.B.?.3..".....b.......R..o...vX...O/{.....qdYb..e...0......8..#..rDL,..d....j{..4...T..j.@.....F... s..0.b.#`..D.....4k..y..Zg.lO.).7o.9..x....67i@+:.Z..B..3...v.PA.%..&Bd..o...6.E.%...F.#^n.s4...".....M.b......}..Q....`...7.0T.....-.%h[..C..k_....).N#\q..8...T..c....C.oU...N...X;-..$s..%..}.\Y.].%...../...w..'..

Chrome Cache Entry: 966

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	909
Entropy (8bit):	7.7901685154841624
Encrypted:	false
SSDEEP:	24:LYRk7qfBIwxu1cDARXicsJsBWj3DY/PLwuyaSLO63/i:UCWfOwmX0JRuytZi
MD5:	A151FF8878079359DF7364348DD6E9A6
SHA1:	992961738723C9A2E349DC96C866C5BFD4531E84
SHA-256:	1A01F77E7BF73D0BFD92D8F884BB746AC2A1031257AEC9BC872E0F59183E934B
SHA-512:	15A5784D6967DB7F90EF80C50CC63F98F3C90547E6C6A436016244538EE6EE6DA55AA92D8F4C08154E40AC1E03342B13E53C1344FCADFE186D730BF60890E1D6
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/popkeep.js
Preview:	.D...ZjN............tJ..X....nG...Ul.......s.6f#..#!.V(fK7..6.....S.3.npJ.r...f.D..@l.[>..spP.>.tK/..j...#.a...!..j...?\|.O.IoJ>.y.S~6.1l.{..^....e}.........C..J.w^..\_.`(J...j..=.:.R.[.G...2.......NrRU..x..N.,s.....hu......d....}.@.5..;q...U.A..W....\... .......i..yq.{a0...".%........................~.GG<.(+....4q2iE..{Dk7.X.`X..X.<...~X........Iv.P.......7.t;..$..........!/..j..d..w?..../.......J.4.......n..it........V;.q'.0P.r...`"{...;.e$...H3.g@.{{....NZ.a.CT......;.. ...<..m..Y.....6.h..m.."2L.h.(M...i....n...........-......A2.....PMf....3v.......*.o.... ..$.i.D.......9^..@."u..w`NX];)...\.5..\.....3..~....yD.........^.......0.%E#.0.@T... ....R....[.X.}`t..!...E.QK.X..@~..d...n.W...];df.uVHD..Q..u.`_\Qh........a..K.(..s..#.l...'.vV...@....CP..at.m.!....Xb...YJ)..\x.}d....\|+..G.;>.i0...Zv...A.....Y$..>x......9.6[<q.....^...>..^.c/......

Chrome Cache Entry: 967

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	2.8722910533148776
Encrypted:	false
SSDEEP:	24:suJa888888888888888888888888884JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJCJw:0yTTTTTTTTTTTTT0
MD5:	CD381052CCFFDB3FE5850050DCBDBE22
SHA1:	DFC774D0FAAA34C882B5C53380003E8D61CF2620
SHA-256:	C7919584D30AB90FE680A39E13CAA764D903E4C10F968BDA4D79FB30370DDA87
SHA-512:	837FE82E60095C14CDF7D858527919561092126202B851FF71122E3C0CAD81112BFDCA4189E6F5661178E2B0DC57B09E0E3F067CD43F7CBC1F230F60737672B1
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/themes/uk.co.talktalk/favicon.ico
Preview:	...... .... .........(... ...@..... ..........................U...F...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...J...F...U...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...<.................<...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<...<...<...G...................C...<...<...<...<...<...<...<...<...<...<...<...<...J...J...<...<...<...<...<...<...<...<...<...<

Chrome Cache Entry: 968

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsv6cSat19RZuXY3We35kaKtT5dXNb5owyRHX5HUpv_AvPEkFoa7nfnhfMdvpHjJjP-21ke_1v0oH-E9w0O3slAfKXu5ND8Y7uj26giij3_2AZmdGKozBj2qEI-l7P1NhSikKqgEPRnedsPOhBlKoProD0Bj5lG1EBKB_SYYhp_HUpsJRN_zT4N5WDVEjmsYAOEVxw&sai=AMfl-YS0MsJkQibvQmwZXwX-UW-fcoIAcwfaKDJrLI5XFJ8kG6ASc4s9q6WuSUwAz5Ntgs3wYkejkW1Z_yZFwyzO8E88x2HrSJOAqjf5Pw8wPOJ-eoLcPRm6FzHSBgASTtM4f9NTRoT_vxcQQxBSBHeRiQ&sig=Cg0ArKJSzCc__IqRKwtLEAE&cid=CAQSTwCa7L7d9DPs0UrfSdq67auJqtEfqwHSOFGVguFUVXDQpVr9v2WTR80hUIDzeBPi7KPTeQuvMEw_yD7NAeCxNADLO0x1KmgJwSJ3aUcDZIUYAQ&id=ampim&o=155,529&d=336,320&ss=1280,1024&bs=1280,907&mcvt=1004&mtos=0,0,1004,1004,1004&tos=0,0,1004,0,0&tfs=3837&tls=4841&g=100&h=100&tt=4841&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 969

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 255 x 198, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	2.759423086377734
Encrypted:	false
SSDEEP:	3:yionv//thPl8Sliok1fKSqjk/ePUs3mAjn666666GrF03tjp:6v/lhP6S0xNKSqjEePfjR6RZ2Np
MD5:	8AB8AABEAB356BBF9C3A7FD370D6DEAF
SHA1:	EE97E590DAA60A51ED028C539AC6AA6CA3115C1D
SHA-256:	7278553BA44412BE9F4F7215402CD7B17822AF273057D341F5CDAF03E5C72F29
SHA-512:	3E63459DDF048889332547E3C7F3667568002805D381C98974F125BC71F85FC89F957AF514F523277685D1D7B5F741A5C197D04A52CC559ED3280177FD71D9F0
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/uploads/1/5/1/8/151886692/background-images/1757667267.png
Preview:	.PNG........IHDR.............*.......PLTE..........F......IDATx...1......i...!4 ......................................................................................................................................................................................................N..;.2........IEND.B`.

Chrome Cache Entry: 970

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (351)
Category:	downloaded
Size (bytes):	398
Entropy (8bit):	5.10013931725863
Encrypted:	false
SSDEEP:	6:zK6gXoQR+GWH8Qa+P7MoQRd/ZiqYKwELMLY587IdmXJHvYAGQLM1NMPFixhOaEaX:PgKw+jMBxT12IgXCe9yxE056uEU
MD5:	83952CC491AB5C42F90D59C96FAE44C3
SHA1:	66DD1619D65CB4E56EDF6D034A9907DB5E5C4C22
SHA-256:	B8EF060428873E4665676BAAA58C3B5CC9A9917BEE0B70C96487D96CE25425F7
SHA-512:	A68F3E78421B97D286307EAA1DCA417B0E01A9F5B111DFA32AA2C2227C5462E371D702F7B5912D1C788F0D21E6C6D32AD2D0CAB85D214608892261A1C9D3369F
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/login/register-50911d18.js
Preview:	import i from"../../underscore.js";import t from"../../jquery.js";import e from"../../ox.js";import{addReadyListener as r}from"../../io.ox/core/events.js";e.serverConfig.talktalk&&r("capabilities:server",c);function c(){i({"#favicon":"favicon.ico"}).forEach((o,a)=>{t(`head ${a}`).attr({href:`themes/uk.co.talktalk/${o}`}).detach().appendTo("head")})}.//# sourceMappingURL=register-50911d18.js.map.

Chrome Cache Entry: 971

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=10251C91-83A6-44D2-8672-A4A9C194681E
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 972

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	24573
Entropy (8bit):	4.180357727668446
Encrypted:	false
SSDEEP:	384:BRS9Bqoq/onyBpIeggNSNreqfBWddUJtTfw:BRS9BqoTnkSNakIAtTfw
MD5:	E52201E96AF18DD02C85EB627C843491
SHA1:	5BCDD1480B9BEBCDDB0D82083BDF03A7435D59A1
SHA-256:	397452D9F6A2EA6A2135B45C9E40139C68AC6661F3BAB4413E7299586CCB408A
SHA-512:	2DDEA7E1C2127A0B7A2F19764A1AC1CFD26E2D3C3189647FA3BB987FFD1107F30A9BF219D24726047FE84EE72802B515F6290CEFBA02DF1D854C70F0D3A37D8C
Malicious:	false
Reputation:	low
URL:	https://talktalk770.weebly.com/files/theme/MutationObserver.js
Preview:	/!. Shim for MutationObserver interface. * Author: Graeme Yeates (github.com/megawac). * Repository: https://github.com/megawac/MutationObserver.js. * License: WTFPL V2, 2004 (wtfpl.net).. * Though credit and staring the repo will make me feel pretty, you can modify and redistribute as you please.. * Attempts to follow spec (http:// www.w3.org/TR/dom/#mutation-observers) as closely as possible for native javascript. * See https://github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp for current webkit source c++ implementation. /../. prefix bugs:. - https://bugs.webkit.org/show_bug.cgi?id=85161. - https://bugzilla.mozilla.org/show_bug.cgi?id=749920. * Don't use WebKitMutationObserver as Safari (6.0.5-6.1) use a buggy implementation./.window.MutationObserver = window.MutationObserver \|\| (function(undefined) {. "use strict";. /. @param {function(Array.<MutationRecord>, MutationObserver)} listener. * @constructor. */. function

Chrome Cache Entry: 973

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45
Entropy (8bit):	4.685971707296553
Encrypted:	false
SSDEEP:	3:YJH/9grEfTk1HXFVYn:YJ/KrcT+wn
MD5:	8382CF6F348C9571DA4C8C8C051264B5
SHA1:	89EEB892F1A856A13A60936A2B43B62A1ED2E3E9
SHA-256:	BEEE6B56C3F64D98B0B3CCBFDFC12C81EAB2A5AFDF146020787F7B4785950262
SHA-512:	F5C64A0DF7746E6520DF5C6A8C9124A61D619316DA275628F2C4D073B5F110542E53020F9E167C720D3FFFD864E198A172FC7CD868F4DF608F930B06F9BCC4C0
Malicious:	false
Reputation:	low
Preview:	{"lb":"pE8gRUAYNN1x6VoyvMPbow==","ttl":28800}

Chrome Cache Entry: 974

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1227)
Category:	downloaded
Size (bytes):	10838
Entropy (8bit):	4.990742320491477
Encrypted:	false
SSDEEP:	192:dGggqM/k4Rh8MQLGETZT6OCUr/6Ak1DCfHgMlfwydlEBu:dgZRh8MQLGETZTHTMDCfl7nEBu
MD5:	AADDC66C283EC19435C7F9924C1D3121
SHA1:	704FF72FF2EAC7FF990CE68B4BF35D82F8747978
SHA-256:	F27D9E5F8C19B88DAC22C6F254F899D5F36A910AA82D30B10955C621DE93E2B9
SHA-512:	8178BC5BB35CC0B855E847154065BB5151A749A456EBC5FBE8432E6CBD21278CF7370418A89A222E283909E5997B37FDBAD781C02D54A1FF6D579DCD993A5E1C
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/mandatorywizard.en_GB.js
Preview:	<html lang="en">..<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <style type="text/css">. body {. width: 100%;. height: 100%;. display: grid;. font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";. }.. #box {. display: flex;. flex-direction: column;. align-items: center;. align-self: center;. }.. svg {. margin: 1rem 0 2rem 0;. max-width: 100%;. }.. h1 {. font-weight: 500;. font-size: 1.5rem;. line-height: 2rem;. margin: 0 0 0.5rem 0;. }.. @media screen and (min-width: 540px) {. #box {. padding: 48px;. border: 1px solid #ddd;. border-radius: 16px;. margin: auto;. box-shadow: 0 24px 80px 0 rgba(0, 0, 0, 0.10);. }. }. </style>.</head>..<body class="unselectable">.. <div id="box">. <svg

Chrome Cache Entry: 975

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 57908, version 1.0
Category:	downloaded
Size (bytes):	57908
Entropy (8bit):	7.992536992057631
Encrypted:	true
SSDEEP:	1536:VkZvUCYWDZch540X8WXfYCyfYoqqPG05KP:usCYn541cSY9qPaP
MD5:	A6A814A595002E7C238FD54705E6FBE0
SHA1:	BCAC89EF56848F9E0F10000E17EE26941EDBA49C
SHA-256:	DE4740F067EAC22490E234C33A45560D78C2E2DFED0B847724A6017E486BA03C
SHA-512:	4BC1D355B14D43819C158E39529E9DA45AE8BC1D82A33D933547E714D1E33722B1847B5E1F71FD61A18639A43E1D7BBDE679924F1E888601B0B9DC6AB6B4B6AD
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/themes/uk.co.talktalk/TalkTalkIcons.woff
Preview:	wOFF.......4......Ed........................OS/2.......C...V@.N.cmap...8...:...J....glyf...t......06QZghead.......1...6..A.hhea...8...!...$....hmtx...\....... ....loca...x...{...$....maxp........... .,..name.......3...RT..post...H......".Z.dax.c`db`...............2H2.0001.23`..i.)....?.3....A.....P..$.....(.x.c```f.`..F..p....\|... ........>....R..D.3@...#....x.....x....%.U ..E.{.._b....?2.TUfe._C..2.I%.$K...$..-..l..2.....-3....cp......1........sX..fq...,.......".....[...q......{..>EU.'....g.G.SV....K.D...0...&.;.m..A...G.(~2......y....y.qU}\|.N.\|b....{..5W.[a......y...\|..O...'....(.V<....KO....\|....E...d...k..?...O.8..8[.....}.\|...&I....w.&..?\|.~b....J3j........<~.....;..$...!....k.......R...........}5`..Q....O..C...i....x...g.p.K..6...5=.Y.<.....>$......,.NC..?..P...9.72\.k......j...y?.}t..A.......{.t.bN..P.....].r..rEY.".... ...0...O..a./.1.._u...N......,...MD!...}...x.k T.........+&.^PB]l.....9...,.{..[X...jWF....TM......._.Z....V#..EK\|...X....

Chrome Cache Entry: 976

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	2648
Entropy (8bit):	7.917660052260526
Encrypted:	false
SSDEEP:	48:XwM6+yQs5pvN7pupQEQ/pgvIBx6lwqexDflSlnU8FG1cfvRHru:XwML5ypvxpupQ4IOmxD4nU8FPi
MD5:	DB2AFF8423AA53D4BA070E6094825154
SHA1:	46F9F0BB9F6ABBD42E7720ACDDD6B9F183D5D76F
SHA-256:	C9325E9CC5D4904A50DCC44EC7022C0CFD7E5633AF5771A483CE3DCEFD4ADC77
SHA-512:	F28E5122765C23B021976D5D626235F385F5F91506BB8D06ABF74F874C91829771418872636E4F99DF5397465EFC6F33C940721DA6C1F6B6FA5928E9CD92371C
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/uk.co.talktalk/common.js
Preview:	.f ........\|....r!.......Q3......s..@r..T.jTUu.{.}/3/I!.K.....e@!.....r.O....}..v...E...4c"&..c..A....:r1o....l.EjK...f.c..##: ......<.<(..i..+....K1.&..yR..~a;.1.b..u..<....^.,.\...a?...:}{.........o&.-j;GU..}g..Kg...z.?..F...`F-[.uj...M.....`.)..E.....H.$..[mD.z.b. ...`.~...A....=n...s..c&...+.K..V;n..0...I.'.l~..4....5.X...S....?K...V...=.C...\_blG..B...D....!*..`.$x.'. LR.."e$.....r....A.....xe.....#X.......^..<...S.m:.......q........4.0...ms.h.......5.y...@......g$..x.<#W.r..RL..3..P...'.3.Z....J....%C....c......g.m......eT/..L..J.c.....)j..Lb......4.Y&..."....4.7z......@.......Ji...z._..j\|.v..%....`t..9<TM..sj..}.q.F...xpk..s.i}...q...Q-u...G....vK...x;\|........r.qB.v..`.H......NJ.u@..&.n.#Ps.:.....t...I.8P.t;.k.iZ..........P..O..'.Fu...`..3=....t.7Q.4:%....7..6!.Wu=:.s.M..R.2S.C.....+.D:C..K..c..a.m...a.8u.p./.2R.n.gv.j.35..)v...C..G^.>."N.<..A..`y.A5W,P+\|...T..D(vc..6......$.xR-.JZ0.R..(..`oQg..&T..].v....h8.:..*8..

Chrome Cache Entry: 977

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14547)
Category:	downloaded
Size (bytes):	14859
Entropy (8bit):	5.422245602304736
Encrypted:	false
SSDEEP:	384:ys9X0SCg8UoDthaNyvhCV/KJKWrKFKiL2LKIQNvdNFKyRCLJTsK54:tdCDLDthDQL2IhR8TC
MD5:	ED7158A43AFBBE74050CBCD00342CB0B
SHA1:	3E429B1B69F91170EE2D2B826F452010FF4D7D30
SHA-256:	410E1DF7390B246A2EF4F1D3A511190ED8E724042AEC32DF46E7577E3A95EBC6
SHA-512:	89A0BF2FF978E7C380CF2F695C1D65F961E65E9E9F16728F9794851CC4CC6DF8F9C9B1E97FADB18B0D6FCB55AECADE6632028711224DFA894A1DE14E55117FAD
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/syncframe?origin=criteoPrebidAdapter&topUrl=apps.talktalk.co.uk&gpp=
Preview:	<!DOCTYPE html>.<html>.<head>. <script type="text/javascript">. window.CONFIG_CSM_DOMAIN_NAME = "csm.nl3.eu.criteo.net";. window.CONFIG_CSM_RATIO = 100;. window.GUM_DOMAIN = "gum.criteo.com";. </script>. <script type="text/javascript">. !function(){"use strict";var i=function(t,e){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)};function t(t,e){function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var e=function(){return(e=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function n(r,s,a,l){return new(a=a\|\|Promise)(function(t,e){function n(t){try{o(l.next(t))}catch(t){e(t)}}function i(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.valu

Chrome Cache Entry: 978

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1622
Entropy (8bit):	7.866765268032366
Encrypted:	false
SSDEEP:	48:4UgY5EUJNRBMloZB2LjJl1Mvs/ZZUDXdTypu8Id:4qLylwoPrRZUDXkuPd
MD5:	1306B5578071B7EEE2CB451DA72780FA
SHA1:	CD96C28F7A6A146C96440E4BD5857612BD15AAF5
SHA-256:	0D938D46217CA09267245FE80BB54CA8D1DDBC618345EC390FA4262B3B4AF6A9
SHA-512:	8FCB9612B1D58D70CEEA166B673BF19B90EC4BB0D72B85A59084EF91E287CFDE7324176F69079B27AB2F8BF18B4E15A2E9C39461D070F868EC38780256EBA39F
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.unsubscribe.abf79198.js
Preview:	.........../r......J.q..^M$lS...(K.5}.e.Z#++......D..lR...T'.S.PYP...\|.Cs/...x..i...D...P^.j....c~.q[...../..'.^.._.....y..}\.7..a+.1c....R.....V/.......O.L.Ru..r.....,..qK.%..6.5ng.W..R.6.4qA!....7.&..I...@.[.=.9O;.I..A'....1+{!. .Z.........h...v.l.RD2>LM...B.3..r[..a....R..L..l.zwh..i...,.@.y.F.:M...5...uR.\i...8nU.Z...k..rI.`..1......eJ{.`x>87.Rp6........)..._.+>/...w..:...@..!O.~M.`..S.XbI..R.....2..Z. .....D7...Vq............/p...anZ....A.....o...l...T.P.av..<..1....Q.g.}..2...Ld....d...Xd.W;...r..8..D.rqqK..R....e.j!..Z....?...b.....'.pi..M....U.A..[-L~..5...>OU.9p.;.Hc =.o.8..J..dL.,9..l..xn...i(....-...Nd....uYy....>RK......_...A.}.8....`k..[...i.?...<....[......E.."{....@.Z.......5...:.....Q7Q.[.Z.....{../.$.4...1.....Z..,qq..."._....Br.M......%.$.g....i.9..0..@..Zb$.....F.Hr..8q~."..DS+.M3.!VO...I`........o.... .$...E.l......VJ....K..].w.%..z.(.4SW.Tzr..5.[.%W......d2....5..=.(.J.a.E..l#nF...(....W[<.^.J.~nE5.l...<.$.6.

Chrome Cache Entry: 979

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (615)
Category:	downloaded
Size (bytes):	559653
Entropy (8bit):	5.705680793726412
Encrypted:	false
SSDEEP:	6144:e+5F5hBntAbdgXNGiFqXD3amOJp/syNILr5caQN+cMc0G:bcb+NGiFO3jGa57QP
MD5:	EB1594CE51B7609363C639ED8D50541A
SHA1:	41248D9D099A67E03C0F123439CA906E7CCCE22C
SHA-256:	FBA14002D8020B52EE5DF50C15A9E3ABEA5A03ACBB5FBAAD2596811F1128F471
SHA-512:	5D18DF2BCBDEE51C7F75AD10EBB3535787C8919E5029874AD8883980588318DA7812041331551B8B0910D5D3DEA2A9324DD33C5146000B8E9A808B4376B724B3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var K=function(){return[function(p,v,T,x,I,O,Y,m,R,L,D,Z,V,g){if((p-2&7)==(g=[6,1,34],p<<g[1]&4\|\|(O=v.vD,x=v.k_,m=v.ZW,Y=["Verify your email",'<div class="'," "],R=v.identifier,L=Y[g[1]]+l[g[0]](g[1],"rc-2fa-background")+Y[2]+l[g[0]](g[2],"rc-2fa-background-override")+'"><div class="'+l[g[0]](g[1],"rc-2fa-container")+Y[2]+l[g[0]](35,"rc-2fa-container-override")+'"><div class="'+l[g[0]](g[2],"rc-2fa-header")+Y[2]+l[g[0]](32,"rc-2fa-header-override")+'">',L=(x==="phone"?L+"Verify your phone":L+Y[0])+.('</div><div class="'+l[g[0]](g[2],"rc-2fa-instructions")+Y[2]+l[g[0]](g[2],"rc-2fa-instructions-override")+'">'),x==

Chrome Cache Entry: 980

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32147)
Category:	downloaded
Size (bytes):	480909
Entropy (8bit):	5.418878253776284
Encrypted:	false
SSDEEP:	6144:TW8OfwjsL0W6FYEeiFzRNIHftOma4kbEamIia49AnbViWMXb9exQ:Sfwja+yU49An5iWOqQ
MD5:	016FFAE66513FCAE583BCC64A0B66869
SHA1:	CD2CCF7CC47BD6ADBC1FB46F8A88D610824F7037
SHA-256:	55F966D09AFC4A653A1F26B57E57412D5C42191D5692157D94110B23CA74C9D2
SHA-512:	0BEE2BCC0C4DED18A2DEB9B811234C555FA4D2F5D061A853C1443B6AFCA7AF813E396668AA7543586ECB9EFB8DA901CF3FAC33E396EB85D48B84D5F2CB8B963A
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/site/main.js?buildTime=1736370530
Preview:	(function(e){var t=window["publishedWBJP"];window["publishedWBJP"]=function o(s,a){var l,u,c=0,d=[];for(;c<s.length;c++){u=s[c];if(n[u])d.push.apply(d,n[u]);n[u]=0}for(l in a){if(Object.prototype.hasOwnProperty.call(a,l)){e[l]=a[l]}}if(t)t(s,a);while(d.length)d.shift().call(null,r);if(a[0]){i[0]=0;return r(0)}};var i={};var n={2:0};function r(t){if(i[t])return i[t].exports;var n=i[t]={exports:{},id:t,loaded:false};e[t].call(n.exports,n,n.exports,r);n.loaded=true;return n.exports}r.e=function e(t,i){if(n[t]===0)return i.call(null,r);if(n[t]!==undefined){n[t].push(i)}else{n[t]=[i];var o=document.getElementsByTagName("head")[0];var s=document.createElement("script");s.type="text/javascript";s.charset="utf-8";s.async=true;s.src=r.p+""+{11:"5ab2b9565867ea666fb8",12:"616c4dd0568c07183a5d",13:"392868449bcd750dc40a",14:"959616cc5e24d1c02d25",15:"b6353cc0e423d7a50e8c",16:"054f225d281471b09455",17:"2e90ceda1aa59119b0b5",18:"afaef63f10fcebc93d78"}[t]+".js";o.appendChild(s)}};r.m=e;r.c=i;r.p="http

Chrome Cache Entry: 981

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 982

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11384, version 1.0
Category:	downloaded
Size (bytes):	11384
Entropy (8bit):	7.977909649541678
Encrypted:	false
SSDEEP:	192:Y5WtCjP0dAaDu7V+6+/ERqOUI6ZQBnNaXD4gpKL6jvTDyZwFxgIuB72gzOe6GV:Y5o8P0CaD6VjpkQBnNaXDLKov6ZwFCBf
MD5:	FEB6C980C7D633C192A19B13047270B8
SHA1:	9CA9A681147D49AD3BA857E740D2A335E6F61812
SHA-256:	8749B48067AF37C72625416CC5DA9FDDE06DF26BFF1F471461DEC1BBDAF43F78
SHA-512:	F13823E60143881A234B228D8B524407611410755FFF8D5FB38277F21D3489F60FADE65E30115A32A7ADB460EE2D96B1BEB8E3D66CEAB67CE6C3C8CE2F82D04D
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/fonts/Karla/bold.woff2
Preview:	wOF2......,x......V...,...........................R.....J.`?STATL........D.i.....6.$..X. .... ...YH..n.^1(..I3./.8."`.:...".....M..........@....A.....{t...(("....E...:Bc....n.... ..!A< ..!.<.i]..."....X.`G.bi`...>..[,.....,........zI..,.+"T.....G:...o...4....e...>+u3......(A...HL@{nf.s...E...z.[.d......\|b..C]z.......D...... .\|.w..{....&S....g6'f.xE'.M....T.].......K.. ...k.=._6.L..w...fQk.u...w9u.t.....5.G`.Zc..JK...kP/..#.P.Y.._.c.LX.9v. q9...3.YJf..w..Ra.#.,2.\....o^.:.+.X..Vl.!Hnw...i'.....o3..g.....>.W`.t.@.x.). ...hY..E.R...; ..4...o?.Y3.c..NA....07.y...[7.g...C.....1....!t.6>.s.M....lJE.:n....5........I...@.\W(.....E.C.Yl....k....Z......G?.C...(..3."1.cE...8...~...`a...".gM.....0.:......MA.'..%>k...4..=.BN..q.D..r.......oq...FP........c.=H.F5.7....a...a..r.N!...wo.fOpA.nyqJT..;.....4..m.....$jF.$....;.4..MQ..5..e...H`....M...Q..{oC.5\.[.V.S^.7..'.:.o....h.w'...9..f~P.[.6\:.L.2`.$..*.R.... L."0...e\....?z...:K.L(8..u.z...tx".......q..

Chrome Cache Entry: 983

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129436
Entropy (8bit):	5.875077536205386
Encrypted:	false
SSDEEP:	3072:cUxgeEUZGKiovmdYx08Jw8UJwLg9H8TKG:cUxgeEUZGKiBdSPUNF8TKG
MD5:	464808FE802939E2762F3BCE30C6F5F3
SHA1:	64272BAB1C90521557AA5F39DEAE801340BBF433
SHA-256:	7F42BC657A61866A67D936ED21B4FAF25930FAEBC2CFB10CDEEC11A94570DED9
SHA-512:	31CFC53F937038C46F194B6FE2547ECBF75C14998913B7BC79916CC40006088114E309788353C895DEA493605075BEC2D33E16495F3F1710E2EF9D0CC5441E2D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-Cd8i-54KLlkcsTvA0VmjIice7YGsMjjgjkapboWvTd8Dq9Y8-2p4PeT6hhgl6EAhtuuoABUXxSxptoIqh09J0ZFXdWeGSPKDCaVB_Qu84tsfsO6oWLCimCEDbk5ne1hp8IqYHObSOnzmRcAIlIO18WjFs3GkA6G0EZlfW7F1_GAPJcFcbpJ6vFk_BpG4DYVU-bplqirAb69LCYmWRMgP5f0mKTHhXpo49YYXpFcw7IMMfn9wI&dbm_d=AKAmf-CYWR3YKXshE4JIvm_Oac9h_bytbwT-pezT_ixJkGMDhzS6PMr45IXemSzBiNDlkgtK3co0V3dPLknHBk7WRq9k641U3hXVi8HQjtSVK8vl8qukcdMwClTH0Bz3oBrZbLESR-JFbESR-BzQc3inMWtOfEC0MhFWOx9DOOEphgs5gIP4-xl52b3642bYVRttpTsJQu1NzdOFaEvqudJlOCUos6QrHR5yfTm2PSjOo2vUS6dHbI4p8fVBBEdr39QYQRDM-fPgt9LvjfjYfRwTKo6lKdVnWMc4bW2re7XLZnjmBzwWcqVWdNR8_DjqvWZF3SfRKZXPf-lp7RTlgsbjxY_vFYtY6VuY1EWXrgfGVj9HPZWxGvMF-f9-BfItWZc9MDEs8ujKUahWZFPdeXKMe1mjR2x0R1GWtHjrX7E3JthbjVlfZM8HrGQ0kTZXr8pgdGBVGQl2IVyMp4CwrUf8jptrKsLThbmj75Vb0cotrBHsCD0_ucBT0UE_HQ1wt91ka8Y7fDnN-f5D1Wh9J7fIAulGfHGi6rm8gp_hkriltcgNNedbJdeupNcToP1wbPyyy4JdJjDejpBIFH16hAPoQ0CphiO1EIbMc02JAAYKFsMrwGuM8_jbz6pmBvh09oFWGOcmQQfPpUk-_VD3CjQUgsu--l0MhctKwabHNAXDLFZegGmLn5pOlo4jBz6o5J_KRgyyOqDRVQ8GMZrUAbKXpPi2BRXX1mSCUq8vxmKhdmzExq7h50p5txY9pdN6w3A5xOnW3mVQRV-mDrnKAPSTACYrV1Gmay7KjLTG9mzQRc07ohJ_RPXIXL-lE5C72J9h-pHUiT7eG8KUFoWg6tycap5WLYEvDFrLgr81rF0SnTH9VzKNYC7F1O6uQ6CE6lxZL12vaqHhz3qOwoKW_SzkEQhVVrGKgy9PaYejESGe4ZjztPpTiniKqjQma5CVR0C66O6nbqDtvOnmZHpjF_g7GhInWSsGYnJrCfm1JcmAmjbWjY0dCS5XTv_vlGDmaj41rJpVLtYvOwDHscUYN3pO5McGY0rsbggCWX57osVoHMUWRhYFzYer3i1ZQosJ0lUmtD-bRMSjUj4gHpW3ebIQMe-Hy9KzYwT9arvVPrDya476vyWSsYpjf-ADDi2vb5CON94gPR-WkdCY71f1jlXBv4kiEIRtv4tAvKsa9JBBNlATxoUXg7sz3ql9Uk27aIK4wjb8lHIkoc1abWntTLMhIGlHrnl5JYgXiHwa0RmWgeEunIWtTu4X9C7fCLxPD8U0c3h-i46xwceXCy4Rlkl2M9jbVZ_n4LgzAVEWu5ugI9JqvoQ8gAsqnCCENMTu0t7gbfIXw_Ffl7oOiXBcX6-452qAvkIEuWuDMd2i4TR6SEB87V7US4WnStVxnHDik2Y1dQAmqqNdHtCQsKqKBhct6lm39vwmtqu56H-WV84koul2PTFsWyBIiL53soqqk6M0f-Ta5o4oaVXLOFHvrZ4jgh34VjxSrgmFb-nYkgJaPFLEc-ucqwV5vrHN2dnXaeYNdtmobsa4PvVxh7j24vBPAgQJ5OZqzAmIeSxNblSJbefD0ThJH8sJfiRDhHtO206Lk_FcaQiBks6rseHe19T62zqqZA50khp0EyR_94MpqiLN-LuU4bfV8aXhGtEQE0bc9kw7NhNZ2THjhs1S1UUgseyhx0UYMCQvL6MpAsnDh9oGrPppeo33C6RKwASDFqP2unPOMladn-3nZ7NC31Hu4MCqGcTeexIieG_QE79WVboRB6KZMDRJWYCKinQvkPSZKoYmvgrC_5YvEFmi8jiOeh7Wt0ziL30-jm7JQXx_DHVehp_0sQDJ6uH7YnbXR_7GE20gp6zxfcENHg68-fUj0RgOOkAkgEGCx9WR-BEgGDhMjZcYWwGinjwcY1BHq3ZcDVbsAyGCjcRWC6U6WfIWfPUs3aBE6zhsFAw3XwJJv_v86bxspcnbYUVyg95DZ2CTgvRs8-Mb3LD2yfIhtfvU0btrGieh7-Q8iWS350eswAB_ZLcT9JuythH1jVYggRYbSXniad4PSZ0241VfnX_kzVa9aY9XqbJhKIguVKYsXjUHyXflaDkkfuWsAx4vMGoY2OkvTt33bom-MFSk4EAdFcN4lEnOUyG4_meZDRmRIpUkemwrvCtThX7ZlCe8JDWuKcIyU_o1q3SaLsLiduTeJHtWSyZM34y6mqSQ6n0dV-mJ4fyL1I76Imi-216bTVUFu47OW6NZNk_kv_VEhcAhzBfPclLfLjDsebRJLkjPIi4drLN6kuVC1vfRdY6vX_5ytKXfzY0AoIWCuYOUzo7tZUWkzDhO0JLTWz_Pae1oIduNOtacp-myULHzqzkbMXPw68MBEPNna4-lT2ANEVelwU3OOiGXrF9--eHQi36Em_B91V6d1fOKB5L5Q-MFk9tG8KEvRkt_SrqM1iu-AHc0wzZFLRNJOvJ7G0BinddCuLDigqZk91ySIzeGtJHKuyTwV5SFVjd7MJlI7zZcQAPSb-eN-eFsmNU-ESkAh7-5onypIqgdvIQ8Xzq-nChXzXSS6wyr3US-Hp0ll1L3YO38WgBpj0gdHOpWx8fM_6k5TV945mqogcaJFbsfC5mBrS9_HKfdvasBlQcK6_kNPjkEsKvHdeIWU2d2-0IWqfllq6mCPhY-iRjdmEGKrdx1N-hMrEaqMAkanzE9vZyoaeTRk-WxzOsZ9pShHhGcro_MmrzWqYQcC_nct9_DS2UTpRPBubkSFFgPcyGDiBt4tuPNGprc1cFRHSfQqBWiJGcotnTsYzrz9Cr6kDsDYcYvP8uhb2nYTSy4dieT-Bw0dLn8o3YUBARCtiP5Nz656sZFRTiBq6IA__qsa8XAd4bcPdo96zHr59w9E7HtNy975NWMQ1LcWLdmNzOYAm8fVs02iT8uiJqiGi4QwZmRhNisu1LnyKr2f90sb4UdmKRTfwg7XaVuc4LQClWAJ0uma-Hktz91VCNVDJjHBz0kL4BxxmZSu8H0l_zupgZNZZtDI2EWyOqJBS60jxPUOiw0cm9860waBk55XM42_2vznJpIynFYUmk3cdB9YONM7Ksg4gVoDWeFhPgpAdqBmFAZXvLhn_fNYJiDi_XpePJ3ndF_liIqZ1SNDn_Tgisfe6TWjmF4KFc6RAJaWIwVITWrkXUYYlfjur5-z1JgRwSDsaIhRu8C8MmWjfltRmeiJUJoGx86iWx3NzgQ_poegfhaPjKXE5lf4jz-yKTE9tpPbcQ55GENYKlLvPVgm8v4FD3N3dYpSwiEtqJ5SjXTGGPFuLRvFNbbvT26YSdEFp6L4wmNkpqN4wQk8wHcdIjwnCDBgbAm7ty9UOehKbJ-NC4i13dFjHwcXJ_FLd1qr1YWi5-rudPHO2mUr1zrc7K1iBF74TDjKxtitUD7pHNL2CcKBONWu0th9XlzNY5PFdAWCwIhSiIhdFpmY_4xY_DJyx-5OMNMEsnV7MLM7ky_xMq1rokR1utj2JEYORd_jM6nh7SFqaXth5Cbxfhcb2rqVnHGlnguQT4IXr6oNpq_bBlZmw9g7MoUgRW4cJIDZcen-___C-464nSDHfFgl5B0AQM21c3GTkjkLvG6FoY6tQMdhgOBM46eg63bk7ITcWOJzsbbCujt1AVnhAmTWzsieiqvGXTZvlf_soWDztvcvBRNl9a17uMxA0MBEbfBqHoXoZSwmrg3EYcz5enh5svM243IscS9NFLNDzSZOiEu0Ss8FqKWzljdHnG_3idlDYF7bMiemLVdR3xYUZDgCRe5uiNkvPr1p1xwHguxMTHvYYOgXHTUxJIZg2nG0KkTrEjQElPLvibwMks4N_X78OnEC5tR4E9EtBI6zhYC3F0pvq9PAkoJ01pWYAVPup45UlW1tRhPIcNq6QBvYKptz_0YKEddQrv50CGfsQHCT8udattM5OgqqzinCXPrNU2-cUkola3XiKVwubeMNye5&cid=CAQSTgCa7L7dJPLjmdSDwq_-CCZYaJ2sfChvLlWiUwwhBPpMPSzNBGYoZ54fq6YRrewf7g-L9fcXyj1ImeHS643dLydeQZDbI2o_IEz_5dhivhgB&dv3_ver=m202411180101&nel=1&rfl=https%3A%2F%2Fapps.talktalk.co.uk&ds=l&xdt=1&iif=1&cor=5947737732221524000&adk=2789206707&idt=1434&cac=0&dtd=60
Preview:	document.write('\x3cdiv id\x3d\x22brand_safety_3fqCZ5CbJrDjjuwPitDEmAc\x22 style\x3d\x22visibility:hidden\x22 \x3e\x3cscript data-jc\x3d\x2288\x22 data-jc-version\x3d\x22r20250108\x22 data-jcp-jscd\x3d\x22[\x26quot;https://cdn.doubleverify.com/dvbm.js\x26quot;,\x26quot;ctx\x3d22028527\\u0026cmp\x3d32927927\\u0026sid\x3d6921079\\u0026plc\x3d411654966\\u0026crt\x3d227524103\\u0026advid\x3d9251674\\u0026adsrv\x3d1\\u0026mon\x3d1\\u0026blk\x3d1\\u0026dvp_cawf\x3dcrtwrp\\u0026cm360cw\x3d1\\u0026unit\x3d728x90\\u0026prr\x3d1\\u0026turl\x3dhttps://apps.talktalk.co.uk/appsuite/\\u0026aucmp\x3d22080093835\\u0026auevent\x3dABAjH0htc-RI27SNFbNB_v9ol3fi\\u0026autt\x3d1\\u0026ppid\x3d103\\u0026aubndl\x3d\\u0026aucrtv\x3d618557214\\u0026auorder\x3d1019743255\\u0026pltfrm\x3d1\\u0026ausite\x3d18022376301\\u0026auxch\x3d1\\u0026aufilter1\x3d849131\\u0026c1\x3d849131\\u0026audeal\x3d\x26quot;,null,\x26quot;doubleverify\x26quot;,null,\x26quot;3fqCZ5CbJrDjjuwPitDEmAc\x26quot;,\x26quot;https://googleads4.

Chrome Cache Entry: 984

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	45
Entropy (8bit):	4.55263837396322
Encrypted:	false
SSDEEP:	3:YJH/gXoc7OkuqXFVYn:YJ/gXocjQn
MD5:	0C17BEAA6679E594315A18E6D1D22BE5
SHA1:	338C80460C8EC2F176CAB1E483CE27623EB3BE45
SHA-256:	41C2E0B8285C0EE2812383F1A265BD1C9D368811DA6B135F80C41A193FDAB2A9
SHA-512:	E868264EBE3F67BD031EE85C4C5970B11B1DB8D1CA040F05D04A3655E1B48B76D8D867157A0E3571C1FF8F42F1B497C0561809231119FED9BE0C97CBFB2EFA01
Malicious:	false
Reputation:	low
URL:	https://lb.eu-1-id5-sync.com/lb/v1
Preview:	{"lb":"V5xTIU0Tn2zebYYO+/KKUQ==","ttl":28800}

Chrome Cache Entry: 985

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1383
Entropy (8bit):	7.847712840578019
Encrypted:	false
SSDEEP:	24:8QbW9HP+voQUrZICIzZvK4V9MowZJROz5jiYf2+UiXy2TJ00UoQvev3:8IuPMlk4H3qIjiKCCy21xQM3
MD5:	D798D627EEE6BEBF8FCB522830BDF414
SHA1:	FC50AB0C99D512B7B1DB9936DF98C7A6ED4B692C
SHA-256:	4A5E9D6FC2ABB23C7A1BE6AA574B47646148E4CC62B646727E0B61DFF4B71076
SHA-512:	76C7A93202856AE17D03B50266E023D66321B9649375B174C54E2EC4C686F7A1FA529A0F70A1DED50BBE0E079EFF49BE40A2F8E63A6CF5811CFB41A0490FEDE1
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/antiphishing/antiphishing-9209b04e.js
Preview:	.....~../.\Nx.....I.2).i..D.2.H..6...?W.....P".X..?fb.H.,..2....?..U"...:.. ....S.....s[4.m.9g?..o/L-..'.hL..R.`D/.5...."l..r.(h.(e/HS..s^J....c.}...(.^.6z...J{....z..Y..NeW..&.....2...l\p......GGU.S......L.....Md.i....yHy.H)F.u.........b"r..\|.v...1..Ub......3..s[.i........?.....H3........r....3....T.1.v.W:.N{..U....5 ...V.....z{..^`.~B...7...p.......~...6...n.RX..F?..p>>..3.....o...LTy&.H".U..9.:......4....VF...............aa]..I..!.?.?......{.....O..3.g.....T..._......^.w..)../n...<...:D...3......qq.....\|.....B...;r?...C....ak'......".`.V..vz..o..Z.#T....3r.Z =`.b...sJ...0.6s......^.....F..^.% ..P....n....;6!6.% \|x...z...~.}Y...x...^.v#W.-5....K...K..E8.i..5(x7.u......`........b.Gv..=.^_................!..q..Q.;R.W..v~..p^..~},N......U.u....5....Grr..]..*...i......P....$$v?.:...I{.{......".JU.&[..3.v..e},2..Q.r...&..p4.....b...j\...M,\|.c..rzs...C....H.}..b.&..074rP.R).Y......s6cT..EIAj..._Z<.........x..........yt./.1C.79

Chrome Cache Entry: 986

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	47515
Entropy (8bit):	7.935761570171392
Encrypted:	false
SSDEEP:	768:YjHKgCKDB8cxyfP6Qgou9J3Bp1vTjp2empKK7JicdvY/32EEEk:YzTqJP6QgouBp2TR7JicBY/34
MD5:	655ABC9DC8EBB6D032F8E65ABD6E0A61
SHA1:	D2D89D3924A334BD5AC89759042FD09311FA8C60
SHA-256:	F791CC34AD5021311C96D9BC57904B726198EF4367E61E1665A6C465E825F7EB
SHA-512:	20B929996A099A87D22C2E1B8E2C11E0AD87F04C9F91FBD4005813E92AC62B122BAB009369A85EDBE82A03AAE6167D19EBBDC66F5439A03932D53312D8DCBA90
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/themes/default/logo_512.png
Preview:	.PNG........IHDR..............x......sRGB.........eXIfMM.*.............................J...........R.(...........i.........Z..............................................................y..o....pHYs.........g..R...YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx...\|.....^ @..^..]..Q... z........WE.c....T..(.@...!.t.3...1H..!..>..f.mS.3.3gZX.A#.@G.$@.$@.$....a....l...2.$@.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x..........8....Gd3.I.$@.$@.....x....

Chrome Cache Entry: 987

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2512)
Category:	downloaded
Size (bytes):	75006
Entropy (8bit):	5.625174285042866
Encrypted:	false
SSDEEP:	768:YdDFSZ8JdMS1xGPlopXbk+KQZPKOf/py7pFw7N5o9qmse9fLrJIWzAfap34VEzH0:6FSZYdMS1xGNopX5LP16FuvqT7bmVF
MD5:	99BBE560926E583B8E99036251DEB783
SHA1:	8D81B73AE06F664F9D9E53DD5829A799BF434491
SHA-256:	648E766BF519673F9A90CC336CBECEDE80DCBE3419B43D36ECBB25D88F5584A3
SHA-512:	EE24915AA5C1C7C1DD571C07EFE46DFC173CB69D2DADC4C32891CE320EEF4FE1CFB614D9C212F16BFE2C83B29C6EEAB6C5A43F8E32D475DA8081B1E2D33869B4
Malicious:	false
Reputation:	low
URL:	https://cdn2.editmysite.com/js/wsnbn/snowday262.js
Preview:	(function e(b,g,d){function c(n,j){if(!g[n]){if(!b[n]){var i=typeof require=="function"&&require;if(!j&&i){return i(n,!0)}if(a){return a(n,!0)}var m=new Error("Cannot find module '"+n+"'");throw m.code="MODULE_NOT_FOUND",m}var h=g[n]={exports:{}};b[n][0].call(h.exports,function(l){var o=b[n][1][l];return c(o?o:l)},h,h.exports,e,b,g,d)}return g[n].exports}var a=typeof require=="function"&&require;for(var f=0;f<d.length;f++){c(d[f])}return c})({1:[function(require,module,exports){var JSON;if(!JSON){JSON={}}(function(){var global=Function("return this")(),JSON=global.JSON;if(!JSON){JSON={}}function f(n){return n<10?"0"+n:n}if(typeof Date.prototype.toJSON!=="function"){Date.prototype.toJSON=function(key){return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+f(this.getUTCMonth()+1)+"-"+f(this.getUTCDate())+"T"+f(this.getUTCHours())+":"+f(this.getUTCMinutes())+":"+f(this.getUTCSeconds())+"Z":null.};String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(key){ret

Chrome Cache Entry: 988

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.765556935416344
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxsLqJ:VKEctKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	764EE6309BF4800054E4A2A67DEB3575
SHA1:	2FFD2FDA8E49AD861B75DE1E5ED583D8CE1D5B0A
SHA-256:	652E8677AEC33767D2A5F229384F79B4F526104BF7E94D7D258070F94743C3CC
SHA-512:	4333F5A85D3085C54ACF34632CFDD57CF7EEA2D539C5CEFC1DBD07A6486083CAC1C1DA6BADB9743FD01BCDEE63AEFB187074A6BF7AB945BC897E227E1C4F5C6D
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 989

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.784834389298335
Encrypted:	false
SSDEEP:	3:JSkEEpwJB+QTVYTra+dDVOihL8dVMBF/FhMGQH+sQfZ+C6GMKibrC+evg0/Yp6Su:7gP+QTVIraiDVOimd+bq+xB+C/grC5gO
MD5:	712DD8594885B6785559687B08188522
SHA1:	08A0AFA298FF973C93CA805FD5266759B26CBEAD
SHA-256:	3F4BD92C0C2372EBAC508D5D58E76D94E947BD718A026ED28F3079326FEF265F
SHA-512:	D0E1A448DE38D6AD42E52EC43EE26410D3CE14642074C435DFACE3960C4423CC274DEBAFF4853E207F7BAE495F3D9EFE747B72956C88417966EF1D81D55C50CC
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox.dumpster.js
Preview:	import{D as i,g as o,d as r,g as s}from"./io.ox.dumpster-f4301a77.js";export{i as Dictionary,o as default,r as dictionary,s as gt};.//# sourceMappingURL=io.ox.dumpster.js.map.

Chrome Cache Entry: 990

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=Z4L63wAR0XTfawAZ&_test=Z4L63wAR0XTfawAZ
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 991

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	609
Entropy (8bit):	7.590695625898229
Encrypted:	false
SSDEEP:	12:t53uHPMM0iBp1aP25gzybWGFrIq5AQPii+QZAXoScQECj4kcjkQpNpQqW:T3qMMVBpbbWGFrvkYZMoSc6j4k2Vpj1W
MD5:	B1DAC89BB324465B5D1C48153F751113
SHA1:	AEF103C302CC836A40A61D8FB646558E102FECBD
SHA-256:	36EE80B2225C03E9A19869F02B55F943321169B0C0ACE8F7E841849F23217ED0
SHA-512:	9B5D48B1474B9B5A6D7C2A06E1C4EF064AF97AAEBAC5E2387C7DBD9684BED3BCE228F899B08F7883EC2A86A180E6F0D2F956C5524EC92169E0360FA5A9B7483E
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/switchboard.en_GB.js
Preview:	.....7s..k/'.....?.xc%.W.] ..r".f'v.....\......F^.JY.?.Q.......}L.-.=../<.q.....\.....7...O/...,`...g>.e..\|...G...`[...vyc............^.\..._M=,>.Q.[z...tP...6.r.D..&.......:d....F....tp.....O.._...a.../..,...$NW.]..SY..x.Z...6)..a.7.e.c.w..q".B.n.7b?....jZ_.`...'QG........7..Phseke...3 tH..+..)[1..6.>.)dj\.A..._.'..<q2..C.*..4..k'1~.1.95_K.fu...N..x..V.5.q..x..B+$.tz..` ..~.{.../.......=M.S...+.{...L.J/..d.1.{......S.<.&..!.....B...=R4... vWj..{%.`K...t.f.g<..Mr]...1t.v..\.M.J2.k..\&.....x.r.oA.>YM..\KC.sS.4..^J..k.E.^.gZ.$..I.T....#]...?@#...<Vrs...+.L.t.@.\|..

Chrome Cache Entry: 992

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:Rv:J
MD5:	B519D08EF66FD54910EDBEDBA6181EC2
SHA1:	8D06436C33A3086259F2F1CCAF03425707EEFF17
SHA-256:	101EAD936A2281D53DCC064B7E2A2AB0D53B92EF3EF7B34B668673007895C860
SHA-512:	F7195D19D40B60AA9F992C5830F88DCBED7348521EEEB426A2544A18F9E13EFBE4ACFBF03D9A3961AE8174572E5ABA28D9013AB6B4849A18EF35508B1E011C14
Malicious:	false
Reputation:	low
Preview:	//.

Chrome Cache Entry: 993

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	3.9590676997508547
Encrypted:	false
SSDEEP:	3:tEJSFvCvmFOmEIAm/:eaCkjhh
MD5:	1D4156A8BC0243E4C1E8363710764E8D
SHA1:	3B7DAB0958DF1213A5043F9E9A263006C0925A8A
SHA-256:	DA45962A1FB4A049C9367EBE9B1B628F071D7A4C9997EE807C01D23F4866E19C
SHA-512:	99E43976E2ADD0F4F6F5B3C59E6AA1B9E65622DE2D7DC7BDA927601DE93535424E720DD4955D4CE69F8C88CFA7E3196D77B391A53BE60C84B6B3C1B70B42C6A9
Malicious:	false
Reputation:	low
URL:	https://api.rlcdn.com/api/identity/envelope?pid=13235
Preview:	must be exactly one 'ct' and 'cv' parameter.

Chrome Cache Entry: 994

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1325
Entropy (8bit):	7.860699232584606
Encrypted:	false
SSDEEP:	24:w8iM8M97xyvphjjCUS37h04Je+Urt1/xhqIn25Xkz5x2tfEdFbYET3KV:V8QojOUUk+UrnxQW2Gz5x2QbYE2V
MD5:	F3AA50476B5D29733B6EF857D8904FB4
SHA1:	EF8912CE5AD718FBCF85406DEA02670D158C1E67
SHA-256:	1E65062E8E688595C4B443B591CD4DA5EF091B5DCDA6466C440FAA001A959E64
SHA-512:	237C8181AB12670746D4F5D39B0C95AC47CAD204C54E48527A0336D67CBBD3D2F678C335971688A2ACD58790449BF232DE65C60D57BAE3920DAF13258945EA6D
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/minimalapiconsent.0e902e90.js
Preview:	.....ZfV....s..ArrK.q...h..mR2R..K.j.....".H$....e......Hd..e3.H.'..uJH^.].#....AAM....~.c>...6.........u.5..wUx.....8.....Y".EC..E...4......\P....w;...m...;:..)G=w..:f.[_u(..i.....).V.[..xv.8PX.W......r.OL.Xw..&......9..l..c..t....[l.'"wt.'a...F.V..l[C..Y.B.-.t..\|...j.Z8.]..`......J....S..v...........wJ....;eq.V.....nVv.=..z2.x'0...j.2..n....M-...>.( ..) .t..SX.<1......S@.k.=..U0...K!D..){e...p!Ri.... aQ.z%-....E^.GX.Wo&.....J......../..].'.&.o.....>~.OW...\|...._..W...^.7..l~..}s.............y(....^;.v....Vo.@,.$....;(...........~w...."..<..e...Z.@MC:.8....x..5.<sP...-...v.b['@..O...Y.O+'...\.......X..j.m]W4....X.R@,.Rq.../..5.p..XXL.<.^_).>n......j..M....)..Q../R.)z..~..r^..A=...bQ=.......j..F.Y...HN.u.S S..n.G.1<......].I...0. ..H.....p4M...&[..l8.....+..'&.k..haR:HF.;k...=......+...'1..^.wGx.6d0..X.....RL.D.....tg.4..i,'b.w..Q..kQ..i...^ ........q... 3=m.B.S..i.>.%+a.]...!...T..5B..e.Wc$.7......:.MR...=o.....nR..J.#-U.H7

Chrome Cache Entry: 995

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3600), with no line terminators
Category:	dropped
Size (bytes):	3600
Entropy (8bit):	5.0991703557984245
Encrypted:	false
SSDEEP:	48:kAvNhI9OKn/hQVBVan40yt00nzt/VRgj9o91PYczAz9AfK9TPBlVnIkKYeE5W:kAvOpZ+B8R0FVRjrTEzmfgmzPr
MD5:	40B81B2D52BA9D2E2C64C31FF6A24CD7
SHA1:	6B5689250661646ECBB841F2475F1556A113373C
SHA-256:	E06BACA13F25DF9C7D684FC1B1FDFBBBB95070A1D5A9CD648632DA7BCCC90B96
SHA-512:	5657EE166A1EFF5DEEA7A0125EDD6178541396DCCB035785F5790BC1C57DEE6B0E1C9D063D00333E95667F699D99172796CE301EDD1DF2C4BFF02D25536F0D0C
Malicious:	false
Reputation:	low
Preview:	(function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={exports:{},id:n,loaded:false};t[n].call(i.exports,i,i.exports,r);i.loaded=true;return i.exports}r.m=t;r.c=e;r.p="https://cdn2.editmysite.com/js/";r.p="https://"+window.ASSETS_BASE+"/js/"\|\|r.p;return r(0)})({0:function(t,e,r){t.exports=r(610)},610:function(t,e){(function(t,e){var r={height:62,mobileHeight:124,getHeight:function(){if(u()){return r.mobileHeight}return r.height}};function n(e,n){var u=t("#weebly-footer-signup-container-v3");if(!u.length){return}i(e,n);r.element=u;r.iframe=t("#weebly-footer-signup-iframe");if(!o()){r.element.remove();return}a();s();l();t(window).on({resize:p(l,500),scroll:p(l,500)})}function i(e,r){var n='<link href="//'+e+"/css/free-footer-v3.css?buildtime="+r+'" rel="stylesheet">';t(n).appendTo("head")}function o(){var e=t("body");var r=!!document.getElementById("kb-container");var n=e.hasClass("splash-page");return!(r\|\|n)}function a(){var e=t("body");e.css({minHeight:"100%",posit

Chrome Cache Entry: 996

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	833
Entropy (8bit):	7.7388389788900955
Encrypted:	false
SSDEEP:	12:6OlKSGB9FPOmPBqsM3Yl2Y38YcObYV9Kfsjw7gnO7pvqe++WfM7BDR/z3FyGux3l:67SeP1KY38AbHco8OVi2V9zVyGHzZ0
MD5:	2B4CAFBADFAF38ECC2F0F7F86CBABE26
SHA1:	D966FC2C07816C1800ABDA651B9AA6106FA2AD0F
SHA-256:	109836916C60CDB89B03E5815640CEDA397E310E8A6B077ED096EC74510F57E8
SHA-512:	7E5EDC9C39E0C38845FBF93F796AB207B3F410E67C627737B235C5CF443365F52D9AB5E434FE1F19267F3978156A5C3CD2DA57A6849CE99FCB367024F36C605C
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/antiphishing.en_GB.js
Preview:	.\|.../...k......H.....,...d.l.....:..%.q: >.F...fr..lH.M<..P...M..l.VG.b1@.5v.~....PU..kS.Y.G.I..u.K...N....(..[......A..T...~....jzA..cv&.YR.....).......QB..mC}.}...j(,l..kZd...\i....S....\|.l.Ko#.p........E.e.r.m6sy.Iz."..A.u.%....`.N..Lk`...A.8.g2..FJh.....Z..-..&O......fS....?...0.7.......hLG..&. .\|.mrK..3+..l<G_."d..F.......uz..m.......L...P...u..d;`'H..,.,P...l....@.>..i..r........f,.ZP...?...`......jK.A...LZ'..>.G&"$qw}Z...>...,r......;../.c.G..DnR.....1U.cP5..c.N.'..\.....5..N.i..&B.j..A.....ux...w.(.....G..p._(K...DO3..).....i...O..00......p'.......8 ..0..A.9.v.1bN...J...0.....01..3.$.y....AEu..1...9{...."./..7U.....M..v-.fb.,Gc...l..b.D.8.i.....K..'5..D.;.4.t=2.Z..11......]..S.7.l..k2cO.u:hp.GM+p.!q.H....u.t..[..8.4.....d..J...+..9..H;.8..@..W\|..SS..m.er.U.Myw}..f%..1>.2(n....$

Chrome Cache Entry: 997

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 471, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	60600
Entropy (8bit):	7.9765514067636625
Encrypted:	false
SSDEEP:	1536:+su8E9R+an2chA5m1pOtA6eQZfjkvFlbeFuieU:nI+al1s0QZfjkzqFkU
MD5:	4DC4AF4CA3295F7ADFB222C89A658447
SHA1:	96EEF9518174DFD4F0ED64EA82C2164A9114AF95
SHA-256:	FF95D27D18D5AAE72E8665328841F3A07BEBD9CA093D3CE03B5B33738D09171C
SHA-512:	E5D44217ED07B58B48D300517E2CFF76136DAEC4FA3145EB8A17DAABD82879CFA26AFF6FC95CAB6D3D827664F82FCB5ACF04235CCCD111025777CDFF0355BC82
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................$....IDATx...K.Z....B.... .Y.:..#.1.9X.a.0F..`....r...\E"R...B.@.]l.N.Y......(..I....''i^..B.!....H.B.!...$!..B..H.B.!...$!..B..H.B.!..B.$..B.!.IB.!..B.$..B.!.IB.!..B.$..B.!."I.!..B(....XP......!.<.5.#.X...wG.Sv}..\...XW.FR..?...uY.d.E...PVL.(C....{U..j..;.!."I..SI.....B.?FB.\z^,...[5k.......HF_.(.;.!....~..g.X../.O..%....L.F...=.....M....).K.2..\.\..!W$.."....+..P$)....8.i..&....H....H...3rOM..W.....s..H.B..]..6..~\|..:.._m. ].H>M;..H.X..!..x...H>.g$..Z.:.U..5E."I..[.I.$.<.Jeu.....o.s.IM..2:N.......:Z.\..H.."I.$.IB.E."9K..2!T...cJ....H.N.HR$)..I.$!.".."._8....;.T.7.U.-D..$E.......W:....+....".r7=...O._`.B....^.;../.....]C.oM...:K...<..m..M.8.U......)...a.=...+B.h.L.Z..WW...C.L.Z..{.zv<..:..s........B./f.m...9.6.mc,g*.n. ;va.....S.}.....1..Z0.~H?B.evno.H..]y=._T.....E}.!G.Z.Y'.....0u..Q.G..T....B{.o.a......l...,.h.}+..x..t!".6......j;.1.......j....y.. .k<.K..$.......e..O.)D2.....5.ul\._.h....HJQ...b.A......

Chrome Cache Entry: 998

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41069)
Category:	downloaded
Size (bytes):	41185
Entropy (8bit):	5.256035639055234
Encrypted:	false
SSDEEP:	768:bnMWFZFzBNzZNt2fVh0idCmgrwwfMDifm9SNJuSddfGhS2TWaJSm5IyCBQtWprmt:bn1HAfZdgdfGc29IyCXxlI7ifUUpcy78
MD5:	AD5C0334300D1A3F909B883A2D0E52D2
SHA1:	664CA0DEFC0D92E197C04EB377D60FEB2A1C5783
SHA-256:	968987A637C231C557C786FF7C2B6DC8E3BA6466B02922602DDF6CF7F127A8D2
SHA-512:	8BC5598A88F62BF3794BEA70AE548B65F94E950D580C46AEE642313A426162824292ACE941475A70015604DF66C6C1CA5A4498E67E0D860F9C354FE3C1662ABB
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012410292120000/v0/amp-form-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2410292120000",n:"amp-form",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function e(){return i\|\|(i=Promise.resolve(void 0))}var s=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}};function n(t){return new Promise((i=>{i(t())}))}function r(t){return t?Array.prototype.slice.call(t):[]}var{isArray:o}=Array,{hasOwnProperty:c,toString:u}=Object.prototype;function a(t){return"[object Object]"===u.call(t)}function h(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function l(t,i){return c.call(t,i)}function f(t,i,e,s,n,r,o,c,u,a,h){return t}var d="amp:dom-update",m="amp:form-value-change",p="name";function _(t){return(t.ownerDocument\|\|t).defaultView}function b(t){return CSS.escape(t)}function A(t){f(/^[\w-]+$/.test(t))}function P(t,i){return A(i),i=i.toUpperCase(),function(t,e){const s=[];for(let e=t.parentElement;e;e=e.parentElement)e.tagName==i&&s.push(e);return s}(t)}function v(t){var i;null===(i=t.paren

Chrome Cache Entry: 999

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.884800435856382
Encrypted:	false
SSDEEP:	6:7gP+QTVIr2inEXfd+bq+xB+C/grC5g5hU3NOb:7gmSHinEA++xoCIW5gw3wb
MD5:	43D791D5A14CB9D8E6C43A009D086A92
SHA1:	84D119077CD8F7B89CD2F0AC1720E0512CAF106A
SHA-256:	24915BF03127BE7E6E1B9488854B1807142569C27050CEEFF52A7460FCF23A78
SHA-512:	C3B0218CECFB2B6DBD3C0FDE72ACA254B20F94443F99829F1371EEFC241AA832F1943C391188391955AB77AACE1AB9472AED583306A79C582C43F6B310A66255
Malicious:	false
Reputation:	low
URL:	https://apps.talktalk.co.uk/appsuite/io.ox/antiphishing.6fb231d8.js
Preview:	import{D as i,g as o,d as r,g as s}from"./antiphishing/antiphishing-9209b04e.js";export{i as Dictionary,o as default,r as dictionary,s as gt};.//# sourceMappingURL=antiphishing.6fb231d8.js.map.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 12, 2025 00:11:16.001683950 CET	192.168.2.4	1.1.1.1	0x240	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:16.001826048 CET	192.168.2.4	1.1.1.1	0x6df1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:18.043052912 CET	192.168.2.4	1.1.1.1	0x78d4	Standard query (0)	talktalk770.weebly.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:18.043653965 CET	192.168.2.4	1.1.1.1	0x8817	Standard query (0)	talktalk770.weebly.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:19.098246098 CET	192.168.2.4	1.1.1.1	0x396b	Standard query (0)	cdn2.editmysite.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:19.098408937 CET	192.168.2.4	1.1.1.1	0x838f	Standard query (0)	cdn2.editmysite.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:19.400590897 CET	192.168.2.4	1.1.1.1	0xed86	Standard query (0)	talktalk770.weebly.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:19.400758028 CET	192.168.2.4	1.1.1.1	0x541c	Standard query (0)	talktalk770.weebly.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:20.449706078 CET	192.168.2.4	1.1.1.1	0xa7f8	Standard query (0)	cdn2.editmysite.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:20.449881077 CET	192.168.2.4	1.1.1.1	0xa00a	Standard query (0)	cdn2.editmysite.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:22.092895985 CET	192.168.2.4	1.1.1.1	0x695a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:22.093331099 CET	192.168.2.4	1.1.1.1	0xfb42	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:22.862354994 CET	192.168.2.4	1.1.1.1	0x3e61	Standard query (0)	ec.editmysite.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:22.862525940 CET	192.168.2.4	1.1.1.1	0xad63	Standard query (0)	ec.editmysite.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:23.046828032 CET	192.168.2.4	1.1.1.1	0xd033	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:23.046974897 CET	192.168.2.4	1.1.1.1	0x29ae	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:25.101042986 CET	192.168.2.4	1.1.1.1	0x4748	Standard query (0)	ec.editmysite.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:25.101212025 CET	192.168.2.4	1.1.1.1	0xff08	Standard query (0)	ec.editmysite.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:34.403851032 CET	192.168.2.4	1.1.1.1	0x94d4	Standard query (0)	talktalk770.weebly.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:34.404007912 CET	192.168.2.4	1.1.1.1	0x9907	Standard query (0)	talktalk770.weebly.com	65	IN (0x0001)	false
Jan 12, 2025 00:11:46.526031017 CET	192.168.2.4	1.1.1.1	0x392	Standard query (0)	apps.talktalk.co.uk	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:46.526230097 CET	192.168.2.4	1.1.1.1	0xfe3	Standard query (0)	apps.talktalk.co.uk	65	IN (0x0001)	false
Jan 12, 2025 00:11:48.274441004 CET	192.168.2.4	1.1.1.1	0xe048	Standard query (0)	apps.talktalk.co.uk	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:48.274581909 CET	192.168.2.4	1.1.1.1	0x123b	Standard query (0)	apps.talktalk.co.uk	65	IN (0x0001)	false
Jan 12, 2025 00:12:12.538850069 CET	192.168.2.4	1.1.1.1	0x9b46	Standard query (0)	tradecore.tradehouse.media	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:12.539016008 CET	192.168.2.4	1.1.1.1	0x74b1	Standard query (0)	tradecore.tradehouse.media	65	IN (0x0001)	false
Jan 12, 2025 00:12:13.773385048 CET	192.168.2.4	1.1.1.1	0xe317	Standard query (0)	tradecore.tradehouse.media	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:13.773632050 CET	192.168.2.4	1.1.1.1	0x3587	Standard query (0)	tradecore.tradehouse.media	65	IN (0x0001)	false
Jan 12, 2025 00:12:13.778053999 CET	192.168.2.4	1.1.1.1	0x1e2f	Standard query (0)	cdn.privacy-mgmt.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:13.778343916 CET	192.168.2.4	1.1.1.1	0x4315	Standard query (0)	cdn.privacy-mgmt.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:15.016794920 CET	192.168.2.4	1.1.1.1	0xb95f	Standard query (0)	cdn.privacy-mgmt.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:15.016911983 CET	192.168.2.4	1.1.1.1	0x10fe	Standard query (0)	cdn.privacy-mgmt.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:18.603235006 CET	192.168.2.4	1.1.1.1	0x60f4	Standard query (0)	ats-wrapper.privacymanager.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:18.603425980 CET	192.168.2.4	1.1.1.1	0x8a42	Standard query (0)	ats-wrapper.privacymanager.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:19.614092112 CET	192.168.2.4	1.1.1.1	0xa37d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:19.614252090 CET	192.168.2.4	1.1.1.1	0xca3e	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:19.617199898 CET	192.168.2.4	1.1.1.1	0xd9df	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:19.617947102 CET	192.168.2.4	1.1.1.1	0xe8ae	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:20.490294933 CET	192.168.2.4	1.1.1.1	0x4e3e	Standard query (0)	ats-wrapper.privacymanager.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:20.490473032 CET	192.168.2.4	1.1.1.1	0x20b4	Standard query (0)	ats-wrapper.privacymanager.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:20.494504929 CET	192.168.2.4	1.1.1.1	0x9942	Standard query (0)	geo.privacymanager.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:20.494683981 CET	192.168.2.4	1.1.1.1	0x7da3	Standard query (0)	geo.privacymanager.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:20.999849081 CET	192.168.2.4	1.1.1.1	0x71d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.000055075 CET	192.168.2.4	1.1.1.1	0x5723	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.145936012 CET	192.168.2.4	1.1.1.1	0x8972	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.146606922 CET	192.168.2.4	1.1.1.1	0x2934	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.147423983 CET	192.168.2.4	1.1.1.1	0x6930	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.147615910 CET	192.168.2.4	1.1.1.1	0x9444	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.149895906 CET	192.168.2.4	1.1.1.1	0x3a7b	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.150090933 CET	192.168.2.4	1.1.1.1	0xa236	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.152251959 CET	192.168.2.4	1.1.1.1	0x5249	Standard query (0)	id.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.152427912 CET	192.168.2.4	1.1.1.1	0xb87d	Standard query (0)	id.crwdcntrl.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.188150883 CET	192.168.2.4	1.1.1.1	0x29d1	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.188388109 CET	192.168.2.4	1.1.1.1	0x21c1	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.292984009 CET	192.168.2.4	1.1.1.1	0x419	Standard query (0)	grid.bidswitch.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.293160915 CET	192.168.2.4	1.1.1.1	0x3607	Standard query (0)	grid.bidswitch.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.293627024 CET	192.168.2.4	1.1.1.1	0x3d16	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.293785095 CET	192.168.2.4	1.1.1.1	0x2e45	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.294209003 CET	192.168.2.4	1.1.1.1	0x63c4	Standard query (0)	shb.richaudience.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.294353962 CET	192.168.2.4	1.1.1.1	0x8be0	Standard query (0)	shb.richaudience.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.299828053 CET	192.168.2.4	1.1.1.1	0x610f	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.300004005 CET	192.168.2.4	1.1.1.1	0x2f37	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.307066917 CET	192.168.2.4	1.1.1.1	0x16fc	Standard query (0)	grid-bidder.criteo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.307252884 CET	192.168.2.4	1.1.1.1	0x219d	Standard query (0)	grid-bidder.criteo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.343693018 CET	192.168.2.4	1.1.1.1	0x72cb	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.343852997 CET	192.168.2.4	1.1.1.1	0x8f7a	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.344712019 CET	192.168.2.4	1.1.1.1	0xa5ef	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.344865084 CET	192.168.2.4	1.1.1.1	0x63e5	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.345487118 CET	192.168.2.4	1.1.1.1	0x43e1	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.345618963 CET	192.168.2.4	1.1.1.1	0x6f61	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.346151114 CET	192.168.2.4	1.1.1.1	0x53c3	Standard query (0)	mp.4dex.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.346299887 CET	192.168.2.4	1.1.1.1	0x5ae	Standard query (0)	mp.4dex.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.346746922 CET	192.168.2.4	1.1.1.1	0xe7cf	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.346879005 CET	192.168.2.4	1.1.1.1	0x8096	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.347476959 CET	192.168.2.4	1.1.1.1	0xfb21	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.347632885 CET	192.168.2.4	1.1.1.1	0x75b7	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.348247051 CET	192.168.2.4	1.1.1.1	0xc93a	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.348378897 CET	192.168.2.4	1.1.1.1	0xde18	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.389827967 CET	192.168.2.4	1.1.1.1	0xe19f	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.389998913 CET	192.168.2.4	1.1.1.1	0x7e90	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:21.998574972 CET	192.168.2.4	1.1.1.1	0x719f	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.998985052 CET	192.168.2.4	1.1.1.1	0x9200	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.000219107 CET	192.168.2.4	1.1.1.1	0xf876	Standard query (0)	geo.privacymanager.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.000394106 CET	192.168.2.4	1.1.1.1	0x86f7	Standard query (0)	geo.privacymanager.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.207557917 CET	192.168.2.4	1.1.1.1	0xc8	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.207777977 CET	192.168.2.4	1.1.1.1	0xabb1	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.226280928 CET	192.168.2.4	1.1.1.1	0xdfb	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.226536036 CET	192.168.2.4	1.1.1.1	0x881c	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.230545044 CET	192.168.2.4	1.1.1.1	0xa5f0	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.230752945 CET	192.168.2.4	1.1.1.1	0x82f1	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.236767054 CET	192.168.2.4	1.1.1.1	0x8324	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.236968040 CET	192.168.2.4	1.1.1.1	0xa081	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.242060900 CET	192.168.2.4	1.1.1.1	0xe999	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.242260933 CET	192.168.2.4	1.1.1.1	0x4180	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.303873062 CET	192.168.2.4	1.1.1.1	0x3d88	Standard query (0)	mp.4dex.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.304027081 CET	192.168.2.4	1.1.1.1	0x1a01	Standard query (0)	mp.4dex.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.315167904 CET	192.168.2.4	1.1.1.1	0xb7f2	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.315335989 CET	192.168.2.4	1.1.1.1	0xdbef	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.331212997 CET	192.168.2.4	1.1.1.1	0xc3c7	Standard query (0)	id.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.331415892 CET	192.168.2.4	1.1.1.1	0x72b1	Standard query (0)	id.crwdcntrl.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.344701052 CET	192.168.2.4	1.1.1.1	0x7ea3	Standard query (0)	grid.bidswitch.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.344909906 CET	192.168.2.4	1.1.1.1	0x7b57	Standard query (0)	grid.bidswitch.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.378140926 CET	192.168.2.4	1.1.1.1	0x7d36	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.378237963 CET	192.168.2.4	1.1.1.1	0xf59e	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.413305044 CET	192.168.2.4	1.1.1.1	0x715a	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.413434982 CET	192.168.2.4	1.1.1.1	0x10be	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.456451893 CET	192.168.2.4	1.1.1.1	0xed66	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.456686974 CET	192.168.2.4	1.1.1.1	0x5913	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.458275080 CET	192.168.2.4	1.1.1.1	0x2025	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.458420038 CET	192.168.2.4	1.1.1.1	0x4f26	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.568152905 CET	192.168.2.4	1.1.1.1	0x2b14	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.568321943 CET	192.168.2.4	1.1.1.1	0x617	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:22.981962919 CET	192.168.2.4	1.1.1.1	0xabce	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.982906103 CET	192.168.2.4	1.1.1.1	0xba7c	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:23.152457952 CET	192.168.2.4	1.1.1.1	0x3254	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.152585983 CET	192.168.2.4	1.1.1.1	0xa0c9	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:24.182250977 CET	192.168.2.4	1.1.1.1	0x5189	Standard query (0)	script.4dex.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.211272001 CET	192.168.2.4	1.1.1.1	0xfe10	Standard query (0)	script.4dex.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:24.211833000 CET	192.168.2.4	1.1.1.1	0xbdc4	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.212034941 CET	192.168.2.4	1.1.1.1	0xe5ff	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:24.287223101 CET	192.168.2.4	1.1.1.1	0x467e	Standard query (0)	s.richaudience.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.287897110 CET	192.168.2.4	1.1.1.1	0x933b	Standard query (0)	s.richaudience.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:25.014607906 CET	192.168.2.4	1.1.1.1	0x66bc	Standard query (0)	script.4dex.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.014859915 CET	192.168.2.4	1.1.1.1	0x12ec	Standard query (0)	script.4dex.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:25.035897017 CET	192.168.2.4	1.1.1.1	0xfe57	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.036317110 CET	192.168.2.4	1.1.1.1	0xe44	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:25.250739098 CET	192.168.2.4	1.1.1.1	0x14cd	Standard query (0)	cadmus.script.ac	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.250905991 CET	192.168.2.4	1.1.1.1	0x8350	Standard query (0)	cadmus.script.ac	65	IN (0x0001)	false
Jan 12, 2025 00:12:25.410942078 CET	192.168.2.4	1.1.1.1	0x7b0e	Standard query (0)	s.richaudience.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.411183119 CET	192.168.2.4	1.1.1.1	0x8283	Standard query (0)	s.richaudience.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:25.459410906 CET	192.168.2.4	1.1.1.1	0xe6b3	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.459731102 CET	192.168.2.4	1.1.1.1	0x8d08	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:25.480834961 CET	192.168.2.4	1.1.1.1	0x222f	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.480968952 CET	192.168.2.4	1.1.1.1	0x5207	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:25.514148951 CET	192.168.2.4	1.1.1.1	0x35b6	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.514369965 CET	192.168.2.4	1.1.1.1	0x1ff8	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Jan 12, 2025 00:12:25.821700096 CET	192.168.2.4	1.1.1.1	0x7970	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.821872950 CET	192.168.2.4	1.1.1.1	0x5cd6	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:25.859462023 CET	192.168.2.4	1.1.1.1	0x9265	Standard query (0)	cadmus.script.ac	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.859589100 CET	192.168.2.4	1.1.1.1	0x9348	Standard query (0)	cadmus.script.ac	65	IN (0x0001)	false
Jan 12, 2025 00:12:26.052968979 CET	192.168.2.4	1.1.1.1	0xf97f	Standard query (0)	ads.us.e-planning.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.053143978 CET	192.168.2.4	1.1.1.1	0xded4	Standard query (0)	ads.us.e-planning.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:26.488367081 CET	192.168.2.4	1.1.1.1	0x44a1	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.488585949 CET	192.168.2.4	1.1.1.1	0xed34	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:26.631643057 CET	192.168.2.4	1.1.1.1	0x9c47	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.632071018 CET	192.168.2.4	1.1.1.1	0x978b	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jan 12, 2025 00:12:26.632814884 CET	192.168.2.4	1.1.1.1	0x8a6e	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.632978916 CET	192.168.2.4	1.1.1.1	0xf3e0	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:26.638065100 CET	192.168.2.4	1.1.1.1	0xaea8	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.638217926 CET	192.168.2.4	1.1.1.1	0xd03d	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:26.661210060 CET	192.168.2.4	1.1.1.1	0xd153	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.661354065 CET	192.168.2.4	1.1.1.1	0xd3cb	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:26.661748886 CET	192.168.2.4	1.1.1.1	0x25f1	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.661916018 CET	192.168.2.4	1.1.1.1	0x69a	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:26.662245989 CET	192.168.2.4	1.1.1.1	0x5dd2	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.662384987 CET	192.168.2.4	1.1.1.1	0x805f	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:26.672799110 CET	192.168.2.4	1.1.1.1	0xc5af	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.672938108 CET	192.168.2.4	1.1.1.1	0x2232	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.012634039 CET	192.168.2.4	1.1.1.1	0x7394	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.012959003 CET	192.168.2.4	1.1.1.1	0x2bd4	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.095967054 CET	192.168.2.4	1.1.1.1	0xf67d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.096417904 CET	192.168.2.4	1.1.1.1	0x102	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.259040117 CET	192.168.2.4	1.1.1.1	0x1fc0	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.259175062 CET	192.168.2.4	1.1.1.1	0xc615	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.259790897 CET	192.168.2.4	1.1.1.1	0xb041	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.259953976 CET	192.168.2.4	1.1.1.1	0x60a2	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.309838057 CET	192.168.2.4	1.1.1.1	0xa155	Standard query (0)	cdn.ampproject.org	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.309976101 CET	192.168.2.4	1.1.1.1	0x351	Standard query (0)	cdn.ampproject.org	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.414042950 CET	192.168.2.4	1.1.1.1	0xa317	Standard query (0)	triplelift-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.414180994 CET	192.168.2.4	1.1.1.1	0x31c4	Standard query (0)	triplelift-match.dotomi.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.467912912 CET	192.168.2.4	1.1.1.1	0xd1b4	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.468255043 CET	192.168.2.4	1.1.1.1	0x248c	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.470187902 CET	192.168.2.4	1.1.1.1	0x300	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.470387936 CET	192.168.2.4	1.1.1.1	0xd2e0	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.775839090 CET	192.168.2.4	1.1.1.1	0xacac	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.776063919 CET	192.168.2.4	1.1.1.1	0x28c	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.776696920 CET	192.168.2.4	1.1.1.1	0x110b	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.776833057 CET	192.168.2.4	1.1.1.1	0x2492	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.777765989 CET	192.168.2.4	1.1.1.1	0x7a86	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.777920961 CET	192.168.2.4	1.1.1.1	0x7f11	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.778475046 CET	192.168.2.4	1.1.1.1	0xa0ab	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.778610945 CET	192.168.2.4	1.1.1.1	0x4f9b	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.778958082 CET	192.168.2.4	1.1.1.1	0xd31a	Standard query (0)	sync.richaudience.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.779079914 CET	192.168.2.4	1.1.1.1	0xcca2	Standard query (0)	sync.richaudience.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.779392958 CET	192.168.2.4	1.1.1.1	0x228f	Standard query (0)	tradehouse-d.openx.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.779553890 CET	192.168.2.4	1.1.1.1	0x49e2	Standard query (0)	tradehouse-d.openx.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.779827118 CET	192.168.2.4	1.1.1.1	0xb569	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.780201912 CET	192.168.2.4	1.1.1.1	0x94cc	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:27.780674934 CET	192.168.2.4	1.1.1.1	0x2027	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.780818939 CET	192.168.2.4	1.1.1.1	0xbdfb	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.088308096 CET	192.168.2.4	1.1.1.1	0xbf08	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.088581085 CET	192.168.2.4	1.1.1.1	0x35f0	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.231456995 CET	192.168.2.4	1.1.1.1	0xdd4b	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.231657028 CET	192.168.2.4	1.1.1.1	0x1346	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.357074022 CET	192.168.2.4	1.1.1.1	0x618c	Standard query (0)	u.4dex.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.357218027 CET	192.168.2.4	1.1.1.1	0x76af	Standard query (0)	u.4dex.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.409209967 CET	192.168.2.4	1.1.1.1	0xdc1a	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.409354925 CET	192.168.2.4	1.1.1.1	0x5008	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.411479950 CET	192.168.2.4	1.1.1.1	0x2c4a	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.411770105 CET	192.168.2.4	1.1.1.1	0x79a7	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.412147999 CET	192.168.2.4	1.1.1.1	0xbafe	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.412544012 CET	192.168.2.4	1.1.1.1	0x1bd	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.413016081 CET	192.168.2.4	1.1.1.1	0xd3a3	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.413398981 CET	192.168.2.4	1.1.1.1	0x17	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.413911104 CET	192.168.2.4	1.1.1.1	0x7fbf	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.414289951 CET	192.168.2.4	1.1.1.1	0xb014	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.418351889 CET	192.168.2.4	1.1.1.1	0x4185	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.418509007 CET	192.168.2.4	1.1.1.1	0xcc94	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.550787926 CET	192.168.2.4	1.1.1.1	0xf168	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.550962925 CET	192.168.2.4	1.1.1.1	0xb085	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Jan 12, 2025 00:12:28.554528952 CET	192.168.2.4	1.1.1.1	0x2a7a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.555010080 CET	192.168.2.4	1.1.1.1	0xbc3f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.207308054 CET	192.168.2.4	1.1.1.1	0xdeb2	Standard query (0)	cs.krushmedia.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.207448006 CET	192.168.2.4	1.1.1.1	0x2bc	Standard query (0)	cs.krushmedia.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.208223104 CET	192.168.2.4	1.1.1.1	0x6eee	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.208376884 CET	192.168.2.4	1.1.1.1	0x320d	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.208900928 CET	192.168.2.4	1.1.1.1	0x20f9	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.209076881 CET	192.168.2.4	1.1.1.1	0x909f	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.432673931 CET	192.168.2.4	1.1.1.1	0x2787	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.433170080 CET	192.168.2.4	1.1.1.1	0xa516	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.433737040 CET	192.168.2.4	1.1.1.1	0x7314	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.433891058 CET	192.168.2.4	1.1.1.1	0x6c36	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.434467077 CET	192.168.2.4	1.1.1.1	0xd4	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.434861898 CET	192.168.2.4	1.1.1.1	0x5c4d	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.435362101 CET	192.168.2.4	1.1.1.1	0x7b35	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.435493946 CET	192.168.2.4	1.1.1.1	0xf6ef	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.435787916 CET	192.168.2.4	1.1.1.1	0xdaf9	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.435883045 CET	192.168.2.4	1.1.1.1	0xe01	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.464656115 CET	192.168.2.4	1.1.1.1	0xcba5	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.464864016 CET	192.168.2.4	1.1.1.1	0xbc3b	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.484586000 CET	192.168.2.4	1.1.1.1	0xe8ad	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.484767914 CET	192.168.2.4	1.1.1.1	0x406c	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.503473043 CET	192.168.2.4	1.1.1.1	0xad00	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.503614902 CET	192.168.2.4	1.1.1.1	0xeb98	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.592825890 CET	192.168.2.4	1.1.1.1	0xeaee	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.593339920 CET	192.168.2.4	1.1.1.1	0xc6d1	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.611267090 CET	192.168.2.4	1.1.1.1	0xb4e6	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.611464024 CET	192.168.2.4	1.1.1.1	0xec9f	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.739649057 CET	192.168.2.4	1.1.1.1	0xfe82	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.739814043 CET	192.168.2.4	1.1.1.1	0x76de	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.760407925 CET	192.168.2.4	1.1.1.1	0x306	Standard query (0)	u.4dex.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.760642052 CET	192.168.2.4	1.1.1.1	0x612f	Standard query (0)	u.4dex.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.824688911 CET	192.168.2.4	1.1.1.1	0x2c8	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.824997902 CET	192.168.2.4	1.1.1.1	0x76ef	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.875825882 CET	192.168.2.4	1.1.1.1	0x671	Standard query (0)	ssp-sync.criteo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.876089096 CET	192.168.2.4	1.1.1.1	0x6484	Standard query (0)	ssp-sync.criteo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.923675060 CET	192.168.2.4	1.1.1.1	0x1f18	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.923978090 CET	192.168.2.4	1.1.1.1	0x8302	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.931716919 CET	192.168.2.4	1.1.1.1	0x4876	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.932145119 CET	192.168.2.4	1.1.1.1	0x841b	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.932516098 CET	192.168.2.4	1.1.1.1	0x55d3	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.932697058 CET	192.168.2.4	1.1.1.1	0xd2fc	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.932971954 CET	192.168.2.4	1.1.1.1	0x66fc	Standard query (0)	trace-eu.mediago.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.933167934 CET	192.168.2.4	1.1.1.1	0x1c35	Standard query (0)	trace-eu.mediago.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.949840069 CET	192.168.2.4	1.1.1.1	0x5ab	Standard query (0)	sync-amz.ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.950130939 CET	192.168.2.4	1.1.1.1	0x6451	Standard query (0)	sync-amz.ads.yieldmo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.951008081 CET	192.168.2.4	1.1.1.1	0x4e5d	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.951415062 CET	192.168.2.4	1.1.1.1	0xf5d	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:29.951868057 CET	192.168.2.4	1.1.1.1	0x4f6b	Standard query (0)	amazon-tam-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.952106953 CET	192.168.2.4	1.1.1.1	0xa8bf	Standard query (0)	amazon-tam-match.dotomi.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.217055082 CET	192.168.2.4	1.1.1.1	0xbae1	Standard query (0)	cdn.doubleverify.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.217724085 CET	192.168.2.4	1.1.1.1	0x4acc	Standard query (0)	cdn.doubleverify.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.219127893 CET	192.168.2.4	1.1.1.1	0x57c4	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.219283104 CET	192.168.2.4	1.1.1.1	0x5212	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.231868029 CET	192.168.2.4	1.1.1.1	0xa946	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.232223034 CET	192.168.2.4	1.1.1.1	0x1da	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.244478941 CET	192.168.2.4	1.1.1.1	0x400b	Standard query (0)	hde.tynt.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.244874001 CET	192.168.2.4	1.1.1.1	0xf05b	Standard query (0)	hde.tynt.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.530992031 CET	192.168.2.4	1.1.1.1	0x8fd0	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.531250000 CET	192.168.2.4	1.1.1.1	0x5879	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.531755924 CET	192.168.2.4	1.1.1.1	0xf8c6	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.531949043 CET	192.168.2.4	1.1.1.1	0x7cbf	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.532773018 CET	192.168.2.4	1.1.1.1	0x9698	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.533117056 CET	192.168.2.4	1.1.1.1	0xca6f	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.535748959 CET	192.168.2.4	1.1.1.1	0x97cd	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.535976887 CET	192.168.2.4	1.1.1.1	0xcb4e	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.536390066 CET	192.168.2.4	1.1.1.1	0x9f47	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.536566973 CET	192.168.2.4	1.1.1.1	0x2909	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.539091110 CET	192.168.2.4	1.1.1.1	0xcb17	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539258957 CET	192.168.2.4	1.1.1.1	0xd9b	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.668008089 CET	192.168.2.4	1.1.1.1	0x4b86	Standard query (0)	b1sync.outbrain.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.668246031 CET	192.168.2.4	1.1.1.1	0x912c	Standard query (0)	b1sync.outbrain.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:30.799320936 CET	192.168.2.4	1.1.1.1	0xb6f5	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.799457073 CET	192.168.2.4	1.1.1.1	0x944a	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.298384905 CET	192.168.2.4	1.1.1.1	0x3fda	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.298751116 CET	192.168.2.4	1.1.1.1	0x5c8f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.414163113 CET	192.168.2.4	1.1.1.1	0xeae4	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.414309978 CET	192.168.2.4	1.1.1.1	0x44e	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.451210976 CET	192.168.2.4	1.1.1.1	0x36d9	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.451342106 CET	192.168.2.4	1.1.1.1	0x337b	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.463097095 CET	192.168.2.4	1.1.1.1	0x612a	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.463229895 CET	192.168.2.4	1.1.1.1	0xc273	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.486767054 CET	192.168.2.4	1.1.1.1	0xe9dc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.486954927 CET	192.168.2.4	1.1.1.1	0x8c5d	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.611458063 CET	192.168.2.4	1.1.1.1	0x7fe6	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.611603975 CET	192.168.2.4	1.1.1.1	0x6538	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.622562885 CET	192.168.2.4	1.1.1.1	0x1eeb	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.622705936 CET	192.168.2.4	1.1.1.1	0xd1bf	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.707663059 CET	192.168.2.4	1.1.1.1	0xad8e	Standard query (0)	rtb0.doubleverify.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.707878113 CET	192.168.2.4	1.1.1.1	0x2f7e	Standard query (0)	rtb0.doubleverify.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.730510950 CET	192.168.2.4	1.1.1.1	0x52ad	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.730671883 CET	192.168.2.4	1.1.1.1	0x98cc	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.782890081 CET	192.168.2.4	1.1.1.1	0x4aca	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.783168077 CET	192.168.2.4	1.1.1.1	0xd0e1	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.791351080 CET	192.168.2.4	1.1.1.1	0x8e04	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.791484118 CET	192.168.2.4	1.1.1.1	0x2651	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.798993111 CET	192.168.2.4	1.1.1.1	0x6e23	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.799140930 CET	192.168.2.4	1.1.1.1	0x3d40	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.853657961 CET	192.168.2.4	1.1.1.1	0x26b5	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.853935957 CET	192.168.2.4	1.1.1.1	0x37df	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.855305910 CET	192.168.2.4	1.1.1.1	0x26ec	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.855695009 CET	192.168.2.4	1.1.1.1	0xbbc6	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.856456041 CET	192.168.2.4	1.1.1.1	0x373f	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.856621981 CET	192.168.2.4	1.1.1.1	0x7b76	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.862286091 CET	192.168.2.4	1.1.1.1	0x3f59	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.862565041 CET	192.168.2.4	1.1.1.1	0x68fc	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.894511938 CET	192.168.2.4	1.1.1.1	0xba24	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.894679070 CET	192.168.2.4	1.1.1.1	0xf5c9	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.901082039 CET	192.168.2.4	1.1.1.1	0x3066	Standard query (0)	sync.admanmedia.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.901423931 CET	192.168.2.4	1.1.1.1	0x731d	Standard query (0)	sync.admanmedia.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.903677940 CET	192.168.2.4	1.1.1.1	0xb6ed	Standard query (0)	s.e-planning.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.903920889 CET	192.168.2.4	1.1.1.1	0x57c2	Standard query (0)	s.e-planning.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.905798912 CET	192.168.2.4	1.1.1.1	0xb035	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.906348944 CET	192.168.2.4	1.1.1.1	0xaa66	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.908371925 CET	192.168.2.4	1.1.1.1	0x3518	Standard query (0)	prebid-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.908566952 CET	192.168.2.4	1.1.1.1	0x78cf	Standard query (0)	prebid-match.dotomi.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.910491943 CET	192.168.2.4	1.1.1.1	0xf70a	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.910832882 CET	192.168.2.4	1.1.1.1	0xa109	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.985383034 CET	192.168.2.4	1.1.1.1	0x694e	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.985559940 CET	192.168.2.4	1.1.1.1	0x9895	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:31.987646103 CET	192.168.2.4	1.1.1.1	0xbe64	Standard query (0)	visitor-adpone.omnitagjs.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.987783909 CET	192.168.2.4	1.1.1.1	0x698a	Standard query (0)	visitor-adpone.omnitagjs.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.061446905 CET	192.168.2.4	1.1.1.1	0x7d84	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.061674118 CET	192.168.2.4	1.1.1.1	0xf0d7	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.256295919 CET	192.168.2.4	1.1.1.1	0x3238	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.256433964 CET	192.168.2.4	1.1.1.1	0x8027	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.287023067 CET	192.168.2.4	1.1.1.1	0x820d	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.287173033 CET	192.168.2.4	1.1.1.1	0xbf65	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.423065901 CET	192.168.2.4	1.1.1.1	0xbd6e	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.423453093 CET	192.168.2.4	1.1.1.1	0x4db5	Standard query (0)	googleads4.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.433700085 CET	192.168.2.4	1.1.1.1	0x7026	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.434129000 CET	192.168.2.4	1.1.1.1	0xb052	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.440012932 CET	192.168.2.4	1.1.1.1	0x3e87	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.440351009 CET	192.168.2.4	1.1.1.1	0x6ee7	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.496021032 CET	192.168.2.4	1.1.1.1	0x536d	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.496319056 CET	192.168.2.4	1.1.1.1	0xa85a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.700902939 CET	192.168.2.4	1.1.1.1	0xbb47	Standard query (0)	u-ams03.e-planning.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.701328039 CET	192.168.2.4	1.1.1.1	0x6560	Standard query (0)	u-ams03.e-planning.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.727727890 CET	192.168.2.4	1.1.1.1	0x183b	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.727930069 CET	192.168.2.4	1.1.1.1	0xd332	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.747770071 CET	192.168.2.4	1.1.1.1	0x91b	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.747951984 CET	192.168.2.4	1.1.1.1	0xaa90	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.769295931 CET	192.168.2.4	1.1.1.1	0x8b1e	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.769552946 CET	192.168.2.4	1.1.1.1	0x52a2	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.808173895 CET	192.168.2.4	1.1.1.1	0x238e	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.808329105 CET	192.168.2.4	1.1.1.1	0x9d2a	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.817317963 CET	192.168.2.4	1.1.1.1	0xe7a1	Standard query (0)	eexsync.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.817454100 CET	192.168.2.4	1.1.1.1	0xe669	Standard query (0)	eexsync.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.835422039 CET	192.168.2.4	1.1.1.1	0xb45c	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.835594893 CET	192.168.2.4	1.1.1.1	0xe3f6	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.849405050 CET	192.168.2.4	1.1.1.1	0x84a5	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.849529028 CET	192.168.2.4	1.1.1.1	0x7136	Standard query (0)	gw-iad-bid.ymmobi.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.881123066 CET	192.168.2.4	1.1.1.1	0x11cf	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.881378889 CET	192.168.2.4	1.1.1.1	0x3d8b	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:32.929024935 CET	192.168.2.4	1.1.1.1	0x5c54	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.929189920 CET	192.168.2.4	1.1.1.1	0x3c09	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.059362888 CET	192.168.2.4	1.1.1.1	0x40d0	Standard query (0)	cm.smadex.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.059587002 CET	192.168.2.4	1.1.1.1	0xecad	Standard query (0)	cm.smadex.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.081943989 CET	192.168.2.4	1.1.1.1	0xb134	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.082082033 CET	192.168.2.4	1.1.1.1	0xeee8	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.120385885 CET	192.168.2.4	1.1.1.1	0x445c	Standard query (0)	u-ams.4dex.io	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.120536089 CET	192.168.2.4	1.1.1.1	0xb01c	Standard query (0)	u-ams.4dex.io	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.272243977 CET	192.168.2.4	1.1.1.1	0x6d90	Standard query (0)	wt.rqtrk.eu	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.272398949 CET	192.168.2.4	1.1.1.1	0x8d80	Standard query (0)	wt.rqtrk.eu	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.275489092 CET	192.168.2.4	1.1.1.1	0xd1ef	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.275731087 CET	192.168.2.4	1.1.1.1	0x4f5b	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.377017021 CET	192.168.2.4	1.1.1.1	0xe4f3	Standard query (0)	ws.rqtrk.eu	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.377170086 CET	192.168.2.4	1.1.1.1	0xed46	Standard query (0)	ws.rqtrk.eu	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.420275927 CET	192.168.2.4	1.1.1.1	0x5977	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.420613050 CET	192.168.2.4	1.1.1.1	0xfa5d	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.425210953 CET	192.168.2.4	1.1.1.1	0x4cc6	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.425368071 CET	192.168.2.4	1.1.1.1	0x7b7c	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.445882082 CET	192.168.2.4	1.1.1.1	0xded5	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.446218014 CET	192.168.2.4	1.1.1.1	0x97ad	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.448184013 CET	192.168.2.4	1.1.1.1	0x7d3	Standard query (0)	cdn.ampproject.org	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.448580980 CET	192.168.2.4	1.1.1.1	0xf49b	Standard query (0)	cdn.ampproject.org	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.449870110 CET	192.168.2.4	1.1.1.1	0x1ec0	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.450192928 CET	192.168.2.4	1.1.1.1	0xf005	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.451569080 CET	192.168.2.4	1.1.1.1	0xf2dc	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.451864004 CET	192.168.2.4	1.1.1.1	0xdcd2	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.454991102 CET	192.168.2.4	1.1.1.1	0x9d26	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.455163002 CET	192.168.2.4	1.1.1.1	0xeacc	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.467118979 CET	192.168.2.4	1.1.1.1	0x4b8	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.467263937 CET	192.168.2.4	1.1.1.1	0x234c	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.470015049 CET	192.168.2.4	1.1.1.1	0x8eca	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.470716953 CET	192.168.2.4	1.1.1.1	0x744c	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.478960037 CET	192.168.2.4	1.1.1.1	0xfc26	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.479137897 CET	192.168.2.4	1.1.1.1	0xdd44	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.479928970 CET	192.168.2.4	1.1.1.1	0xcef4	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.480082989 CET	192.168.2.4	1.1.1.1	0x262d	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.528805017 CET	192.168.2.4	1.1.1.1	0x6874	Standard query (0)	a.sportradarserving.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.529230118 CET	192.168.2.4	1.1.1.1	0xbc24	Standard query (0)	a.sportradarserving.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.579972982 CET	192.168.2.4	1.1.1.1	0xf169	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.580303907 CET	192.168.2.4	1.1.1.1	0xfef0	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.850996971 CET	192.168.2.4	1.1.1.1	0x1c25	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.851684093 CET	192.168.2.4	1.1.1.1	0x5b3c	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.871983051 CET	192.168.2.4	1.1.1.1	0x58c0	Standard query (0)	inv-nets.admixer.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.874902010 CET	192.168.2.4	1.1.1.1	0x46ff	Standard query (0)	inv-nets.admixer.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.904618979 CET	192.168.2.4	1.1.1.1	0x464a	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.904917002 CET	192.168.2.4	1.1.1.1	0x9590	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:33.943207026 CET	192.168.2.4	1.1.1.1	0x2d68	Standard query (0)	api.retargetly.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.943495989 CET	192.168.2.4	1.1.1.1	0x1df0	Standard query (0)	api.retargetly.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.200911999 CET	192.168.2.4	1.1.1.1	0xbd8a	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.201086044 CET	192.168.2.4	1.1.1.1	0xe35a	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.208024025 CET	192.168.2.4	1.1.1.1	0x4237	Standard query (0)	dsp-cookie.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.208199024 CET	192.168.2.4	1.1.1.1	0x4b09	Standard query (0)	dsp-cookie.adfarm1.adition.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.216814041 CET	192.168.2.4	1.1.1.1	0xa228	Standard query (0)	dsp.360yield.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.217159986 CET	192.168.2.4	1.1.1.1	0x129b	Standard query (0)	dsp.360yield.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.219078064 CET	192.168.2.4	1.1.1.1	0xa147	Standard query (0)	dsp-ap.eskimi.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.219217062 CET	192.168.2.4	1.1.1.1	0x6ed	Standard query (0)	dsp-ap.eskimi.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.221862078 CET	192.168.2.4	1.1.1.1	0xe3c6	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.222055912 CET	192.168.2.4	1.1.1.1	0x6e71	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.222536087 CET	192.168.2.4	1.1.1.1	0x67a9	Standard query (0)	d5p.de17a.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.222685099 CET	192.168.2.4	1.1.1.1	0x8d7e	Standard query (0)	d5p.de17a.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.224795103 CET	192.168.2.4	1.1.1.1	0x48d9	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225212097 CET	192.168.2.4	1.1.1.1	0x1776	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.226335049 CET	192.168.2.4	1.1.1.1	0xb1d5	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.226485014 CET	192.168.2.4	1.1.1.1	0x53e0	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.227163076 CET	192.168.2.4	1.1.1.1	0xc374	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.227293968 CET	192.168.2.4	1.1.1.1	0x37f3	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.227777004 CET	192.168.2.4	1.1.1.1	0x470e	Standard query (0)	green.erne.co	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.228085041 CET	192.168.2.4	1.1.1.1	0x94b0	Standard query (0)	green.erne.co	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.228705883 CET	192.168.2.4	1.1.1.1	0x65e7	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.228842974 CET	192.168.2.4	1.1.1.1	0x8e2b	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.231329918 CET	192.168.2.4	1.1.1.1	0xa3e2	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.231520891 CET	192.168.2.4	1.1.1.1	0x8afb	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.238086939 CET	192.168.2.4	1.1.1.1	0xccd0	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.238301992 CET	192.168.2.4	1.1.1.1	0x6d9a	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.239334106 CET	192.168.2.4	1.1.1.1	0x7796	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.239464998 CET	192.168.2.4	1.1.1.1	0xba4	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.305385113 CET	192.168.2.4	1.1.1.1	0xa113	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.305710077 CET	192.168.2.4	1.1.1.1	0x2d8c	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.307972908 CET	192.168.2.4	1.1.1.1	0x4fd	Standard query (0)	sync.serverbid.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.308113098 CET	192.168.2.4	1.1.1.1	0x3d2f	Standard query (0)	sync.serverbid.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.388746977 CET	192.168.2.4	1.1.1.1	0x4af2	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.388909101 CET	192.168.2.4	1.1.1.1	0xe2a0	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.391916990 CET	192.168.2.4	1.1.1.1	0xc800	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.392194033 CET	192.168.2.4	1.1.1.1	0x409f	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.505971909 CET	192.168.2.4	1.1.1.1	0x6dce	Standard query (0)	us.creativecdn.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.506650925 CET	192.168.2.4	1.1.1.1	0x7271	Standard query (0)	us.creativecdn.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.512548923 CET	192.168.2.4	1.1.1.1	0xc712	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.512715101 CET	192.168.2.4	1.1.1.1	0x1c55	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:34.598735094 CET	192.168.2.4	1.1.1.1	0xe36d	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.598829985 CET	192.168.2.4	1.1.1.1	0x146a	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.352813005 CET	192.168.2.4	1.1.1.1	0xd1f	Standard query (0)	bidberry.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.353224993 CET	192.168.2.4	1.1.1.1	0x79b7	Standard query (0)	bidberry.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.367693901 CET	192.168.2.4	1.1.1.1	0x2e5f	Standard query (0)	sync.e-planning.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.367693901 CET	192.168.2.4	1.1.1.1	0xabe6	Standard query (0)	sync.e-planning.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.378200054 CET	192.168.2.4	1.1.1.1	0x9de6	Standard query (0)	a.sportradarserving.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.378402948 CET	192.168.2.4	1.1.1.1	0x7ebf	Standard query (0)	a.sportradarserving.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.397903919 CET	192.168.2.4	1.1.1.1	0xc361	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.398102999 CET	192.168.2.4	1.1.1.1	0x3d4b	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.427370071 CET	192.168.2.4	1.1.1.1	0x2c18	Standard query (0)	rtbc-ew1.doubleverify.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.427370071 CET	192.168.2.4	1.1.1.1	0x74c0	Standard query (0)	rtbc-ew1.doubleverify.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.478619099 CET	192.168.2.4	1.1.1.1	0x2c67	Standard query (0)	pixel-eu.onaudience.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.478755951 CET	192.168.2.4	1.1.1.1	0x99f7	Standard query (0)	pixel-eu.onaudience.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.496387005 CET	192.168.2.4	1.1.1.1	0xe543	Standard query (0)	dsp.nrich.ai	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.496387005 CET	192.168.2.4	1.1.1.1	0xa0a7	Standard query (0)	dsp.nrich.ai	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.610297918 CET	192.168.2.4	1.1.1.1	0x7e7b	Standard query (0)	id.a-mx.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.610480070 CET	192.168.2.4	1.1.1.1	0x5ba3	Standard query (0)	id.a-mx.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.682147026 CET	192.168.2.4	1.1.1.1	0x2d43	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.682768106 CET	192.168.2.4	1.1.1.1	0xfb77	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:35.713855982 CET	192.168.2.4	1.1.1.1	0x739b	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.713952065 CET	192.168.2.4	1.1.1.1	0xf46a	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:36.132262945 CET	192.168.2.4	1.1.1.1	0x1624	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.132518053 CET	192.168.2.4	1.1.1.1	0x927b	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:36.160092115 CET	192.168.2.4	1.1.1.1	0x8dcb	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.160388947 CET	192.168.2.4	1.1.1.1	0xcbf6	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
Jan 12, 2025 00:12:36.301059008 CET	192.168.2.4	1.1.1.1	0xe791	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.301243067 CET	192.168.2.4	1.1.1.1	0x8045	Standard query (0)	pippio.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:36.608594894 CET	192.168.2.4	1.1.1.1	0x51b7	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.608716011 CET	192.168.2.4	1.1.1.1	0x8d89	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:36.699176073 CET	192.168.2.4	1.1.1.1	0xd453	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.699547052 CET	192.168.2.4	1.1.1.1	0xd45	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:36.776113033 CET	192.168.2.4	1.1.1.1	0xefc9	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.776319981 CET	192.168.2.4	1.1.1.1	0xf985	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:36.886184931 CET	192.168.2.4	1.1.1.1	0xb617	Standard query (0)	sync-pm.ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.886643887 CET	192.168.2.4	1.1.1.1	0x2c4f	Standard query (0)	sync-pm.ads.yieldmo.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:37.198168993 CET	192.168.2.4	1.1.1.1	0x882b	Standard query (0)	sonata-notifications.taptapnetworks.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.198365927 CET	192.168.2.4	1.1.1.1	0x6a01	Standard query (0)	sonata-notifications.taptapnetworks.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:37.199521065 CET	192.168.2.4	1.1.1.1	0xc51a	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.199695110 CET	192.168.2.4	1.1.1.1	0x8a26	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:37.436580896 CET	192.168.2.4	1.1.1.1	0x3fe5	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.436713934 CET	192.168.2.4	1.1.1.1	0xb1d6	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:37.469727993 CET	192.168.2.4	1.1.1.1	0xeb53	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:38.383574963 CET	192.168.2.4	1.1.1.1	0xe244	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:38.383688927 CET	192.168.2.4	1.1.1.1	0xb95a	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:38.429908037 CET	192.168.2.4	1.1.1.1	0x41a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:38.430032015 CET	192.168.2.4	1.1.1.1	0x65ca	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:39.504935980 CET	192.168.2.4	1.1.1.1	0xad	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.504992962 CET	192.168.2.4	1.1.1.1	0xac98	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:39.954102993 CET	192.168.2.4	1.1.1.1	0x1ea0	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.954195976 CET	192.168.2.4	1.1.1.1	0x86a1	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:39.969118118 CET	192.168.2.4	1.1.1.1	0xc86a	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.969310999 CET	192.168.2.4	1.1.1.1	0x5af7	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:40.028177023 CET	192.168.2.4	1.1.1.1	0xa773	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:40.028301001 CET	192.168.2.4	1.1.1.1	0x63ec	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Jan 12, 2025 00:12:40.029129028 CET	192.168.2.4	1.1.1.1	0xfae6	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:40.029308081 CET	192.168.2.4	1.1.1.1	0x723d	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Jan 12, 2025 00:12:40.033829927 CET	192.168.2.4	1.1.1.1	0x679	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:40.033996105 CET	192.168.2.4	1.1.1.1	0x8f69	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:40.036817074 CET	192.168.2.4	1.1.1.1	0x3393	Standard query (0)	cdn.doubleverify.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:40.036971092 CET	192.168.2.4	1.1.1.1	0x891a	Standard query (0)	cdn.doubleverify.com	65	IN (0x0001)	false
Jan 12, 2025 00:12:40.040010929 CET	192.168.2.4	1.1.1.1	0x9ba0	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:40.040340900 CET	192.168.2.4	1.1.1.1	0x4177	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 12, 2025 00:11:16.010091066 CET	1.1.1.1	192.168.2.4	0x6df1	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 12, 2025 00:11:16.010111094 CET	1.1.1.1	192.168.2.4	0x240	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:18.062390089 CET	1.1.1.1	192.168.2.4	0x78d4	No error (0)	talktalk770.weebly.com		74.115.51.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:18.062390089 CET	1.1.1.1	192.168.2.4	0x78d4	No error (0)	talktalk770.weebly.com		74.115.51.9	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:19.109309912 CET	1.1.1.1	192.168.2.4	0x838f	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:19.109972000 CET	1.1.1.1	192.168.2.4	0x396b	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:19.109972000 CET	1.1.1.1	192.168.2.4	0x396b	No error (0)	weebly.map.fastly.net		151.101.1.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:19.109972000 CET	1.1.1.1	192.168.2.4	0x396b	No error (0)	weebly.map.fastly.net		151.101.65.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:19.109972000 CET	1.1.1.1	192.168.2.4	0x396b	No error (0)	weebly.map.fastly.net		151.101.129.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:19.109972000 CET	1.1.1.1	192.168.2.4	0x396b	No error (0)	weebly.map.fastly.net		151.101.193.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:19.420650959 CET	1.1.1.1	192.168.2.4	0xed86	No error (0)	talktalk770.weebly.com		74.115.51.9	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:19.420650959 CET	1.1.1.1	192.168.2.4	0xed86	No error (0)	talktalk770.weebly.com		74.115.51.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:20.458080053 CET	1.1.1.1	192.168.2.4	0xa7f8	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:20.458080053 CET	1.1.1.1	192.168.2.4	0xa7f8	No error (0)	weebly.map.fastly.net		151.101.1.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:20.458080053 CET	1.1.1.1	192.168.2.4	0xa7f8	No error (0)	weebly.map.fastly.net		151.101.65.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:20.458080053 CET	1.1.1.1	192.168.2.4	0xa7f8	No error (0)	weebly.map.fastly.net		151.101.129.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:20.458080053 CET	1.1.1.1	192.168.2.4	0xa7f8	No error (0)	weebly.map.fastly.net		151.101.193.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:20.458358049 CET	1.1.1.1	192.168.2.4	0xa00a	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:22.099423885 CET	1.1.1.1	192.168.2.4	0x695a	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:22.100198984 CET	1.1.1.1	192.168.2.4	0xfb42	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 12, 2025 00:11:22.881839037 CET	1.1.1.1	192.168.2.4	0xad63	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:22.889164925 CET	1.1.1.1	192.168.2.4	0x3e61	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:22.889164925 CET	1.1.1.1	192.168.2.4	0x3e61	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		44.240.99.243	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:22.889164925 CET	1.1.1.1	192.168.2.4	0x3e61	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		50.112.140.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:23.055246115 CET	1.1.1.1	192.168.2.4	0xd033	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:23.055816889 CET	1.1.1.1	192.168.2.4	0x29ae	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 12, 2025 00:11:25.120012045 CET	1.1.1.1	192.168.2.4	0x4748	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:25.120012045 CET	1.1.1.1	192.168.2.4	0x4748	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		44.240.99.243	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:25.120012045 CET	1.1.1.1	192.168.2.4	0x4748	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		50.112.140.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:25.127850056 CET	1.1.1.1	192.168.2.4	0xff08	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:34.420394897 CET	1.1.1.1	192.168.2.4	0x94d4	No error (0)	talktalk770.weebly.com		74.115.51.9	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:34.420394897 CET	1.1.1.1	192.168.2.4	0x94d4	No error (0)	talktalk770.weebly.com		74.115.51.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:46.554764986 CET	1.1.1.1	192.168.2.4	0xfe3	No error (0)	apps.talktalk.co.uk	http.tt.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:46.554807901 CET	1.1.1.1	192.168.2.4	0x392	No error (0)	apps.talktalk.co.uk	http.tt.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:46.554807901 CET	1.1.1.1	192.168.2.4	0x392	No error (0)	http.tt.xion.oxcs.net		153.92.124.237	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:48.301012993 CET	1.1.1.1	192.168.2.4	0xe048	No error (0)	apps.talktalk.co.uk	http.tt.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:11:48.301012993 CET	1.1.1.1	192.168.2.4	0xe048	No error (0)	http.tt.xion.oxcs.net		153.92.124.237	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:11:48.301367998 CET	1.1.1.1	192.168.2.4	0x123b	No error (0)	apps.talktalk.co.uk	http.tt.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:12.558846951 CET	1.1.1.1	192.168.2.4	0x9b46	No error (0)	tradecore.tradehouse.media		104.248.92.90	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:13.785657883 CET	1.1.1.1	192.168.2.4	0xe317	No error (0)	tradecore.tradehouse.media		167.71.130.132	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:13.787677050 CET	1.1.1.1	192.168.2.4	0x1e2f	No error (0)	cdn.privacy-mgmt.com		99.86.4.122	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:13.787677050 CET	1.1.1.1	192.168.2.4	0x1e2f	No error (0)	cdn.privacy-mgmt.com		99.86.4.102	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:13.787677050 CET	1.1.1.1	192.168.2.4	0x1e2f	No error (0)	cdn.privacy-mgmt.com		99.86.4.40	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:13.787677050 CET	1.1.1.1	192.168.2.4	0x1e2f	No error (0)	cdn.privacy-mgmt.com		99.86.4.86	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:15.025114059 CET	1.1.1.1	192.168.2.4	0xb95f	No error (0)	cdn.privacy-mgmt.com		18.245.199.25	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:15.025114059 CET	1.1.1.1	192.168.2.4	0xb95f	No error (0)	cdn.privacy-mgmt.com		18.245.199.15	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:15.025114059 CET	1.1.1.1	192.168.2.4	0xb95f	No error (0)	cdn.privacy-mgmt.com		18.245.199.31	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:15.025114059 CET	1.1.1.1	192.168.2.4	0xb95f	No error (0)	cdn.privacy-mgmt.com		18.245.199.47	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:18.609901905 CET	1.1.1.1	192.168.2.4	0x60f4	No error (0)	ats-wrapper.privacymanager.io		13.33.187.21	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:18.609901905 CET	1.1.1.1	192.168.2.4	0x60f4	No error (0)	ats-wrapper.privacymanager.io		13.33.187.36	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:18.609901905 CET	1.1.1.1	192.168.2.4	0x60f4	No error (0)	ats-wrapper.privacymanager.io		13.33.187.94	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:18.609901905 CET	1.1.1.1	192.168.2.4	0x60f4	No error (0)	ats-wrapper.privacymanager.io		13.33.187.48	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:19.621866941 CET	1.1.1.1	192.168.2.4	0xa37d	No error (0)	securepubads.g.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:19.622438908 CET	1.1.1.1	192.168.2.4	0xca3e	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:19.625305891 CET	1.1.1.1	192.168.2.4	0xd9df	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:19.625305891 CET	1.1.1.1	192.168.2.4	0xd9df	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.3.93	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:19.625839949 CET	1.1.1.1	192.168.2.4	0xe8ae	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:20.497538090 CET	1.1.1.1	192.168.2.4	0x4e3e	No error (0)	ats-wrapper.privacymanager.io		13.33.187.94	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:20.497538090 CET	1.1.1.1	192.168.2.4	0x4e3e	No error (0)	ats-wrapper.privacymanager.io		13.33.187.36	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:20.497538090 CET	1.1.1.1	192.168.2.4	0x4e3e	No error (0)	ats-wrapper.privacymanager.io		13.33.187.21	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:20.497538090 CET	1.1.1.1	192.168.2.4	0x4e3e	No error (0)	ats-wrapper.privacymanager.io		13.33.187.48	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:20.501926899 CET	1.1.1.1	192.168.2.4	0x9942	No error (0)	geo.privacymanager.io		13.32.99.122	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:20.501926899 CET	1.1.1.1	192.168.2.4	0x9942	No error (0)	geo.privacymanager.io		13.32.99.89	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:20.501926899 CET	1.1.1.1	192.168.2.4	0x9942	No error (0)	geo.privacymanager.io		13.32.99.59	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:20.501926899 CET	1.1.1.1	192.168.2.4	0x9942	No error (0)	geo.privacymanager.io		13.32.99.35	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.008049011 CET	1.1.1.1	192.168.2.4	0x71d	No error (0)	securepubads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.009381056 CET	1.1.1.1	192.168.2.4	0x5723	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:21.154339075 CET	1.1.1.1	192.168.2.4	0x8972	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.154339075 CET	1.1.1.1	192.168.2.4	0x8972	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155072927 CET	1.1.1.1	192.168.2.4	0x2934	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.155272007 CET	1.1.1.1	192.168.2.4	0x6930	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.158420086 CET	1.1.1.1	192.168.2.4	0x3a7b	No error (0)	api.rlcdn.com		34.120.133.55	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.160695076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	id.crwdcntrl.net		52.17.153.181	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.160695076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	id.crwdcntrl.net		54.77.101.113	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.160695076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	id.crwdcntrl.net		52.211.179.180	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.160695076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	id.crwdcntrl.net		52.48.183.31	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.160695076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	id.crwdcntrl.net		34.248.19.126	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.160695076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	id.crwdcntrl.net		34.246.77.188	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.160695076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	id.crwdcntrl.net		52.49.239.226	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.160695076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	id.crwdcntrl.net		54.74.2.197	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.196536064 CET	1.1.1.1	192.168.2.4	0x29d1	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.196536064 CET	1.1.1.1	192.168.2.4	0x29d1	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.196536064 CET	1.1.1.1	192.168.2.4	0x29d1	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.196536064 CET	1.1.1.1	192.168.2.4	0x29d1	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.301218987 CET	1.1.1.1	192.168.2.4	0x419	No error (0)	grid.bidswitch.net	bidder.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.301218987 CET	1.1.1.1	192.168.2.4	0x419	No error (0)	bidder.criteo.com	in-ftd-65.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.301218987 CET	1.1.1.1	192.168.2.4	0x419	No error (0)	in-ftd-65.nl3.vip.prod.criteo.com		178.250.1.56	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.302324057 CET	1.1.1.1	192.168.2.4	0x3607	No error (0)	grid.bidswitch.net	bidder.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.302324057 CET	1.1.1.1	192.168.2.4	0x3607	No error (0)	bidder.criteo.com	in-ftd-65.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.302787066 CET	1.1.1.1	192.168.2.4	0x2e45	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.302787066 CET	1.1.1.1	192.168.2.4	0x2e45	No error (0)	prga.smartadserver.com	hb-geo-global.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.303272963 CET	1.1.1.1	192.168.2.4	0x63c4	No error (0)	shb.richaudience.com		176.9.112.17	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.308072090 CET	1.1.1.1	192.168.2.4	0x2f37	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:21.308084965 CET	1.1.1.1	192.168.2.4	0x610f	No error (0)	htlb.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.308084965 CET	1.1.1.1	192.168.2.4	0x610f	No error (0)	htlb.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.315360069 CET	1.1.1.1	192.168.2.4	0x16fc	No error (0)	grid-bidder.criteo.com	ssp-bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.315360069 CET	1.1.1.1	192.168.2.4	0x16fc	No error (0)	ssp-bidder.nl3.vip.prod.criteo.com		178.250.1.4	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.315373898 CET	1.1.1.1	192.168.2.4	0x219d	No error (0)	grid-bidder.criteo.com	ssp-bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.352030993 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.253.31.90	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.31.33.79	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.18.21.189	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.154.126.78	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.30.86.151	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.170.39.196	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		63.34.39.93	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353403091 CET	1.1.1.1	192.168.2.4	0xa5ef	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.19.151.243	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353415966 CET	1.1.1.1	192.168.2.4	0x43e1	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353415966 CET	1.1.1.1	192.168.2.4	0x43e1	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353415966 CET	1.1.1.1	192.168.2.4	0x43e1	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353415966 CET	1.1.1.1	192.168.2.4	0x43e1	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353427887 CET	1.1.1.1	192.168.2.4	0x6f61	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353638887 CET	1.1.1.1	192.168.2.4	0x63e5	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353638887 CET	1.1.1.1	192.168.2.4	0x63e5	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353638887 CET	1.1.1.1	192.168.2.4	0x63e5	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.353638887 CET	1.1.1.1	192.168.2.4	0x63e5	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.355083942 CET	1.1.1.1	192.168.2.4	0xe7cf	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.355083942 CET	1.1.1.1	192.168.2.4	0xe7cf	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.355144024 CET	1.1.1.1	192.168.2.4	0x5ae	No error (0)	mp.4dex.io			65	IN (0x0001)	false
Jan 12, 2025 00:12:21.355155945 CET	1.1.1.1	192.168.2.4	0x53c3	No error (0)	mp.4dex.io		104.18.34.178	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.355155945 CET	1.1.1.1	192.168.2.4	0x53c3	No error (0)	mp.4dex.io		172.64.153.78	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.356313944 CET	1.1.1.1	192.168.2.4	0x75b7	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.356327057 CET	1.1.1.1	192.168.2.4	0xc93a	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.356327057 CET	1.1.1.1	192.168.2.4	0xc93a	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.356327057 CET	1.1.1.1	192.168.2.4	0xc93a	No error (0)	hbopenbid-ams.pubmnet.com		185.64.189.112	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.356491089 CET	1.1.1.1	192.168.2.4	0xfb21	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.356491089 CET	1.1.1.1	192.168.2.4	0xfb21	No error (0)	btlr-eu-central-1.sharethrough.com		3.126.92.214	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:21.356987953 CET	1.1.1.1	192.168.2.4	0xde18	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.356987953 CET	1.1.1.1	192.168.2.4	0xde18	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.398386002 CET	1.1.1.1	192.168.2.4	0xe19f	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:21.398874998 CET	1.1.1.1	192.168.2.4	0x7e90	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.005438089 CET	1.1.1.1	192.168.2.4	0x719f	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.005438089 CET	1.1.1.1	192.168.2.4	0x719f	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.3.93	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.005924940 CET	1.1.1.1	192.168.2.4	0x9200	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.007216930 CET	1.1.1.1	192.168.2.4	0xf876	No error (0)	geo.privacymanager.io		13.32.99.122	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.007216930 CET	1.1.1.1	192.168.2.4	0xf876	No error (0)	geo.privacymanager.io		13.32.99.59	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.007216930 CET	1.1.1.1	192.168.2.4	0xf876	No error (0)	geo.privacymanager.io		13.32.99.89	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.007216930 CET	1.1.1.1	192.168.2.4	0xf876	No error (0)	geo.privacymanager.io		13.32.99.35	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.214395046 CET	1.1.1.1	192.168.2.4	0xc8	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.233658075 CET	1.1.1.1	192.168.2.4	0xdfb	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.233658075 CET	1.1.1.1	192.168.2.4	0xdfb	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.233658075 CET	1.1.1.1	192.168.2.4	0xdfb	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.233658075 CET	1.1.1.1	192.168.2.4	0xdfb	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.237334967 CET	1.1.1.1	192.168.2.4	0xa5f0	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.237334967 CET	1.1.1.1	192.168.2.4	0xa5f0	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.245759010 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.248919964 CET	1.1.1.1	192.168.2.4	0xe999	No error (0)	htlb.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.248919964 CET	1.1.1.1	192.168.2.4	0xe999	No error (0)	htlb.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.249779940 CET	1.1.1.1	192.168.2.4	0x4180	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:22.310687065 CET	1.1.1.1	192.168.2.4	0x1a01	No error (0)	mp.4dex.io			65	IN (0x0001)	false
Jan 12, 2025 00:12:22.311187029 CET	1.1.1.1	192.168.2.4	0x3d88	No error (0)	mp.4dex.io		172.64.153.78	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.311187029 CET	1.1.1.1	192.168.2.4	0x3d88	No error (0)	mp.4dex.io		104.18.34.178	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.322267056 CET	1.1.1.1	192.168.2.4	0xdbef	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.322267056 CET	1.1.1.1	192.168.2.4	0xdbef	No error (0)	prga.smartadserver.com	hb-geo-global.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.338530064 CET	1.1.1.1	192.168.2.4	0xc3c7	No error (0)	id.crwdcntrl.net		34.246.77.188	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.338530064 CET	1.1.1.1	192.168.2.4	0xc3c7	No error (0)	id.crwdcntrl.net		52.211.179.180	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.338530064 CET	1.1.1.1	192.168.2.4	0xc3c7	No error (0)	id.crwdcntrl.net		54.77.101.113	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.338530064 CET	1.1.1.1	192.168.2.4	0xc3c7	No error (0)	id.crwdcntrl.net		34.248.19.126	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.338530064 CET	1.1.1.1	192.168.2.4	0xc3c7	No error (0)	id.crwdcntrl.net		52.48.183.31	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.338530064 CET	1.1.1.1	192.168.2.4	0xc3c7	No error (0)	id.crwdcntrl.net		52.49.239.226	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.338530064 CET	1.1.1.1	192.168.2.4	0xc3c7	No error (0)	id.crwdcntrl.net		52.17.153.181	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.338530064 CET	1.1.1.1	192.168.2.4	0xc3c7	No error (0)	id.crwdcntrl.net		54.74.2.197	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.351363897 CET	1.1.1.1	192.168.2.4	0x7ea3	No error (0)	grid.bidswitch.net	bidder.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.351363897 CET	1.1.1.1	192.168.2.4	0x7ea3	No error (0)	bidder.criteo.com	in-ftd-65.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.351363897 CET	1.1.1.1	192.168.2.4	0x7ea3	No error (0)	in-ftd-65.nl3.vip.prod.criteo.com		178.250.1.56	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.351633072 CET	1.1.1.1	192.168.2.4	0x7b57	No error (0)	grid.bidswitch.net	bidder.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.351633072 CET	1.1.1.1	192.168.2.4	0x7b57	No error (0)	bidder.criteo.com	in-ftd-65.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.385395050 CET	1.1.1.1	192.168.2.4	0x7d36	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.385395050 CET	1.1.1.1	192.168.2.4	0x7d36	No error (0)	btlr-eu-central-1.sharethrough.com		3.78.93.150	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.385611057 CET	1.1.1.1	192.168.2.4	0xf59e	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.420164108 CET	1.1.1.1	192.168.2.4	0x715a	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.420164108 CET	1.1.1.1	192.168.2.4	0x715a	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.420164108 CET	1.1.1.1	192.168.2.4	0x715a	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.420164108 CET	1.1.1.1	192.168.2.4	0x715a	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.420413971 CET	1.1.1.1	192.168.2.4	0x10be	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.463373899 CET	1.1.1.1	192.168.2.4	0xed66	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.463757992 CET	1.1.1.1	192.168.2.4	0x5913	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.246.35.67	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.74.180.243	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.154.126.78	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.228.237.141	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.229.130.35	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.215.179.123	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.49.86.152	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.464847088 CET	1.1.1.1	192.168.2.4	0x2025	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.75.168.85	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.465111017 CET	1.1.1.1	192.168.2.4	0x4f26	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.465111017 CET	1.1.1.1	192.168.2.4	0x4f26	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.465111017 CET	1.1.1.1	192.168.2.4	0x4f26	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.465111017 CET	1.1.1.1	192.168.2.4	0x4f26	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.574807882 CET	1.1.1.1	192.168.2.4	0x2b14	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.989701033 CET	1.1.1.1	192.168.2.4	0xabce	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:22.989701033 CET	1.1.1.1	192.168.2.4	0xabce	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:22.990883112 CET	1.1.1.1	192.168.2.4	0xba7c	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:23.159912109 CET	1.1.1.1	192.168.2.4	0x3254	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.191386938 CET	1.1.1.1	192.168.2.4	0x5189	No error (0)	script.4dex.io		104.26.9.169	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.191386938 CET	1.1.1.1	192.168.2.4	0x5189	No error (0)	script.4dex.io		172.67.75.241	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.191386938 CET	1.1.1.1	192.168.2.4	0x5189	No error (0)	script.4dex.io		104.26.8.169	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.219583035 CET	1.1.1.1	192.168.2.4	0xfe10	No error (0)	script.4dex.io			65	IN (0x0001)	false
Jan 12, 2025 00:12:24.220249891 CET	1.1.1.1	192.168.2.4	0xbdc4	No error (0)	config.aps.amazon-adsystem.com		18.245.31.92	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.220249891 CET	1.1.1.1	192.168.2.4	0xbdc4	No error (0)	config.aps.amazon-adsystem.com		18.245.31.123	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.220249891 CET	1.1.1.1	192.168.2.4	0xbdc4	No error (0)	config.aps.amazon-adsystem.com		18.245.31.9	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.220249891 CET	1.1.1.1	192.168.2.4	0xbdc4	No error (0)	config.aps.amazon-adsystem.com		18.245.31.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:24.295937061 CET	1.1.1.1	192.168.2.4	0x467e	No error (0)	s.richaudience.com		178.63.241.79	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.021042109 CET	1.1.1.1	192.168.2.4	0x66bc	No error (0)	script.4dex.io		104.26.8.169	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.021042109 CET	1.1.1.1	192.168.2.4	0x66bc	No error (0)	script.4dex.io		104.26.9.169	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.021042109 CET	1.1.1.1	192.168.2.4	0x66bc	No error (0)	script.4dex.io		172.67.75.241	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.022120953 CET	1.1.1.1	192.168.2.4	0x12ec	No error (0)	script.4dex.io			65	IN (0x0001)	false
Jan 12, 2025 00:12:25.042397976 CET	1.1.1.1	192.168.2.4	0xfe57	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:25.042397976 CET	1.1.1.1	192.168.2.4	0xfe57	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.042397976 CET	1.1.1.1	192.168.2.4	0xfe57	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.043311119 CET	1.1.1.1	192.168.2.4	0xe44	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:25.257455111 CET	1.1.1.1	192.168.2.4	0x14cd	No error (0)	cadmus.script.ac		104.18.22.145	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.257455111 CET	1.1.1.1	192.168.2.4	0x14cd	No error (0)	cadmus.script.ac		104.18.23.145	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.257919073 CET	1.1.1.1	192.168.2.4	0x8350	No error (0)	cadmus.script.ac			65	IN (0x0001)	false
Jan 12, 2025 00:12:25.418514967 CET	1.1.1.1	192.168.2.4	0x7b0e	No error (0)	s.richaudience.com		178.63.241.79	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.468444109 CET	1.1.1.1	192.168.2.4	0xe6b3	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:25.468444109 CET	1.1.1.1	192.168.2.4	0xe6b3	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:25.468444109 CET	1.1.1.1	192.168.2.4	0xe6b3	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:25.468444109 CET	1.1.1.1	192.168.2.4	0xe6b3	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.244.21.227	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.468461990 CET	1.1.1.1	192.168.2.4	0x8d08	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:25.468461990 CET	1.1.1.1	192.168.2.4	0x8d08	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:25.468461990 CET	1.1.1.1	192.168.2.4	0x8d08	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:25.489072084 CET	1.1.1.1	192.168.2.4	0x222f	No error (0)	securepubads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.489236116 CET	1.1.1.1	192.168.2.4	0x5207	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:25.522073030 CET	1.1.1.1	192.168.2.4	0x35b6	No error (0)	ep1.adtrafficquality.google		172.217.18.2	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.522697926 CET	1.1.1.1	192.168.2.4	0x1ff8	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Jan 12, 2025 00:12:25.537733078 CET	1.1.1.1	192.168.2.4	0xaa7e	No error (0)	pagead-googlehosted.l.google.com		216.58.206.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.574937105 CET	1.1.1.1	192.168.2.4	0xc479	No error (0)	pagead-googlehosted.l.google.com		142.250.186.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.830229998 CET	1.1.1.1	192.168.2.4	0x7970	No error (0)	config.aps.amazon-adsystem.com		18.245.31.123	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.830229998 CET	1.1.1.1	192.168.2.4	0x7970	No error (0)	config.aps.amazon-adsystem.com		18.245.31.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.830229998 CET	1.1.1.1	192.168.2.4	0x7970	No error (0)	config.aps.amazon-adsystem.com		18.245.31.92	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.830229998 CET	1.1.1.1	192.168.2.4	0x7970	No error (0)	config.aps.amazon-adsystem.com		18.245.31.9	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.871844053 CET	1.1.1.1	192.168.2.4	0x9265	No error (0)	cadmus.script.ac		104.18.22.145	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.871844053 CET	1.1.1.1	192.168.2.4	0x9265	No error (0)	cadmus.script.ac		104.18.23.145	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:25.871859074 CET	1.1.1.1	192.168.2.4	0x9348	No error (0)	cadmus.script.ac			65	IN (0x0001)	false
Jan 12, 2025 00:12:26.061923981 CET	1.1.1.1	192.168.2.4	0xf97f	No error (0)	ads.us.e-planning.net		193.3.178.4	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.497980118 CET	1.1.1.1	192.168.2.4	0x44a1	No error (0)	aax-eu.amazon-adsystem.com		52.94.222.140	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.640747070 CET	1.1.1.1	192.168.2.4	0x9c47	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.640747070 CET	1.1.1.1	192.168.2.4	0x9c47	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.640747070 CET	1.1.1.1	192.168.2.4	0x9c47	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.640747070 CET	1.1.1.1	192.168.2.4	0x9c47	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.642690897 CET	1.1.1.1	192.168.2.4	0x8a6e	No error (0)	cm.g.doubleclick.net		172.217.16.130	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.646994114 CET	1.1.1.1	192.168.2.4	0xd03d	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.646994114 CET	1.1.1.1	192.168.2.4	0xd03d	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.646994114 CET	1.1.1.1	192.168.2.4	0xd03d	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.647042990 CET	1.1.1.1	192.168.2.4	0xaea8	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.647042990 CET	1.1.1.1	192.168.2.4	0xaea8	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.647042990 CET	1.1.1.1	192.168.2.4	0xaea8	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.647042990 CET	1.1.1.1	192.168.2.4	0xaea8	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		13.35.57.137	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.670660019 CET	1.1.1.1	192.168.2.4	0xd153	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.670660019 CET	1.1.1.1	192.168.2.4	0xd153	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.670674086 CET	1.1.1.1	192.168.2.4	0xd3cb	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.670674086 CET	1.1.1.1	192.168.2.4	0xd3cb	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671142101 CET	1.1.1.1	192.168.2.4	0x805f	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671407938 CET	1.1.1.1	192.168.2.4	0x5dd2	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671407938 CET	1.1.1.1	192.168.2.4	0x5dd2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.76.91.170	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671407938 CET	1.1.1.1	192.168.2.4	0x5dd2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		63.34.161.76	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671407938 CET	1.1.1.1	192.168.2.4	0x5dd2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		108.128.174.112	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671407938 CET	1.1.1.1	192.168.2.4	0x5dd2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.242.173.27	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671849966 CET	1.1.1.1	192.168.2.4	0x25f1	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671849966 CET	1.1.1.1	192.168.2.4	0x25f1	No error (0)	idaas-ext.cph.liveintent.com		3.225.89.177	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671849966 CET	1.1.1.1	192.168.2.4	0x25f1	No error (0)	idaas-ext.cph.liveintent.com		54.237.214.35	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671849966 CET	1.1.1.1	192.168.2.4	0x25f1	No error (0)	idaas-ext.cph.liveintent.com		54.236.128.166	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671849966 CET	1.1.1.1	192.168.2.4	0x25f1	No error (0)	idaas-ext.cph.liveintent.com		35.173.214.6	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671849966 CET	1.1.1.1	192.168.2.4	0x25f1	No error (0)	idaas-ext.cph.liveintent.com		52.3.70.0	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671849966 CET	1.1.1.1	192.168.2.4	0x25f1	No error (0)	idaas-ext.cph.liveintent.com		18.214.213.42	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671849966 CET	1.1.1.1	192.168.2.4	0x25f1	No error (0)	idaas-ext.cph.liveintent.com		3.208.153.251	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.671849966 CET	1.1.1.1	192.168.2.4	0x25f1	No error (0)	idaas-ext.cph.liveintent.com		52.55.72.170	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.672162056 CET	1.1.1.1	192.168.2.4	0x69a	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:26.681579113 CET	1.1.1.1	192.168.2.4	0xc5af	No error (0)	ep1.adtrafficquality.google		142.250.185.162	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:26.681766987 CET	1.1.1.1	192.168.2.4	0x2232	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Jan 12, 2025 00:12:27.181977987 CET	1.1.1.1	192.168.2.4	0x2bd4	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:27.181993008 CET	1.1.1.1	192.168.2.4	0x7394	No error (0)	googleads.g.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.182092905 CET	1.1.1.1	192.168.2.4	0xf67d	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.182111979 CET	1.1.1.1	192.168.2.4	0x102	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:27.265600920 CET	1.1.1.1	192.168.2.4	0x1fc0	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.266372919 CET	1.1.1.1	192.168.2.4	0xb041	No error (0)	ep2.adtrafficquality.google		216.58.206.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.316613913 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.316626072 CET	1.1.1.1	192.168.2.4	0xa155	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.316626072 CET	1.1.1.1	192.168.2.4	0xa155	No error (0)	cdn-content.ampproject.org		142.250.185.129	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.422112942 CET	1.1.1.1	192.168.2.4	0x31c4	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.439059019 CET	1.1.1.1	192.168.2.4	0xa317	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.474762917 CET	1.1.1.1	192.168.2.4	0xd1b4	No error (0)	sync.srv.stackadapt.com		3.211.75.57	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.474762917 CET	1.1.1.1	192.168.2.4	0xd1b4	No error (0)	sync.srv.stackadapt.com		52.86.216.144	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.474762917 CET	1.1.1.1	192.168.2.4	0xd1b4	No error (0)	sync.srv.stackadapt.com		54.156.21.112	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.474762917 CET	1.1.1.1	192.168.2.4	0xd1b4	No error (0)	sync.srv.stackadapt.com		35.170.46.82	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.474762917 CET	1.1.1.1	192.168.2.4	0xd1b4	No error (0)	sync.srv.stackadapt.com		35.153.85.19	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.474762917 CET	1.1.1.1	192.168.2.4	0xd1b4	No error (0)	sync.srv.stackadapt.com		34.203.116.124	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.474762917 CET	1.1.1.1	192.168.2.4	0xd1b4	No error (0)	sync.srv.stackadapt.com		54.166.196.94	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.474762917 CET	1.1.1.1	192.168.2.4	0xd1b4	No error (0)	sync.srv.stackadapt.com		54.144.6.190	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.477124929 CET	1.1.1.1	192.168.2.4	0x300	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.477124929 CET	1.1.1.1	192.168.2.4	0x300	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.477135897 CET	1.1.1.1	192.168.2.4	0xd2e0	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.477135897 CET	1.1.1.1	192.168.2.4	0xd2e0	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.784765005 CET	1.1.1.1	192.168.2.4	0x28c	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.785418987 CET	1.1.1.1	192.168.2.4	0xacac	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.785701036 CET	1.1.1.1	192.168.2.4	0x2492	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.785712004 CET	1.1.1.1	192.168.2.4	0x110b	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.786734104 CET	1.1.1.1	192.168.2.4	0x7a86	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.786734104 CET	1.1.1.1	192.168.2.4	0x7a86	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.786734104 CET	1.1.1.1	192.168.2.4	0x7a86	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.786734104 CET	1.1.1.1	192.168.2.4	0x7a86	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.786734104 CET	1.1.1.1	192.168.2.4	0x7a86	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787448883 CET	1.1.1.1	192.168.2.4	0xa0ab	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787448883 CET	1.1.1.1	192.168.2.4	0xa0ab	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787448883 CET	1.1.1.1	192.168.2.4	0xa0ab	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.31.201	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787448883 CET	1.1.1.1	192.168.2.4	0xa0ab	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.247.171.213	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787448883 CET	1.1.1.1	192.168.2.4	0xa0ab	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.202.88.130	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787448883 CET	1.1.1.1	192.168.2.4	0xa0ab	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.32.26	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787448883 CET	1.1.1.1	192.168.2.4	0xa0ab	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.19.217.34	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787448883 CET	1.1.1.1	192.168.2.4	0xa0ab	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.178.129	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787628889 CET	1.1.1.1	192.168.2.4	0x4f9b	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787628889 CET	1.1.1.1	192.168.2.4	0x4f9b	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.787633896 CET	1.1.1.1	192.168.2.4	0xd31a	No error (0)	sync.richaudience.com		148.251.20.73	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.788918972 CET	1.1.1.1	192.168.2.4	0x94cc	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.788978100 CET	1.1.1.1	192.168.2.4	0xb569	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:27.788978100 CET	1.1.1.1	192.168.2.4	0xb569	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.790143967 CET	1.1.1.1	192.168.2.4	0x2027	No error (0)	js-sec.indexww.com		104.18.24.18	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.790143967 CET	1.1.1.1	192.168.2.4	0x2027	No error (0)	js-sec.indexww.com		104.18.25.18	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.790210009 CET	1.1.1.1	192.168.2.4	0xbdfb	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:27.798053980 CET	1.1.1.1	192.168.2.4	0x228f	No error (0)	tradehouse-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:27.798053980 CET	1.1.1.1	192.168.2.4	0x228f	No error (0)	tradehouse-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.097872019 CET	1.1.1.1	192.168.2.4	0xbf08	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:28.097872019 CET	1.1.1.1	192.168.2.4	0xbf08	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.097872019 CET	1.1.1.1	192.168.2.4	0xbf08	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.097893000 CET	1.1.1.1	192.168.2.4	0x35f0	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:28.240842104 CET	1.1.1.1	192.168.2.4	0xdd4b	No error (0)	thrtle.com		34.233.219.14	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.240842104 CET	1.1.1.1	192.168.2.4	0xdd4b	No error (0)	thrtle.com		52.204.65.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.240842104 CET	1.1.1.1	192.168.2.4	0xdd4b	No error (0)	thrtle.com		54.225.117.250	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.240842104 CET	1.1.1.1	192.168.2.4	0xdd4b	No error (0)	thrtle.com		52.6.98.243	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.240842104 CET	1.1.1.1	192.168.2.4	0xdd4b	No error (0)	thrtle.com		23.21.74.44	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.366648912 CET	1.1.1.1	192.168.2.4	0x618c	No error (0)	u.4dex.io		34.149.40.38	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.417787075 CET	1.1.1.1	192.168.2.4	0xdc1a	No error (0)	match.prod.bidr.io		34.252.79.168	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.417787075 CET	1.1.1.1	192.168.2.4	0xdc1a	No error (0)	match.prod.bidr.io		54.154.231.237	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.417787075 CET	1.1.1.1	192.168.2.4	0xdc1a	No error (0)	match.prod.bidr.io		52.48.191.9	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.417787075 CET	1.1.1.1	192.168.2.4	0xdc1a	No error (0)	match.prod.bidr.io		63.32.181.175	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.417787075 CET	1.1.1.1	192.168.2.4	0xdc1a	No error (0)	match.prod.bidr.io		54.228.93.54	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.417787075 CET	1.1.1.1	192.168.2.4	0xdc1a	No error (0)	match.prod.bidr.io		52.48.57.98	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.417787075 CET	1.1.1.1	192.168.2.4	0xdc1a	No error (0)	match.prod.bidr.io		54.154.177.234	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.420320034 CET	1.1.1.1	192.168.2.4	0x2c4a	No error (0)	sync.ipredictive.com		3.223.17.167	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.420320034 CET	1.1.1.1	192.168.2.4	0x2c4a	No error (0)	sync.ipredictive.com		34.197.8.73	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.420320034 CET	1.1.1.1	192.168.2.4	0x2c4a	No error (0)	sync.ipredictive.com		3.209.242.128	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.420320034 CET	1.1.1.1	192.168.2.4	0x2c4a	No error (0)	sync.ipredictive.com		34.225.22.174	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.420320034 CET	1.1.1.1	192.168.2.4	0x2c4a	No error (0)	sync.ipredictive.com		34.196.74.196	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.420320034 CET	1.1.1.1	192.168.2.4	0x2c4a	No error (0)	sync.ipredictive.com		44.217.172.144	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.420320034 CET	1.1.1.1	192.168.2.4	0x2c4a	No error (0)	sync.ipredictive.com		52.1.102.41	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.420320034 CET	1.1.1.1	192.168.2.4	0x2c4a	No error (0)	sync.ipredictive.com		3.210.132.182	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.421917915 CET	1.1.1.1	192.168.2.4	0xbafe	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.422200918 CET	1.1.1.1	192.168.2.4	0xd3a3	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:28.422200918 CET	1.1.1.1	192.168.2.4	0xd3a3	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.422211885 CET	1.1.1.1	192.168.2.4	0x17	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:28.423546076 CET	1.1.1.1	192.168.2.4	0x7fbf	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:28.423546076 CET	1.1.1.1	192.168.2.4	0x7fbf	No error (0)	presentation-ams1.turn.com		46.228.164.11	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.425440073 CET	1.1.1.1	192.168.2.4	0xb014	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:28.427088976 CET	1.1.1.1	192.168.2.4	0x4185	No error (0)	s.amazon-adsystem.com		98.82.157.137	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.560133934 CET	1.1.1.1	192.168.2.4	0xf168	No error (0)	ep2.adtrafficquality.google		172.217.18.97	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.563424110 CET	1.1.1.1	192.168.2.4	0x2a7a	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:28.563496113 CET	1.1.1.1	192.168.2.4	0xbc3f	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:29.220654964 CET	1.1.1.1	192.168.2.4	0x320d	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.220654964 CET	1.1.1.1	192.168.2.4	0x320d	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.221563101 CET	1.1.1.1	192.168.2.4	0xdeb2	No error (0)	cs.krushmedia.com		80.77.87.216	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.230709076 CET	1.1.1.1	192.168.2.4	0x20f9	No error (0)	s.ad.smaato.net		13.32.27.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.230709076 CET	1.1.1.1	192.168.2.4	0x20f9	No error (0)	s.ad.smaato.net		13.32.27.67	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.230709076 CET	1.1.1.1	192.168.2.4	0x20f9	No error (0)	s.ad.smaato.net		13.32.27.23	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.230709076 CET	1.1.1.1	192.168.2.4	0x20f9	No error (0)	s.ad.smaato.net		13.32.27.108	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.444365978 CET	1.1.1.1	192.168.2.4	0x2787	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.444839001 CET	1.1.1.1	192.168.2.4	0x7314	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.444839001 CET	1.1.1.1	192.168.2.4	0x7314	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.445240974 CET	1.1.1.1	192.168.2.4	0xa516	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.445482016 CET	1.1.1.1	192.168.2.4	0x6c36	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.445743084 CET	1.1.1.1	192.168.2.4	0xd4	No error (0)	um.simpli.fi		35.204.201.36	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.445743084 CET	1.1.1.1	192.168.2.4	0xd4	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.445743084 CET	1.1.1.1	192.168.2.4	0xd4	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446594000 CET	1.1.1.1	192.168.2.4	0x7b35	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.446604967 CET	1.1.1.1	192.168.2.4	0xdaf9	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.447602987 CET	1.1.1.1	192.168.2.4	0xe01	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.476475954 CET	1.1.1.1	192.168.2.4	0xcba5	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.476475954 CET	1.1.1.1	192.168.2.4	0xcba5	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.499639988 CET	1.1.1.1	192.168.2.4	0xe8ad	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.499639988 CET	1.1.1.1	192.168.2.4	0xe8ad	No error (0)	de.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.517391920 CET	1.1.1.1	192.168.2.4	0xeb98	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.518330097 CET	1.1.1.1	192.168.2.4	0xad00	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.518330097 CET	1.1.1.1	192.168.2.4	0xad00	No error (0)	euw-ice.360yield.com		52.213.29.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.518330097 CET	1.1.1.1	192.168.2.4	0xad00	No error (0)	euw-ice.360yield.com		52.31.224.95	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.518330097 CET	1.1.1.1	192.168.2.4	0xad00	No error (0)	euw-ice.360yield.com		34.248.230.30	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.518330097 CET	1.1.1.1	192.168.2.4	0xad00	No error (0)	euw-ice.360yield.com		54.216.144.7	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.518330097 CET	1.1.1.1	192.168.2.4	0xad00	No error (0)	euw-ice.360yield.com		108.129.58.122	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.518330097 CET	1.1.1.1	192.168.2.4	0xad00	No error (0)	euw-ice.360yield.com		52.211.106.41	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.518330097 CET	1.1.1.1	192.168.2.4	0xad00	No error (0)	euw-ice.360yield.com		54.229.252.67	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.518330097 CET	1.1.1.1	192.168.2.4	0xad00	No error (0)	euw-ice.360yield.com		99.80.181.215	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.599536896 CET	1.1.1.1	192.168.2.4	0xeaee	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.599536896 CET	1.1.1.1	192.168.2.4	0xeaee	No error (0)	image6v2.pubmnet.com	pugm-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.599536896 CET	1.1.1.1	192.168.2.4	0xeaee	No error (0)	pugm-lhrc.pubmnet.com		185.64.190.78	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.599940062 CET	1.1.1.1	192.168.2.4	0xc6d1	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.599940062 CET	1.1.1.1	192.168.2.4	0xc6d1	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.620819092 CET	1.1.1.1	192.168.2.4	0xec9f	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.620819092 CET	1.1.1.1	192.168.2.4	0xec9f	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.620819092 CET	1.1.1.1	192.168.2.4	0xec9f	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.621208906 CET	1.1.1.1	192.168.2.4	0xb4e6	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.621208906 CET	1.1.1.1	192.168.2.4	0xb4e6	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.621208906 CET	1.1.1.1	192.168.2.4	0xb4e6	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.621208906 CET	1.1.1.1	192.168.2.4	0xb4e6	No error (0)	nydc1.outbrain.org		70.42.32.63	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.748547077 CET	1.1.1.1	192.168.2.4	0xfe82	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.748547077 CET	1.1.1.1	192.168.2.4	0xfe82	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.748547077 CET	1.1.1.1	192.168.2.4	0xfe82	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.748884916 CET	1.1.1.1	192.168.2.4	0x76de	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.748884916 CET	1.1.1.1	192.168.2.4	0x76de	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.748884916 CET	1.1.1.1	192.168.2.4	0x76de	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.769759893 CET	1.1.1.1	192.168.2.4	0x306	No error (0)	u.4dex.io		34.149.40.38	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.833503962 CET	1.1.1.1	192.168.2.4	0x2c8	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.833503962 CET	1.1.1.1	192.168.2.4	0x2c8	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.884593964 CET	1.1.1.1	192.168.2.4	0x671	No error (0)	ssp-sync.criteo.com	in-ftd-104.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.884593964 CET	1.1.1.1	192.168.2.4	0x671	No error (0)	in-ftd-104.nl3.vip.prod.criteo.com		178.250.1.57	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.885698080 CET	1.1.1.1	192.168.2.4	0x6484	No error (0)	ssp-sync.criteo.com	in-ftd-104.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	csync.loopme.me	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.138.30	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.237.34	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.162.172	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.202.49	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.241.197	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.235.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.196.95	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.224.215	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.137.78	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.930720091 CET	1.1.1.1	192.168.2.4	0x1f18	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.237.230	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.931361914 CET	1.1.1.1	192.168.2.4	0x8302	No error (0)	csync.loopme.me	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.938518047 CET	1.1.1.1	192.168.2.4	0x4876	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.938518047 CET	1.1.1.1	192.168.2.4	0x4876	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.938518047 CET	1.1.1.1	192.168.2.4	0x4876	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.938518047 CET	1.1.1.1	192.168.2.4	0x4876	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.938518047 CET	1.1.1.1	192.168.2.4	0x4876	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.938518047 CET	1.1.1.1	192.168.2.4	0x4876	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	euw-ice.360yield.com		54.229.252.67	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	euw-ice.360yield.com		54.247.141.169	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	euw-ice.360yield.com		46.137.30.176	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	euw-ice.360yield.com		34.248.231.166	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	euw-ice.360yield.com		108.128.210.247	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	euw-ice.360yield.com		52.208.40.39	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	euw-ice.360yield.com		54.72.127.182	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.939302921 CET	1.1.1.1	192.168.2.4	0x55d3	No error (0)	euw-ice.360yield.com		34.250.141.206	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.940057039 CET	1.1.1.1	192.168.2.4	0x66fc	No error (0)	trace-eu.mediago.io		35.214.168.80	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.940068007 CET	1.1.1.1	192.168.2.4	0xd2fc	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.940068007 CET	1.1.1.1	192.168.2.4	0xd2fc	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.957775116 CET	1.1.1.1	192.168.2.4	0x4e5d	No error (0)	cs.admanmedia.com		80.77.87.163	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.959872007 CET	1.1.1.1	192.168.2.4	0x4f6b	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.971843004 CET	1.1.1.1	192.168.2.4	0xa8bf	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.984500885 CET	1.1.1.1	192.168.2.4	0x5ab	No error (0)	sync-amz.ads.yieldmo.com	eu-west-1-sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.984500885 CET	1.1.1.1	192.168.2.4	0x5ab	No error (0)	eu-west-1-sync.ads.yieldmo.com	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.984500885 CET	1.1.1.1	192.168.2.4	0x5ab	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		52.211.248.252	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.984500885 CET	1.1.1.1	192.168.2.4	0x5ab	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		54.229.178.17	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.984500885 CET	1.1.1.1	192.168.2.4	0x5ab	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		52.212.151.43	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.984500885 CET	1.1.1.1	192.168.2.4	0x5ab	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		34.251.100.238	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.984500885 CET	1.1.1.1	192.168.2.4	0x5ab	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		54.72.205.68	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.984500885 CET	1.1.1.1	192.168.2.4	0x5ab	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		52.51.137.118	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:29.992554903 CET	1.1.1.1	192.168.2.4	0x6451	No error (0)	sync-amz.ads.yieldmo.com	eu-west-1-sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:29.992554903 CET	1.1.1.1	192.168.2.4	0x6451	No error (0)	eu-west-1-sync.ads.yieldmo.com	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.223733902 CET	1.1.1.1	192.168.2.4	0xbae1	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.224643946 CET	1.1.1.1	192.168.2.4	0x4acc	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.225939035 CET	1.1.1.1	192.168.2.4	0x57c4	No error (0)	s0.2mdn.net		142.250.186.166	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.74.5	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.74.180.243	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.73.189.71	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.16.250.210	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.253.31.90	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.170.39.196	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.30.86.151	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.239094019 CET	1.1.1.1	192.168.2.4	0xa946	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.19.151.243	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.240156889 CET	1.1.1.1	192.168.2.4	0x1da	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.240156889 CET	1.1.1.1	192.168.2.4	0x1da	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.240156889 CET	1.1.1.1	192.168.2.4	0x1da	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.240156889 CET	1.1.1.1	192.168.2.4	0x1da	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.251353979 CET	1.1.1.1	192.168.2.4	0x400b	No error (0)	hde.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.251353979 CET	1.1.1.1	192.168.2.4	0x400b	No error (0)	hde.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.537796974 CET	1.1.1.1	192.168.2.4	0x8fd0	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.538677931 CET	1.1.1.1	192.168.2.4	0xf8c6	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.538677931 CET	1.1.1.1	192.168.2.4	0xf8c6	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.538691998 CET	1.1.1.1	192.168.2.4	0x5879	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.538705111 CET	1.1.1.1	192.168.2.4	0x7cbf	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539972067 CET	1.1.1.1	192.168.2.4	0x9698	No error (0)	pixel.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539972067 CET	1.1.1.1	192.168.2.4	0x9698	No error (0)	pixel.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539972067 CET	1.1.1.1	192.168.2.4	0x9698	No error (0)	pixel.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539972067 CET	1.1.1.1	192.168.2.4	0x9698	No error (0)	pixel.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539972067 CET	1.1.1.1	192.168.2.4	0x9698	No error (0)	pixel.onaudience.com		148.113.153.93	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539972067 CET	1.1.1.1	192.168.2.4	0x9698	No error (0)	pixel.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539972067 CET	1.1.1.1	192.168.2.4	0x9698	No error (0)	pixel.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539972067 CET	1.1.1.1	192.168.2.4	0x9698	No error (0)	pixel.onaudience.com		148.113.153.94	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.539972067 CET	1.1.1.1	192.168.2.4	0x9698	No error (0)	pixel.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.542503119 CET	1.1.1.1	192.168.2.4	0x97cd	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.542503119 CET	1.1.1.1	192.168.2.4	0x97cd	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.542503119 CET	1.1.1.1	192.168.2.4	0x97cd	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.542582035 CET	1.1.1.1	192.168.2.4	0xcb4e	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.543695927 CET	1.1.1.1	192.168.2.4	0x9f47	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.543695927 CET	1.1.1.1	192.168.2.4	0x9f47	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.543695927 CET	1.1.1.1	192.168.2.4	0x9f47	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.544859886 CET	1.1.1.1	192.168.2.4	0x2909	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:30.546200991 CET	1.1.1.1	192.168.2.4	0xd9b	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.546200991 CET	1.1.1.1	192.168.2.4	0xd9b	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.674901962 CET	1.1.1.1	192.168.2.4	0x912c	No error (0)	b1sync.outbrain.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.674901962 CET	1.1.1.1	192.168.2.4	0x912c	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.674901962 CET	1.1.1.1	192.168.2.4	0x912c	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.675344944 CET	1.1.1.1	192.168.2.4	0x4b86	No error (0)	b1sync.outbrain.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.675344944 CET	1.1.1.1	192.168.2.4	0x4b86	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.675344944 CET	1.1.1.1	192.168.2.4	0x4b86	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.675344944 CET	1.1.1.1	192.168.2.4	0x4b86	No error (0)	nydc1.outbrain.org		64.202.112.223	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.806055069 CET	1.1.1.1	192.168.2.4	0xb6f5	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:30.806055069 CET	1.1.1.1	192.168.2.4	0xb6f5	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:30.806071043 CET	1.1.1.1	192.168.2.4	0x944a	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.305423975 CET	1.1.1.1	192.168.2.4	0x5c8f	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:31.306030035 CET	1.1.1.1	192.168.2.4	0x3fda	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.421456099 CET	1.1.1.1	192.168.2.4	0x44e	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.421535015 CET	1.1.1.1	192.168.2.4	0xeae4	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.421535015 CET	1.1.1.1	192.168.2.4	0xeae4	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.457986116 CET	1.1.1.1	192.168.2.4	0x36d9	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.457986116 CET	1.1.1.1	192.168.2.4	0x36d9	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.457986116 CET	1.1.1.1	192.168.2.4	0x36d9	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.458106041 CET	1.1.1.1	192.168.2.4	0x337b	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470235109 CET	1.1.1.1	192.168.2.4	0xc273	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.470249891 CET	1.1.1.1	192.168.2.4	0x612a	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.493522882 CET	1.1.1.1	192.168.2.4	0x8c5d	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:31.493555069 CET	1.1.1.1	192.168.2.4	0xe9dc	No error (0)	ad.doubleclick.net		142.250.185.230	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.618328094 CET	1.1.1.1	192.168.2.4	0x7fe6	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.618566990 CET	1.1.1.1	192.168.2.4	0x6538	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.629273891 CET	1.1.1.1	192.168.2.4	0x1eeb	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.629426956 CET	1.1.1.1	192.168.2.4	0xd1bf	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.714988947 CET	1.1.1.1	192.168.2.4	0xad8e	No error (0)	rtb0.doubleverify.com	bs-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.714988947 CET	1.1.1.1	192.168.2.4	0xad8e	No error (0)	rtbc-ew1.doubleverify.com		130.211.44.5	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.715328932 CET	1.1.1.1	192.168.2.4	0x2f7e	No error (0)	rtb0.doubleverify.com	bs-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.737202883 CET	1.1.1.1	192.168.2.4	0x52ad	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.789910078 CET	1.1.1.1	192.168.2.4	0x4aca	No error (0)	sync.crwdcntrl.net		52.49.239.226	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.789910078 CET	1.1.1.1	192.168.2.4	0x4aca	No error (0)	sync.crwdcntrl.net		54.77.101.113	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.789910078 CET	1.1.1.1	192.168.2.4	0x4aca	No error (0)	sync.crwdcntrl.net		52.48.183.31	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.789910078 CET	1.1.1.1	192.168.2.4	0x4aca	No error (0)	sync.crwdcntrl.net		52.17.153.181	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.789910078 CET	1.1.1.1	192.168.2.4	0x4aca	No error (0)	sync.crwdcntrl.net		34.248.19.126	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.789910078 CET	1.1.1.1	192.168.2.4	0x4aca	No error (0)	sync.crwdcntrl.net		54.74.2.197	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.789910078 CET	1.1.1.1	192.168.2.4	0x4aca	No error (0)	sync.crwdcntrl.net		34.246.77.188	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.789910078 CET	1.1.1.1	192.168.2.4	0x4aca	No error (0)	sync.crwdcntrl.net		52.211.179.180	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.797966957 CET	1.1.1.1	192.168.2.4	0x8e04	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.805561066 CET	1.1.1.1	192.168.2.4	0x6e23	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.805561066 CET	1.1.1.1	192.168.2.4	0x6e23	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.805561066 CET	1.1.1.1	192.168.2.4	0x6e23	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.805561066 CET	1.1.1.1	192.168.2.4	0x6e23	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.805561066 CET	1.1.1.1	192.168.2.4	0x6e23	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.805561066 CET	1.1.1.1	192.168.2.4	0x6e23	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.805752993 CET	1.1.1.1	192.168.2.4	0x3d40	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.805752993 CET	1.1.1.1	192.168.2.4	0x3d40	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.860524893 CET	1.1.1.1	192.168.2.4	0x26b5	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.860524893 CET	1.1.1.1	192.168.2.4	0x26b5	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.860524893 CET	1.1.1.1	192.168.2.4	0x26b5	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.860943079 CET	1.1.1.1	192.168.2.4	0x37df	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.860943079 CET	1.1.1.1	192.168.2.4	0x37df	No error (0)	simage2v2.pubmnet.com	pug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.862025976 CET	1.1.1.1	192.168.2.4	0x26ec	No error (0)	cms.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.862025976 CET	1.1.1.1	192.168.2.4	0x26ec	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.862025976 CET	1.1.1.1	192.168.2.4	0x26ec	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.862678051 CET	1.1.1.1	192.168.2.4	0xbbc6	No error (0)	cms.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.862817049 CET	1.1.1.1	192.168.2.4	0x373f	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.862817049 CET	1.1.1.1	192.168.2.4	0x373f	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.862817049 CET	1.1.1.1	192.168.2.4	0x373f	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.864459038 CET	1.1.1.1	192.168.2.4	0x7b76	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.864459038 CET	1.1.1.1	192.168.2.4	0x7b76	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.869116068 CET	1.1.1.1	192.168.2.4	0x3f59	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.901099920 CET	1.1.1.1	192.168.2.4	0xba24	No error (0)	dsum-sec.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.901099920 CET	1.1.1.1	192.168.2.4	0xba24	No error (0)	dsum-sec.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.901117086 CET	1.1.1.1	192.168.2.4	0xf5c9	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:31.907778978 CET	1.1.1.1	192.168.2.4	0x3066	No error (0)	sync.admanmedia.com		8.2.110.17	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.907778978 CET	1.1.1.1	192.168.2.4	0x3066	No error (0)	sync.admanmedia.com		8.2.110.26	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.911210060 CET	1.1.1.1	192.168.2.4	0xb6ed	No error (0)	s.e-planning.net		193.3.178.1	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.912755966 CET	1.1.1.1	192.168.2.4	0xb035	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.912755966 CET	1.1.1.1	192.168.2.4	0xb035	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.915577888 CET	1.1.1.1	192.168.2.4	0x78cf	No error (0)	prebid-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.916167974 CET	1.1.1.1	192.168.2.4	0x3518	No error (0)	prebid-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.917788982 CET	1.1.1.1	192.168.2.4	0xf70a	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.917788982 CET	1.1.1.1	192.168.2.4	0xf70a	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.207.79.239	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.917788982 CET	1.1.1.1	192.168.2.4	0xf70a	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.225.153.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.917788982 CET	1.1.1.1	192.168.2.4	0xf70a	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.203.110.40	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.917788982 CET	1.1.1.1	192.168.2.4	0xf70a	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		107.21.3.16	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.917788982 CET	1.1.1.1	192.168.2.4	0xf70a	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.196.76.47	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.917788982 CET	1.1.1.1	192.168.2.4	0xf70a	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.223.116.44	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.917788982 CET	1.1.1.1	192.168.2.4	0xf70a	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.22.155.227	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.917788982 CET	1.1.1.1	192.168.2.4	0xf70a	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.237.60.62	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.918003082 CET	1.1.1.1	192.168.2.4	0xa109	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992099047 CET	1.1.1.1	192.168.2.4	0x694e	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992342949 CET	1.1.1.1	192.168.2.4	0x9895	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.992342949 CET	1.1.1.1	192.168.2.4	0x9895	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.994740009 CET	1.1.1.1	192.168.2.4	0xbe64	No error (0)	visitor-adpone.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:31.994740009 CET	1.1.1.1	192.168.2.4	0xbe64	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.153	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:31.994740009 CET	1.1.1.1	192.168.2.4	0xbe64	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.152	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.003767967 CET	1.1.1.1	192.168.2.4	0x698a	No error (0)	visitor-adpone.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.068077087 CET	1.1.1.1	192.168.2.4	0x7d84	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.068077087 CET	1.1.1.1	192.168.2.4	0x7d84	No error (0)	image8-v2.pubmnet.com	imagsync-lhrpairbc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.068077087 CET	1.1.1.1	192.168.2.4	0x7d84	No error (0)	imagsync-lhrpairbc.pubmatic.com		185.64.191.214	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.069600105 CET	1.1.1.1	192.168.2.4	0xf0d7	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.069600105 CET	1.1.1.1	192.168.2.4	0xf0d7	No error (0)	image8-v2.pubmnet.com	imagsync-lhrpairbc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.263050079 CET	1.1.1.1	192.168.2.4	0x3238	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.263118982 CET	1.1.1.1	192.168.2.4	0x8027	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.49.236.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		34.252.241.64	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.30.199.206	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.77.190.247	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		34.248.247.175	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.195.234.209	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		3.248.15.160	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.293845892 CET	1.1.1.1	192.168.2.4	0x820d	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		63.32.147.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.294387102 CET	1.1.1.1	192.168.2.4	0xbf65	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.294387102 CET	1.1.1.1	192.168.2.4	0xbf65	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.294387102 CET	1.1.1.1	192.168.2.4	0xbf65	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.429822922 CET	1.1.1.1	192.168.2.4	0xbd6e	No error (0)	googleads4.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.440520048 CET	1.1.1.1	192.168.2.4	0x7026	No error (0)	www.googletagservices.com		142.250.185.194	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.446492910 CET	1.1.1.1	192.168.2.4	0x3e87	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.446492910 CET	1.1.1.1	192.168.2.4	0x3e87	No error (0)	image4-v2.pubmnet.com	spug22000nf.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.446492910 CET	1.1.1.1	192.168.2.4	0x3e87	No error (0)	spug22000nf.pubmatic.com		185.64.189.114	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.447627068 CET	1.1.1.1	192.168.2.4	0x6ee7	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.447627068 CET	1.1.1.1	192.168.2.4	0x6ee7	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.502585888 CET	1.1.1.1	192.168.2.4	0x536d	No error (0)	ad.doubleclick.net		142.250.186.134	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.502839088 CET	1.1.1.1	192.168.2.4	0xa85a	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:32.707829952 CET	1.1.1.1	192.168.2.4	0xbb47	No error (0)	u-ams03.e-planning.net		193.3.178.4	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.734630108 CET	1.1.1.1	192.168.2.4	0x183b	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.754328012 CET	1.1.1.1	192.168.2.4	0x91b	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.754328012 CET	1.1.1.1	192.168.2.4	0x91b	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.754328012 CET	1.1.1.1	192.168.2.4	0x91b	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.755248070 CET	1.1.1.1	192.168.2.4	0xaa90	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.755248070 CET	1.1.1.1	192.168.2.4	0xaa90	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.776312113 CET	1.1.1.1	192.168.2.4	0x8b1e	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.776312113 CET	1.1.1.1	192.168.2.4	0x8b1e	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.776312113 CET	1.1.1.1	192.168.2.4	0x8b1e	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.776312113 CET	1.1.1.1	192.168.2.4	0x8b1e	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.776312113 CET	1.1.1.1	192.168.2.4	0x8b1e	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.776505947 CET	1.1.1.1	192.168.2.4	0x52a2	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.814807892 CET	1.1.1.1	192.168.2.4	0x238e	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.814807892 CET	1.1.1.1	192.168.2.4	0x238e	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.195.234.25	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.814939022 CET	1.1.1.1	192.168.2.4	0x9d2a	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.826020002 CET	1.1.1.1	192.168.2.4	0xe7a1	No error (0)	eexsync.com		80.77.87.108	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.844218969 CET	1.1.1.1	192.168.2.4	0xb45c	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.855952024 CET	1.1.1.1	192.168.2.4	0x84a5	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.855952024 CET	1.1.1.1	192.168.2.4	0x84a5	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.855952024 CET	1.1.1.1	192.168.2.4	0x84a5	No error (0)	bid-iad-static.yeahtargeter.com		47.253.61.56	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.856440067 CET	1.1.1.1	192.168.2.4	0x7136	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.856440067 CET	1.1.1.1	192.168.2.4	0x7136	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.888432980 CET	1.1.1.1	192.168.2.4	0x11cf	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.888432980 CET	1.1.1.1	192.168.2.4	0x11cf	No error (0)	image4-v2.pubmnet.com	spug22000nf.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.888432980 CET	1.1.1.1	192.168.2.4	0x11cf	No error (0)	spug22000nf.pubmatic.com		185.64.189.114	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:32.894735098 CET	1.1.1.1	192.168.2.4	0x3d8b	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.894735098 CET	1.1.1.1	192.168.2.4	0x3d8b	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.936005116 CET	1.1.1.1	192.168.2.4	0x5c54	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.936005116 CET	1.1.1.1	192.168.2.4	0x5c54	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.937165976 CET	1.1.1.1	192.168.2.4	0x3c09	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:32.937165976 CET	1.1.1.1	192.168.2.4	0x3c09	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.075584888 CET	1.1.1.1	192.168.2.4	0x40d0	No error (0)	cm.smadex.com		44.208.120.208	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.075584888 CET	1.1.1.1	192.168.2.4	0x40d0	No error (0)	cm.smadex.com		34.225.12.151	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.088505983 CET	1.1.1.1	192.168.2.4	0xb134	No error (0)	rtb.gumgum.com		52.213.83.168	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.088505983 CET	1.1.1.1	192.168.2.4	0xb134	No error (0)	rtb.gumgum.com		52.211.50.181	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.088505983 CET	1.1.1.1	192.168.2.4	0xb134	No error (0)	rtb.gumgum.com		52.210.164.165	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.088505983 CET	1.1.1.1	192.168.2.4	0xb134	No error (0)	rtb.gumgum.com		54.195.177.127	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.088505983 CET	1.1.1.1	192.168.2.4	0xb134	No error (0)	rtb.gumgum.com		54.73.101.16	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.088505983 CET	1.1.1.1	192.168.2.4	0xb134	No error (0)	rtb.gumgum.com		63.32.140.173	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.088505983 CET	1.1.1.1	192.168.2.4	0xb134	No error (0)	rtb.gumgum.com		34.243.104.137	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.088505983 CET	1.1.1.1	192.168.2.4	0xb134	No error (0)	rtb.gumgum.com		3.254.45.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.126955986 CET	1.1.1.1	192.168.2.4	0x445c	No error (0)	u-ams.4dex.io		34.1.227.231	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.283528090 CET	1.1.1.1	192.168.2.4	0xd1ef	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.383733988 CET	1.1.1.1	192.168.2.4	0xe4f3	No error (0)	ws.rqtrk.eu		57.129.18.109	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.383733988 CET	1.1.1.1	192.168.2.4	0xe4f3	No error (0)	ws.rqtrk.eu		57.129.18.105	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.383733988 CET	1.1.1.1	192.168.2.4	0xe4f3	No error (0)	ws.rqtrk.eu		57.129.18.111	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.383733988 CET	1.1.1.1	192.168.2.4	0xe4f3	No error (0)	ws.rqtrk.eu		57.129.18.113	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.383733988 CET	1.1.1.1	192.168.2.4	0xe4f3	No error (0)	ws.rqtrk.eu		57.129.18.121	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.426728964 CET	1.1.1.1	192.168.2.4	0x5977	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.426728964 CET	1.1.1.1	192.168.2.4	0x5977	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.426728964 CET	1.1.1.1	192.168.2.4	0x5977	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.427174091 CET	1.1.1.1	192.168.2.4	0xfa5d	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.432024956 CET	1.1.1.1	192.168.2.4	0x4cc6	No error (0)	cm.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.452590942 CET	1.1.1.1	192.168.2.4	0xded5	No error (0)	ep2.adtrafficquality.google		172.217.18.1	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.454704046 CET	1.1.1.1	192.168.2.4	0x7d3	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.454704046 CET	1.1.1.1	192.168.2.4	0x7d3	No error (0)	cdn-content.ampproject.org		142.250.185.129	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.455318928 CET	1.1.1.1	192.168.2.4	0xf49b	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.456854105 CET	1.1.1.1	192.168.2.4	0x1ec0	No error (0)	sync.srv.stackadapt.com		54.156.21.112	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.456854105 CET	1.1.1.1	192.168.2.4	0x1ec0	No error (0)	sync.srv.stackadapt.com		54.165.187.207	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.456854105 CET	1.1.1.1	192.168.2.4	0x1ec0	No error (0)	sync.srv.stackadapt.com		52.71.40.119	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.456854105 CET	1.1.1.1	192.168.2.4	0x1ec0	No error (0)	sync.srv.stackadapt.com		52.86.216.144	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.456854105 CET	1.1.1.1	192.168.2.4	0x1ec0	No error (0)	sync.srv.stackadapt.com		35.170.46.82	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.456854105 CET	1.1.1.1	192.168.2.4	0x1ec0	No error (0)	sync.srv.stackadapt.com		54.166.196.94	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.456854105 CET	1.1.1.1	192.168.2.4	0x1ec0	No error (0)	sync.srv.stackadapt.com		44.214.168.86	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.456854105 CET	1.1.1.1	192.168.2.4	0x1ec0	No error (0)	sync.srv.stackadapt.com		52.73.37.20	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.458062887 CET	1.1.1.1	192.168.2.4	0xf2dc	No error (0)	s.amazon-adsystem.com		98.82.156.207	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.461692095 CET	1.1.1.1	192.168.2.4	0x9d26	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.461692095 CET	1.1.1.1	192.168.2.4	0x9d26	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.462618113 CET	1.1.1.1	192.168.2.4	0xeacc	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.473757982 CET	1.1.1.1	192.168.2.4	0x4b8	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.473799944 CET	1.1.1.1	192.168.2.4	0x234c	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:33.476929903 CET	1.1.1.1	192.168.2.4	0x8eca	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.477351904 CET	1.1.1.1	192.168.2.4	0x744c	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.485807896 CET	1.1.1.1	192.168.2.4	0xfc26	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.485807896 CET	1.1.1.1	192.168.2.4	0xfc26	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.485807896 CET	1.1.1.1	192.168.2.4	0xfc26	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.486660957 CET	1.1.1.1	192.168.2.4	0xdd44	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.486660957 CET	1.1.1.1	192.168.2.4	0xdd44	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.486675024 CET	1.1.1.1	192.168.2.4	0xcef4	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.486675024 CET	1.1.1.1	192.168.2.4	0xcef4	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		63.34.161.76	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.486675024 CET	1.1.1.1	192.168.2.4	0xcef4	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.248.108.242	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.486675024 CET	1.1.1.1	192.168.2.4	0xcef4	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.18.132.78	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.486675024 CET	1.1.1.1	192.168.2.4	0xcef4	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.242.173.27	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.486686945 CET	1.1.1.1	192.168.2.4	0x262d	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.536473989 CET	1.1.1.1	192.168.2.4	0xbc24	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.536473989 CET	1.1.1.1	192.168.2.4	0xbc24	No error (0)	zagreb.geo.iponweb.net	zagreb-stable-europe-west4.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.536490917 CET	1.1.1.1	192.168.2.4	0x6874	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.536490917 CET	1.1.1.1	192.168.2.4	0x6874	No error (0)	zagreb.geo.iponweb.net	zagreb-stable-europe-west4.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.536490917 CET	1.1.1.1	192.168.2.4	0x6874	No error (0)	zagreb-stable-europe-west4.pumpkin.uverse.iponweb.net		35.214.183.184	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.586715937 CET	1.1.1.1	192.168.2.4	0xf169	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.587727070 CET	1.1.1.1	192.168.2.4	0xfef0	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.746798038 CET	1.1.1.1	192.168.2.4	0x9ef4	No error (0)	wt.rqtrk.eu		51.222.241.145	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.746798038 CET	1.1.1.1	192.168.2.4	0x9ef4	No error (0)	wt.rqtrk.eu		51.222.241.100	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.746798038 CET	1.1.1.1	192.168.2.4	0x9ef4	No error (0)	wt.rqtrk.eu		51.222.241.106	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859234095 CET	1.1.1.1	192.168.2.4	0x1c25	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859234095 CET	1.1.1.1	192.168.2.4	0x1c25	No error (0)	nld-prebid.a-mx.net		163.5.194.35	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859234095 CET	1.1.1.1	192.168.2.4	0x1c25	No error (0)	nld-prebid.a-mx.net		163.5.194.31	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859234095 CET	1.1.1.1	192.168.2.4	0x1c25	No error (0)	nld-prebid.a-mx.net		163.5.194.34	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859234095 CET	1.1.1.1	192.168.2.4	0x1c25	No error (0)	nld-prebid.a-mx.net		163.5.194.32	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859234095 CET	1.1.1.1	192.168.2.4	0x1c25	No error (0)	nld-prebid.a-mx.net		163.5.194.33	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859234095 CET	1.1.1.1	192.168.2.4	0x1c25	No error (0)	nld-prebid.a-mx.net		163.5.194.37	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859234095 CET	1.1.1.1	192.168.2.4	0x1c25	No error (0)	nld-prebid.a-mx.net		163.5.194.30	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859234095 CET	1.1.1.1	192.168.2.4	0x1c25	No error (0)	nld-prebid.a-mx.net		163.5.194.36	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.859807014 CET	1.1.1.1	192.168.2.4	0x5b3c	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:33.880465031 CET	1.1.1.1	192.168.2.4	0x58c0	No error (0)	inv-nets.admixer.net		116.202.167.133	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.914230108 CET	1.1.1.1	192.168.2.4	0x464a	No error (0)	aorta.clickagy.com		3.89.18.81	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.914230108 CET	1.1.1.1	192.168.2.4	0x464a	No error (0)	aorta.clickagy.com		3.217.243.35	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.914230108 CET	1.1.1.1	192.168.2.4	0x464a	No error (0)	aorta.clickagy.com		52.87.115.64	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.914230108 CET	1.1.1.1	192.168.2.4	0x464a	No error (0)	aorta.clickagy.com		100.24.154.204	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.952151060 CET	1.1.1.1	192.168.2.4	0x2d68	No error (0)	api.retargetly.com		104.22.17.141	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.952151060 CET	1.1.1.1	192.168.2.4	0x2d68	No error (0)	api.retargetly.com		172.67.8.244	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.952151060 CET	1.1.1.1	192.168.2.4	0x2d68	No error (0)	api.retargetly.com		104.22.16.141	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:33.952841043 CET	1.1.1.1	192.168.2.4	0x1df0	No error (0)	api.retargetly.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:34.209671021 CET	1.1.1.1	192.168.2.4	0xbd8a	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.216361046 CET	1.1.1.1	192.168.2.4	0x4237	No error (0)	dsp-cookie.adfarm1.adition.com		80.82.210.217	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225277901 CET	1.1.1.1	192.168.2.4	0x129b	No error (0)	dsp.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225277901 CET	1.1.1.1	192.168.2.4	0x129b	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	dsp.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	euw-ice.360yield.com		54.246.7.71	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	euw-ice.360yield.com		46.137.30.176	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	euw-ice.360yield.com		18.203.2.235	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	euw-ice.360yield.com		54.72.127.182	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	euw-ice.360yield.com		52.31.190.219	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	euw-ice.360yield.com		52.31.224.95	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	euw-ice.360yield.com		34.250.141.206	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.225294113 CET	1.1.1.1	192.168.2.4	0xa228	No error (0)	euw-ice.360yield.com		34.248.231.166	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.227422953 CET	1.1.1.1	192.168.2.4	0xa147	No error (0)	dsp-ap.eskimi.com		188.42.63.48	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.230993032 CET	1.1.1.1	192.168.2.4	0xe3c6	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.231290102 CET	1.1.1.1	192.168.2.4	0x67a9	No error (0)	d5p.de17a.com	nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.231290102 CET	1.1.1.1	192.168.2.4	0x67a9	No error (0)	nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com		13.50.192.155	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.231290102 CET	1.1.1.1	192.168.2.4	0x67a9	No error (0)	nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com		13.53.196.230	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.231964111 CET	1.1.1.1	192.168.2.4	0x8d7e	No error (0)	d5p.de17a.com	nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.233793020 CET	1.1.1.1	192.168.2.4	0x48d9	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.233793020 CET	1.1.1.1	192.168.2.4	0x48d9	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.233977079 CET	1.1.1.1	192.168.2.4	0x1776	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.233977079 CET	1.1.1.1	192.168.2.4	0x1776	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.235151052 CET	1.1.1.1	192.168.2.4	0xc374	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.235266924 CET	1.1.1.1	192.168.2.4	0xb1d5	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.94.242.226	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.94.242.206	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.95.171.141	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.94.161.158	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.95.171.140	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.94.161.190	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.95.171.139	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.95.172.216	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.95.171.142	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.94.242.204	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236423969 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	green.erne.co		141.94.240.143	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236812115 CET	1.1.1.1	192.168.2.4	0x65e7	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.236812115 CET	1.1.1.1	192.168.2.4	0x65e7	No error (0)	rtb.adgrx.com		52.19.224.221	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.237111092 CET	1.1.1.1	192.168.2.4	0x8e2b	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.239828110 CET	1.1.1.1	192.168.2.4	0xa3e2	No error (0)	a.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.239828110 CET	1.1.1.1	192.168.2.4	0xa3e2	No error (0)	a.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.240163088 CET	1.1.1.1	192.168.2.4	0x8afb	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:34.247010946 CET	1.1.1.1	192.168.2.4	0xccd0	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.247565985 CET	1.1.1.1	192.168.2.4	0x7796	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.247565985 CET	1.1.1.1	192.168.2.4	0x7796	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.247565985 CET	1.1.1.1	192.168.2.4	0x7796	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.247997046 CET	1.1.1.1	192.168.2.4	0x6d9a	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.313548088 CET	1.1.1.1	192.168.2.4	0xa113	No error (0)	tags.crwdcntrl.net		18.239.18.33	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.313548088 CET	1.1.1.1	192.168.2.4	0xa113	No error (0)	tags.crwdcntrl.net		18.239.18.118	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.313548088 CET	1.1.1.1	192.168.2.4	0xa113	No error (0)	tags.crwdcntrl.net		18.239.18.12	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.313548088 CET	1.1.1.1	192.168.2.4	0xa113	No error (0)	tags.crwdcntrl.net		18.239.18.78	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.316715956 CET	1.1.1.1	192.168.2.4	0x3d2f	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.316832066 CET	1.1.1.1	192.168.2.4	0x4fd	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.316832066 CET	1.1.1.1	192.168.2.4	0x4fd	No error (0)	d1giprow6b9psh.cloudfront.net		3.161.119.41	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.316832066 CET	1.1.1.1	192.168.2.4	0x4fd	No error (0)	d1giprow6b9psh.cloudfront.net		3.161.119.102	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.316832066 CET	1.1.1.1	192.168.2.4	0x4fd	No error (0)	d1giprow6b9psh.cloudfront.net		3.161.119.87	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.316832066 CET	1.1.1.1	192.168.2.4	0x4fd	No error (0)	d1giprow6b9psh.cloudfront.net		3.161.119.37	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.397291899 CET	1.1.1.1	192.168.2.4	0x4af2	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.397291899 CET	1.1.1.1	192.168.2.4	0x4af2	No error (0)	cdn.w55c.net		35.210.130.15	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.398274899 CET	1.1.1.1	192.168.2.4	0xe2a0	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.400419950 CET	1.1.1.1	192.168.2.4	0xc800	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.400419950 CET	1.1.1.1	192.168.2.4	0xc800	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.400419950 CET	1.1.1.1	192.168.2.4	0xc800	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.400419950 CET	1.1.1.1	192.168.2.4	0xc800	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.401192904 CET	1.1.1.1	192.168.2.4	0x409f	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.607965946 CET	1.1.1.1	192.168.2.4	0xc712	No error (0)	rtb.adentifi.com		18.204.134.151	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.607965946 CET	1.1.1.1	192.168.2.4	0xc712	No error (0)	rtb.adentifi.com		50.17.131.236	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.607965946 CET	1.1.1.1	192.168.2.4	0xc712	No error (0)	rtb.adentifi.com		18.204.60.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.607965946 CET	1.1.1.1	192.168.2.4	0xc712	No error (0)	rtb.adentifi.com		18.208.79.212	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.607965946 CET	1.1.1.1	192.168.2.4	0xc712	No error (0)	rtb.adentifi.com		44.195.131.226	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.607965946 CET	1.1.1.1	192.168.2.4	0xc712	No error (0)	rtb.adentifi.com		100.26.91.106	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.608022928 CET	1.1.1.1	192.168.2.4	0x6dce	No error (0)	us.creativecdn.com		185.184.10.30	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:34.616862059 CET	1.1.1.1	192.168.2.4	0x146a	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.617408037 CET	1.1.1.1	192.168.2.4	0xe36d	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:34.617408037 CET	1.1.1.1	192.168.2.4	0xe36d	No error (0)	tagr-pixel-nginx-odr-euw4.mookie1.com		34.160.236.64	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.359755039 CET	1.1.1.1	192.168.2.4	0xd1f	No error (0)	bidberry.net		57.129.39.243	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.374946117 CET	1.1.1.1	192.168.2.4	0x2e5f	No error (0)	sync.e-planning.net	ads.us.e-planning.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.374946117 CET	1.1.1.1	192.168.2.4	0x2e5f	No error (0)	ads.us.e-planning.net		193.3.178.4	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.375281096 CET	1.1.1.1	192.168.2.4	0xabe6	No error (0)	sync.e-planning.net	ads.us.e-planning.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.385796070 CET	1.1.1.1	192.168.2.4	0x9de6	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.385796070 CET	1.1.1.1	192.168.2.4	0x9de6	No error (0)	zagreb.geo.iponweb.net	zagreb-stable-europe-west4.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.385796070 CET	1.1.1.1	192.168.2.4	0x9de6	No error (0)	zagreb-stable-europe-west4.pumpkin.uverse.iponweb.net		35.214.183.184	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.386430025 CET	1.1.1.1	192.168.2.4	0x7ebf	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.386430025 CET	1.1.1.1	192.168.2.4	0x7ebf	No error (0)	zagreb.geo.iponweb.net	zagreb-stable-europe-west4.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.407828093 CET	1.1.1.1	192.168.2.4	0x3d4b	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:35.407861948 CET	1.1.1.1	192.168.2.4	0xc361	No error (0)	s.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.407861948 CET	1.1.1.1	192.168.2.4	0xc361	No error (0)	s.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.434817076 CET	1.1.1.1	192.168.2.4	0x2c18	No error (0)	rtbc-ew1.doubleverify.com		130.211.44.5	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.485692024 CET	1.1.1.1	192.168.2.4	0x2c67	No error (0)	pixel-eu.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.485692024 CET	1.1.1.1	192.168.2.4	0x2c67	No error (0)	pixel-eu.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.485692024 CET	1.1.1.1	192.168.2.4	0x2c67	No error (0)	pixel-eu.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.485692024 CET	1.1.1.1	192.168.2.4	0x2c67	No error (0)	pixel-eu.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.485692024 CET	1.1.1.1	192.168.2.4	0x2c67	No error (0)	pixel-eu.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.485692024 CET	1.1.1.1	192.168.2.4	0x2c67	No error (0)	pixel-eu.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.485692024 CET	1.1.1.1	192.168.2.4	0x2c67	No error (0)	pixel-eu.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.504013062 CET	1.1.1.1	192.168.2.4	0xa0a7	No error (0)	dsp.nrich.ai		51.255.68.171	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.617276907 CET	1.1.1.1	192.168.2.4	0x7e7b	No error (0)	id.a-mx.com		79.127.216.47	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.617276907 CET	1.1.1.1	192.168.2.4	0x7e7b	No error (0)	id.a-mx.com		79.127.227.46	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		96.46.186.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		172.240.127.129	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		96.46.186.61	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		172.240.127.131	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		172.240.127.128	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		96.46.186.64	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		96.46.186.63	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		96.46.186.59	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		172.240.127.130	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.689559937 CET	1.1.1.1	192.168.2.4	0x2d43	No error (0)	ssp.ads.betweendigital.com		96.46.186.57	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:35.690474033 CET	1.1.1.1	192.168.2.4	0xfb77	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.722192049 CET	1.1.1.1	192.168.2.4	0xf46a	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.722192049 CET	1.1.1.1	192.168.2.4	0xf46a	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.722254038 CET	1.1.1.1	192.168.2.4	0x739b	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.722254038 CET	1.1.1.1	192.168.2.4	0x739b	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:35.722254038 CET	1.1.1.1	192.168.2.4	0x739b	No error (0)	dorpat.geo.iponweb.net		35.214.199.88	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.141421080 CET	1.1.1.1	192.168.2.4	0x1624	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.141917944 CET	1.1.1.1	192.168.2.4	0x927b	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.168761969 CET	1.1.1.1	192.168.2.4	0x8dcb	No error (0)	live.primis.tech		13.32.99.104	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.168761969 CET	1.1.1.1	192.168.2.4	0x8dcb	No error (0)	live.primis.tech		13.32.99.81	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.168761969 CET	1.1.1.1	192.168.2.4	0x8dcb	No error (0)	live.primis.tech		13.32.99.20	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.168761969 CET	1.1.1.1	192.168.2.4	0x8dcb	No error (0)	live.primis.tech		13.32.99.61	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.309487104 CET	1.1.1.1	192.168.2.4	0xe791	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.617238998 CET	1.1.1.1	192.168.2.4	0x51b7	No error (0)	ums.acuityplatform.com		154.59.122.79	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.707230091 CET	1.1.1.1	192.168.2.4	0xd453	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.707230091 CET	1.1.1.1	192.168.2.4	0xd453	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.708942890 CET	1.1.1.1	192.168.2.4	0xd45	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.784111977 CET	1.1.1.1	192.168.2.4	0xefc9	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.785129070 CET	1.1.1.1	192.168.2.4	0xf985	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.914081097 CET	1.1.1.1	192.168.2.4	0x2c4f	No error (0)	sync-pm.ads.yieldmo.com	sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.914081097 CET	1.1.1.1	192.168.2.4	0x2c4f	No error (0)	sync.ads.yieldmo.com	eu-west-1-sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.914081097 CET	1.1.1.1	192.168.2.4	0x2c4f	No error (0)	eu-west-1-sync.ads.yieldmo.com	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.941107035 CET	1.1.1.1	192.168.2.4	0xb617	No error (0)	sync-pm.ads.yieldmo.com	sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.941107035 CET	1.1.1.1	192.168.2.4	0xb617	No error (0)	sync.ads.yieldmo.com	eu-west-1-sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.941107035 CET	1.1.1.1	192.168.2.4	0xb617	No error (0)	eu-west-1-sync.ads.yieldmo.com	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:36.941107035 CET	1.1.1.1	192.168.2.4	0xb617	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		54.72.205.68	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.941107035 CET	1.1.1.1	192.168.2.4	0xb617	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		54.229.178.17	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.941107035 CET	1.1.1.1	192.168.2.4	0xb617	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		52.211.248.252	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.941107035 CET	1.1.1.1	192.168.2.4	0xb617	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		52.212.151.43	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.941107035 CET	1.1.1.1	192.168.2.4	0xb617	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		34.251.100.238	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:36.941107035 CET	1.1.1.1	192.168.2.4	0xb617	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		52.51.137.118	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.207765102 CET	1.1.1.1	192.168.2.4	0xc51a	No error (0)	sync.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.207765102 CET	1.1.1.1	192.168.2.4	0xc51a	No error (0)	sync.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.207765102 CET	1.1.1.1	192.168.2.4	0xc51a	No error (0)	sync.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.207765102 CET	1.1.1.1	192.168.2.4	0xc51a	No error (0)	sync.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.215940952 CET	1.1.1.1	192.168.2.4	0x882b	No error (0)	sonata-notifications.taptapnetworks.com		3.127.30.65	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.215940952 CET	1.1.1.1	192.168.2.4	0x882b	No error (0)	sonata-notifications.taptapnetworks.com		18.159.155.59	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.445758104 CET	1.1.1.1	192.168.2.4	0x3fe5	Name error (3)	stags.bluekai.com	none	none	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:37.445856094 CET	1.1.1.1	192.168.2.4	0xb1d6	Name error (3)	stags.bluekai.com	none	none	65	IN (0x0001)	false
Jan 12, 2025 00:12:37.478451967 CET	1.1.1.1	192.168.2.4	0xeb53	Name error (3)	stags.bluekai.com	none	none	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:38.390585899 CET	1.1.1.1	192.168.2.4	0xe244	Name error (3)	stags.bluekai.com	none	none	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:38.390758038 CET	1.1.1.1	192.168.2.4	0xb95a	Name error (3)	stags.bluekai.com	none	none	65	IN (0x0001)	false
Jan 12, 2025 00:12:38.436685085 CET	1.1.1.1	192.168.2.4	0x41a	No error (0)	ad.doubleclick.net		142.250.184.198	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:38.437359095 CET	1.1.1.1	192.168.2.4	0x65ca	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 12, 2025 00:12:39.511591911 CET	1.1.1.1	192.168.2.4	0xad	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:39.512034893 CET	1.1.1.1	192.168.2.4	0xac98	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:39.960577965 CET	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:39.960577965 CET	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:39.960577965 CET	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.247.171.213	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.960577965 CET	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.178.129	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.960577965 CET	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.32.26	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.960577965 CET	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.202.88.130	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.960577965 CET	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.31.201	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.960577965 CET	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.19.217.34	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.961344004 CET	1.1.1.1	192.168.2.4	0x86a1	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:39.961344004 CET	1.1.1.1	192.168.2.4	0x86a1	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:39.976440907 CET	1.1.1.1	192.168.2.4	0xc86a	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.976440907 CET	1.1.1.1	192.168.2.4	0xc86a	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.976440907 CET	1.1.1.1	192.168.2.4	0xc86a	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:39.976732969 CET	1.1.1.1	192.168.2.4	0x5af7	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Jan 12, 2025 00:12:40.034766912 CET	1.1.1.1	192.168.2.4	0xa773	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:40.034766912 CET	1.1.1.1	192.168.2.4	0xa773	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:40.034766912 CET	1.1.1.1	192.168.2.4	0xa773	No error (0)	um.simpli.fi		35.204.201.36	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:40.035698891 CET	1.1.1.1	192.168.2.4	0xfae6	No error (0)	s0.2mdn.net		142.250.184.230	A (IP address)	IN (0x0001)	false
Jan 12, 2025 00:12:40.040550947 CET	1.1.1.1	192.168.2.4	0x8f69	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:40.040550947 CET	1.1.1.1	192.168.2.4	0x8f69	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:40.043292046 CET	1.1.1.1	192.168.2.4	0x3393	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:40.043813944 CET	1.1.1.1	192.168.2.4	0x891a	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 12, 2025 00:12:40.046749115 CET	1.1.1.1	192.168.2.4	0x9ba0	No error (0)	aax-eu.amazon-adsystem.com		67.220.228.203	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49815	74.115.51.9	80	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 12, 2025 00:11:34.426309109 CET	622	OUT	GET /home.html HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
Jan 12, 2025 00:11:35.034518003 CET	1072	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 11 Jan 2025 23:11:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://talktalk770.weebly.com/home.html CF-Ray: 90089632cff2437a-EWR CF-Cache-Status: DYNAMIC Vary: X-W-SSL,User-Agent, Accept-Encoding X-Host: grn156.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Set-Cookie: __cf_bm=r1Yx_7k7e04XUQ1eOBqV9tN_xa8LpZ_UfEyzq0CagHs-1736637094-1.0.1.1-MWbKkO_82dB9HWGEk_FUIiCWKaHpFjJU7xN83xBIGaGW.ICgrlN9RHG7NSxJ__kiOl5qUoMxw1W7wPCAqrNRMw; path=/; expires=Sat, 11-Jan-25 23:41:34 GMT; domain=.weebly.com; HttpOnly Server: cloudflare Data Raw: 31 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 74 61 6c 6b 37 37 30 2e 77 65 65 62 6c 79 2e 63 6f 6d 2f 68 6f 6d 65 2e 68 74 6d 6c 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 74 61 6c 6b 37 37 30 2e 77 65 65 62 6c 79 2e 63 6f 6d 2f 68 6f 6d 65 2e 68 74 6d 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 74 61 6c 6b 37 37 30 2e 77 65 65 62 6c 79 2e 63 6f 6d 2f 68 6f 6d [TRUNCATED] Data Ascii: 196<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://talktalk770.weebly.com/home.html'" /> <title>Redirecting to https://talktalk770.weebly.com/home.html</title> </head> <body> Redirecting to <a href="https://talktalk770.weebly.com/home.html">https://talktalk770.weebly.com/home.html</a>. </body></html>0
Jan 12, 2025 00:12:20.047725916 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:18 UTC	665	OUT	GET / HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:19 UTC	781	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 900895cf0b250f46-EWR CF-Cache-Status: DYNAMIC Cache-Control: private Set-Cookie: is_mobile=0; path=/; domain=talktalk770.weebly.com Vary: X-W-SSL,Accept-Encoding,User-Agent X-Host: blu138.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Set-Cookie: language=en; expires=Sat, 25-Jan-2025 23:11:18 GMT; Max-Age=1209600; path=/ Set-Cookie: __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; path=/; expires=Sat, 11-Jan-25 23:41:19 GMT; domain=.weebly.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2025-01-11 23:11:19 UTC	588	IN	Data Raw: 37 61 65 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 48 6f 6d 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 79 20 53 69 74 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 74 61 6c Data Ascii: 7aef<!DOCTYPE html><html lang="en"><head><title>Home</title><meta property="og:site_name" content="" /><meta property="og:title" content="My Site" /><meta property="og:description" content="" /><meta property="og:image" content="https://talktal
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 2f 3e 0a 0a 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4b 61 72 6c 61 3a 34 30 30 2c 37 30 30 7c 4f 73 77 61 6c 64 3a 37 30 30 7c 52 6f 62 6f 74 6f 2b 4d 6f 6e 6f 3a 34 30 30 2c 34 30 30 69 2c 37 30 30 2c 37 30 30 69 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 66 69 6c 65 73 2f 74 68 65 6d 65 2f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2e 6e 61 76 62 61 72 Data Ascii: " content="width=device-width, initial-scale=1.0"/> <link href="//fonts.googleapis.com/css?family=Karla:400,700\|Oswald:700\|Roboto+Mono:400,400i,700,700i" rel="stylesheet"> <script src="/files/theme/MutationObserver.js"></script> <style> .navbar
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 52 6f 62 6f 74 6f 5f 4d 6f 6e 6f 2f 66 6f 6e 74 2e 63 73 73 3f 32 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 4f 73 77 61 6c 64 2f 66 6f 6e 74 2e 63 73 73 3f 32 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 2f 3e 0a 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2e 77 73 69 74 65 2d Data Ascii: lesheet' type='text/css' /><link href='//cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2' rel='stylesheet' type='text/css' /><link href='//cdn2.editmysite.com/fonts/Oswald/font.css?2' rel='stylesheet' type='text/css' /><style type='text/css'>.wsite-
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 20 7b 7d 0a 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 70 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 2e 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 2e 70 72 6f 64 75 63 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 Data Ascii: blog-sidebar .wsite-form-field label {}.wsite-elements.wsite-footer div.paragraph, .wsite-elements.wsite-footer p, .wsite-elements.wsite-footer .product-block .product-title, .wsite-elements.wsite-footer .product-description, .wsite-elements.wsite-footer
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 62 6f 78 2d 74 69 74 6c 65 20 7b 7d 0a 2e 77 73 6c 69 64 65 2d 63 61 70 74 69 6f 6e 2d 74 65 78 74 20 7b 7d 0a 2e 77 73 69 74 65 2d 70 68 6f 6e 65 20 7b 7d 0a 2e 77 73 69 74 65 2d 68 65 61 64 6c 69 6e 65 2c 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 73 65 63 74 69 6f 6e 20 2e 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 2d 74 69 74 6c 65 20 7b 7d 0a 2e 77 73 69 74 65 2d 68 65 61 64 6c 69 6e 65 2d 70 61 72 61 67 72 61 70 68 2c 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 73 65 63 74 69 6f 6e 20 2e 70 61 72 61 67 72 61 70 68 20 7b 7d 0a 2e 77 73 69 74 65 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 20 7b 7d 0a 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 7d 0a 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 62 6c 6f 63 6b 71 75 6f 74 Data Ascii: box-title {}.wslide-caption-text {}.wsite-phone {}.wsite-headline,.wsite-header-section .wsite-content-title {}.wsite-headline-paragraph,.wsite-header-section .paragraph {}.wsite-button-inner {}.wsite-not-footer blockquote {}.wsite-footer blockquot
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 74 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 70 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 20 7b 7d 0a 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 Data Ascii: t .wsite-form-field label, #wsite-content .wsite-form-field label, .blog-sidebar div.paragraph, .blog-sidebar p, .blog-sidebar .wsite-form-field label, .blog-sidebar .wsite-form-field label {}.wsite-elements.wsite-footer div.paragraph, .wsite-elements.ws
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 74 2d 73 6d 61 6c 6c 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 7b 7d 0a 23 77 73 69 74 65 2d 74 69 74 6c 65 20 7b 7d 0a 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 20 61 20 7b 7d 0a 2e 77 73 69 74 65 2d 6d 65 6e 75 20 61 20 7b 7d 0a 2e 77 73 69 74 65 2d 69 6d 61 67 65 20 64 69 76 2c 20 2e 77 73 69 74 65 2d 63 61 70 74 69 6f 6e 20 7b 7d 0a 2e 67 61 6c 6c 65 72 79 43 61 70 74 69 6f 6e 49 6e 6e 65 72 54 65 78 74 20 7b 7d 0a 2e 66 61 6e 63 79 62 6f 78 2d 74 69 74 6c 65 20 7b 7d 0a 2e 77 73 6c 69 64 65 2d 63 61 70 74 69 6f 6e 2d 74 65 78 74 20 7b 7d 0a 2e 77 73 69 74 65 2d 70 68 6f 6e 65 20 7b 7d 0a 2e 77 73 69 74 65 2d 68 65 61 64 6c 69 6e 65 2c 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 73 65 63 74 69 6f 6e 20 2e 77 73 69 74 65 2d 63 6f 6e 74 Data Ascii: t-small .product-title{}#wsite-title {}.wsite-menu-default a {}.wsite-menu a {}.wsite-image div, .wsite-caption {}.galleryCaptionInnerText {}.fancybox-title {}.wslide-caption-text {}.wsite-phone {}.wsite-headline,.wsite-header-section .wsite-cont
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 61 6c 73 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 6c 65 6e 22 3a 30 2c 22 6d 75 6c 74 69 70 6c 65 22 3a 66 61 6c 73 65 2c 22 73 74 61 6e 64 61 6c 6f 6e 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 67 65 74 4f 72 64 65 72 73 22 2c 22 6c 65 6e 22 3a 30 2c 22 6d 75 6c 74 69 70 6c 65 22 3a 66 61 6c 73 65 2c 22 73 74 61 6e 64 61 6c 6f 6e 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 72 65 67 69 73 74 65 72 22 2c 22 6c 65 6e 22 3a 34 2c 22 6d 75 6c 74 69 70 6c 65 22 3a 66 61 6c 73 65 2c 22 73 74 61 6e 64 61 6c 6f 6e 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6d 61 69 6c 45 78 69 73 74 73 22 2c 22 6c 65 6e 22 3a 31 2c 22 6d 75 6c 74 69 70 6c 65 22 3a 66 61 6c 73 65 2c Data Ascii: alse},{"name":"getAccountDetails","len":0,"multiple":false,"standalone":false},{"name":"getOrders","len":0,"multiple":false,"standalone":false},{"name":"register","len":4,"multiple":false,"standalone":false},{"name":"emailExists","len":1,"multiple":false,
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 2e 69 6e 69 74 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 4d 6f 64 65 6c 73 2b 2b 0a 09 09 7d 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 5f 57 20 3d 20 5f 57 20 7c 7c 20 7b 7d 3b 20 5f 57 2e 73 65 63 75 72 65 50 72 65 66 69 78 3d 27 74 61 6c 6b 74 61 6c 6b 37 37 30 2e 77 65 65 62 6c 79 2e 63 6f 6d 27 3b 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 5f 57 20 3d 20 5f 57 20 7c 7c 20 7b 7d 3b 0a 09 09 09 5f 57 2e 63 75 73 74 6f 6d 65 72 4c 6f 63 61 6c 65 20 3d 20 22 65 6e 5f 55 53 22 3b 0a 09 09 09 5f 57 2e 73 74 6f 72 65 4e 61 6d 65 20 3d 20 6e 75 6c 6c 3b 0a 09 09 09 5f 57 2e 69 73 43 68 65 63 6b 6f 75 74 52 65 73 6b 69 6e 20 Data Ascii: Element.initCustomerAccountsModels++}</script><script type="text/javascript"> _W = _W \|\| {}; _W.securePrefix='talktalk770.weebly.com'; </script><script>_W = _W \|\| {};_W.customerLocale = "en_US";_W.storeName = null;_W.isCheckoutReskin
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 22 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 75 74 69 6c 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 77 72 61 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 74 6f 67 67 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 65 61 72 63 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a Data Ascii: wsite-menu-default"></ul></div> </div> <div class="site-utils"> <div class="wsite-search-wrap"> <a href="#" class="search-toggle"> Search </a> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	753	OUT	GET /files/theme/MutationObserver.js HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:19 UTC	939	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:19 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895d0b8524217-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"e52201e96af18dd02c85eb627c843491" Last-Modified: Thu, 04 Apr 2024 10:23:36 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: KFlymJE6QRN95M+28v0EvKlQZonSIp28lfYMCCy3EppIeYmE0CNmlKD779/Kvb0T1IpeGygboWm1UFmhh3wvKw== x-amz-meta-btime: 2023-09-25T13:28:31.439Z x-amz-meta-mtime: 1695648511.439 x-amz-replication-status: COMPLETED x-amz-request-id: 1R8HF05MG5EMYNK5 x-amz-server-side-encryption: AES256 x-amz-version-id: P7GX41cAL89NqMhfWn_.HhJNYx8OtSku X-Storage-Bucket: z3974 X-Storage-Object: 397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a Server: cloudflare
2025-01-11 23:11:19 UTC	430	IN	Data Raw: 32 35 62 0d 0a 2f 2a 21 0a 20 2a 20 53 68 69 6d 20 66 6f 72 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 69 6e 74 65 72 66 61 63 65 0a 20 2a 20 41 75 74 68 6f 72 3a 20 47 72 61 65 6d 65 20 59 65 61 74 65 73 20 28 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 65 67 61 77 61 63 29 0a 20 2a 20 52 65 70 6f 73 69 74 6f 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 65 67 61 77 61 63 2f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 6a 73 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 57 54 46 50 4c 20 56 32 2c 20 32 30 30 34 20 28 77 74 66 70 6c 2e 6e 65 74 29 2e 0a 20 2a 20 54 68 6f 75 67 68 20 63 72 65 64 69 74 20 61 6e 64 20 73 74 61 72 69 6e 67 20 74 68 65 20 72 65 70 6f 20 77 69 6c 6c 20 6d 61 6b 65 20 6d 65 20 66 65 65 6c 20 70 72 65 Data Ascii: 25b/! Shim for MutationObserver interface * Author: Graeme Yeates (github.com/megawac) * Repository: https://github.com/megawac/MutationObserver.js * License: WTFPL V2, 2004 (wtfpl.net). * Though credit and staring the repo will make me feel pre
2025-01-11 23:11:19 UTC	180	IN	Data Raw: 53 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 57 65 62 4b 69 74 2f 77 65 62 6b 69 74 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 53 6f 75 72 63 65 2f 57 65 62 43 6f 72 65 2f 64 6f 6d 2f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 63 70 70 20 66 6f 72 20 63 75 72 72 65 6e 74 20 77 65 62 6b 69 74 20 73 6f 75 72 63 65 20 63 2b 2b 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 70 72 65 66 69 78 20 62 75 67 73 3a 0a 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 0d 0a Data Ascii: See https://github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp for current webkit source c++ implementation //* * prefix bugs: - https://bugs.
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 35 64 61 32 0d 0a 77 65 62 6b 69 74 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 38 35 31 36 31 0a 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 62 75 67 7a 69 6c 6c 61 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 37 34 39 39 32 30 0a 20 2a 20 44 6f 6e 27 74 20 75 73 65 20 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 61 73 20 53 61 66 61 72 69 20 28 36 2e 30 2e 35 2d 36 2e 31 29 20 75 73 65 20 61 20 62 75 67 67 79 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 2a 2f 0a 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 3d 20 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 28 75 6e 64 65 66 69 6e Data Ascii: 5da2webkit.org/show_bug.cgi?id=85161 - https://bugzilla.mozilla.org/show_bug.cgi?id=749920 * Don't use WebKitMutationObserver as Safari (6.0.5-6.1) use a buggy implementation*/window.MutationObserver = window.MutationObserver \|\| (function(undefin
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 62 73 65 72 76 65 72 2e 5f 70 65 72 69 6f 64 20 3d 20 33 30 20 2f 2a 6d 73 2b 72 75 6e 74 69 6d 65 2a 2f 20 3b 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 45 78 70 6f 73 65 64 20 41 50 49 0a 20 20 20 20 20 2a 20 40 65 78 70 6f 73 65 0a 20 20 20 20 20 2a 20 40 66 69 6e 61 6c 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 73 65 65 20 68 74 74 70 3a 2f 2f 20 64 6f 6d 2e 73 70 65 63 2e 77 68 61 74 77 67 2e 6f 72 67 2f 23 64 6f 6d 2d 6d 75 74 61 74 69 6f 6e 6f 62 73 65 72 76 65 72 2d 6f 62 73 65 72 76 65 0a 20 20 20 20 20 20 20 20 20 2a 20 6e 6f 74 20 67 6f 69 6e 67 20 74 6f 20 74 68 72 6f 77 20 68 65 Data Ascii: bserver._period = 30 /ms+runtime/ ; /** * Exposed API * @expose * @final / MutationObserver.prototype = { /* * see http:// dom.spec.whatwg.org/#dom-mutationobserver-observe * not going to throw he
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 20 20 20 69 66 20 28 77 61 74 63 68 65 64 5b 69 5d 2e 74 61 72 20 3d 3d 3d 20 24 74 61 72 67 65 74 29 20 77 61 74 63 68 65 64 2e 73 70 6c 69 63 65 28 69 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 66 69 67 2e 61 74 74 72 69 62 75 74 65 46 69 6c 74 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 63 6f 6e 76 65 72 74 73 20 74 6f 20 61 20 7b 6b 65 79 3a 20 74 72 75 65 7d 20 64 69 63 74 20 66 6f 72 20 66 61 73 74 65 72 20 6c 6f 6f 6b 75 70 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 40 74 79 70 65 20 7b 4f 62 6a 65 63 74 2e 3c 53 74 72 69 6e 67 2c 42 6f 6f 6c 65 61 6e 3e 7d 0a 20 20 Data Ascii: if (watched[i].tar === $target) watched.splice(i, 1); } if (config.attributeFilter) { /** * converts to a {key: true} dict for faster lookup * @type {Object.<String,Boolean>}
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 72 76 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 29 3b 20 2f 2f 20 72 65 61 64 79 20 66 6f 72 20 67 61 72 62 61 67 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 20 40 70 72 69 76 61 74 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 53 69 6d 70 6c 65 20 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 20 70 73 65 75 64 6f 63 6c 61 73 73 2e 20 4e 6f 20 6c 6f 6e 67 65 72 20 65 78 70 6f 73 69 6e 67 20 61 73 20 69 74 73 20 6e 6f 74 20 66 75 6c 6c 79 20 63 6f 6d 70 6c 69 61 6e 74 0a 20 Data Ascii: rved clearTimeout(this._timeout); // ready for garbage collection /** @private / this._timeout = null; } }; /* * Simple MutationRecord pseudoclass. No longer exposing as its not fully compliant
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 41 72 72 61 79 2e 3c 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 3e 7d 20 6d 75 74 61 74 69 6f 6e 73 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 6c 65 6e 20 3d 20 6d 75 74 61 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 2c 20 64 69 72 74 79 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 6c 72 69 67 68 74 20 77 65 20 63 68 65 63 6b 20 62 61 73 65 20 6c 65 76 65 6c 20 63 68 61 6e 67 65 73 20 69 6e 20 61 74 74 72 69 62 75 74 65 73 2e 2e 2e 20 65 61 73 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 66 69 67 2e 61 74 74 72 20 26 26 20 24 6f 6c 64 73 74 61 74 65 2e 61 74 74 72 29 20 7b 0a 20 Data Ascii: Array.<MutationRecord>} mutations */ return function(mutations) { var olen = mutations.length, dirty; // Alright we check base level changes in attributes... easy if (config.attr && $oldstate.attr) {
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 2f 20 54 68 65 72 65 20 69 73 20 61 20 70 6f 74 65 6e 74 69 61 6c 20 66 6f 72 20 61 20 77 61 72 6e 69 6e 67 20 74 6f 20 6f 63 63 75 72 20 68 65 72 65 20 69 66 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 69 73 20 61 0a 20 20 20 20 20 20 20 20 2f 2f 20 63 75 73 74 6f 6d 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 49 45 3c 39 20 77 69 74 68 20 61 20 63 75 73 74 6f 6d 20 2e 74 6f 53 74 72 69 6e 67 28 29 20 6d 65 74 68 6f 64 2e 20 54 68 69 73 20 69 73 0a 20 20 20 20 20 20 20 20 2f 2f 20 6a 75 73 74 20 61 20 77 61 72 6e 69 6e 67 20 61 6e 64 20 64 6f 65 73 6e 27 74 20 61 66 66 65 63 74 20 65 78 65 63 75 74 69 6f 6e 20 28 73 65 65 20 23 32 31 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 74 74 72 2e 76 61 6c 75 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f Data Ascii: / There is a potential for a warning to occur here if the attribute is a // custom attribute in IE<9 with a custom .toString() method. This is // just a warning and doesn't affect execution (see #21) return attr.value; } /
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 20 61 74 74 72 20 3d 20 61 74 74 72 69 62 75 74 65 73 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 20 3d 20 61 74 74 72 2e 6e 61 6d 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 66 69 6c 74 65 72 20 7c 7c 20 68 61 73 28 66 69 6c 74 65 72 2c 20 6e 61 6d 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 28 24 74 61 72 67 65 74 2c 20 61 74 74 72 29 20 21 3d 3d 20 24 6f 6c 64 73 74 61 74 65 5b 6e 61 6d 65 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 65 20 70 75 73 68 69 6e 67 20 69 73 20 72 65 64 75 6e 64 61 6e 74 20 62 75 74 20 67 7a 69 70 73 20 76 65 72 79 20 6e 69 63 65 6c 79 0a 20 20 20 20 20 20 20 20 Data Ascii: attr = attributes[i]; name = attr.name; if (!filter \|\| has(filter, name)) { if (getAttributeValue($target, attr) !== $oldstate[name]) { // The pushing is redundant but gzips very nicely
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 75 65 73 74 69 6f 6e 73 2f 33 38 33 35 31 20 64 69 73 63 75 73 73 69 6f 6e 20 6f 66 20 61 6e 20 65 61 72 6c 69 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 69 73 20 66 75 6e 63 0a 20 20 20 20 20 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 41 72 72 61 79 7d 20 6d 75 74 61 74 69 6f 6e 73 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4e 6f 64 65 7d 20 24 74 61 72 67 65 74 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 21 4f 62 6a 65 63 74 7d 20 24 6f 6c 64 73 74 61 74 65 20 3a 20 41 20 63 75 73 74 6f 6d 20 63 6c 6f 6e 65 64 20 6e 6f 64 65 20 66 72 6f 6d 20 63 6c 6f 6e 65 28 29 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 21 4f 62 6a 65 63 74 7d 20 63 6f 6e 66 69 67 20 3a 20 41 20 63 75 73 74 6f 6d 20 6d 75 74 61 74 69 6f 6e 20 63 6f 6e 66 69 Data Ascii: uestions/38351 discussion of an earlier version of this func * * @param {Array} mutations * @param {Node} $target * @param {!Object} $oldstate : A custom cloned node from clone() * @param {!Object} config : A custom mutation confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	767	OUT	GET /files/main_style.css?1736414015 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:19 UTC	421	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:19 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close CF-Ray: 900895d3da450f77-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: blu48.sf2p.intern.weebly.net Server: cloudflare
2025-01-11 23:11:19 UTC	948	IN	Data Raw: 34 39 65 36 0d 0a 75 6c 2c 20 6f 6c 2c 20 6c 69 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 66 6f 72 6d 2c 20 62 6f 64 79 2c 20 68 74 6d 6c 2c 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 66 69 65 6c 64 73 65 74 2c 20 69 6e 70 75 74 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 75 6c 2c 20 6f 6c 2c 20 6c 69 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 66 6f 72 6d 2c 20 62 6f 64 79 2c 20 68 74 6d 6c 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 66 69 65 6c 64 73 65 74 2c 20 69 6e 70 75 74 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 20 69 6e Data Ascii: 49e6ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, div.paragraph, blockquote, fieldset, input { margin: 0; padding: 0; }ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, p, blockquote, fieldset, input { margin: 0; padding: 0; } in
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 23 77 73 69 74 65 2d 73 65 61 72 63 68 2d 73 69 64 65 62 61 72 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 20 2e 77 73 69 74 65 2d Data Ascii: kbox input[type=checkbox], .wsite-com-product-option-groups input[type="radio"], .wsite-com-product-option-groups input[type="checkbox"], .wsite-com-product-option-groups #wsite-search-sidebar .wsite-search-facet-availability input[type=checkbox], .wsite-
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 74 6f 70 3a 20 31 70 78 3b 20 6c 65 66 74 3a 20 34 70 78 3b 20 77 69 64 74 68 3a 20 35 70 78 3b 20 68 65 69 67 68 74 3a 20 39 70 78 3b 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 23 33 33 37 65 66 39 3b 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 32 70 78 20 32 70 78 20 30 3b 20 7d 0a 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 3a 63 68 65 63 6b 65 64 3a 61 66 Data Ascii: -ms-transform: rotate(45deg); -o-transform: rotate(45deg); transform: rotate(45deg); position: relative; top: 1px; left: 4px; width: 5px; height: 9px; border: solid #337ef9; border-width: 0 2px 2px 0; } .wsite-form-field input[type="checkbox"]:checked:af
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 20 65 61 73 65 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 63 6f 6c 6f 72 20 33 30 30 6d 73 20 65 61 73 65 3b 20 7d 0a 20 61 3a 68 6f 76 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 33 33 37 65 66 39 3b 20 7d 0a 20 61 20 69 6d 67 20 7b 20 62 6f 72 64 65 72 3a 20 30 3b 20 7d 0a 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4b 61 72 6c 61 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 33 66 33 66 33 66 3b 20 7d 0a 20 68 32 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 20 7d 0a 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 2e 70 61 72 61 67 72 61 70 68 20 7b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e Data Ascii: ease; transition: color 300ms ease; } a:hover { color: #337ef9; } a img { border: 0; } h1, h2, h3, h4, h5, h6 { font-family: 'Karla', sans-serif; font-weight: 700; color: #3f3f3f; } h2 { font-size: 20px; } div.paragraph, .paragraph { line-height: 1.
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 61 70 20 61 3a 68 6f 76 65 72 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 35 3b 20 7d 0a 20 2e 66 6f 6f 74 65 72 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 6c 61 62 65 6c 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 7d 0a 20 2e 66 6f 6f 74 65 72 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 69 74 65 6d 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 7d 0a 20 62 6f 64 79 2e 68 65 61 64 65 72 2d 73 74 69 63 6b 79 2c 20 62 6f 64 79 2e 68 65 61 64 65 72 2d 73 74 69 63 6b 79 2d 75 70 20 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 30 70 78 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 70 61 Data Ascii: ap a:hover { opacity: 0.75; } .footer-wrap .wsite-form-label { color: #ffffff; } .footer-wrap .wsite-social .wsite-social-item { color: #ffffff; } body.header-sticky, body.header-sticky-up { padding-top: 50px; } .edison-header { -webkit-transition: pa
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 2d 69 6e 6e 65 72 2d 77 72 61 70 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 20 30 2e 33 73 3b 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 20 30 2e 33 73 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 20 30 2e 33 73 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 7d 0a 20 Data Ascii: e !important; } .edison-header .container { height: 100%; } .edison-header .header-inner-wrap { -webkit-transition: opacity 0.6s ease-in 0.3s; -o-transition: opacity 0.6s ease-in 0.3s; transition: opacity 0.6s ease-in 0.3s; height: 100%; opacity: 0; }
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 77 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 34 36 70 78 3b 20 7d 0a 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 2c 28 68 6f 76 65 72 3a 20 6e 6f 6e 65 29 20 7b 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 77 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 20 7b 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 3b 20 7d 0a 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 77 73 69 74 65 Data Ascii: lay: none; } .edison-header .wsite-logo img { display: block; overflow: hidden; max-width: 100%; max-height: 46px; } @media only screen and (max-width: 1024px),(hover: none) { .edison-header .wsite-logo img { padding: 5px 0; } } .edison-header .wsite
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 7d 0a 20 2e 6e 61 76 2d 6f 70 65 6e 20 2e 68 61 6d 62 75 72 67 65 72 20 69 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0a 20 2e 68 61 6d 62 75 72 67 65 72 20 69 3a 3a 62 65 66 6f 72 65 2c 20 2e 68 61 6d 62 75 72 67 65 72 20 69 3a 3a 61 66 74 65 72 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b Data Ascii: ransition: background-color 0.2s ease-out; -o-transition: background-color 0.2s ease-out; transition: background-color 0.2s ease-out; } .nav-open .hamburger i { background-color: transparent; } .hamburger i::before, .hamburger i::after { display: block;
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 36 70 78 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 2e 68 61 73 2d 73 69 74 65 2d 73 65 61 72 63 68 20 2e 73 65 61 72 63 68 2d 74 6f 67 67 6c 65 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 23 77 73 69 74 65 2d 73 65 61 72 63 68 2d 73 69 64 65 62 61 72 20 2e 63 6c 6f 73 65 2d 62 74 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 77 72 61 70 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 2e 77 Data Ascii: 6px; text-decoration: none; text-align: center; } .has-site-search .search-toggle { display: inline-block; } #wsite-search-sidebar .close-btn { display: none; } .wsite-search-wrap { text-align: center; } @media only screen and (min-width: 768px) { .w
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 73 65 61 72 63 68 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 66 6f 63 75 73 20 7b 20 62 6f 72 64 65 72 3a 20 30 3b 20 7d 0a 20 7d 0a 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 62 6f 64 79 2e 77 73 69 74 65 2d 65 64 69 74 6f 72 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 20 7b 20 77 69 64 74 68 3a 20 37 35 70 78 3b 20 7d 0a 20 62 6f 64 79 2e 77 73 69 74 65 2d 65 64 69 74 6f 72 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 20 6f 70 61 63 69 74 79 3a Data Ascii: search-wrap .wsite-search-input:focus { border: 0; } } .wsite-search-wrap .wsite-search-button { display: none; } body.wsite-editor .wsite-search-input { width: 75px; } body.wsite-editor .wsite-search-input::-moz-placeholder { color: #666666; opacity:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	759	OUT	GET /files/templateArtifacts.js?1736414015 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:19 UTC	437	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:19 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895d3ca7f0c8e-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: grn13.sf2p.intern.weebly.net Server: cloudflare
2025-01-11 23:11:19 UTC	932	IN	Data Raw: 31 62 66 38 0d 0a 2f 2f 20 47 65 74 73 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 5f 57 0a 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 57 65 65 62 6c 79 2e 74 65 6d 70 6c 61 74 65 73 20 3d 20 7b 0a 09 09 27 73 65 61 72 63 68 2f 66 69 6c 74 65 72 2f 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 20 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 66 61 63 65 74 5f 6e 61 6d 65 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 7b 7b 63 6f 6c 75 6d 6e 5f 6e 61 6d 65 7d 7d 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 Data Ascii: 1bf8// Gets converted to _WWeebly = window.Weebly \|\| {};Weebly.templates = {'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul clas
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 6e 61 6d 65 3d 5c 22 7b 7b 66 69 6c 74 65 72 5f 74 65 78 74 7d 7d 5c 22 20 76 61 6c 75 65 3d 5c 22 31 5c 22 20 5c 2f 3e 3c 21 2d 2d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 7b 7b 21 20 43 6f 6d 6d 65 6e 74 69 6e 67 20 27 68 61 63 6b 27 20 74 6f 20 72 65 6d 6f 76 65 20 73 70 61 63 65 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 2d 2d 3e 3c 61 3e 20 7b 7b 21 20 54 68 65 73 65 20 61 72 65 6e 27 74 20 72 65 61 6c 20 6c 69 6e 6b 73 2c 20 75 73 65 64 20 74 6f 20 75 73 65 20 74 68 65 6d 65 20 63 6f 6c 6f 72 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 5c Data Ascii: \t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{filter_text}}\" value=\"1\" \/>...\n\t\t\t\t\t\t{{! Commenting 'hack' to remove spaces }}\n\t\t\t\t\t\t--><a> {{! These aren't real links, used to use theme colors }}\n\t\t\t\t\t\t\
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 63 6f 72 65 2e 73 65 61 72 63 68 2e 66 69 6c 74 65 72 2e 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 61 63 65 74 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 65 6e 74 72 69 65 73 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 Data Ascii: t-availability\">\n\t<h3>{{#stl}}templates.platform.theme.core.search.filter.search-facet-availability_1{{\/stl}}<\/h3>\n\t<form name=\"availability-facet\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t<li>\n\t\t\t\t<label>\n\t\t\t\t\t<input typ
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 70 72 6f 64 75 63 74 2d 67 72 6f 75 70 7d 7d 5c 6e 7b 7b 5c 2f 68 61 73 5f 70 72 6f 64 75 63 74 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 6e 6f 72 6d 61 6c 7d 7d 5c 6e 7b 7b 5c 2f 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 6d 70 74 79 7d 7d 5c 6e 7b 7b 5c 2f 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 65 72 72 6f 72 5f 72 65 73 75 6c 74 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 72 72 6f 72 7d 7d 5c 6e 7b 7b Data Ascii: ch\/results\/product-group}}\n{{\/has_product_results}}\n\n{{#page_results}}\n\t{{> search\/results\/normal}}\n{{\/page_results}}\n\n{{#no_results}}\n\t{{> search\/results\/empty}}\n{{\/no_results}}\n\n{{#error_result}}\n\t{{> search\/results\/error}}\n{{
2025-01-11 23:11:19 UTC	1369	IN	Data Raw: 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 5c 22 3e 5c 6e 5c 74 5c 74 7b 7b 23 68 69 67 68 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 6c 6f 77 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 79 5f 68 74 6d 6c 7d 7d 7d 7b 7b 6c 6f 77 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 5c 2f 73 70 61 6e 3e 5c 6e 5c 74 5c 74 5c 74 20 2d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 68 69 67 68 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 Data Ascii: arch-product-price\">\n\t\t{{#high_price_number}}\n\t\t\t<span class=\"wsite-search-product-price-low\">\n\t\t\t\t{{{currency_html}}}{{low_price_number}}\n\t\t\t<\/span>\n\t\t\t -\n\t\t\t<span class=\"wsite-search-product-price-high\">\n\t\t\t\t{{{currenc
2025-01-11 23:11:19 UTC	760	IN	Data Raw: 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 6e 6f 2d 72 65 73 75 6c 74 73 5c 22 3e 5c 6e 5c 74 3c 70 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 62 61 73 65 2e 73 65 61 72 63 68 2e 72 65 73 75 6c 74 73 2e 65 72 72 6f 72 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 70 3e 5c 6e 3c 5c 2f 6c 69 3e 5c 6e 22 2c 0a 09 09 27 73 65 61 72 63 68 2f 63 6f 72 65 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 73 74 27 3a 20 22 3c 6f 6c 20 69 64 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 61 67 65 6e 61 76 5c 22 3e 5c 6e 5c 74 7b 7b 23 70 61 67 69 6e 61 74 69 6f 6e 5f 69 74 65 6d 73 7d 7d 5c 6e 5c 74 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 70 61 67 69 6e 61 74 69 6f 6e 2d 69 74 65 6d 7d 7d 5c 6e 5c 74 Data Ascii: or': "<li class=\"no-results\">\n\t<p>{{#stl}}templates.platform.theme.base.search.results.error_1{{\/stl}}<\/p>\n<\/li>\n",'search/core-pagination-list': "<ol id=\"wsite-search-pagenav\">\n\t{{#pagination_items}}\n\t\t{{> search\/pagination-item}}\n\t
2025-01-11 23:11:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49749	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	573	OUT	GET /css/sites.css?buildTime=1736370530 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:19 UTC	651	IN	HTTP/1.1 200 OK Connection: close Content-Length: 210892 Server: nginx Content-Type: text/css Last-Modified: Wed, 08 Jan 2025 20:11:04 GMT ETag: "677edbd8-337cc" Expires: Wed, 22 Jan 2025 21:10:41 GMT Cache-Control: max-age=1209600 X-Host: blu185.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 266438 Date: Sat, 11 Jan 2025 23:11:19 GMT X-Served-By: cache-sjc1000096-SJC, cache-ewr-kewr1740061-EWR X-Cache: HIT, HIT X-Cache-Hits: 4, 0 X-Timer: S1736637080.639596,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 2f 2a 21 20 52 65 66 6c 65 78 20 76 31 2e 35 2e 30 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 65 65 6a 6f 72 64 61 6e 2f 72 65 66 6c 65 78 20 2a 2f 2e 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7a 6f 6f 6d 3a 31 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 70 61 64 64 69 6e 67 Data Ascii: @keyframes spin{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}/! Reflex v1.5.0 - https://github.com/leejordan/reflex /.grid{display:inline-block;display:-ms-flexbox;display:flex;*display:inline;zoom:1;-ms-flex-wrap:wrap;flex-wrap:wrap;padding
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 35 38 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 36 7b 77 69 64 74 68 3a 35 30 25 3b 2a 77 69 64 74 68 3a 34 39 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 34 31 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 33 33 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 33 7b 77 69 64 74 68 3a 32 35 25 3b 2a 77 69 64 74 68 3a 32 34 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 31 36 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 31 7b Data Ascii: idth:58.33333%;width:58.23333%}.grid__col-6{width:50%;width:49.9%}.grid__col-5{width:41.66667%;width:41.56667%}.grid__col-4{width:33.33333%;width:33.23333%}.grid__col-3{width:25%;width:24.9%}.grid__col-2{width:16.66667%;width:16.56667%}.grid__col-1{
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 74 68 3a 31 36 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 73 6d 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 38 2e 32 33 33 33 33 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 65 6d 29 7b 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 2a 77 69 64 74 68 3a 39 39 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 39 31 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 38 33 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 39 7b 77 69 64 74 68 3a 37 35 25 3b 2a 77 Data Ascii: th:16.56667%}.grid__col-sm-1{width:8.33333%;width:8.23333%}}@media (min-width: 64em){.grid__col-md-12{width:100%;width:99.9%}.grid__col-md-11{width:91.66667%;width:91.56667%}.grid__col-md-10{width:83.33333%;width:83.23333%}.grid__col-md-9{width:75%;*w
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 39 7b 77 69 64 74 68 3a 37 35 25 3b 2a 77 69 64 74 68 3a 37 34 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 36 36 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 35 38 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 36 7b 77 69 64 74 68 3a 35 30 25 3b 2a 77 69 64 74 68 3a 34 39 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 34 31 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 34 7b 77 69 64 Data Ascii: 333%}.grid__col-xlg-9{width:75%;width:74.9%}.grid__col-xlg-8{width:66.66667%;width:66.56667%}.grid__col-xlg-7{width:58.33333%;width:58.23333%}.grid__col-xlg-6{width:50%;width:49.9%}.grid__col-xlg-5{width:41.66667%;*width:41.56667%}.grid__col-xlg-4{wid
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 35 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 65 72 3a 35 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d Data Ascii: 5{-ms-flex-order:5;order:5}.grid--order-4{-ms-flex-order:4;order:4}.grid--order-3{-ms-flex-order:3;order:3}.grid--order-2{-ms-flex-order:2;order:2}.grid--order-1{-ms-flex-order:1;order:1}.grid--order-0{-ms-flex-order:0;order:0}@media only screen and (min-
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 30 2d 73 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 65 6d 29 7b 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 32 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 32 3b 6f 72 64 65 72 3a 31 32 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 31 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 31 3b 6f 72 64 65 72 3a 31 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 30 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 30 3b 6f 72 64 65 72 3a 31 30 7d 2e 67 72 69 64 2d Data Ascii: {-ms-flex-order:1;order:1}.grid--order-0-sm{-ms-flex-order:0;order:0}}@media only screen and (min-width: 64em){.grid--order-12-md{-ms-flex-order:12;order:12}.grid--order-11-md{-ms-flex-order:11;order:11}.grid--order-10-md{-ms-flex-order:10;order:10}.grid-
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 31 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 31 3b 6f 72 64 65 72 3a 31 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 30 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 30 3b 6f 72 64 65 72 3a 31 30 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 39 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 39 3b 6f 72 64 65 72 3a 39 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 38 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 38 3b 6f 72 64 65 72 3a 38 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 37 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 36 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d Data Ascii: }.grid--order-11-xlg{-ms-flex-order:11;order:11}.grid--order-10-xlg{-ms-flex-order:10;order:10}.grid--order-9-xlg{-ms-flex-order:9;order:9}.grid--order-8-xlg{-ms-flex-order:8;order:8}.grid--order-7-xlg{-ms-flex-order:7;order:7}.grid--order-6-xlg{-ms-flex-
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 64 2d 2d 61 6c 69 67 6e 2d 62 61 73 65 6c 69 6e 65 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 62 61 73 65 6c 69 6e 65 7d 2e 67 72 69 64 2d 2d 61 6c 69 67 6e 2d 62 61 73 65 6c 69 6e 65 20 5b 63 6c 61 73 73 2a 3d 22 67 72 69 64 5f 5f 63 6f 6c 2d 22 5d 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 2e 67 72 69 64 2d 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 67 72 69 64 2d 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 65 6e 64 Data Ascii: d--align-baseline{-ms-flex-align:baseline;align-items:baseline}.grid--align-baseline [class*="grid__col-"]{vertical-align:baseline}.grid--align-content-start{-ms-flex-line-pack:start;align-content:flex-start}.grid--align-content-end{-ms-flex-line-pack:end
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 69 74 69 61 6c 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 6c 65 66 74 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 73 74 61 72 74 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 69 6e 69 74 69 61 6c 7d 2e 67 72 69 64 2d 2d 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 67 72 69 64 2d 2d 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 2e 67 72 69 64 5f 5f 63 65 6c 6c 2c 2e 67 72 69 64 2d 2d 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 5b 63 6c 61 Data Ascii: t;text-align:initial;text-align-last:left;text-align-last:start;text-align-last:initial}.grid--justify-center{text-align:center;text-align-last:center;-ms-flex-pack:center;justify-content:center}.grid--justify-center .grid__cell,.grid--justify-center [cla
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 65 6d 7d 2e 67 72 69 64 5f 5f 63 65 6c 6c 2d 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 69 64 5f 5f 63 65 6c 6c 2d 66 6f 6f 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7a Data Ascii: em}.grid__cell-img{display:block;display:-ms-flexbox;display:flex;-ms-flex:0 0 auto;flex:0 0 auto;margin-left:0;margin-right:0;max-width:100%;width:100%;height:auto}.grid__cell-footer{display:inline-block;display:-ms-flexbox;display:flex;*display:inline;z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49750	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	570	OUT	GET /css/old/fancybox.css?1736370530 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:19 UTC	646	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3911 Server: nginx Content-Type: text/css Last-Modified: Wed, 08 Jan 2025 20:11:11 GMT ETag: "677edbdf-f47" Expires: Wed, 22 Jan 2025 21:36:59 GMT Cache-Control: max-age=1209600 X-Host: grn107.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 264861 Date: Sat, 11 Jan 2025 23:11:19 GMT X-Served-By: cache-sjc10045-SJC, cache-ewr-kewr1740028-EWR X-Cache: HIT, HIT X-Cache-Hits: 19, 0 X-Timer: S1736637080.641709,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 2f 2a 21 20 66 61 6e 63 79 42 6f 78 20 76 32 2e 31 2e 30 20 66 61 6e 63 79 61 70 70 73 2e 63 6f 6d 20 7c 20 66 61 6e 63 79 61 70 70 73 2e 63 6f 6d 2f 66 61 6e 63 79 62 6f 78 2f 23 6c 69 63 65 6e 73 65 20 2a 2f 2e 66 61 6e 63 79 62 6f 78 2d 77 72 61 70 2c 2e 66 61 6e 63 79 62 6f 78 2d 73 6b 69 6e 2c 2e 66 61 6e 63 79 62 6f 78 2d 6f 75 74 65 72 2c 2e 66 61 6e 63 79 62 6f 78 2d 69 6e 6e 65 72 2c 2e 66 61 6e 63 79 62 6f 78 2d 69 6d 61 67 65 2c 2e 66 61 6e 63 79 62 6f 78 2d 77 72 61 70 20 69 66 72 61 6d 65 2c 2e 66 61 6e 63 79 62 6f 78 2d 77 72 61 70 20 6f 62 6a 65 63 74 2c 2e 66 61 6e 63 79 62 6f 78 2d 6e 61 76 2c 2e 66 61 6e 63 79 62 6f 78 2d 6e 61 76 20 73 70 61 6e 2c 2e 66 61 6e 63 79 62 6f 78 2d 74 6d 70 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e Data Ascii: /! fancyBox v2.1.0 fancyapps.com \| fancyapps.com/fancybox/#license /.fancybox-wrap,.fancybox-skin,.fancybox-outer,.fancybox-inner,.fancybox-image,.fancybox-wrap iframe,.fancybox-wrap object,.fancybox-nav,.fancybox-nav span,.fancybox-tmp{padding:0;margin
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 61 6e 63 79 62 6f 78 2d 63 6c 6f 73 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 2d 31 38 70 78 3b 74 6f 70 3a 2d 31 38 70 78 3b 77 69 64 74 68 3a 33 36 70 78 3b 7a 2d 69 6e 64 65 78 3a 38 30 34 30 7d 2e 66 61 6e 63 79 62 6f 78 2d 6e 61 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 34 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 Data Ascii: ancybox-close{background-color:transparent !important;cursor:pointer;height:36px;position:absolute;right:-18px;top:-18px;width:36px;z-index:8040}.fancybox-nav{position:absolute;top:0;width:40%;height:100%;cursor:pointer;text-decoration:none;background:tra
2025-01-11 23:11:19 UTC	1155	IN	Data Raw: 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 38 30 35 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 6e 63 79 62 6f 78 2d 74 69 74 6c 65 2d 66 6c 6f 61 74 2d 77 72 61 70 20 2e 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 23 32 32 32 3b 63 Data Ascii: tom:0;right:50%;margin-bottom:-35px;z-index:8050;text-align:center}.fancybox-title-float-wrap .child{display:inline-block;margin-right:-100%;padding:2px 20px;background:transparent;background:rgba(0,0,0,0.8);border-radius:15px;text-shadow:0 1px 2px #222;c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	580	OUT	GET /css/social-icons.css?buildtime=1736370530 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:19 UTC	650	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13081 Server: nginx Content-Type: text/css Last-Modified: Wed, 08 Jan 2025 20:11:04 GMT ETag: "677edbd8-3319" Expires: Wed, 22 Jan 2025 21:36:59 GMT Cache-Control: max-age=1209600 X-Host: blu126.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 264861 Date: Sat, 11 Jan 2025 23:11:19 GMT X-Served-By: cache-sjc1000109-SJC, cache-ewr-kewr1740027-EWR X-Cache: HIT, HIT X-Cache-Hits: 25, 0 X-Timer: S1736637080.654104,VS0,VE2 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 77 73 6f 63 69 61 6c 22 3b 73 72 63 3a 75 72 6c 28 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 77 53 6f 63 69 61 6c 2f 77 73 6f 63 69 61 6c 2e 65 6f 74 3f 74 73 3d 31 37 33 36 33 36 37 30 36 34 33 34 33 29 3b 73 72 63 3a 75 72 6c 28 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 77 53 6f 63 69 61 6c 2f 77 73 6f 63 69 61 6c 2e 65 6f 74 3f 74 73 3d 31 37 33 36 33 36 37 30 36 34 33 34 33 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 77 53 6f 63 69 61 6c 2f Data Ascii: @font-face{font-family:"wsocial";src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1736367064343);src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1736367064343#iefix) format("embedded-opentype"),url(//cdn2.editmysite.com/fonts/wSocial/
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 3a 22 5c 65 36 30 30 22 7d 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 30 22 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 30 22 3b 63 6f 6c 6f 72 3a 23 33 62 35 39 39 38 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 62 35 Data Ascii: :"\e600"}.wsite-com-product-social-facebook:before{content:"\e600"}.wsite-social-color .wsite-social-facebook:before{content:"\e600";color:#3b5998}.wsite-social-square .wsite-social-facebook,.wsite-social-square.wsite-social-facebook{background-color:#3b5
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 3a 22 5c 65 36 30 38 22 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 38 22 3b 63 6f 6c 6f 72 3a 23 30 30 36 33 64 63 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 33 64 63 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 3a 61 66 74 65 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 Data Ascii: :"\e608"}.wsite-social-color .wsite-social-flickr:before{content:"\e608";color:#0063dc}.wsite-social-square .wsite-social-flickr,.wsite-social-square.wsite-social-flickr{background-color:#0063dc}.wsite-social-square .wsite-social-flickr:after,.wsite-socia
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 65 64 69 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 38 38 61 62 65 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 65 64 69 6e 3a 61 66 74 65 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 65 64 69 6e 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 32 22 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 70 69 6e 74 65 72 65 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 39 22 7d 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 Data Ascii: wsite-social-square.wsite-social-linkedin{background-color:#388abe}.wsite-social-square .wsite-social-linkedin:after,.wsite-social-square.wsite-social-linkedin:after{content:"\e602";color:#ffffff}.wsite-social-pinterest:before{content:"\e609"}.wsite-com-p
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 2d 73 6f 63 69 61 6c 2d 74 75 6d 62 6c 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 30 22 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 7d 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 3b 63 6f 6c 6f 72 3a 23 30 30 61 63 65 64 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 Data Ascii: -social-tumblr:after{content:"\e610";color:#ffffff}.wsite-social-twitter:before{content:"\e601"}.wsite-com-product-social-twitter:before{content:"\e601"}.wsite-social-color .wsite-social-twitter:before{content:"\e601";color:#00aced}.wsite-social-square .w
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 36 22 3b 63 6f 6c 6f 72 3a 23 62 33 31 32 31 37 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 33 31 32 31 37 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 3a 61 66 74 65 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 Data Ascii: }.wsite-social-color .wsite-social-youtube:before{content:"\e606";color:#b31217}.wsite-social-square .wsite-social-youtube,.wsite-social-square.wsite-social-youtube{background-color:#b31217}.wsite-social-square .wsite-social-youtube:after,.wsite-social-sq
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 61 66 74 65 72 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f Data Ascii: social-sharing .wsite-com-product-social-facebook:before,#wsite-com-product-social-sharing .wsite-com-product-social-facebook:after,#wsite-com-product-social-sharing .wsite-com-product-social-twitter:before,#wsite-com-product-social-sharing .wsite-com-pro
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 Data Ascii: display:inline-block;text-indent:-9999px;position:relative;width:24px;height:24px}#wsite-com-product-social-sharing .wsite-com-product-social-facebook:before,#wsite-com-product-social-sharing .wsite-com-product-social-twitter:before,#wsite-com-product-soc
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 70 6c 75 73 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 34 22 7d 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 70 6c 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 69 6e 73 74 61 67 72 61 6d 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 69 6e 73 74 61 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 37 22 7d Data Ascii: e:none}.social-plus .social-label:before,.social-dropdown-item.social-plus:before{content:"\e604"}.social-dropdown-item.social-plus{background-image:none}.social-instagram .social-label:before,.social-dropdown-item.social-instagram:before{content:"\e607"}
2025-01-11 23:11:19 UTC	679	IN	Data Raw: 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 36 22 7d 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 62 61 64 67 65 2d 69 74 65 6d 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 62 61 64 67 65 2d 69 74 65 6d 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c Data Ascii: -image:none}.social-youtube .social-label:before,.social-dropdown-item.social-youtube:before{content:"\e606"}.social-dropdown-item.social-youtube{background-image:none}.social-badge-item .social-label{background-image:none}.social-badge-item .social-label

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	561	OUT	GET /fonts/Karla/font.css?2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:19 UTC	647	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1710 Server: nginx Content-Type: text/css Last-Modified: Thu, 19 Dec 2024 22:49:41 GMT ETag: "6764a305-6ae" Expires: Tue, 14 Jan 2025 18:02:12 GMT Cache-Control: max-age=1209600 X-Host: blu103.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 968948 Date: Sat, 11 Jan 2025 23:11:19 GMT X-Served-By: cache-sjc10062-SJC, cache-ewr-kewr1740040-EWR X-Cache: HIT, HIT X-Cache-Hits: 212, 0 X-Timer: S1736637080.655242,VS0,VE2 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4b 61 72 6c 61 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: @font-face { font-family: 'Karla'; font-style: normal; font-weight: 400; src: url('./regular.eot'); /* IE9 Compat Modes / src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 */ url('./regular.woff2') format('woff2')
2025-01-11 23:11:19 UTC	332	IN	Data Raw: 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 2f 2a 20 53 75 70 65 72 20 4d 6f 64 65 72 6e 20 42 72 6f 77 73 65 72 73 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 2f 2a 20 4d 6f 64 65 72 6e 20 42 72 6f 77 73 65 72 73 20 2a 2f 0a 20 20 Data Ascii: /* IE9 Compat Modes / src: url('./bolditalic.eot?#iefix') format('embedded-opentype'), / IE6-IE8 / url('./bolditalic.woff2') format('woff2'), / Super Modern Browsers / url('./bolditalic.woff') format('woff'), / Modern Browsers */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	567	OUT	GET /fonts/Roboto_Mono/font.css?2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:19 UTC	645	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1735 Server: nginx Content-Type: text/css Last-Modified: Thu, 19 Dec 2024 22:49:41 GMT ETag: "6764a305-6c7" Expires: Tue, 14 Jan 2025 13:31:01 GMT Cache-Control: max-age=1209600 X-Host: blu22.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 985218 Date: Sat, 11 Jan 2025 23:11:19 GMT X-Served-By: cache-sjc10030-SJC, cache-ewr-kewr1740038-EWR X-Cache: HIT, HIT X-Cache-Hits: 85, 0 X-Timer: S1736637080.667084,VS0,VE2 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:19 UTC	1378	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 20 4d 6f 6e 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 Data Ascii: @font-face { font-family: 'Roboto Mono'; font-style: normal; font-weight: 400; src: url('./regular.eot'); /* IE9 Compat Modes / src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 */ url('./regular.woff2') format('w
2025-01-11 23:11:19 UTC	357	IN	Data Raw: 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 2f 2a 20 53 75 70 65 72 20 4d 6f 64 65 72 6e 20 42 72 6f 77 73 65 72 73 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 62 6f 6c 64 69 74 61 6c 69 63 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 Data Ascii: url('./bolditalic.eot'); /* IE9 Compat Modes / src: url('./bolditalic.eot?#iefix') format('embedded-opentype'), / IE6-IE8 / url('./bolditalic.woff2') format('woff2'), / Super Modern Browsers */ url('./bolditalic.woff') format('woff'),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	562	OUT	GET /fonts/Oswald/font.css?2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:19 UTC	650	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1264 Server: nginx Content-Type: text/css Last-Modified: Thu, 19 Dec 2024 22:49:41 GMT ETag: "6764a305-4f0" Expires: Mon, 13 Jan 2025 17:02:20 GMT Cache-Control: max-age=1209600 X-Host: grn132.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1058939 Date: Sat, 11 Jan 2025 23:11:19 GMT X-Served-By: cache-sjc1000114-SJC, cache-ewr-kewr1740057-EWR X-Cache: HIT, HIT X-Cache-Hits: 300, 0 X-Timer: S1736637080.669050,VS0,VE5 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:19 UTC	1264	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 73 77 61 6c 64 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 6c 69 67 68 74 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 6c 69 67 68 74 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 6c 69 67 68 74 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 2f 2a 20 Data Ascii: @font-face { font-family: 'Oswald'; font-style: normal; font-weight: 300; src: url('./light.eot'); /* IE9 Compat Modes / src: url('./light.eot?#iefix') format('embedded-opentype'), / IE6-IE8 / url('./light.woff2') format('woff2'), /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	820	OUT	GET /uploads/1/5/1/8/151886692/tak_orig.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:20 UTC	901	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:20 GMT Content-Type: image/png Content-Length: 2439 Connection: close CF-Ray: 900895d5aa79c33a-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "6cde551752c3ddf86b64dd5c0158fd13" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Jan 2025 08:57:19 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: 0igIUzvCZ5ToJOx+dTn2Q/XQFT1e3WASgh/xwJ+97xO/DCTPXWvhuM+20P+PpiuE1d/LyDB14g8= x-amz-replication-status: COMPLETED x-amz-request-id: 8TRH49R361S1PD6R x-amz-server-side-encryption: AES256 x-amz-version-id: dahO7XMnZfaHxnaBEe8PqGJoAnPEVVM6 X-Storage-Bucket: zccfd X-Storage-Object: ccfde13123c12ce3f6bed6057742ce94960882a3c5b70c1c3b29c58cf170d748 Server: cloudflare
2025-01-11 23:11:20 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 00 49 08 03 00 00 00 eb 3c cb 06 00 00 02 9a 50 4c 54 45 ff ff ff e1 e3 e1 1e 4e 9d 49 70 b0 90 a8 cf a9 bc da ac be db ab bd da aa bc da 45 6d ae 20 4f 9e a6 b9 d8 ed f1 f7 f0 f3 f8 b3 c3 de 24 53 a0 37 61 a8 c3 d0 e5 f1 f4 f9 e9 ee f5 93 aa d0 70 8f c1 a0 b4 d5 8f a7 ce 54 78 b4 d2 dc eb f2 f5 f9 dd e5 f0 78 95 c4 e1 e7 f2 cd d7 e9 47 6f af 6b 8a be a3 b7 d7 fb fc fd 71 8f c1 23 52 9f ca d5 e8 39 64 a9 7d 99 c7 42 6a ad b8 c7 e0 f3 f5 fa bf cc e3 28 56 a1 f4 f6 fa ce d8 e9 6f 8e c0 41 6a ac 53 78 b4 98 ae d2 82 9c c8 5c 7f b8 5b 7e b8 b4 c4 de 3e 67 ab e8 ed f5 de e5 f1 91 a8 cf da e2 ef ae bf dc 77 94 c4 7a 96 c5 21 50 9e 64 85 bb 92 aa d0 be cc e3 eb ef f6 bd cb e2 92 a9 cf 62 83 bb cf Data Ascii: PNGIHDRI<PLTENIpEm O$S7apTxxGokq#R9d}Bj(VoAjSx\[~>gwz!Pdb
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 4f 9d d3 dc ec fe fe ff 96 ac d1 cb d6 e8 d7 e0 ee 35 60 a7 c7 d3 e7 8a a3 cc e5 ea f3 52 77 b4 b2 c3 de 4f 75 b3 94 ab d0 e7 ec f5 32 5e a6 9f b3 d5 83 9d c9 88 a1 cb 58 7c b6 84 9f ca 4a 71 b0 9a af d3 d6 df ed 5a 7d b7 ec f0 f7 2f 5b a4 80 9b c8 a7 ba d9 af c0 dc 2d 5a a4 b6 c5 df 43 6b ad 8b a3 cc 6d 8c bf 60 82 ba 4b 71 b1 df e6 f1 e6 ec f4 44 6c ae 66 87 bd 4c 72 b1 83 9e c9 db e3 ef 67 88 bd e3 e9 f3 ea ee f6 4d 73 b1 bf cd e3 99 ae d2 c4 d0 e5 fa fb fd ce d9 ea 26 54 a0 40 69 ac 68 88 bd 87 a1 cb b1 c2 dd 25 54 a0 6a 8a be 29 57 a2 81 9c c8 97 ad d2 e2 e8 f2 59 7d b7 9d b2 d4 b9 c8 e1 c2 cf e4 9a b0 d3 d4 dd ec e5 eb f4 c1 ce e4 89 a2 cb 27 55 a1 48 6f af bb ca e1 d1 db eb 7b 97 c5 b7 c6 df 8b a4 cd 29 73 7d ed 00 00 06 a8 49 44 41 54 78 da ec d8 Data Ascii: O5`RwOu2^X\|JqZ}/[-ZCkm`KqDlfLrgMs&T@ih%Tj)WY}'UHo{)s}IDATx
2025-01-11 23:11:20 UTC	602	IN	Data Raw: 95 06 95 71 65 1f 2c 5d a3 af 21 24 41 03 dc a5 5b d9 04 63 6d 80 00 bf 0a 3c 66 3d c2 1e e0 5a dd 2f a1 da f4 51 fe 00 7f e5 0f f0 18 9c 17 15 07 22 22 22 97 b8 1e 55 0a 35 41 64 28 54 ec e4 eb 08 45 f0 00 c7 e9 66 43 05 ba 04 5d 03 c0 2b c6 26 5b 80 23 cd 8c 86 0a 97 5e 01 ae ed 09 30 be 16 95 03 22 22 22 97 18 d2 79 5a 67 eb 82 76 a8 f0 ce d6 fe fc 29 ca f1 ba 0f 97 00 97 62 03 7d 0a 3a 0a 40 5e a7 15 d5 de 01 3e 66 66 6f 36 70 e3 a6 a8 8b 8e 00 47 03 f8 46 8c 5b 20 22 22 72 8b e6 b0 06 f4 78 7a 5d 6a bf fc 19 43 8e ff 92 f1 43 a2 96 a5 54 8a cf 7a 60 b0 ee 33 c0 2d 33 5e 18 b7 c5 df 5d 7c 2b 46 1d f0 9d a8 b6 94 75 62 e9 28 43 97 6e 12 30 c6 77 12 e3 7b 31 66 82 88 88 c8 2d b2 c7 fd 30 16 96 b1 9b 1f cc 46 1f 10 38 a5 89 b1 1c c0 8f d2 ad ca ff c6 ee Data Ascii: qe,]!$A[cm<f=Z/Q"""U5Ad(TEfC]+&[#^0"""yZgv)b}:@^>ffo6pGF[ ""rxz]jCCTz`3-3^]\|+Fub(Cn0w{1f-0F8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	822	OUT	GET /uploads/1/5/1/8/151886692/tannn_orig.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:20 UTC	902	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:20 GMT Content-Type: image/png Content-Length: 60600 Connection: close CF-Ray: 900895d5baf78c4e-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "4dc4af4ca3295f7adfb222c89a658447" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Jan 2025 08:57:34 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: qsphZNO8+UOJi3xd/AR26UJTAQG8hmDHFAZRd0YSdT8CHLlOYhJ19wHRIqBFZlSOKDklHYKvG0s= x-amz-replication-status: COMPLETED x-amz-request-id: M6H5GNP24KG1WZ6Q x-amz-server-side-encryption: AES256 x-amz-version-id: VKZ8LzRQ8QY2FHGQLyH06XM5rnzvclrN X-Storage-Bucket: zff95 X-Storage-Object: ff95d27d18d5aae72e8665328841f3a07bebd9ca093d3ce03b5b33738d09171c Server: cloudflare
2025-01-11 23:11:20 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 92 00 00 01 d7 08 06 00 00 00 0f f5 ba 24 00 00 ec 7f 49 44 41 54 78 da ec 9c e1 4b db 5a 18 87 f7 ef 86 42 90 03 12 84 20 04 59 18 3a b0 0c 23 84 31 91 39 58 fa 61 d0 30 46 c7 fc 60 2e ac fb 90 72 11 8c 1f 2a 5c 45 22 52 90 80 84 42 90 40 f9 5d 6c e3 4e af 59 93 de a6 95 b9 fe 1e 28 08 a6 49 ce fb be e7 9c 27 27 69 5e 80 10 42 08 21 84 90 19 a0 48 12 42 08 21 84 10 8a 24 21 84 10 42 08 a1 48 12 42 08 21 84 10 8a 24 21 84 10 42 08 a1 48 12 42 08 21 84 10 42 91 24 84 10 42 08 21 14 49 42 08 21 84 10 42 91 24 84 10 42 08 21 14 49 42 08 21 84 10 42 91 24 84 10 42 08 21 84 22 49 08 21 84 10 42 28 92 e4 c9 e8 58 50 14 05 8a a2 c3 bd 06 21 84 3c c2 87 35 1c 23 14 58 1d e4 f0 77 47 ff 53 76 7d fc d6 5c bb Data Ascii: PNGIHDR$IDATxKZB Y:#19Xa0F`.r*\E"RB@]lNY(I''i^B!HB!$!BHB!$!BHB!B$B!IB!B$B!IB!B$B!"I!B(XP!<5#XwGSv}\
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 95 3a bc db 5f 6d 93 20 5d bc 48 3e 4d 3b 9e b3 48 d6 b2 58 ad ec 21 18 cc 78 fe b5 9c 48 3e 8f 67 24 a3 2e 5a 8d 3a 8c 55 13 ee 35 45 92 22 49 0a 07 5b bd 49 91 24 84 3c f9 4a 65 75 b9 a8 2e 92 8b 6f c7 73 16 49 4d 87 be 32 3a 4e fd af 04 ff 87 e0 9d 3a 5a cd 5c d3 9e a7 48 ca b9 86 22 49 91 24 14 49 42 08 45 92 22 39 4b bb f6 32 21 54 d6 1c 9c 63 4a fa 1e ea c3 95 48 0d 4e c3 a2 48 52 24 29 92 14 49 8a 24 21 84 22 b9 8c 22 e9 5f 38 d0 86 7f ab d8 3b c1 54 9c 37 b2 55 c8 97 2d 44 1d 8a 24 45 f2 8f 13 c9 14 d1 99 87 83 57 3a c4 ca d8 83 c0 2b 02 c6 b6 03 ef 22 9e 72 37 3d b4 87 cf 4f c8 5f 60 ab 42 87 f9 be 8d 5e 9a 3b cf a2 02 2f 1f e8 e2 00 ad 5d 43 9e 6f 4d 85 d8 b0 d0 3a 4b e6 fa f0 bb 3c df 85 c4 6d ea b8 fa 4d ab 38 ae 55 06 d7 f8 1c de a3 bc 29 aa Data Ascii: :_m ]H>M;HX!xH>g$.Z:U5E"I[I$<Jeu.osIM2:N:Z\H"I$IBE"9K2!TcJHNHR$)I$!""_8;T7U-D$EW:+"r7=O_`B^;/]CoM:K<mM8U)
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: f1 3d 14 4f f2 29 5b cf dd da 94 1a 8d 57 f5 81 2e b6 7e 4c 57 55 77 7d 5d 5d 55 fd e1 e8 bb 43 4a 5e 5f 63 e2 24 cf 9c d8 de 23 6b 3f 09 e3 ef 7b 22 d6 93 8b 6f ef 89 d1 fa e8 68 fd f1 f4 95 c3 a1 fa 8e 40 44 74 4b 3a 9d 98 4e 47 6f 77 01 89 64 21 8f 0a e7 e3 4f 12 49 da ef ab 1b 48 4c 87 b3 88 03 6d 15 84 56 b7 d7 2f e3 87 23 2a e3 1e ea b3 ff 55 f7 b0 17 3f 30 bf a6 67 68 6c 72 e3 12 9a 48 76 8f 7b 0f 1e fb 8e df d7 b1 c1 4d 94 8a 48 72 2e ca 68 b0 9e 48 76 d1 7a 37 e2 1a 20 89 39 75 ad 27 92 9c 0f 24 2c 7a fd 30 d2 e8 58 93 48 c6 23 be 67 21 19 f5 df b4 30 c8 1d a9 14 f4 73 25 23 92 d2 77 65 e2 11 05 51 24 29 16 f3 da a3 b7 69 8e ec 20 12 27 68 6a 7b 63 3a 92 94 b3 5c 23 78 7a b4 76 44 72 9c a1 be b9 60 61 c9 94 3b 2a 2a 4a 44 80 e4 22 2e f3 dc 54 44 Data Ascii: =O)[W.~LWUw}]]UCJ^_c$#k?{"oh@DtK:NGowd!OIHLmV/#U?0ghlrHv{MHr.hHvz7 9u'$,z0XH#g!0s%#weQ$)i 'hj{c:\#xzvDr`a;*JD".TD
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: b1 5e e7 73 d0 1c c9 22 d7 93 ed d3 ba 37 81 f4 c3 8d 20 e7 74 51 cd 2f 88 86 f7 bb b8 c9 8c 9f 0f 30 7e 64 39 92 dc 84 2d ee f3 b2 03 41 3c 69 ef 1e 9f 41 99 71 cc 3a 7b 73 ae 0f dc e4 5f 88 22 bb f5 23 92 64 d9 74 be fe 2a 50 b6 2d 11 0e 8e 4e df 97 1b f6 88 89 a4 5e 6e 7e e8 e5 aa 27 92 24 73 2c 82 90 47 38 72 02 79 9f 91 bb 73 4d 81 92 4c 72 a6 4e 48 7a 09 2e bc 5c e4 57 4b 24 49 86 f9 cc ac fe e3 f3 05 b0 3b 2e ba 8e 2a 69 46 78 cb 4f 24 f5 ba a5 c3 61 74 71 a6 1b 3a 36 21 bb fb 82 a7 82 6c f2 79 42 11 49 ae f1 72 23 21 6d 44 4f 24 45 24 87 0d bc f5 e3 f0 47 ab 38 17 b4 44 92 2d 8c 5c ad 68 f4 fa 91 85 19 75 74 7e 9b 3b 21 99 fa be cb 7f 7a 23 4f 34 ca 4b 24 29 07 e6 7a fb ab b6 b9 b1 65 d0 c2 6f 2b fc 3d 39 66 bd bd 3d 90 76 44 3f 38 f3 3f eb 7e 45 Data Ascii: ^s"7 tQ/0~d9-A<iAq:{s_"#dtP-N^n~'$s,G8rysMLrNHz.\WK$I;.iFxO$atq:6!lyBIr#!mDO$E$G8D-\hut~;!z#O4K$)zeo+=9f=vD?8?~E
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 15 b3 dd 5f 2a f3 79 08 06 c3 7a e3 2e 43 83 57 3d c2 60 30 18 0c 25 04 db e1 b1 45 9b 11 c9 a5 82 6d 64 0e db e8 5d 0c 91 df ce b7 dd 18 e1 f2 f4 be 44 9f 2d 49 ec 50 db b0 ae 60 bb 96 74 7b ae da dc a2 91 06 83 c1 50 26 b0 55 d1 45 1b 7b 95 f9 c6 e6 46 24 03 c0 db 46 86 f7 b6 1e 5f 5a 41 81 61 1d c1 ca 42 d9 5e c9 60 30 18 0c e5 01 3b 00 f0 c5 96 51 46 24 c3 60 f2 e5 12 d9 49 f3 be 1d c9 93 8d 1f 5b c9 c4 df 5b 92 18 0c 6b 4d 24 3b 3b 6c 97 f1 b5 65 8b cd 09 83 c1 60 28 21 fa 48 a3 f9 b6 68 59 d1 6a c8 88 a4 c1 60 30 18 0c 06 83 e1 1f c3 88 a4 c1 60 30 18 0c 06 83 c1 88 a4 c1 60 30 18 0c 06 83 c1 60 44 d2 60 30 18 0c 06 83 c1 60 44 d2 60 30 18 0c ff 63 cf ce 56 15 86 c1 28 8c be ff fb 76 1e 65 4b 08 81 72 38 de 28 0e 6b c1 0f d6 26 ad 97 1f 11 40 48 02 Data Ascii: _*yz.CW=`0%Emd]D-IP`t{P&UE{F$F_ZAaB^`0;QF$`I[[kM$;;le`(!HhYj`0`0`0`D`0`D`0cV(veKr8(k&@H
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: b3 f1 c2 79 04 88 fe 37 c0 20 0b 24 af 2e d0 dc 0d e0 b9 e9 bc 5e 80 e8 e4 02 49 3e 08 93 ae 3b 1f 48 8e 1a 08 c8 23 bd 51 45 ff 4a 0e 92 d3 f3 f4 fa ad f1 1e 11 9f 4e f2 81 e4 55 17 91 e7 c0 f1 ca 68 8d 64 20 d9 9d 34 e7 a1 ff c3 01 96 69 72 12 a6 a0 d9 35 40 d2 be a6 25 cf 85 93 de 27 fe 76 03 17 57 d9 c0 96 1f 24 13 5c 9c 44 08 3c 37 e3 79 12 3e 17 3c a7 63 8d e8 2c 2b bf 95 ce 5a 34 bf 7d 8d 46 13 74 f6 02 b8 6b f3 7b 40 d1 54 65 7a de 52 4f a4 c2 4a 86 e8 7c be 7e fd 4a 30 c9 23 03 28 15 26 55 77 03 24 91 1a 56 77 bf 6f 62 22 ea 1c d6 23 03 b8 18 fe 9e a2 b5 45 39 70 75 b0 39 be 1e a2 11 90 61 f5 11 1d b7 41 39 71 ed c3 32 bc 34 74 6e a2 82 ed f9 74 50 79 93 2c f7 96 6e f0 df 40 72 16 c1 73 1c 78 9b b5 34 f7 ae 89 f8 21 19 59 0f d5 73 21 48 fe 15 21 Data Ascii: y7 $.^I>;H#QEJNUhd 4ir5@%'vW$\D<7y><c,+Z4}Ftk{@TezROJ\|~J0#(&Uw$Vwob"#E9pu9aA9q24tntPy,n@rsx4!Ys!H!
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 20 69 7b b5 ed bc bf 21 8e 64 20 c9 eb 1a 1e 07 f3 9c d6 e7 03 cc 72 80 a4 95 3e f1 a1 69 dd d3 36 48 66 e7 01 e3 b4 80 d0 76 16 90 fd 5d 87 cf 6d b7 a4 cf 45 3e 90 94 cf af 20 a9 ca ee 15 49 6d 7e 54 bf 5e a4 44 30 99 24 09 c3 a4 10 28 15 26 55 45 83 a4 0d 72 95 6d bb 01 b9 09 23 e5 bf ca 6c 2c ac af 94 fb 95 b0 56 d2 41 65 8d 0c 59 8b 20 8c 0d 9a 55 5d 4e 20 f2 bb 40 f2 5d cc 39 60 f6 d9 f1 dc 3c e7 d2 f3 98 b6 69 9f 3c af e1 91 e5 62 9b d5 81 a4 6c dd 72 90 4c 0b 5d 36 5d 2e 24 12 83 e4 b8 81 80 61 d6 06 23 39 48 b2 87 95 0b a4 72 82 24 7b e2 3d cf 33 5a 50 65 83 64 2f 76 38 e4 6c 79 eb 57 0e 92 0e fc a7 17 98 2d fd 36 a9 10 ad 89 f8 b9 b0 d6 60 54 98 db fb 8d 7b d9 cf 9d 82 a4 0a 72 11 40 12 48 aa 56 e2 d9 a5 1e 93 e4 dd a5 73 25 88 34 87 c2 a4 ea 2e Data Ascii: i{!d r>i6Hfv]mE> Im~T^D0$(&UErm#l,VAeY U]N @]9`<i<blrL]6].$a#9Hr${=3ZPed/v8lyW-6`T{r@HVs%4.
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: b3 92 00 8b a4 0a f9 5b 69 38 c7 0d e8 2d 1a 34 4d 83 6e 58 70 87 bd 25 05 30 96 9c 41 61 26 07 97 8e 27 21 6c d1 61 9e 4c 63 a2 50 e5 bc 74 9c a6 c3 6c 4f 60 34 9f 5b 9e 48 ce 8f 23 dd 69 c1 d0 c5 d8 e0 0c 8d c3 47 80 ff 4d 1c f4 f5 f8 37 3e 24 fc 1c e2 2d 1a f4 b3 63 6a e7 53 ff ac 6a 14 3d e4 7a 6c 98 ad c1 b5 b4 56 13 76 4f 0e 5e 11 e5 14 66 40 c7 c5 0c 1d 9a b8 4e 0a e3 f3 d2 f9 e4 e3 da d3 98 90 c7 bd 8c 71 c8 52 e8 df 4e 21 6e 06 d7 70 ae 47 28 64 32 46 df 97 42 c7 47 7e 2e 4d 87 11 b3 d1 2b bd 5b d5 ae e1 60 44 51 60 fd db f2 7b dc 7d 23 af f2 3e f1 9a 52 86 e1 f5 91 af 43 f3 93 28 6f 2b cb a4 7a 89 9b 45 92 45 32 82 e9 14 62 9a 06 e3 44 2f d2 c3 39 e4 86 d3 70 8f d1 2f 59 03 ee 0d 5f 96 ab d3 0e ac d6 18 dc bf d3 b1 39 a4 5d 33 90 84 53 39 84 8f Data Ascii: [i8-4MnXp%0Aa&'!laLcPtlO`4[H#iGM7>$-cjSj=zlVvO^f@NqRN!npG(d2FBG~.M+[`DQ`{}#>RC(o+zEE2bD/9p/Y_9]3S9
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: db ea 63 2d cc 64 10 6f 15 ef 70 d9 f3 67 98 b5 cc 73 00 34 bb 94 1a fc 1b 7e 6f fe 01 ef bf bf 03 3f f8 e1 8f b0 ed ed ef d7 27 db de c1 a7 9f b6 81 69 4c 91 b4 ed 3f e2 cd 37 df c6 5b 6f bd 13 64 9b 1c 7a 86 3f fe c9 4f b1 67 ef 3e ec 3f 70 10 07 5e a4 e9 90 48 53 53 33 0e 1e ac c8 a1 c3 38 a4 90 e6 e6 23 68 3e 7c 14 94 c3 15 69 96 23 1f 77 a4 32 1f bc 44 7e 29 e5 08 e5 68 6d 39 4a f9 20 94 a3 1f e2 a3 8f 7f 8d df e9 ad f8 ec 4f 27 31 38 38 84 7b f7 a6 49 26 d7 83 48 46 37 70 04 22 56 b3 48 0a 51 90 05 b5 50 6a 22 51 11 16 0f e9 13 9a d4 1c 11 8d 8f dc a9 60 cc 99 73 ba 18 bb c2 f9 56 5c 24 89 b1 b3 7a f5 b5 94 72 93 88 dc d4 13 be 4e b1 80 42 51 5a db 27 84 4c 1a b7 34 8e 57 28 92 d4 5d 2e 3f 8b ea cd 36 2d 36 32 1e 24 a4 ae 7b 31 b3 29 7f 9d c6 1a 2e Data Ascii: c-dopgs4~o?'iL?7[odz?Og>?p^HSS38#h>\|i#w2D~)hm9J O'188{I&HF7p"VHQPj"Q`sV\$zrNBQZ'L4W(].?6-62${1).
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 5d ba 74 e9 ba fb c5 91 b8 73 3e 9e cf 76 b6 4a 22 ef 16 bb 76 ed c2 ad 95 55 54 8f 99 1b 53 30 66 e9 05 1c 15 79 63 92 c8 54 30 39 bb 1a 9e 22 92 2f 4e 3c 85 71 5f 5c c0 c5 cc 6a 6b d2 5a db 88 3e 33 ce e2 b5 29 67 b0 e6 db 6c d5 c6 e6 fe 9f 6c bf 8a 57 27 45 c1 7b 49 02 28 92 5c 53 5d df 84 b4 fc 5a 5c c9 ab 45 49 d5 0d 70 7b 0a 6a 61 85 8c 22 96 74 33 b7 a4 01 c9 59 35 18 2d e7 fb f6 6c 91 71 2c 49 43 f3 4a 1b b8 af 83 90 72 96 49 69 86 ad 1e a9 b9 b5 b0 89 80 36 de e4 ab 46 bb 3d bb b8 01 29 39 35 3c a6 9c a3 79 93 2d af 6e e4 be bc 26 79 2f 4d 60 d5 cb 31 4b e5 da 4a aa 1a 91 6e ab 43 46 61 1d 1a 6e 28 89 46 a3 1c 4b ae 47 f6 ab 01 3f bb 7a fb 3a ee c3 cf 83 ef 8b c7 2b 92 cf 91 89 6d 7e d9 75 59 ae 43 45 4d 23 be 6b c5 a8 d7 ae 5d 0b a7 ae 5d 95 48 Data Ascii: ]ts>vJ"vUTS0fycT09"/N<q_\jkZ>3)gllW'E{I(\S]Z\EIp{ja"t3Y5-lq,ICJrIi6F=)95<y-n&y/M`1KJnCFan(FKG?z:+m~uYCEM#k]]H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:19 UTC	570	OUT	GET /files/theme/MutationObserver.js HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:20 UTC	927	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895d5de9241d2-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"e52201e96af18dd02c85eb627c843491" Last-Modified: Thu, 04 Apr 2024 10:23:36 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: Ye1MMTNnr7P+HGwwOwMNCe7T0qZC9Ep+I9BAtgt0A+coUcEkD4v2EZmfphyqKbBkmVoIvWa0IBo= x-amz-meta-btime: 2023-09-25T13:28:31.439Z x-amz-meta-mtime: 1695648511.439 x-amz-replication-status: COMPLETED x-amz-request-id: C6XB0FK9W903ZQQJ x-amz-server-side-encryption: AES256 x-amz-version-id: P7GX41cAL89NqMhfWn_.HhJNYx8OtSku X-Storage-Bucket: z3974 X-Storage-Object: 397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a Server: cloudflare
2025-01-11 23:11:20 UTC	442	IN	Data Raw: 32 33 37 36 0d 0a 2f 2a 21 0a 20 2a 20 53 68 69 6d 20 66 6f 72 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 69 6e 74 65 72 66 61 63 65 0a 20 2a 20 41 75 74 68 6f 72 3a 20 47 72 61 65 6d 65 20 59 65 61 74 65 73 20 28 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 65 67 61 77 61 63 29 0a 20 2a 20 52 65 70 6f 73 69 74 6f 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 65 67 61 77 61 63 2f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 6a 73 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 57 54 46 50 4c 20 56 32 2c 20 32 30 30 34 20 28 77 74 66 70 6c 2e 6e 65 74 29 2e 0a 20 2a 20 54 68 6f 75 67 68 20 63 72 65 64 69 74 20 61 6e 64 20 73 74 61 72 69 6e 67 20 74 68 65 20 72 65 70 6f 20 77 69 6c 6c 20 6d 61 6b 65 20 6d 65 20 66 65 65 6c 20 70 72 Data Ascii: 2376/! Shim for MutationObserver interface * Author: Graeme Yeates (github.com/megawac) * Repository: https://github.com/megawac/MutationObserver.js * License: WTFPL V2, 2004 (wtfpl.net). * Though credit and staring the repo will make me feel pr
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 57 65 62 4b 69 74 2f 77 65 62 6b 69 74 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 53 6f 75 72 63 65 2f 57 65 62 43 6f 72 65 2f 64 6f 6d 2f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 63 70 70 20 66 6f 72 20 63 75 72 72 65 6e 74 20 77 65 62 6b 69 74 20 73 6f 75 72 63 65 20 63 2b 2b 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 70 72 65 66 69 78 20 62 75 67 73 3a 0a 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 77 65 62 6b 69 74 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 38 35 31 36 31 0a 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 62 75 67 7a 69 6c 6c 61 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 37 34 39 39 Data Ascii: /github.com/WebKit/webkit/blob/master/Source/WebCore/dom/MutationObserver.cpp for current webkit source c++ implementation //* * prefix bugs: - https://bugs.webkit.org/show_bug.cgi?id=85161 - https://bugzilla.mozilla.org/show_bug.cgi?id=7499
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 6f 6e 4f 62 73 65 72 76 65 72 2e 5f 70 65 72 69 6f 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 28 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 50 65 72 69 6f 64 20 74 6f 20 63 68 65 63 6b 20 66 6f 72 20 6d 75 74 61 74 69 6f 6e 73 20 28 7e 33 32 20 74 69 6d 65 73 2f 73 65 63 29 0a 20 20 20 20 20 2a 20 40 74 79 70 65 20 7b 6e 75 6d 62 65 72 7d 0a 20 20 20 20 20 2a 20 40 65 78 70 6f 73 65 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 5f 70 65 72 69 6f 64 20 3d 20 33 30 20 2f 2a 6d 73 2b 72 75 6e 74 69 6d 65 2a 2f 20 3b 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 45 78 70 6f 73 65 64 20 41 50 49 0a 20 20 20 20 20 2a 20 40 65 78 70 6f 73 65 0a 20 20 20 20 20 2a 20 40 66 69 6e 61 6c Data Ascii: onObserver._period); })(); } /** * Period to check for mutations (~32 times/sec) * @type {number} * @expose / MutationObserver._period = 30 /ms+runtime/ ; /* * Exposed API * @expose * @final
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 61 72 20 77 61 74 63 68 65 64 20 3d 20 74 68 69 73 2e 5f 77 61 74 63 68 65 64 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 6d 6f 76 65 20 61 6c 72 65 61 64 79 20 6f 62 73 65 72 76 65 64 20 74 61 72 67 65 74 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 70 6f 6f 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 77 61 74 63 68 65 64 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 77 61 74 63 68 65 64 5b 69 5d 2e 74 61 72 20 3d 3d 3d 20 24 74 61 72 67 65 74 29 20 77 61 74 63 68 65 64 2e 73 70 6c 69 63 65 28 69 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 66 69 67 Data Ascii: ar watched = this._watched; // remove already observed target element from pool for (var i = 0; i < watched.length; i++) { if (watched[i].tar === $target) watched.splice(i, 1); } if (config
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 70 6f 73 65 0a 20 20 20 20 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 64 69 73 63 6f 6e 6e 65 63 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 77 61 74 63 68 65 64 20 3d 20 5b 5d 3b 20 2f 2f 20 63 6c 65 61 72 20 74 68 65 20 73 74 75 66 66 20 62 65 69 6e 67 20 6f 62 73 65 72 76 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 29 3b 20 2f 2f 20 72 65 61 64 79 20 66 6f 72 20 67 61 72 62 61 67 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 20 Data Ascii: /** * @expose * @return undefined / disconnect: function() { this._watched = []; // clear the stuff being observed clearTimeout(this._timeout); // ready for garbage collection /*
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 74 65 20 3d 20 63 6c 6f 6e 65 28 24 74 61 72 67 65 74 2c 20 63 6f 6e 66 69 67 29 3b 20 2f 2f 20 63 72 65 61 74 65 20 74 68 65 20 63 6c 6f 6e 65 64 20 64 61 74 61 73 74 72 75 63 74 75 72 65 0a 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 63 6f 6e 73 75 6d 65 73 20 61 72 72 61 79 20 6f 66 20 6d 75 74 61 74 69 6f 6e 73 20 77 65 20 63 61 6e 20 70 75 73 68 20 74 6f 0a 20 20 20 20 20 20 20 20 20 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 41 72 72 61 79 2e 3c 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 3e 7d 20 6d 75 74 61 74 69 6f 6e 73 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: te = clone($target, config); // create the cloned datastructure /** * consumes array of mutations we can push to * * @param {Array.<MutationRecord>} mutations */ return function(mutations) {
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 20 20 20 20 20 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4e 6f 64 65 7d 20 65 6c 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 41 74 74 72 7d 20 61 74 74 72 0a 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 53 74 72 69 6e 67 7d 20 61 6e 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 41 74 74 72 69 62 75 74 65 53 69 6d 70 6c 65 28 65 6c 2c 20 61 74 74 72 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 54 68 65 72 65 20 69 73 20 61 20 70 6f 74 65 6e 74 69 61 6c 20 66 6f 72 20 61 20 77 61 72 6e 69 6e 67 20 74 6f 20 6f 63 63 75 72 20 68 65 72 65 20 69 66 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 69 73 20 61 0a 20 20 20 20 20 20 20 20 2f 2f 20 63 75 73 74 6f 6d 20 61 74 74 Data Ascii: * * @param {Node} el * @param {Attr} attr * @return {String} an attribute value */ function getAttributeSimple(el, attr) { // There is a potential for a warning to occur here if the attribute is a // custom att
2025-01-11 23:11:20 UTC	430	IN	Data Raw: 65 63 6b 65 64 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 74 74 72 69 62 75 74 65 73 20 3d 20 24 74 61 72 67 65 74 2e 61 74 74 72 69 62 75 74 65 73 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 74 74 72 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6e 61 6d 65 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 2d 2d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 20 3d 20 61 74 74 72 69 62 75 74 65 73 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 20 3d 20 61 74 74 72 2e 6e 61 6d 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 66 69 6c 74 65 72 20 7c 7c 20 68 61 73 28 66 69 6c 74 65 72 2c 20 6e 61 Data Ascii: ecked = {}; var attributes = $target.attributes; var attr; var name; var i = attributes.length; while (i--) { attr = attributes[i]; name = attr.name; if (!filter \|\| has(filter, na
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 33 63 38 37 0d 0a 6d 75 74 61 74 69 6f 6e 73 2e 70 75 73 68 28 4d 75 74 61 74 69 6f 6e 52 65 63 6f 72 64 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 22 61 74 74 72 69 62 75 74 65 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3a 20 24 74 61 72 67 65 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3a 20 6e 61 6d 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 6c 64 56 61 6c 75 65 3a 20 24 6f 6c 64 73 74 61 74 65 5b 6e 61 6d 65 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 69 62 75 74 65 4e 61 6d Data Ascii: 3c87mutations.push(MutationRecord({ type: "attributes", target: $target, attributeName: name, oldValue: $oldstate[name], attributeNam
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 20 2a 2f 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 61 72 63 68 53 75 62 74 72 65 65 28 6d 75 74 61 74 69 6f 6e 73 2c 20 24 74 61 72 67 65 74 2c 20 24 6f 6c 64 73 74 61 74 65 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 54 72 61 63 6b 20 69 66 20 74 68 65 20 74 72 65 65 20 69 73 20 64 69 72 74 79 20 61 6e 64 20 68 61 73 20 74 6f 20 62 65 20 72 65 63 6f 6d 70 75 74 65 64 20 28 23 31 34 29 2e 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 69 72 74 79 3b 0a 20 20 20 20 20 20 20 20 2f 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 48 65 6c 70 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 6e 6f 64 65 20 72 65 61 72 72 61 6e 67 6d 65 6e 74 20 61 6e 64 20 73 74 75 66 66 2e 2e 2e 0a 20 20 20 20 20 20 20 20 20 2a 20 54 68 65 72 65 20 69 73 20 6e 6f Data Ascii: / function searchSubtree(mutations, $target, $oldstate, config) { // Track if the tree is dirty and has to be recomputed (#14). var dirty; / * Helper to identify node rearrangment and stuff... * There is no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:20 UTC	547	OUT	GET /js/jquery-1.8.3.min.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:20 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93636 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 19 Dec 2024 22:52:45 GMT ETag: "6764a3bd-16dc4" Expires: Tue, 14 Jan 2025 10:31:59 GMT Cache-Control: max-age=1209600 X-Host: grn184.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:20 GMT Age: 995961 X-Served-By: cache-sjc10032-SJC, cache-nyc-kteb1890051-NYC X-Cache: HIT, HIT X-Cache-Hits: 1215, 5 X-Timer: S1736637080.217030,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: /! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 6f 3d 76 2e 5f 64 61 74 61 28 74 2c 73 29 2c 75 3d 73 2e 65 76 65 6e 74 73 3b 69 66 28 75 29 7b 64 65 6c 65 74 65 20 6f 2e 68 61 6e 64 6c 65 2c 6f 2e 65 76 65 6e 74 73 3d 7b 7d 3b 66 6f 72 28 6e 20 69 6e 20 75 29 66 6f 72 28 72 3d 30 2c 69 3d 75 5b 6e 5d 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 76 2e 65 76 65 6e 74 2e 61 64 64 28 74 2c 6e 2c 75 5b 6e 5d 5b 72 5d 29 7d 6f 2e 64 61 74 61 26 26 28 6f 2e 64 61 74 61 3d 76 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 2e 64 61 74 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 2c 74 29 7b 76 61 72 20 6e 3b 69 66 28 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 31 29 72 65 74 75 72 6e 3b 74 2e 63 6c 65 61 72 41 74 74 72 69 62 75 74 65 73 26 26 74 2e 63 6c 65 61 72 41 74 74 72 69 62 75 74 65 73 28 29 2c 74 2e 6d 65 72 Data Ascii: o=v._data(t,s),u=s.events;if(u){delete o.handle,o.events={};for(n in u)for(r=0,i=u[n].length;r<i;r++)v.event.add(t,n,u[n][r])}o.data&&(o.data=v.extend({},o.data))}function Ot(e,t){var n;if(t.nodeType!==1)return;t.clearAttributes&&t.clearAttributes(),t.mer
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 79 3d 3d 3d 22 22 26 26 47 74 28 6e 29 26 26 28 69 5b 73 5d 3d 76 2e 5f 64 61 74 61 28 6e 2c 22 6f 6c 64 64 69 73 70 6c 61 79 22 2c 6e 6e 28 6e 2e 6e 6f 64 65 4e 61 6d 65 29 29 29 29 3a 28 72 3d 44 74 28 6e 2c 22 64 69 73 70 6c 61 79 22 29 2c 21 69 5b 73 5d 26 26 72 21 3d 3d 22 6e 6f 6e 65 22 26 26 76 2e 5f 64 61 74 61 28 6e 2c 22 6f 6c 64 64 69 73 70 6c 61 79 22 2c 72 29 29 7d 66 6f 72 28 73 3d 30 3b 73 3c 6f 3b 73 2b 2b 29 7b 6e 3d 65 5b 73 5d 3b 69 66 28 21 6e 2e 73 74 79 6c 65 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 21 74 7c 7c 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 3d 3d 22 22 29 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 74 3f 69 5b 73 5d 7c 7c 22 22 3a 22 6e Data Ascii: y===""&&Gt(n)&&(i[s]=v._data(n,"olddisplay",nn(n.nodeName)))):(r=Dt(n,"display"),!i[s]&&r!=="none"&&v._data(n,"olddisplay",r))}for(s=0;s<o;s++){n=e[s];if(!n.style)continue;if(!t\|\|n.style.display==="none"\|\|n.style.display==="")n.style.display=t?i[s]\|\|"":"n
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 48 74 2e 63 6c 6f 73 65 28 29 3b 74 3d 48 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 48 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 29 2c 6e 3d 44 74 28 74 2c 22 64 69 73 70 6c 61 79 22 29 2c 69 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 50 74 29 7d 72 65 74 75 72 6e 20 57 74 5b 65 5d 3d 6e 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 66 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3b 69 66 28 76 2e 69 73 41 72 72 61 79 28 74 29 29 76 2e 65 61 63 68 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 6e 7c 7c 73 6e 2e 74 65 73 74 28 65 29 3f 72 28 65 2c 69 29 3a 66 6e 28 65 2b 22 5b 22 2b 28 74 79 70 65 6f 66 20 69 3d 3d 22 6f 62 6a 65 63 74 22 3f 74 3a 22 22 29 2b 22 5d 22 2c 69 2c 6e 2c 72 Data Ascii: ml><body>"),Ht.close();t=Ht.body.appendChild(Ht.createElement(e)),n=Dt(t,"display"),i.body.removeChild(Pt)}return Wt[e]=n,n}function fn(e,t,n,r){var i;if(v.isArray(t))v.each(t,function(t,i){n\|\|sn.test(e)?r(e,i):fn(e+"["+(typeof i=="object"?t:"")+"]",i,n,r
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 73 2c 6f 3d 65 2e 64 61 74 61 54 79 70 65 73 2e 73 6c 69 63 65 28 29 2c 75 3d 6f 5b 30 5d 2c 61 3d 7b 7d 2c 66 3d 30 3b 65 2e 64 61 74 61 46 69 6c 74 65 72 26 26 28 74 3d 65 2e 64 61 74 61 46 69 6c 74 65 72 28 74 2c 65 2e 64 61 74 61 54 79 70 65 29 29 3b 69 66 28 6f 5b 31 5d 29 66 6f 72 28 6e 20 69 6e 20 65 2e 63 6f 6e 76 65 72 74 65 72 73 29 61 5b 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 6e 5d 3b 66 6f 72 28 3b 69 3d 6f 5b 2b 2b 66 5d 3b 29 69 66 28 69 21 3d 3d 22 2a 22 29 7b 69 66 28 75 21 3d 3d 22 2a 22 26 26 75 21 3d 3d 69 29 7b 6e 3d 61 5b 75 2b 22 20 22 2b 69 5d 7c 7c 61 5b 22 2a 20 22 2b 69 5d 3b 69 66 28 21 6e 29 66 6f 72 28 72 20 69 6e 20 61 29 7b 73 3d Data Ascii: e,t){var n,r,i,s,o=e.dataTypes.slice(),u=o[0],a={},f=0;e.dataFilter&&(t=e.dataFilter(t,e.dataType));if(o[1])for(n in e.converters)a[n.toLowerCase()]=e.converters[n];for(;i=o[++f];)if(i!==""){if(u!==""&&u!==i){n=a[u+" "+i]\|\|a["* "+i];if(!n)for(r in a){s=
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 69 3d 76 2e 54 77 65 65 6e 28 65 2c 66 2e 6f 70 74 73 2c 74 2c 6e 2c 66 2e 6f 70 74 73 2e 73 70 65 63 69 61 6c 45 61 73 69 6e 67 5b 74 5d 7c 7c 66 2e 6f 70 74 73 2e 65 61 73 69 6e 67 29 3b 72 65 74 75 72 6e 20 66 2e 74 77 65 65 6e 73 2e 70 75 73 68 28 69 29 2c 69 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 30 2c 72 3d 74 3f 66 2e 74 77 65 65 6e 73 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 3b 6e 3c 72 3b 6e 2b 2b 29 66 2e 74 77 65 65 6e 73 5b 6e 5d 2e 72 75 6e 28 31 29 3b 72 65 74 75 72 6e 20 74 3f 75 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 65 2c 5b 66 2c 74 5d 29 3a 75 2e 72 65 6a 65 63 74 57 69 74 68 28 65 2c 5b 66 2c 74 5d 29 2c 74 68 69 73 7d 7d 29 2c 6c 3d 66 2e 70 72 6f 70 73 3b 51 6e 28 6c 2c 66 2e 6f 70 74 73 2e 73 70 Data Ascii: i=v.Tween(e,f.opts,t,n,f.opts.specialEasing[t]\|\|f.opts.easing);return f.tweens.push(i),i},stop:function(t){var n=0,r=t?f.tweens.length:0;for(;n<r;n++)f.tweens[n].run(1);return t?u.resolveWith(e,[f,t]):u.rejectWith(e,[f,t]),this}}),l=f.props;Qn(l,f.opts.sp
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 6c 6f 77 26 26 28 70 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 76 2e 73 75 70 70 6f 72 74 2e 73 68 72 69 6e 6b 57 72 61 70 42 6c 6f 63 6b 73 7c 7c 68 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 6f 76 65 72 66 6c 6f 77 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 30 5d 2c 70 2e 6f 76 65 72 66 6c 6f 77 58 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 31 5d 2c 70 2e 6f 76 65 72 66 6c 6f 77 59 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 32 5d 7d 29 29 3b 66 6f 72 28 72 20 69 6e 20 74 29 7b 73 3d 74 5b 72 5d 3b 69 66 28 55 6e 2e 65 78 65 63 28 73 29 29 7b 64 65 6c 65 74 65 20 74 5b 72 5d 2c 61 3d 61 7c 7c 73 3d 3d 3d 22 74 6f 67 67 6c 65 22 3b 69 66 28 73 3d 3d 3d 28 67 3f 22 68 69 64 65 22 3a 22 73 68 6f 77 22 29 29 63 6f 6e 74 69 6e 75 65 3b 6d 2e 70 75 73 Data Ascii: low&&(p.overflow="hidden",v.support.shrinkWrapBlocks\|\|h.done(function(){p.overflow=n.overflow[0],p.overflowX=n.overflow[1],p.overflowY=n.overflow[2]}));for(r in t){s=t[r];if(Un.exec(s)){delete t[r],a=a\|\|s==="toggle";if(s===(g?"hide":"show"))continue;m.pus
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 2f 5c 31 3e 7c 29 24 2f 2c 53 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 5d 2a 24 2f 2c 78 3d 2f 28 3f 3a 5e 7c 3a 7c 2c 29 28 3f 3a 5c 73 2a 5c 5b 29 2b 2f 67 2c 54 3d 2f 5c 5c 28 3f 3a 5b 22 5c 5c 5c 2f 62 66 6e 72 74 5d 7c 75 5b 5c 64 61 2d 66 41 2d 46 5d 7b 34 7d 29 2f 67 2c 4e 3d 2f 22 5b 5e 22 5c 5c 5c 72 5c 6e 5d 2a 22 7c 74 72 75 65 7c 66 61 6c 73 65 7c 6e 75 6c 6c 7c 2d 3f 28 3f 3a 5c 64 5c 64 2a 5c 2e 7c 29 5c 64 2b 28 3f 3a 5b 65 45 5d 5b 5c 2d 2b 5d 3f 5c 64 2b 7c 29 2f 67 2c 43 3d 2f 5e 2d 6d 73 2d 2f 2c 6b 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 22 22 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 61 64 64 45 76 65 6e Data Ascii: /\1>\|)$/,S=/^[\],:{}\s]$/,x=/(?:^\|:\|,)(?:\s\[)+/g,T=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,N=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d\d\.\|)\d+(?:[eE][\-+]?\d+\|)/g,C=/^-ms-/,k=/-([\da-z])/gi,L=function(e,t){return(t+"").toUpperCase()},A=function(){i.addEven
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 76 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 72 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 72 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 74 3d 3d 3d 22 66 69 6e 64 22 3f 72 2e 73 65 6c 65 63 74 6f 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3f 22 20 22 3a 22 22 29 2b 6e 3a 74 26 26 28 72 2e 73 65 6c 65 63 74 6f 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 22 2e 22 2b 74 2b 22 28 22 2b 6e 2b 22 29 22 29 2c 72 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 74 68 69 73 2c Data Ascii: hStack:function(e,t,n){var r=v.merge(this.constructor(),e);return r.prevObject=this,r.context=this.context,t==="find"?r.selector=this.selector+(this.selector?" ":"")+n:t&&(r.selector=this.selector+"."+t+"("+n+")"),r},each:function(e,t){return v.each(this,
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 28 21 30 29 7d 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 3d 21 30 3f 2d 2d 76 2e 72 65 61 64 79 57 61 69 74 3a 76 2e 69 73 52 65 61 64 79 29 72 65 74 75 72 6e 3b 69 66 28 21 69 2e 62 6f 64 79 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 76 2e 72 65 61 64 79 2c 31 29 3b 76 2e 69 73 52 65 61 64 79 3d 21 30 3b 69 66 28 65 21 3d 3d 21 30 26 26 2d 2d 76 2e 72 65 61 64 79 57 61 69 74 3e 30 29 72 65 74 75 72 6e 3b 72 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 69 2c 5b 76 5d 29 2c 76 2e 66 6e 2e 74 72 69 67 67 65 72 26 26 76 28 69 29 2e 74 72 69 67 67 65 72 28 22 72 65 61 64 79 22 29 2e 6f 66 66 28 22 72 65 61 64 79 22 29 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 2e Data Ascii: (!0)},ready:function(e){if(e===!0?--v.readyWait:v.isReady)return;if(!i.body)return setTimeout(v.ready,1);v.isReady=!0;if(e!==!0&&--v.readyWait>0)return;r.resolveWith(i,[v]),v.fn.trigger&&v(i).trigger("ready").off("ready")},isFunction:function(e){return v.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:20 UTC	564	OUT	GET /js/lang/en/stl.js?buildTime=1736370530& HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:20 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 188909 Server: nginx Content-Type: application/javascript Last-Modified: Wed, 08 Jan 2025 20:09:36 GMT ETag: "677edb80-2e1ed" Expires: Wed, 22 Jan 2025 21:10:39 GMT Cache-Control: max-age=1209600 X-Host: grn139.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 266441 Date: Sat, 11 Jan 2025 23:11:20 GMT X-Served-By: cache-sjc1000104-SJC, cache-ewr-kewr1740072-EWR X-Cache: HIT, HIT X-Cache-Hits: 41, 0 X-Timer: S1736637080.255816,VS0,VE2 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 0a 77 69 6e 64 6f 77 2e 5f 57 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 5f 57 2e 67 65 74 53 69 74 65 4c 61 6e 67 75 61 67 65 55 52 4c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6c 61 6e 67 29 7b 0a 09 72 65 74 75 72 6e 20 27 2f 2f 61 73 73 65 74 73 2d 73 74 61 67 69 6e 67 2e 77 65 65 62 6c 79 2e 6e 65 74 2f 6a 73 2f 6c 61 6e 67 2f 25 6c 61 6e 67 25 2f 73 74 6c 2e 6a 73 3f 62 75 69 6c 64 54 69 6d 65 3d 31 32 33 34 26 27 2e 72 65 70 6c 61 63 65 28 27 25 6c 61 6e 67 25 27 2c 20 6c 61 6e 67 29 3b 0a 7d 0a 5f 57 2e 74 6c 69 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 73 3b 7d 0a 5f 57 2e 73 69 74 65 4c 61 6e 67 20 3d 20 27 65 6e 27 3b 0a 5f 57 2e 66 74 6c 3d 5f 57 2e 73 74 Data Ascii: window._W = window.Weebly = window.Weebly \|\| {};_W.getSiteLanguageURL = function(lang){return '//assets-staging.weebly.net/js/lang/%lang%/stl.js?buildTime=1234&'.replace('%lang%', lang);}_W.tli=function(s){return s;}_W.siteLang = 'en';_W.ftl=_W.st
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 5c 22 42 61 64 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 33 5f 73 74 61 72 5c 22 3a 5c 22 4d 65 64 69 6f 63 72 65 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 34 5f 73 74 61 72 5c 22 3a 5c 22 47 6f 6f 64 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 35 5f 73 74 61 72 5c 22 3a 5c 22 45 78 63 65 6c 6c 65 6e 74 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 6e 6f 5f 72 61 74 69 6e 67 5f 6c 61 62 65 6c 5c 22 3a 5c 22 4e 6f 20 72 61 74 69 6e 67 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 Data Ascii: \"Bad\",\"components.star_input_component.3_star\":\"Mediocre\",\"components.star_input_component.4_star\":\"Good\",\"components.star_input_component.5_star\":\"Excellent\",\"components.star_input_component.no_rating_label\":\"No rating\",\"components.sta
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 65 61 74 65 20 41 63 63 6f 75 6e 74 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 64 6f 6e 65 5c 22 3a 5c 22 44 6f 6e 65 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 6d 61 69 6c 5f 61 64 64 72 65 73 73 5c 22 3a 5c 22 45 6d 61 69 6c 20 41 64 64 72 65 73 73 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 73 2e 62 61 64 5f 65 6d 61 69 6c 5c 22 3a 5c 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 73 2e 65 6d 61 69 6c 5f 72 65 71 75 69 72 65 64 5c 22 Data Ascii: eate Account\",\"customer_accounts.common.done\":\"Done\",\"customer_accounts.common.email_address\":\"Email Address\",\"customer_accounts.common.errors.bad_email\":\"Please enter a valid email address.\",\"customer_accounts.common.errors.email_required\"
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 6f 72 64 65 72 5f 6e 75 6d 62 65 72 5c 22 3a 5c 22 4f 72 64 65 72 20 23 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 73 74 61 74 75 73 5c 22 3a 5c 22 53 74 61 74 75 73 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 74 6f 74 61 6c 5c 22 3a 5c 22 54 6f 74 61 6c 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 64 65 66 61 75 6c 74 5f 74 Data Ascii: \"customer_accounts.order_history.column_heading_order_number\":\"Order #\",\"customer_accounts.order_history.column_heading_status\":\"Status\",\"customer_accounts.order_history.column_heading_total\":\"Total\",\"customer_accounts.order_history.default_t
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 72 65 64 65 65 6d 65 64 5c 22 3a 5c 22 52 65 64 65 65 6d 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 72 65 66 75 6e 64 65 64 5c 22 3a 5c 22 52 65 66 75 6e 64 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 73 65 6e 74 5c 22 3a 5c 22 53 65 6e 74 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 73 68 69 70 70 65 64 5c 22 3a 5c 22 53 68 69 70 70 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f Data Ascii: omer_accounts.order_history.status_redeemed\":\"Redeemed\",\"customer_accounts.order_history.status_refunded\":\"Refunded\",\"customer_accounts.order_history.status_sent\":\"Sent\",\"customer_accounts.order_history.status_shipped\":\"Shipped\",\"customer_
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 72 64 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 72 65 73 65 74 5f 70 61 73 73 77 6f 72 64 2e 72 65 73 65 74 5f 62 75 74 74 6f 6e 5c 22 3a 5c 22 52 65 73 65 74 20 50 61 73 73 77 6f 72 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 65 5f 70 61 73 73 77 6f 72 64 2e 68 65 61 64 65 72 5f 74 65 78 74 5c 22 3a 5c 22 55 70 64 61 74 65 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 65 5f 70 61 73 73 77 6f 72 64 2e 69 6e 73 74 72 75 63 74 69 6f 6e 5c 22 3a 5c 22 45 6e 74 65 72 20 79 6f 75 72 20 6e 65 77 20 70 61 73 73 77 6f 72 64 20 62 65 6c 6f 77 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 Data Ascii: rd.\",\"customer_accounts.reset_password.reset_button\":\"Reset Password\",\"customer_accounts.update_password.header_text\":\"Update password\",\"customer_accounts.update_password.instruction\":\"Enter your new password below.\",\"customer_accounts.updat
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 73 61 6e 74 20 64 6f 6c 6f 72 65 6d 71 75 65 20 6c 61 75 64 61 6e 74 69 75 6d 2c 20 74 6f 74 61 6d 20 72 65 6d 2e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 31 37 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 5c 5c 5c 22 3e 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 35 5c 5c 5c 22 3e 53 6b 69 6c 6c 20 54 77 6f 3c 5c 5c 2f 66 6f 6e 74 3e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 31 38 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 5c 5c 5c 22 3e 53 65 64 20 75 74 20 70 65 72 73 70 69 63 69 61 74 69 73 20 75 6e 64 65 20 6f Data Ascii: sant doloremque laudantium, totam rem.<\\/span>\",\"db.PageLayoutElements.1517\":\"<span style=\\\"font-weight: normal;\\\"><font size=\\\"5\\\">Skill Two<\\/font><\\/span>\",\"db.PageLayoutElements.1518\":\"<span style=\\\"\\\">Sed ut perspiciatis unde o
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 6e 6f 72 6d 61 6c 3b 5c 5c 5c 22 3e 52 65 73 70 6f 6e 73 69 76 65 20 26 61 6d 70 3b 20 49 6e 74 65 72 61 63 74 69 76 65 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 33 34 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 5c 5c 5c 22 3e 4c 6f 72 65 6d 20 69 70 73 75 6d 20 64 6f 6c 6f 72 20 73 69 74 20 61 6d 65 74 2c 20 63 6f 6e 73 65 63 74 65 74 75 72 20 61 64 69 70 69 73 63 69 6e 67 20 65 6c 69 74 2c 20 73 65 64 20 64 6f 20 65 69 75 73 6d 6f 64 20 74 65 6d 70 6f 72 20 69 6e 63 69 64 69 64 75 6e 74 20 75 74 20 6c 61 62 6f 72 65 20 65 74 20 64 6f 6c 6f 72 65 20 6d 61 67 6e 61 20 61 6c 69 71 75 61 2e 20 55 74 20 65 6e 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 Data Ascii: normal;\\\">Responsive & Interactive<\\/font>\",\"db.PageLayoutElements.1534\":\"<span style=\\\"\\\">Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam,
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 71 75 69 73 20 6e 6f 73 74 72 75 64 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 75 6c 6c 61 6d 63 6f 20 6c 61 62 6f 72 69 73 20 6e 69 73 69 2e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 35 30 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 53 65 65 20 53 6f 6d 65 20 45 78 61 6d 70 6c 65 73 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 35 37 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 53 65 72 76 69 63 65 73 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d Data Ascii: im ad minim veniam, quis nostrud exercitation ullamco laboris nisi.<\\/span>\",\"db.PageLayoutElements.1550\":\"<font size=\\\"6\\\">See Some Examples<\\/font>\",\"db.PageLayoutElements.1557\":\"<font size=\\\"6\\\">Services<\\/font>\",\"db.PageLayoutElem
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 75 72 20 61 64 69 70 69 73 69 63 69 6e 67 20 65 6c 69 74 2c 20 73 65 64 20 64 6f 20 65 69 75 73 6d 6f 64 20 74 65 6d 70 6f 72 20 69 6e 63 69 64 69 64 75 6e 74 20 75 74 20 6c 61 62 6f 72 65 20 65 74 20 64 6f 6c 6f 72 65 20 6d 61 67 6e 61 20 61 6c 69 71 75 61 2e 20 55 74 20 65 6e 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 71 75 69 73 20 6e 6f 73 74 72 75 64 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 75 6c 6c 61 6d 63 6f 20 6c 61 62 6f 72 69 73 20 6e 69 73 69 2e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 37 37 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 45 76 65 6e 74 20 48 65 61 64 6c 69 6e 65 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 Data Ascii: ur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi.\",\"db.PageLayoutElements.1577\":\"<font size=\\\"6\\\">Event Headline<\\/font>\",\"db.PageLay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:20 UTC	561	OUT	GET /js/site/main.js?buildTime=1736370530 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:20 UTC	663	IN	HTTP/1.1 200 OK Connection: close Content-Length: 480909 Server: nginx Content-Type: application/javascript Last-Modified: Wed, 08 Jan 2025 20:11:36 GMT ETag: "677edbf8-7568d" Expires: Wed, 22 Jan 2025 21:10:39 GMT Cache-Control: max-age=1209600 X-Host: blu95.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 266441 Date: Sat, 11 Jan 2025 23:11:20 GMT X-Served-By: cache-sjc10023-SJC, cache-nyc-kteb1890065-NYC X-Cache: HIT, HIT X-Cache-Hits: 41, 0 X-Timer: S1736637080.257421,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 5b 22 70 75 62 6c 69 73 68 65 64 57 42 4a 50 22 5d 3b 77 69 6e 64 6f 77 5b 22 70 75 62 6c 69 73 68 65 64 57 42 4a 50 22 5d 3d 66 75 6e 63 74 69 6f 6e 20 6f 28 73 2c 61 29 7b 76 61 72 20 6c 2c 75 2c 63 3d 30 2c 64 3d 5b 5d 3b 66 6f 72 28 3b 63 3c 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 75 3d 73 5b 63 5d 3b 69 66 28 6e 5b 75 5d 29 64 2e 70 75 73 68 2e 61 70 70 6c 79 28 64 2c 6e 5b 75 5d 29 3b 6e 5b 75 5d 3d 30 7d 66 6f 72 28 6c 20 69 6e 20 61 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6c 29 29 7b 65 5b 6c 5d 3d 61 5b 6c 5d 7d 7d 69 66 28 74 29 74 28 73 2c 61 29 3b 77 68 69 6c 65 28 64 2e 6c 65 Data Ascii: (function(e){var t=window["publishedWBJP"];window["publishedWBJP"]=function o(s,a){var l,u,c=0,d=[];for(;c<s.length;c++){u=s[c];if(n[u])d.push.apply(d,n[u]);n[u]=0}for(l in a){if(Object.prototype.hasOwnProperty.call(a,l)){e[l]=a[l]}}if(t)t(s,a);while(d.le
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 64 6f 77 2e 57 65 65 62 6c 79 3d 77 69 6e 64 6f 77 2e 5f 57 3d 77 69 6e 64 6f 77 2e 5f 57 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 75 74 6c 3d 77 69 6e 64 6f 77 2e 5f 57 2e 75 74 6c 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 66 74 6c 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 74 6c 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 46 74 6c 73 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 46 74 6c 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 57 2e Data Ascii: dow.Weebly=window._W=window._W\|\|{};window._W.utl=window._W.utl\|\|function(e){window._W.failedTls=window._W.failedTls\|\|[];window._W.failedTls.push(e);return e};window._W.ftl=window._W.ftl\|\|function(e){window._W.failedFtls=window._W.failedFtls\|\|[];window._W.
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 2c 72 3b 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 29 7b 69 66 28 74 72 75 65 29 7b 21 28 6e 3d 5b 69 28 33 29 2c 69 28 31 29 2c 74 5d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6f 2e 42 61 63 6b 62 6f 6e 65 3d 73 28 6f 2c 69 2c 65 2c 74 29 7d 2e 61 70 70 6c 79 28 74 2c 6e 29 2c 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 65 2e 65 78 70 6f 72 74 73 3d 72 29 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 76 61 72 20 61 3d 72 65 71 75 69 72 65 28 22 75 6e 64 65 72 73 63 6f 72 65 22 29 3b 73 28 6f 2c 74 2c 61 29 7d 65 6c 73 65 7b 6f 2e 42 61 63 6b 62 6f 6e 65 3d 73 28 6f 2c 7b 7d 2c 6f 2e 5f 2c 6f 2e 6a 51 75 65 72 79 7c 7c Data Ascii: :function(e,t,i){var n,r;(function(o,s){if(true){!(n=[i(3),i(1),t],r=function(e,t,i){o.Backbone=s(o,i,e,t)}.apply(t,n),r!==undefined&&(e.exports=r))}else if(typeof t!=="undefined"){var a=require("underscore");s(o,t,a)}else{o.Backbone=s(o,{},o._,o.jQuery\|\|
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 65 72 22 2c 65 2c 74 29 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 61 6c 6c 3b 69 66 28 69 29 66 28 69 2c 74 29 3b 69 66 28 6e 29 66 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 73 74 6f 70 4c 69 73 74 65 6e 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 69 6e 67 54 6f 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 6f 3d 21 74 26 26 21 6e 3b 69 66 28 21 6e 26 26 74 79 70 65 6f 66 20 74 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 6e 3d 74 68 69 73 3b 69 66 28 65 29 28 72 3d 7b 7d 29 5b 65 2e 5f 6c 69 73 74 65 6e 49 64 5d 3d Data Ascii: er",e,t))return this;var i=this._events[e];var n=this._events.all;if(i)f(i,t);if(n)f(n,arguments);return this},stopListening:function(e,t,n){var r=this._listeningTo;if(!r)return this;var o=!t&&!n;if(!n&&typeof t==="object")n=this;if(e)(r={})[e._listenId]=
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 61 74 74 72 69 62 75 74 65 73 3d 7b 7d 3b 69 66 28 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 3d 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 3b 69 66 28 74 2e 70 61 72 73 65 29 6e 3d 74 68 69 73 2e 70 61 72 73 65 28 6e 2c 74 29 7c 7c 7b 7d 3b 6e 3d 69 2e 64 65 66 61 75 6c 74 73 28 7b 7d 2c 6e 2c 69 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 64 65 66 61 75 6c 74 73 22 29 29 3b 74 68 69 73 2e 73 65 74 28 6e 2c 74 29 3b 74 68 69 73 2e 63 68 61 6e 67 65 64 3d 7b 7d 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 69 2e 65 78 74 65 6e 64 28 70 2e 70 72 6f 74 6f 74 79 70 65 2c 75 2c 7b 63 68 61 6e 67 65 64 3a 6e 75 6c 6c 2c 76 61 6c 69 64 61 74 69 6f 6e 45 72 Data Ascii: attributes={};if(t.collection)this.collection=t.collection;if(t.parse)n=this.parse(n,t)\|\|{};n=i.defaults({},n,i.result(this,"defaults"));this.set(n,t);this.changed={};this.initialize.apply(this,arguments)};i.extend(p.prototype,u,{changed:null,validationEr
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 65 2c 76 6f 69 64 20 30 2c 69 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 2c 7b 75 6e 73 65 74 3a 74 72 75 65 7d 29 29 7d 2c 63 6c 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 29 74 5b 6e 5d 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 74 2c 69 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2c 7b 75 6e 73 65 74 3a 74 72 75 65 7d 29 29 7d 2c 68 61 73 43 68 61 6e 67 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 69 2e 69 73 45 6d 70 74 79 28 74 68 69 73 2e 63 68 61 6e 67 65 64 29 3b 72 65 74 75 72 6e 20 69 2e 68 61 73 28 74 68 69 73 2e 63 68 61 Data Ascii: turn this.set(e,void 0,i.extend({},t,{unset:true}))},clear:function(e){var t={};for(var n in this.attributes)t[n]=void 0;return this.set(t,i.extend({},e,{unset:true}))},hasChanged:function(e){if(e==null)return!i.isEmpty(this.changed);return i.has(this.cha
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 72 6e 20 66 61 6c 73 65 7d 69 66 28 75 29 75 28 6c 2c 65 2c 6e 29 3b 6c 2e 74 72 69 67 67 65 72 28 22 73 79 6e 63 22 2c 6c 2c 65 2c 6e 29 7d 3b 4f 28 74 68 69 73 2c 6e 29 3b 6f 3d 74 68 69 73 2e 69 73 4e 65 77 28 29 3f 22 63 72 65 61 74 65 22 3a 6e 2e 70 61 74 63 68 3f 22 70 61 74 63 68 22 3a 22 75 70 64 61 74 65 22 3b 69 66 28 6f 3d 3d 3d 22 70 61 74 63 68 22 29 6e 2e 61 74 74 72 73 3d 72 3b 73 3d 74 68 69 73 2e 73 79 6e 63 28 6f 2c 74 68 69 73 2c 6e 29 3b 69 66 28 72 26 26 6e 2e 77 61 69 74 29 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 3d 61 3b 72 65 74 75 72 6e 20 73 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 3f 69 2e 63 6c 6f 6e 65 28 65 29 3a 7b 7d 3b 76 61 72 20 74 3d 74 68 69 73 3b 76 61 72 20 6e 3d 65 2e 73 75 63 Data Ascii: rn false}if(u)u(l,e,n);l.trigger("sync",l,e,n)};O(this,n);o=this.isNew()?"create":n.patch?"patch":"update";if(o==="patch")n.attrs=r;s=this.sync(o,this,n);if(r&&n.wait)this.attributes=a;return s},destroy:function(e){e=e?i.clone(e):{};var t=this;var n=e.suc
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 28 65 2c 74 29 7b 74 7c 7c 28 74 3d 7b 7d 29 3b 69 66 28 74 2e 6d 6f 64 65 6c 29 74 68 69 73 2e 6d 6f 64 65 6c 3d 74 2e 6d 6f 64 65 6c 3b 69 66 28 74 2e 63 6f 6d 70 61 72 61 74 6f 72 21 3d 3d 76 6f 69 64 20 30 29 74 68 69 73 2e 63 6f 6d 70 61 72 61 74 6f 72 3d 74 2e 63 6f 6d 70 61 72 61 74 6f 72 3b 74 68 69 73 2e 5f 72 65 73 65 74 28 29 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 65 29 74 68 69 73 2e 72 65 73 65 74 28 65 2c 69 2e 65 78 74 65 6e 64 28 7b 73 69 6c 65 6e 74 3a 74 72 75 65 7d 2c 74 29 29 7d 3b 76 61 72 20 67 3d 7b 61 64 64 3a 74 72 75 65 2c 72 65 6d 6f 76 65 3a 74 72 75 65 2c 6d 65 72 67 65 3a 74 72 75 65 7d 3b 76 61 72 20 79 3d 7b 61 64 64 3a 74 72 75 65 2c 72 Data Ascii: (e,t){t\|\|(t={});if(t.model)this.model=t.model;if(t.comparator!==void 0)this.comparator=t.comparator;this._reset();this.initialize.apply(this,arguments);if(e)this.reset(e,i.extend({silent:true},t))};var g={add:true,remove:true,merge:true};var y={add:true,r
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 6c 3d 75 2e 70 61 72 73 65 28 6c 2c 74 29 3b 75 2e 73 65 74 28 6c 2c 74 29 3b 69 66 28 68 26 26 21 63 26 26 75 2e 68 61 73 43 68 61 6e 67 65 64 28 6d 29 29 63 3d 74 72 75 65 7d 65 5b 72 5d 3d 75 7d 65 6c 73 65 20 69 66 28 77 29 7b 61 3d 65 5b 72 5d 3d 74 68 69 73 2e 5f 70 72 65 70 61 72 65 4d 6f 64 65 6c 28 6c 2c 74 29 3b 69 66 28 21 61 29 63 6f 6e 74 69 6e 75 65 3b 76 2e 70 75 73 68 28 61 29 3b 74 68 69 73 2e 5f 61 64 64 52 65 66 65 72 65 6e 63 65 28 61 2c 74 29 7d 61 3d 75 7c 7c 61 3b 69 66 28 5f 26 26 28 61 2e 69 73 4e 65 77 28 29 7c 7c 21 62 5b 61 2e 69 64 5d 29 29 5f 2e 70 75 73 68 28 61 29 3b 62 5b 61 2e 69 64 5d 3d 74 72 75 65 7d 69 66 28 53 29 7b 66 6f 72 28 72 3d 30 2c 6f 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 2b 2b 72 29 7b 69 66 28 Data Ascii: l=u.parse(l,t);u.set(l,t);if(h&&!c&&u.hasChanged(m))c=true}e[r]=u}else if(w){a=e[r]=this._prepareModel(l,t);if(!a)continue;v.push(a);this._addReference(a,t)}a=u\|\|a;if(_&&(a.isNew()\|\|!b[a.id]))_.push(a);b[a.id]=true}if(S){for(r=0,o=this.length;r<o;++r){if(
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 64 5d 7d 2c 61 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 65 6c 73 5b 65 5d 7d 2c 77 68 65 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 69 2e 69 73 45 6d 70 74 79 28 65 29 29 72 65 74 75 72 6e 20 74 3f 76 6f 69 64 20 30 3a 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 74 3f 22 66 69 6e 64 22 3a 22 66 69 6c 74 65 72 22 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 7b 69 66 28 65 5b 69 5d 21 3d 3d 74 2e 67 65 74 28 69 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 74 72 75 65 7d 29 7d 2c 66 69 6e 64 57 68 65 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 68 65 72 65 28 65 2c 74 72 75 65 29 7d 2c 73 6f 72 Data Ascii: d]},at:function(e){return this.models[e]},where:function(e,t){if(i.isEmpty(e))return t?void 0:[];return this[t?"find":"filter"](function(t){for(var i in e){if(e[i]!==t.get(i))return false}return true})},findWhere:function(e){return this.where(e,true)},sor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:20 UTC	576	OUT	GET /files/templateArtifacts.js?1736414015 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:20 UTC	438	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:20 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895d85c768cc0-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: blu183.sf2p.intern.weebly.net Server: cloudflare
2025-01-11 23:11:20 UTC	931	IN	Data Raw: 31 62 66 38 0d 0a 2f 2f 20 47 65 74 73 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 5f 57 0a 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 57 65 65 62 6c 79 2e 74 65 6d 70 6c 61 74 65 73 20 3d 20 7b 0a 09 09 27 73 65 61 72 63 68 2f 66 69 6c 74 65 72 2f 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 20 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 66 61 63 65 74 5f 6e 61 6d 65 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 7b 7b 63 6f 6c 75 6d 6e 5f 6e 61 6d 65 7d 7d 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 Data Ascii: 1bf8// Gets converted to _WWeebly = window.Weebly \|\| {};Weebly.templates = {'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul clas
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 6e 61 6d 65 3d 5c 22 7b 7b 66 69 6c 74 65 72 5f 74 65 78 74 7d 7d 5c 22 20 76 61 6c 75 65 3d 5c 22 31 5c 22 20 5c 2f 3e 3c 21 2d 2d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 7b 7b 21 20 43 6f 6d 6d 65 6e 74 69 6e 67 20 27 68 61 63 6b 27 20 74 6f 20 72 65 6d 6f 76 65 20 73 70 61 63 65 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 2d 2d 3e 3c 61 3e 20 7b 7b 21 20 54 68 65 73 65 20 61 72 65 6e 27 74 20 72 65 61 6c 20 6c 69 6e 6b 73 2c 20 75 73 65 64 20 74 6f 20 75 73 65 20 74 68 65 6d 65 20 63 6f 6c 6f 72 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 Data Ascii: t\t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{filter_text}}\" value=\"1\" \/>...\n\t\t\t\t\t\t{{! Commenting 'hack' to remove spaces }}\n\t\t\t\t\t\t--><a> {{! These aren't real links, used to use theme colors }}\n\t\t\t\t\t\t
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 63 6f 72 65 2e 73 65 61 72 63 68 2e 66 69 6c 74 65 72 2e 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 61 63 65 74 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 65 6e 74 72 69 65 73 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 Data Ascii: et-availability\">\n\t<h3>{{#stl}}templates.platform.theme.core.search.filter.search-facet-availability_1{{\/stl}}<\/h3>\n\t<form name=\"availability-facet\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t<li>\n\t\t\t\t<label>\n\t\t\t\t\t<input ty
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 70 72 6f 64 75 63 74 2d 67 72 6f 75 70 7d 7d 5c 6e 7b 7b 5c 2f 68 61 73 5f 70 72 6f 64 75 63 74 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 6e 6f 72 6d 61 6c 7d 7d 5c 6e 7b 7b 5c 2f 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 6d 70 74 79 7d 7d 5c 6e 7b 7b 5c 2f 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 65 72 72 6f 72 5f 72 65 73 75 6c 74 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 72 72 6f 72 7d 7d 5c 6e 7b Data Ascii: rch\/results\/product-group}}\n{{\/has_product_results}}\n\n{{#page_results}}\n\t{{> search\/results\/normal}}\n{{\/page_results}}\n\n{{#no_results}}\n\t{{> search\/results\/empty}}\n{{\/no_results}}\n\n{{#error_result}}\n\t{{> search\/results\/error}}\n{
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 5c 22 3e 5c 6e 5c 74 5c 74 7b 7b 23 68 69 67 68 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 6c 6f 77 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 79 5f 68 74 6d 6c 7d 7d 7d 7b 7b 6c 6f 77 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 5c 2f 73 70 61 6e 3e 5c 6e 5c 74 5c 74 5c 74 20 2d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 68 69 67 68 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e Data Ascii: earch-product-price\">\n\t\t{{#high_price_number}}\n\t\t\t<span class=\"wsite-search-product-price-low\">\n\t\t\t\t{{{currency_html}}}{{low_price_number}}\n\t\t\t<\/span>\n\t\t\t -\n\t\t\t<span class=\"wsite-search-product-price-high\">\n\t\t\t\t{{{curren
2025-01-11 23:11:20 UTC	761	IN	Data Raw: 72 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 6e 6f 2d 72 65 73 75 6c 74 73 5c 22 3e 5c 6e 5c 74 3c 70 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 62 61 73 65 2e 73 65 61 72 63 68 2e 72 65 73 75 6c 74 73 2e 65 72 72 6f 72 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 70 3e 5c 6e 3c 5c 2f 6c 69 3e 5c 6e 22 2c 0a 09 09 27 73 65 61 72 63 68 2f 63 6f 72 65 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 73 74 27 3a 20 22 3c 6f 6c 20 69 64 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 61 67 65 6e 61 76 5c 22 3e 5c 6e 5c 74 7b 7b 23 70 61 67 69 6e 61 74 69 6f 6e 5f 69 74 65 6d 73 7d 7d 5c 6e 5c 74 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 70 61 67 69 6e 61 74 69 6f 6e 2d 69 74 65 6d 7d 7d 5c 6e 5c Data Ascii: ror': "<li class=\"no-results\">\n\t<p>{{#stl}}templates.platform.theme.base.search.results.error_1{{\/stl}}<\/p>\n<\/li>\n",'search/core-pagination-list': "<ol id=\"wsite-search-pagenav\">\n\t{{#pagination_items}}\n\t\t{{> search\/pagination-item}}\n\
2025-01-11 23:11:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49761	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:20 UTC	577	OUT	GET /uploads/1/5/1/8/151886692/tak_orig.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:20 UTC	913	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:20 GMT Content-Type: image/png Content-Length: 2439 Connection: close CF-Ray: 900895da393e41fe-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "6cde551752c3ddf86b64dd5c0158fd13" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Jan 2025 08:57:19 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: DO40LQRIzon6ID8W5cEdvQ1R+yVKCX9NAzOrBuSsfGVvgjE1Hdy1snZ23f2F9bLsCn3rvhKqlYERWSNGN86BuA== x-amz-replication-status: COMPLETED x-amz-request-id: XX9XS24783FTB7QB x-amz-server-side-encryption: AES256 x-amz-version-id: dahO7XMnZfaHxnaBEe8PqGJoAnPEVVM6 X-Storage-Bucket: zccfd X-Storage-Object: ccfde13123c12ce3f6bed6057742ce94960882a3c5b70c1c3b29c58cf170d748 Server: cloudflare
2025-01-11 23:11:20 UTC	456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 00 49 08 03 00 00 00 eb 3c cb 06 00 00 02 9a 50 4c 54 45 ff ff ff e1 e3 e1 1e 4e 9d 49 70 b0 90 a8 cf a9 bc da ac be db ab bd da aa bc da 45 6d ae 20 4f 9e a6 b9 d8 ed f1 f7 f0 f3 f8 b3 c3 de 24 53 a0 37 61 a8 c3 d0 e5 f1 f4 f9 e9 ee f5 93 aa d0 70 8f c1 a0 b4 d5 8f a7 ce 54 78 b4 d2 dc eb f2 f5 f9 dd e5 f0 78 95 c4 e1 e7 f2 cd d7 e9 47 6f af 6b 8a be a3 b7 d7 fb fc fd 71 8f c1 23 52 9f ca d5 e8 39 64 a9 7d 99 c7 42 6a ad b8 c7 e0 f3 f5 fa bf cc e3 28 56 a1 f4 f6 fa ce d8 e9 6f 8e c0 41 6a ac 53 78 b4 98 ae d2 82 9c c8 5c 7f b8 5b 7e b8 b4 c4 de 3e 67 ab e8 ed f5 de e5 f1 91 a8 cf da e2 ef ae bf dc 77 94 c4 7a 96 c5 21 50 9e 64 85 bb 92 aa d0 be cc e3 eb ef f6 bd cb e2 92 a9 cf 62 83 bb cf Data Ascii: PNGIHDRI<PLTENIpEm O$S7apTxxGokq#R9d}Bj(VoAjSx\[~>gwz!Pdb
2025-01-11 23:11:20 UTC	1369	IN	Data Raw: be db 8d a5 cd f9 fa fc a9 bb d9 1f 4f 9d d3 dc ec fe fe ff 96 ac d1 cb d6 e8 d7 e0 ee 35 60 a7 c7 d3 e7 8a a3 cc e5 ea f3 52 77 b4 b2 c3 de 4f 75 b3 94 ab d0 e7 ec f5 32 5e a6 9f b3 d5 83 9d c9 88 a1 cb 58 7c b6 84 9f ca 4a 71 b0 9a af d3 d6 df ed 5a 7d b7 ec f0 f7 2f 5b a4 80 9b c8 a7 ba d9 af c0 dc 2d 5a a4 b6 c5 df 43 6b ad 8b a3 cc 6d 8c bf 60 82 ba 4b 71 b1 df e6 f1 e6 ec f4 44 6c ae 66 87 bd 4c 72 b1 83 9e c9 db e3 ef 67 88 bd e3 e9 f3 ea ee f6 4d 73 b1 bf cd e3 99 ae d2 c4 d0 e5 fa fb fd ce d9 ea 26 54 a0 40 69 ac 68 88 bd 87 a1 cb b1 c2 dd 25 54 a0 6a 8a be 29 57 a2 81 9c c8 97 ad d2 e2 e8 f2 59 7d b7 9d b2 d4 b9 c8 e1 c2 cf e4 9a b0 d3 d4 dd ec e5 eb f4 c1 ce e4 89 a2 cb 27 55 a1 48 6f af bb ca e1 d1 db eb 7b 97 c5 b7 c6 df 8b a4 cd 29 73 7d ed Data Ascii: O5`RwOu2^X\|JqZ}/[-ZCkm`KqDlfLrgMs&T@ih%Tj)WY}'UHo{)s}
2025-01-11 23:11:20 UTC	614	IN	Data Raw: ec 1d 3c 5a a7 16 44 44 44 6e 11 57 95 06 95 71 65 1f 2c 5d a3 af 21 24 41 03 dc a5 5b d9 04 63 6d 80 00 bf 0a 3c 66 3d c2 1e e0 5a dd 2f a1 da f4 51 fe 00 7f e5 0f f0 18 9c 17 15 07 22 22 22 97 b8 1e 55 0a 35 41 64 28 54 ec e4 eb 08 45 f0 00 c7 e9 66 43 05 ba 04 5d 03 c0 2b c6 26 5b 80 23 cd 8c 86 0a 97 5e 01 ae ed 09 30 be 16 95 03 22 22 22 97 18 d2 79 5a 67 eb 82 76 a8 f0 ce d6 fe fc 29 ca f1 ba 0f 97 00 97 62 03 7d 0a 3a 0a 40 5e a7 15 d5 de 01 3e 66 66 6f 36 70 e3 a6 a8 8b 8e 00 47 03 f8 46 8c 5b 20 22 22 72 8b e6 b0 06 f4 78 7a 5d 6a bf fc 19 43 8e ff 92 f1 43 a2 96 a5 54 8a cf 7a 60 b0 ee 33 c0 2d 33 5e 18 b7 c5 df 5d 7c 2b 46 1d f0 9d a8 b6 94 75 62 e9 28 43 97 6e 12 30 c6 77 12 e3 7b 31 66 82 88 88 c8 2d b2 c7 fd 30 16 96 b1 9b 1f cc 46 1f 10 38 Data Ascii: <ZDDDnWqe,]!$A[cm<f=Z/Q"""U5Ad(TEfC]+&[#^0"""yZgv)b}:@^>ffo6pGF[ ""rxz]jCCTz`3-3^]\|+Fub(Cn0w{1f-0F8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49760	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:20 UTC	638	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:20 UTC	946	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9677 Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Sat, 30 Nov 2024 09:39:34 GMT Last-Modified: Tue, 12 Feb 2019 18:19:08 GMT ETag: "6e0f7ad31bf187e0d88fc5787573ba71" x-goog-generation: 1549995548326466 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 9677 Content-Type: image/png x-goog-hash: crc32c=QhrKCw== x-goog-hash: md5=bg960xvxh+DYj8V4dXO6cQ== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC7rfSYjJjRbgk0fPB7zjFo6kNVbuxYAvpy-nb9MCqp9kzVYvwU3Lb_kbd2YZsaOFbs17qa_mYGylA Server: UploadServer Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:20 GMT Via: 1.1 varnish Age: 61651 X-Served-By: cache-ewr-kewr1740045-EWR X-Cache: HIT X-Cache-Hits: 275 X-Timer: S1736637081.654646,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c7 00 00 00 61 08 03 00 00 00 55 9e 45 07 00 00 02 fd 50 4c 54 45 ff ff ff 1b 1b 1b 17 17 17 e8 e8 e9 df df df 1f 1f 1f e4 e4 e5 15 15 15 e1 e1 e1 e3 e3 e3 e5 e5 e6 22 22 22 fd fd fd 12 12 12 e7 e7 e7 f9 f9 fa ea ea ea ef e6 df 24 24 24 ee ee ee 26 26 26 fb fb fb f5 f5 f8 f1 e7 e1 ec ec ed ea eb f0 0e 0e 0e e7 e8 ee ed ed f2 da d9 e1 e0 e0 e7 dd dd e4 d7 d7 de f2 e8 e2 28 28 28 e2 e2 e9 de dd dd eb e4 dc f1 f2 f6 d1 d0 d8 e6 e6 ec f7 f7 f9 eb eb ec e9 e9 ef fb f8 f6 ed e5 dd db da da ec ec f2 d5 d4 dc e4 e4 eb f2 f3 f7 ee ee f4 d3 d2 da cf ce d5 dc db e3 dd dc dc f0 f0 f0 cc cb d3 39 39 39 9c 90 8e df df e6 d5 d4 ce bb b7 bd 7d 7d 7d ef f0 f5 d8 d8 d8 32 32 32 2f 2f 2f be bb c0 b3 ae b2 45 45 45 e6 Data Ascii: PNGIHDRaUEPLTE"""$$$&&&(((999}}}222///EEE
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: a6 98 47 f1 38 24 0f ec 71 6f af 2d 9b b5 dd 89 87 ae 5c e9 8c 05 9b e3 cb 34 e0 31 ba 3c 8a 78 10 98 96 81 f2 95 21 6a f1 ab 8b f7 a1 61 17 97 57 2e 12 4f 80 d4 81 0f 5e e0 f1 65 81 ab 5b 6f 2a ee 51 58 1d f9 1e cc bb b3 bd e9 4c 26 7b 6a f5 d3 91 91 f8 53 67 b3 f3 07 96 5b 16 88 a2 79 00 5c 1e 2c cb 40 2f e2 c0 98 7c 19 48 46 50 11 e3 11 45 c0 43 17 e0 3c 0c 64 7e bf 1a b6 96 37 5e b4 96 56 8c e1 21 09 71 e5 2b d6 07 86 bd eb ed 4d 64 6e 0d 79 eb 13 e9 74 e2 a4 d3 19 bc 8f f1 1a 63 e7 81 02 a1 18 2d ab 67 39 11 4c 0a 86 01 47 c9 43 70 e1 11 8a 44 87 1b 5d 66 12 e5 42 e5 e7 a1 52 5c 56 1d 56 8d ee 57 6c f1 56 45 89 7d 17 dd ef e3 e7 44 53 3a a3 1a 1a 1a ca 64 cf 35 07 a3 75 af f3 3d c4 0d 27 f2 3d 60 b2 04 ef c1 a0 4c e8 80 03 63 08 8f dd 13 30 bb ba 86 Data Ascii: G8$qo-\41<x!jaW.O^e[o*QXL&{jSg[y\,@/\|HFPEC<d~7^V!q+Mdnytc-g9LGCpD]fBR\VVWlVE}DS:d5u='=`Lc0
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 5c c2 a8 af 76 88 70 ad 07 10 8d c0 01 c3 47 3d 60 d4 72 5c 7f dd f5 a5 0d c7 39 1c 15 39 94 b1 85 05 e0 70 d2 16 2f 66 25 5d c9 4c 72 c9 40 eb 28 0a b0 18 6a f0 8f df 9e 7e e6 4e 18 6b 5f 7f eb 2b 05 cb da 8c ac df 4f f0 0a e1 a7 11 cc df f3 15 ba 94 70 ea c0 5c 08 b9 55 d4 54 ed 81 05 8e 54 4a d0 a1 c6 14 7f 71 08 bf 2d 80 38 da db 81 e3 62 71 5e f1 2a f9 7b e3 ab 3d 3a 87 41 97 a0 08 c6 e5 48 64 96 32 06 07 80 78 5d 3a ab 19 e3 eb e4 37 bf f6 ed b7 df 3c 7e 93 4d 0b c6 12 66 82 20 78 65 d9 af 84 bb c2 81 a4 80 11 4a 02 82 e4 66 81 43 a6 7e 42 81 64 a8 8e b6 f5 a9 14 2a b8 95 bb 5c 86 d6 67 f4 7a 38 bc f0 94 0b 28 01 a3 bd fe 62 1c 37 54 27 a6 d7 3a c7 77 27 5d 16 ca 91 d5 11 3a da e9 76 bb 0d 16 5a a7 73 81 6b 51 5e 2b 86 c1 c1 ed 7e 9b 60 ac 1d e3 31 Data Ascii: \vpG=`r\99p/f%]Lr@(j~Nk_+Op\UTTJq-8bq^{=:AHd2x]:7<~Mf xeJfC~Bd\gz8(b7T':w']:vZskQ^+~`1
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 96 38 8d 11 8c 97 33 73 10 14 36 7f 3a ac 75 84 c1 b3 6c 7e 9b d1 d8 01 35 a4 1a e7 6d 15 3d e6 d6 fa 35 22 f5 0f f5 25 10 f9 67 22 e0 90 aa 34 21 0d d2 43 a3 59 9b d8 1a 96 0c 6e cb 5a 5a c0 dd 20 87 85 76 a2 d1 a3 c5 d9 89 cd 14 24 ab 7f cc 51 8a ee 70 aa 7b 64 c4 27 39 9f 43 f9 c5 50 77 e7 41 71 f9 9a ef 72 67 f2 f2 d4 d4 f8 42 24 9c 01 0e 97 81 34 5b ad bc 93 b7 b9 b2 09 10 c6 12 37 60 7e 2b 70 e0 50 d2 b5 6c 6a 98 75 f8 bc 34 94 44 10 64 00 0a 41 c5 af aa 3b d0 f6 b9 c5 bc aa cc 01 8f 61 0f 70 80 1c cd b3 9b 8b aa 66 88 f6 e6 e0 dc dc c6 a9 5a 0d 18 aa 50 f0 89 cf b6 43 9e d9 e8 ec 4e 74 65 7b e3 51 19 bc da 52 c3 31 d0 58 27 bf a1 ae a1 ed 86 f3 39 4c 9f 5e ca 46 8a 63 c5 e5 a1 62 31 72 79 ea f6 d5 ce 21 5f c2 0d 05 04 fc 88 b3 62 4e 8c a5 23 69 97 Data Ascii: 83s6:ul~5m=5"%g"4!CYnZZ v$Qp{d'9CPwAqrgB$4[7`~+pPlju4DdA;apfZPCNte{QR1X'9L^Fcb1ry!_bN#i
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 48 3f a2 89 e3 c3 e5 ef df 1e 72 15 d9 70 15 30 e8 8d c5 a0 96 13 13 99 41 e2 31 38 11 21 50 82 5a 6f e7 38 a2 05 8f 77 ef 58 5f 5e 5e 5f 3f a7 ff d7 8f 7b ec b5 ce 2a 6b ae 4c a5 30 ba ca 5a 52 92 75 12 bd 48 53 63 de 52 66 52 ba 92 e5 58 d5 c2 c5 88 42 25 d4 69 a5 1a a3 a5 24 3f 33 17 41 97 81 23 72 14 07 30 50 b3 33 df 7f 81 38 a8 c9 54 55 ec 82 35 04 18 96 00 3b 7e 0c 9e 24 8a ee 34 e0 e7 c6 c4 81 5b 99 db e0 47 4e 6b eb fc fe 43 e0 70 3a 6d d6 3c 59 62 9a a6 ad c4 9c 1f af d3 8b 45 69 6e 73 65 4b b1 31 4f ad d7 b8 32 35 8a 78 99 4c 24 14 eb 53 34 65 96 d2 4c 63 6a aa 51 2e 15 8a 02 38 ae e6 30 c6 dd 31 63 c3 f4 e9 b7 11 07 7e f1 a8 78 6a 36 8b e1 bb 0d c2 d1 70 69 81 10 76 9f 28 3b 41 8f 1f 14 10 c1 ce 6d e7 ea cb eb 9b 9b e7 f7 1d da 01 0e bb cd da Data Ascii: H?rp0A18!PZo8wX_^^_?{*kL0ZRuHScRfRXB%i$?3A#r0P38TU5;~$4[GNkCp:m<YbEinseK1O25xL$S4eLcjQ.801c~xj6piv(;Am
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 28 2c 69 fa 16 b7 c3 ab d2 09 75 52 39 71 88 25 d7 47 76 11 07 6e 1a 12 c7 c5 cf 7c 75 25 5c 82 36 fb 39 6e 9e 39 73 fa dd 01 1c c0 00 40 6c 6c 1c ad f0 b2 2d 67 86 ee 40 82 28 9e 23 f8 ba 8a c6 a2 f8 b6 72 74 57 75 75 d5 f3 57 f6 7f b7 bb db 6e ab a8 b2 d7 e4 63 11 54 9c 68 c8 36 57 5a 68 c5 50 6d aa ac b1 78 0d e0 c8 90 a4 6a 14 e2 64 89 f4 fa ae 6f ea 76 35 16 30 7e b4 c3 8f 40 0e 7f ce 3f 7f 6f e6 6c 70 f0 a7 c2 43 80 81 75 51 2c c2 11 06 c5 9d 7b 27 24 0e 04 5c c4 11 1e 1b 34 07 33 db ad cf 59 df 8c d1 bc 79 4e df 21 3f 47 a6 49 a5 97 62 2d ba 66 9d d5 a0 47 61 c9 dc 5b bc 96 4c 91 50 a7 16 cb 0d a9 5a a9 5e 2f b9 0b 1c e8 af 28 1f ed c8 c7 67 57 b3 1c 0b fd 73 59 f2 e3 bd 99 d3 47 d5 15 9a 19 0b 8c d8 38 6a 31 c7 c1 1b 12 45 22 a4 70 e2 08 1b 03 47 Data Ascii: (,iuR9q%Gvn\|u%\69n9s@ll-g@(#rtWuuWncTh6WZhPmxjdov50~@?olpCuQ,{'$\43YyN!?GIb-fGa[LPZ^/(gWsYG8j1E"pG
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 08 de 8f c8 e3 e7 e6 60 fc 68 47 8d 6f 9f ff e3 1d 5d dd 83 83 67 aa aa 6a 6b 9d 9e 92 36 83 5c 25 4e 16 ab 0c 96 b2 16 6b b1 44 24 4c 8a 57 68 5c a5 99 94 15 2c a1 3c 77 6c da 37 98 cd b4 d6 15 a2 cb 6a 3f 1d 0d 71 1c 68 2c 71 f8 fa ab 65 2f 52 5d 71 1c a4 b0 b8 38 a4 81 f3 83 de 68 fe 4b 6e 90 c8 14 f6 de c1 35 21 70 6d 61 b0 1c 3b d7 cf 99 4f 1c ab 97 ae ca f9 f0 b3 d3 83 0c 87 b3 d6 ee 29 cb 37 a8 54 da 64 a9 24 35 b3 04 6b 3e 0a 3c 7d 91 2c 37 b6 39 32 95 e0 d0 e9 92 14 e3 ba be 29 04 47 07 e6 26 4b d7 1c 8f 1e d9 ef 86 40 d4 f4 97 51 57 b7 c3 8f 11 1c 93 29 d6 40 e0 38 98 8a 02 0b c4 72 e0 34 71 84 8d 81 23 c2 c3 70 ac c1 9f 76 34 d6 7f 3a fe f8 60 e7 e0 d6 aa 0a 8f d3 e9 ac 49 4f 91 cb b5 52 75 bc bc d8 5b d6 52 aa 11 e3 9a 56 a5 cc 4d cf 54 66 24 Data Ascii: `hGo]gjk6\%NkD$LWh\,<wl7j?qh,qe/R]q8hKn5!pma;O)7Td$5k><},792)G&K@QW)@8r4q#pv4:`IORu[RVMTf$
2025-01-11 23:11:20 UTC	31	IN	Data Raw: 6f 20 26 61 22 3a ee 89 0c c7 3f 55 ac 27 d4 6f 18 be 59 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: o &a":?U'oYIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:20 UTC	579	OUT	GET /uploads/1/5/1/8/151886692/tannn_orig.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:21 UTC	902	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:20 GMT Content-Type: image/png Content-Length: 60600 Connection: close CF-Ray: 900895db4d6042c3-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "4dc4af4ca3295f7adfb222c89a658447" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Jan 2025 08:57:34 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: qsphZNO8+UOJi3xd/AR26UJTAQG8hmDHFAZRd0YSdT8CHLlOYhJ19wHRIqBFZlSOKDklHYKvG0s= x-amz-replication-status: COMPLETED x-amz-request-id: M6H5GNP24KG1WZ6Q x-amz-server-side-encryption: AES256 x-amz-version-id: VKZ8LzRQ8QY2FHGQLyH06XM5rnzvclrN X-Storage-Bucket: zff95 X-Storage-Object: ff95d27d18d5aae72e8665328841f3a07bebd9ca093d3ce03b5b33738d09171c Server: cloudflare
2025-01-11 23:11:21 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 92 00 00 01 d7 08 06 00 00 00 0f f5 ba 24 00 00 ec 7f 49 44 41 54 78 da ec 9c e1 4b db 5a 18 87 f7 ef 86 42 90 03 12 84 20 04 59 18 3a b0 0c 23 84 31 91 39 58 fa 61 d0 30 46 c7 fc 60 2e ac fb 90 72 11 8c 1f 2a 5c 45 22 52 90 80 84 42 90 40 f9 5d 6c e3 4e af 59 93 de a6 95 b9 fe 1e 28 08 a6 49 ce fb be e7 9c 27 27 69 5e 80 10 42 08 21 84 90 19 a0 48 12 42 08 21 84 10 8a 24 21 84 10 42 08 a1 48 12 42 08 21 84 10 8a 24 21 84 10 42 08 a1 48 12 42 08 21 84 10 42 91 24 84 10 42 08 21 14 49 42 08 21 84 10 42 91 24 84 10 42 08 21 14 49 42 08 21 84 10 42 91 24 84 10 42 08 21 84 22 49 08 21 84 10 42 28 92 e4 c9 e8 58 50 14 05 8a a2 c3 bd 06 21 84 3c c2 87 35 1c 23 14 58 1d e4 f0 77 47 ff 53 76 7d fc d6 5c bb Data Ascii: PNGIHDR$IDATxKZB Y:#19Xa0F`.r*\E"RB@]lNY(I''i^B!HB!$!BHB!$!BHB!B$B!IB!B$B!IB!B$B!"I!B(XP!<5#XwGSv}\
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 95 3a bc db 5f 6d 93 20 5d bc 48 3e 4d 3b 9e b3 48 d6 b2 58 ad ec 21 18 cc 78 fe b5 9c 48 3e 8f 67 24 a3 2e 5a 8d 3a 8c 55 13 ee 35 45 92 22 49 0a 07 5b bd 49 91 24 84 3c f9 4a 65 75 b9 a8 2e 92 8b 6f c7 73 16 49 4d 87 be 32 3a 4e fd af 04 ff 87 e0 9d 3a 5a cd 5c d3 9e a7 48 ca b9 86 22 49 91 24 14 49 42 08 45 92 22 39 4b bb f6 32 21 54 d6 1c 9c 63 4a fa 1e ea c3 95 48 0d 4e c3 a2 48 52 24 29 92 14 49 8a 24 21 84 22 b9 8c 22 e9 5f 38 d0 86 7f ab d8 3b c1 54 9c 37 b2 55 c8 97 2d 44 1d 8a 24 45 f2 8f 13 c9 14 d1 99 87 83 57 3a c4 ca d8 83 c0 2b 02 c6 b6 03 ef 22 9e 72 37 3d b4 87 cf 4f c8 5f 60 ab 42 87 f9 be 8d 5e 9a 3b cf a2 02 2f 1f e8 e2 00 ad 5d 43 9e 6f 4d 85 d8 b0 d0 3a 4b e6 fa f0 bb 3c df 85 c4 6d ea b8 fa 4d ab 38 ae 55 06 d7 f8 1c de a3 bc 29 aa Data Ascii: :_m ]H>M;HX!xH>g$.Z:U5E"I[I$<Jeu.osIM2:N:Z\H"I$IBE"9K2!TcJHNHR$)I$!""_8;T7U-D$EW:+"r7=O_`B^;/]CoM:K<mM8U)
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: f1 3d 14 4f f2 29 5b cf dd da 94 1a 8d 57 f5 81 2e b6 7e 4c 57 55 77 7d 5d 5d 55 fd e1 e8 bb 43 4a 5e 5f 63 e2 24 cf 9c d8 de 23 6b 3f 09 e3 ef 7b 22 d6 93 8b 6f ef 89 d1 fa e8 68 fd f1 f4 95 c3 a1 fa 8e 40 44 74 4b 3a 9d 98 4e 47 6f 77 01 89 64 21 8f 0a e7 e3 4f 12 49 da ef ab 1b 48 4c 87 b3 88 03 6d 15 84 56 b7 d7 2f e3 87 23 2a e3 1e ea b3 ff 55 f7 b0 17 3f 30 bf a6 67 68 6c 72 e3 12 9a 48 76 8f 7b 0f 1e fb 8e df d7 b1 c1 4d 94 8a 48 72 2e ca 68 b0 9e 48 76 d1 7a 37 e2 1a 20 89 39 75 ad 27 92 9c 0f 24 2c 7a fd 30 d2 e8 58 93 48 c6 23 be 67 21 19 f5 df b4 30 c8 1d a9 14 f4 73 25 23 92 d2 77 65 e2 11 05 51 24 29 16 f3 da a3 b7 69 8e ec 20 12 27 68 6a 7b 63 3a 92 94 b3 5c 23 78 7a b4 76 44 72 9c a1 be b9 60 61 c9 94 3b 2a 2a 4a 44 80 e4 22 2e f3 dc 54 44 Data Ascii: =O)[W.~LWUw}]]UCJ^_c$#k?{"oh@DtK:NGowd!OIHLmV/#U?0ghlrHv{MHr.hHvz7 9u'$,z0XH#g!0s%#weQ$)i 'hj{c:\#xzvDr`a;*JD".TD
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: b1 5e e7 73 d0 1c c9 22 d7 93 ed d3 ba 37 81 f4 c3 8d 20 e7 74 51 cd 2f 88 86 f7 bb b8 c9 8c 9f 0f 30 7e 64 39 92 dc 84 2d ee f3 b2 03 41 3c 69 ef 1e 9f 41 99 71 cc 3a 7b 73 ae 0f dc e4 5f 88 22 bb f5 23 92 64 d9 74 be fe 2a 50 b6 2d 11 0e 8e 4e df 97 1b f6 88 89 a4 5e 6e 7e e8 e5 aa 27 92 24 73 2c 82 90 47 38 72 02 79 9f 91 bb 73 4d 81 92 4c 72 a6 4e 48 7a 09 2e bc 5c e4 57 4b 24 49 86 f9 cc ac fe e3 f3 05 b0 3b 2e ba 8e 2a 69 46 78 cb 4f 24 f5 ba a5 c3 61 74 71 a6 1b 3a 36 21 bb fb 82 a7 82 6c f2 79 42 11 49 ae f1 72 23 21 6d 44 4f 24 45 24 87 0d bc f5 e3 f0 47 ab 38 17 b4 44 92 2d 8c 5c ad 68 f4 fa 91 85 19 75 74 7e 9b 3b 21 99 fa be cb 7f 7a 23 4f 34 ca 4b 24 29 07 e6 7a fb ab b6 b9 b1 65 d0 c2 6f 2b fc 3d 39 66 bd bd 3d 90 76 44 3f 38 f3 3f eb 7e 45 Data Ascii: ^s"7 tQ/0~d9-A<iAq:{s_"#dtP-N^n~'$s,G8rysMLrNHz.\WK$I;.iFxO$atq:6!lyBIr#!mDO$E$G8D-\hut~;!z#O4K$)zeo+=9f=vD?8?~E
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 15 b3 dd 5f 2a f3 79 08 06 c3 7a e3 2e 43 83 57 3d c2 60 30 18 0c 25 04 db e1 b1 45 9b 11 c9 a5 82 6d 64 0e db e8 5d 0c 91 df ce b7 dd 18 e1 f2 f4 be 44 9f 2d 49 ec 50 db b0 ae 60 bb 96 74 7b ae da dc a2 91 06 83 c1 50 26 b0 55 d1 45 1b 7b 95 f9 c6 e6 46 24 03 c0 db 46 86 f7 b6 1e 5f 5a 41 81 61 1d c1 ca 42 d9 5e c9 60 30 18 0c e5 01 3b 00 f0 c5 96 51 46 24 c3 60 f2 e5 12 d9 49 f3 be 1d c9 93 8d 1f 5b c9 c4 df 5b 92 18 0c 6b 4d 24 3b 3b 6c 97 f1 b5 65 8b cd 09 83 c1 60 28 21 fa 48 a3 f9 b6 68 59 d1 6a c8 88 a4 c1 60 30 18 0c 06 83 e1 1f c3 88 a4 c1 60 30 18 0c 06 83 c1 88 a4 c1 60 30 18 0c 06 83 c1 60 44 d2 60 30 18 0c 06 83 c1 60 44 d2 60 30 18 0c ff 63 cf ce 56 15 86 c1 28 8c be ff fb 76 1e 65 4b 08 81 72 38 de 28 0e 6b c1 0f d6 26 ad 97 1f 11 40 48 02 Data Ascii: _*yz.CW=`0%Emd]D-IP`t{P&UE{F$F_ZAaB^`0;QF$`I[[kM$;;le`(!HhYj`0`0`0`D`0`D`0cV(veKr8(k&@H
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: b3 f1 c2 79 04 88 fe 37 c0 20 0b 24 af 2e d0 dc 0d e0 b9 e9 bc 5e 80 e8 e4 02 49 3e 08 93 ae 3b 1f 48 8e 1a 08 c8 23 bd 51 45 ff 4a 0e 92 d3 f3 f4 fa ad f1 1e 11 9f 4e f2 81 e4 55 17 91 e7 c0 f1 ca 68 8d 64 20 d9 9d 34 e7 a1 ff c3 01 96 69 72 12 a6 a0 d9 35 40 d2 be a6 25 cf 85 93 de 27 fe 76 03 17 57 d9 c0 96 1f 24 13 5c 9c 44 08 3c 37 e3 79 12 3e 17 3c a7 63 8d e8 2c 2b bf 95 ce 5a 34 bf 7d 8d 46 13 74 f6 02 b8 6b f3 7b 40 d1 54 65 7a de 52 4f a4 c2 4a 86 e8 7c be 7e fd 4a 30 c9 23 03 28 15 26 55 77 03 24 91 1a 56 77 bf 6f 62 22 ea 1c d6 23 03 b8 18 fe 9e a2 b5 45 39 70 75 b0 39 be 1e a2 11 90 61 f5 11 1d b7 41 39 71 ed c3 32 bc 34 74 6e a2 82 ed f9 74 50 79 93 2c f7 96 6e f0 df 40 72 16 c1 73 1c 78 9b b5 34 f7 ae 89 f8 21 19 59 0f d5 73 21 48 fe 15 21 Data Ascii: y7 $.^I>;H#QEJNUhd 4ir5@%'vW$\D<7y><c,+Z4}Ftk{@TezROJ\|~J0#(&Uw$Vwob"#E9pu9aA9q24tntPy,n@rsx4!Ys!H!
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 20 69 7b b5 ed bc bf 21 8e 64 20 c9 eb 1a 1e 07 f3 9c d6 e7 03 cc 72 80 a4 95 3e f1 a1 69 dd d3 36 48 66 e7 01 e3 b4 80 d0 76 16 90 fd 5d 87 cf 6d b7 a4 cf 45 3e 90 94 cf af 20 a9 ca ee 15 49 6d 7e 54 bf 5e a4 44 30 99 24 09 c3 a4 10 28 15 26 55 45 83 a4 0d 72 95 6d bb 01 b9 09 23 e5 bf ca 6c 2c ac af 94 fb 95 b0 56 d2 41 65 8d 0c 59 8b 20 8c 0d 9a 55 5d 4e 20 f2 bb 40 f2 5d cc 39 60 f6 d9 f1 dc 3c e7 d2 f3 98 b6 69 9f 3c af e1 91 e5 62 9b d5 81 a4 6c dd 72 90 4c 0b 5d 36 5d 2e 24 12 83 e4 b8 81 80 61 d6 06 23 39 48 b2 87 95 0b a4 72 82 24 7b e2 3d cf 33 5a 50 65 83 64 2f 76 38 e4 6c 79 eb 57 0e 92 0e fc a7 17 98 2d fd 36 a9 10 ad 89 f8 b9 b0 d6 60 54 98 db fb 8d 7b d9 cf 9d 82 a4 0a 72 11 40 12 48 aa 56 e2 d9 a5 1e 93 e4 dd a5 73 25 88 34 87 c2 a4 ea 2e Data Ascii: i{!d r>i6Hfv]mE> Im~T^D0$(&UErm#l,VAeY U]N @]9`<i<blrL]6].$a#9Hr${=3ZPed/v8lyW-6`T{r@HVs%4.
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: b3 92 00 8b a4 0a f9 5b 69 38 c7 0d e8 2d 1a 34 4d 83 6e 58 70 87 bd 25 05 30 96 9c 41 61 26 07 97 8e 27 21 6c d1 61 9e 4c 63 a2 50 e5 bc 74 9c a6 c3 6c 4f 60 34 9f 5b 9e 48 ce 8f 23 dd 69 c1 d0 c5 d8 e0 0c 8d c3 47 80 ff 4d 1c f4 f5 f8 37 3e 24 fc 1c e2 2d 1a f4 b3 63 6a e7 53 ff ac 6a 14 3d e4 7a 6c 98 ad c1 b5 b4 56 13 76 4f 0e 5e 11 e5 14 66 40 c7 c5 0c 1d 9a b8 4e 0a e3 f3 d2 f9 e4 e3 da d3 98 90 c7 bd 8c 71 c8 52 e8 df 4e 21 6e 06 d7 70 ae 47 28 64 32 46 df 97 42 c7 47 7e 2e 4d 87 11 b3 d1 2b bd 5b d5 ae e1 60 44 51 60 fd db f2 7b dc 7d 23 af f2 3e f1 9a 52 86 e1 f5 91 af 43 f3 93 28 6f 2b cb a4 7a 89 9b 45 92 45 32 82 e9 14 62 9a 06 e3 44 2f d2 c3 39 e4 86 d3 70 8f d1 2f 59 03 ee 0d 5f 96 ab d3 0e ac d6 18 dc bf d3 b1 39 a4 5d 33 90 84 53 39 84 8f Data Ascii: [i8-4MnXp%0Aa&'!laLcPtlO`4[H#iGM7>$-cjSj=zlVvO^f@NqRN!npG(d2FBG~.M+[`DQ`{}#>RC(o+zEE2bD/9p/Y_9]3S9
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: db ea 63 2d cc 64 10 6f 15 ef 70 d9 f3 67 98 b5 cc 73 00 34 bb 94 1a fc 1b 7e 6f fe 01 ef bf bf 03 3f f8 e1 8f b0 ed ed ef d7 27 db de c1 a7 9f b6 81 69 4c 91 b4 ed 3f e2 cd 37 df c6 5b 6f bd 13 64 9b 1c 7a 86 3f fe c9 4f b1 67 ef 3e ec 3f 70 10 07 5e a4 e9 90 48 53 53 33 0e 1e ac c8 a1 c3 38 a4 90 e6 e6 23 68 3e 7c 14 94 c3 15 69 96 23 1f 77 a4 32 1f bc 44 7e 29 e5 08 e5 68 6d 39 4a f9 20 94 a3 1f e2 a3 8f 7f 8d df e9 ad f8 ec 4f 27 31 38 38 84 7b f7 a6 49 26 d7 83 48 46 37 70 04 22 56 b3 48 0a 51 90 05 b5 50 6a 22 51 11 16 0f e9 13 9a d4 1c 11 8d 8f dc a9 60 cc 99 73 ba 18 bb c2 f9 56 5c 24 89 b1 b3 7a f5 b5 94 72 93 88 dc d4 13 be 4e b1 80 42 51 5a db 27 84 4c 1a b7 34 8e 57 28 92 d4 5d 2e 3f 8b ea cd 36 2d 36 32 1e 24 a4 ae 7b 31 b3 29 7f 9d c6 1a 2e Data Ascii: c-dopgs4~o?'iL?7[odz?Og>?p^HSS38#h>\|i#w2D~)hm9J O'188{I&HF7p"VHQPj"Q`sV\$zrNBQZ'L4W(].?6-62${1).
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 5d ba 74 e9 ba fb c5 91 b8 73 3e 9e cf 76 b6 4a 22 ef 16 bb 76 ed c2 ad 95 55 54 8f 99 1b 53 30 66 e9 05 1c 15 79 63 92 c8 54 30 39 bb 1a 9e 22 92 2f 4e 3c 85 71 5f 5c c0 c5 cc 6a 6b d2 5a db 88 3e 33 ce e2 b5 29 67 b0 e6 db 6c d5 c6 e6 fe 9f 6c bf 8a 57 27 45 c1 7b 49 02 28 92 5c 53 5d df 84 b4 fc 5a 5c c9 ab 45 49 d5 0d 70 7b 0a 6a 61 85 8c 22 96 74 33 b7 a4 01 c9 59 35 18 2d e7 fb f6 6c 91 71 2c 49 43 f3 4a 1b b8 af 83 90 72 96 49 69 86 ad 1e a9 b9 b5 b0 89 80 36 de e4 ab 46 bb 3d bb b8 01 29 39 35 3c a6 9c a3 79 93 2d af 6e e4 be bc 26 79 2f 4d 60 d5 cb 31 4b e5 da 4a aa 1a 91 6e ab 43 46 61 1d 1a 6e 28 89 46 a3 1c 4b ae 47 f6 ab 01 3f bb 7a fb 3a ee c3 cf 83 ef 8b c7 2b 92 cf 91 89 6d 7e d9 75 59 ae 43 45 4d 23 be 6b c5 a8 d7 ae 5d 0b a7 ae 5d 95 48 Data Ascii: ]ts>vJ"vUTS0fycT09"/N<q_\jkZ>3)gllW'E{I(\S]Z\EIp{ja"t3Y5-lq,ICJrIi6F=)95<y-n&y/M`1KJnCFan(FKG?z:+m~uYCEM#k]]H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49763	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:20 UTC	569	OUT	GET /js/site/footerSignup.js?buildTime=1736455907 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:20 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3600 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 09 Jan 2025 20:37:11 GMT ETag: "67803377-e10" Expires: Thu, 23 Jan 2025 20:53:03 GMT Cache-Control: max-age=1209600 X-Host: grn182.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 181097 Date: Sat, 11 Jan 2025 23:11:20 GMT X-Served-By: cache-sjc1000132-SJC, cache-ewr-kewr1740039-EWR X-Cache: HIT, HIT X-Cache-Hits: 56, 0 X-Timer: S1736637081.841397,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 66 61 6c 73 65 7d 3b 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 3b 69 2e 6c 6f 61 64 65 64 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 3b 72 2e 63 3d 65 3b 72 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 22 3b 72 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 77 69 6e 64 6f 77 2e 41 53 53 45 54 53 5f 42 41 53 45 Data Ascii: (function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={exports:{},id:n,loaded:false};t[n].call(i.exports,i,i.exports,r);i.loaded=true;return i.exports}r.m=t;r.c=e;r.p="https://cdn2.editmysite.com/js/";r.p="https://"+window.ASSETS_BASE
2025-01-11 23:11:20 UTC	1378	IN	Data Raw: 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 6e 75 6c 6c 3b 69 66 28 21 72 29 74 2e 61 70 70 6c 79 28 69 2c 6f 29 7d 3b 76 61 72 20 73 3d 72 26 26 21 6e 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 3b 6e 3d 73 65 74 54 69 6d 65 6f 75 74 28 61 2c 65 29 3b 69 66 28 73 29 74 2e 61 70 70 6c 79 28 69 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 65 3d 72 2e 65 6c 65 6d 65 6e 74 5b 30 5d 3b 66 28 65 29 3b 79 28 29 3b 76 61 72 20 6e 3d 74 28 22 23 77 73 69 74 65 2d 6d 69 6e 69 2d 63 61 72 74 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 29 7b 69 66 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 Data Ascii: n;return function(){var i=this;var o=arguments;var a=function(){n=null;if(!r)t.apply(i,o)};var s=r&&!n;clearTimeout(n);n=setTimeout(a,e);if(s)t.apply(i,o)}}function l(){var e=r.element[0];f(e);y();var n=t("#wsite-mini-cart");if(n.length){if(window.innerHe
2025-01-11 23:11:20 UTC	844	IN	Data Raw: 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 77 69 64 74 68 22 2c 22 31 30 30 25 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 68 65 69 67 68 74 22 2c 22 34 35 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 6c 65 66 74 22 2c 22 30 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 7a 2d 69 6e 64 65 78 22 2c 22 35 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 74 28 22 69 6d 67 2e 66 6f 6f 74 65 72 2d 61 62 2d 70 75 62 6c 69 73 68 65 64 2d 74 6f 61 73 74 2d 69 6d 61 67 65 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 2c 22 69 6d 70 6f 72 74 61 Data Ascii: le.setProperty("width","100%","important");e.style.setProperty("height","45px","important");e.style.setProperty("left","0px","important");e.style.setProperty("z-index","5","important");t("img.footer-ab-published-toast-image").css("display","none","importa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49765	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:20 UTC	365	OUT	GET /js/jquery-1.8.3.min.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:21 UTC	663	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93636 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 19 Dec 2024 22:52:45 GMT ETag: "6764a3bd-16dc4" Expires: Tue, 14 Jan 2025 10:31:59 GMT Cache-Control: max-age=1209600 X-Host: grn184.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 995962 Date: Sat, 11 Jan 2025 23:11:20 GMT X-Served-By: cache-sjc10032-SJC, cache-ewr-kewr1740074-EWR X-Cache: HIT, HIT X-Cache-Hits: 60, 0 X-Timer: S1736637081.990153,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: /! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 6f 3d 76 2e 5f 64 61 74 61 28 74 2c 73 29 2c 75 3d 73 2e 65 76 65 6e 74 73 3b 69 66 28 75 29 7b 64 65 6c 65 74 65 20 6f 2e 68 61 6e 64 6c 65 2c 6f 2e 65 76 65 6e 74 73 3d 7b 7d 3b 66 6f 72 28 6e 20 69 6e 20 75 29 66 6f 72 28 72 3d 30 2c 69 3d 75 5b 6e 5d 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 76 2e 65 76 65 6e 74 2e 61 64 64 28 74 2c 6e 2c 75 5b 6e 5d 5b 72 5d 29 7d 6f 2e 64 61 74 61 26 26 28 6f 2e 64 61 74 61 3d 76 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 2e 64 61 74 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 2c 74 29 7b 76 61 72 20 6e 3b 69 66 28 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 31 29 72 65 74 75 72 6e 3b 74 2e 63 6c 65 61 72 41 74 74 72 69 62 75 74 65 73 26 26 74 2e 63 6c 65 61 72 41 74 74 72 69 62 75 74 65 73 28 29 2c 74 2e 6d 65 72 Data Ascii: o=v._data(t,s),u=s.events;if(u){delete o.handle,o.events={};for(n in u)for(r=0,i=u[n].length;r<i;r++)v.event.add(t,n,u[n][r])}o.data&&(o.data=v.extend({},o.data))}function Ot(e,t){var n;if(t.nodeType!==1)return;t.clearAttributes&&t.clearAttributes(),t.mer
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 79 3d 3d 3d 22 22 26 26 47 74 28 6e 29 26 26 28 69 5b 73 5d 3d 76 2e 5f 64 61 74 61 28 6e 2c 22 6f 6c 64 64 69 73 70 6c 61 79 22 2c 6e 6e 28 6e 2e 6e 6f 64 65 4e 61 6d 65 29 29 29 29 3a 28 72 3d 44 74 28 6e 2c 22 64 69 73 70 6c 61 79 22 29 2c 21 69 5b 73 5d 26 26 72 21 3d 3d 22 6e 6f 6e 65 22 26 26 76 2e 5f 64 61 74 61 28 6e 2c 22 6f 6c 64 64 69 73 70 6c 61 79 22 2c 72 29 29 7d 66 6f 72 28 73 3d 30 3b 73 3c 6f 3b 73 2b 2b 29 7b 6e 3d 65 5b 73 5d 3b 69 66 28 21 6e 2e 73 74 79 6c 65 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 21 74 7c 7c 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 3d 3d 22 22 29 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 74 3f 69 5b 73 5d 7c 7c 22 22 3a 22 6e Data Ascii: y===""&&Gt(n)&&(i[s]=v._data(n,"olddisplay",nn(n.nodeName)))):(r=Dt(n,"display"),!i[s]&&r!=="none"&&v._data(n,"olddisplay",r))}for(s=0;s<o;s++){n=e[s];if(!n.style)continue;if(!t\|\|n.style.display==="none"\|\|n.style.display==="")n.style.display=t?i[s]\|\|"":"n
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 48 74 2e 63 6c 6f 73 65 28 29 3b 74 3d 48 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 48 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 29 2c 6e 3d 44 74 28 74 2c 22 64 69 73 70 6c 61 79 22 29 2c 69 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 50 74 29 7d 72 65 74 75 72 6e 20 57 74 5b 65 5d 3d 6e 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 66 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3b 69 66 28 76 2e 69 73 41 72 72 61 79 28 74 29 29 76 2e 65 61 63 68 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 6e 7c 7c 73 6e 2e 74 65 73 74 28 65 29 3f 72 28 65 2c 69 29 3a 66 6e 28 65 2b 22 5b 22 2b 28 74 79 70 65 6f 66 20 69 3d 3d 22 6f 62 6a 65 63 74 22 3f 74 3a 22 22 29 2b 22 5d 22 2c 69 2c 6e 2c 72 Data Ascii: ml><body>"),Ht.close();t=Ht.body.appendChild(Ht.createElement(e)),n=Dt(t,"display"),i.body.removeChild(Pt)}return Wt[e]=n,n}function fn(e,t,n,r){var i;if(v.isArray(t))v.each(t,function(t,i){n\|\|sn.test(e)?r(e,i):fn(e+"["+(typeof i=="object"?t:"")+"]",i,n,r
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 73 2c 6f 3d 65 2e 64 61 74 61 54 79 70 65 73 2e 73 6c 69 63 65 28 29 2c 75 3d 6f 5b 30 5d 2c 61 3d 7b 7d 2c 66 3d 30 3b 65 2e 64 61 74 61 46 69 6c 74 65 72 26 26 28 74 3d 65 2e 64 61 74 61 46 69 6c 74 65 72 28 74 2c 65 2e 64 61 74 61 54 79 70 65 29 29 3b 69 66 28 6f 5b 31 5d 29 66 6f 72 28 6e 20 69 6e 20 65 2e 63 6f 6e 76 65 72 74 65 72 73 29 61 5b 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 6e 5d 3b 66 6f 72 28 3b 69 3d 6f 5b 2b 2b 66 5d 3b 29 69 66 28 69 21 3d 3d 22 2a 22 29 7b 69 66 28 75 21 3d 3d 22 2a 22 26 26 75 21 3d 3d 69 29 7b 6e 3d 61 5b 75 2b 22 20 22 2b 69 5d 7c 7c 61 5b 22 2a 20 22 2b 69 5d 3b 69 66 28 21 6e 29 66 6f 72 28 72 20 69 6e 20 61 29 7b 73 3d Data Ascii: e,t){var n,r,i,s,o=e.dataTypes.slice(),u=o[0],a={},f=0;e.dataFilter&&(t=e.dataFilter(t,e.dataType));if(o[1])for(n in e.converters)a[n.toLowerCase()]=e.converters[n];for(;i=o[++f];)if(i!==""){if(u!==""&&u!==i){n=a[u+" "+i]\|\|a["* "+i];if(!n)for(r in a){s=
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 69 3d 76 2e 54 77 65 65 6e 28 65 2c 66 2e 6f 70 74 73 2c 74 2c 6e 2c 66 2e 6f 70 74 73 2e 73 70 65 63 69 61 6c 45 61 73 69 6e 67 5b 74 5d 7c 7c 66 2e 6f 70 74 73 2e 65 61 73 69 6e 67 29 3b 72 65 74 75 72 6e 20 66 2e 74 77 65 65 6e 73 2e 70 75 73 68 28 69 29 2c 69 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 30 2c 72 3d 74 3f 66 2e 74 77 65 65 6e 73 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 3b 6e 3c 72 3b 6e 2b 2b 29 66 2e 74 77 65 65 6e 73 5b 6e 5d 2e 72 75 6e 28 31 29 3b 72 65 74 75 72 6e 20 74 3f 75 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 65 2c 5b 66 2c 74 5d 29 3a 75 2e 72 65 6a 65 63 74 57 69 74 68 28 65 2c 5b 66 2c 74 5d 29 2c 74 68 69 73 7d 7d 29 2c 6c 3d 66 2e 70 72 6f 70 73 3b 51 6e 28 6c 2c 66 2e 6f 70 74 73 2e 73 70 Data Ascii: i=v.Tween(e,f.opts,t,n,f.opts.specialEasing[t]\|\|f.opts.easing);return f.tweens.push(i),i},stop:function(t){var n=0,r=t?f.tweens.length:0;for(;n<r;n++)f.tweens[n].run(1);return t?u.resolveWith(e,[f,t]):u.rejectWith(e,[f,t]),this}}),l=f.props;Qn(l,f.opts.sp
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 6c 6f 77 26 26 28 70 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 76 2e 73 75 70 70 6f 72 74 2e 73 68 72 69 6e 6b 57 72 61 70 42 6c 6f 63 6b 73 7c 7c 68 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 6f 76 65 72 66 6c 6f 77 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 30 5d 2c 70 2e 6f 76 65 72 66 6c 6f 77 58 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 31 5d 2c 70 2e 6f 76 65 72 66 6c 6f 77 59 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 32 5d 7d 29 29 3b 66 6f 72 28 72 20 69 6e 20 74 29 7b 73 3d 74 5b 72 5d 3b 69 66 28 55 6e 2e 65 78 65 63 28 73 29 29 7b 64 65 6c 65 74 65 20 74 5b 72 5d 2c 61 3d 61 7c 7c 73 3d 3d 3d 22 74 6f 67 67 6c 65 22 3b 69 66 28 73 3d 3d 3d 28 67 3f 22 68 69 64 65 22 3a 22 73 68 6f 77 22 29 29 63 6f 6e 74 69 6e 75 65 3b 6d 2e 70 75 73 Data Ascii: low&&(p.overflow="hidden",v.support.shrinkWrapBlocks\|\|h.done(function(){p.overflow=n.overflow[0],p.overflowX=n.overflow[1],p.overflowY=n.overflow[2]}));for(r in t){s=t[r];if(Un.exec(s)){delete t[r],a=a\|\|s==="toggle";if(s===(g?"hide":"show"))continue;m.pus
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 2f 5c 31 3e 7c 29 24 2f 2c 53 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 5d 2a 24 2f 2c 78 3d 2f 28 3f 3a 5e 7c 3a 7c 2c 29 28 3f 3a 5c 73 2a 5c 5b 29 2b 2f 67 2c 54 3d 2f 5c 5c 28 3f 3a 5b 22 5c 5c 5c 2f 62 66 6e 72 74 5d 7c 75 5b 5c 64 61 2d 66 41 2d 46 5d 7b 34 7d 29 2f 67 2c 4e 3d 2f 22 5b 5e 22 5c 5c 5c 72 5c 6e 5d 2a 22 7c 74 72 75 65 7c 66 61 6c 73 65 7c 6e 75 6c 6c 7c 2d 3f 28 3f 3a 5c 64 5c 64 2a 5c 2e 7c 29 5c 64 2b 28 3f 3a 5b 65 45 5d 5b 5c 2d 2b 5d 3f 5c 64 2b 7c 29 2f 67 2c 43 3d 2f 5e 2d 6d 73 2d 2f 2c 6b 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 22 22 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 61 64 64 45 76 65 6e Data Ascii: /\1>\|)$/,S=/^[\],:{}\s]$/,x=/(?:^\|:\|,)(?:\s\[)+/g,T=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,N=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d\d\.\|)\d+(?:[eE][\-+]?\d+\|)/g,C=/^-ms-/,k=/-([\da-z])/gi,L=function(e,t){return(t+"").toUpperCase()},A=function(){i.addEven
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 76 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 72 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 72 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 74 3d 3d 3d 22 66 69 6e 64 22 3f 72 2e 73 65 6c 65 63 74 6f 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3f 22 20 22 3a 22 22 29 2b 6e 3a 74 26 26 28 72 2e 73 65 6c 65 63 74 6f 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 22 2e 22 2b 74 2b 22 28 22 2b 6e 2b 22 29 22 29 2c 72 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 74 68 69 73 2c Data Ascii: hStack:function(e,t,n){var r=v.merge(this.constructor(),e);return r.prevObject=this,r.context=this.context,t==="find"?r.selector=this.selector+(this.selector?" ":"")+n:t&&(r.selector=this.selector+"."+t+"("+n+")"),r},each:function(e,t){return v.each(this,
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 28 21 30 29 7d 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 3d 21 30 3f 2d 2d 76 2e 72 65 61 64 79 57 61 69 74 3a 76 2e 69 73 52 65 61 64 79 29 72 65 74 75 72 6e 3b 69 66 28 21 69 2e 62 6f 64 79 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 76 2e 72 65 61 64 79 2c 31 29 3b 76 2e 69 73 52 65 61 64 79 3d 21 30 3b 69 66 28 65 21 3d 3d 21 30 26 26 2d 2d 76 2e 72 65 61 64 79 57 61 69 74 3e 30 29 72 65 74 75 72 6e 3b 72 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 69 2c 5b 76 5d 29 2c 76 2e 66 6e 2e 74 72 69 67 67 65 72 26 26 76 28 69 29 2e 74 72 69 67 67 65 72 28 22 72 65 61 64 79 22 29 2e 6f 66 66 28 22 72 65 61 64 79 22 29 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 2e Data Ascii: (!0)},ready:function(e){if(e===!0?--v.readyWait:v.isReady)return;if(!i.body)return setTimeout(v.ready,1);v.isReady=!0;if(e!==!0&&--v.readyWait>0)return;r.resolveWith(i,[v]),v.fn.trigger&&v(i).trigger("ready").off("ready")},isFunction:function(e){return v.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49768	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	382	OUT	GET /js/lang/en/stl.js?buildTime=1736370530& HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:21 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 188909 Server: nginx Content-Type: application/javascript Last-Modified: Wed, 08 Jan 2025 20:09:36 GMT ETag: "677edb80-2e1ed" Expires: Wed, 22 Jan 2025 21:10:39 GMT Cache-Control: max-age=1209600 X-Host: grn139.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:21 GMT Age: 266442 X-Served-By: cache-sjc1000104-SJC, cache-ewr-kewr1740066-EWR X-Cache: HIT, HIT X-Cache-Hits: 41, 1 X-Timer: S1736637081.089914,VS0,VE2 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 0a 77 69 6e 64 6f 77 2e 5f 57 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 5f 57 2e 67 65 74 53 69 74 65 4c 61 6e 67 75 61 67 65 55 52 4c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6c 61 6e 67 29 7b 0a 09 72 65 74 75 72 6e 20 27 2f 2f 61 73 73 65 74 73 2d 73 74 61 67 69 6e 67 2e 77 65 65 62 6c 79 2e 6e 65 74 2f 6a 73 2f 6c 61 6e 67 2f 25 6c 61 6e 67 25 2f 73 74 6c 2e 6a 73 3f 62 75 69 6c 64 54 69 6d 65 3d 31 32 33 34 26 27 2e 72 65 70 6c 61 63 65 28 27 25 6c 61 6e 67 25 27 2c 20 6c 61 6e 67 29 3b 0a 7d 0a 5f 57 2e 74 6c 69 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 73 3b 7d 0a 5f 57 2e 73 69 74 65 4c 61 6e 67 20 3d 20 27 65 6e 27 3b 0a 5f 57 2e 66 74 6c 3d 5f 57 2e 73 74 Data Ascii: window._W = window.Weebly = window.Weebly \|\| {};_W.getSiteLanguageURL = function(lang){return '//assets-staging.weebly.net/js/lang/%lang%/stl.js?buildTime=1234&'.replace('%lang%', lang);}_W.tli=function(s){return s;}_W.siteLang = 'en';_W.ftl=_W.st
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 5c 22 42 61 64 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 33 5f 73 74 61 72 5c 22 3a 5c 22 4d 65 64 69 6f 63 72 65 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 34 5f 73 74 61 72 5c 22 3a 5c 22 47 6f 6f 64 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 35 5f 73 74 61 72 5c 22 3a 5c 22 45 78 63 65 6c 6c 65 6e 74 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 72 5f 69 6e 70 75 74 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 6e 6f 5f 72 61 74 69 6e 67 5f 6c 61 62 65 6c 5c 22 3a 5c 22 4e 6f 20 72 61 74 69 6e 67 5c 22 2c 5c 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 74 61 Data Ascii: \"Bad\",\"components.star_input_component.3_star\":\"Mediocre\",\"components.star_input_component.4_star\":\"Good\",\"components.star_input_component.5_star\":\"Excellent\",\"components.star_input_component.no_rating_label\":\"No rating\",\"components.sta
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 65 61 74 65 20 41 63 63 6f 75 6e 74 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 64 6f 6e 65 5c 22 3a 5c 22 44 6f 6e 65 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 6d 61 69 6c 5f 61 64 64 72 65 73 73 5c 22 3a 5c 22 45 6d 61 69 6c 20 41 64 64 72 65 73 73 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 73 2e 62 61 64 5f 65 6d 61 69 6c 5c 22 3a 5c 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 73 2e 65 6d 61 69 6c 5f 72 65 71 75 69 72 65 64 5c 22 Data Ascii: eate Account\",\"customer_accounts.common.done\":\"Done\",\"customer_accounts.common.email_address\":\"Email Address\",\"customer_accounts.common.errors.bad_email\":\"Please enter a valid email address.\",\"customer_accounts.common.errors.email_required\"
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 6f 72 64 65 72 5f 6e 75 6d 62 65 72 5c 22 3a 5c 22 4f 72 64 65 72 20 23 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 73 74 61 74 75 73 5c 22 3a 5c 22 53 74 61 74 75 73 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 63 6f 6c 75 6d 6e 5f 68 65 61 64 69 6e 67 5f 74 6f 74 61 6c 5c 22 3a 5c 22 54 6f 74 61 6c 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 64 65 66 61 75 6c 74 5f 74 Data Ascii: \"customer_accounts.order_history.column_heading_order_number\":\"Order #\",\"customer_accounts.order_history.column_heading_status\":\"Status\",\"customer_accounts.order_history.column_heading_total\":\"Total\",\"customer_accounts.order_history.default_t
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 72 65 64 65 65 6d 65 64 5c 22 3a 5c 22 52 65 64 65 65 6d 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 72 65 66 75 6e 64 65 64 5c 22 3a 5c 22 52 65 66 75 6e 64 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 73 65 6e 74 5c 22 3a 5c 22 53 65 6e 74 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 6f 72 64 65 72 5f 68 69 73 74 6f 72 79 2e 73 74 61 74 75 73 5f 73 68 69 70 70 65 64 5c 22 3a 5c 22 53 68 69 70 70 65 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f Data Ascii: omer_accounts.order_history.status_redeemed\":\"Redeemed\",\"customer_accounts.order_history.status_refunded\":\"Refunded\",\"customer_accounts.order_history.status_sent\":\"Sent\",\"customer_accounts.order_history.status_shipped\":\"Shipped\",\"customer_
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 72 64 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 72 65 73 65 74 5f 70 61 73 73 77 6f 72 64 2e 72 65 73 65 74 5f 62 75 74 74 6f 6e 5c 22 3a 5c 22 52 65 73 65 74 20 50 61 73 73 77 6f 72 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 65 5f 70 61 73 73 77 6f 72 64 2e 68 65 61 64 65 72 5f 74 65 78 74 5c 22 3a 5c 22 55 70 64 61 74 65 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 65 5f 70 61 73 73 77 6f 72 64 2e 69 6e 73 74 72 75 63 74 69 6f 6e 5c 22 3a 5c 22 45 6e 74 65 72 20 79 6f 75 72 20 6e 65 77 20 70 61 73 73 77 6f 72 64 20 62 65 6c 6f 77 2e 5c 22 2c 5c 22 63 75 73 74 6f 6d 65 72 5f 61 63 63 6f 75 6e 74 73 2e 75 70 64 61 74 Data Ascii: rd.\",\"customer_accounts.reset_password.reset_button\":\"Reset Password\",\"customer_accounts.update_password.header_text\":\"Update password\",\"customer_accounts.update_password.instruction\":\"Enter your new password below.\",\"customer_accounts.updat
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 73 61 6e 74 20 64 6f 6c 6f 72 65 6d 71 75 65 20 6c 61 75 64 61 6e 74 69 75 6d 2c 20 74 6f 74 61 6d 20 72 65 6d 2e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 31 37 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 5c 5c 5c 22 3e 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 35 5c 5c 5c 22 3e 53 6b 69 6c 6c 20 54 77 6f 3c 5c 5c 2f 66 6f 6e 74 3e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 31 38 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 5c 5c 5c 22 3e 53 65 64 20 75 74 20 70 65 72 73 70 69 63 69 61 74 69 73 20 75 6e 64 65 20 6f Data Ascii: sant doloremque laudantium, totam rem.<\\/span>\",\"db.PageLayoutElements.1517\":\"<span style=\\\"font-weight: normal;\\\"><font size=\\\"5\\\">Skill Two<\\/font><\\/span>\",\"db.PageLayoutElements.1518\":\"<span style=\\\"\\\">Sed ut perspiciatis unde o
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 6e 6f 72 6d 61 6c 3b 5c 5c 5c 22 3e 52 65 73 70 6f 6e 73 69 76 65 20 26 61 6d 70 3b 20 49 6e 74 65 72 61 63 74 69 76 65 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 33 34 5c 22 3a 5c 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 5c 5c 22 5c 5c 5c 22 3e 4c 6f 72 65 6d 20 69 70 73 75 6d 20 64 6f 6c 6f 72 20 73 69 74 20 61 6d 65 74 2c 20 63 6f 6e 73 65 63 74 65 74 75 72 20 61 64 69 70 69 73 63 69 6e 67 20 65 6c 69 74 2c 20 73 65 64 20 64 6f 20 65 69 75 73 6d 6f 64 20 74 65 6d 70 6f 72 20 69 6e 63 69 64 69 64 75 6e 74 20 75 74 20 6c 61 62 6f 72 65 20 65 74 20 64 6f 6c 6f 72 65 20 6d 61 67 6e 61 20 61 6c 69 71 75 61 2e 20 55 74 20 65 6e 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 Data Ascii: normal;\\\">Responsive & Interactive<\\/font>\",\"db.PageLayoutElements.1534\":\"<span style=\\\"\\\">Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam,
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 71 75 69 73 20 6e 6f 73 74 72 75 64 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 75 6c 6c 61 6d 63 6f 20 6c 61 62 6f 72 69 73 20 6e 69 73 69 2e 3c 5c 5c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 35 30 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 53 65 65 20 53 6f 6d 65 20 45 78 61 6d 70 6c 65 73 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 35 37 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 53 65 72 76 69 63 65 73 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d Data Ascii: im ad minim veniam, quis nostrud exercitation ullamco laboris nisi.<\\/span>\",\"db.PageLayoutElements.1550\":\"<font size=\\\"6\\\">See Some Examples<\\/font>\",\"db.PageLayoutElements.1557\":\"<font size=\\\"6\\\">Services<\\/font>\",\"db.PageLayoutElem
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 75 72 20 61 64 69 70 69 73 69 63 69 6e 67 20 65 6c 69 74 2c 20 73 65 64 20 64 6f 20 65 69 75 73 6d 6f 64 20 74 65 6d 70 6f 72 20 69 6e 63 69 64 69 64 75 6e 74 20 75 74 20 6c 61 62 6f 72 65 20 65 74 20 64 6f 6c 6f 72 65 20 6d 61 67 6e 61 20 61 6c 69 71 75 61 2e 20 55 74 20 65 6e 69 6d 20 61 64 20 6d 69 6e 69 6d 20 76 65 6e 69 61 6d 2c 20 71 75 69 73 20 6e 6f 73 74 72 75 64 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 75 6c 6c 61 6d 63 6f 20 6c 61 62 6f 72 69 73 20 6e 69 73 69 2e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 73 2e 31 35 37 37 5c 22 3a 5c 22 3c 66 6f 6e 74 20 73 69 7a 65 3d 5c 5c 5c 22 36 5c 5c 5c 22 3e 45 76 65 6e 74 20 48 65 61 64 6c 69 6e 65 3c 5c 5c 2f 66 6f 6e 74 3e 5c 22 2c 5c 22 64 62 2e 50 61 67 65 4c 61 79 Data Ascii: ur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi.\",\"db.PageLayoutElements.1577\":\"<font size=\\\"6\\\">Event Headline<\\/font>\",\"db.PageLay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49771	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	396	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:21 UTC	946	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9677 Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Sat, 30 Nov 2024 09:39:34 GMT Last-Modified: Tue, 12 Feb 2019 18:19:08 GMT ETag: "6e0f7ad31bf187e0d88fc5787573ba71" x-goog-generation: 1549995548326466 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 9677 Content-Type: image/png x-goog-hash: crc32c=QhrKCw== x-goog-hash: md5=bg960xvxh+DYj8V4dXO6cQ== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC7rfSYjJjRbgk0fPB7zjFo6kNVbuxYAvpy-nb9MCqp9kzVYvwU3Lb_kbd2YZsaOFbs17qa_mYGylA Server: UploadServer Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:21 GMT Via: 1.1 varnish Age: 61652 X-Served-By: cache-ewr-kewr1740064-EWR X-Cache: HIT X-Cache-Hits: 277 X-Timer: S1736637081.295757,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c7 00 00 00 61 08 03 00 00 00 55 9e 45 07 00 00 02 fd 50 4c 54 45 ff ff ff 1b 1b 1b 17 17 17 e8 e8 e9 df df df 1f 1f 1f e4 e4 e5 15 15 15 e1 e1 e1 e3 e3 e3 e5 e5 e6 22 22 22 fd fd fd 12 12 12 e7 e7 e7 f9 f9 fa ea ea ea ef e6 df 24 24 24 ee ee ee 26 26 26 fb fb fb f5 f5 f8 f1 e7 e1 ec ec ed ea eb f0 0e 0e 0e e7 e8 ee ed ed f2 da d9 e1 e0 e0 e7 dd dd e4 d7 d7 de f2 e8 e2 28 28 28 e2 e2 e9 de dd dd eb e4 dc f1 f2 f6 d1 d0 d8 e6 e6 ec f7 f7 f9 eb eb ec e9 e9 ef fb f8 f6 ed e5 dd db da da ec ec f2 d5 d4 dc e4 e4 eb f2 f3 f7 ee ee f4 d3 d2 da cf ce d5 dc db e3 dd dc dc f0 f0 f0 cc cb d3 39 39 39 9c 90 8e df df e6 d5 d4 ce bb b7 bd 7d 7d 7d ef f0 f5 d8 d8 d8 32 32 32 2f 2f 2f be bb c0 b3 ae b2 45 45 45 e6 Data Ascii: PNGIHDRaUEPLTE"""$$$&&&(((999}}}222///EEE
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: a6 98 47 f1 38 24 0f ec 71 6f af 2d 9b b5 dd 89 87 ae 5c e9 8c 05 9b e3 cb 34 e0 31 ba 3c 8a 78 10 98 96 81 f2 95 21 6a f1 ab 8b f7 a1 61 17 97 57 2e 12 4f 80 d4 81 0f 5e e0 f1 65 81 ab 5b 6f 2a ee 51 58 1d f9 1e cc bb b3 bd e9 4c 26 7b 6a f5 d3 91 91 f8 53 67 b3 f3 07 96 5b 16 88 a2 79 00 5c 1e 2c cb 40 2f e2 c0 98 7c 19 48 46 50 11 e3 11 45 c0 43 17 e0 3c 0c 64 7e bf 1a b6 96 37 5e b4 96 56 8c e1 21 09 71 e5 2b d6 07 86 bd eb ed 4d 64 6e 0d 79 eb 13 e9 74 e2 a4 d3 19 bc 8f f1 1a 63 e7 81 02 a1 18 2d ab 67 39 11 4c 0a 86 01 47 c9 43 70 e1 11 8a 44 87 1b 5d 66 12 e5 42 e5 e7 a1 52 5c 56 1d 56 8d ee 57 6c f1 56 45 89 7d 17 dd ef e3 e7 44 53 3a a3 1a 1a 1a ca 64 cf 35 07 a3 75 af f3 3d c4 0d 27 f2 3d 60 b2 04 ef c1 a0 4c e8 80 03 63 08 8f dd 13 30 bb ba 86 Data Ascii: G8$qo-\41<x!jaW.O^e[o*QXL&{jSg[y\,@/\|HFPEC<d~7^V!q+Mdnytc-g9LGCpD]fBR\VVWlVE}DS:d5u='=`Lc0
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 5c c2 a8 af 76 88 70 ad 07 10 8d c0 01 c3 47 3d 60 d4 72 5c 7f dd f5 a5 0d c7 39 1c 15 39 94 b1 85 05 e0 70 d2 16 2f 66 25 5d c9 4c 72 c9 40 eb 28 0a b0 18 6a f0 8f df 9e 7e e6 4e 18 6b 5f 7f eb 2b 05 cb da 8c ac df 4f f0 0a e1 a7 11 cc df f3 15 ba 94 70 ea c0 5c 08 b9 55 d4 54 ed 81 05 8e 54 4a d0 a1 c6 14 7f 71 08 bf 2d 80 38 da db 81 e3 62 71 5e f1 2a f9 7b e3 ab 3d 3a 87 41 97 a0 08 c6 e5 48 64 96 32 06 07 80 78 5d 3a ab 19 e3 eb e4 37 bf f6 ed b7 df 3c 7e 93 4d 0b c6 12 66 82 20 78 65 d9 af 84 bb c2 81 a4 80 11 4a 02 82 e4 66 81 43 a6 7e 42 81 64 a8 8e b6 f5 a9 14 2a b8 95 bb 5c 86 d6 67 f4 7a 38 bc f0 94 0b 28 01 a3 bd fe 62 1c 37 54 27 a6 d7 3a c7 77 27 5d 16 ca 91 d5 11 3a da e9 76 bb 0d 16 5a a7 73 81 6b 51 5e 2b 86 c1 c1 ed 7e 9b 60 ac 1d e3 31 Data Ascii: \vpG=`r\99p/f%]Lr@(j~Nk_+Op\UTTJq-8bq^{=:AHd2x]:7<~Mf xeJfC~Bd\gz8(b7T':w']:vZskQ^+~`1
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 96 38 8d 11 8c 97 33 73 10 14 36 7f 3a ac 75 84 c1 b3 6c 7e 9b d1 d8 01 35 a4 1a e7 6d 15 3d e6 d6 fa 35 22 f5 0f f5 25 10 f9 67 22 e0 90 aa 34 21 0d d2 43 a3 59 9b d8 1a 96 0c 6e cb 5a 5a c0 dd 20 87 85 76 a2 d1 a3 c5 d9 89 cd 14 24 ab 7f cc 51 8a ee 70 aa 7b 64 c4 27 39 9f 43 f9 c5 50 77 e7 41 71 f9 9a ef 72 67 f2 f2 d4 d4 f8 42 24 9c 01 0e 97 81 34 5b ad bc 93 b7 b9 b2 09 10 c6 12 37 60 7e 2b 70 e0 50 d2 b5 6c 6a 98 75 f8 bc 34 94 44 10 64 00 0a 41 c5 af aa 3b d0 f6 b9 c5 bc aa cc 01 8f 61 0f 70 80 1c cd b3 9b 8b aa 66 88 f6 e6 e0 dc dc c6 a9 5a 0d 18 aa 50 f0 89 cf b6 43 9e d9 e8 ec 4e 74 65 7b e3 51 19 bc da 52 c3 31 d0 58 27 bf a1 ae a1 ed 86 f3 39 4c 9f 5e ca 46 8a 63 c5 e5 a1 62 31 72 79 ea f6 d5 ce 21 5f c2 0d 05 04 fc 88 b3 62 4e 8c a5 23 69 97 Data Ascii: 83s6:ul~5m=5"%g"4!CYnZZ v$Qp{d'9CPwAqrgB$4[7`~+pPlju4DdA;apfZPCNte{QR1X'9L^Fcb1ry!_bN#i
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 48 3f a2 89 e3 c3 e5 ef df 1e 72 15 d9 70 15 30 e8 8d c5 a0 96 13 13 99 41 e2 31 38 11 21 50 82 5a 6f e7 38 a2 05 8f 77 ef 58 5f 5e 5e 5f 3f a7 ff d7 8f 7b ec b5 ce 2a 6b ae 4c a5 30 ba ca 5a 52 92 75 12 bd 48 53 63 de 52 66 52 ba 92 e5 58 d5 c2 c5 88 42 25 d4 69 a5 1a a3 a5 24 3f 33 17 41 97 81 23 72 14 07 30 50 b3 33 df 7f 81 38 a8 c9 54 55 ec 82 35 04 18 96 00 3b 7e 0c 9e 24 8a ee 34 e0 e7 c6 c4 81 5b 99 db e0 47 4e 6b eb fc fe 43 e0 70 3a 6d d6 3c 59 62 9a a6 ad c4 9c 1f af d3 8b 45 69 6e 73 65 4b b1 31 4f ad d7 b8 32 35 8a 78 99 4c 24 14 eb 53 34 65 96 d2 4c 63 6a aa 51 2e 15 8a 02 38 ae e6 30 c6 dd 31 63 c3 f4 e9 b7 11 07 7e f1 a8 78 6a 36 8b e1 bb 0d c2 d1 70 69 81 10 76 9f 28 3b 41 8f 1f 14 10 c1 ce 6d e7 ea cb eb 9b 9b e7 f7 1d da 01 0e bb cd da Data Ascii: H?rp0A18!PZo8wX_^^_?{*kL0ZRuHScRfRXB%i$?3A#r0P38TU5;~$4[GNkCp:m<YbEinseK1O25xL$S4eLcjQ.801c~xj6piv(;Am
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 28 2c 69 fa 16 b7 c3 ab d2 09 75 52 39 71 88 25 d7 47 76 11 07 6e 1a 12 c7 c5 cf 7c 75 25 5c 82 36 fb 39 6e 9e 39 73 fa dd 01 1c c0 00 40 6c 6c 1c ad f0 b2 2d 67 86 ee 40 82 28 9e 23 f8 ba 8a c6 a2 f8 b6 72 74 57 75 75 d5 f3 57 f6 7f b7 bb db 6e ab a8 b2 d7 e4 63 11 54 9c 68 c8 36 57 5a 68 c5 50 6d aa ac b1 78 0d e0 c8 90 a4 6a 14 e2 64 89 f4 fa ae 6f ea 76 35 16 30 7e b4 c3 8f 40 0e 7f ce 3f 7f 6f e6 6c 70 f0 a7 c2 43 80 81 75 51 2c c2 11 06 c5 9d 7b 27 24 0e 04 5c c4 11 1e 1b 34 07 33 db ad cf 59 df 8c d1 bc 79 4e df 21 3f 47 a6 49 a5 97 62 2d ba 66 9d d5 a0 47 61 c9 dc 5b bc 96 4c 91 50 a7 16 cb 0d a9 5a a9 5e 2f b9 0b 1c e8 af 28 1f ed c8 c7 67 57 b3 1c 0b fd 73 59 f2 e3 bd 99 d3 47 d5 15 9a 19 0b 8c d8 38 6a 31 c7 c1 1b 12 45 22 a4 70 e2 08 1b 03 47 Data Ascii: (,iuR9q%Gvn\|u%\69n9s@ll-g@(#rtWuuWncTh6WZhPmxjdov50~@?olpCuQ,{'$\43YyN!?GIb-fGa[LPZ^/(gWsYG8j1E"pG
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 08 de 8f c8 e3 e7 e6 60 fc 68 47 8d 6f 9f ff e3 1d 5d dd 83 83 67 aa aa 6a 6b 9d 9e 92 36 83 5c 25 4e 16 ab 0c 96 b2 16 6b b1 44 24 4c 8a 57 68 5c a5 99 94 15 2c a1 3c 77 6c da 37 98 cd b4 d6 15 a2 cb 6a 3f 1d 0d 71 1c 68 2c 71 f8 fa ab 65 2f 52 5d 71 1c a4 b0 b8 38 a4 81 f3 83 de 68 fe 4b 6e 90 c8 14 f6 de c1 35 21 70 6d 61 b0 1c 3b d7 cf 99 4f 1c ab 97 ae ca f9 f0 b3 d3 83 0c 87 b3 d6 ee 29 cb 37 a8 54 da 64 a9 24 35 b3 04 6b 3e 0a 3c 7d 91 2c 37 b6 39 32 95 e0 d0 e9 92 14 e3 ba be 29 04 47 07 e6 26 4b d7 1c 8f 1e d9 ef 86 40 d4 f4 97 51 57 b7 c3 8f 11 1c 93 29 d6 40 e0 38 98 8a 02 0b c4 72 e0 34 71 84 8d 81 23 c2 c3 70 ac c1 9f 76 34 d6 7f 3a fe f8 60 e7 e0 d6 aa 0a 8f d3 e9 ac 49 4f 91 cb b5 52 75 bc bc d8 5b d6 52 aa 11 e3 9a 56 a5 cc 4d cf 54 66 24 Data Ascii: `hGo]gjk6\%NkD$LWh\,<wl7j?qh,qe/R]q8hKn5!pma;O)7Td$5k><},792)G&K@QW)@8r4q#pv4:`IORu[RVMTf$
2025-01-11 23:11:21 UTC	31	IN	Data Raw: 6f 20 26 61 22 3a ee 89 0c c7 3f 55 ac 27 d4 6f 18 be 59 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: o &a":?U'oYIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49769	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	858	OUT	GET /files/theme/images/arrow-light.svg?1736414015 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://talktalk770.weebly.com/files/main_style.css?1736414015 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:21 UTC	969	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:21 GMT Content-Type: image/svg+xml; charset=us-ascii Content-Length: 886 Connection: close CF-Ray: 900895de1bcf42c4-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Disposition: attachment ETag: "552eb2e04260fc0733e5633d15c6aeaa" Last-Modified: Tue, 09 Apr 2024 09:20:13 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: cuiwyve1IPmAC52LMidLg1t5sjBlii78Xtymew+AvTZ+ibII1KpNgE210oW1/dfs+50ceaRz9279L/MwMNZSOw== x-amz-meta-btime: 2022-03-19T04:38:52.73Z x-amz-meta-mtime: 1647664732.73 x-amz-replication-status: COMPLETED x-amz-request-id: 38RS934BWMJD6WN4 x-amz-server-side-encryption: AES256 x-amz-version-id: laV8xkk7MteYwKEj3_0q8s8T2cHBLyJt X-Storage-Bucket: z705f X-Storage-Object: 705ff3240de004523ff9d628b28aad705ad3f0ceb046312495265a4042c67570 Server: cloudflare
2025-01-11 23:11:21 UTC	400	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 32 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 33 39 2e 31 20 28 33 31 37 32 30 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="22px" height="11px" viewBox="0 0 22 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 39.1 (31720) - http://www.bo
2025-01-11 23:11:21 UTC	486	IN	Data Raw: 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 55 69 2d 4b 69 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 2e 30 30 30 30 30 30 2c 20 2d 36 39 37 2e 30 30 30 30 30 30 29 22 20 73 74 72 6f 6b 65 3d 22 23 46 46 46 46 46 46 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 32 2e 30 30 30 30 30 30 2c 20 36 39 38 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 Data Ascii: oke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="square"> <g id="Ui-Kit" transform="translate(-61.000000, -697.000000)" stroke="#FFFFFF" stroke-width="1.5"> <g id="Group" transform="translate(62.000000, 698.000000)">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49770	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	379	OUT	GET /js/site/main.js?buildTime=1736370530 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:21 UTC	663	IN	HTTP/1.1 200 OK Connection: close Content-Length: 480909 Server: nginx Content-Type: application/javascript Last-Modified: Wed, 08 Jan 2025 20:11:36 GMT ETag: "677edbf8-7568d" Expires: Wed, 22 Jan 2025 21:10:39 GMT Cache-Control: max-age=1209600 X-Host: blu95.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 266442 Date: Sat, 11 Jan 2025 23:11:21 GMT X-Served-By: cache-sjc10023-SJC, cache-ewr-kewr1740076-EWR X-Cache: HIT, HIT X-Cache-Hits: 39, 0 X-Timer: S1736637081.297078,VS0,VE2 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 5b 22 70 75 62 6c 69 73 68 65 64 57 42 4a 50 22 5d 3b 77 69 6e 64 6f 77 5b 22 70 75 62 6c 69 73 68 65 64 57 42 4a 50 22 5d 3d 66 75 6e 63 74 69 6f 6e 20 6f 28 73 2c 61 29 7b 76 61 72 20 6c 2c 75 2c 63 3d 30 2c 64 3d 5b 5d 3b 66 6f 72 28 3b 63 3c 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 75 3d 73 5b 63 5d 3b 69 66 28 6e 5b 75 5d 29 64 2e 70 75 73 68 2e 61 70 70 6c 79 28 64 2c 6e 5b 75 5d 29 3b 6e 5b 75 5d 3d 30 7d 66 6f 72 28 6c 20 69 6e 20 61 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6c 29 29 7b 65 5b 6c 5d 3d 61 5b 6c 5d 7d 7d 69 66 28 74 29 74 28 73 2c 61 29 3b 77 68 69 6c 65 28 64 2e 6c 65 Data Ascii: (function(e){var t=window["publishedWBJP"];window["publishedWBJP"]=function o(s,a){var l,u,c=0,d=[];for(;c<s.length;c++){u=s[c];if(n[u])d.push.apply(d,n[u]);n[u]=0}for(l in a){if(Object.prototype.hasOwnProperty.call(a,l)){e[l]=a[l]}}if(t)t(s,a);while(d.le
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 64 6f 77 2e 57 65 65 62 6c 79 3d 77 69 6e 64 6f 77 2e 5f 57 3d 77 69 6e 64 6f 77 2e 5f 57 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 75 74 6c 3d 77 69 6e 64 6f 77 2e 5f 57 2e 75 74 6c 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 54 6c 73 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 66 74 6c 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 74 6c 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 46 74 6c 73 3d 77 69 6e 64 6f 77 2e 5f 57 2e 66 61 69 6c 65 64 46 74 6c 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 57 2e Data Ascii: dow.Weebly=window._W=window._W\|\|{};window._W.utl=window._W.utl\|\|function(e){window._W.failedTls=window._W.failedTls\|\|[];window._W.failedTls.push(e);return e};window._W.ftl=window._W.ftl\|\|function(e){window._W.failedFtls=window._W.failedFtls\|\|[];window._W.
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 2c 72 3b 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 29 7b 69 66 28 74 72 75 65 29 7b 21 28 6e 3d 5b 69 28 33 29 2c 69 28 31 29 2c 74 5d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6f 2e 42 61 63 6b 62 6f 6e 65 3d 73 28 6f 2c 69 2c 65 2c 74 29 7d 2e 61 70 70 6c 79 28 74 2c 6e 29 2c 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 65 2e 65 78 70 6f 72 74 73 3d 72 29 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 76 61 72 20 61 3d 72 65 71 75 69 72 65 28 22 75 6e 64 65 72 73 63 6f 72 65 22 29 3b 73 28 6f 2c 74 2c 61 29 7d 65 6c 73 65 7b 6f 2e 42 61 63 6b 62 6f 6e 65 3d 73 28 6f 2c 7b 7d 2c 6f 2e 5f 2c 6f 2e 6a 51 75 65 72 79 7c 7c Data Ascii: :function(e,t,i){var n,r;(function(o,s){if(true){!(n=[i(3),i(1),t],r=function(e,t,i){o.Backbone=s(o,i,e,t)}.apply(t,n),r!==undefined&&(e.exports=r))}else if(typeof t!=="undefined"){var a=require("underscore");s(o,t,a)}else{o.Backbone=s(o,{},o._,o.jQuery\|\|
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 65 72 22 2c 65 2c 74 29 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 61 6c 6c 3b 69 66 28 69 29 66 28 69 2c 74 29 3b 69 66 28 6e 29 66 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 73 74 6f 70 4c 69 73 74 65 6e 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 69 6e 67 54 6f 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 6f 3d 21 74 26 26 21 6e 3b 69 66 28 21 6e 26 26 74 79 70 65 6f 66 20 74 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 6e 3d 74 68 69 73 3b 69 66 28 65 29 28 72 3d 7b 7d 29 5b 65 2e 5f 6c 69 73 74 65 6e 49 64 5d 3d Data Ascii: er",e,t))return this;var i=this._events[e];var n=this._events.all;if(i)f(i,t);if(n)f(n,arguments);return this},stopListening:function(e,t,n){var r=this._listeningTo;if(!r)return this;var o=!t&&!n;if(!n&&typeof t==="object")n=this;if(e)(r={})[e._listenId]=
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 61 74 74 72 69 62 75 74 65 73 3d 7b 7d 3b 69 66 28 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 3d 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 3b 69 66 28 74 2e 70 61 72 73 65 29 6e 3d 74 68 69 73 2e 70 61 72 73 65 28 6e 2c 74 29 7c 7c 7b 7d 3b 6e 3d 69 2e 64 65 66 61 75 6c 74 73 28 7b 7d 2c 6e 2c 69 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 64 65 66 61 75 6c 74 73 22 29 29 3b 74 68 69 73 2e 73 65 74 28 6e 2c 74 29 3b 74 68 69 73 2e 63 68 61 6e 67 65 64 3d 7b 7d 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 69 2e 65 78 74 65 6e 64 28 70 2e 70 72 6f 74 6f 74 79 70 65 2c 75 2c 7b 63 68 61 6e 67 65 64 3a 6e 75 6c 6c 2c 76 61 6c 69 64 61 74 69 6f 6e 45 72 Data Ascii: attributes={};if(t.collection)this.collection=t.collection;if(t.parse)n=this.parse(n,t)\|\|{};n=i.defaults({},n,i.result(this,"defaults"));this.set(n,t);this.changed={};this.initialize.apply(this,arguments)};i.extend(p.prototype,u,{changed:null,validationEr
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 65 2c 76 6f 69 64 20 30 2c 69 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 2c 7b 75 6e 73 65 74 3a 74 72 75 65 7d 29 29 7d 2c 63 6c 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 29 74 5b 6e 5d 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 74 2c 69 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2c 7b 75 6e 73 65 74 3a 74 72 75 65 7d 29 29 7d 2c 68 61 73 43 68 61 6e 67 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 69 2e 69 73 45 6d 70 74 79 28 74 68 69 73 2e 63 68 61 6e 67 65 64 29 3b 72 65 74 75 72 6e 20 69 2e 68 61 73 28 74 68 69 73 2e 63 68 61 Data Ascii: turn this.set(e,void 0,i.extend({},t,{unset:true}))},clear:function(e){var t={};for(var n in this.attributes)t[n]=void 0;return this.set(t,i.extend({},e,{unset:true}))},hasChanged:function(e){if(e==null)return!i.isEmpty(this.changed);return i.has(this.cha
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 72 6e 20 66 61 6c 73 65 7d 69 66 28 75 29 75 28 6c 2c 65 2c 6e 29 3b 6c 2e 74 72 69 67 67 65 72 28 22 73 79 6e 63 22 2c 6c 2c 65 2c 6e 29 7d 3b 4f 28 74 68 69 73 2c 6e 29 3b 6f 3d 74 68 69 73 2e 69 73 4e 65 77 28 29 3f 22 63 72 65 61 74 65 22 3a 6e 2e 70 61 74 63 68 3f 22 70 61 74 63 68 22 3a 22 75 70 64 61 74 65 22 3b 69 66 28 6f 3d 3d 3d 22 70 61 74 63 68 22 29 6e 2e 61 74 74 72 73 3d 72 3b 73 3d 74 68 69 73 2e 73 79 6e 63 28 6f 2c 74 68 69 73 2c 6e 29 3b 69 66 28 72 26 26 6e 2e 77 61 69 74 29 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 3d 61 3b 72 65 74 75 72 6e 20 73 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 3f 69 2e 63 6c 6f 6e 65 28 65 29 3a 7b 7d 3b 76 61 72 20 74 3d 74 68 69 73 3b 76 61 72 20 6e 3d 65 2e 73 75 63 Data Ascii: rn false}if(u)u(l,e,n);l.trigger("sync",l,e,n)};O(this,n);o=this.isNew()?"create":n.patch?"patch":"update";if(o==="patch")n.attrs=r;s=this.sync(o,this,n);if(r&&n.wait)this.attributes=a;return s},destroy:function(e){e=e?i.clone(e):{};var t=this;var n=e.suc
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 28 65 2c 74 29 7b 74 7c 7c 28 74 3d 7b 7d 29 3b 69 66 28 74 2e 6d 6f 64 65 6c 29 74 68 69 73 2e 6d 6f 64 65 6c 3d 74 2e 6d 6f 64 65 6c 3b 69 66 28 74 2e 63 6f 6d 70 61 72 61 74 6f 72 21 3d 3d 76 6f 69 64 20 30 29 74 68 69 73 2e 63 6f 6d 70 61 72 61 74 6f 72 3d 74 2e 63 6f 6d 70 61 72 61 74 6f 72 3b 74 68 69 73 2e 5f 72 65 73 65 74 28 29 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 65 29 74 68 69 73 2e 72 65 73 65 74 28 65 2c 69 2e 65 78 74 65 6e 64 28 7b 73 69 6c 65 6e 74 3a 74 72 75 65 7d 2c 74 29 29 7d 3b 76 61 72 20 67 3d 7b 61 64 64 3a 74 72 75 65 2c 72 65 6d 6f 76 65 3a 74 72 75 65 2c 6d 65 72 67 65 3a 74 72 75 65 7d 3b 76 61 72 20 79 3d 7b 61 64 64 3a 74 72 75 65 2c 72 Data Ascii: (e,t){t\|\|(t={});if(t.model)this.model=t.model;if(t.comparator!==void 0)this.comparator=t.comparator;this._reset();this.initialize.apply(this,arguments);if(e)this.reset(e,i.extend({silent:true},t))};var g={add:true,remove:true,merge:true};var y={add:true,r
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 6c 3d 75 2e 70 61 72 73 65 28 6c 2c 74 29 3b 75 2e 73 65 74 28 6c 2c 74 29 3b 69 66 28 68 26 26 21 63 26 26 75 2e 68 61 73 43 68 61 6e 67 65 64 28 6d 29 29 63 3d 74 72 75 65 7d 65 5b 72 5d 3d 75 7d 65 6c 73 65 20 69 66 28 77 29 7b 61 3d 65 5b 72 5d 3d 74 68 69 73 2e 5f 70 72 65 70 61 72 65 4d 6f 64 65 6c 28 6c 2c 74 29 3b 69 66 28 21 61 29 63 6f 6e 74 69 6e 75 65 3b 76 2e 70 75 73 68 28 61 29 3b 74 68 69 73 2e 5f 61 64 64 52 65 66 65 72 65 6e 63 65 28 61 2c 74 29 7d 61 3d 75 7c 7c 61 3b 69 66 28 5f 26 26 28 61 2e 69 73 4e 65 77 28 29 7c 7c 21 62 5b 61 2e 69 64 5d 29 29 5f 2e 70 75 73 68 28 61 29 3b 62 5b 61 2e 69 64 5d 3d 74 72 75 65 7d 69 66 28 53 29 7b 66 6f 72 28 72 3d 30 2c 6f 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 2b 2b 72 29 7b 69 66 28 Data Ascii: l=u.parse(l,t);u.set(l,t);if(h&&!c&&u.hasChanged(m))c=true}e[r]=u}else if(w){a=e[r]=this._prepareModel(l,t);if(!a)continue;v.push(a);this._addReference(a,t)}a=u\|\|a;if(_&&(a.isNew()\|\|!b[a.id]))_.push(a);b[a.id]=true}if(S){for(r=0,o=this.length;r<o;++r){if(
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 64 5d 7d 2c 61 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 65 6c 73 5b 65 5d 7d 2c 77 68 65 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 69 2e 69 73 45 6d 70 74 79 28 65 29 29 72 65 74 75 72 6e 20 74 3f 76 6f 69 64 20 30 3a 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 74 3f 22 66 69 6e 64 22 3a 22 66 69 6c 74 65 72 22 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 7b 69 66 28 65 5b 69 5d 21 3d 3d 74 2e 67 65 74 28 69 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 74 72 75 65 7d 29 7d 2c 66 69 6e 64 57 68 65 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 68 65 72 65 28 65 2c 74 72 75 65 29 7d 2c 73 6f 72 Data Ascii: d]},at:function(e){return this.models[e]},where:function(e,t){if(i.isEmpty(e))return t?void 0:[];return this[t?"find":"filter"](function(t){for(var i in e){if(e[i]!==t.get(i))return false}return true})},findWhere:function(e){return this.where(e,true)},sor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49777	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	755	OUT	GET /files/theme/plugins.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:21 UTC	861	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895deadcd43c3-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c" Last-Modified: Mon, 29 Apr 2024 13:02:46 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: oh5noF3d3rku5PqCH/1919s85vLs3YKOsh6j1dSSgpoVYDliE/aA7tFCshyF1ClZFzFj6qdK+fNLPDgaBZy18Q== x-amz-replication-status: COMPLETED x-amz-request-id: APYH5129M87J2AZW x-amz-server-side-encryption: AES256 x-amz-version-id: sTNQn2rzaHgQudj7CuT9D50TBpz30e4M X-Storage-Bucket: zb635 X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5 Server: cloudflare
2025-01-11 23:11:21 UTC	508	IN	Data Raw: 32 65 61 0d 0a 0a 2f 2a 21 20 48 61 6d 6d 65 72 2e 4a 53 20 2d 20 76 32 2e 30 2e 34 20 2d 20 32 30 31 34 2d 30 39 2d 32 38 0a 20 2a 20 68 74 74 70 3a 2f 2f 68 61 6d 6d 65 72 6a 73 2e 67 69 74 68 75 62 2e 69 6f 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4a 6f 72 69 6b 20 54 61 6e 67 65 6c 64 65 72 3b 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 65 78 70 6f 72 74 4e 61 6d 65 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 76 61 72 20 56 45 4e 44 4f 52 5f 50 52 45 46 49 58 45 53 20 3d 20 5b 27 27 2c 20 27 77 65 62 6b 69 74 Data Ascii: 2ea/! Hammer.JS - v2.0.4 - 2014-09-28 http://hammerjs.github.io/ * * Copyright (c) 2014 Jorik Tangelder; * Licensed under the MIT license */(function(window, document, exportName, undefined) { 'use strict';var VENDOR_PREFIXES = ['', 'webkit
2025-01-11 23:11:21 UTC	245	IN	Data Raw: 75 6d 62 65 72 7d 20 74 69 6d 65 6f 75 74 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 63 6f 6e 74 65 78 74 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 6e 75 6d 62 65 72 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 69 6d 65 6f 75 74 43 6f 6e 74 65 78 74 28 66 6e 2c 20 74 69 6d 65 6f 75 74 2c 20 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 62 69 6e 64 46 6e 28 66 6e 2c 20 63 6f 6e 74 65 78 74 29 2c 20 74 69 6d 65 6f 75 74 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 69 66 20 74 68 65 20 61 72 67 75 6d 65 6e 74 20 69 73 20 61 6e 20 61 72 72 61 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 65 78 65 63 75 74 65 20 74 68 65 20 66 6e 20 6f 6e 20 65 61 63 68 0d 0a Data Ascii: umber} timeout * @param {Object} context * @returns {number} /function setTimeoutContext(fn, timeout, context) { return setTimeout(bindFn(fn, context), timeout);}/* * if the argument is an array, we want to execute the fn on each
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 37 66 65 61 0d 0a 20 65 6e 74 72 79 0a 20 2a 20 69 66 20 69 74 20 61 69 6e 74 20 61 6e 20 61 72 72 61 79 20 77 65 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 64 6f 20 61 20 74 68 69 6e 67 2e 0a 20 2a 20 74 68 69 73 20 69 73 20 75 73 65 64 20 62 79 20 61 6c 6c 20 74 68 65 20 6d 65 74 68 6f 64 73 20 74 68 61 74 20 61 63 63 65 70 74 20 61 20 73 69 6e 67 6c 65 20 61 6e 64 20 61 72 72 61 79 20 61 72 67 75 6d 65 6e 74 2e 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7c 41 72 72 61 79 7d 20 61 72 67 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 66 6e 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 5b 63 6f 6e 74 65 78 74 5d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 42 6f 6f 6c 65 61 6e 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 76 6f Data Ascii: 7fea entry * if it aint an array we don't want to do a thing. * this is used by all the methods that accept a single and array argument. * @param {\|Array} arg @param {String} fn * @param {Object} [context] * @returns {Boolean} */function invo
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 65 73 74 5b 6b 65 79 73 5b 69 5d 5d 20 3d 20 73 72 63 5b 6b 65 79 73 5b 69 5d 5d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 2b 2b 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 64 65 73 74 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 6d 65 72 67 65 20 74 68 65 20 76 61 6c 75 65 73 20 66 72 6f 6d 20 73 72 63 20 69 6e 20 74 68 65 20 64 65 73 74 2e 0a 20 2a 20 6d 65 61 6e 73 20 74 68 61 74 20 70 72 6f 70 65 72 74 69 65 73 20 74 68 61 74 20 65 78 69 73 74 20 69 6e 20 64 65 73 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 6f 76 65 72 77 72 69 74 74 65 6e 20 62 79 20 73 72 63 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 64 65 73 74 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 73 72 63 0a 20 2a 20 40 72 65 74 75 72 Data Ascii: est[keys[i]] = src[keys[i]]; } i++; } return dest;}/** * merge the values from src in the dest. * means that properties that exist in dest will not be overwritten by src * @param {Object} dest * @param {Object} src * @retur
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 31 20 69 73 20 75 6e 64 65 66 69 6e 65 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7d 20 76 61 6c 31 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7d 20 76 61 6c 32 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 2a 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 66 55 6e 64 65 66 69 6e 65 64 28 76 61 6c 31 2c 20 76 61 6c 32 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 28 76 61 6c 31 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 3f 20 76 61 6c 32 20 3a 20 76 61 6c 31 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 65 76 65 6e 74 73 20 61 74 20 6f 6e 63 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 45 76 65 6e 74 54 61 72 67 65 74 7d 20 74 61 72 67 65 74 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 Data Ascii: 1 is undefined * @param {} val1 @param {} val2 @returns {} /function ifUndefined(val1, val2) { return (val1 === undefined) ? val2 : val1;}/** * addEventListener with multiple events at once * @param {EventTarget} target * @param {St
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 70 6c 69 74 53 74 72 28 73 74 72 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 74 72 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 67 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 66 69 6e 64 20 69 66 20 61 20 61 72 72 61 79 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 6f 62 6a 65 63 74 20 75 73 69 6e 67 20 69 6e 64 65 78 4f 66 20 6f 72 20 61 20 73 69 6d 70 6c 65 20 70 6f 6c 79 46 69 6c 6c 0a 20 2a 20 40 70 61 72 61 6d 20 7b 41 72 72 61 79 7d 20 73 72 63 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 66 69 6e 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 5b 66 69 6e 64 42 79 4b 65 79 5d 0a 20 2a 20 40 72 65 74 75 72 6e 20 7b 42 6f 6f 6c 65 61 6e 7c 4e 75 6d 62 65 72 7d 20 66 61 6c 73 65 Data Ascii: /function splitStr(str) { return str.trim().split(/\s+/g);}/** * find if a array contains the object using indexOf or a simple polyFill * @param {Array} src * @param {String} find * @param {String} [findByKey] * @return {Boolean\|Number} false
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 6f 72 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 20 3d 20 72 65 73 75 6c 74 73 2e 73 6f 72 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 20 3d 20 72 65 73 75 6c 74 73 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 20 73 6f 72 74 55 6e 69 71 75 65 41 72 72 61 79 28 61 2c 20 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 6b 65 79 5d 20 3e 20 62 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 67 65 Data Ascii: ort) { if (!key) { results = results.sort(); } else { results = results.sort(function sortUniqueArray(a, b) { return a[key] > b[key]; }); } } return results;}/** * ge
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3b 0a 0a 76 61 72 20 49 4e 50 55 54 5f 54 59 50 45 5f 54 4f 55 43 48 20 3d 20 27 74 6f 75 63 68 27 3b 0a 76 61 72 20 49 4e 50 55 54 5f 54 59 50 45 5f 50 45 4e 20 3d 20 27 70 65 6e 27 3b 0a 76 61 72 20 49 4e 50 55 54 5f 54 59 50 45 5f 4d 4f 55 53 45 20 3d 20 27 6d 6f 75 73 65 27 3b 0a 76 61 72 20 49 4e 50 55 54 5f 54 59 50 45 5f 4b 49 4e 45 43 54 20 3d 20 27 6b 69 6e 65 63 74 27 3b 0a 0a 76 61 72 20 43 4f 4d 50 55 54 45 5f 49 4e 54 45 52 56 41 4c 20 3d 20 32 35 3b 0a 0a 76 61 72 20 49 4e 50 55 54 5f 53 54 41 52 54 20 3d 20 31 3b 0a 76 61 72 20 49 4e 50 55 54 5f 4d 4f 56 45 20 3d 20 32 3b 0a 76 61 72 20 49 4e 50 55 54 5f 45 4e 44 20 3d 20 34 3b 0a 76 61 72 20 49 4e 50 55 54 5f 43 41 4e 43 45 4c Data Ascii: (navigator.userAgent);var INPUT_TYPE_TOUCH = 'touch';var INPUT_TYPE_PEN = 'pen';var INPUT_TYPE_MOUSE = 'mouse';var INPUT_TYPE_KINECT = 'kinect';var COMPUTE_INTERVAL = 25;var INPUT_START = 1;var INPUT_MOVE = 2;var INPUT_END = 4;var INPUT_CANCEL
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 64 20 74 72 69 67 67 65 72 20 74 68 65 20 63 61 6c 6c 62 61 63 6b 0a 20 20 20 20 20 2a 20 40 76 69 72 74 75 61 6c 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 68 61 6e 64 6c 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 7d 2c 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 62 69 6e 64 20 74 68 65 20 65 76 65 6e 74 73 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 76 45 6c 20 26 26 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 20 74 68 69 73 2e 65 76 45 6c 2c 20 74 68 69 73 2e 64 6f 6d 48 61 6e 64 6c 65 72 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 76 54 61 72 67 65 74 20 26 26 20 61 64 64 45 76 65 6e 74 4c Data Ascii: d trigger the callback * @virtual / handler: function() { }, /* * bind the events */ init: function() { this.evEl && addEventListeners(this.element, this.evEl, this.domHandler); this.evTarget && addEventL
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 20 69 6e 70 75 74 20 65 76 65 6e 74 73 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4d 61 6e 61 67 65 72 7d 20 6d 61 6e 61 67 65 72 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 65 76 65 6e 74 54 79 70 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 69 6e 70 75 74 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 70 75 74 48 61 6e 64 6c 65 72 28 6d 61 6e 61 67 65 72 2c 20 65 76 65 6e 74 54 79 70 65 2c 20 69 6e 70 75 74 29 20 7b 0a 20 20 20 20 76 61 72 20 70 6f 69 6e 74 65 72 73 4c 65 6e 20 3d 20 69 6e 70 75 74 2e 70 6f 69 6e 74 65 72 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 76 61 72 20 63 68 61 6e 67 65 64 50 6f 69 6e 74 65 72 73 4c 65 6e 20 3d 20 69 6e 70 75 74 2e 63 68 61 6e 67 65 64 50 6f 69 6e 74 65 72 73 2e 6c 65 Data Ascii: handle input events * @param {Manager} manager * @param {String} eventType * @param {Object} input */function inputHandler(manager, eventType, input) { var pointersLen = input.pointers.length; var changedPointersLen = input.changedPointers.le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49776	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	584	OUT	GET /js/site/main-customer-accounts-site.js?buildTime=1736370530 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:21 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 534233 Server: nginx Content-Type: application/javascript Last-Modified: Wed, 08 Jan 2025 20:11:36 GMT ETag: "677edbf8-826d9" Expires: Wed, 22 Jan 2025 21:10:39 GMT Cache-Control: max-age=1209600 X-Host: grn128.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 266442 Date: Sat, 11 Jan 2025 23:11:21 GMT X-Served-By: cache-sjc1000122-SJC, cache-ewr-kewr1740054-EWR X-Cache: HIT, HIT X-Cache-Hits: 36, 0 X-Timer: S1736637081.380516,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 66 61 6c 73 65 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 69 2e 6c 6f 61 64 65 64 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 22 3b 6e 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 77 69 6e 64 6f 77 2e 41 53 53 45 54 53 5f 42 41 53 45 Data Ascii: (function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:false};e[r].call(i.exports,i,i.exports,n);i.loaded=true;return i.exports}n.m=e;n.c=t;n.p="https://cdn2.editmysite.com/js/";n.p="https://"+window.ASSETS_BASE
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 6e 5b 72 5d 3b 77 68 69 6c 65 28 69 2e 63 68 61 72 41 74 28 30 29 3d 3d 22 20 22 29 69 3d 69 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 69 66 28 69 2e 69 6e 64 65 78 4f 66 28 74 29 3d 3d 30 29 72 65 74 75 72 6e 20 69 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 6c 65 6e 67 74 68 2c 69 2e 6c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 22 22 7d 3b 77 69 6e 64 6f 77 2e 5f 57 2e 6a 51 75 65 72 79 3d 65 3b 77 69 6e 64 6f 77 2e 5f 57 2e 52 45 43 41 50 54 43 48 41 5f 50 55 42 4c 49 43 5f 4b 45 59 3d 77 69 6e 64 6f 77 5b 22 52 45 43 41 50 54 43 48 41 5f 50 55 42 4c 49 43 5f 4b 45 59 22 5d 3d 22 36 4c 66 34 4f 39 55 53 41 Data Ascii: cookie.split(";");for(var r=0;r<n.length;r++){var i=n[r];while(i.charAt(0)==" ")i=i.substring(1);if(i.indexOf(t)==0)return i.substring(t.length,i.length)}return""};window._W.jQuery=e;window._W.RECAPTCHA_PUBLIC_KEY=window["RECAPTCHA_PUBLIC_KEY"]="6Lf4O9USA
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 65 2e 42 61 63 6b 62 6f 6e 65 3b 76 61 72 20 61 3d 5b 5d 3b 76 61 72 20 6f 3d 61 2e 70 75 73 68 3b 76 61 72 20 73 3d 61 2e 73 6c 69 63 65 3b 76 61 72 20 75 3d 61 2e 73 70 6c 69 63 65 3b 74 2e 56 45 52 53 49 4f 4e 3d 22 31 2e 31 2e 32 22 3b 74 2e 24 3d 72 3b 74 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 42 61 63 6b 62 6f 6e 65 3d 69 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 74 2e 65 6d 75 6c 61 74 65 48 54 54 50 3d 66 61 6c 73 65 3b 74 2e 65 6d 75 6c 61 74 65 4a 53 4f 4e 3d 66 61 6c 73 65 3b 76 61 72 20 63 3d 74 2e 45 76 65 6e 74 73 3d 7b 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 6c 28 74 68 69 73 2c 22 6f 6e 22 2c 65 Data Ascii: is,function(e,t,n,r){var i=e.Backbone;var a=[];var o=a.push;var s=a.slice;var u=a.splice;t.VERSION="1.1.2";t.$=r;t.noConflict=function(){e.Backbone=i;return this};t.emulateHTTP=false;t.emulateJSON=false;var c=t.Events={on:function(e,t,n){if(!l(this,"on",e
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 66 66 28 74 2c 72 2c 74 68 69 73 29 3b 69 66 28 61 7c 7c 6e 2e 69 73 45 6d 70 74 79 28 65 2e 5f 65 76 65 6e 74 73 29 29 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 6c 69 73 74 65 6e 69 6e 67 54 6f 5b 6f 5d 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 3b 76 61 72 20 66 3d 2f 5c 73 2b 2f 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 74 72 75 65 3b 69 66 28 74 79 70 65 6f 66 20 6e 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 7b 65 5b 74 5d 2e 61 70 70 6c 79 28 65 2c 5b 69 2c 6e 5b 69 5d 5d 2e 63 6f 6e 63 61 74 28 72 29 29 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 69 66 28 66 2e 74 65 73 74 28 6e 29 29 7b 76 61 72 20 61 3d 6e 2e 73 70 6c 69 74 28 66 29 3b 66 6f Data Ascii: ff(t,r,this);if(a\|\|n.isEmpty(e._events))delete this._listeningTo[o]}return this}};var f=/\s+/;var l=function(e,t,n,r){if(!n)return true;if(typeof n==="object"){for(var i in n){e[t].apply(e,[i,n[i]].concat(r))}return false}if(f.test(n)){var a=n.split(f);fo
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 6f 4a 53 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 6e 65 28 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 29 7d 2c 73 79 6e 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 73 79 6e 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 7d 2c 65 73 63 61 70 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 65 73 63 61 70 65 28 74 68 69 73 2e 67 65 74 28 65 29 29 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 65 29 21 3d Data Ascii: itialize:function(){},toJSON:function(e){return n.clone(this.attributes)},sync:function(){return t.sync.apply(this,arguments)},get:function(e){return this.attributes[e]},escape:function(e){return n.escape(this.get(e))},has:function(e){return this.get(e)!=
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 43 68 61 6e 67 65 64 28 29 3f 6e 2e 63 6c 6f 6e 65 28 74 68 69 73 2e 63 68 61 6e 67 65 64 29 3a 66 61 6c 73 65 3b 76 61 72 20 74 2c 72 3d 66 61 6c 73 65 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 63 68 61 6e 67 69 6e 67 3f 74 68 69 73 2e 5f 70 72 65 76 69 6f 75 73 41 74 74 72 69 62 75 74 65 73 3a 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 7b 69 66 28 6e 2e 69 73 45 71 75 61 6c 28 69 5b 61 5d 2c 74 3d 65 5b 61 5d 29 29 63 6f 6e 74 69 6e 75 65 3b 28 72 7c 7c 28 72 3d 7b 7d 29 29 5b 61 5d 3d 74 7d 72 65 74 75 72 6e 20 72 7d 2c 70 72 65 76 69 6f 75 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c Data Ascii: unction(e){if(!e)return this.hasChanged()?n.clone(this.changed):false;var t,r=false;var i=this._changing?this._previousAttributes:this.attributes;for(var a in e){if(n.isEqual(i[a],t=e[a]))continue;(r\|\|(r={}))[a]=t}return r},previous:function(e){if(e==null
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 67 65 72 28 22 64 65 73 74 72 6f 79 22 2c 74 2c 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 2c 65 29 7d 3b 65 2e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 65 2e 77 61 69 74 7c 7c 74 2e 69 73 4e 65 77 28 29 29 69 28 29 3b 69 66 28 72 29 72 28 74 2c 6e 2c 65 29 3b 69 66 28 21 74 2e 69 73 4e 65 77 28 29 29 74 2e 74 72 69 67 67 65 72 28 22 73 79 6e 63 22 2c 74 2c 6e 2c 65 29 7d 3b 69 66 28 74 68 69 73 2e 69 73 4e 65 77 28 29 29 7b 65 2e 73 75 63 63 65 73 73 28 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 4c 28 74 68 69 73 2c 65 29 3b 76 61 72 20 61 3d 74 68 69 73 2e 73 79 6e 63 28 22 64 65 6c 65 74 65 22 2c 74 68 69 73 2c 65 29 3b 69 66 28 21 65 2e 77 61 69 74 29 69 28 29 3b 72 65 74 75 72 6e 20 61 7d 2c 75 72 6c 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ger("destroy",t,t.collection,e)};e.success=function(n){if(e.wait\|\|t.isNew())i();if(r)r(t,n,e);if(!t.isNew())t.trigger("sync",t,n,e)};if(this.isNew()){e.success();return false}L(this,e);var a=this.sync("delete",this,e);if(!e.wait)i();return a},url:function
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 6f 74 79 70 65 2c 63 2c 7b 6d 6f 64 65 6c 3a 70 2c 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 6f 4a 53 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 4a 53 4f 4e 28 65 29 7d 29 7d 2c 73 79 6e 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 73 79 6e 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 65 2c 6e 2e 65 78 74 65 6e 64 28 7b 6d 65 72 67 65 3a 66 61 6c 73 65 7d 2c 74 2c 79 29 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 Data Ascii: otype,c,{model:p,initialize:function(){},toJSON:function(e){return this.map(function(t){return t.toJSON(e)})},sync:function(){return t.sync.apply(this,arguments)},add:function(e,t){return this.set(e,n.extend({merge:false},t,y))},remove:function(e,t){var r
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 73 29 7d 69 66 28 79 2e 6c 65 6e 67 74 68 29 74 68 69 73 2e 72 65 6d 6f 76 65 28 79 2c 74 29 7d 69 66 28 67 2e 6c 65 6e 67 74 68 7c 7c 6a 26 26 6a 2e 6c 65 6e 67 74 68 29 7b 69 66 28 64 29 66 3d 74 72 75 65 3b 74 68 69 73 2e 6c 65 6e 67 74 68 2b 3d 67 2e 6c 65 6e 67 74 68 3b 69 66 28 6c 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 69 3d 30 2c 61 3d 67 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 69 2b 2b 29 7b 74 68 69 73 2e 6d 6f 64 65 6c 73 2e 73 70 6c 69 63 65 28 6c 2b 69 2c 30 2c 67 5b 69 5d 29 7d 7d 65 6c 73 65 7b 69 66 28 6a 29 74 68 69 73 2e 6d 6f 64 65 6c 73 2e 6c 65 6e 67 74 68 3d 30 3b 76 61 72 20 53 3d 6a 7c 7c 67 3b 66 6f 72 28 69 3d 30 2c 61 3d 53 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 69 2b 2b 29 7b 74 68 69 73 2e 6d 6f 64 65 6c 73 2e 70 75 73 Data Ascii: .push(s)}if(y.length)this.remove(y,t)}if(g.length\|\|j&&j.length){if(d)f=true;this.length+=g.length;if(l!=null){for(i=0,a=g.length;i<a;i++){this.models.splice(l+i,0,g[i])}}else{if(j)this.models.length=0;var S=j\|\|g;for(i=0,a=S.length;i<a;i++){this.models.pus
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 72 61 74 6f 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 6f 72 74 20 61 20 73 65 74 20 77 69 74 68 6f 75 74 20 61 20 63 6f 6d 70 61 72 61 74 6f 72 22 29 3b 65 7c 7c 28 65 3d 7b 7d 29 3b 69 66 28 6e 2e 69 73 53 74 72 69 6e 67 28 74 68 69 73 2e 63 6f 6d 70 61 72 61 74 6f 72 29 7c 7c 74 68 69 73 2e 63 6f 6d 70 61 72 61 74 6f 72 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 74 68 69 73 2e 6d 6f 64 65 6c 73 3d 74 68 69 73 2e 73 6f 72 74 42 79 28 74 68 69 73 2e 63 6f 6d 70 61 72 61 74 6f 72 2c 74 68 69 73 29 7d 65 6c 73 65 7b 74 68 69 73 2e 6d 6f 64 65 6c 73 2e 73 6f 72 74 28 6e 2e 62 69 6e 64 28 74 68 69 73 2e 63 6f 6d 70 61 72 61 74 6f 72 2c 74 68 69 73 29 29 7d 69 66 28 21 65 2e 73 69 6c 65 6e 74 29 74 68 69 73 2e 74 72 69 67 67 Data Ascii: rator)throw new Error("Cannot sort a set without a comparator");e\|\|(e={});if(n.isString(this.comparator)\|\|this.comparator.length===1){this.models=this.sortBy(this.comparator,this)}else{this.models.sort(n.bind(this.comparator,this))}if(!e.silent)this.trigg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49774	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	762	OUT	GET /files/theme/jquery.pxuMenu.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:21 UTC	927	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895de9bf87271-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"ac373d716afe4270df40f60417b0f418" Last-Modified: Thu, 25 Apr 2024 07:47:28 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: o6gOnXOvQKEYAbhveOy8AEV7UIHSjkqx8trrS2sSJLP8CNqyVSwIPkC6KiMeG6HxSs0idV209Ig= x-amz-meta-btime: 2023-09-25T13:28:31.664Z x-amz-meta-mtime: 1695648511.664 x-amz-replication-status: COMPLETED x-amz-request-id: 324TW0P7VQGN667C x-amz-server-side-encryption: AES256 x-amz-version-id: YuLNF3avwFeaQ53LKsWBmjOk1H1qzEyo X-Storage-Bucket: zf755 X-Storage-Object: f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a Server: cloudflare
2025-01-11 23:11:21 UTC	442	IN	Data Raw: 65 37 31 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 3d 20 20 20 20 20 20 20 20 20 20 20 20 57 65 65 62 6c 79 20 48 6f 72 69 7a 6f 6e 74 61 6c 20 53 69 74 65 20 4d 65 6e 75 20 20 20 20 20 20 20 20 20 20 20 20 3d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 0a 20 20 20 2a 20 47 65 6e 65 72 61 74 65 20 61 20 66 6c 65 78 69 62 6c 65 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 65 6e 75 20 66 72 6f 6d 20 74 68 65 20 64 65 66 61 75 6c 74 20 6e 61 Data Ascii: e71/==================================================== Weebly Horizontal Site Menu ====================================================/(function($) { /** * * Generate a flexible responsive menu from the default na
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 73 3b 0a 20 20 20 20 74 68 69 73 2e 24 6d 6f 72 65 20 3d 20 20 24 28 27 5c 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6d 6f 72 65 20 68 61 73 2d 73 75 62 6d 65 6e 75 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 43 6c 61 73 73 20 2b 20 27 22 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 6d 6f 72 65 2d 6c 69 6e 6b 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 4c 69 6e 6b 43 6c 61 73 73 20 2b 20 27 22 3e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 6d 6f 72 65 4c 69 6e 6b 48 74 6d 6c 20 2b 20 27 3c 2f 61 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 20 2b 20 Data Ascii: s; this.$more = $('\ <li class="menu-more has-submenu ' + settings.parentClass + '"> \ <a href="#" class="more-link ' + settings.parentLinkClass + '">' + settings.moreLinkHtml + '</a> \ <div class="' + settings.containerClass +
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 69 72 73 74 4f 66 66 73 65 74 54 6f 70 20 3d 20 24 28 24 69 74 65 6d 73 2e 67 65 74 28 29 5b 30 5d 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0a 20 20 20 20 20 20 76 61 72 20 24 63 75 72 72 65 6e 74 49 74 65 6d 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 24 63 75 72 72 65 6e 74 49 74 65 6d 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 3e 20 66 69 72 73 74 4f 66 66 73 65 74 54 6f 70 20 7c 7c 20 73 65 6c 66 2e 24 6d 6f 72 65 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 3e 20 66 69 72 73 74 4f 66 66 73 65 74 54 6f 70 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6c 66 2e 24 6d 65 6e 75 2e 61 70 70 65 6e 64 28 73 65 6c 66 2e 24 6d 6f 72 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 73 65 6c 66 2e 74 6f 67 67 6c 65 43 6c 61 73 73 65 73 28 24 63 75 72 Data Ascii: irstOffsetTop = $($items.get()[0]).offset().top; var $currentItem = $(this); if ($currentItem.offset().top > firstOffsetTop \|\| self.$more.offset().top > firstOffsetTop) { self.$menu.append(self.$more); self.toggleClasses($cur
2025-01-11 23:11:21 UTC	524	IN	Data Raw: 20 20 20 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 77 72 61 70 27 2c 0a 20 20 20 20 20 20 6c 69 73 74 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 27 2c 0a 20 20 20 20 20 20 63 68 69 6c 64 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 73 75 62 69 74 65 6d 2d 77 72 61 70 27 2c 0a 20 20 20 20 20 20 63 68 69 6c 64 4c 69 6e 6b 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 73 75 62 69 74 65 6d 27 2c 0a 20 20 20 20 20 20 6d 6f 72 65 4c 69 6e 6b 48 74 6d 6c 3a 20 27 4d 6f 72 65 27 2c 0a 20 20 20 20 7d 2c 20 6f 70 74 69 6f 6e 73 20 29 3b 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 21 24 2e 64 61 74 Data Ascii: containerClass: 'wsite-menu-wrap', listClass: 'wsite-menu', childClass: 'wsite-menu-subitem-wrap', childLinkClass: 'wsite-menu-subitem', moreLinkHtml: 'More', }, options ); return this.each(function() { if (!$.dat
2025-01-11 23:11:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49772	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	760	OUT	GET /files/theme/jquery.trend.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:21 UTC	939	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895de9ca15e80-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"4beccebe0a060b2b2c43de5c2d4512ef" Last-Modified: Sun, 07 Apr 2024 01:42:19 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: UfH9QqNFhdRgCrlg7nQfp+YLLm1n2YrDAUalP6XgUDPl+zi9Bfb/CkxPUiFg2rlc5C/g61KzTF8/3c0iKmVP9g== x-amz-meta-btime: 2023-09-25T13:28:31.869Z x-amz-meta-mtime: 1695648511.869 x-amz-replication-status: COMPLETED x-amz-request-id: G5GNJANH3YC778KV x-amz-server-side-encryption: AES256 x-amz-version-id: SLcK2XYoSswC7.3mqk46FHp.mNA3XCRS X-Storage-Bucket: z446f X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738 Server: cloudflare
2025-01-11 23:11:21 UTC	430	IN	Data Raw: 65 62 66 0d 0a 2f 2a 21 0a 20 2a 20 54 72 65 6e 64 20 30 2e 32 2e 30 0a 20 2a 0a 20 2a 20 46 61 69 6c 2d 73 61 66 65 20 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 65 76 65 6e 74 20 66 6f 72 20 6a 51 75 65 72 79 2e 0a 20 2a 0a 20 2a 20 41 64 64 73 20 61 20 6e 65 77 20 22 74 72 65 6e 64 22 20 65 76 65 6e 74 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 62 72 6f 77 73 65 72 73 20 74 68 61 74 20 64 6f 6e 27 74 0a 20 2a 20 73 75 70 70 6f 72 74 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2e 0a 20 2a 0a 20 2a 20 4e 4f 54 45 3a 20 4f 6e 6c 79 20 73 75 70 70 6f 72 74 73 20 62 65 69 6e 67 20 62 6f 75 6e 64 20 77 69 74 68 20 22 6a 51 75 65 72 79 2e 6f 6e 65 22 2e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 50 69 78 65 6c Data Ascii: ebf/! Trend 0.2.0 * * Fail-safe TransitionEnd event for jQuery. * * Adds a new "trend" event that can be used in browsers that don't * support "transitionend". * * NOTE: Only supports being bound with "jQuery.one". * * Copyright 2014, Pixel
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 6e 64 20 22 20 2b 0a 20 20 20 20 22 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 20 22 20 2b 0a 20 20 20 20 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 6d 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 0a 0a 20 20 2f 2f 20 50 72 65 66 69 78 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 64 75 72 61 74 69 6f 6e 20 70 72 6f 70 65 72 74 79 20 6e 61 6d 65 73 0a 20 20 76 61 72 20 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 20 3d 20 5b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d Data Ascii: nd " + "otransitionend " + "oTransitionEnd " + "msTransitionEnd " + "transitionend"; // Prefixed transition duration property names var transitionDurationProperties = [ "transition-duration", "-moz-transition-duration", "-
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 76 61 6c 75 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 75 72 61 74 69 6f 6e 20 3d 20 70 61 72 73 65 54 69 6d 65 28 76 61 6c 75 65 73 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 64 75 72 61 74 69 6f 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 20 20 20 20 20 20 20 20 7d 29 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 64 75 72 61 74 69 6f 6e 20 3d 20 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 4d 61 74 68 2c 20 64 75 72 61 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 Data Ascii: ; for (var i = 0; i < values.length; i++) { var duration = parseTime(values[i]); results.push(duration); } return results; })(); duration = Math.max.apply(Math, durations); }
2025-01-11 23:11:21 UTC	614	IN	Data Raw: 61 6e 64 20 69 67 6e 6f 72 65 20 74 68 6f 73 65 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 77 65 27 6c 6c 0a 20 20 20 20 20 20 20 20 2f 2f 20 68 61 76 65 20 74 6f 20 72 65 6c 79 20 6f 6e 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 74 68 65 73 65 20 63 61 73 65 73 2e 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 20 26 26 20 65 2e 73 72 63 45 6c 65 6d 65 6e 74 20 21 3d 3d 20 65 6c 5b 30 5d 29 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 4d 61 72 6b 20 65 6c 65 6d 65 6e 74 20 68 61 73 20 6e 6f 74 20 62 65 69 6e 67 20 69 6e 20 74 72 61 6e 73 69 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 65 6c 2e 64 61 74 61 28 22 74 72 65 6e 64 22 2c 20 66 61 6c 73 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 43 61 6c 6c 62 61 63 6b 0a 20 20 20 20 20 Data Ascii: and ignore those. Unfortunately, we'll // have to rely on the timeout in these cases. if (e && e.srcElement !== el[0]) return; // Mark element has not being in transition el.data("trend", false); // Callback
2025-01-11 23:11:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49775	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	763	OUT	GET /files/theme/jquery.revealer.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:21 UTC	861	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895deaa6c3320-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"c22ab67199a33d876512504cda4ff55b" Last-Modified: Sun, 21 Apr 2024 12:39:24 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: Zx/YIioVCRWhj8qvrieFnhCIDUBYpd0ksew+rT5F/y97h6tlkXNHpbGVrXQdwM1TROkkQQlF6NkCnahCrn6m7g== x-amz-replication-status: COMPLETED x-amz-request-id: EHHFR0PFZ9VQNZ3T x-amz-server-side-encryption: AES256 x-amz-version-id: VWhv4xSgduiSxPjjUnPvdmzftJykBxY7 X-Storage-Bucket: zc4cd X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311 Server: cloudflare
2025-01-11 23:11:21 UTC	508	IN	Data Raw: 62 30 63 0d 0a 2f 2a 21 0a 20 2a 20 52 65 76 65 61 6c 65 72 20 32 2e 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2c 20 50 69 78 65 6c 20 55 6e 69 6f 6e 20 2d 20 68 74 74 70 3a 2f 2f 70 69 78 65 6c 75 6e 69 6f 6e 2e 6e 65 74 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 2f 2f 20 63 68 65 63 6b 20 66 6f 72 20 74 72 65 6e 64 20 65 76 65 6e 74 20 28 6d 61 6b 65 20 73 75 72 65 20 6a 71 75 65 72 79 2e 74 72 65 6e 64 20 69 73 20 69 6e 63 6c 75 64 65 64 29 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 24 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 74 72 65 6e 64 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 20 20 20 Data Ascii: b0c/! Revealer 2.0.0 * * Copyright 2015, Pixel Union - http://pixelunion.net * Released under the MIT license */(function($){ // check for trend event (make sure jquery.trend is included) if (typeof $.event.special.trend !== "object") {
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 69 6f 6e 46 72 61 6d 65 20 7c 7c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 20 7b 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 6e 2c 20 31 30 30 30 2f 36 30 29 3b 20 7d 0a 0a 0a 20 20 2f 2f 20 50 75 62 6c 69 63 20 41 50 49 0a 20 20 76 61 72 20 6d 65 74 68 6f 64 73 20 3d 20 7b 0a 20 20 20 20 69 73 56 69 73 69 62 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 65 6c 2e 64 61 74 61 28 22 72 65 76 65 61 6c 65 72 2d 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 73 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 20 66 6f 72 63 65 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 43 68 65 63 6b 20 73 74 61 74 65 0a 20 20 20 20 20 20 69 66 20 28 6d 65 74 68 6f 64 73 2e 69 Data Ascii: ionFrame \|\| function(fn) { window.setTimeout(fn, 1000/60); } // Public API var methods = { isVisible: function(el) { return !!el.data("revealer-visible"); }, show: function(el, force) { // Check state if (methods.i
2025-01-11 23:11:21 UTC	958	IN	Data Raw: 6c 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 68 69 64 65 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 65 6c 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 69 6e 67 20 61 6e 69 6d 61 74 69 6e 67 2d 6f 75 74 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 61 6e 69 6d 61 74 69 6e 67 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 65 6c 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 69 73 69 Data Ascii: l.removeClass("visible"); el.trigger("revealer-hide"); return; } raf(function(){ el.addClass("animating animating-out"); el.trigger("revealer-animating"); raf(function(){ el.removeClass("visi
2025-01-11 23:11:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49773	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	756	OUT	GET /files/theme/custom-1.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:21 UTC	927	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895deae567c88-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"214dde43cebf15418cdcc76f9677ee46" Last-Modified: Mon, 22 Apr 2024 23:24:18 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: 8kqlzwKofu0jweug7L1NtGZXWW+p7wtkL9qjgMwqqZ0ImeYYGxu/D2MehtS58JZ+HDPEpDqCvyE= x-amz-meta-btime: 2021-10-26T13:57:32.896Z x-amz-meta-mtime: 1635256652.896 x-amz-replication-status: COMPLETED x-amz-request-id: N5BRT9YTTX7RV5DC x-amz-server-side-encryption: AES256 x-amz-version-id: B9J1OqsSfx.0.VWPcb4gc1kD9Rq3dd1i X-Storage-Bucket: zcfbf X-Storage-Object: cfbf67a85c039719090cff2c4718de99203b1ced78cfb8fae5f7240d2f1570b7 Server: cloudflare
2025-01-11 23:11:21 UTC	442	IN	Data Raw: 33 64 36 37 0d 0a 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 20 20 2f 2f 20 4d 6f 62 69 6c 65 20 73 69 64 65 62 61 72 73 0a 20 20 24 2e 66 6e 2e 65 78 70 61 6e 64 61 62 6c 65 53 69 64 65 62 61 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 76 61 72 20 24 6d 65 20 3d 20 74 68 69 73 3b 0a 0a 20 20 20 20 24 6d 65 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 28 21 24 6d 65 2e 68 61 73 43 6c 61 73 73 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 24 6d 65 2e 61 64 64 43 6c 61 73 73 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 Data Ascii: 3d67jQuery(function($) { // Mobile sidebars $.fn.expandableSidebar = function(expandedClass) { var $me = this; $me.on('click', function() { if(!$me.hasClass(expandedClass)) { $me.addClass(expandedClass); } else {
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 69 66 20 28 63 6f 75 6e 74 65 72 20 3e 3d 20 6c 69 6d 69 74 20 7c 7c 20 24 2e 66 6e 2e 63 68 65 63 6b 49 66 45 6c 65 6d 65 6e 74 45 78 69 73 74 73 28 63 6f 6e 64 69 74 69 6f 6e 29 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6c 6f 6f 70 65 72 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 65 72 2b 2b 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 20 64 75 72 61 74 69 6f 6e 29 3b 0a 0a 20 20 20 20 69 66 20 28 21 63 6f 6e 64 69 74 69 6f 6e 29 20 61 63 74 69 6f 6e 28 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 43 68 65 63 6b 20 69 66 20 65 6c 65 6d 65 6e 74 20 Data Ascii: erval(function(){ if (counter >= limit \|\| $.fn.checkIfElementExists(condition)) { clearInterval(looper); } else { action(); counter++; } }, duration); if (!condition) action(); } // Check if element
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 3d 20 24 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 72 65 74 75 72 6e 20 69 66 20 73 63 72 6f 6c 6c 20 68 61 73 6e 27 74 20 6d 65 74 20 64 65 6c 74 61 20 74 68 72 65 73 68 6f 6c 64 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4d 61 74 68 2e 61 62 73 28 70 72 65 76 69 6f 75 73 53 63 72 6f 6c 6c 54 6f 70 20 2d 20 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c 54 6f 70 29 20 3c 3d 20 64 65 6c 74 61 54 68 72 65 73 68 6f 6c 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 64 69 72 65 63 74 69 6f 6e 20 63 6f 6e 64 69 74 69 6f 6e 73 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c Data Ascii: = $(this).scrollTop(); //return if scroll hasn't met delta threshold if (Math.abs(previousScrollTop - currentScrollTop) <= deltaThreshold) { return; } //direction conditions if (currentScroll
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 20 66 6f 72 20 72 65 64 72 61 77 20 74 6f 20 68 61 70 70 65 6e 20 61 66 74 65 72 20 61 70 70 65 6e 64 69 6e 67 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 64 65 74 65 63 74 48 65 61 64 65 72 57 72 61 70 28 29 3b 0a 20 20 20 20 20 20 68 65 61 64 65 72 48 65 69 67 68 74 20 3d 20 24 68 65 61 64 65 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 24 62 6f 64 79 2e 68 61 73 43 6c 61 73 73 28 27 68 65 61 64 65 72 2d 73 74 69 63 6b 79 2d 75 70 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 62 61 73 65 2e 5f 75 74 69 6c 73 2e 6f 6e 53 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 28 7b 0a 20 20 20 20 20 20 20 20 20 20 64 6f 77 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c 54 6f 70 29 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: for redraw to happen after appending base._detectHeaderWrap(); headerHeight = $header.outerHeight(); if ($body.hasClass('header-sticky-up')) { base._utils.onScrollDirection({ down: function(currentScrollTop) {
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 73 28 27 75 74 69 6c 73 2d 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 72 74 54 65 78 74 20 3d 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 68 74 6d 6c 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 22 27 28 29 5d 2f 67 2c 22 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 68 74 6d 6c 28 63 61 72 74 54 65 78 74 29 2e 61 64 64 43 6c 61 73 73 28 22 74 6f 67 67 6c 65 2d 63 75 73 74 6f 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 2e Data Ascii: s('utils-hidden'); } if ($('#wsite-nav-cart-a').length) { var cartText = $('#wsite-nav-cart-a').html().replace(/["'()]/g,""); $('#wsite-nav-cart-a').html(cartText).addClass("toggle-custom"); } if ($('.
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 20 20 7d 2c 20 7b 20 73 75 62 74 72 65 65 3a 20 74 72 75 65 20 7d 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 5f 6e 61 76 53 65 74 75 70 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 62 61 73 65 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 76 61 72 20 24 73 75 62 6d 65 6e 75 43 6f 6e 74 61 69 6e 65 72 20 3d 20 24 28 27 2e 6e 61 76 20 2e 68 61 73 2d 73 75 62 6d 65 6e 75 27 29 3b 0a 20 20 20 20 20 20 76 61 72 20 64 72 6f 70 64 6f 77 6e 43 6c 61 73 73 20 3d 20 27 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 6e 27 3b 0a 20 20 20 20 20 20 76 61 72 20 24 64 65 73 6b 74 6f 70 4e 61 76 20 3d 20 24 28 27 2e 64 65 73 6b 74 6f 70 2d 6e 61 76 20 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 27 29 3b 0a 0a 20 20 20 20 20 20 76 61 72 20 Data Ascii: }, { subtree: true }); }, _navSetup: function() { var base = this; var $submenuContainer = $('.nav .has-submenu'); var dropdownClass = 'dropdown-open'; var $desktopNav = $('.desktop-nav .wsite-menu-default'); var
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 64 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 69 6e 64 4e 61 76 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 2c 20 35 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 69 6e 64 4e 61 76 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 2f 2f 20 55 6e 62 69 6e 64 20 2f 20 62 69 6e 64 20 61 66 74 65 72 20 64 65 66 61 75 6c 74 73 20 68 61 76 65 20 72 75 6e 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 6f 62 73 65 72 76 65 44 6f 6d 28 24 28 27 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 27 29 5b 30 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 62 69 6e 64 4e 61 76 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 7d 2c 20 7b 20 73 75 62 74 72 65 Data Ascii: date(); bindNavEvents(); } }, 500, 5); } bindNavEvents(); // Unbind / bind after defaults have run base._observeDom($('.wsite-menu-default')[0], function() { bindNavEvents(); }, { subtre
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 0a 0a 20 20 20 20 5f 63 6c 6f 73 65 41 6c 6c 44 72 6f 70 64 6f 77 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 24 28 27 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 27 29 0a 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 27 2e 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 6e 27 29 0a 20 20 20 20 20 20 20 20 2e 68 69 64 65 44 72 6f 70 64 6f 77 6e 73 28 27 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 6e 27 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 5f 73 65 61 72 63 68 42 6f 78 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 62 61 73 65 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 76 61 72 20 73 65 61 72 63 68 42 6f 78 20 3d 20 27 2e 77 73 69 74 65 2d 73 65 61 72 63 68 27 3b 20 2f 2f 20 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 69 Data Ascii: _closeAllDropdowns: function() { $('.edison-header') .find('.dropdown-open') .hideDropdowns('dropdown-open'); }, _searchBox: function() { var base = this; var searchBox = '.wsite-search'; // Not available i
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 2c 20 33 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 62 61 73 65 2e 5f 75 74 69 6c 73 2e 6f 6e 45 73 63 4b 65 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 28 73 65 61 72 63 68 42 6f 78 29 2e 72 65 76 65 61 6c 65 72 28 27 69 73 56 69 73 69 62 6c 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 73 65 61 72 63 68 42 6f 78 29 2e 72 65 76 65 61 6c 65 72 28 27 68 69 64 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 73 65 61 72 63 68 54 6f 67 67 6c 65 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 65 Data Ascii: }, 300); }); base._utils.onEscKey(function() { if ($(searchBox).revealer('isVisible')) { $(searchBox).revealer('hide'); } }); $searchToggle.on('click', function(event) { e
2025-01-11 23:11:21 UTC	1369	IN	Data Raw: 52 45 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 21 44 49 53 41 42 4c 45 5f 4e 41 56 5f 4d 4f 52 45 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 64 65 73 6b 74 6f 70 2d 6e 61 76 20 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 27 29 2e 64 61 74 61 28 27 70 78 75 4d 65 6e 75 27 29 2e 75 70 64 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 76 61 72 20 68 69 6a 61 63 6b 4d 69 6e 69 63 61 72 74 54 6f 67 67 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 24 74 6f 67 67 6c 65 20 3d 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 6f 67 67 6c 65 54 65 78 74 20 3d 20 24 74 6f Data Ascii: RE == 'undefined' \|\| !DISABLE_NAV_MORE) { $('.desktop-nav .wsite-menu-default').data('pxuMenu').update(); } }; var hijackMinicartToggle = function() { var $toggle = $('#wsite-nav-cart-a'); var toggleText = $to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49778	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	387	OUT	GET /js/site/footerSignup.js?buildTime=1736455907 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:21 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3600 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 09 Jan 2025 20:37:11 GMT ETag: "67803377-e10" Expires: Thu, 23 Jan 2025 20:53:03 GMT Cache-Control: max-age=1209600 X-Host: grn182.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:21 GMT Age: 181098 X-Served-By: cache-sjc1000132-SJC, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT X-Cache-Hits: 56, 1 X-Timer: S1736637082.524316,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 66 61 6c 73 65 7d 3b 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 3b 69 2e 6c 6f 61 64 65 64 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 3b 72 2e 63 3d 65 3b 72 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 22 3b 72 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 77 69 6e 64 6f 77 2e 41 53 53 45 54 53 5f 42 41 53 45 Data Ascii: (function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={exports:{},id:n,loaded:false};t[n].call(i.exports,i,i.exports,r);i.loaded=true;return i.exports}r.m=t;r.c=e;r.p="https://cdn2.editmysite.com/js/";r.p="https://"+window.ASSETS_BASE
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 6e 75 6c 6c 3b 69 66 28 21 72 29 74 2e 61 70 70 6c 79 28 69 2c 6f 29 7d 3b 76 61 72 20 73 3d 72 26 26 21 6e 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 3b 6e 3d 73 65 74 54 69 6d 65 6f 75 74 28 61 2c 65 29 3b 69 66 28 73 29 74 2e 61 70 70 6c 79 28 69 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 65 3d 72 2e 65 6c 65 6d 65 6e 74 5b 30 5d 3b 66 28 65 29 3b 79 28 29 3b 76 61 72 20 6e 3d 74 28 22 23 77 73 69 74 65 2d 6d 69 6e 69 2d 63 61 72 74 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 29 7b 69 66 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 Data Ascii: n;return function(){var i=this;var o=arguments;var a=function(){n=null;if(!r)t.apply(i,o)};var s=r&&!n;clearTimeout(n);n=setTimeout(a,e);if(s)t.apply(i,o)}}function l(){var e=r.element[0];f(e);y();var n=t("#wsite-mini-cart");if(n.length){if(window.innerHe
2025-01-11 23:11:21 UTC	844	IN	Data Raw: 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 77 69 64 74 68 22 2c 22 31 30 30 25 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 68 65 69 67 68 74 22 2c 22 34 35 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 6c 65 66 74 22 2c 22 30 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 7a 2d 69 6e 64 65 78 22 2c 22 35 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b 74 28 22 69 6d 67 2e 66 6f 6f 74 65 72 2d 61 62 2d 70 75 62 6c 69 73 68 65 64 2d 74 6f 61 73 74 2d 69 6d 61 67 65 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 2c 22 69 6d 70 6f 72 74 61 Data Ascii: le.setProperty("width","100%","important");e.style.setProperty("height","45px","important");e.style.setProperty("left","0px","important");e.style.setProperty("z-index","5","important");t("img.footer-ab-published-toast-image").css("display","none","importa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49779	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	616	OUT	GET /fonts/Roboto_Mono/regular.woff2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://talktalk770.weebly.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:21 UTC	628	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12312 Server: nginx Content-Type: font/woff2 Last-Modified: Thu, 19 Dec 2024 22:49:41 GMT ETag: "6764a305-3018" Expires: Mon, 13 Jan 2025 15:53:38 GMT Cache-Control: max-age=1209600 X-Host: blu5.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1063064 Date: Sat, 11 Jan 2025 23:11:21 GMT X-Served-By: cache-sjc10077-SJC, cache-ewr-kewr1740042-EWR X-Cache: HIT, HIT X-Cache-Hits: 813, 0 X-Timer: S1736637082.528060,VS0,VE23 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 30 18 00 0e 00 00 00 00 57 9c 00 00 2f be 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 36 06 60 3f 53 54 41 54 48 00 84 36 11 08 0a 81 99 60 f9 15 0b 83 42 00 01 36 02 24 03 83 42 04 20 05 85 04 07 20 0c 07 1b 97 44 b3 22 d8 38 00 80 a2 8d 2d 8a 72 b9 e9 82 ff 43 82 3c 43 9a ed 0a 2f 70 2e 5b f6 4c 89 ad aa 00 1c 38 8d 1d 10 4b d5 2b b5 e4 e3 31 17 ce d3 da fb 1f 2b 9e 5c 24 c4 cc e5 52 8e cb 8d bc 4f 3a 5a 81 5c fe 56 1c a1 b1 4f 72 a1 aa 61 eb d9 74 a4 e8 52 12 06 a1 72 d0 20 41 22 1c 48 4d 2e 8f 90 a8 57 5f 1e 8b 84 3f 7a 37 fb 59 92 10 98 d9 40 b9 f6 d4 3c 82 54 8c e6 54 12 f6 49 f2 4b bf 4e 45 28 35 19 82 6d 76 38 a3 e6 2c d0 06 41 10 83 10 69 45 aa c4 06 b4 09 31 73 46 cf a5 b5 39 a7 6e ea Data Ascii: wOF20W/6`?STATH6`B6$B D"8-rC<C/p.[L8K+1+\$RO:Z\VOratRr A"HM.W_?z7Y@<TTIKNE(5mv8,AiE1sF9n
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 10 63 3c ac 31 11 bc 3a c9 de 85 0e b6 5b f8 cf 20 d5 a3 db 29 b3 13 b7 e9 dd 6b a5 2a d1 d4 c7 20 82 50 54 69 09 89 62 99 dd 58 5c 18 74 32 5a 83 70 c5 14 2b 1b 8d ac 24 6f 9e 91 ca 66 93 1a 1e 0c 57 b1 c5 ce eb 79 77 ba 37 3a b6 39 3e 4b ae 8a f8 6a 6a 20 45 39 da 40 a0 29 8a 6d 6d 55 a2 10 0f d0 0f 2c b3 ed be cc 5a 84 2a a6 bf 9d 7a ee c8 6b a6 fb 9d 98 42 1d 5b b0 09 91 98 21 90 26 1c 12 98 5d cf 6f 45 72 ed bc 38 5a e8 05 4e 3e c0 c1 00 6f 63 f0 9c 75 8d 52 ac 1b 68 2e 89 60 75 ae ba c8 ec 9b 88 07 a3 64 53 f4 6e 1c 91 18 ea f7 fd ea 18 84 e4 5f 52 8b 1d b8 7d 1b ed dc 4e 3b 76 e2 51 69 8f dd 12 2a 13 58 25 cc 02 10 75 8c 18 24 46 ec b1 88 e4 eb 64 4c 3d b6 16 fd 15 1a cf 10 f8 a8 01 e0 2d 58 ff f4 b8 c0 7a 2a a4 12 d7 ac 2c 5d c4 97 32 37 d6 08 ce Data Ascii: c<1:[ )k* PTibX\t2Zp+$ofWyw7:9>Kjj E9@)mmU,ZzkB[!&]oEr8ZN>ocuRh.`udSn_R}N;vQiX%u$FdL=-Xz*,]27
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 1f 0f 9b c4 d9 8d 78 75 86 ce b7 a2 86 08 a0 46 b0 df 7a 26 1f e1 ba da 1f d9 3c 6c e0 c8 cf 8c 18 7c 44 e4 b1 84 12 4e 09 54 fb 39 10 eb 12 02 f8 a5 11 6c 61 10 d9 55 28 01 20 0b aa 47 68 67 38 00 dd 21 8f 5d 96 3c 0c ea 84 6e 52 ba 24 8c 07 92 0d ec 66 63 ea b3 01 03 a7 fe 04 72 15 82 c8 1d 4a 20 90 e1 61 8d 9c ef 2d 40 a1 15 b9 50 93 99 f4 15 8c 4b 61 0c e5 c3 58 34 77 e0 76 0e 1a a0 5d 18 96 19 5c e4 4c 1b d0 43 2a 01 35 54 2a a7 41 ad 52 c1 fa 95 3e 98 36 0f fc 56 31 18 cf 79 e2 fa 41 52 53 fe 95 42 ad 71 4f 86 3e 71 85 4d fc 82 72 c8 07 2d 9a c9 88 95 1c eb 4e 5c 23 41 f4 2a e8 c5 19 5a 0f ca 39 f4 5b 98 15 11 48 d0 99 ec ec 36 6d 32 ce bf 80 5a e4 9d 21 78 b5 cb e8 f2 b5 d7 5f a8 b5 3e d3 d1 14 26 a2 5a 6a e0 9d d3 d2 81 42 ec 90 15 80 60 11 66 bb Data Ascii: xuFz&<l\|DNT9laU( Ghg8!]<nR$fcrJ a-@PKaX4wv]\LC5TAR>6V1yARSBqO>qMr-N\#A*Z9[H6m2Z!x_>&ZjB`f
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 00 fc 22 c0 73 a9 23 c3 38 d1 b9 09 c8 36 74 0c e8 07 11 1f c7 47 34 d7 8f 8e 56 01 0b 63 d3 c8 cf e6 80 d5 d6 3e 92 f1 f1 f4 68 93 f2 a5 3c d2 0e 84 3f 9d 30 83 de 1e c6 42 44 1a 3e b6 a0 20 de 2a 96 0b 72 42 0c 55 34 bd 9b 9b 63 a5 e5 34 75 71 c5 b7 6f a1 59 4a a5 21 84 27 cc 09 52 0a 71 f9 33 87 ac 0d 8a 6d ff fe 33 1d 99 9d d6 47 19 99 49 68 f2 92 7a 49 3d c7 40 ec 24 88 f3 1d f3 95 f8 48 93 1b 8f 1d df 40 4e 06 49 60 1c 2b 0c 5c 21 e7 00 36 b0 30 ce 96 2b cb 67 96 51 33 e3 ca 71 60 fb c2 18 bf 8c 25 ca b1 d2 b1 f4 92 f4 71 40 e9 37 7e f1 c1 14 33 a4 39 44 1e 27 3b 50 24 0c ca 09 39 6a 9d 25 dd 72 fb f7 1d ac 6c c3 94 e0 ef bf 24 93 90 ac 2f c0 76 eb a1 ad 4f fc 3e 85 fd df f0 64 0a d6 39 fb eb 31 60 61 3c f6 17 68 1a 06 16 2e 26 60 61 6c 1d 01 6e fd Data Ascii: "s#86tG4Vc>h<?0BD> *rBU4c4uqoYJ!'Rq3m3GIhzI=@$H@NI`+\!60+gQ3q`%q@7~39D';P$9j%rl$/vO>d91`a<h.&`aln
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 47 0b 7d b8 86 69 12 a2 cc ca 86 d8 18 5e 0e 7b f6 fc 9b d3 7b e7 7f ae 3f 8f 82 11 a7 8a 10 6d b0 8a a1 1c 1d 7e 38 4c ce 6c ff 6b c9 c9 5e a4 9f d2 91 4f 2f f9 68 38 d3 a6 c9 22 f2 e8 a2 45 ab 89 4a 0e 28 47 7d bc ae 02 f6 fb 99 e3 a5 ff 94 8e ad 1e d3 6e bc ec 85 2b a0 d3 ea 71 1e ff fc 38 df e4 e9 d9 7d 7e fe 0d 70 b6 7d 9c f2 c6 14 98 5c 38 3c d5 93 ec 00 d6 8e 91 cd ec 07 da 6f 6a f7 ac 85 67 0d d3 b3 95 f4 cd b9 dc ab de b8 34 3a bd 01 87 6b a2 d3 33 c0 87 ef 9d df ff fc 5e 7d e0 d4 13 9d 7e 69 eb ae 39 60 09 e6 aa 81 fd 41 30 5e 7a 62 c4 af 3c b0 d0 00 47 32 73 07 d3 98 9e 19 7c 76 b1 83 9f ef c5 77 ef 9f 21 83 8d 41 96 36 16 58 f7 85 f9 0f 7e f0 77 0b 8f 3f 21 83 8c d8 68 54 b9 cb bb 64 04 bd 45 e0 62 cc 50 df 9c 78 85 5b 2b 70 0e 96 83 7c b6 35 Data Ascii: G}i^{{?m~8Llk^O/h8"EJ(G}n+q8}~p}\8<ojg4:k3^}~i9`A0^zb<G2s\|vw!A6X~w?!hTdEbPx[+p\|5
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 0d 7e d9 74 54 ea 02 48 20 29 d4 24 e4 fb 25 c8 14 06 03 99 f6 fe bd 1a 49 a5 26 fb 83 0f fe a9 a0 72 ab cb 76 97 fd ff ea 44 31 55 ed e2 c4 49 7e 0d f7 2d 37 86 c6 df 16 5f 5a 3a 11 4b e3 d3 05 f4 83 39 49 84 dd 24 01 49 30 9c 58 48 cf 80 e9 f5 d7 1b cd cc 53 09 d3 02 59 e7 1c 2f f6 1e 5f c7 5c 58 32 5f c7 91 a0 1a 70 de fa 30 2e 23 8b a6 4f 0c 19 d0 46 38 30 a3 e4 69 49 be e0 cb 20 d4 59 5b d9 72 93 9e 0c 98 ba 4d 2d 3d 33 bd 3b 44 a2 75 ad 9e 22 2c 2d 40 15 1d 9d 87 e0 09 8b b1 3a 7d 60 26 75 d4 c7 d1 d1 49 8f f6 79 37 3f ff cd 1d 8a 97 5f 5d 3d 00 77 28 04 88 e7 86 ca 44 9c c0 85 72 f4 b4 bb fb d7 1f f0 56 7f 54 2b e1 87 0b 74 94 45 52 6f ea cc f7 64 70 4a 7c 87 3b f1 4a 3a 3a 42 e4 5a c2 98 3c f2 be 66 b5 1f 2d 28 a1 b0 a0 c0 9b 13 91 e3 9b 5a 18 12 Data Ascii: ~tTH )$%I&rvD1UI~-7_Z:K9I$I0XHSY/_\X2_p0.#OF80iI Y[rM-=3;Du",-@:}`&uIy7?_]=w(DrVT+tERodpJ\|;J::BZ<f-(Z
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: d6 dd e1 4e 8e d4 55 ea 64 6a 07 89 d4 2f 4f f7 8d f2 28 a4 c2 09 70 05 29 cc 3b fe d8 e5 0c 14 27 3c 15 f7 ed 35 a2 94 7f 18 94 87 1b d7 1c ad a1 4b 6c ee f7 df 8f b5 59 c6 ba f2 94 b4 22 31 99 b1 22 41 d0 2f 4f f3 96 ba 15 d0 1d 1d 7d a3 40 d3 12 68 2a 52 72 eb c7 8f ed 82 18 bb 87 a6 a7 99 4e bd 3a 82 88 20 26 ce 64 06 65 12 67 f7 64 91 42 d4 f5 fe 69 7a 2d b1 6b e3 2e 71 60 54 2e 29 85 3e c8 17 cb c2 07 39 56 e6 7c ff fc cf 9f 92 30 61 44 95 a7 97 3d 26 89 3d a7 a6 75 91 78 03 34 8d 66 6b f8 ce 09 de 78 b6 b5 f9 d8 e0 76 ab 27 08 ab d8 ad db c4 3b e4 03 96 60 c3 d3 53 c1 39 db 6c e3 83 80 a5 49 d4 b1 b4 63 b2 a3 36 72 db a5 eb dc 68 5c a2 19 4e c9 55 5c df cd 27 a2 b6 61 b2 61 69 03 60 12 13 f3 8b db 57 54 54 b3 02 7a 63 95 c1 03 cd f5 cd 29 9f 9a 86 Data Ascii: NUdj/O(p);'<5KlY"1"A/O}@h*RrN: &degdBiz-k.q`T.)>9V\|0aD=&=ux4fkxv';`S9lIc6rh\NU\'aai`WTTzc)
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: c3 93 96 48 a9 b5 3a fe f4 89 70 ce 16 59 46 e6 16 29 48 67 9b 76 a9 b4 55 71 e7 c5 72 51 d4 29 75 59 d9 49 b5 38 4a 24 cf 72 d5 7c b8 73 22 b9 58 76 32 63 c1 c9 78 b1 54 22 55 5e 04 2a af 06 25 32 91 bc 48 2e 92 e1 f3 b5 f2 93 2a 18 a7 54 02 81 a1 aa 34 0b 1c 37 47 c7 1d d3 3a 70 a3 4a e7 c0 0b a8 08 6a ac f9 bf 78 9d 2f 17 2a 54 d0 b5 6d 19 45 d7 ea 0b 32 8e e6 4a 8f d0 a0 84 3f ff 3d 52 0a 58 37 fc 56 a7 78 94 f6 74 6f be 78 a5 1e 29 ab 56 af 24 e7 fc 1a d7 16 d7 f7 5b ea 6f 00 b6 fe 27 2a 36 cd cf 39 2d 80 1c 96 12 e0 ec 14 90 4e a1 04 64 b8 38 a7 60 c3 c8 69 58 67 14 36 a3 9e ec cd 71 82 7c f2 f2 ba e6 04 41 78 7b e1 81 d3 55 2f af 8f 10 c7 68 e0 d7 d7 67 2e 5a 9b 77 4d 7b 23 7f 6d d1 02 bf 31 9d b2 27 bf df 7b 6a af fb b6 c2 0d 94 19 70 6a 28 66 a8 Data Ascii: H:pYF)HgvUqrQ)uYI8J$r\|s"Xv2cxT"U^%2H.T47G:pJjx/TmE2J?=RX7Vxtox)V$[o'69-Nd8`iXg6q\|Ax{U/hg.ZwM{#m1'{jpj(f
2025-01-11 23:11:21 UTC	1288	IN	Data Raw: a7 f0 ba b6 d5 6d f5 6d 10 15 65 eb 4f 3f 35 86 46 47 14 3b b3 9d 36 5e a8 74 64 57 9e 10 0a 05 02 be ea 41 8d d9 be fa 7d ab f7 d5 ed b3 68 51 de e3 f3 85 a2 53 e2 2a 76 cd 92 26 a7 21 62 91 63 78 4c 73 d8 e9 31 ea 78 ba 05 c0 60 e2 d1 61 f3 7a 69 fb c6 fa 5f bb f4 e2 df b3 93 ca b6 ac 0b 38 3d 7c fb d0 41 33 cf 8d 05 34 eb 81 9d 03 c2 6b 16 87 ad f1 a1 73 0c 18 94 ab 7f 36 27 b0 c4 cb fb 97 8c 59 fb 8c 5b 55 e5 d4 59 5d 79 76 6d 9e 89 57 bf 07 f3 61 4d ca 0d b5 18 a4 5d 48 40 c1 81 44 5e 98 b0 0c 08 8d 07 4e c3 a8 55 2e 67 8a b2 27 bd a8 c6 96 a2 9c d1 b8 6d bb da cd 12 54 2f 71 3a 8c c1 4c d1 5f 07 3a 52 8b 87 e5 c1 8a 52 cf dd 08 96 1c 96 5b 18 82 a4 1c d6 04 1c 20 db 16 d4 83 be b4 d8 bc b3 40 33 15 40 b3 b4 61 ea 59 4b a6 91 b5 64 2c 58 4b a6 47 b3 Data Ascii: mmeO?5FG;6^tdWA}hQS*v&!bcxLs1x`azi_8=\|A34ks6'Y[UY]yvmWaM]H@D^NU.g'mT/q:L_:RR[ @3@aYKd,XKG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49781	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	601	OUT	GET /fonts/Karla/bold.woff2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://talktalk770.weebly.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn2.editmysite.com/fonts/Karla/font.css?2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:21 UTC	626	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11384 Server: nginx Content-Type: font/woff2 Last-Modified: Thu, 19 Dec 2024 22:49:41 GMT ETag: "6764a305-2c78" Expires: Tue, 14 Jan 2025 14:00:56 GMT Cache-Control: max-age=1209600 X-Host: grn54.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:21 GMT Age: 983426 X-Served-By: cache-sjc10056-SJC, cache-ewr-kewr1740075-EWR X-Cache: HIT, HIT X-Cache-Hits: 3, 57 X-Timer: S1736637082.525207,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2c 78 00 10 00 00 00 00 56 fc 00 00 2c 16 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 52 1b 88 08 1c 85 4a 06 60 3f 53 54 41 54 4c 00 84 16 11 08 0a 81 84 44 ed 69 0b 84 2e 00 01 36 02 24 03 88 58 04 20 05 84 0a 07 20 0c 07 1b 59 48 b3 a2 6e b4 5e 31 28 8a ea 49 33 fb 2f 13 38 1c 22 60 de 3a bf 09 8b 22 12 8b a6 19 14 4d 13 89 94 04 0f ee d1 b7 f8 19 ea b1 40 cb 17 97 e4 41 18 cf 08 07 de 7b 74 f9 9a b0 28 28 22 0e f8 eb a0 09 45 b1 ae 81 3a 42 63 9f e4 1e 91 6e cd de e5 92 10 20 8d a0 21 41 3c 20 84 16 21 f2 3c fd 69 5d b0 84 d2 22 ad 19 aa 08 58 1a 60 47 9e 62 69 60 c3 d2 f2 3e f8 18 5b 2c f5 f9 88 9d d2 2c 9d a6 e2 8b 15 1e ac fd 82 7a 49 a7 ff 2c 10 2b 22 54 ab 98 14 10 95 47 3a 02 cb e5 Data Ascii: wOF2,xV,RJ`?STATLDi.6$X YHn^1(I3/8"`:"M@A{t(("E:Bcn !A< !<i]"X`Gbi`>[,,zI,+"TG:
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: fa 5e 86 2e a2 c2 1d 37 02 e0 a7 f3 9e 6a 0b 0c 1e bb 6b d8 21 87 9d f2 b7 7f 5c d6 ef 43 70 a1 47 10 eb 16 24 79 43 6b 3d ac 19 64 6e eb a1 bd c5 a0 72 cd b1 ef 01 cf 7d f7 2b 28 48 1b e9 a5 7e dd e7 5c 77 db a0 17 7e 98 44 13 e9 20 1e 44 c8 f2 fb b8 cd 79 17 5d 76 c3 1d 77 3d d6 a3 df 53 2f 0d 1b f5 c1 cf 00 94 88 8a 74 11 37 f4 21 42 fe 02 04 0a 12 2c 44 a8 59 c2 84 9b 6d 8e b9 e6 89 50 a9 ca 86 16 ed 5b ad cf 58 70 60 a8 74 1e 1f 09 cf 9a 0a 7d 39 1c 94 32 c8 f3 08 40 6c 53 4a 00 5b c6 bc 54 76 e9 8e af 60 63 a0 0c 02 c7 01 7f 04 98 03 08 d1 dd 67 01 17 85 07 40 13 dd bd b6 a5 59 ad e9 00 f4 cd 30 e3 3d 00 ea 00 00 fe 93 7a 03 80 84 43 8f b0 11 00 6f 68 88 b6 79 e0 86 cc 62 04 00 3f 1c f5 91 b5 16 05 ff 33 03 00 9a d8 79 80 3d 07 b0 3f 80 4a 13 0b 00 Data Ascii: ^.7jk!\CpG$yCk=dnr}+(H~\w~D Dy]vw=S/t7!B,DYmP[Xp`t}92@lSJ[Tv`cg@Y0=zCohyb?3y=?J
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 15 de 98 77 0a a9 d9 31 5b 1c 57 df c8 b9 4c e8 d9 f6 59 7f 3e 8a 1c 5f 29 2d 6f 7a c9 c3 41 1e 3c 71 9b 44 b7 e8 6d da aa c4 51 f7 dd 2e a6 8d 93 57 ec 28 55 8d 7f 0a 86 75 40 4d e6 d8 18 67 4c eb 4a ae f2 59 37 97 c7 0f 5d 60 46 d7 dc 7b db d9 16 6b 1b 62 73 cb 5a 5f 8d bc 9d fb 97 15 63 42 82 a1 8d b5 c0 6f 69 05 83 0e 77 ac 78 8a 96 ae 1b f7 31 a3 cd 15 2a 08 12 71 11 c1 33 75 34 40 34 2a c9 c4 9e 6c f9 e3 fa 6b 28 ed 95 7c c4 11 83 52 83 92 18 29 a1 17 5a d0 2c 57 82 49 b4 db 26 90 45 c7 06 cc e3 84 c6 8f 3b 9c 5d 3f 43 53 37 75 4d 30 b9 0e 59 d7 b5 2c a4 4a 5d 01 60 e1 0d ff 90 e4 9f dd ad 71 71 44 e6 27 e3 01 a9 ea e0 98 12 a0 c4 c8 88 93 55 a1 64 bb bd 17 8b 17 5a 60 0a 77 e4 71 1f 3f ec 2e a2 2b 77 18 b9 b2 cd 01 aa 39 a6 f4 8d e2 ba eb fe 65 92 Data Ascii: w1[WLY>_)-ozA<qDmQ.W(Uu@MgLJY7]`F{kbsZ_cBoiwx1q3u4@4lk(\|R)Z,WI&E;]?CS7uM0Y,J]`qqD'UdZ`wq?.+w9e
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: b3 65 35 48 b5 06 6e c9 ff ff 9c 49 c5 27 c1 55 68 74 b1 2e 2e dc aa c2 a3 62 b9 42 ea 54 bc 64 70 7f 1c 98 0e c9 be 50 90 fe ae ad c5 3c 71 72 49 ba a1 5d c3 bf 58 4b 63 a0 12 e2 60 88 08 03 15 65 8d 11 a3 4a 0c 74 12 4c 83 c4 26 52 69 cd b1 97 1a d5 77 20 d6 d3 b9 53 80 88 07 a6 90 dc ab f9 39 6f 5a bb b2 5f 5f 2d b3 a4 6e 13 6b 3a 5c cf b3 b2 7a 0a be f6 d9 30 e7 7b b2 19 01 48 8a 2a 22 38 87 25 e5 05 58 e4 11 34 92 04 73 7d 84 99 90 54 bd 93 03 3e 62 b3 b8 c5 76 34 3b 30 7e 89 d6 8c d6 d2 d8 d5 6b 7e f9 cb d7 cd 71 dc 66 57 40 1b b0 fd 67 60 52 64 a9 8b 8a af 37 99 87 30 4a 1d 15 4f ea e0 55 a8 6b 11 1c 59 d8 c6 ef 41 fe ca 2e b4 34 01 8f 22 44 a7 fa 53 11 cc b5 64 88 b3 07 21 50 40 6e dd 95 9c ae 2b 3b fa 6d 11 43 cf 24 e5 b8 30 b9 55 a7 4f 6e 3f 2e Data Ascii: e5HnI'Uht..bBTdpP<qrI]XKc`eJtL&Riw S9oZ__-nk:\z0{H*"8%X4s}T>bv4;0~k~qfW@g`Rd70JOUkYA.4"DSd!P@n+;mC$0UOn?.
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: f4 bf c1 22 2c 79 25 a9 3c 31 bb ee 0d 9d 2a cb f5 a3 53 4c 9b b0 e4 40 1c 8b 2a 5c f7 53 5d 1f de d9 5a d6 f1 f9 ea 60 f7 f0 1d 56 cb 9b c5 a1 c9 e2 e4 b8 14 1e 26 8c 82 66 ac 81 24 6e 86 36 0f 16 a4 a5 6d 7f 29 01 f0 c1 ff ca f2 f6 9b 7e b9 93 b9 24 c0 48 73 98 b4 68 ea a9 ca 2f e8 ae ea f2 b8 4f 3c 60 79 fb a1 ac bf 5f 98 f5 eb 03 b3 10 ef 1a 7b 02 f2 92 8b 9b 53 e9 f0 e5 97 8a e5 00 f9 39 cc d7 3b 80 47 ae 54 4d 76 fd e2 fa c4 81 d7 17 b4 f0 5d fd fb cf 29 cb ac 27 80 78 db 76 b9 c2 25 e2 36 e4 81 51 6b c9 cb 32 8f c8 ab 81 ff 01 e0 7b 96 1f ea eb 87 f3 5d 75 f5 2b 7f 88 0f b5 eb 6f 7a 3a f2 0f f4 e0 f1 1d 89 4f a5 e4 e2 8c 4e c0 5f 06 4f ae ef 39 09 88 cf f0 08 84 9f 22 5c 59 bc 5b 17 da 2b c2 ad 53 45 c2 4a 58 44 38 32 36 12 f4 7d de 2f c2 ad 57 47 Data Ascii: ",y%<1SL@\S]Z`V&f$n6m)~$Hsh/O<`y_{S9;GTMv])'xv%6Qk2{]u+oz:ON_O9"\Y[+SEJXD826}/WG
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 40 2b 25 6f a8 fb 29 15 51 71 4e e5 f8 ff a6 70 27 5e cf 40 54 3d a4 0e f5 a6 a9 6b 2f 36 5e 04 59 8d 1b dc cc 7f 92 e9 66 f0 d0 91 e0 8e 38 bc e4 9e fd 95 92 83 a7 db 35 9a 9e 59 93 42 b3 9c 19 be 1c 6a a3 4f 28 41 c0 0f 25 fb 78 87 90 f9 82 10 c2 05 3a d3 7c 35 dd 36 66 53 67 eb bd c3 48 99 30 a2 37 10 3b 48 e0 ec 87 b9 13 93 ca 8e 51 12 d0 fc a7 ee 61 30 67 07 f6 18 cc f7 3a 9d c1 2e 62 39 45 6f 56 6c f7 ff 48 40 aa 80 8d 8e 17 ea 5e d5 8e f2 77 b8 07 4d d9 99 8f 08 0e d6 ea 5e 8c 2f 1f bd 53 6b af 6a 38 29 a7 65 57 2e dc 18 9c 2d 3f d9 60 af aa 05 a3 5b 2d 04 97 82 ac 06 95 8f 12 42 81 50 d6 b0 56 ad 73 c7 43 d3 2c 6c f7 bc ca 3c 89 b3 62 35 65 2d c5 89 ea b4 de fd 3f 10 d7 ea 70 25 2c e5 81 7b 8c e7 15 4b 73 dc 77 f3 2c d6 75 87 6c 77 ee bc 02 46 75 Data Ascii: @+%o)QqNp'^@T=k/6^Yf85YBjO(A%x:\|56fSgH07;HQa0g:.b9EoVlH@^wM^/Skj8)eW.-?`[-BPVsC,l<b5e-?p%,{Ksw,ulwFu
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 19 73 43 30 c0 ab 38 84 1a ac c0 93 bd 5d dc b0 70 19 42 ca c4 1a f9 5a 43 c3 30 57 09 2f 5b 5b 31 e3 dc 3f da 8d 21 50 c2 a6 e7 16 9e 88 68 21 41 88 09 67 86 85 41 19 54 22 94 0d a7 25 f1 62 cd b1 65 8d 15 d3 35 6d 86 1b 97 32 37 5b f6 d3 95 65 80 9c 9d d0 cd 69 cb 4f 4b 05 51 8f f1 7d 5c be c9 22 3a 32 da 77 b4 ef dc d7 cb 84 e0 87 be 5f 25 15 a2 a5 71 05 68 de ee 59 fd 7b dc ad f6 27 09 a4 fd c6 74 ef 1b cb 6e fb f6 29 16 d8 24 ee de 53 7b 41 44 f8 6c 0d 05 20 31 fd 03 b3 de 25 1a 1e 03 3f 74 68 0e 22 78 fc 4e 80 6a 9c 02 34 cd 48 ad dd 44 c5 c0 54 fc fe 52 07 07 97 e5 aa 2c 3e 27 b1 bc cc 90 dc 56 62 91 d4 2b a3 77 65 9c ec 1c 1f da 0b 67 13 c3 c2 39 78 18 8c 85 0f 0f 67 61 81 07 c4 7e 4f 9b fb 1c d5 48 02 84 09 43 3f 65 bc 75 53 5d 46 1a 9f 98 0e 9f Data Ascii: sC08]pBZC0W/[[1?!Ph!AgAT"%be5m27[eiOKQ}\":2w_%qhY{'tn)$S{ADl 1%?th"xNj4HDTR,>'Vb+weg9xga~OHC?euS]F
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 2c e2 4e 44 09 c0 16 68 07 e5 f9 dd d7 9b 92 4e e9 10 bf 7a 2d 96 91 ee 5b 9f 28 3e 76 06 4c ac ca 02 60 e4 09 75 95 93 67 0f 6f f9 99 8b 01 58 08 d2 aa 3b f1 32 46 03 15 c0 ae 26 46 00 30 47 c4 0d b7 6f 62 94 02 08 a0 0d 88 1d 5a c1 24 c1 69 e3 e5 80 ab e0 5a 8d 93 a0 53 c9 ad d1 59 66 e1 26 43 fc 12 ac b1 7e 7d 56 fe 21 18 c0 94 4f 1c 74 5e 72 7f e2 fd 78 09 20 c3 6a d5 d7 ca 10 02 e2 58 7e 2d da a1 ce 5e 38 e9 8b ba 3a 4e 3b e9 25 64 6b 6a 0f ad 0b 9b e5 be a3 ff 60 1a 06 a6 a7 13 4c 70 fb 1b cd 2a 76 1e 32 e7 8d e0 b9 48 78 b1 da 5c 7b 9a f4 1e b5 29 73 41 22 ed d6 be 59 82 19 27 4d fc 12 46 05 1d 5e 22 00 41 7c 95 f5 fb 4a 5d bc 00 74 3f db cf 25 18 c4 cd 45 cf a1 1a bb 06 b0 c8 c6 b7 c9 54 03 73 94 f8 08 80 8a b2 03 9a eb 1d 87 8f f0 36 d7 27 8e d7 Data Ascii: ,NDhNz-[(>vL`ugoX;2F&F0GobZ$iZSYf&C~}V!Ot^rx jX~-^8:N;%dkj`Lp*v2Hx\{)sA"Y'MF^"A\|J]t?%ETs6'
2025-01-11 23:11:21 UTC	360	IN	Data Raw: c3 80 cc 71 cc 1c 59 55 92 ad fe c0 76 1b 82 5c fb 94 52 a0 f8 bc ed 93 d9 b1 c8 c7 b8 b5 f2 d5 3a d7 a2 43 e0 78 ac c6 1d 33 6d b0 25 61 6e a3 2b 53 55 65 59 ca 95 c7 f6 c6 61 41 0e 1c 22 0c 10 0f 4e 8b 55 c3 59 2c 87 e5 bf 41 bc e1 b2 57 00 36 73 39 ea b0 53 0a 68 49 79 fc c6 c6 28 70 68 19 2f db 56 c3 97 dc 71 fe b4 dc 21 80 b6 13 83 2a 1b 6d 9f 13 50 fe 5e 25 b3 05 fe 7a a5 05 00 7b c0 3c 8f 30 ec c9 63 e8 0e e7 71 56 94 79 0a 9e ee 3c 41 60 24 4f c5 0b fa 93 98 1c c2 f0 44 08 40 27 e6 f6 10 74 65 44 3b a3 f2 bb 86 0e 8c c8 e6 23 4f be 32 85 b2 64 c8 54 8c 64 47 6a 26 67 24 59 01 69 2a 44 52 53 e5 4a 8a 62 f6 a0 f2 64 9f c9 94 42 e5 65 a1 a9 4c 79 14 45 a9 b4 20 50 c5 f2 13 e5 c2 f6 23 ca 90 95 65 9e 56 32 1b 29 a3 5c 90 60 c6 c6 63 67 c8 95 26 5d 28 Data Ascii: qYUv\R:Cx3m%an+SUeYaA"NUY,AW6s9ShIy(ph/Vq!mP^%z{<0cqVy<A`$OD@'teD;#O2dTdGj&g$YiDRSJbdBeLyE P#eV2)\`cg&](

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49780	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	603	OUT	GET /fonts/Oswald/bold.woff2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://talktalk770.weebly.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn2.editmysite.com/fonts/Oswald/font.css?2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:21 UTC	630	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10172 Server: nginx Content-Type: font/woff2 Last-Modified: Mon, 06 Jan 2025 22:56:52 GMT ETag: "677c5fb4-27bc" Expires: Tue, 21 Jan 2025 09:02:18 GMT Cache-Control: max-age=1209600 X-Host: blu106.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:21 GMT Age: 396542 X-Served-By: cache-sjc1000113-SJC, cache-ewr-kewr1740060-EWR X-Cache: HIT, HIT X-Cache-Hits: 27, 36 X-Timer: S1736637082.526594,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 27 bc 00 10 00 00 00 00 52 40 00 00 27 5c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 5e 1b 95 52 1c 83 6c 06 60 3f 53 54 41 54 2a 00 84 6e 11 08 0a f1 70 d9 27 0b 83 5a 00 01 36 02 24 03 87 30 04 20 05 83 6e 07 20 0c 07 1b 01 43 45 07 5a d8 38 c0 43 b0 37 85 e4 ff 4b 02 37 86 62 7d 68 d6 83 14 c4 ea 05 17 49 eb 11 6f 18 d2 43 0a 69 db 3a 55 51 72 a9 8a b9 33 7d 88 89 f7 3a aa 27 2c 76 62 fc 72 48 e1 73 4f 2e bf b0 e0 00 25 00 e4 a9 53 d8 73 0f 1f 29 d2 62 ed ea 08 49 66 79 f8 ff fd c1 b7 cf 7d fc 90 13 c0 a4 24 34 b8 52 83 04 85 3a eb 87 32 13 aa 2a c8 f4 71 7e e0 b7 d9 03 0c 14 45 a9 50 11 0c f8 54 a8 88 94 a4 a2 8d 19 43 30 72 d6 ac b9 b9 4c 37 dd 6e d3 f5 85 6e 77 e7 b2 2f 72 59 17 b5 cb ba Data Ascii: wOF2'R@'\^Rl`?STATnp'Z6$0 n CEZ8C7K7b}hIoCi:UQr3}:',vbrHsO.%Ss)bIfy}$4R:2q~EPTC0rL7nnw/rY
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 74 7e 5c 4a b0 0c 41 37 00 18 f1 1a 28 b5 08 f4 53 a7 1e 8a 47 30 8d 21 2c 08 26 2c e1 67 86 40 53 c7 72 9b 25 88 b4 12 2c 3a 86 26 bc 0a 34 5d 82 2b 1d 52 3a 14 f0 60 4a a4 b2 42 91 23 28 e2 1f 0b 53 20 3c 1c 50 cb e7 41 41 69 50 08 7c a9 44 8d 5a 05 52 8c 91 74 63 57 b2 1e 0b f8 5f 6a e5 34 52 70 c9 12 d8 ff 44 e6 00 d0 75 ce eb a9 86 fe 73 ad b5 4d 30 22 90 25 64 15 d9 40 c6 dd 3b 05 eb d0 2f 03 47 8d 15 54 ff 16 03 b7 04 6c 3e 64 e5 c0 8a ad a6 7c 51 b6 6c cd 8d 4c ed a8 3b 1c 78 63 4f 38 fe c4 9e dc f4 d4 2b 40 c0 72 12 44 02 09 90 00 82 21 7e a6 ff eb a5 fb a1 44 b3 17 62 76 33 bb 17 2c 42 cc 63 4c 30 1d d1 ac 34 a6 b4 5f 69 ff d2 01 3c f0 0e 22 88 b3 63 04 24 e0 1f db 04 ed 00 11 1b ca a9 a2 f0 25 da 28 db 02 9e a5 2a 1a 7a 6e b4 04 5a b8 e4 2b 51 Data Ascii: t~\JA7(SG0!,&,g@Sr%,:&4]+R:`JB#(S <PAAiP\|DZRtcW_j4RpDusM0"%d@;/GTl>d\|QlL;xcO8+@rD!~Dbv3,BcL04_i<"c$%(*znZ+Q
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: d3 70 20 07 bb be c7 f3 7d 4e 13 f4 6c 7f b1 f1 db c7 89 36 c1 0a e5 4e 83 94 50 ef e1 b4 a3 dd b0 18 a2 62 f0 0f 1b 74 e4 06 c6 12 5a ce 4d 93 8f 65 96 23 62 f5 75 12 4d 40 bd ab 51 1b c5 50 3a b7 2e 29 7f b2 f8 4d e7 8e e1 b8 65 0d a8 a1 b6 73 98 95 ca ee 4d a9 77 68 4e 56 e8 1b ae e8 07 58 20 0b 4c 33 7e d0 95 78 bc 08 d2 fa 0a 15 80 a3 24 f0 5e 04 bd 33 d4 5e 93 05 29 c9 60 0b ad 5c 8b 15 83 a0 da 81 d9 24 59 e3 0a 7b 8b d7 13 73 13 89 bb 8c 85 10 f7 98 6a ed 13 09 5e 67 cc 68 cd ea b0 65 1e e3 75 0c f4 66 8c 3b 0f f6 c9 b8 f9 f5 dc dc 3d d1 d1 42 e3 a5 78 b0 5b 3d 55 d7 b9 63 1b f4 62 73 3f b5 61 d2 38 09 4a f4 13 6c e8 32 90 23 6b 19 24 a6 da 54 c5 c9 4d 92 34 73 1b 5e d3 44 c9 a6 1e 66 2c cd d5 3c 2f 86 43 84 d4 f0 f0 ad 0b 3a 5e 89 57 5f 8b e5 19 Data Ascii: p }Nl6NPbtZMe#buM@QP:.)MesMwhNVX L3~x$^3^)`\$Y{sj^gheuf;=Bx[=Ucbs?a8Jl2#k$TM4s^Df,</C:^W_
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: df 66 c2 8c 1f 46 a2 1f 18 42 ef ee ea b4 0b 46 f6 95 73 a3 62 c3 ea c0 2c d2 a3 ee 6f 94 7a 41 ab 84 66 0a 6d 82 e4 01 47 27 a4 5d be 31 42 d9 d2 ae 76 4a 25 ba 96 46 8d f4 cf 1c e7 56 5b 6b 17 2a 35 7e d1 f8 c6 8c 37 f8 94 7b 98 14 10 68 17 28 82 86 9a cc e8 18 34 2a 69 37 38 d8 96 d1 10 b5 e2 96 fa 84 d6 50 f3 d5 6a 8e 83 b5 df f2 7f dd 12 26 06 24 ea eb 74 68 17 cf 7a 06 62 f5 4a d1 d5 55 32 79 3d ae ed 2d 50 fb da 41 75 8f 6a 83 1a 9d ce c1 e6 7b d2 75 63 fd e9 73 74 c6 32 c6 97 13 83 97 45 bd 3f fa 0b 80 32 e2 91 90 8b fc 86 ac 29 e6 77 f3 81 12 b4 11 79 2f a8 13 d9 cb 3c d4 c3 3a 24 a4 14 20 c9 10 4a 25 45 96 f7 1f ba d8 3b d8 fb cd a1 be d4 83 8b 2c 07 1a e8 95 ff 82 0e f9 54 55 16 66 17 f1 73 2d 72 b6 d9 6e fb ec 07 4e 8e d6 c0 29 b9 5b c2 4a b6 Data Ascii: fFBFsb,ozAfmG']1BvJ%FV[k5~7{h(4i78Pj&$thzbJU2y=-PAuj{ucst2E?2)wy/<:$ J%E;,TUfs-rnN)[J
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 93 b4 b8 4c 6c 16 a7 52 ba 77 19 7c ce d8 8c d1 7f a5 b7 f7 1e 8d d4 8b 8a 0b 25 66 36 dd 56 38 12 1c 32 f8 7c 6b b8 33 d0 9a 69 4c 90 a5 37 c5 a5 ce 4f d8 cd c6 ff 90 46 f4 05 6f 79 32 8a a3 27 28 9a f1 cc a5 09 ec 08 cd 32 26 3e e7 8f 60 3f 1c 50 21 53 ac ff ad 6c 3e ef d9 40 fc e5 a9 37 28 37 49 c1 27 be ba 04 2a f3 f4 d5 35 dd be a7 1d 92 f1 22 84 8c 37 69 73 ea f9 55 cf 02 f1 82 3d 44 fb 74 a9 25 ad c0 7f 51 51 fb 74 3b 28 91 a9 f3 ab ef 1c dd f6 ed d6 fc 23 f5 c4 7d 0f 40 8b 4c 21 a0 34 ef 92 fc 67 61 c4 f0 b8 e7 29 69 91 71 dc f0 33 a2 f3 bb 66 e9 7e 84 e0 7b 77 d1 18 f4 f9 9d c9 45 26 e0 de b9 7b 8d be ae 69 ed ff 16 5e 5c 0c 05 df a1 bb 39 7e 08 d2 97 08 64 79 86 07 86 07 ba e3 fa 4a 89 1c e4 79 74 8d e1 e1 2d d4 9f a8 2d e1 17 3e 24 1f 74 43 e1 Data Ascii: LlRw\|%f6V82\|k3iL7OFoy2'(2&>`?P!Sl>@7(7I'*5"7isU=Dt%QQt;(#}@L!4ga)iq3f~{wE&{i^\9~dyJyt-->$tC
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: 6c 98 9c 35 96 f2 bc a3 a6 bc ab 90 3d 9b dd d1 f9 50 fb 8c 48 8b 25 d2 91 f8 ee 70 09 c7 e9 10 6a ed 39 e9 16 95 c4 b9 6c 7c 4b 35 7c b7 2f c5 c2 3d c5 0f 9f ef c7 48 a4 92 13 a9 ec 1d 5c a6 83 16 bd 9d 45 c3 92 a9 08 cd 6f 7e 78 6a 8e c5 65 cf 4f d1 23 5d db 8e ad 55 1b f3 ed f0 c3 6c fd e1 b4 8b 34 0f 55 e4 12 d5 df 9a 2d 87 c5 70 80 ae 44 aa e8 3c 04 24 db 2f 77 07 52 57 6e da 72 49 58 b0 7d 62 0c 9c 86 1c 30 4f 8c 4f 23 b6 d6 8e e7 82 d2 ae e9 b7 76 0b f3 b7 6d 1b 6b ae cf 2e 66 6e c3 08 78 32 c1 cb 8d 86 f5 99 fe b7 43 e5 fb 92 e2 29 6d b1 f7 fd f1 ed e3 10 33 51 18 89 9a b5 65 ed c3 87 30 72 63 e1 05 bb 5b 50 a5 8a dd c5 a4 bf ca 08 6f c8 d8 10 dd b3 8a 51 e4 ab f9 bf 7e b7 e9 e2 1b 5d 95 8f a7 1b bf 31 f1 ca 04 94 bf 06 1f 34 cb f0 7b 5d 83 56 32 Data Ascii: l5=PH%pj9l\|K5\|/=H\Eo~xjeO#]Ul4U-pD<$/wRWnrIX}b0OO#vmk.fnx2C)m3Qe0rc[PoQ~]14{]V2
2025-01-11 23:11:21 UTC	1378	IN	Data Raw: f8 59 99 d2 24 55 06 22 ca 50 26 8a dc 7a cb 87 15 87 d7 be 13 90 1a d4 92 8c 2f 66 3a b9 93 a6 e8 9e aa 8f 03 19 2f b2 3f 5a eb e0 f1 9b a8 b6 0b 35 73 b9 24 63 34 f3 cf 2f 98 2b 3f d9 1a 42 67 9e 24 51 d6 47 08 68 99 70 b2 32 2d 15 95 9f e3 4a 51 5b 8b d8 aa c7 2b 8a c5 39 62 f8 d2 5f ed 14 8a 9d a7 1b 59 95 f9 7f 92 99 77 fc 51 ff 8a ce 17 26 90 bf 13 27 23 7f 3e 4d b2 f2 49 0a 7b 51 ac 5a ed 12 ca d3 66 bc 8c bc d8 2f da aa 6e d2 c8 8d cf f7 a7 89 3d 6a 0b 5e 70 99 da 2a 34 8a 1d 35 a5 a6 96 db 63 04 ec 75 66 48 4c 2f 21 78 e3 66 38 1e e2 db ea a8 ec 13 6d 72 a5 8b 36 55 f6 96 f3 f9 7c 5b 1c 95 bd f3 a5 bb 44 9b 2a fa 5e 2c 8d 4b 95 d9 8c 2a b6 55 74 51 a7 c8 ad 12 5a 52 cb 63 14 ce a4 a4 43 5a da 38 3d 14 2f 5c cd bc cd 9c 44 42 f1 cc 65 14 d3 21 43 Data Ascii: Y$U"P&z/f:/?Z5s$c4/+?Bg$QGhp2-JQ[+9b_YwQ&'#>MI{QZf/n=j^p45cufHL/!xf8mr6U\|[D^,K*UtQZRcCZ8=/\DBe!C
2025-01-11 23:11:21 UTC	526	IN	Data Raw: 10 bd 6b 71 70 57 7b 05 17 37 4a 27 e0 e2 1c cc ed 9e 2c c3 5b 0d c2 e3 09 ae 4a 10 16 0f 3f cd 08 8e e7 12 f3 5b 4b 1c 4d 63 a8 43 43 fc 64 c7 2d c4 ac 7c c2 31 a9 3a 8a bc 20 c9 c7 14 5f 2f 53 dc 93 25 3c db fa 70 8d 5e 4b d7 1b c6 7c f9 b8 6f 3b 9d 5f 40 e2 25 61 54 a9 11 01 57 19 17 19 ca b9 bf 13 db 0b 1c c4 22 3d 2b f7 f7 48 72 fb f1 47 25 6d 1f 21 7b 0a dc a7 29 97 3e 07 5e dd 64 2d 10 9b 8b 32 0b 4a a3 8c d1 c5 14 3f c3 54 4f 60 a2 0d f8 8f 17 87 59 88 26 fa bc a0 d0 34 fe a5 b5 ff 97 c4 71 c4 45 26 a8 01 c3 21 99 16 80 fb fa b6 b8 09 f1 fb 0c 75 32 d8 f8 1a a5 fb 50 74 f2 9f c3 ec 2e 6b 7c 4e d3 b5 c9 7d 92 a1 35 34 70 47 f5 9c 29 9e ba 3f a6 7e 26 e9 81 c8 be 21 78 2f 89 df 1c f1 b4 e2 17 04 bc ee 12 bc 2e c2 d7 4f f6 ea 69 c7 66 f5 89 c8 fa 45 Data Ascii: kqpW{7J',[J?[KMcCCd-\|1: _/S%<p^K\|o;_@%aTW"=+HrG%m!{)>^d-2J?TO`Y&4qE&!u2Pt.k\|N}54pG)?~&!x/.OifE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49782	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:21 UTC	840	OUT	GET /uploads/1/5/1/8/151886692/background-images/1757667267.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:22 UTC	978	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:22 GMT Content-Type: image/png Content-Length: 301 Connection: close CF-Ray: 900895e30c768cb9-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "8ab8aabeab356bbf9c3a7fd370d6deaf" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 12 Apr 2024 08:31:41 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: gBg0dKHNS5vWn8c1mQAueAPmQ2Pe78qxGyHWJgjYihd4vyRMvkUISlAUXA5aFj/zq6EQQTnrLfM= x-amz-meta-btime: 2018-11-05T14:08:37.246Z x-amz-meta-mtime: 1541426917.246 x-amz-replication-status: COMPLETED x-amz-request-id: V86HPZ88GNAGYKF9 x-amz-server-side-encryption: AES256 x-amz-version-id: zmaodLAg9xw3xw_cpH8xwSgR_ponjEYK X-Storage-Bucket: z7278 X-Storage-Object: 7278553ba44412be9f4f7215402cd7b17822af273057d341f5cdaf03e5c72f29 Server: cloudflare
2025-01-11 23:11:22 UTC	301	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ff 00 00 00 c6 08 03 00 00 00 2a a3 a6 9d 00 00 00 09 50 4c 54 45 7f ad f7 ff ff fc ff ff ff de 46 f0 83 00 00 00 df 49 44 41 54 78 da ed cf 31 01 00 00 08 03 a0 69 ff d0 8b e1 21 34 20 99 fd cc df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df Data Ascii: PNGIHDR*PLTEFIDATx1i!4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49783	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	584	OUT	GET /files/theme/images/arrow-light.svg?1736414015 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:22 UTC	969	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:22 GMT Content-Type: image/svg+xml; charset=us-ascii Content-Length: 886 Connection: close CF-Ray: 900895e30fb95e82-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Disposition: attachment ETag: "552eb2e04260fc0733e5633d15c6aeaa" Last-Modified: Tue, 09 Apr 2024 09:20:13 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: mdB3UV11SxO37gq++3WWHGuTr59apoEQibWQYM9XLhpk9d/si8z64CblZ0GtxCEfchaEh1Yz1pzVcDZMImdM8A== x-amz-meta-btime: 2022-03-19T04:38:52.73Z x-amz-meta-mtime: 1647664732.73 x-amz-replication-status: COMPLETED x-amz-request-id: BWGYEET64Y5YM3WR x-amz-server-side-encryption: AES256 x-amz-version-id: laV8xkk7MteYwKEj3_0q8s8T2cHBLyJt X-Storage-Bucket: z705f X-Storage-Object: 705ff3240de004523ff9d628b28aad705ad3f0ceb046312495265a4042c67570 Server: cloudflare
2025-01-11 23:11:22 UTC	400	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 32 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 33 39 2e 31 20 28 33 31 37 32 30 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="22px" height="11px" viewBox="0 0 22 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 39.1 (31720) - http://www.bo
2025-01-11 23:11:22 UTC	486	IN	Data Raw: 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 55 69 2d 4b 69 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 2e 30 30 30 30 30 30 2c 20 2d 36 39 37 2e 30 30 30 30 30 30 29 22 20 73 74 72 6f 6b 65 3d 22 23 46 46 46 46 46 46 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 32 2e 30 30 30 30 30 30 2c 20 36 39 38 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 Data Ascii: oke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="square"> <g id="Ui-Kit" transform="translate(-61.000000, -697.000000)" stroke="#FFFFFF" stroke-width="1.5"> <g id="Group" transform="translate(62.000000, 698.000000)">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49786	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	579	OUT	GET /files/theme/jquery.pxuMenu.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:22 UTC	939	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895e33db6c356-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"ac373d716afe4270df40f60417b0f418" Last-Modified: Thu, 25 Apr 2024 07:47:28 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: Q5Kss4to3dxE9vNFmFAsuFJhpguTIu8CXPvsDsaet73IWRm2CDemwMlNll5mEWlt0iq9Brj7KpTHL5+/V6eF3g== x-amz-meta-btime: 2023-09-25T13:28:31.664Z x-amz-meta-mtime: 1695648511.664 x-amz-replication-status: COMPLETED x-amz-request-id: RG4NT2V14FM7E4DB x-amz-server-side-encryption: AES256 x-amz-version-id: YuLNF3avwFeaQ53LKsWBmjOk1H1qzEyo X-Storage-Bucket: zf755 X-Storage-Object: f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a Server: cloudflare
2025-01-11 23:11:22 UTC	430	IN	Data Raw: 65 37 31 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 3d 20 20 20 20 20 20 20 20 20 20 20 20 57 65 65 62 6c 79 20 48 6f 72 69 7a 6f 6e 74 61 6c 20 53 69 74 65 20 4d 65 6e 75 20 20 20 20 20 20 20 20 20 20 20 20 3d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 0a 20 20 20 2a 20 47 65 6e 65 72 61 74 65 20 61 20 66 6c 65 78 69 62 6c 65 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 65 6e 75 20 66 72 6f 6d 20 74 68 65 20 64 65 66 61 75 6c 74 20 6e 61 Data Ascii: e71/==================================================== Weebly Horizontal Site Menu ====================================================/(function($) { /** * * Generate a flexible responsive menu from the default na
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 67 73 20 3d 20 73 65 74 74 69 6e 67 73 3b 0a 20 20 20 20 74 68 69 73 2e 24 6d 6f 72 65 20 3d 20 20 24 28 27 5c 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6d 6f 72 65 20 68 61 73 2d 73 75 62 6d 65 6e 75 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 43 6c 61 73 73 20 2b 20 27 22 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 6d 6f 72 65 2d 6c 69 6e 6b 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 4c 69 6e 6b 43 6c 61 73 73 20 2b 20 27 22 3e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 6d 6f 72 65 4c 69 6e 6b 48 74 6d 6c 20 2b 20 27 3c 2f 61 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6f 6e 74 61 Data Ascii: gs = settings; this.$more = $('\ <li class="menu-more has-submenu ' + settings.parentClass + '"> \ <a href="#" class="more-link ' + settings.parentLinkClass + '">' + settings.moreLinkHtml + '</a> \ <div class="' + settings.conta
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 76 61 72 20 66 69 72 73 74 4f 66 66 73 65 74 54 6f 70 20 3d 20 24 28 24 69 74 65 6d 73 2e 67 65 74 28 29 5b 30 5d 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0a 20 20 20 20 20 20 76 61 72 20 24 63 75 72 72 65 6e 74 49 74 65 6d 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 24 63 75 72 72 65 6e 74 49 74 65 6d 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 3e 20 66 69 72 73 74 4f 66 66 73 65 74 54 6f 70 20 7c 7c 20 73 65 6c 66 2e 24 6d 6f 72 65 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 3e 20 66 69 72 73 74 4f 66 66 73 65 74 54 6f 70 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6c 66 2e 24 6d 65 6e 75 2e 61 70 70 65 6e 64 28 73 65 6c 66 2e 24 6d 6f 72 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 73 65 6c 66 2e 74 6f 67 67 6c 65 Data Ascii: var firstOffsetTop = $($items.get()[0]).offset().top; var $currentItem = $(this); if ($currentItem.offset().top > firstOffsetTop \|\| self.$more.offset().top > firstOffsetTop) { self.$menu.append(self.$more); self.toggle
2025-01-11 23:11:22 UTC	536	IN	Data Raw: 75 2d 69 74 65 6d 27 2c 0a 20 20 20 20 20 20 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 77 72 61 70 27 2c 0a 20 20 20 20 20 20 6c 69 73 74 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 27 2c 0a 20 20 20 20 20 20 63 68 69 6c 64 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 73 75 62 69 74 65 6d 2d 77 72 61 70 27 2c 0a 20 20 20 20 20 20 63 68 69 6c 64 4c 69 6e 6b 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 73 75 62 69 74 65 6d 27 2c 0a 20 20 20 20 20 20 6d 6f 72 65 4c 69 6e 6b 48 74 6d 6c 3a 20 27 4d 6f 72 65 27 2c 0a 20 20 20 20 7d 2c 20 6f 70 74 69 6f 6e 73 20 29 3b 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 Data Ascii: u-item', containerClass: 'wsite-menu-wrap', listClass: 'wsite-menu', childClass: 'wsite-menu-subitem-wrap', childLinkClass: 'wsite-menu-subitem', moreLinkHtml: 'More', }, options ); return this.each(function() {
2025-01-11 23:11:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49784	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	580	OUT	GET /files/theme/jquery.revealer.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:22 UTC	861	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895e33c8a0fa9-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"c22ab67199a33d876512504cda4ff55b" Last-Modified: Sun, 21 Apr 2024 12:39:24 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: QK7W+4xHyAvdek0IlLWejXojWtVcl9Zi8X6b2eAnG+vyMzIKXfV0ljrP1e6H5jxJAo0VYyMeBASvR1IIUexUqw== x-amz-replication-status: COMPLETED x-amz-request-id: 1B8PS5MZKWF3FJDY x-amz-server-side-encryption: AES256 x-amz-version-id: VWhv4xSgduiSxPjjUnPvdmzftJykBxY7 X-Storage-Bucket: zc4cd X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311 Server: cloudflare
2025-01-11 23:11:22 UTC	508	IN	Data Raw: 62 30 63 0d 0a 2f 2a 21 0a 20 2a 20 52 65 76 65 61 6c 65 72 20 32 2e 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2c 20 50 69 78 65 6c 20 55 6e 69 6f 6e 20 2d 20 68 74 74 70 3a 2f 2f 70 69 78 65 6c 75 6e 69 6f 6e 2e 6e 65 74 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 2f 2f 20 63 68 65 63 6b 20 66 6f 72 20 74 72 65 6e 64 20 65 76 65 6e 74 20 28 6d 61 6b 65 20 73 75 72 65 20 6a 71 75 65 72 79 2e 74 72 65 6e 64 20 69 73 20 69 6e 63 6c 75 64 65 64 29 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 24 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 74 72 65 6e 64 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 20 20 20 Data Ascii: b0c/! Revealer 2.0.0 * * Copyright 2015, Pixel Union - http://pixelunion.net * Released under the MIT license */(function($){ // check for trend event (make sure jquery.trend is included) if (typeof $.event.special.trend !== "object") {
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 69 6f 6e 46 72 61 6d 65 20 7c 7c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 20 7b 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 6e 2c 20 31 30 30 30 2f 36 30 29 3b 20 7d 0a 0a 0a 20 20 2f 2f 20 50 75 62 6c 69 63 20 41 50 49 0a 20 20 76 61 72 20 6d 65 74 68 6f 64 73 20 3d 20 7b 0a 20 20 20 20 69 73 56 69 73 69 62 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 65 6c 2e 64 61 74 61 28 22 72 65 76 65 61 6c 65 72 2d 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 73 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 20 66 6f 72 63 65 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 43 68 65 63 6b 20 73 74 61 74 65 0a 20 20 20 20 20 20 69 66 20 28 6d 65 74 68 6f 64 73 2e 69 Data Ascii: ionFrame \|\| function(fn) { window.setTimeout(fn, 1000/60); } // Public API var methods = { isVisible: function(el) { return !!el.data("revealer-visible"); }, show: function(el, force) { // Check state if (methods.i
2025-01-11 23:11:22 UTC	958	IN	Data Raw: 6c 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 68 69 64 65 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 65 6c 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 69 6e 67 20 61 6e 69 6d 61 74 69 6e 67 2d 6f 75 74 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 61 6e 69 6d 61 74 69 6e 67 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 65 6c 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 69 73 69 Data Ascii: l.removeClass("visible"); el.trigger("revealer-hide"); return; } raf(function(){ el.addClass("animating animating-out"); el.trigger("revealer-animating"); raf(function(){ el.removeClass("visi
2025-01-11 23:11:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49785	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	577	OUT	GET /files/theme/jquery.trend.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:22 UTC	927	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895e35aa8efa3-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"4beccebe0a060b2b2c43de5c2d4512ef" Last-Modified: Sun, 07 Apr 2024 01:42:19 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: czAhL4JxCATn9O/HokY8qXHStbL+CFN1PIJbUpOmkMfn58bwHRld4zq91DofG6J1VKXk2caUzd0= x-amz-meta-btime: 2023-09-25T13:28:31.869Z x-amz-meta-mtime: 1695648511.869 x-amz-replication-status: COMPLETED x-amz-request-id: DECQ4QKQ6PZ0MBX7 x-amz-server-side-encryption: AES256 x-amz-version-id: SLcK2XYoSswC7.3mqk46FHp.mNA3XCRS X-Storage-Bucket: z446f X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738 Server: cloudflare
2025-01-11 23:11:22 UTC	442	IN	Data Raw: 65 62 66 0d 0a 2f 2a 21 0a 20 2a 20 54 72 65 6e 64 20 30 2e 32 2e 30 0a 20 2a 0a 20 2a 20 46 61 69 6c 2d 73 61 66 65 20 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 65 76 65 6e 74 20 66 6f 72 20 6a 51 75 65 72 79 2e 0a 20 2a 0a 20 2a 20 41 64 64 73 20 61 20 6e 65 77 20 22 74 72 65 6e 64 22 20 65 76 65 6e 74 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 62 72 6f 77 73 65 72 73 20 74 68 61 74 20 64 6f 6e 27 74 0a 20 2a 20 73 75 70 70 6f 72 74 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2e 0a 20 2a 0a 20 2a 20 4e 4f 54 45 3a 20 4f 6e 6c 79 20 73 75 70 70 6f 72 74 73 20 62 65 69 6e 67 20 62 6f 75 6e 64 20 77 69 74 68 20 22 6a 51 75 65 72 79 2e 6f 6e 65 22 2e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 50 69 78 65 6c Data Ascii: ebf/! Trend 0.2.0 * * Fail-safe TransitionEnd event for jQuery. * * Adds a new "trend" event that can be used in browsers that don't * support "transitionend". * * NOTE: Only supports being bound with "jQuery.one". * * Copyright 2014, Pixel
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 20 22 20 2b 0a 20 20 20 20 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 6d 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 0a 0a 20 20 2f 2f 20 50 72 65 66 69 78 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 64 75 72 61 74 69 6f 6e 20 70 72 6f 70 65 72 74 79 20 6e 61 6d 65 73 0a 20 20 76 61 72 20 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 20 3d 20 5b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: otransitionend " + "oTransitionEnd " + "msTransitionEnd " + "transitionend"; // Prefixed transition duration property names var transitionDurationProperties = [ "transition-duration", "-moz-transition-duration", "-webkit-trans
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 76 61 6c 75 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 75 72 61 74 69 6f 6e 20 3d 20 70 61 72 73 65 54 69 6d 65 28 76 61 6c 75 65 73 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 64 75 72 61 74 69 6f 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 20 20 20 20 20 20 20 20 7d 29 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 64 75 72 61 74 69 6f 6e 20 3d 20 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 4d 61 74 68 2c 20 64 75 72 61 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 53 69 6e 67 6c Data Ascii: for (var i = 0; i < values.length; i++) { var duration = parseTime(values[i]); results.push(duration); } return results; })(); duration = Math.max.apply(Math, durations); } // Singl
2025-01-11 23:11:22 UTC	602	IN	Data Raw: 68 6f 73 65 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 77 65 27 6c 6c 0a 20 20 20 20 20 20 20 20 2f 2f 20 68 61 76 65 20 74 6f 20 72 65 6c 79 20 6f 6e 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 74 68 65 73 65 20 63 61 73 65 73 2e 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 20 26 26 20 65 2e 73 72 63 45 6c 65 6d 65 6e 74 20 21 3d 3d 20 65 6c 5b 30 5d 29 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 4d 61 72 6b 20 65 6c 65 6d 65 6e 74 20 68 61 73 20 6e 6f 74 20 62 65 69 6e 67 20 69 6e 20 74 72 61 6e 73 69 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 65 6c 2e 64 61 74 61 28 22 74 72 65 6e 64 22 2c 20 66 61 6c 73 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 43 61 6c 6c 62 61 63 6b 0a 20 20 20 20 20 20 20 20 66 69 72 65 64 20 3d 20 74 Data Ascii: hose. Unfortunately, we'll // have to rely on the timeout in these cases. if (e && e.srcElement !== el[0]) return; // Mark element has not being in transition el.data("trend", false); // Callback fired = t
2025-01-11 23:11:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49787	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	573	OUT	GET /files/theme/custom-1.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:22 UTC	927	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895e3bacf4363-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"214dde43cebf15418cdcc76f9677ee46" Last-Modified: Mon, 22 Apr 2024 23:24:18 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: 8kqlzwKofu0jweug7L1NtGZXWW+p7wtkL9qjgMwqqZ0ImeYYGxu/D2MehtS58JZ+HDPEpDqCvyE= x-amz-meta-btime: 2021-10-26T13:57:32.896Z x-amz-meta-mtime: 1635256652.896 x-amz-replication-status: COMPLETED x-amz-request-id: N5BRT9YTTX7RV5DC x-amz-server-side-encryption: AES256 x-amz-version-id: B9J1OqsSfx.0.VWPcb4gc1kD9Rq3dd1i X-Storage-Bucket: zcfbf X-Storage-Object: cfbf67a85c039719090cff2c4718de99203b1ced78cfb8fae5f7240d2f1570b7 Server: cloudflare
2025-01-11 23:11:22 UTC	442	IN	Data Raw: 33 64 36 37 0d 0a 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 20 20 2f 2f 20 4d 6f 62 69 6c 65 20 73 69 64 65 62 61 72 73 0a 20 20 24 2e 66 6e 2e 65 78 70 61 6e 64 61 62 6c 65 53 69 64 65 62 61 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 76 61 72 20 24 6d 65 20 3d 20 74 68 69 73 3b 0a 0a 20 20 20 20 24 6d 65 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 28 21 24 6d 65 2e 68 61 73 43 6c 61 73 73 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 24 6d 65 2e 61 64 64 43 6c 61 73 73 28 65 78 70 61 6e 64 65 64 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 Data Ascii: 3d67jQuery(function($) { // Mobile sidebars $.fn.expandableSidebar = function(expandedClass) { var $me = this; $me.on('click', function() { if(!$me.hasClass(expandedClass)) { $me.addClass(expandedClass); } else {
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 69 66 20 28 63 6f 75 6e 74 65 72 20 3e 3d 20 6c 69 6d 69 74 20 7c 7c 20 24 2e 66 6e 2e 63 68 65 63 6b 49 66 45 6c 65 6d 65 6e 74 45 78 69 73 74 73 28 63 6f 6e 64 69 74 69 6f 6e 29 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6c 6f 6f 70 65 72 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 65 72 2b 2b 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 20 64 75 72 61 74 69 6f 6e 29 3b 0a 0a 20 20 20 20 69 66 20 28 21 63 6f 6e 64 69 74 69 6f 6e 29 20 61 63 74 69 6f 6e 28 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 43 68 65 63 6b 20 69 66 20 65 6c 65 6d 65 6e 74 20 Data Ascii: erval(function(){ if (counter >= limit \|\| $.fn.checkIfElementExists(condition)) { clearInterval(looper); } else { action(); counter++; } }, duration); if (!condition) action(); } // Check if element
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 3d 20 24 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 72 65 74 75 72 6e 20 69 66 20 73 63 72 6f 6c 6c 20 68 61 73 6e 27 74 20 6d 65 74 20 64 65 6c 74 61 20 74 68 72 65 73 68 6f 6c 64 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4d 61 74 68 2e 61 62 73 28 70 72 65 76 69 6f 75 73 53 63 72 6f 6c 6c 54 6f 70 20 2d 20 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c 54 6f 70 29 20 3c 3d 20 64 65 6c 74 61 54 68 72 65 73 68 6f 6c 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 64 69 72 65 63 74 69 6f 6e 20 63 6f 6e 64 69 74 69 6f 6e 73 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c Data Ascii: = $(this).scrollTop(); //return if scroll hasn't met delta threshold if (Math.abs(previousScrollTop - currentScrollTop) <= deltaThreshold) { return; } //direction conditions if (currentScroll
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 20 66 6f 72 20 72 65 64 72 61 77 20 74 6f 20 68 61 70 70 65 6e 20 61 66 74 65 72 20 61 70 70 65 6e 64 69 6e 67 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 64 65 74 65 63 74 48 65 61 64 65 72 57 72 61 70 28 29 3b 0a 20 20 20 20 20 20 68 65 61 64 65 72 48 65 69 67 68 74 20 3d 20 24 68 65 61 64 65 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 24 62 6f 64 79 2e 68 61 73 43 6c 61 73 73 28 27 68 65 61 64 65 72 2d 73 74 69 63 6b 79 2d 75 70 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 62 61 73 65 2e 5f 75 74 69 6c 73 2e 6f 6e 53 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 28 7b 0a 20 20 20 20 20 20 20 20 20 20 64 6f 77 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c 54 6f 70 29 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: for redraw to happen after appending base._detectHeaderWrap(); headerHeight = $header.outerHeight(); if ($body.hasClass('header-sticky-up')) { base._utils.onScrollDirection({ down: function(currentScrollTop) {
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 73 28 27 75 74 69 6c 73 2d 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 72 74 54 65 78 74 20 3d 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 68 74 6d 6c 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 22 27 28 29 5d 2f 67 2c 22 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 2e 68 74 6d 6c 28 63 61 72 74 54 65 78 74 29 2e 61 64 64 43 6c 61 73 73 28 22 74 6f 67 67 6c 65 2d 63 75 73 74 6f 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 2e Data Ascii: s('utils-hidden'); } if ($('#wsite-nav-cart-a').length) { var cartText = $('#wsite-nav-cart-a').html().replace(/["'()]/g,""); $('#wsite-nav-cart-a').html(cartText).addClass("toggle-custom"); } if ($('.
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 20 20 7d 2c 20 7b 20 73 75 62 74 72 65 65 3a 20 74 72 75 65 20 7d 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 5f 6e 61 76 53 65 74 75 70 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 62 61 73 65 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 76 61 72 20 24 73 75 62 6d 65 6e 75 43 6f 6e 74 61 69 6e 65 72 20 3d 20 24 28 27 2e 6e 61 76 20 2e 68 61 73 2d 73 75 62 6d 65 6e 75 27 29 3b 0a 20 20 20 20 20 20 76 61 72 20 64 72 6f 70 64 6f 77 6e 43 6c 61 73 73 20 3d 20 27 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 6e 27 3b 0a 20 20 20 20 20 20 76 61 72 20 24 64 65 73 6b 74 6f 70 4e 61 76 20 3d 20 24 28 27 2e 64 65 73 6b 74 6f 70 2d 6e 61 76 20 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 27 29 3b 0a 0a 20 20 20 20 20 20 76 61 72 20 Data Ascii: }, { subtree: true }); }, _navSetup: function() { var base = this; var $submenuContainer = $('.nav .has-submenu'); var dropdownClass = 'dropdown-open'; var $desktopNav = $('.desktop-nav .wsite-menu-default'); var
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 64 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 69 6e 64 4e 61 76 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 2c 20 35 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 69 6e 64 4e 61 76 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 2f 2f 20 55 6e 62 69 6e 64 20 2f 20 62 69 6e 64 20 61 66 74 65 72 20 64 65 66 61 75 6c 74 73 20 68 61 76 65 20 72 75 6e 0a 20 20 20 20 20 20 62 61 73 65 2e 5f 6f 62 73 65 72 76 65 44 6f 6d 28 24 28 27 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 27 29 5b 30 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 62 69 6e 64 4e 61 76 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 7d 2c 20 7b 20 73 75 62 74 72 65 Data Ascii: date(); bindNavEvents(); } }, 500, 5); } bindNavEvents(); // Unbind / bind after defaults have run base._observeDom($('.wsite-menu-default')[0], function() { bindNavEvents(); }, { subtre
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 0a 0a 20 20 20 20 5f 63 6c 6f 73 65 41 6c 6c 44 72 6f 70 64 6f 77 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 24 28 27 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 27 29 0a 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 27 2e 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 6e 27 29 0a 20 20 20 20 20 20 20 20 2e 68 69 64 65 44 72 6f 70 64 6f 77 6e 73 28 27 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 6e 27 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 5f 73 65 61 72 63 68 42 6f 78 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 62 61 73 65 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 76 61 72 20 73 65 61 72 63 68 42 6f 78 20 3d 20 27 2e 77 73 69 74 65 2d 73 65 61 72 63 68 27 3b 20 2f 2f 20 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 69 Data Ascii: _closeAllDropdowns: function() { $('.edison-header') .find('.dropdown-open') .hideDropdowns('dropdown-open'); }, _searchBox: function() { var base = this; var searchBox = '.wsite-search'; // Not available i
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 2c 20 33 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 62 61 73 65 2e 5f 75 74 69 6c 73 2e 6f 6e 45 73 63 4b 65 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 28 73 65 61 72 63 68 42 6f 78 29 2e 72 65 76 65 61 6c 65 72 28 27 69 73 56 69 73 69 62 6c 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 73 65 61 72 63 68 42 6f 78 29 2e 72 65 76 65 61 6c 65 72 28 27 68 69 64 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 73 65 61 72 63 68 54 6f 67 67 6c 65 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 65 Data Ascii: }, 300); }); base._utils.onEscKey(function() { if ($(searchBox).revealer('isVisible')) { $(searchBox).revealer('hide'); } }); $searchToggle.on('click', function(event) { e
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 52 45 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 21 44 49 53 41 42 4c 45 5f 4e 41 56 5f 4d 4f 52 45 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 64 65 73 6b 74 6f 70 2d 6e 61 76 20 2e 77 73 69 74 65 2d 6d 65 6e 75 2d 64 65 66 61 75 6c 74 27 29 2e 64 61 74 61 28 27 70 78 75 4d 65 6e 75 27 29 2e 75 70 64 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 76 61 72 20 68 69 6a 61 63 6b 4d 69 6e 69 63 61 72 74 54 6f 67 67 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 24 74 6f 67 67 6c 65 20 3d 20 24 28 27 23 77 73 69 74 65 2d 6e 61 76 2d 63 61 72 74 2d 61 27 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 6f 67 67 6c 65 54 65 78 74 20 3d 20 24 74 6f Data Ascii: RE == 'undefined' \|\| !DISABLE_NAV_MORE) { $('.desktop-nav .wsite-menu-default').data('pxuMenu').update(); } }; var hijackMinicartToggle = function() { var $toggle = $('#wsite-nav-cart-a'); var toggleText = $to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49788	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	572	OUT	GET /files/theme/plugins.js?1736412329 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:22 UTC	861	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 900895e43f4c4382-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c" Last-Modified: Mon, 29 Apr 2024 13:02:46 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: WXVE5SjYqHDvXRjOSw52pBWl49LvJxXz6JzT7yNgaFSrupD+8+N1+ob14tFIgFNIagHQF8zNoGv2jNT1OruH8w== x-amz-replication-status: COMPLETED x-amz-request-id: T65A4X684H4N4NSF x-amz-server-side-encryption: AES256 x-amz-version-id: sTNQn2rzaHgQudj7CuT9D50TBpz30e4M X-Storage-Bucket: zb635 X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5 Server: cloudflare
2025-01-11 23:11:22 UTC	508	IN	Data Raw: 37 63 33 32 0d 0a 0a 2f 2a 21 20 48 61 6d 6d 65 72 2e 4a 53 20 2d 20 76 32 2e 30 2e 34 20 2d 20 32 30 31 34 2d 30 39 2d 32 38 0a 20 2a 20 68 74 74 70 3a 2f 2f 68 61 6d 6d 65 72 6a 73 2e 67 69 74 68 75 62 2e 69 6f 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4a 6f 72 69 6b 20 54 61 6e 67 65 6c 64 65 72 3b 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 65 78 70 6f 72 74 4e 61 6d 65 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 76 61 72 20 56 45 4e 44 4f 52 5f 50 52 45 46 49 58 45 53 20 3d 20 5b 27 27 2c 20 27 77 65 62 6b 69 Data Ascii: 7c32/! Hammer.JS - v2.0.4 - 2014-09-28 http://hammerjs.github.io/ * * Copyright (c) 2014 Jorik Tangelder; * Licensed under the MIT license */(function(window, document, exportName, undefined) { 'use strict';var VENDOR_PREFIXES = ['', 'webki
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 4e 75 6d 62 65 72 7d 20 74 69 6d 65 6f 75 74 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 63 6f 6e 74 65 78 74 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 6e 75 6d 62 65 72 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 69 6d 65 6f 75 74 43 6f 6e 74 65 78 74 28 66 6e 2c 20 74 69 6d 65 6f 75 74 2c 20 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 62 69 6e 64 46 6e 28 66 6e 2c 20 63 6f 6e 74 65 78 74 29 2c 20 74 69 6d 65 6f 75 74 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 69 66 20 74 68 65 20 61 72 67 75 6d 65 6e 74 20 69 73 20 61 6e 20 61 72 72 61 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 65 78 65 63 75 74 65 20 74 68 65 20 66 6e 20 6f 6e 20 65 61 63 68 20 65 6e 74 72 79 0a 20 2a 20 69 Data Ascii: Number} timeout * @param {Object} context * @returns {number} /function setTimeoutContext(fn, timeout, context) { return setTimeout(bindFn(fn, context), timeout);}/* * if the argument is an array, we want to execute the fn on each entry * i
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 42 6f 6f 6c 65 61 6e 7d 20 5b 6d 65 72 67 65 5d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 4f 62 6a 65 63 74 7d 20 64 65 73 74 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 65 73 74 2c 20 73 72 63 2c 20 6d 65 72 67 65 29 20 7b 0a 20 20 20 20 76 61 72 20 6b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 72 63 29 3b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 30 3b 0a 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6b 65 79 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6d 65 72 67 65 20 7c 7c 20 28 6d 65 72 67 65 20 26 26 20 64 65 73 74 5b 6b 65 79 73 5b 69 5d 5d 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 74 5b 6b 65 79 73 5b 69 5d 5d 20 3d 20 73 72 Data Ascii: Boolean} [merge] * @returns {Object} dest */function extend(dest, src, merge) { var keys = Object.keys(src); var i = 0; while (i < keys.length) { if (!merge \|\| (merge && dest[keys[i]] === undefined)) { dest[keys[i]] = sr
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 20 7b 41 72 72 61 79 7d 20 5b 61 72 67 73 5d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 42 6f 6f 6c 65 61 6e 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 62 6f 6f 6c 4f 72 46 6e 28 76 61 6c 2c 20 61 72 67 73 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 76 61 6c 20 3d 3d 20 54 59 50 45 5f 46 55 4e 43 54 49 4f 4e 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 2e 61 70 70 6c 79 28 61 72 67 73 20 3f 20 61 72 67 73 5b 30 5d 20 7c 7c 20 75 6e 64 65 66 69 6e 65 64 20 3a 20 75 6e 64 65 66 69 6e 65 64 2c 20 61 72 67 73 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 75 73 65 20 74 68 65 20 76 61 6c 32 20 77 68 65 6e 20 76 61 6c 31 20 69 73 20 75 6e 64 65 66 69 6e 65 64 0a 20 2a Data Ascii: {Array} [args] * @returns {Boolean} /function boolOrFn(val, args) { if (typeof val == TYPE_FUNCTION) { return val.apply(args ? args[0] \|\| undefined : undefined, args); } return val;}/* * use the val2 when val1 is undefined *
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 77 72 61 70 70 65 72 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 73 74 72 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 66 69 6e 64 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 42 6f 6f 6c 65 61 6e 7d 20 66 6f 75 6e 64 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 53 74 72 28 73 74 72 2c 20 66 69 6e 64 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 74 72 2e 69 6e 64 65 78 4f 66 28 66 69 6e 64 29 20 3e 20 2d 31 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 73 70 6c 69 74 20 73 74 72 69 6e 67 20 6f 6e 20 77 68 69 74 65 73 70 61 63 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 73 74 72 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 41 72 72 61 79 7d 20 77 6f 72 64 73 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 70 6c 69 74 53 Data Ascii: wrapper * @param {String} str * @param {String} find * @returns {Boolean} found /function inStr(str, find) { return str.indexOf(find) > -1;}/* * split string on whitespace * @param {String} str * @returns {Array} words */function splitS
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 65 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 30 3b 0a 0a 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 73 72 63 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 6b 65 79 20 3f 20 73 72 63 5b 69 5d 5b 6b 65 79 5d 20 3a 20 73 72 63 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 41 72 72 61 79 28 76 61 6c 75 65 73 2c 20 76 61 6c 29 20 3c 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 73 72 63 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 5b 69 5d 20 3d 20 76 61 6c 3b 0a 20 20 20 20 20 20 20 20 69 2b 2b 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 73 6f 72 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 Data Ascii: es = []; var i = 0; while (i < src.length) { var val = key ? src[i][key] : src[i]; if (inArray(values, val) < 0) { results.push(src[i]); } values[i] = val; i++; } if (sort) { if
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 49 4c 45 5f 52 45 47 45 58 20 3d 20 2f 6d 6f 62 69 6c 65 7c 74 61 62 6c 65 74 7c 69 70 28 61 64 7c 68 6f 6e 65 7c 6f 64 29 7c 61 6e 64 72 6f 69 64 2f 69 3b 0a 0a 76 61 72 20 53 55 50 50 4f 52 54 5f 54 4f 55 43 48 20 3d 20 28 27 6f 6e 74 6f 75 63 68 73 74 61 72 74 27 20 69 6e 20 77 69 6e 64 6f 77 29 3b 0a 76 61 72 20 53 55 50 50 4f 52 54 5f 50 4f 49 4e 54 45 52 5f 45 56 45 4e 54 53 20 3d 20 70 72 65 66 69 78 65 64 28 77 69 6e 64 6f 77 2c 20 27 50 6f 69 6e 74 65 72 45 76 65 6e 74 27 29 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 76 61 72 20 53 55 50 50 4f 52 54 5f 4f 4e 4c 59 5f 54 4f 55 43 48 20 3d 20 53 55 50 50 4f 52 54 5f 54 4f 55 43 48 20 26 26 20 4d 4f 42 49 4c 45 5f 52 45 47 45 58 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 Data Ascii: ILE_REGEX = /mobile\|tablet\|ip(ad\|hone\|od)\|android/i;var SUPPORT_TOUCH = ('ontouchstart' in window);var SUPPORT_POINTER_EVENTS = prefixed(window, 'PointerEvent') !== undefined;var SUPPORT_ONLY_TOUCH = SUPPORT_TOUCH && MOBILE_REGEX.test(navigator.userAg
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 2e 0a 20 20 20 20 74 68 69 73 2e 64 6f 6d 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 62 6f 6f 6c 4f 72 46 6e 28 6d 61 6e 61 67 65 72 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 2c 20 5b 6d 61 6e 61 67 65 72 5d 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 68 61 6e 64 6c 65 72 28 65 76 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 74 68 69 73 2e 69 6e 69 74 28 29 3b 0a 0a 7d 0a 0a 49 6e 70 75 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 73 68 6f 75 6c 64 20 68 61 6e 64 6c 65 20 74 68 65 20 69 6e 70 75 74 45 76 65 6e 74 20 64 61 74 61 20 61 6e 64 20 74 72 69 67 67 65 72 20 74 68 65 20 63 61 6c Data Ascii: . this.domHandler = function(ev) { if (boolOrFn(manager.options.enable, [manager])) { self.handler(ev); } }; this.init();}Input.prototype = { /** * should handle the inputEvent data and trigger the cal
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 49 6e 70 75 74 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 53 55 50 50 4f 52 54 5f 4f 4e 4c 59 5f 54 4f 55 43 48 29 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 20 3d 20 54 6f 75 63 68 49 6e 70 75 74 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 21 53 55 50 50 4f 52 54 5f 54 4f 55 43 48 29 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 20 3d 20 4d 6f 75 73 65 49 6e 70 75 74 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 20 3d 20 54 6f 75 63 68 4d 6f 75 73 65 49 6e 70 75 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 28 54 79 70 65 29 28 6d 61 6e 61 67 65 72 2c 20 69 6e 70 75 74 48 61 6e 64 6c 65 72 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 68 61 6e 64 6c 65 20 69 6e 70 75 74 20 65 76 65 6e Data Ascii: Input; } else if (SUPPORT_ONLY_TOUCH) { Type = TouchInput; } else if (!SUPPORT_TOUCH) { Type = MouseInput; } else { Type = TouchMouseInput; } return new (Type)(manager, inputHandler);}/** * handle input even
2025-01-11 23:11:22 UTC	1369	IN	Data Raw: 6d 61 6e 61 67 65 72 2e 73 65 73 73 69 6f 6e 3b 0a 20 20 20 20 76 61 72 20 70 6f 69 6e 74 65 72 73 20 3d 20 69 6e 70 75 74 2e 70 6f 69 6e 74 65 72 73 3b 0a 20 20 20 20 76 61 72 20 70 6f 69 6e 74 65 72 73 4c 65 6e 67 74 68 20 3d 20 70 6f 69 6e 74 65 72 73 2e 6c 65 6e 67 74 68 3b 0a 0a 20 20 20 20 2f 2f 20 73 74 6f 72 65 20 74 68 65 20 66 69 72 73 74 20 69 6e 70 75 74 20 74 6f 20 63 61 6c 63 75 6c 61 74 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e 0a 20 20 20 20 69 66 20 28 21 73 65 73 73 69 6f 6e 2e 66 69 72 73 74 49 6e 70 75 74 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 73 73 69 6f 6e 2e 66 69 72 73 74 49 6e 70 75 74 20 3d 20 73 69 6d 70 6c 65 43 6c 6f 6e 65 49 6e 70 75 74 44 61 74 61 28 69 6e 70 75 74 29 3b 0a 20 20 Data Ascii: manager.session; var pointers = input.pointers; var pointersLength = pointers.length; // store the first input to calculate the distance and direction if (!session.firstInput) { session.firstInput = simpleCloneInputData(input);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49789	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	402	OUT	GET /js/site/main-customer-accounts-site.js?buildTime=1736370530 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:22 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 534233 Server: nginx Content-Type: application/javascript Last-Modified: Wed, 08 Jan 2025 20:11:36 GMT ETag: "677edbf8-826d9" Expires: Wed, 22 Jan 2025 21:10:39 GMT Cache-Control: max-age=1209600 X-Host: grn128.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:22 GMT Age: 266443 X-Served-By: cache-sjc1000122-SJC, cache-ewr-kewr1740056-EWR X-Cache: HIT, HIT X-Cache-Hits: 36, 1 X-Timer: S1736637083.502099,VS0,VE2 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 66 61 6c 73 65 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 69 2e 6c 6f 61 64 65 64 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 22 3b 6e 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 77 69 6e 64 6f 77 2e 41 53 53 45 54 53 5f 42 41 53 45 Data Ascii: (function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:false};e[r].call(i.exports,i,i.exports,n);i.loaded=true;return i.exports}n.m=e;n.c=t;n.p="https://cdn2.editmysite.com/js/";n.p="https://"+window.ASSETS_BASE
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 2f 6a 73 6f 6e 22 3b 6f 2e 64 61 74 61 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 2e 61 74 74 72 73 7c 7c 72 2e 74 6f 4a 53 4f 4e 28 69 29 29 7d 69 66 28 69 2e 65 6d 75 6c 61 74 65 4a 53 4f 4e 29 7b 6f 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 3b 6f 2e 64 61 74 61 3d 6f 2e 64 61 74 61 3f 7b 6d 6f 64 65 6c 3a 6f 2e 64 61 74 61 7d 3a 7b 7d 7d 69 66 28 69 2e 65 6d 75 6c 61 74 65 48 54 54 50 26 26 28 61 3d 3d 3d 22 50 55 54 22 7c 7c 61 3d 3d 3d 22 44 45 4c 45 54 45 22 7c 7c 61 3d 3d 3d 22 50 41 54 43 48 22 29 29 7b 6f 2e 74 79 70 65 3d 22 50 4f 53 54 22 3b 69 66 28 69 2e 65 6d 75 6c 61 74 65 4a 53 4f 4e 29 6f 2e 64 61 74 61 2e 5f 6d 65 74 68 6f 64 3d Data Ascii: /json";o.data=JSON.stringify(i.attrs\|\|r.toJSON(i))}if(i.emulateJSON){o.contentType="application/x-www-form-urlencoded";o.data=o.data?{model:o.data}:{}}if(i.emulateHTTP&&(a==="PUT"\|\|a==="DELETE"\|\|a==="PATCH")){o.type="POST";if(i.emulateJSON)o.data._method=
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 65 41 63 74 69 6f 6e 28 22 63 68 65 63 6b 6f 75 74 22 2c 7b 73 69 74 65 5f 6f 72 64 65 72 5f 69 64 3a 6e 2e 67 65 74 28 22 73 69 74 65 5f 6f 72 64 65 72 5f 69 64 22 29 2c 73 6f 75 72 63 65 5f 73 69 74 65 5f 69 64 3a 6e 2e 67 65 74 28 22 73 6f 75 72 63 65 5f 73 69 74 65 5f 69 64 22 29 2c 72 65 76 65 6e 75 65 3a 6e 2e 67 65 74 28 22 6f 72 64 65 72 5f 74 6f 74 61 6c 22 29 2c 74 61 78 3a 6e 2e 67 65 74 28 22 6f 72 64 65 72 5f 74 61 78 5f 74 6f 74 61 6c 22 29 2c 73 68 69 70 70 69 6e 67 3a 6e 2e 67 65 74 28 22 6f 72 64 65 72 5f 73 68 69 70 70 69 6e 67 5f 74 6f 74 61 6c 22 29 2c 61 66 66 69 6c 69 61 74 69 6f 6e 3a 22 73 70 69 2e 63 68 65 63 6b 6f 75 74 22 2c 73 74 65 70 3a 65 2c 6c 69 73 74 3a 74 2c 70 61 79 6d 65 6e 74 5f 74 6f 6b 65 6e 3a 6e 2e 67 65 74 28 22 Data Ascii: eAction("checkout",{site_order_id:n.get("site_order_id"),source_site_id:n.get("source_site_id"),revenue:n.get("order_total"),tax:n.get("order_tax_total"),shipping:n.get("order_shipping_total"),affiliation:"spi.checkout",step:e,list:t,payment_token:n.get("
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 3d 30 2c 6f 3d 78 28 65 29 3b 77 68 69 6c 65 28 61 3c 6f 29 7b 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 61 2b 6f 29 2f 32 29 3b 69 66 28 6e 28 65 5b 73 5d 29 3c 69 29 61 3d 73 2b 31 3b 65 6c 73 65 20 6f 3d 73 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 69 2c 61 29 7b 76 61 72 20 6f 3d 30 2c 73 3d 78 28 72 29 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 69 66 28 65 3e 30 29 7b 6f 3d 61 3e 3d 30 3f 61 3a 4d 61 74 68 2e 6d 61 78 28 61 2b 73 2c 6f 29 7d 65 6c 73 65 7b 73 3d 61 3e 3d 30 3f 4d 61 74 68 2e 6d 69 6e 28 61 2b 31 2c 73 29 3a 61 2b 73 2b 31 7d 7d 65 6c 73 65 20 69 66 28 6e 26 26 61 26 26 73 29 7b 61 3d 6e 28 72 2c Data Ascii: =0,o=x(e);while(a<o){var s=Math.floor((a+o)/2);if(n(e[s])<i)a=s+1;else o=s}return a};function I(e,t,n){return function(r,i,a){var o=0,s=x(r);if(typeof a=="number"){if(e>0){o=a>=0?a:Math.max(a+s,o)}else{s=a>=0?Math.min(a+1,s):a+s+1}}else if(n&&a&&s){a=n(r,
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 3d 74 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 69 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 69 3d 74 2e 5f 69 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 66 3d 74 2e 5f 66 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 6c 3d 74 2e 5f 6c 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 73 74 72 69 63 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 65 2e 5f 73 74 72 69 63 74 3d 74 2e 5f 73 74 72 69 63 74 7d 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 74 7a 6d 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 Data Ascii: ndefined"){e._isAMomentObject=t._isAMomentObject}if(typeof t._i!=="undefined"){e._i=t._i}if(typeof t._f!=="undefined"){e._f=t._f}if(typeof t._l!=="undefined"){e._l=t._l}if(typeof t._strict!=="undefined"){e._strict=t._strict}if(typeof t._tzm!=="undefined")
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 65 28 65 29 7d 3b 6e 2e 69 6e 76 61 6c 69 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 75 74 63 28 4e 61 4e 29 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 7b 6c 65 28 74 2e 5f 70 66 2c 65 29 7d 65 6c 73 65 7b 74 2e 5f 70 66 2e 75 73 65 72 49 6e 76 61 6c 69 64 61 74 65 64 3d 74 72 75 65 7d 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 70 61 72 73 65 5a 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 2e 70 61 72 73 65 5a 6f 6e 65 28 29 7d 3b 6e 2e 70 61 72 73 65 54 77 6f 44 69 67 69 74 59 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 78 65 28 65 29 2b 28 78 65 28 65 29 3e 36 38 3f 31 39 Data Ascii: function(e){return Ae(e)};n.invalid=function(e){var t=n.utc(NaN);if(e!=null){le(t._pf,e)}else{t._pf.userInvalidated=true}return t};n.parseZone=function(){return n.apply(null,arguments).parseZone()};n.parseTwoDigitYear=function(e){return xe(e)+(xe(e)>68?19
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 6e 65 64 29 7d 2c 69 6e 63 6c 75 64 65 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 61 65 28 4d 65 28 74 68 69 73 29 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 75 6e 64 65 66 69 6e 65 64 29 7d 2c 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 64 65 2e 61 70 70 6c 79 28 4d 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6c 61 73 74 49 6e 64 65 78 4f 66 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 66 65 2e 61 70 70 6c 79 28 4d 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 45 65 28 4d 65 28 74 68 69 73 29 2c 74 2c 61 72 67 Data Ascii: ned)},includes:function e(t){return ae(Me(this),t,arguments.length>1?arguments[1]:undefined)},join:function e(t){return de.apply(Me(this),arguments)},lastIndexOf:function e(t){return fe.apply(Me(this),arguments)},map:function e(t){return Ee(Me(this),t,arg
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 75 28 65 29 7b 69 66 28 69 3d 3d 3d 63 6c 65 61 72 54 69 6d 65 6f 75 74 29 7b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 69 66 28 28 69 3d 3d 3d 6f 7c 7c 21 69 29 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 29 7b 69 3d 63 6c 65 61 72 54 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 69 28 65 29 7d 63 61 74 63 68 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 7d 76 61 72 20 63 3d 5b 5d 3b 76 61 72 20 66 3d 66 61 6c 73 65 3b 76 61 72 20 6c 3b 76 61 72 20 76 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 64 28 Data Ascii: nction u(e){if(i===clearTimeout){return clearTimeout(e)}if((i===o\|\|!i)&&clearTimeout){i=clearTimeout;return clearTimeout(e)}try{return i(e)}catch(t){try{return i.call(null,e)}catch(t){return i.call(this,e)}}}var c=[];var f=false;var l;var v=-1;function d(
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 74 68 69 73 2c 74 29 3b 76 61 72 20 72 3d 6f 28 6e 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 75 6e 64 65 66 69 6e 65 64 2c 33 29 3b 76 61 72 20 69 3b 77 68 69 6c 65 28 69 3d 69 3f 69 2e 6e 3a 74 68 69 73 2e 5f 66 29 7b 72 28 69 2e 76 2c 69 2e 6b 2c 74 68 69 73 29 3b 77 68 69 6c 65 28 69 26 26 69 2e 72 29 69 3d 69 2e 70 7d 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 21 21 67 28 70 28 74 68 69 73 2c 74 29 2c 6e 29 7d 7d 29 3b 69 66 28 76 29 72 28 66 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 69 7a 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 28 74 68 69 73 2c 74 29 5b 68 5d 7d 7d 29 3b 72 65 74 75 72 6e 20 66 7d 2c 64 65 66 3a 66 75 6e Data Ascii: this,t);var r=o(n,arguments.length>1?arguments[1]:undefined,3);var i;while(i=i?i.n:this._f){r(i.v,i.k,this);while(i&&i.r)i=i.p}},has:function e(n){return!!g(p(this,t),n)}});if(v)r(f.prototype,"size",{get:function(){return p(this,t)[h]}});return f},def:fun
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 2b 2b 72 3c 69 29 7b 69 66 28 6e 28 74 2c 65 5b 72 5d 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 43 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 2c 72 3d 65 3d 3d 6e 75 6c 6c 3f 30 3a 65 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 72 29 3b 77 68 69 6c 65 28 2b 2b 6e 3c 72 29 7b 69 5b 6e 5d 3d 74 28 65 5b 6e 5d 2c 6e 2c 65 29 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 6b 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 2c 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 2b 2b 6e 3c 72 29 7b 65 5b 69 2b 6e 5d 3d 74 5b 6e 5d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4d 6e 28 65 2c Data Ascii: e.length;while(++r<i){if(n(t,e[r])){return true}}return false}function Cn(e,t){var n=-1,r=e==null?0:e.length,i=Array(r);while(++n<r){i[n]=t(e[n],n,e)}return i}function kn(e,t){var n=-1,r=t.length,i=e.length;while(++n<r){e[i+n]=t[n]}return e}function Mn(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49790	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	547	OUT	GET /js/wsnbn/snowday262.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:22 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75006 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 19 Dec 2024 22:52:45 GMT ETag: "6764a3bd-124fe" Expires: Tue, 07 Jan 2025 10:27:50 GMT Cache-Control: max-age=1209600 X-Host: grn188.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:22 GMT Age: 581862 X-Served-By: cache-sjc10061-SJC, cache-ewr-kewr1740072-EWR X-Cache: HIT, HIT X-Cache-Hits: 4023, 4 X-Timer: S1736637083.608677,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 67 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 2c 6a 29 7b 69 66 28 21 67 5b 6e 5d 29 7b 69 66 28 21 62 5b 6e 5d 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 6a 26 26 69 29 7b 72 65 74 75 72 6e 20 69 28 6e 2c 21 30 29 7d 69 66 28 61 29 7b 72 65 74 75 72 6e 20 61 28 6e 2c 21 30 29 7d 76 61 72 20 6d 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6e 2b 22 27 22 29 3b 74 68 72 6f 77 20 6d 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6d 7d 76 61 72 20 68 3d 67 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 62 5b 6e 5d 5b 30 5d 2e Data Ascii: (function e(b,g,d){function c(n,j){if(!g[n]){if(!b[n]){var i=typeof require=="function"&&require;if(!j&&i){return i(n,!0)}if(a){return a(n,!0)}var m=new Error("Cannot find module '"+n+"'");throw m.code="MODULE_NOT_FOUND",m}var h=g[n]={exports:{}};b[n][0].
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 6a 29 3b 76 2e 61 64 64 28 22 65 22 2c 22 70 76 22 29 3b 76 2e 61 64 64 28 22 75 72 6c 22 2c 75 29 3b 76 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 76 2e 61 64 64 28 22 72 65 66 72 22 2c 73 29 3b 72 65 74 75 72 6e 20 69 28 76 2c 72 2c 71 29 7d 2c 74 72 61 63 6b 50 61 67 65 50 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 74 2c 78 2c 79 2c 75 2c 72 2c 7a 2c 71 2c 76 29 7b 76 61 72 20 77 3d 67 2e 70 61 79 6c 6f 61 64 42 75 69 6c 64 65 72 28 6a 29 3b 77 2e 61 64 64 28 22 65 22 2c 22 70 70 22 29 3b 77 2e 61 64 64 28 22 75 72 6c 22 2c 73 29 3b 77 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 77 2e 61 64 64 28 22 72 65 66 72 22 2c 78 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 69 78 22 2c 79 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 61 78 22 2c 75 29 3b 77 2e 61 64 64 Data Ascii: j);v.add("e","pv");v.add("url",u);v.add("page",t);v.add("refr",s);return i(v,r,q)},trackPagePing:function(s,t,x,y,u,r,z,q,v){var w=g.payloadBuilder(j);w.add("e","pp");w.add("url",s);w.add("page",t);w.add("refr",x);w.add("pp_mix",y);w.add("pp_max",u);w.add
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 6a 3d 6e 2e 6c 65 6e 67 74 68 2d 31 3b 77 68 69 6c 65 28 6a 3e 3d 30 29 7b 76 61 72 20 6f 3d 6e 2e 73 6c 69 63 65 28 6a 2c 6e 2e 6c 65 6e 67 74 68 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 66 2e 63 6f 6f 6b 69 65 28 72 2c 70 2c 30 2c 22 2f 22 2c 6f 29 3b 69 66 28 66 2e 63 6f 6f 6b 69 65 28 72 29 3d 3d 3d 70 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 72 2c 6f 29 3b 76 61 72 20 71 3d 64 2e 67 65 74 43 6f 6f 6b 69 65 73 57 69 74 68 50 72 65 66 69 78 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 71 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 71 5b 6d 5d 2c 6f 29 7d 72 65 74 75 72 6e 20 6f 7d 6a 2d 3d 31 7d 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 Data Ascii: stname.split(".");var j=n.length-1;while(j>=0){var o=n.slice(j,n.length).join(".");f.cookie(r,p,0,"/",o);if(f.cookie(r)===p){d.deleteCookie(r,o);var q=d.getCookiesWithPrefix(l);for(var m=0;m<q.length;m++){d.deleteCookie(q[m],o)}return o}j-=1}return window
2025-01-11 23:11:22 UTC	16384	IN	Data Raw: 3d 6f 3b 41 2e 66 69 6c 74 65 72 3d 44 3b 41 2e 66 6f 72 45 61 63 68 3d 61 78 3b 41 2e 66 6f 72 49 6e 3d 61 69 3b 0a 09 41 2e 66 6f 72 4f 77 6e 3d 59 3b 41 2e 6b 65 79 73 3d 4a 3b 41 2e 6d 61 70 3d 78 3b 41 2e 6d 61 70 56 61 6c 75 65 73 3d 61 68 3b 41 2e 70 72 6f 70 65 72 74 79 3d 61 71 3b 41 2e 63 6f 6c 6c 65 63 74 3d 78 3b 41 2e 65 61 63 68 3d 61 78 3b 41 2e 65 78 74 65 6e 64 3d 61 43 3b 41 2e 73 65 6c 65 63 74 3d 44 3b 41 2e 63 6c 6f 6e 65 3d 42 3b 41 2e 66 69 6e 64 3d 61 52 3b 41 2e 69 64 65 6e 74 69 74 79 3d 54 3b 41 2e 69 73 41 72 67 75 6d 65 6e 74 73 3d 67 3b 41 2e 69 73 41 72 72 61 79 3d 66 3b 41 2e 69 73 44 61 74 65 3d 6d 3b 41 2e 69 73 45 6d 70 74 79 3d 70 3b 41 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 61 41 3b 41 2e 69 73 4e 75 6c 6c 3d 61 51 3b 41 Data Ascii: =o;A.filter=D;A.forEach=ax;A.forIn=ai;A.forOwn=Y;A.keys=J;A.map=x;A.mapValues=ah;A.property=aq;A.collect=x;A.each=ax;A.extend=aC;A.select=D;A.clone=B;A.find=aR;A.identity=T;A.isArguments=g;A.isArray=f;A.isDate=m;A.isEmpty=p;A.isFunction=aA;A.isNull=aQ;A
2025-01-11 23:11:22 UTC	9470	IN	Data Raw: 74 22 5d 3d 62 75 2e 69 73 42 6f 74 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 50 72 6f 78 69 65 64 22 5d 3d 62 75 2e 69 73 50 72 6f 78 69 65 64 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 54 6f 72 22 5d 3d 62 75 2e 69 73 54 6f 72 3b 76 61 72 20 62 71 3d 62 75 2e 66 69 6e 67 65 72 70 72 69 6e 74 7c 7c 7b 7d 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 49 6e 63 6f 67 6e 69 74 6f 22 5d 3d 62 71 2e 62 72 6f 77 73 65 72 48 61 73 49 6e 63 6f 67 6e 69 74 6f 45 6e 61 62 6c 65 64 3b 72 65 74 75 72 6e 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 69 6f 2e 61 75 67 75 72 2e 73 6e 6f 77 70 6c 6f 77 2f 69 64 65 6e 74 69 74 79 5f 6c 69 74 65 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 62 73 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 68 28 29 7b 69 66 28 Data Ascii: t"]=bu.isBot;bs.device["isProxied"]=bu.isProxied;bs.device["isTor"]=bu.isTor;var bq=bu.fingerprint\|\|{};bs.device["isIncognito"]=bq.browserHasIncognitoEnabled;return{schema:"iglu:io.augur.snowplow/identity_lite/jsonschema/1-0-0",data:bs}}}function bh(){if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49793	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	991	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive Content-Length: 83 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://talktalk770.weebly.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:22 UTC	83	OUT	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
2025-01-11 23:11:22 UTC	304	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:22 GMT Content-Type: application/json Content-Length: 348 Connection: close CF-Ray: 900895e68bf542e7-EWR CF-Cache-Status: DYNAMIC Vary: X-W-SSL,User-Agent X-Host: blu173.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2025-01-11 23:11:22 UTC	348	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","messag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49792	142.250.185.196	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	649	OUT	GET /recaptcha/api.js?_=1736637081406 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:23 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Sat, 11 Jan 2025 23:11:22 GMT Date: Sat, 11 Jan 2025 23:11:22 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-11 23:11:23 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-01-11 23:11:23 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2025-01-11 23:11:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49795	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:22 UTC	597	OUT	GET /uploads/1/5/1/8/151886692/background-images/1757667267.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ
2025-01-11 23:11:23 UTC	990	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:22 GMT Content-Type: image/png Content-Length: 301 Connection: close CF-Ray: 900895e7ce370f3a-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "8ab8aabeab356bbf9c3a7fd370d6deaf" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 12 Apr 2024 08:31:41 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: L+5YB7dJx57rE2bOAsDBxLzPqYgCVGJ7eOpjJzg+oB9kneQQHPceXDtm73Ansisin9iKmtl2B4ehU/yArslk2w== x-amz-meta-btime: 2018-11-05T14:08:37.246Z x-amz-meta-mtime: 1541426917.246 x-amz-replication-status: COMPLETED x-amz-request-id: SHBJ7HXEZJ6H6MB8 x-amz-server-side-encryption: AES256 x-amz-version-id: zmaodLAg9xw3xw_cpH8xwSgR_ponjEYK X-Storage-Bucket: z7278 X-Storage-Object: 7278553ba44412be9f4f7215402cd7b17822af273057d341f5cdaf03e5c72f29 Server: cloudflare
2025-01-11 23:11:23 UTC	301	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ff 00 00 00 c6 08 03 00 00 00 2a a3 a6 9d 00 00 00 09 50 4c 54 45 7f ad f7 ff ff fc ff ff ff de 46 f0 83 00 00 00 df 49 44 41 54 78 da ed cf 31 01 00 00 08 03 a0 69 ff d0 8b e1 21 34 20 99 fd cc df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df df Data Ascii: PNGIHDR*PLTEFIDATx1i!4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49797	151.101.1.46	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:23 UTC	365	OUT	GET /js/wsnbn/snowday262.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:23 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75006 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 19 Dec 2024 22:52:45 GMT ETag: "6764a3bd-124fe" Expires: Tue, 07 Jan 2025 10:27:50 GMT Cache-Control: max-age=1209600 X-Host: grn188.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 11 Jan 2025 23:11:23 GMT Age: 581862 X-Served-By: cache-sjc10061-SJC, cache-ewr-kewr1740057-EWR X-Cache: HIT, HIT X-Cache-Hits: 4023, 5 X-Timer: S1736637083.382800,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-11 23:11:23 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 67 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 2c 6a 29 7b 69 66 28 21 67 5b 6e 5d 29 7b 69 66 28 21 62 5b 6e 5d 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 6a 26 26 69 29 7b 72 65 74 75 72 6e 20 69 28 6e 2c 21 30 29 7d 69 66 28 61 29 7b 72 65 74 75 72 6e 20 61 28 6e 2c 21 30 29 7d 76 61 72 20 6d 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6e 2b 22 27 22 29 3b 74 68 72 6f 77 20 6d 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6d 7d 76 61 72 20 68 3d 67 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 62 5b 6e 5d 5b 30 5d 2e Data Ascii: (function e(b,g,d){function c(n,j){if(!g[n]){if(!b[n]){var i=typeof require=="function"&&require;if(!j&&i){return i(n,!0)}if(a){return a(n,!0)}var m=new Error("Cannot find module '"+n+"'");throw m.code="MODULE_NOT_FOUND",m}var h=g[n]={exports:{}};b[n][0].
2025-01-11 23:11:23 UTC	16384	IN	Data Raw: 6a 29 3b 76 2e 61 64 64 28 22 65 22 2c 22 70 76 22 29 3b 76 2e 61 64 64 28 22 75 72 6c 22 2c 75 29 3b 76 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 76 2e 61 64 64 28 22 72 65 66 72 22 2c 73 29 3b 72 65 74 75 72 6e 20 69 28 76 2c 72 2c 71 29 7d 2c 74 72 61 63 6b 50 61 67 65 50 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 74 2c 78 2c 79 2c 75 2c 72 2c 7a 2c 71 2c 76 29 7b 76 61 72 20 77 3d 67 2e 70 61 79 6c 6f 61 64 42 75 69 6c 64 65 72 28 6a 29 3b 77 2e 61 64 64 28 22 65 22 2c 22 70 70 22 29 3b 77 2e 61 64 64 28 22 75 72 6c 22 2c 73 29 3b 77 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 77 2e 61 64 64 28 22 72 65 66 72 22 2c 78 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 69 78 22 2c 79 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 61 78 22 2c 75 29 3b 77 2e 61 64 64 Data Ascii: j);v.add("e","pv");v.add("url",u);v.add("page",t);v.add("refr",s);return i(v,r,q)},trackPagePing:function(s,t,x,y,u,r,z,q,v){var w=g.payloadBuilder(j);w.add("e","pp");w.add("url",s);w.add("page",t);w.add("refr",x);w.add("pp_mix",y);w.add("pp_max",u);w.add
2025-01-11 23:11:23 UTC	16384	IN	Data Raw: 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 6a 3d 6e 2e 6c 65 6e 67 74 68 2d 31 3b 77 68 69 6c 65 28 6a 3e 3d 30 29 7b 76 61 72 20 6f 3d 6e 2e 73 6c 69 63 65 28 6a 2c 6e 2e 6c 65 6e 67 74 68 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 66 2e 63 6f 6f 6b 69 65 28 72 2c 70 2c 30 2c 22 2f 22 2c 6f 29 3b 69 66 28 66 2e 63 6f 6f 6b 69 65 28 72 29 3d 3d 3d 70 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 72 2c 6f 29 3b 76 61 72 20 71 3d 64 2e 67 65 74 43 6f 6f 6b 69 65 73 57 69 74 68 50 72 65 66 69 78 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 71 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 71 5b 6d 5d 2c 6f 29 7d 72 65 74 75 72 6e 20 6f 7d 6a 2d 3d 31 7d 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 Data Ascii: stname.split(".");var j=n.length-1;while(j>=0){var o=n.slice(j,n.length).join(".");f.cookie(r,p,0,"/",o);if(f.cookie(r)===p){d.deleteCookie(r,o);var q=d.getCookiesWithPrefix(l);for(var m=0;m<q.length;m++){d.deleteCookie(q[m],o)}return o}j-=1}return window
2025-01-11 23:11:23 UTC	16384	IN	Data Raw: 3d 6f 3b 41 2e 66 69 6c 74 65 72 3d 44 3b 41 2e 66 6f 72 45 61 63 68 3d 61 78 3b 41 2e 66 6f 72 49 6e 3d 61 69 3b 0a 09 41 2e 66 6f 72 4f 77 6e 3d 59 3b 41 2e 6b 65 79 73 3d 4a 3b 41 2e 6d 61 70 3d 78 3b 41 2e 6d 61 70 56 61 6c 75 65 73 3d 61 68 3b 41 2e 70 72 6f 70 65 72 74 79 3d 61 71 3b 41 2e 63 6f 6c 6c 65 63 74 3d 78 3b 41 2e 65 61 63 68 3d 61 78 3b 41 2e 65 78 74 65 6e 64 3d 61 43 3b 41 2e 73 65 6c 65 63 74 3d 44 3b 41 2e 63 6c 6f 6e 65 3d 42 3b 41 2e 66 69 6e 64 3d 61 52 3b 41 2e 69 64 65 6e 74 69 74 79 3d 54 3b 41 2e 69 73 41 72 67 75 6d 65 6e 74 73 3d 67 3b 41 2e 69 73 41 72 72 61 79 3d 66 3b 41 2e 69 73 44 61 74 65 3d 6d 3b 41 2e 69 73 45 6d 70 74 79 3d 70 3b 41 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 61 41 3b 41 2e 69 73 4e 75 6c 6c 3d 61 51 3b 41 Data Ascii: =o;A.filter=D;A.forEach=ax;A.forIn=ai;A.forOwn=Y;A.keys=J;A.map=x;A.mapValues=ah;A.property=aq;A.collect=x;A.each=ax;A.extend=aC;A.select=D;A.clone=B;A.find=aR;A.identity=T;A.isArguments=g;A.isArray=f;A.isDate=m;A.isEmpty=p;A.isFunction=aA;A.isNull=aQ;A
2025-01-11 23:11:23 UTC	9470	IN	Data Raw: 74 22 5d 3d 62 75 2e 69 73 42 6f 74 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 50 72 6f 78 69 65 64 22 5d 3d 62 75 2e 69 73 50 72 6f 78 69 65 64 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 54 6f 72 22 5d 3d 62 75 2e 69 73 54 6f 72 3b 76 61 72 20 62 71 3d 62 75 2e 66 69 6e 67 65 72 70 72 69 6e 74 7c 7c 7b 7d 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 49 6e 63 6f 67 6e 69 74 6f 22 5d 3d 62 71 2e 62 72 6f 77 73 65 72 48 61 73 49 6e 63 6f 67 6e 69 74 6f 45 6e 61 62 6c 65 64 3b 72 65 74 75 72 6e 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 69 6f 2e 61 75 67 75 72 2e 73 6e 6f 77 70 6c 6f 77 2f 69 64 65 6e 74 69 74 79 5f 6c 69 74 65 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 62 73 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 68 28 29 7b 69 66 28 Data Ascii: t"]=bu.isBot;bs.device["isProxied"]=bu.isProxied;bs.device["isTor"]=bu.isTor;var bq=bu.fingerprint\|\|{};bs.device["isIncognito"]=bq.browserHasIncognitoEnabled;return{schema:"iglu:io.augur.snowplow/identity_lite/jsonschema/1-0-0",data:bs}}}function bh(){if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49798	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:23 UTC	769	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:23 UTC	304	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:23 GMT Content-Type: application/json Content-Length: 118 Connection: close CF-Ray: 900895eb5d29c356-EWR CF-Cache-Status: DYNAMIC Vary: X-W-SSL,User-Agent X-Host: grn145.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2025-01-11 23:11:23 UTC	118	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 30 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request","http_response_code":400},"id":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49801	142.250.181.228	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:24 UTC	467	OUT	GET /recaptcha/api.js?_=1736637081406 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:24 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Sat, 11 Jan 2025 23:11:24 GMT Date: Sat, 11 Jan 2025 23:11:24 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-11 23:11:24 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-01-11 23:11:24 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2025-01-11 23:11:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49799	44.240.99.243	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:24 UTC	550	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://talktalk770.weebly.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:24 UTC	361	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:24 GMT Content-Length: 0 Connection: close Server: nginx Access-Control-Allow-Origin: https://talktalk770.weebly.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, SP-Anonymous Access-Control-Max-Age: 600 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49803	44.240.99.243	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:24 UTC	663	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 1961 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://talktalk770.weebly.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:24 UTC	1961	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 74 61 6c 6b 37 37 30 2e 77 65 65 62 6c 79 2e 63 6f 6d 2f 22 2c 22 70 61 67 65 22 3a 22 31 35 31 38 38 36 36 39 32 3a 37 35 30 33 34 32 38 36 31 39 38 31 39 34 32 37 30 39 22 2c 22 74 76 22 3a 22 6a 73 2d 32 2e 36 2e 32 22 2c 22 74 6e 61 22 3a 22 5f 77 6e 22 2c 22 61 69 64 22 3a 22 5f 77 6e 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 74 7a 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 6c 61 6e 67 22 3a Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"https://talktalk770.weebly.com/","page":"151886692:750342861981942709","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web","tz":"America/New_York","lang":
2025-01-11 23:11:25 UTC	432	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:25 GMT Content-Type: text/plain Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=23ed650a-6bc4-4697-a99f-3aa9d3ec9cd2; Expires=Sun, 11 Jan 2026 23:11:25 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://talktalk770.weebly.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-11 23:11:25 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49804	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:25 UTC	935	OUT	GET /favicon.ico HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:25 UTC	920	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:25 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close CF-Ray: 900895f62929c327-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4d27526198ac873ccec96935198e0fb9" Last-Modified: Fri, 05 Apr 2024 02:14:34 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: 6LUK6CtH4+TWfniCccbHg88HwIW4aujWyOlH2Vl4qljMSKe8ixhJz2Lt46TJCd7oY0J/XJCGTYyo5Y8ffokoew== x-amz-meta-btime: 2023-12-05T01:20:44.747Z x-amz-meta-mtime: 1701739244.747 x-amz-replication-status: COMPLETED x-amz-request-id: GRA0HQSF66PTXP8J x-amz-server-side-encryption: AES256 x-amz-version-id: LsXk5SXX4YYENRi6Sb2HPGzXQEtkP7zo X-Storage-Bucket: z40a2 X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4 Server: cloudflare
2025-01-11 23:11:25 UTC	449	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @
2025-01-11 23:11:25 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 3f 34 00 49 44 35 02 44 3c 33 37 43 3b 33 91 43 3b 32 c6 43 3b 32 d8 43 3b 32 c9 43 3b 33 9f 44 3c 33 4c 45 3d 33 09 45 3d 32 00 44 3c 33 00 44 3d 33 0b 43 3c 32 51 43 3b 32 a4 43 3b 32 ce 43 3b 32 dc 43 3b 32 c8 44 3b 33 92 44 3b 34 36 4a 42 3b 02 47 3e 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 3b 34 00 48 3c 35 02 44 3b 33 5d 43 3b 32 e0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ef 44 3c 32 83 47 3c 33 0c 47 3c 34 0e 44 3c 33 89 43 3b 32 f2 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 df 44 3c 33 5b 43 3d 37 02 43 3c 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: F?4ID5D<37C;3C;2C;2C;2C;3D<3LE=3E=2D<3D=3C<2QC;2C;2C;2C;2D;3D;46JB;G>6E;4H<5D;3]C;2C;2C;2C;2C;2C;2C;2D<2G<3G<4D<3C;2C;2C;2C;2C;2C;2C;2D<3[C=7C<4
2025-01-11 23:11:25 UTC	1369	IN	Data Raw: 4b 47 36 00 44 3c 33 00 44 3d 33 31 43 3b 32 e6 43 3b 32 ff 43 3b 32 fa 44 3b 32 66 3f 3a 31 00 53 40 37 00 44 3c 34 00 45 3d 34 0b 43 3b 32 b0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ab 45 3d 35 09 44 3c 34 00 44 3d 33 00 45 3d 33 0b 44 3c 32 a2 44 3c 33 4e 44 3c 32 00 48 3f 37 00 3a 32 27 00 44 3b 32 7b 44 3c 32 77 3d 35 2f 00 49 40 35 00 44 3c 32 00 44 3c 32 4f 44 3c 32 a2 45 3d 33 0b 44 3d 33 00 45 3d 33 00 46 3f 33 0a 44 3c 32 ac 43 3b 32 ff 43 3b 32 ff 43 3b 32 af 44 3d 33 0b 44 3c 33 00 44 3c 33 00 44 3c 33 33 43 3b 32 e7 43 3b 32 ff 43 3b 32 f9 44 3c 33 60 40 38 2e 00 57 50 47 00 44 3c 33 00 44 3d 33 29 43 3b 32 e4 43 3c 32 8d 51 4d 34 01 46 3e 32 00 45 3c 32 00 44 3c 32 28 45 3d 33 26 45 3c 32 00 46 3e 32 00 51 4d 35 01 43 3c 32 8d 43 3b 32 e4 44 3d 33 Data Ascii: KG6D<3D=31C;2C;2C;2D;2f?:1S@7D<4E=4C;2C;2C;2C;2E=5D<4D=3E=3D<2D<3ND<2H?7:2'D;2{D<2w=5/I@5D<2D<2OD<2E=3D=3E=3F?3D<2C;2C;2C;2D=3D<3D<3D<33C;2C;2C;2D<3`@8.WPGD<3D=3)C;2C<2QM4F>2E<2D<2(E=3&E<2F>2QM5C<2C;2D=3
2025-01-11 23:11:25 UTC	1099	IN	Data Raw: 3b 32 ff 43 3b 32 ff 43 3b 32 fa 43 3b 32 fa 43 3b 32 ff 43 3b 32 ff 43 3b 32 fe 44 3c 32 91 44 3d 33 29 43 3b 32 c9 43 3b 32 ff 43 3b 32 ff 43 3b 32 fc 43 3b 32 f9 43 3b 32 fe 43 3b 32 ff 43 3b 32 ff 43 3b 32 ec 44 3b 32 59 45 3d 33 09 44 3c 32 77 43 3b 32 ec 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 d7 44 3c 32 45 3e 35 31 00 45 3d 33 1a 44 3b 32 a7 43 3b 32 f9 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 fb 43 3c 32 ae 45 3c 32 1e 3f 35 2c 00 44 3c 33 3e 43 3b 32 d2 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ed 44 3b 32 75 45 3d 33 07 45 3e 34 00 45 3f 34 07 44 3c 33 47 43 3b 32 9e 43 3b 32 cf 43 3b 32 de 43 3b 32 cc 44 3c 33 91 44 3c 33 32 43 3e 39 01 44 3d 36 00 43 3a 31 00 44 3d 35 13 Data Ascii: ;2C;2C;2C;2C;2C;2C;2D<2D=3)C;2C;2C;2C;2C;2C;2C;2C;2C;2D;2YE=3D<2wC;2C;2C;2C;2C;2C;2C;2D<2E>51E=3D;2C;2C;2C;2C;2C;2C;2C<2E<2?5,D<3>C;2C;2C;2C;2C;2C;2C;2D;2uE=3E>4E?4D<3GC;2C;2C;2C;2D<3D<32C>9D=6C:1D=5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49808	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:25 UTC	692	OUT	GET /favicon.ico HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:26 UTC	920	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:25 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close CF-Ray: 900895fab92c7d11-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4d27526198ac873ccec96935198e0fb9" Last-Modified: Fri, 05 Apr 2024 02:14:34 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: 33OMvPmEKddmoa/15S5criDF3ZTWLqY6J7+Q36IOL6YG9ShiSS7y5YjBbkky5//yovRWcIkPvFHm2j7g/qMGdg== x-amz-meta-btime: 2023-12-05T01:20:44.747Z x-amz-meta-mtime: 1701739244.747 x-amz-replication-status: COMPLETED x-amz-request-id: C60P0PEAHETDPRHJ x-amz-server-side-encryption: AES256 x-amz-version-id: LsXk5SXX4YYENRi6Sb2HPGzXQEtkP7zo X-Storage-Bucket: z40a2 X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4 Server: cloudflare
2025-01-11 23:11:26 UTC	449	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @
2025-01-11 23:11:26 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 3f 34 00 49 44 35 02 44 3c 33 37 43 3b 33 91 43 3b 32 c6 43 3b 32 d8 43 3b 32 c9 43 3b 33 9f 44 3c 33 4c 45 3d 33 09 45 3d 32 00 44 3c 33 00 44 3d 33 0b 43 3c 32 51 43 3b 32 a4 43 3b 32 ce 43 3b 32 dc 43 3b 32 c8 44 3b 33 92 44 3b 34 36 4a 42 3b 02 47 3e 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 3b 34 00 48 3c 35 02 44 3b 33 5d 43 3b 32 e0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ef 44 3c 32 83 47 3c 33 0c 47 3c 34 0e 44 3c 33 89 43 3b 32 f2 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 df 44 3c 33 5b 43 3d 37 02 43 3c 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: F?4ID5D<37C;3C;2C;2C;2C;3D<3LE=3E=2D<3D=3C<2QC;2C;2C;2C;2D;3D;46JB;G>6E;4H<5D;3]C;2C;2C;2C;2C;2C;2C;2D<2G<3G<4D<3C;2C;2C;2C;2C;2C;2C;2D<3[C=7C<4
2025-01-11 23:11:26 UTC	1369	IN	Data Raw: 4b 47 36 00 44 3c 33 00 44 3d 33 31 43 3b 32 e6 43 3b 32 ff 43 3b 32 fa 44 3b 32 66 3f 3a 31 00 53 40 37 00 44 3c 34 00 45 3d 34 0b 43 3b 32 b0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ab 45 3d 35 09 44 3c 34 00 44 3d 33 00 45 3d 33 0b 44 3c 32 a2 44 3c 33 4e 44 3c 32 00 48 3f 37 00 3a 32 27 00 44 3b 32 7b 44 3c 32 77 3d 35 2f 00 49 40 35 00 44 3c 32 00 44 3c 32 4f 44 3c 32 a2 45 3d 33 0b 44 3d 33 00 45 3d 33 00 46 3f 33 0a 44 3c 32 ac 43 3b 32 ff 43 3b 32 ff 43 3b 32 af 44 3d 33 0b 44 3c 33 00 44 3c 33 00 44 3c 33 33 43 3b 32 e7 43 3b 32 ff 43 3b 32 f9 44 3c 33 60 40 38 2e 00 57 50 47 00 44 3c 33 00 44 3d 33 29 43 3b 32 e4 43 3c 32 8d 51 4d 34 01 46 3e 32 00 45 3c 32 00 44 3c 32 28 45 3d 33 26 45 3c 32 00 46 3e 32 00 51 4d 35 01 43 3c 32 8d 43 3b 32 e4 44 3d 33 Data Ascii: KG6D<3D=31C;2C;2C;2D;2f?:1S@7D<4E=4C;2C;2C;2C;2E=5D<4D=3E=3D<2D<3ND<2H?7:2'D;2{D<2w=5/I@5D<2D<2OD<2E=3D=3E=3F?3D<2C;2C;2C;2D=3D<3D<3D<33C;2C;2C;2D<3`@8.WPGD<3D=3)C;2C<2QM4F>2E<2D<2(E=3&E<2F>2QM5C<2C;2D=3
2025-01-11 23:11:26 UTC	1099	IN	Data Raw: 3b 32 ff 43 3b 32 ff 43 3b 32 fa 43 3b 32 fa 43 3b 32 ff 43 3b 32 ff 43 3b 32 fe 44 3c 32 91 44 3d 33 29 43 3b 32 c9 43 3b 32 ff 43 3b 32 ff 43 3b 32 fc 43 3b 32 f9 43 3b 32 fe 43 3b 32 ff 43 3b 32 ff 43 3b 32 ec 44 3b 32 59 45 3d 33 09 44 3c 32 77 43 3b 32 ec 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 d7 44 3c 32 45 3e 35 31 00 45 3d 33 1a 44 3b 32 a7 43 3b 32 f9 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 fb 43 3c 32 ae 45 3c 32 1e 3f 35 2c 00 44 3c 33 3e 43 3b 32 d2 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ed 44 3b 32 75 45 3d 33 07 45 3e 34 00 45 3f 34 07 44 3c 33 47 43 3b 32 9e 43 3b 32 cf 43 3b 32 de 43 3b 32 cc 44 3c 33 91 44 3c 33 32 43 3e 39 01 44 3d 36 00 43 3a 31 00 44 3d 35 13 Data Ascii: ;2C;2C;2C;2C;2C;2C;2D<2D=3)C;2C;2C;2C;2C;2C;2C;2C;2C;2D;2YE=3D<2wC;2C;2C;2C;2C;2C;2C;2D<2E>51E=3D;2C;2C;2C;2C;2C;2C;2C<2E<2?5,D<3>C;2C;2C;2C;2C;2C;2C;2D;2uE=3E>4E?4D<3GC;2C;2C;2C;2D<3D<32C>9D=6C:1D=5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49807	44.240.99.243	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:25 UTC	424	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=23ed650a-6bc4-4697-a99f-3aa9d3ec9cd2
2025-01-11 23:11:26 UTC	455	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=23ed650a-6bc4-4697-a99f-3aa9d3ec9cd2; Expires=Sun, 11 Jan 2026 23:11:26 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-11 23:11:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49814	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:33 UTC	1247	OUT	POST /ajax/apps/formSubmitAjax.php HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive Content-Length: 779 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://talktalk770.weebly.com Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryrFKftkOgwcwMF5EG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:33 UTC	779	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 46 4b 66 74 6b 4f 67 77 63 77 4d 46 35 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 5f 75 33 33 36 30 33 32 35 31 30 32 30 33 37 34 30 32 35 39 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 46 4b 66 74 6b 4f 67 77 63 77 4d 46 35 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 5f 75 39 35 39 37 34 39 31 30 32 37 35 38 32 32 39 39 35 30 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 46 4b 66 74 6b 4f 67 77 63 77 4d 46 35 45 47 0d Data Ascii: ------WebKitFormBoundaryrFKftkOgwcwMF5EGContent-Disposition: form-data; name="_u336032510203740259"------WebKitFormBoundaryrFKftkOgwcwMF5EGContent-Disposition: form-data; name="_u959749102758229950"------WebKitFormBoundaryrFKftkOgwcwMF5EG
2025-01-11 23:11:34 UTC	408	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 9008962bfe1dc328-EWR CF-Cache-Status: DYNAMIC Set-Cookie: language=en; expires=Sat, 25-Jan-2025 23:11:34 GMT; Max-Age=1209600; path=/ Vary: X-W-SSL,User-Agent X-Host: blu148.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2025-01-11 23:11:34 UTC	477	IN	Data Raw: 31 64 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 72 65 74 28 29 7b 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 26 26 20 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 72 65 73 70 6f 6e 73 65 27 29 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 6e 6f 64 65 56 61 6c 75 65 2c 27 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 74 61 6c 6b 37 37 30 2e Data Ascii: 1d6<!DOCTYPE html><html><head><meta name="format-detection" content="telephone=no"><script type="text/javascript">function ret(){parent.postMessage && parent.postMessage(document.getElementById('response').childNodes[0].nodeValue,'https://talktalk770.
2025-01-11 23:11:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49817	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:35 UTC	1015	OUT	GET /home.html HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:35 UTC	448	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 900896385ebe4406-EWR CF-Cache-Status: DYNAMIC Cache-Control: private Set-Cookie: language=en; expires=Sat, 25-Jan-2025 23:11:35 GMT; Max-Age=1209600; path=/ Vary: X-W-SSL,Accept-Encoding,User-Agent X-Host: grn138.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2025-01-11 23:11:35 UTC	921	IN	Data Raw: 37 62 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 48 6f 6d 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 48 6f 6d 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 74 61 6c 6b 37 37 Data Ascii: 7b4f<!DOCTYPE html><html lang="en"><head><title>Home</title><meta property="og:site_name" content="" /><meta property="og:title" content="Home" /><meta property="og:description" content="" /><meta property="og:image" content="https://talktalk77
2025-01-11 23:11:35 UTC	1369	IN	Data Raw: 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 68 65 61 64 65 72 2d 70 72 6f 6d 70 74 20 2e 6e 61 76 62 61 72 5f 5f 6c 69 6e 6b 2d 2d 6c 6f 67 69 6e 2c 0a 20 20 20 20 2e 68 65 61 64 65 72 2d 70 72 6f 6d 70 74 20 2e 6e 61 76 62 61 72 5f 5f 6c 69 6e 6b 2e 6e 61 76 62 61 72 5f 5f 6c 69 6e 6b 2d 2d 73 69 67 6e 75 70 20 7b 0a 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 43 37 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 68 65 61 64 65 72 2d 70 72 6f 6d 70 74 20 2e 6e 61 76 62 61 72 5f 5f 6c 69 6e 6b 2e 6e 61 76 62 61 72 5f 5f 6c 69 6e 6b 2d 2d 73 69 67 6e 75 70 20 7b 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 78 20 23 43 39 43 44 43 46 20 21 Data Ascii: !important; } .header-prompt .navbar__link--login, .header-prompt .navbar__link.navbar__link--signup { color: #666C70 !important; } .header-prompt .navbar__link.navbar__link--signup { box-shadow: inset 0 0 0 2px #C9CDCF !
2025-01-11 23:11:35 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 70 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 70 72 6f 64 75 63 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 Data Ascii: ements.wsite-not-footer:not(.wsite-header-elements) p, .wsite-elements.wsite-not-footer:not(.wsite-header-elements) .product-block .product-title, .wsite-elements.wsite-not-footer:not(.wsite-header-elements) .product-description, .wsite-elements.wsite-not
2025-01-11 23:11:35 UTC	1369	IN	Data Raw: 7b 7d 0a 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 68 32 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 70 72 6f 64 75 63 74 2d 6c 6f 6e 67 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 70 72 6f 64 75 63 74 2d 6c 61 72 67 65 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 2e 77 73 69 Data Ascii: {}.wsite-elements.wsite-not-footer:not(.wsite-header-elements) h2, .wsite-elements.wsite-not-footer:not(.wsite-header-elements) .product-long .product-title, .wsite-elements.wsite-not-footer:not(.wsite-header-elements) .product-large .product-title, .wsi
2025-01-11 23:11:35 UTC	1369	IN	Data Raw: 75 63 74 20 2e 77 73 69 74 65 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 20 61 20 7b 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 70 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 Data Ascii: uct .wsite-product-price a {}@media screen and (min-width: 767px) {.wsite-elements.wsite-not-footer:not(.wsite-header-elements) div.paragraph, .wsite-elements.wsite-not-footer:not(.wsite-header-elements) p, .wsite-elements.wsite-not-footer:not(.wsite-hea
2025-01-11 23:11:35 UTC	1369	IN	Data Raw: 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 2e 70 72 6f 64 75 63 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 7b 7d 0a 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 68 32 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e Data Ascii: te-elements.wsite-footer .product-description, .wsite-elements.wsite-footer .wsite-form-field label, .wsite-elements.wsite-footer .wsite-form-field label{}.wsite-elements.wsite-not-footer:not(.wsite-header-elements) h2, .wsite-elements.wsite-not-footer:n
2025-01-11 23:11:35 UTC	1369	IN	Data Raw: 69 74 65 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 20 7b 7d 0a 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 7d 0a 2e 77 73 69 74 65 2d 66 6f 6f 74 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 7d 0a 2e 62 6c 6f 67 2d 68 65 61 64 65 72 20 68 32 20 61 20 7b 7d 0a 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 68 32 2e 77 73 69 74 65 2d 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 20 7b 7d 0a 2e 77 73 69 74 65 2d 70 72 6f 64 75 63 74 20 2e 77 73 69 74 65 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 20 61 20 7b 7d 0a 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 09 09 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 66 69 6c 65 73 2f 74 65 6d 70 6c 61 74 65 41 72 74 69 66 61 63 74 73 2e 6a 73 3f 31 37 33 36 34 31 34 30 31 35 27 3e 3c 2f 73 63 72 69 Data Ascii: ite-button-inner {}.wsite-not-footer blockquote {}.wsite-footer blockquote {}.blog-header h2 a {}#wsite-content h2.wsite-product-title {}.wsite-product .wsite-product-price a {}}</style><script src='/files/templateArtifacts.js?1736414015'></scri
2025-01-11 23:11:35 UTC	1369	IN	Data Raw: 6e 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 70 61 73 73 77 6f 72 64 55 70 64 61 74 65 22 2c 22 6c 65 6e 22 3a 33 2c 22 6d 75 6c 74 69 70 6c 65 22 3a 66 61 6c 73 65 2c 22 73 74 61 6e 64 61 6c 6f 6e 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 76 61 6c 69 64 61 74 65 53 65 73 73 69 6f 6e 22 2c 22 6c 65 6e 22 3a 31 2c 22 6d 75 6c 74 69 70 6c 65 22 3a 66 61 6c 73 65 2c 22 73 74 61 6e 64 61 6c 6f 6e 65 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 5f 57 2e 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 2e 52 50 43 22 7d 29 3b 0a 5f 57 2e 73 65 74 75 70 5f 6d 6f 64 65 6c 5f 72 70 63 28 7b 22 72 70 63 5f 6e 61 6d 65 73 70 61 63 65 22 3a 22 5f 57 2e 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 2e 52 50 43 Data Ascii: ne":false},{"name":"passwordUpdate","len":3,"multiple":false,"standalone":false},{"name":"validateSession","len":1,"multiple":false,"standalone":false}]},"namespace":"_W.CustomerAccounts.RPC"});_W.setup_model_rpc({"rpc_namespace":"_W.CustomerAccounts.RPC
2025-01-11 23:11:35 UTC	1369	IN	Data Raw: 50 72 69 76 61 63 79 50 6f 6c 69 63 79 55 72 6c 20 3d 20 22 22 3b 0a 09 09 09 63 6f 6d 5f 63 75 72 72 65 6e 74 53 69 74 65 20 3d 20 22 37 35 30 33 34 32 38 36 31 39 38 31 39 34 32 37 30 39 22 3b 0a 09 09 09 63 6f 6d 5f 75 73 65 72 49 44 20 3d 20 22 31 35 31 38 38 36 36 39 32 22 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 5f 57 2e 63 6f 6e 66 69 67 44 6f 6d 61 69 6e 20 3d 20 22 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 5f 57 2e 72 65 6c 69 6e 71 75 69 73 68 20 26 26 20 5f 57 2e 72 65 6c 69 6e 71 75 69 73 68 28 29 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: PrivacyPolicyUrl = "";com_currentSite = "750342861981942709";com_userID = "151886692";</script><script type="text/javascript">_W.configDomain = "www.weebly.com";</script><script>_W.relinquish && _W.relinquish()</script><script type="text/javascri
2025-01-11 23:11:35 UTC	1369	IN	Data Raw: 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 2d 77 72 61 70 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 20 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 20 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 69 74 65 2d 73 65 63 74 69 6f 6e 2d 77 72 61 70 22 3e 0a 09 3c 64 69 76 20 20 63 6c 61 73 73 3d 22 77 73 69 74 65 2d 73 65 63 74 69 6f 6e 20 77 73 69 74 65 2d 68 65 61 64 65 72 2d 73 65 63 74 69 6f 6e 20 77 73 69 74 65 2d 73 65 63 74 69 6f 6e 2d 62 67 2d 69 6d 61 67 65 Data Ascii: /div> </div> </div> </div> <div class="banner-wrap"> <div class="wsite-elements wsite-not-footer wsite-header-elements"><div class="wsite-section-wrap"><div class="wsite-section wsite-header-section wsite-section-bg-image

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49819	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:36 UTC	918	OUT	GET /files/main_style.css?1736414015 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://talktalk770.weebly.com/home.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:36 UTC	422	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:36 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close CF-Ray: 9008963d4faa558f-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: blu147.sf2p.intern.weebly.net Server: cloudflare
2025-01-11 23:11:36 UTC	947	IN	Data Raw: 34 39 65 36 0d 0a 75 6c 2c 20 6f 6c 2c 20 6c 69 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 66 6f 72 6d 2c 20 62 6f 64 79 2c 20 68 74 6d 6c 2c 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 66 69 65 6c 64 73 65 74 2c 20 69 6e 70 75 74 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 75 6c 2c 20 6f 6c 2c 20 6c 69 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 66 6f 72 6d 2c 20 62 6f 64 79 2c 20 68 74 6d 6c 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 66 69 65 6c 64 73 65 74 2c 20 69 6e 70 75 74 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 20 69 6e Data Ascii: 49e6ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, div.paragraph, blockquote, fieldset, input { margin: 0; padding: 0; }ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, p, blockquote, fieldset, input { margin: 0; padding: 0; } in
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 23 77 73 69 74 65 2d 73 65 61 72 63 68 2d 73 69 64 65 62 61 72 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 20 2e 77 73 69 74 65 Data Ascii: ckbox input[type=checkbox], .wsite-com-product-option-groups input[type="radio"], .wsite-com-product-option-groups input[type="checkbox"], .wsite-com-product-option-groups #wsite-search-sidebar .wsite-search-facet-availability input[type=checkbox], .wsite
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 74 6f 70 3a 20 31 70 78 3b 20 6c 65 66 74 3a 20 34 70 78 3b 20 77 69 64 74 68 3a 20 35 70 78 3b 20 68 65 69 67 68 74 3a 20 39 70 78 3b 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 23 33 33 37 65 66 39 3b 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 32 70 78 20 32 70 78 20 30 3b 20 7d 0a 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 3a 63 68 65 63 6b 65 64 3a 61 Data Ascii: -ms-transform: rotate(45deg); -o-transform: rotate(45deg); transform: rotate(45deg); position: relative; top: 1px; left: 4px; width: 5px; height: 9px; border: solid #337ef9; border-width: 0 2px 2px 0; } .wsite-form-field input[type="checkbox"]:checked:a
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 73 20 65 61 73 65 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 63 6f 6c 6f 72 20 33 30 30 6d 73 20 65 61 73 65 3b 20 7d 0a 20 61 3a 68 6f 76 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 33 33 37 65 66 39 3b 20 7d 0a 20 61 20 69 6d 67 20 7b 20 62 6f 72 64 65 72 3a 20 30 3b 20 7d 0a 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4b 61 72 6c 61 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 33 66 33 66 33 66 3b 20 7d 0a 20 68 32 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 20 7d 0a 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 2e 70 61 72 61 67 72 61 70 68 20 7b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 Data Ascii: s ease; transition: color 300ms ease; } a:hover { color: #337ef9; } a img { border: 0; } h1, h2, h3, h4, h5, h6 { font-family: 'Karla', sans-serif; font-weight: 700; color: #3f3f3f; } h2 { font-size: 20px; } div.paragraph, .paragraph { line-height: 1
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 72 61 70 20 61 3a 68 6f 76 65 72 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 35 3b 20 7d 0a 20 2e 66 6f 6f 74 65 72 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 6c 61 62 65 6c 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 7d 0a 20 2e 66 6f 6f 74 65 72 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 69 74 65 6d 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 7d 0a 20 62 6f 64 79 2e 68 65 61 64 65 72 2d 73 74 69 63 6b 79 2c 20 62 6f 64 79 2e 68 65 61 64 65 72 2d 73 74 69 63 6b 79 2d 75 70 20 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 30 70 78 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 70 Data Ascii: rap a:hover { opacity: 0.75; } .footer-wrap .wsite-form-label { color: #ffffff; } .footer-wrap .wsite-social .wsite-social-item { color: #ffffff; } body.header-sticky, body.header-sticky-up { padding-top: 50px; } .edison-header { -webkit-transition: p
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 2d 69 6e 6e 65 72 2d 77 72 61 70 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 20 30 2e 33 73 3b 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 20 30 2e 33 73 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 20 30 2e 33 73 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 7d 0a Data Ascii: ve !important; } .edison-header .container { height: 100%; } .edison-header .header-inner-wrap { -webkit-transition: opacity 0.6s ease-in 0.3s; -o-transition: opacity 0.6s ease-in 0.3s; transition: opacity 0.6s ease-in 0.3s; height: 100%; opacity: 0; }
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 77 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 34 36 70 78 3b 20 7d 0a 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 2c 28 68 6f 76 65 72 3a 20 6e 6f 6e 65 29 20 7b 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 77 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 20 7b 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 3b 20 7d 0a 20 7d 0a 20 2e 65 64 69 73 6f 6e 2d 68 65 61 64 65 72 20 2e 77 73 69 74 Data Ascii: play: none; } .edison-header .wsite-logo img { display: block; overflow: hidden; max-width: 100%; max-height: 46px; } @media only screen and (max-width: 1024px),(hover: none) { .edison-header .wsite-logo img { padding: 5px 0; } } .edison-header .wsit
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 7d 0a 20 2e 6e 61 76 2d 6f 70 65 6e 20 2e 68 61 6d 62 75 72 67 65 72 20 69 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0a 20 2e 68 61 6d 62 75 72 67 65 72 20 69 3a 3a 62 65 66 6f 72 65 2c 20 2e 68 61 6d 62 75 72 67 65 72 20 69 3a 3a 61 66 74 65 72 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b Data Ascii: transition: background-color 0.2s ease-out; -o-transition: background-color 0.2s ease-out; transition: background-color 0.2s ease-out; } .nav-open .hamburger i { background-color: transparent; } .hamburger i::before, .hamburger i::after { display: block
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 31 36 70 78 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 2e 68 61 73 2d 73 69 74 65 2d 73 65 61 72 63 68 20 2e 73 65 61 72 63 68 2d 74 6f 67 67 6c 65 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 23 77 73 69 74 65 2d 73 65 61 72 63 68 2d 73 69 64 65 62 61 72 20 2e 63 6c 6f 73 65 2d 62 74 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 77 72 61 70 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 2e Data Ascii: 16px; text-decoration: none; text-align: center; } .has-site-search .search-toggle { display: inline-block; } #wsite-search-sidebar .close-btn { display: none; } .wsite-search-wrap { text-align: center; } @media only screen and (min-width: 768px) { .
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 2d 73 65 61 72 63 68 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 66 6f 63 75 73 20 7b 20 62 6f 72 64 65 72 3a 20 30 3b 20 7d 0a 20 7d 0a 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 77 72 61 70 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 62 6f 64 79 2e 77 73 69 74 65 2d 65 64 69 74 6f 72 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 20 7b 20 77 69 64 74 68 3a 20 37 35 70 78 3b 20 7d 0a 20 62 6f 64 79 2e 77 73 69 74 65 2d 65 64 69 74 6f 72 20 2e 77 73 69 74 65 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 20 6f 70 61 63 69 74 79 Data Ascii: -search-wrap .wsite-search-input:focus { border: 0; } } .wsite-search-wrap .wsite-search-button { display: none; } body.wsite-editor .wsite-search-input { width: 75px; } body.wsite-editor .wsite-search-input::-moz-placeholder { color: #666666; opacity

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49820	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:36 UTC	910	OUT	GET /files/templateArtifacts.js?1736414015 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/home.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:36 UTC	437	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:36 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 9008963d4be3424d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: blu68.sf2p.intern.weebly.net Server: cloudflare
2025-01-11 23:11:36 UTC	932	IN	Data Raw: 31 62 66 38 0d 0a 2f 2f 20 47 65 74 73 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 5f 57 0a 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 57 65 65 62 6c 79 2e 74 65 6d 70 6c 61 74 65 73 20 3d 20 7b 0a 09 09 27 73 65 61 72 63 68 2f 66 69 6c 74 65 72 2f 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 20 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 66 61 63 65 74 5f 6e 61 6d 65 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 7b 7b 63 6f 6c 75 6d 6e 5f 6e 61 6d 65 7d 7d 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 Data Ascii: 1bf8// Gets converted to _WWeebly = window.Weebly \|\| {};Weebly.templates = {'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul clas
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 6e 61 6d 65 3d 5c 22 7b 7b 66 69 6c 74 65 72 5f 74 65 78 74 7d 7d 5c 22 20 76 61 6c 75 65 3d 5c 22 31 5c 22 20 5c 2f 3e 3c 21 2d 2d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 7b 7b 21 20 43 6f 6d 6d 65 6e 74 69 6e 67 20 27 68 61 63 6b 27 20 74 6f 20 72 65 6d 6f 76 65 20 73 70 61 63 65 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 2d 2d 3e 3c 61 3e 20 7b 7b 21 20 54 68 65 73 65 20 61 72 65 6e 27 74 20 72 65 61 6c 20 6c 69 6e 6b 73 2c 20 75 73 65 64 20 74 6f 20 75 73 65 20 74 68 65 6d 65 20 63 6f 6c 6f 72 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 5c Data Ascii: \t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{filter_text}}\" value=\"1\" \/>...\n\t\t\t\t\t\t{{! Commenting 'hack' to remove spaces }}\n\t\t\t\t\t\t--><a> {{! These aren't real links, used to use theme colors }}\n\t\t\t\t\t\t\
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 63 6f 72 65 2e 73 65 61 72 63 68 2e 66 69 6c 74 65 72 2e 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 61 63 65 74 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 65 6e 74 72 69 65 73 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 Data Ascii: t-availability\">\n\t<h3>{{#stl}}templates.platform.theme.core.search.filter.search-facet-availability_1{{\/stl}}<\/h3>\n\t<form name=\"availability-facet\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t<li>\n\t\t\t\t<label>\n\t\t\t\t\t<input typ
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 70 72 6f 64 75 63 74 2d 67 72 6f 75 70 7d 7d 5c 6e 7b 7b 5c 2f 68 61 73 5f 70 72 6f 64 75 63 74 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 6e 6f 72 6d 61 6c 7d 7d 5c 6e 7b 7b 5c 2f 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 6d 70 74 79 7d 7d 5c 6e 7b 7b 5c 2f 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 65 72 72 6f 72 5f 72 65 73 75 6c 74 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 72 72 6f 72 7d 7d 5c 6e 7b 7b Data Ascii: ch\/results\/product-group}}\n{{\/has_product_results}}\n\n{{#page_results}}\n\t{{> search\/results\/normal}}\n{{\/page_results}}\n\n{{#no_results}}\n\t{{> search\/results\/empty}}\n{{\/no_results}}\n\n{{#error_result}}\n\t{{> search\/results\/error}}\n{{
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 5c 22 3e 5c 6e 5c 74 5c 74 7b 7b 23 68 69 67 68 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 6c 6f 77 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 79 5f 68 74 6d 6c 7d 7d 7d 7b 7b 6c 6f 77 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 5c 2f 73 70 61 6e 3e 5c 6e 5c 74 5c 74 5c 74 20 2d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 68 69 67 68 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 Data Ascii: arch-product-price\">\n\t\t{{#high_price_number}}\n\t\t\t<span class=\"wsite-search-product-price-low\">\n\t\t\t\t{{{currency_html}}}{{low_price_number}}\n\t\t\t<\/span>\n\t\t\t -\n\t\t\t<span class=\"wsite-search-product-price-high\">\n\t\t\t\t{{{currenc
2025-01-11 23:11:36 UTC	760	IN	Data Raw: 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 6e 6f 2d 72 65 73 75 6c 74 73 5c 22 3e 5c 6e 5c 74 3c 70 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 62 61 73 65 2e 73 65 61 72 63 68 2e 72 65 73 75 6c 74 73 2e 65 72 72 6f 72 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 70 3e 5c 6e 3c 5c 2f 6c 69 3e 5c 6e 22 2c 0a 09 09 27 73 65 61 72 63 68 2f 63 6f 72 65 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 73 74 27 3a 20 22 3c 6f 6c 20 69 64 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 61 67 65 6e 61 76 5c 22 3e 5c 6e 5c 74 7b 7b 23 70 61 67 69 6e 61 74 69 6f 6e 5f 69 74 65 6d 73 7d 7d 5c 6e 5c 74 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 70 61 67 69 6e 61 74 69 6f 6e 2d 69 74 65 6d 7d 7d 5c 6e 5c 74 Data Ascii: or': "<li class=\"no-results\">\n\t<p>{{#stl}}templates.platform.theme.base.search.results.error_1{{\/stl}}<\/p>\n<\/li>\n",'search/core-pagination-list': "<ol id=\"wsite-search-pagenav\">\n\t{{#pagination_items}}\n\t\t{{> search\/pagination-item}}\n\t
2025-01-11 23:11:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49818	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:36 UTC	968	OUT	GET /uploads/1/5/1/8/151886692/tak_1.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://talktalk770.weebly.com/home.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:36 UTC	901	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:36 GMT Content-Type: image/png Content-Length: 2439 Connection: close CF-Ray: 9008963d5ba48ce0-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "6cde551752c3ddf86b64dd5c0158fd13" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Jan 2025 08:57:19 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: 9z8M7cyhLK2GtUNBoeuTscuSDYPv04x6ChXQmkY2lmlXIg+L7mf8TF03a5ViLKlVcEBGEOoHjww= x-amz-replication-status: COMPLETED x-amz-request-id: J73A29CP6X5H0HQA x-amz-server-side-encryption: AES256 x-amz-version-id: dahO7XMnZfaHxnaBEe8PqGJoAnPEVVM6 X-Storage-Bucket: zccfd X-Storage-Object: ccfde13123c12ce3f6bed6057742ce94960882a3c5b70c1c3b29c58cf170d748 Server: cloudflare
2025-01-11 23:11:36 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 00 49 08 03 00 00 00 eb 3c cb 06 00 00 02 9a 50 4c 54 45 ff ff ff e1 e3 e1 1e 4e 9d 49 70 b0 90 a8 cf a9 bc da ac be db ab bd da aa bc da 45 6d ae 20 4f 9e a6 b9 d8 ed f1 f7 f0 f3 f8 b3 c3 de 24 53 a0 37 61 a8 c3 d0 e5 f1 f4 f9 e9 ee f5 93 aa d0 70 8f c1 a0 b4 d5 8f a7 ce 54 78 b4 d2 dc eb f2 f5 f9 dd e5 f0 78 95 c4 e1 e7 f2 cd d7 e9 47 6f af 6b 8a be a3 b7 d7 fb fc fd 71 8f c1 23 52 9f ca d5 e8 39 64 a9 7d 99 c7 42 6a ad b8 c7 e0 f3 f5 fa bf cc e3 28 56 a1 f4 f6 fa ce d8 e9 6f 8e c0 41 6a ac 53 78 b4 98 ae d2 82 9c c8 5c 7f b8 5b 7e b8 b4 c4 de 3e 67 ab e8 ed f5 de e5 f1 91 a8 cf da e2 ef ae bf dc 77 94 c4 7a 96 c5 21 50 9e 64 85 bb 92 aa d0 be cc e3 eb ef f6 bd cb e2 92 a9 cf 62 83 bb cf Data Ascii: PNGIHDRI<PLTENIpEm O$S7apTxxGokq#R9d}Bj(VoAjSx\[~>gwz!Pdb
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 4f 9d d3 dc ec fe fe ff 96 ac d1 cb d6 e8 d7 e0 ee 35 60 a7 c7 d3 e7 8a a3 cc e5 ea f3 52 77 b4 b2 c3 de 4f 75 b3 94 ab d0 e7 ec f5 32 5e a6 9f b3 d5 83 9d c9 88 a1 cb 58 7c b6 84 9f ca 4a 71 b0 9a af d3 d6 df ed 5a 7d b7 ec f0 f7 2f 5b a4 80 9b c8 a7 ba d9 af c0 dc 2d 5a a4 b6 c5 df 43 6b ad 8b a3 cc 6d 8c bf 60 82 ba 4b 71 b1 df e6 f1 e6 ec f4 44 6c ae 66 87 bd 4c 72 b1 83 9e c9 db e3 ef 67 88 bd e3 e9 f3 ea ee f6 4d 73 b1 bf cd e3 99 ae d2 c4 d0 e5 fa fb fd ce d9 ea 26 54 a0 40 69 ac 68 88 bd 87 a1 cb b1 c2 dd 25 54 a0 6a 8a be 29 57 a2 81 9c c8 97 ad d2 e2 e8 f2 59 7d b7 9d b2 d4 b9 c8 e1 c2 cf e4 9a b0 d3 d4 dd ec e5 eb f4 c1 ce e4 89 a2 cb 27 55 a1 48 6f af bb ca e1 d1 db eb 7b 97 c5 b7 c6 df 8b a4 cd 29 73 7d ed 00 00 06 a8 49 44 41 54 78 da ec d8 Data Ascii: O5`RwOu2^X\|JqZ}/[-ZCkm`KqDlfLrgMs&T@ih%Tj)WY}'UHo{)s}IDATx
2025-01-11 23:11:36 UTC	602	IN	Data Raw: 95 06 95 71 65 1f 2c 5d a3 af 21 24 41 03 dc a5 5b d9 04 63 6d 80 00 bf 0a 3c 66 3d c2 1e e0 5a dd 2f a1 da f4 51 fe 00 7f e5 0f f0 18 9c 17 15 07 22 22 22 97 b8 1e 55 0a 35 41 64 28 54 ec e4 eb 08 45 f0 00 c7 e9 66 43 05 ba 04 5d 03 c0 2b c6 26 5b 80 23 cd 8c 86 0a 97 5e 01 ae ed 09 30 be 16 95 03 22 22 22 97 18 d2 79 5a 67 eb 82 76 a8 f0 ce d6 fe fc 29 ca f1 ba 0f 97 00 97 62 03 7d 0a 3a 0a 40 5e a7 15 d5 de 01 3e 66 66 6f 36 70 e3 a6 a8 8b 8e 00 47 03 f8 46 8c 5b 20 22 22 72 8b e6 b0 06 f4 78 7a 5d 6a bf fc 19 43 8e ff 92 f1 43 a2 96 a5 54 8a cf 7a 60 b0 ee 33 c0 2d 33 5e 18 b7 c5 df 5d 7c 2b 46 1d f0 9d a8 b6 94 75 62 e9 28 43 97 6e 12 30 c6 77 12 e3 7b 31 66 82 88 88 c8 2d b2 c7 fd 30 16 96 b1 9b 1f cc 46 1f 10 38 a5 89 b1 1c c0 8f d2 ad ca ff c6 ee Data Ascii: qe,]!$A[cm<f=Z/Q"""U5Ad(TEfC]+&[#^0"""yZgv)b}:@^>ffo6pGF[ ""rxz]jCCTz`3-3^]\|+Fub(Cn0w{1f-0F8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49821	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:36 UTC	970	OUT	GET /uploads/1/5/1/8/151886692/tannn_1.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://talktalk770.weebly.com/home.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:36 UTC	914	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:36 GMT Content-Type: image/png Content-Length: 60600 Connection: close CF-Ray: 9008963d7f4b7c9c-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "4dc4af4ca3295f7adfb222c89a658447" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Jan 2025 08:57:34 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: F+cqQyXP+0JC3mcJ8ZPNqpTe4RSenCd7FjlAiKu+UOeK5gCOClLyaOMNUhu65dWUXNmYzUf8jzncJloVI1aq9w== x-amz-replication-status: COMPLETED x-amz-request-id: MVJ193QWQY6Y285C x-amz-server-side-encryption: AES256 x-amz-version-id: VKZ8LzRQ8QY2FHGQLyH06XM5rnzvclrN X-Storage-Bucket: zff95 X-Storage-Object: ff95d27d18d5aae72e8665328841f3a07bebd9ca093d3ce03b5b33738d09171c Server: cloudflare
2025-01-11 23:11:36 UTC	455	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 92 00 00 01 d7 08 06 00 00 00 0f f5 ba 24 00 00 ec 7f 49 44 41 54 78 da ec 9c e1 4b db 5a 18 87 f7 ef 86 42 90 03 12 84 20 04 59 18 3a b0 0c 23 84 31 91 39 58 fa 61 d0 30 46 c7 fc 60 2e ac fb 90 72 11 8c 1f 2a 5c 45 22 52 90 80 84 42 90 40 f9 5d 6c e3 4e af 59 93 de a6 95 b9 fe 1e 28 08 a6 49 ce fb be e7 9c 27 27 69 5e 80 10 42 08 21 84 90 19 a0 48 12 42 08 21 84 10 8a 24 21 84 10 42 08 a1 48 12 42 08 21 84 10 8a 24 21 84 10 42 08 a1 48 12 42 08 21 84 10 42 91 24 84 10 42 08 21 14 49 42 08 21 84 10 42 91 24 84 10 42 08 21 14 49 42 08 21 84 10 42 91 24 84 10 42 08 21 84 22 49 08 21 84 10 42 28 92 e4 c9 e8 58 50 14 05 8a a2 c3 bd 06 21 84 3c c2 87 35 1c 23 14 58 1d e4 f0 77 47 ff 53 76 7d fc d6 5c bb Data Ascii: PNGIHDR$IDATxKZB Y:#19Xa0F`.r*\E"RB@]lNY(I''i^B!HB!$!BHB!$!BHB!B$B!IB!B$B!IB!B$B!"I!B(XP!<5#XwGSv}\
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 42 e6 cf 5d 8c f8 36 ff e9 7e 7c 10 95 3a bc db 5f 6d 93 20 5d bc 48 3e 4d 3b 9e b3 48 d6 b2 58 ad ec 21 18 cc 78 fe b5 9c 48 3e 8f 67 24 a3 2e 5a 8d 3a 8c 55 13 ee 35 45 92 22 49 0a 07 5b bd 49 91 24 84 3c f9 4a 65 75 b9 a8 2e 92 8b 6f c7 73 16 49 4d 87 be 32 3a 4e fd af 04 ff 87 e0 9d 3a 5a cd 5c d3 9e a7 48 ca b9 86 22 49 91 24 14 49 42 08 45 92 22 39 4b bb f6 32 21 54 d6 1c 9c 63 4a fa 1e ea c3 95 48 0d 4e c3 a2 48 52 24 29 92 14 49 8a 24 21 84 22 b9 8c 22 e9 5f 38 d0 86 7f ab d8 3b c1 54 9c 37 b2 55 c8 97 2d 44 1d 8a 24 45 f2 8f 13 c9 14 d1 99 87 83 57 3a c4 ca d8 83 c0 2b 02 c6 b6 03 ef 22 9e 72 37 3d b4 87 cf 4f c8 5f 60 ab 42 87 f9 be 8d 5e 9a 3b cf a2 02 2f 1f e8 e2 00 ad 5d 43 9e 6f 4d 85 d8 b0 d0 3a 4b e6 fa f0 bb 3c df 85 c4 6d ea b8 fa 4d ab Data Ascii: B]6~\|:_m ]H>M;HX!xH>g$.Z:U5E"I[I$<Jeu.osIM2:N:Z\H"I$IBE"9K2!TcJHNHR$)I$!""_8;T7U-D$EW:+"r7=O_`B^;/]CoM:K<mM
2025-01-11 23:11:36 UTC	1226	IN	Data Raw: f6 c1 21 c8 07 41 08 98 c1 20 1e 02 f1 3d 14 4f f2 29 5b cf dd da 94 1a 8d 57 f5 81 2e b6 7e 4c 57 55 77 7d 5d 5d 55 fd e1 e8 bb 43 4a 5e 5f 63 e2 24 cf 9c d8 de 23 6b 3f 09 e3 ef 7b 22 d6 93 8b 6f ef 89 d1 fa e8 68 fd f1 f4 95 c3 a1 fa 8e 40 44 74 4b 3a 9d 98 4e 47 6f 77 01 89 64 21 8f 0a e7 e3 4f 12 49 da ef ab 1b 48 4c 87 b3 88 03 6d 15 84 56 b7 d7 2f e3 87 23 2a e3 1e ea b3 ff 55 f7 b0 17 3f 30 bf a6 67 68 6c 72 e3 12 9a 48 76 8f 7b 0f 1e fb 8e df d7 b1 c1 4d 94 8a 48 72 2e ca 68 b0 9e 48 76 d1 7a 37 e2 1a 20 89 39 75 ad 27 92 9c 0f 24 2c 7a fd 30 d2 e8 58 93 48 c6 23 be 67 21 19 f5 df b4 30 c8 1d a9 14 f4 73 25 23 92 d2 77 65 e2 11 05 51 24 29 16 f3 da a3 b7 69 8e ec 20 12 27 68 6a 7b 63 3a 92 94 b3 5c 23 78 7a b4 76 44 72 9c a1 be b9 60 61 c9 94 3b Data Ascii: !A =O)[W.~LWUw}]]UCJ^_c$#k?{"oh@DtK:NGowd!OIHLmV/#*U?0ghlrHv{MHr.hHvz7 9u'$,z0XH#g!0s%#weQ$)i 'hj{c:\#xzvDr`a;
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 7c 37 21 71 5a 87 88 a4 7f 23 e0 92 87 de de b8 21 e0 ff 99 a7 ca 28 f4 ba 12 49 26 98 fa 77 d3 cc 7b 90 8e ac 9f 8a 5c 29 57 c2 fc 63 22 92 41 e5 e6 af a8 8f 1c 9f 73 ca 55 1f 45 cc fb 3c de 62 be 21 27 0f 9d e9 3f 71 d4 8b df 4d 7b f3 4a 10 4f b1 68 73 bc 24 61 8c 52 ca df 27 01 5e 2d 91 a4 7e b9 9b e5 62 c5 63 92 60 76 e7 4f 4f a0 cc ca 4f 24 f5 ba 65 ee 6f 31 56 da 39 23 c6 cc d3 a4 0d 14 3a a4 cd 85 21 2a b2 31 7a ed 3f 5f c2 e6 48 ca 76 39 ea 71 70 ad 62 b1 5e e7 73 d0 1c c9 22 d7 93 ed d3 ba 37 81 f4 c3 8d 20 e7 74 51 cd 2f 88 86 f7 bb b8 c9 8c 9f 0f 30 7e 64 39 92 dc 84 2d ee f3 b2 03 41 3c 69 ef 1e 9f 41 99 71 cc 3a 7b 73 ae 0f dc e4 5f 88 22 bb f5 23 92 64 d9 74 be fe 2a 50 b6 2d 11 0e 8e 4e df 97 1b f6 88 89 a4 5e 6e 7e e8 e5 aa 27 92 24 73 2c Data Ascii: \|7!qZ#!(I&w{\)Wc"AsUE<b!'?qM{JOhs$aR'^-~bc`vOOO$eo1V9#:!1z?_Hv9qpb^s"7 tQ/0~d9-A<iAq:{s_"#dtP-N^n~'$s,
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: da 5e f4 58 98 cd d6 f5 fa 91 ef f3 cc 67 ff 77 4d 46 19 9a 72 cd 47 36 5a 65 d5 36 f5 d7 3f ae 21 7e c2 67 4b 9e f7 91 ff 7f 27 81 b3 93 14 b5 ea fc 9c f4 f9 18 f9 1d d9 71 5d da 4b f1 79 21 0f bd bd f9 73 fd 59 23 f0 f8 89 64 f9 21 8f 85 38 79 0c 06 c3 8f 37 d9 18 0c 06 83 a1 8c 90 37 d9 18 91 5c 99 d3 64 ab 20 83 61 7d 21 6f c4 30 1a 69 30 18 0c 65 05 4f 2c 62 b4 3e c2 88 e4 ea 9c 26 5b 92 18 0c eb 8e bf dd d1 6b 30 18 0c 86 d2 81 39 f9 6c 61 67 44 32 10 dc 15 b3 dd 5f 2a f3 79 08 06 c3 7a e3 2e 43 83 57 3d c2 60 30 18 0c 25 04 db e1 b1 45 9b 11 c9 a5 82 6d 64 0e db e8 5d 0c 91 df ce b7 dd 18 e1 f2 f4 be 44 9f 2d 49 ec 50 db b0 ae 60 bb 96 74 7b ae da dc a2 91 06 83 c1 50 26 b0 55 d1 45 1b 7b 95 f9 c6 e6 46 24 03 c0 db 46 86 f7 b6 1e 5f 5a 41 81 61 1d Data Ascii: ^XgwMFrG6Ze6?!~gK'q]Ky!sY#d!8y77\d a}!o0i0eO,b>&[k09lagD2_*yz.CW=`0%Emd]D-IP`t{P&UE{F$F_ZAa
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 13 a2 39 c9 ce 6f ac ae 3b f0 9f d5 11 39 0a 92 2a 55 11 10 99 36 17 57 70 59 38 17 0a 71 4f a7 53 86 c9 8c a1 40 a9 ba 4b 20 c9 79 90 04 76 76 fe 24 79 22 2f 5b 08 97 18 98 c1 33 df 36 ec d7 13 74 0e 42 f8 eb 69 58 70 dd 47 78 d0 c1 e4 3a 1b 64 3b 8f 29 e4 58 41 27 81 a5 e4 6d 65 9e 83 f9 1e ac e4 63 13 d1 a6 07 82 58 fa 9d b7 19 a1 f9 31 f9 39 23 fa a5 83 f8 9f 39 5c 1f 95 93 01 66 c0 f7 3f 5f 73 11 ec 2d 5b fb 0c e3 b7 35 84 a5 7f d6 e0 c0 dd a8 a0 b1 6c 0d b3 f1 c2 79 04 88 fe 37 c0 20 0b 24 af 2e d0 dc 0d e0 b9 e9 bc 5e 80 e8 e4 02 49 3e 08 93 ae 3b 1f 48 8e 1a 08 c8 23 bd 51 45 ff 4a 0e 92 d3 f3 f4 fa ad f1 1e 11 9f 4e f2 81 e4 55 17 91 e7 c0 f1 ca 68 8d 64 20 d9 9d 34 e7 a1 ff c3 01 96 69 72 12 a6 a0 d9 35 40 d2 be a6 25 cf 85 93 de 27 fe 76 03 17 Data Ascii: 9o;9*U6WpY8qOS@K yvv$y"/[36tBiXpGx:d;)XA'mecX19#9\f?_s-[5ly7 $.^I>;H#QEJNUhd 4ir5@%'v
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: 47 92 13 24 ed 7c c8 b4 e8 cb e3 bc 49 1b 24 d3 b0 7e fc 20 2d b0 d9 8a 10 1f cc f3 4d 7b ff 2d 17 02 92 dd ac eb cb 69 25 d2 e7 22 1f 48 ca e7 b7 ee 1d 95 8a 41 68 de d2 46 33 66 7f c5 9b 4b 30 49 69 01 36 4c f2 50 98 54 15 0a 92 72 43 4b f9 80 67 91 15 ca e2 70 37 19 89 f3 16 42 f6 1e 9a 79 8e 39 7a 4a 5a 21 34 32 42 69 a8 9d c3 8e fc f7 79 5d 02 15 00 92 0c 7c 36 20 5e 77 18 3a 24 e7 61 56 bc 73 b8 92 3d 98 ab 6c ff 23 58 b7 14 24 b9 50 c5 9b e7 7e 9e 4e 05 20 69 7b b5 ed bc bf 21 8e 64 20 c9 eb 1a 1e 07 f3 9c d6 e7 03 cc 72 80 a4 95 3e f1 a1 69 dd d3 36 48 66 e7 01 e3 b4 80 d0 76 16 90 fd 5d 87 cf 6d b7 a4 cf 45 3e 90 94 cf af 20 a9 ca ee 15 49 6d 7e 54 bf 5e a4 44 30 99 24 09 c3 a4 10 28 15 26 55 45 83 a4 0d 72 95 6d bb 01 b9 09 23 e5 bf ca 6c 2c ac Data Ascii: G$\|I$~ -M{-i%"HAhF3fK0Ii6LPTrCKgp7By9zJZ!42Biy]\|6 ^w:$aVs=l#X$P~N i{!d r>i6Hfv]mE> Im~T^D0$(&UErm#l,
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: bc 4d 21 91 54 91 49 2e 71 33 2c 92 0c 64 a6 d3 b0 58 24 19 86 a9 53 b7 36 09 0b d3 18 52 4f cf 42 cc 4a 46 cb a4 ea 7a 49 6e bc 61 58 24 99 7a 90 c7 e8 79 1b e6 b9 51 30 0c b3 ee ca da dc ad dd 38 90 14 92 48 d2 2c 31 49 a4 8a 4c d6 da c5 cd 22 c9 22 c9 22 c9 ac 14 33 48 b5 f1 b3 64 98 75 08 75 09 b3 28 34 d6 3a 49 fa bf b7 e9 b9 d0 ac a4 8a 4c ca 5b 02 d5 3e 2b c9 22 c9 22 c9 22 c9 b0 48 32 0c a3 5e 4a 25 61 61 1a 6e 9d 24 6d 4e 4e 22 29 97 b8 83 2c b7 c4 cd b3 92 00 8b a4 0a f9 5b 69 38 c7 0d e8 2d 1a 34 4d 83 6e 58 70 87 bd 25 05 30 96 9c 41 61 26 07 97 8e 27 21 6c d1 61 9e 4c 63 a2 50 e5 bc 74 9c a6 c3 6c 4f 60 34 9f 5b 9e 48 ce 8f 23 dd 69 c1 d0 c5 d8 e0 0c 8d c3 47 80 ff 4d 1c f4 f5 f8 37 3e 24 fc 1c e2 2d 1a f4 b3 63 6a e7 53 ff ac 6a 14 3d e4 7a Data Ascii: M!TI.q3,dX$S6ROBJFzInaX$zyQ08H,1IL"""3Hduu(4:IL[>+"""H2^J%aan$mNN"),[i8-4MnXp%0Aa&'!laLcPtlO`4[H#iGM7>$-cjSj=z
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: ce a2 a7 e7 3c fa be bc 88 2f 29 17 fa 71 41 64 00 17 2e 0e e0 22 a5 9f 72 09 fd a5 0c 0c 24 43 49 05 b9 94 c2 a5 8a 24 93 83 4b 27 75 79 8d 67 50 ca a5 e4 20 06 2f 0f 81 ee fb 9d 3b 13 24 d7 24 95 eb 48 24 8b 23 70 a8 ab f9 74 65 f3 c8 24 fa 6b 15 49 51 fe 35 91 b8 13 51 62 54 11 c9 87 19 d8 51 a5 48 44 9e 37 18 df 9d 04 cc 70 93 8d fa f9 56 48 24 a3 1a 80 d4 d7 52 62 b8 fa 75 50 cc 63 ec 7c 4c 1c 23 8d 5b 1e 87 ba 14 d6 a9 b4 6d 5f c9 2b dc 1b 0b a9 99 a5 de db ea 63 2d cc 64 10 6f 15 ef 70 d9 f3 67 98 b5 cc 73 00 34 bb 94 1a fc 1b 7e 6f fe 01 ef bf bf 03 3f f8 e1 8f b0 ed ed ef d7 27 db de c1 a7 9f b6 81 69 4c 91 b4 ed 3f e2 cd 37 df c6 5b 6f bd 13 64 9b 1c 7a 86 3f fe c9 4f b1 67 ef 3e ec 3f 70 10 07 5e a4 e9 90 48 53 53 33 0e 1e ac c8 a1 c3 38 a4 90 Data Ascii: </)qAd."r$CI$K'uygP /;$$H$#pte$kIQ5QbTQHD7pVH$RbuPc\|L#[m_+c-dopgs4~o?'iL?7[odz?Og>?p^HSS38
2025-01-11 23:11:36 UTC	1369	IN	Data Raw: e9 d8 7a 2c 17 2b f6 65 60 88 08 e5 f0 4f cf 63 ff 99 42 dc 68 b2 a6 34 55 75 4d 18 fc 49 3c 3c 85 b8 b4 4a 98 eb 50 6c 11 06 ce 39 87 f7 56 5e ba ad 74 b1 b0 fc 3a de 5f 9d 8c 63 f1 25 f8 29 d5 aa 55 ab d0 b9 73 67 95 1e 37 2f 92 e4 21 3c f5 d4 d3 78 f5 d5 57 d1 bd 47 0f bb 4c 92 9e 06 3d 09 a5 d2 c0 2e 93 8a de 16 fa 98 31 84 b2 af 40 a1 54 28 b9 6c 83 60 b6 5f 26 5d db 2c 93 ee 6d 97 c9 16 84 72 c0 ad 42 29 89 28 5b de 94 c9 c3 47 8e a2 be a1 41 7f 45 a2 2e 5d ba 74 e9 ba fb c5 91 b8 73 3e 9e cf 76 b6 4a 22 ef 16 bb 76 ed c2 ad 95 55 54 8f 99 1b 53 30 66 e9 05 1c 15 79 63 92 c8 54 30 39 bb 1a 9e 22 92 2f 4e 3c 85 71 5f 5c c0 c5 cc 6a 6b d2 5a db 88 3e 33 ce e2 b5 29 67 b0 e6 db 6c d5 c6 e6 fe 9f 6c bf 8a 57 27 45 c1 7b 49 02 28 92 5c 53 5d df 84 b4 fc Data Ascii: z,+e`OcBh4UuMI<<JPl9V^t:_c%)Usg7/!<xWGL=.1@T(l`_&],mrB)([GAE.]ts>vJ"vUTS0fycT09"/N<q_\jkZ>3)gllW'E{I(\S]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49822	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:37 UTC	718	OUT	GET /files/templateArtifacts.js?1736414015 HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:37 UTC	437	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:37 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 90089641f88f43b7-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: blu68.sf2p.intern.weebly.net Server: cloudflare
2025-01-11 23:11:37 UTC	932	IN	Data Raw: 31 62 66 38 0d 0a 2f 2f 20 47 65 74 73 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 5f 57 0a 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 57 65 65 62 6c 79 2e 74 65 6d 70 6c 61 74 65 73 20 3d 20 7b 0a 09 09 27 73 65 61 72 63 68 2f 66 69 6c 74 65 72 2f 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 20 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 66 61 63 65 74 5f 6e 61 6d 65 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 7b 7b 63 6f 6c 75 6d 6e 5f 6e 61 6d 65 7d 7d 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 Data Ascii: 1bf8// Gets converted to _WWeebly = window.Weebly \|\| {};Weebly.templates = {'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul clas
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 6e 61 6d 65 3d 5c 22 7b 7b 66 69 6c 74 65 72 5f 74 65 78 74 7d 7d 5c 22 20 76 61 6c 75 65 3d 5c 22 31 5c 22 20 5c 2f 3e 3c 21 2d 2d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 7b 7b 21 20 43 6f 6d 6d 65 6e 74 69 6e 67 20 27 68 61 63 6b 27 20 74 6f 20 72 65 6d 6f 76 65 20 73 70 61 63 65 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 2d 2d 3e 3c 61 3e 20 7b 7b 21 20 54 68 65 73 65 20 61 72 65 6e 27 74 20 72 65 61 6c 20 6c 69 6e 6b 73 2c 20 75 73 65 64 20 74 6f 20 75 73 65 20 74 68 65 6d 65 20 63 6f 6c 6f 72 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 5c Data Ascii: \t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{filter_text}}\" value=\"1\" \/>...\n\t\t\t\t\t\t{{! Commenting 'hack' to remove spaces }}\n\t\t\t\t\t\t--><a> {{! These aren't real links, used to use theme colors }}\n\t\t\t\t\t\t\
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 63 6f 72 65 2e 73 65 61 72 63 68 2e 66 69 6c 74 65 72 2e 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 61 63 65 74 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 65 6e 74 72 69 65 73 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 Data Ascii: t-availability\">\n\t<h3>{{#stl}}templates.platform.theme.core.search.filter.search-facet-availability_1{{\/stl}}<\/h3>\n\t<form name=\"availability-facet\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t<li>\n\t\t\t\t<label>\n\t\t\t\t\t<input typ
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 70 72 6f 64 75 63 74 2d 67 72 6f 75 70 7d 7d 5c 6e 7b 7b 5c 2f 68 61 73 5f 70 72 6f 64 75 63 74 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 6e 6f 72 6d 61 6c 7d 7d 5c 6e 7b 7b 5c 2f 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 6d 70 74 79 7d 7d 5c 6e 7b 7b 5c 2f 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 65 72 72 6f 72 5f 72 65 73 75 6c 74 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 72 72 6f 72 7d 7d 5c 6e 7b 7b Data Ascii: ch\/results\/product-group}}\n{{\/has_product_results}}\n\n{{#page_results}}\n\t{{> search\/results\/normal}}\n{{\/page_results}}\n\n{{#no_results}}\n\t{{> search\/results\/empty}}\n{{\/no_results}}\n\n{{#error_result}}\n\t{{> search\/results\/error}}\n{{
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 5c 22 3e 5c 6e 5c 74 5c 74 7b 7b 23 68 69 67 68 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 6c 6f 77 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 79 5f 68 74 6d 6c 7d 7d 7d 7b 7b 6c 6f 77 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 5c 2f 73 70 61 6e 3e 5c 6e 5c 74 5c 74 5c 74 20 2d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 68 69 67 68 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 Data Ascii: arch-product-price\">\n\t\t{{#high_price_number}}\n\t\t\t<span class=\"wsite-search-product-price-low\">\n\t\t\t\t{{{currency_html}}}{{low_price_number}}\n\t\t\t<\/span>\n\t\t\t -\n\t\t\t<span class=\"wsite-search-product-price-high\">\n\t\t\t\t{{{currenc
2025-01-11 23:11:37 UTC	760	IN	Data Raw: 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 6e 6f 2d 72 65 73 75 6c 74 73 5c 22 3e 5c 6e 5c 74 3c 70 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 62 61 73 65 2e 73 65 61 72 63 68 2e 72 65 73 75 6c 74 73 2e 65 72 72 6f 72 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 70 3e 5c 6e 3c 5c 2f 6c 69 3e 5c 6e 22 2c 0a 09 09 27 73 65 61 72 63 68 2f 63 6f 72 65 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 73 74 27 3a 20 22 3c 6f 6c 20 69 64 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 61 67 65 6e 61 76 5c 22 3e 5c 6e 5c 74 7b 7b 23 70 61 67 69 6e 61 74 69 6f 6e 5f 69 74 65 6d 73 7d 7d 5c 6e 5c 74 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 70 61 67 69 6e 61 74 69 6f 6e 2d 69 74 65 6d 7d 7d 5c 6e 5c 74 Data Ascii: or': "<li class=\"no-results\">\n\t<p>{{#stl}}templates.platform.theme.base.search.results.error_1{{\/stl}}<\/p>\n<\/li>\n",'search/core-pagination-list': "<ol id=\"wsite-search-pagenav\">\n\t{{#pagination_items}}\n\t\t{{> search\/pagination-item}}\n\t
2025-01-11 23:11:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49823	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:37 UTC	716	OUT	GET /uploads/1/5/1/8/151886692/tak_1.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:37 UTC	901	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:37 GMT Content-Type: image/png Content-Length: 2439 Connection: close CF-Ray: 90089641fa0e0f70-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "6cde551752c3ddf86b64dd5c0158fd13" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Jan 2025 08:57:19 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: 9z8M7cyhLK2GtUNBoeuTscuSDYPv04x6ChXQmkY2lmlXIg+L7mf8TF03a5ViLKlVcEBGEOoHjww= x-amz-replication-status: COMPLETED x-amz-request-id: J73A29CP6X5H0HQA x-amz-server-side-encryption: AES256 x-amz-version-id: dahO7XMnZfaHxnaBEe8PqGJoAnPEVVM6 X-Storage-Bucket: zccfd X-Storage-Object: ccfde13123c12ce3f6bed6057742ce94960882a3c5b70c1c3b29c58cf170d748 Server: cloudflare
2025-01-11 23:11:37 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 00 49 08 03 00 00 00 eb 3c cb 06 00 00 02 9a 50 4c 54 45 ff ff ff e1 e3 e1 1e 4e 9d 49 70 b0 90 a8 cf a9 bc da ac be db ab bd da aa bc da 45 6d ae 20 4f 9e a6 b9 d8 ed f1 f7 f0 f3 f8 b3 c3 de 24 53 a0 37 61 a8 c3 d0 e5 f1 f4 f9 e9 ee f5 93 aa d0 70 8f c1 a0 b4 d5 8f a7 ce 54 78 b4 d2 dc eb f2 f5 f9 dd e5 f0 78 95 c4 e1 e7 f2 cd d7 e9 47 6f af 6b 8a be a3 b7 d7 fb fc fd 71 8f c1 23 52 9f ca d5 e8 39 64 a9 7d 99 c7 42 6a ad b8 c7 e0 f3 f5 fa bf cc e3 28 56 a1 f4 f6 fa ce d8 e9 6f 8e c0 41 6a ac 53 78 b4 98 ae d2 82 9c c8 5c 7f b8 5b 7e b8 b4 c4 de 3e 67 ab e8 ed f5 de e5 f1 91 a8 cf da e2 ef ae bf dc 77 94 c4 7a 96 c5 21 50 9e 64 85 bb 92 aa d0 be cc e3 eb ef f6 bd cb e2 92 a9 cf 62 83 bb cf Data Ascii: PNGIHDRI<PLTENIpEm O$S7apTxxGokq#R9d}Bj(VoAjSx\[~>gwz!Pdb
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 4f 9d d3 dc ec fe fe ff 96 ac d1 cb d6 e8 d7 e0 ee 35 60 a7 c7 d3 e7 8a a3 cc e5 ea f3 52 77 b4 b2 c3 de 4f 75 b3 94 ab d0 e7 ec f5 32 5e a6 9f b3 d5 83 9d c9 88 a1 cb 58 7c b6 84 9f ca 4a 71 b0 9a af d3 d6 df ed 5a 7d b7 ec f0 f7 2f 5b a4 80 9b c8 a7 ba d9 af c0 dc 2d 5a a4 b6 c5 df 43 6b ad 8b a3 cc 6d 8c bf 60 82 ba 4b 71 b1 df e6 f1 e6 ec f4 44 6c ae 66 87 bd 4c 72 b1 83 9e c9 db e3 ef 67 88 bd e3 e9 f3 ea ee f6 4d 73 b1 bf cd e3 99 ae d2 c4 d0 e5 fa fb fd ce d9 ea 26 54 a0 40 69 ac 68 88 bd 87 a1 cb b1 c2 dd 25 54 a0 6a 8a be 29 57 a2 81 9c c8 97 ad d2 e2 e8 f2 59 7d b7 9d b2 d4 b9 c8 e1 c2 cf e4 9a b0 d3 d4 dd ec e5 eb f4 c1 ce e4 89 a2 cb 27 55 a1 48 6f af bb ca e1 d1 db eb 7b 97 c5 b7 c6 df 8b a4 cd 29 73 7d ed 00 00 06 a8 49 44 41 54 78 da ec d8 Data Ascii: O5`RwOu2^X\|JqZ}/[-ZCkm`KqDlfLrgMs&T@ih%Tj)WY}'UHo{)s}IDATx
2025-01-11 23:11:37 UTC	602	IN	Data Raw: 95 06 95 71 65 1f 2c 5d a3 af 21 24 41 03 dc a5 5b d9 04 63 6d 80 00 bf 0a 3c 66 3d c2 1e e0 5a dd 2f a1 da f4 51 fe 00 7f e5 0f f0 18 9c 17 15 07 22 22 22 97 b8 1e 55 0a 35 41 64 28 54 ec e4 eb 08 45 f0 00 c7 e9 66 43 05 ba 04 5d 03 c0 2b c6 26 5b 80 23 cd 8c 86 0a 97 5e 01 ae ed 09 30 be 16 95 03 22 22 22 97 18 d2 79 5a 67 eb 82 76 a8 f0 ce d6 fe fc 29 ca f1 ba 0f 97 00 97 62 03 7d 0a 3a 0a 40 5e a7 15 d5 de 01 3e 66 66 6f 36 70 e3 a6 a8 8b 8e 00 47 03 f8 46 8c 5b 20 22 22 72 8b e6 b0 06 f4 78 7a 5d 6a bf fc 19 43 8e ff 92 f1 43 a2 96 a5 54 8a cf 7a 60 b0 ee 33 c0 2d 33 5e 18 b7 c5 df 5d 7c 2b 46 1d f0 9d a8 b6 94 75 62 e9 28 43 97 6e 12 30 c6 77 12 e3 7b 31 66 82 88 88 c8 2d b2 c7 fd 30 16 96 b1 9b 1f cc 46 1f 10 38 a5 89 b1 1c c0 8f d2 ad ca ff c6 ee Data Ascii: qe,]!$A[cm<f=Z/Q"""U5Ad(TEfC]+&[#^0"""yZgv)b}:@^>ffo6pGF[ ""rxz]jCCTz`3-3^]\|+Fub(Cn0w{1f-0F8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49824	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:37 UTC	1142	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive Content-Length: 83 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://talktalk770.weebly.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://talktalk770.weebly.com/home.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637082.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:37 UTC	83	OUT	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
2025-01-11 23:11:37 UTC	304	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:37 GMT Content-Type: application/json Content-Length: 348 Connection: close CF-Ray: 90089642eef97281-EWR CF-Cache-Status: DYNAMIC Vary: X-W-SSL,User-Agent X-Host: grn145.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2025-01-11 23:11:37 UTC	348	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","messag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49827	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:37 UTC	718	OUT	GET /uploads/1/5/1/8/151886692/tannn_1.png HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637096.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:37 UTC	914	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:37 GMT Content-Type: image/png Content-Length: 60600 Connection: close CF-Ray: 900896439fdf4238-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "4dc4af4ca3295f7adfb222c89a658447" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Jan 2025 08:57:34 GMT Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: SnBm6JKYxep5jmMPWLn7eVBdnt7gNbwbEziopx35+Gg/HuvL6DdOKWAgfqTFvAy2UQqQkIHOUzDsRwAlJNStYQ== x-amz-replication-status: COMPLETED x-amz-request-id: MM2JWBFE5EC21F5E x-amz-server-side-encryption: AES256 x-amz-version-id: VKZ8LzRQ8QY2FHGQLyH06XM5rnzvclrN X-Storage-Bucket: zff95 X-Storage-Object: ff95d27d18d5aae72e8665328841f3a07bebd9ca093d3ce03b5b33738d09171c Server: cloudflare
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 92 00 00 01 d7 08 06 00 00 00 0f f5 ba 24 00 00 ec 7f 49 44 41 54 78 da ec 9c e1 4b db 5a 18 87 f7 ef 86 42 90 03 12 84 20 04 59 18 3a b0 0c 23 84 31 91 39 58 fa 61 d0 30 46 c7 fc 60 2e ac fb 90 72 11 8c 1f 2a 5c 45 22 52 90 80 84 42 90 40 f9 5d 6c e3 4e af 59 93 de a6 95 b9 fe 1e 28 08 a6 49 ce fb be e7 9c 27 27 69 5e 80 10 42 08 21 84 90 19 a0 48 12 42 08 21 84 10 8a 24 21 84 10 42 08 a1 48 12 42 08 21 84 10 8a 24 21 84 10 42 08 a1 48 12 42 08 21 84 10 42 91 24 84 10 42 08 21 14 49 42 08 21 84 10 42 91 24 84 10 42 08 21 14 49 42 08 21 84 10 42 91 24 84 10 42 08 21 84 22 49 08 21 84 10 42 28 92 e4 c9 e8 58 50 14 05 8a a2 c3 bd 06 21 84 3c c2 87 35 1c 23 14 58 1d e4 f0 77 47 ff 53 76 7d fc d6 5c bb Data Ascii: PNGIHDR$IDATxKZB Y:#19Xa0F`.r*\E"RB@]lNY(I''i^B!HB!$!BHB!$!BHB!B$B!IB!B$B!IB!B$B!"I!B(XP!<5#XwGSv}\
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 1b 5a 4d c9 ad 44 55 b8 b5 bd c0 b8 95 53 1e d7 1e 82 a6 8c eb 4c 22 19 1d c2 cc be 2b 36 5d 04 37 63 6d b8 0d 11 7c b5 61 ec 1f 17 cb a7 30 70 70 d4 45 74 07 20 cb 45 7c e9 c3 dd b5 1e bd 58 3e c1 b1 3d 16 93 d7 f7 f9 8b 91 0e 72 75 92 ed d7 9a ad 63 cb 5b 4e 39 39 08 de 3f 1c 3f cb 59 3f 6b ef dd fd ca aa ac 1f 75 47 ee 3f 2f 92 16 ac f5 2c 5e 51 3a e3 6d 21 0d ce 3f 85 b7 c0 a4 98 54 ad bb 45 8b e4 f6 a8 3f 6a 76 1b e1 5d b5 5b 6d d6 8e 0e a5 a6 c1 1e ab a7 f4 26 80 bb 29 0a 5e b9 52 25 b7 b2 a6 b4 8f e7 c8 93 c0 db 1e 9b 6c 34 99 8f dc 36 72 1f 8b 12 49 39 a1 ab 3a ac e6 58 ee 07 29 a2 93 ec e2 5a ca 4a 55 91 cc 4b e4 e6 21 c2 41 d5 76 c8 9c ab eb 16 5c 39 a6 0d 73 15 7c 34 64 fd ee 07 15 44 72 b2 44 6e 7d 0b ab e7 47 d6 8f bc 68 9d 88 dc ce fc 12 95 Data Ascii: ZMDUSL"+6]7cm\|a0ppEt E\|X>=ruc[N99??Y?kuG?/,^Q:m!?TE?jv][m&)^R%l46rI9:X)ZJUK!Av\9s\|4dDrDn}Gh
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: b5 5b 49 91 cc 2f 4e 45 62 32 5b 29 29 fa b4 09 dd 2a f5 20 27 b6 24 61 1f 10 84 48 f2 ef 0a 90 0c 93 94 f0 ef cc ef 0c 60 77 81 aa b6 1f 35 91 a4 dc 49 1a 79 64 4d b2 4f 67 45 fb e2 51 32 93 f1 c3 12 c9 09 ae 7f 6f a0 ea a8 40 55 13 c9 cd b9 ef 78 3d 0c 33 8e c9 35 ba cf 1c 15 f6 6a 22 c9 71 30 ef 36 90 7e b8 89 65 8f 48 71 fa 20 72 95 bd 32 ca cf 5b a8 39 2a 9e cb 42 24 f5 3e 58 ca 42 3e a7 82 48 6a ed 0d 8c 38 73 dd e0 df b9 49 58 77 22 a9 8f 48 32 32 61 11 49 7d 44 52 ca 35 28 91 94 bd 09 63 4e 38 56 38 ca ef 3a c5 0a 22 92 3c 4e e4 a2 ed 20 61 da c5 33 00 91 24 19 e6 f8 44 f5 ef f1 75 00 bb fb 17 12 49 bd 6e 49 08 69 9f b4 31 ca 88 8e 83 39 96 94 31 4f 0d 02 11 15 59 34 12 25 75 34 4f 7a c8 ce 2f 31 ba cd 91 ff 77 59 47 db 3d 9e 52 b0 c5 8c 62 1c 8e Data Ascii: [I/NEb2[))* '$aH`w5IydMOgEQ2o@Ux=35j"q06~eHq r2[9*B$>XB>Hj8sIXw"H22aI}DR5(cN8V8:"<N a3$DuInIi191OY4%u4Oz/1wYG=Rb
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 24 3d 1b 98 18 47 17 e3 e5 14 db c8 17 a2 9d 36 86 a7 8d a5 13 49 92 49 d1 da 48 af 1f 19 b9 f2 6d 32 fc c5 36 ce bb d4 2f 57 96 23 c9 ab 6e fd 77 6d 8f af 5a 6c 6a 2f 5e 24 99 cd 73 07 1d bb e9 62 af b2 e1 59 ab 86 42 1e 7a 7b 73 e5 e6 33 f7 15 46 24 41 4c 73 5c bf 6b a1 be f3 63 2f b2 68 2b 41 fd b8 87 eb 1c 0b 21 ff d0 41 ba 5b e5 77 44 15 54 77 9b e8 7d cc cb 5e b5 2d 5b 2f 6c 47 df 9d 45 65 e7 08 fd 5b 04 90 5b 50 b9 fa 77 e9 9f 32 b4 0f 6b a8 6e 45 e0 42 15 a1 52 ad 21 3d 39 c3 c8 43 e6 26 a3 b3 fb cf 57 e6 3e ff 64 f6 6c e9 ec 4e d3 62 27 2d 91 7f ec a1 b5 9f 20 fe db e7 92 fd 16 c7 24 e0 8c ac 2d 5e f0 30 9d 60 f8 c7 4c 67 15 44 9b f3 3a ab a2 76 d8 c6 19 07 1d 90 48 ca 9c 53 ff 31 89 de ee 64 db a7 26 6a d5 b9 3e 6a 4f 66 11 ea 1e 86 77 8f a7 6a Data Ascii: $=G6IIHm26/W#nwmZlj/^$sbYBz{s3F$ALs\kc/h+A!A[wDTw}^-[/lGEe[[Pw2knEBR!=9C&W>dlNb'- $-^0`LgD:vHS1d&j>jOfwj
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 83 f3 b0 81 71 91 20 29 59 df a3 26 26 b8 59 fd 27 f4 6c 58 e0 27 53 d2 43 ac 20 a9 52 49 81 8a 42 bd 04 53 f7 6e ef 69 a8 9b 3c b1 fc dd de e9 50 a0 54 dd 79 90 64 e3 9c 0d 19 09 da db a9 f1 dd 6e 23 c9 fa fd 5a 84 ee b5 82 e4 ef 03 c9 09 2e 4e 3b e8 f0 a8 21 74 1c f8 3b 4d 7a cd a3 37 4a 0a 05 c9 c9 47 73 0d 1d d4 1e 39 70 fc 08 4d 73 6d bd 21 92 df 09 92 6b ce fc 83 d3 a7 9b 8e b4 85 70 cd 11 80 a4 40 77 0a 24 a7 e8 3d 0d e1 ef f7 60 6b 80 d6 76 80 f2 c9 18 2a d5 2d 81 14 7f e5 20 81 cf 3d 0e e9 13 4c 92 77 92 bf 72 91 86 10 2a 15 26 55 bf 19 24 af bb 88 c8 60 6e b5 30 cd f8 9d ef fb 70 d6 ab e8 2f ff 7d 0a 99 0a 92 b7 0a 92 72 08 bb fd d0 36 83 9b c0 03 79 eb 1e 49 1f be ef c0 7d d2 c7 8f 34 38 a4 7b be 84 92 ff c7 83 a4 7c 0d 7c e6 0a 92 aa db 83 48 Data Ascii: q )Y&&Y'lX'SC RIBSni<PTydn#Z.N;!t;Mz7JGs9pMsm!kp@w$=`kv- =Lwr&U$`n0p/}r6yI}48{\|\|H
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: fc 49 06 2f 69 2f 43 db 78 d9 21 cf f0 64 62 1a bc 34 c4 98 9d e3 65 e7 74 e5 2b 34 60 c8 10 16 c5 cc 46 7d 34 0f 63 c4 db 01 a8 aa dd 73 79 8f c6 79 d8 60 68 cf 6b ee 5f de 07 52 0e 92 82 75 8b 41 b2 84 80 20 72 3d 44 73 94 bf d8 66 36 b9 40 e7 b8 86 78 27 44 89 d6 90 7a 83 65 20 e9 23 08 3c d0 7f ab ef 13 90 f2 80 24 7b 1f 39 ff d6 f0 52 be 4d 6c c8 36 75 3d c3 f0 7d 13 f5 bd 18 95 4d aa 02 e7 9c d3 15 83 64 84 ce f5 0d f0 2f 7e 2e f2 83 a4 7c 7e be 77 c8 33 ab 52 b1 08 6e 08 86 08 68 54 3f 9d 53 4a f9 92 04 e1 04 93 19 40 29 f6 4e 2a 4c aa 8a 02 49 ae 54 25 03 c3 de 31 d3 a0 30 5c 52 4e 64 ea 6d e3 90 96 61 84 bc c7 0d ce bd b2 c6 c7 09 2c 65 79 83 c8 a8 b3 91 37 0d 5a 80 da 5b 6b 6e 23 a7 ab 68 90 4c d0 8d bd b4 50 25 44 b4 57 9b e7 af bd 3b 42 d9 02 Data Ascii: I/i/Cx!db4et+4`F}4csyy`hk_RuA r=Dsf6@x'Dze #<${9RMl6u=}Md/~.\|~w3RnhT?SJ@)N*LIT%10\RNdma,ey7Z[kn#hLP%DW;B
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 61 1a a6 19 84 84 86 67 23 eb 34 f3 fb e0 c1 03 6a bc 51 91 49 0a cb 24 c3 22 c9 30 0c c3 f0 6c 24 13 40 a5 6d 92 49 df f7 a3 64 92 a2 22 93 dc 7c c3 b0 48 32 0c c3 30 ab bf 36 92 a4 84 a9 5f e3 cd ec ec 2c cd 4a 0a 99 0c 85 65 92 61 91 64 18 86 61 d6 c4 6c 24 77 6a af e2 ac a4 e7 79 f4 27 c9 64 b5 d9 49 95 35 93 2c 92 0c 8b 24 c3 30 0c 53 f7 99 31 9e 8d 5c c5 7b 7f ff fe 7d 6a be 61 99 64 58 24 19 86 61 98 35 d9 64 43 12 c3 12 b1 4a d0 9e 92 73 73 73 42 24 eb 20 93 2c 92 2c 92 0c c3 30 0c b3 32 65 6d 12 15 12 13 66 d5 f6 95 14 6b 25 57 48 26 49 20 59 26 19 16 49 86 61 18 e6 95 97 56 a9 ac ca f2 b0 ca cf 80 36 28 cf e7 f3 24 92 0a 32 19 b9 cf 24 cf 4a 32 2c 92 0c c3 30 4c 7d 67 c3 48 5c 98 d5 85 84 91 d6 4a d2 ac a4 ba 4c 0a 91 64 99 64 58 24 19 86 61 98 Data Ascii: ag#4jQI$"0l$@mId"\|H206_,Jeadal$wjy'dI5,$0S1\{}jadX$a5dCJsssB$ ,,02emfk%WH&I Y&IaV6($2$J2,0L}gH\JLddX$a
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 48 aa 8f 43 dc 43 59 9e d5 45 52 7e 76 f1 6b 7e f5 fb e3 8e ae 5c 69 7b 7e 0c bd a5 b2 b9 6e da e8 bd 3a 0e af b0 fc f7 89 61 d6 e2 da 38 fa 05 fe f4 d9 b3 ba a4 50 78 ba 20 2a 3c 7d df a8 9d db 34 23 39 3b 7b 1f 73 b4 41 f9 62 1e 05 79 f4 08 8f f2 79 e4 17 43 92 49 99 c7 7f 49 34 85 64 be 58 47 e9 e3 7f 42 34 69 c6 f2 71 90 c7 14 92 cd 27 94 92 70 16 f0 a4 20 02 7a 3f e4 90 84 d2 fb f3 1a e6 29 09 75 49 a0 d7 ab 48 4e 5e b6 a0 97 9a 0e e2 5d 2e 12 8b 6b c7 32 70 63 2f 2b 92 54 66 7c 79 91 b4 7a 68 3c 4b 67 74 ca c7 0b bc 21 3b 54 2e 9d 40 e2 58 68 46 4c fd 7c 2b 2a 92 c6 a9 94 38 b7 94 db 5e c5 5a 42 6a 9c 71 e0 f6 a4 90 a5 b1 5c e8 58 fa 3a 8f 27 91 eb 8b c3 2a c9 be e1 8e c0 8f 16 49 95 71 48 72 b6 e6 44 52 50 80 77 33 0d b7 dd 0c 44 5c 17 a5 75 c5 e7 Data Ascii: HCCYER~vk~\i{~n:a8Px <}4#9;{sAbyyCII4dXGB4iq'p z?)uIHN^].k2pc/+Tf\|yzh<Kgt!;T.@XhFL\|+8^ZBjq\X:'*IqHrDRPw3D\u
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 1d 3d 5e 7f 1d af bf de 13 a4 67 cf 5e 06 bd 08 e9 8d 5e a4 77 6f f4 ee d3 47 d1 c7 42 5f 33 76 31 25 94 52 13 fd 14 e8 d7 2a 2e c4 22 b3 0a 25 b5 6e 70 71 35 43 99 b5 e2 e6 d6 df 02 45 d7 91 01 4a 76 15 0e 62 4b 06 2a 06 28 3c 40 28 ad c3 46 8c c0 84 b7 de 06 6f 23 28 b0 d9 28 f7 3f 81 c1 36 c5 51 58 67 79 68 78 0e a5 a2 bd 22 a9 64 32 f5 90 3f e6 4f 99 74 cb 43 b0 6f ef 9b 6d f8 40 70 3e 0f d0 78 c8 34 25 60 0a 66 2c f0 c7 81 04 8b 28 aa 67 4a aa 41 36 ed 38 de 1d 13 49 56 d5 25 d3 c3 af 79 5d f6 07 72 47 e4 a0 de fc 39 ed 5f 0e f5 b0 70 ca 62 58 3a 1a 2d a3 b6 2f 21 d8 d7 87 c7 52 d7 ed b3 4c 7e 56 c5 cd 27 a9 6d bf 8e f6 8b a4 1a e4 32 7f 92 fd 9a 66 20 e0 b2 79 5d 0e 4e 6c 90 f3 4e 56 e7 05 65 ef 44 96 71 d6 f6 fc 7e 1a 0f 6a b7 5e ab 2d 52 7e d7 a6 Data Ascii: =^g^^woGB_3v1%R."%npq5CEJvbK(<@(Fo#((?6QXgyhx"d2?OtCom@p>x4%`f,(gJA68IV%y]rG9_pbX:-/!RL~V'm2f y]NlNVeDq~j^-R~
2025-01-11 23:11:37 UTC	1369	IN	Data Raw: 71 22 ad 8b 83 d2 71 e2 42 29 3e 13 71 a4 70 67 4b 32 39 6f db 15 f4 9c 16 8d 80 93 05 f8 56 de e3 9b f2 99 32 c9 fd 3a ca 86 9d e1 f9 e0 6d 03 11 89 a5 2d 0e 3e da b0 41 44 b2 9b 88 e4 03 94 c8 d6 65 92 3c f6 d8 63 78 f9 e5 57 f0 da 6b 46 2a 49 7a f4 78 dd 01 25 98 4c 26 cd f4 32 e8 d5 2c b7 b4 bb fb 90 be c4 2a 98 a4 35 b9 54 82 e9 42 4c 42 d9 8c 4c 12 8a a4 a2 45 99 6c 7f ab bb 0d 32 c9 e5 e1 23 46 22 30 70 2f 1f 09 a4 45 52 97 2e 5d ba 74 dd dd 6f 2c e1 33 ff ba 76 7b 0a 9d 3a a9 b6 76 87 69 6d 33 65 5b 2e c2 45 d9 a3 80 b1 2d 3b 57 84 e8 d5 c9 51 60 42 c8 76 2f 93 44 ca d2 f4 f5 29 6c 1f 5b 44 b2 9f 4f 0c b6 87 e6 c1 37 f0 1a be 90 63 71 1b 4a d5 da 43 d9 4c e8 94 48 b2 85 4c f9 bb 20 62 ba 47 64 8b 62 b5 4e da e1 1c 25 ee fc d1 59 ec 10 a9 64 b2 97 Data Ascii: q"qB)>qpgK29oV2:m->ADe<cxWkFIzx%L&2,5TBLBLEl2#F"0p/ER.]to,3v{:vim3e[.E-;WQ`Bv/D)l[DO7cqJCLHL bGdbN%Yd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49825	44.240.99.243	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:37 UTC	712	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 1906 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://talktalk770.weebly.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=23ed650a-6bc4-4697-a99f-3aa9d3ec9cd2
2025-01-11 23:11:37 UTC	1906	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 74 61 6c 6b 37 37 30 2e 77 65 65 62 6c 79 2e 63 6f 6d 2f 68 6f 6d 65 2e 68 74 6d 6c 22 2c 22 70 61 67 65 22 3a 22 31 35 31 38 38 36 36 39 32 3a 37 35 30 33 34 32 38 36 31 39 38 31 39 34 32 37 30 39 22 2c 22 74 76 22 3a 22 6a 73 2d 32 2e 36 2e 32 22 2c 22 74 6e 61 22 3a 22 5f 77 6e 22 2c 22 61 69 64 22 3a 22 5f 77 6e 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 74 7a 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"https://talktalk770.weebly.com/home.html","page":"151886692:750342861981942709","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web","tz":"America/New_York
2025-01-11 23:11:37 UTC	432	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:37 GMT Content-Type: text/plain Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=23ed650a-6bc4-4697-a99f-3aa9d3ec9cd2; Expires=Sun, 11 Jan 2026 23:11:37 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://talktalk770.weebly.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-11 23:11:37 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49826	142.250.185.196	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:37 UTC	649	OUT	GET /recaptcha/api.js?_=1736637096235 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:37 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Sat, 11 Jan 2025 23:11:37 GMT Date: Sat, 11 Jan 2025 23:11:37 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-11 23:11:37 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-01-11 23:11:37 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2025-01-11 23:11:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49828	74.115.51.9	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:38 UTC	769	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637096.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:38 UTC	302	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:38 GMT Content-Type: application/json Content-Length: 118 Connection: close CF-Ray: 9008964869aa32ee-EWR CF-Cache-Status: DYNAMIC Vary: X-W-SSL,User-Agent X-Host: blu5.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2025-01-11 23:11:38 UTC	118	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 30 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request","http_response_code":400},"id":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49830	142.250.181.228	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:38 UTC	467	OUT	GET /recaptcha/api.js?_=1736637096235 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:38 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Sat, 11 Jan 2025 23:11:38 GMT Date: Sat, 11 Jan 2025 23:11:38 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-11 23:11:38 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-01-11 23:11:38 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2025-01-11 23:11:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49829	44.240.99.243	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:38 UTC	424	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=23ed650a-6bc4-4697-a99f-3aa9d3ec9cd2
2025-01-11 23:11:38 UTC	455	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=23ed650a-6bc4-4697-a99f-3aa9d3ec9cd2; Expires=Sun, 11 Jan 2026 23:11:38 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-11 23:11:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49831	74.115.51.8	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:45 UTC	1256	OUT	POST /ajax/apps/formSubmitAjax.php HTTP/1.1 Host: talktalk770.weebly.com Connection: keep-alive Content-Length: 779 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://talktalk770.weebly.com Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryNXtBWaFqpxMfpo1V User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://talktalk770.weebly.com/home.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=fG.kf3JrbxDwvZRwuxSW2H785GkCmkBlPdfSIItWY5E-1736637079-1.0.1.1-I_z3tlX_M9bVdZ_.RKhSOE9Fq.Q_FoP7iok68HApjaDFzxrwyjeVTpsf5y9o.mOIq3KONqW5.484IBVuXZIrEQ; _snow_ses.adaa=*; _snow_id.adaa=f7cb478f-e53f-476b-94ab-c0035749de1c.1736637082.1.1736637096.1736637082.5b861298-be72-40cd-9842-09daf4d113ac
2025-01-11 23:11:45 UTC	779	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4e 58 74 42 57 61 46 71 70 78 4d 66 70 6f 31 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 5f 75 39 33 35 37 36 33 34 30 33 34 33 31 33 30 36 31 33 33 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4e 58 74 42 57 61 46 71 70 78 4d 66 70 6f 31 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 5f 75 39 38 33 36 39 39 31 31 33 32 39 34 35 38 35 37 31 38 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4e 58 74 42 57 61 46 71 70 78 4d 66 70 6f 31 56 0d Data Ascii: ------WebKitFormBoundaryNXtBWaFqpxMfpo1VContent-Disposition: form-data; name="_u935763403431306133"------WebKitFormBoundaryNXtBWaFqpxMfpo1VContent-Disposition: form-data; name="_u983699113294585718"------WebKitFormBoundaryNXtBWaFqpxMfpo1V
2025-01-11 23:11:46 UTC	407	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 23:11:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 90089678ba9442b9-EWR CF-Cache-Status: DYNAMIC Set-Cookie: language=en; expires=Sat, 25-Jan-2025 23:11:46 GMT; Max-Age=1209600; path=/ Vary: X-W-SSL,User-Agent X-Host: grn81.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Server: cloudflare
2025-01-11 23:11:46 UTC	476	IN	Data Raw: 31 64 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 72 65 74 28 29 7b 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 26 26 20 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 72 65 73 70 6f 6e 73 65 27 29 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 6e 6f 64 65 56 61 6c 75 65 2c 27 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 74 61 6c 6b 37 37 30 2e Data Ascii: 1d5<!DOCTYPE html><html><head><meta name="format-detection" content="telephone=no"><script type="text/javascript">function ret(){parent.postMessage && parent.postMessage(document.getElementById('response').childNodes[0].nodeValue,'https://talktalk770.
2025-01-11 23:11:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49833	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:47 UTC	719	OUT	GET /appsuite/ HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://talktalk770.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:47 UTC	717	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: text/html; charset=utf-8 Dependencies: false Content-Encoding: gzip Content-Length: 4175 Date: Sat, 11 Jan 2025 23:11:47 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:47 UTC	2132	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 3c 4d 93 dc b8 75 77 fd 0a 98 5b aa 9e d9 1a 92 dd f3 a5 51 ab 7b 62 af 2c 3b 4a c9 e5 4d b4 da b2 e3 b5 5d 68 f2 b1 1b 1a 12 a0 01 b0 7b 7a 6d 1f 24 e5 e0 43 6e 71 72 49 e5 90 8b cb be 24 a7 e4 e4 ca 65 7f ca 54 2a 7f 23 f5 40 90 04 d9 ec 9e d6 77 b6 52 da 5a b1 f1 f1 f0 f0 be f1 f0 a0 c9 77 be ff e3 87 5f fc f4 f3 47 64 a1 b3 f4 f2 ce 04 ff 22 29 e5 f3 a9 07 dc bb bc 73 67 b2 00 1a 5f de 21 64 92 81 a6 24 5a 50 a9 40 4f bd 42 27 fe 85 d7 74 2c b4 ce 7d f8 55 c1 96 53 ef 27 fe b3 ef f9 0f 45 96 53 cd 66 29 78 24 12 5c 03 d7 53 ef f1 a3 29 c4 73 38 8a 16 52 64 30 1d 39 00 38 cd 60 ea 2d 19 ac 72 21 b5 33 87 71 a6 19 4d 7d 15 d1 14 a6 a3 60 78 44 32 c6 59 56 64 ad 26 7a dd 6d 2a 14 48 f3 9b ce 52 98 72 71 44 2a e8 7e c2 f4 Data Ascii: <Muw[Q{b,;JM]h{zm$CnqrI$eT#@wRZw_Gd")sg_!d$ZP@OB't,}US'ESf)x$\S)s8Rd098`-r!3qM}`xD2YVd&zmHRrqD*~
2025-01-11 23:11:47 UTC	2043	IN	Data Raw: 92 c4 9a ca 39 de 6f 28 2d 24 f8 ce ba de d6 45 09 e1 62 49 53 16 53 0d db 51 eb c6 6e b7 b1 70 73 8e 14 2b 62 9d da ce 39 a5 17 c4 ed 59 fd b4 b9 f8 8d 95 bb ae b1 07 d0 2e 09 b1 43 18 cf 8b ea a8 63 15 d6 26 e2 ab 33 55 7d 29 f2 9a 9b c5 d3 c2 ed 7b 7d 03 aa 9a 79 79 8f c1 4b 1b 97 8c 3f 4a a3 8f 84 ca 6f 45 63 0f 4a ed 31 a4 43 01 cc 8b 9a 3b 9c d7 a1 82 51 56 b4 f5 f9 56 5b d8 0b 22 a5 33 48 d1 23 b7 a9 52 e3 40 62 aa a9 cf 46 17 7c ea 3d ab 11 ab be 26 a1 99 bf c7 3a ae c0 e0 49 75 53 15 9b 25 4b 41 6a 7e bb 5b ac 42 fa 5b 57 34 69 d2 14 f8 5c 2f a6 de 68 38 1c 7a 84 16 5a 44 42 a2 5d 98 7a 22 49 6c 0b cd 99 a6 29 fb 1a 6c a3 ca 21 4d a3 05 44 57 78 3f 93 2a d8 67 31 73 34 91 78 17 2a 21 b6 87 93 5e da 59 2c b2 3c 05 ed ee f2 e3 c8 5a 4e 95 5a 09 19 Data Ascii: 9o(-$EbISSQnps+b9Y.Cc&3U}){}yyK?JoEcJ1C;QVV["3H#R@bF\|=&:IuS%KAj~[B[W4i\/h8zZDB]z"Il)l!MDWx?g1s4x!^Y,<ZNZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49832	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:47 UTC	579	OUT	GET /appsuite/index.html.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://apps.talktalk.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:48 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 2082 Date: Sat, 11 Jan 2025 23:11:48 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:48 UTC	744	IN	Data Raw: 1b 6a 11 00 e4 32 55 fb e7 f3 5a 23 19 99 1c 53 b0 73 d7 e5 d0 29 b5 82 e4 4a da 04 02 78 00 e8 ae 19 53 4a e9 e5 4a e9 7a 3d e1 b4 ab b5 f2 e5 fe 7d 48 c6 26 42 a9 54 4f cf 2c d0 11 e2 06 00 14 83 02 62 05 a4 14 b0 8b 8c 8d f1 fe 7e 73 3b 11 0f 04 cb 37 42 26 fe 19 e3 83 b9 96 13 75 92 d2 f2 c3 96 0d 47 e1 ae 04 56 81 f7 3b 48 4a f2 34 0c 3a 1c 77 d5 fd b7 c8 55 78 93 65 34 06 77 d8 39 50 60 4e 6a 91 55 97 89 dc 0c 4d 75 d9 0e bb dc a6 cb 37 a7 9f 5c eb b6 d2 d4 69 0e 6c 11 68 1a 15 b6 f3 8b d7 08 b9 41 b9 8e ac 1b a6 7a a0 2b 15 cd 9b b5 92 fd d9 1e 30 0e d0 ea 03 2c 0c 77 08 91 1f ae 6b 13 d4 55 42 d0 75 78 22 b0 41 4c 55 6b b3 58 ca a0 ff e9 68 7b 0d ca b8 b8 87 ee ef 0f 43 0a 30 1c 56 38 06 eb 0b 07 62 fb c6 a4 1f 0e 0b 30 1e 99 aa c7 64 6a 31 a4 7a Data Ascii: j2UZ#Ss)JxSJJz=}H&BTO,b~s;7B&uGV;HJ4:wUxe4w9P`NjUMu7\ilhAz+0,wkUBux"ALUkXh{C0V8b0dj1z
2025-01-11 23:11:48 UTC	1338	IN	Data Raw: 2f ef f8 ce 15 3f d3 61 9e b4 ac 0f 29 17 5e 00 54 01 8a d0 41 82 4a 64 68 12 d1 fe fa 76 b4 05 9d 99 e0 5a 6e b9 51 58 f0 a7 ce 16 69 13 d5 bd 75 0b ca 64 40 39 d1 71 83 5b 7a 9f a1 b5 62 02 3b cf b6 85 52 20 a1 fd 2f 8f 9f 7b f3 d9 f3 37 8f ce 12 f1 c0 8d b9 22 2c c6 20 37 3a 41 83 aa 27 c7 b1 0b 63 45 63 06 ba 70 1c 46 25 b2 c2 0f 55 cf 8e a4 1a e7 4a 9a cc 45 03 bb f5 bf ec 41 72 bd 3f 13 34 36 6d 1a 24 57 a8 06 24 48 90 a1 01 ec 3f 94 c3 12 72 0e 41 8a 0c 15 6c 25 46 f4 c0 56 24 87 80 cd a4 fd ae 2d 15 87 2c a4 22 2b cc c6 1a 0e 9b b4 01 23 d0 1e c1 9e d9 62 08 02 16 93 ca 42 4e 88 9d 97 00 29 c0 0d a5 40 c8 2e eb 7d 26 05 29 10 cd cb d2 1b 42 d6 fb 2c 17 d6 f6 3e e3 b0 03 0b 92 12 27 c1 60 da 14 a6 81 a6 24 d2 3e c2 c9 15 96 0a 9a 15 2c 49 92 bb bf Data Ascii: /?a)^TAJdhvZnQXiud@9q[zb;R /{7", 7:A'cEcpF%UJEAr?46m$W$H?rAl%FV$-,"+#bBN)@.}&)B,>'`$>,I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49836	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:48 UTC	604	OUT	GET /appsuite/lib/polyfills/text-encode-transform.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://apps.talktalk.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:49 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 656 Date: Sat, 11 Jan 2025 23:11:48 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:49 UTC	656	IN	Data Raw: 1b ef 06 00 64 55 cd f6 2c 93 cc 00 86 88 f0 94 56 95 f4 2d fd ff 27 a7 29 36 af 34 1d 28 fa 9b a0 a1 63 06 b2 a9 97 0e e9 72 51 65 95 05 d4 1f cd 4d cd 6f 52 8b 78 de 0a dc ee 50 e9 5b cc 24 b9 5c 8c 71 68 54 0a 77 3f f9 af de 2d 51 9f 91 1f 2a 1c 16 de 03 c5 5a a8 eb 15 2f b7 2c c1 af 60 e8 f2 54 44 4b 75 7c 41 c7 12 ff 98 25 ff 31 95 76 f6 9d 48 14 0b 54 32 93 8c 30 75 a4 c6 ce 89 80 a2 b0 7a f5 1a e3 69 b5 e3 92 bf 62 70 9f 59 fa 1f ff 16 df 71 6e 61 17 68 01 69 72 2b 2c 75 f8 96 22 b0 8b 9c 87 94 4c 9b 29 33 a5 6f 35 8a c5 fc 16 1d 67 b3 7c f7 9a 14 1b 28 22 18 73 42 38 21 e7 0a ed ed 9a b9 a5 76 23 96 c2 9e 3d 3d c1 fe 77 9c 74 66 8b f4 4a 05 79 d8 ca e3 2c 93 a2 50 b6 05 f1 63 aa e9 ac 10 63 1e 8e 91 47 c2 d4 c4 61 03 29 0a 12 d1 04 04 ef 96 81 57 Data Ascii: dU,V-')64(crQeMoRxP[$\qhTw?-Q*Z/,`TDKu\|A%1vHT20uzibpYqnahir+,u"L)3o5g\|("sB8!v#==wtfJy,PccGa)W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49834	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:48 UTC	578	OUT	GET /appsuite/polyfills.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://apps.talktalk.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:49 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 521 Date: Sat, 11 Jan 2025 23:11:48 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:49 UTC	521	IN	Data Raw: 1b ce 03 00 c4 e7 a7 b3 3d cb f4 6b 06 27 db 39 55 89 54 c6 08 69 49 da 92 07 a4 72 03 e7 14 1d 18 47 d7 bb 28 da 86 bf 8d f8 0d 16 65 17 bf 6d b6 22 0a 8a 7f 73 ea 9d 6b 9f 32 61 27 36 16 09 3d 8b 80 ae a7 cf cf 58 9c cf 9a 1a fe 30 9d 9c 2c 54 87 b2 d0 ab 31 ff 93 44 17 3f 69 b3 69 a1 89 bf a4 62 6b 10 75 a4 1e 36 b0 ca f8 b5 b3 ef ab 1b a3 4b 30 6e c3 a7 ad f8 12 d7 58 fe 69 20 77 1e 37 41 af 4e 50 3f 22 11 07 1e 02 1b ad e7 9d 77 f2 62 a1 2b 08 74 50 93 10 42 43 7d 16 c6 28 1f b0 79 07 8a 7f d1 1c e0 10 89 7f 8d 68 d5 71 61 24 e2 a7 20 4b 18 38 71 bc a2 c7 89 00 38 8b d1 d2 03 8b 63 ae 24 18 8c 84 39 32 30 66 e0 6b 24 66 b3 22 04 1b d8 98 1c aa 83 e2 bb 06 e4 94 36 a6 12 08 0a 2a de bb 43 84 86 6d 48 25 c8 ac fb c6 08 45 21 59 83 d8 80 93 26 ea 65 44 Data Ascii: =k'9UTiIrG(em"sk2a'6=X0,T1D?iibku6K0nXi w7ANP?"wb+tPBC}(yhqa$ K8q8c$920fk$f"6*CmH%E!Y&eD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49837	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:48 UTC	599	OUT	GET /appsuite/assets/preload-helper-DVsEscEQ.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://apps.talktalk.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:49 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 629 Date: Sat, 11 Jan 2025 23:11:48 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:49 UTC	629	IN	Data Raw: 1b 8b 04 00 e4 5a 2b fb e7 f3 42 72 d1 55 2d 99 7c c7 6a 27 7b fd 72 5f 14 b6 2b 29 07 2c 20 a7 3a 71 4d d1 17 7c d2 47 ed b0 ea 05 45 24 37 d8 06 3a aa d0 e1 6e 36 82 bf 99 4d 59 87 de 75 eb 84 80 9f ff 24 b8 60 ac 5d 4f 14 e0 8b 0f 92 1d d9 81 aa 0d 89 df 25 c6 cc 77 ec c9 ad 13 9e 3f c5 d5 f9 61 7b 32 dd 45 6e 67 ec 68 9c 71 18 f2 59 8f 06 5b 18 7b ce a2 a1 d3 18 d6 2e b1 8e 9c 42 ff c1 ca fb 02 b3 b3 63 12 af 5f 2f 60 84 31 97 a5 4f 1c 9d 10 59 59 f1 62 0d d0 f7 45 14 46 e5 f7 42 54 72 9b c9 f4 c3 57 aa be 61 d3 50 fa e0 2d 3f 49 c0 48 7e a5 5b 76 a6 c9 af 34 75 8a 92 af ad 49 a8 10 ff cc f4 fd 05 e7 dc 73 a3 8c 5e 9b 41 31 d5 a3 6b 15 d3 b7 62 6c 01 59 38 2f 3a 20 a6 b1 ea 1e f8 89 8a 45 65 cc 8b 40 ac d9 37 e9 c6 e5 4e c9 80 df 5f 02 ae 29 ac 76 1f Data Ascii: Z+BrU-\|j'{r_+), :qM\|GE$7:n6MYu$`]O%w?a{2EnghqY[{.Bc_/`1OYYbEFBTrWaP-?IH~[v4uIs^A1kblY8/: Ee@7N_)v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49835	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:48 UTC	576	OUT	GET /appsuite/precore.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://apps.talktalk.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:49 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1966 Date: Sat, 11 Jan 2025 23:11:49 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:49 UTC	1966	IN	Data Raw: 1b 3c 11 00 e4 7f 5f a7 ff 9f 9f af 5b 3d 1e 47 4a ae 65 3c 32 a9 d3 92 39 80 8c 49 0d 96 41 89 6d b9 92 cc 28 f8 6a 2d b3 ec c3 46 47 e8 54 ac ea 9e 9e ad 9a d9 db 23 dc 00 e2 2c 5c 10 9f 40 18 20 54 84 ea df 78 22 05 42 ca 7f 0c dd 7f 8a 0f 90 e3 2a d2 b2 a3 80 bf 0c 06 83 a9 b4 62 30 c8 e3 f2 48 94 26 a2 12 f3 28 63 24 26 11 cd 79 ba 5a 7d 3e 38 7a 23 dc cd 63 59 f0 2f 43 90 70 17 fd 21 b7 44 b5 74 ce 08 f2 a9 84 76 8e 1e cd b1 19 1d df 43 42 eb 9f 74 a8 0a e1 1c e5 87 7f 1f ed 02 46 1f 74 2e f9 65 ce aa ba 85 71 76 5b 17 e7 8f ea f4 01 96 14 07 c9 17 9e 53 91 c9 61 2e 9f 64 fc 11 91 88 dc 76 a0 93 cb 79 39 42 10 4f 8a aa 79 26 f5 93 a7 11 5a f9 03 4e 3e ad 85 88 ce fe ed 21 15 57 73 b7 31 e1 ca 07 2b 9e d4 7c 16 17 03 ea 9c d7 bc e3 b9 99 5c 14 1c 7d Data Ascii: <_[=GJe<29IAm(j-FGT#,\@ Tx"B*b0H&(c$&yZ}>8z#cY/Cp!DtvCBtFt.eqv[Sa.dvy9BOy&ZN>!Ws1+\|\}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49838	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:48 UTC	365	OUT	GET /appsuite/index.html.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:49 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 2082 Date: Sat, 11 Jan 2025 23:11:49 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:49 UTC	2082	IN	Data Raw: 1b 6a 11 00 e4 32 55 fb e7 f3 5a 23 19 99 1c 53 b0 73 d7 e5 d0 29 b5 82 e4 4a da 04 02 78 00 e8 ae 19 53 4a e9 e5 4a e9 7a 3d e1 b4 ab b5 f2 e5 fe 7d 48 c6 26 42 a9 54 4f cf 2c d0 11 e2 06 00 14 83 02 62 05 a4 14 b0 8b 8c 8d f1 fe 7e 73 3b 11 0f 04 cb 37 42 26 fe 19 e3 83 b9 96 13 75 92 d2 f2 c3 96 0d 47 e1 ae 04 56 81 f7 3b 48 4a f2 34 0c 3a 1c 77 d5 fd b7 c8 55 78 93 65 34 06 77 d8 39 50 60 4e 6a 91 55 97 89 dc 0c 4d 75 d9 0e bb dc a6 cb 37 a7 9f 5c eb b6 d2 d4 69 0e 6c 11 68 1a 15 b6 f3 8b d7 08 b9 41 b9 8e ac 1b a6 7a a0 2b 15 cd 9b b5 92 fd d9 1e 30 0e d0 ea 03 2c 0c 77 08 91 1f ae 6b 13 d4 55 42 d0 75 78 22 b0 41 4c 55 6b b3 58 ca a0 ff e9 68 7b 0d ca b8 b8 87 ee ef 0f 43 0a 30 1c 56 38 06 eb 0b 07 62 fb c6 a4 1f 0e 0b 30 1e 99 aa c7 64 6a 31 a4 7a Data Ascii: j2UZ#Ss)JxSJJz=}H&BTO,b~s;7B&uGV;HJ4:wUxe4w9P`NjUMu7\ilhAz+0,wkUBux"ALUkXh{C0V8b0dj1z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49840	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:49 UTC	364	OUT	GET /appsuite/polyfills.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:49 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 521 Date: Sat, 11 Jan 2025 23:11:49 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:49 UTC	521	IN	Data Raw: 1b ce 03 00 c4 e7 a7 b3 3d cb f4 6b 06 27 db 39 55 89 54 c6 08 69 49 da 92 07 a4 72 03 e7 14 1d 18 47 d7 bb 28 da 86 bf 8d f8 0d 16 65 17 bf 6d b6 22 0a 8a 7f 73 ea 9d 6b 9f 32 61 27 36 16 09 3d 8b 80 ae a7 cf cf 58 9c cf 9a 1a fe 30 9d 9c 2c 54 87 b2 d0 ab 31 ff 93 44 17 3f 69 b3 69 a1 89 bf a4 62 6b 10 75 a4 1e 36 b0 ca f8 b5 b3 ef ab 1b a3 4b 30 6e c3 a7 ad f8 12 d7 58 fe 69 20 77 1e 37 41 af 4e 50 3f 22 11 07 1e 02 1b ad e7 9d 77 f2 62 a1 2b 08 74 50 93 10 42 43 7d 16 c6 28 1f b0 79 07 8a 7f d1 1c e0 10 89 7f 8d 68 d5 71 61 24 e2 a7 20 4b 18 38 71 bc a2 c7 89 00 38 8b d1 d2 03 8b 63 ae 24 18 8c 84 39 32 30 66 e0 6b 24 66 b3 22 04 1b d8 98 1c aa 83 e2 bb 06 e4 94 36 a6 12 08 0a 2a de bb 43 84 86 6d 48 25 c8 ac fb c6 08 45 21 59 83 d8 80 93 26 ea 65 44 Data Ascii: =k'9UTiIrG(em"sk2a'6=X0,T1D?iibku6K0nXi w7ANP?"wb+tPBC}(yhqa$ K8q8c$920fk$f"6*CmH%E!Y&eD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49839	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:49 UTC	390	OUT	GET /appsuite/lib/polyfills/text-encode-transform.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:49 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 656 Date: Sat, 11 Jan 2025 23:11:49 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:49 UTC	656	IN	Data Raw: 1b ef 06 00 64 55 cd f6 2c 93 cc 00 86 88 f0 94 56 95 f4 2d fd ff 27 a7 29 36 af 34 1d 28 fa 9b a0 a1 63 06 b2 a9 97 0e e9 72 51 65 95 05 d4 1f cd 4d cd 6f 52 8b 78 de 0a dc ee 50 e9 5b cc 24 b9 5c 8c 71 68 54 0a 77 3f f9 af de 2d 51 9f 91 1f 2a 1c 16 de 03 c5 5a a8 eb 15 2f b7 2c c1 af 60 e8 f2 54 44 4b 75 7c 41 c7 12 ff 98 25 ff 31 95 76 f6 9d 48 14 0b 54 32 93 8c 30 75 a4 c6 ce 89 80 a2 b0 7a f5 1a e3 69 b5 e3 92 bf 62 70 9f 59 fa 1f ff 16 df 71 6e 61 17 68 01 69 72 2b 2c 75 f8 96 22 b0 8b 9c 87 94 4c 9b 29 33 a5 6f 35 8a c5 fc 16 1d 67 b3 7c f7 9a 14 1b 28 22 18 73 42 38 21 e7 0a ed ed 9a b9 a5 76 23 96 c2 9e 3d 3d c1 fe 77 9c 74 66 8b f4 4a 05 79 d8 ca e3 2c 93 a2 50 b6 05 f1 63 aa e9 ac 10 63 1e 8e 91 47 c2 d4 c4 61 03 29 0a 12 d1 04 04 ef 96 81 57 Data Ascii: dU,V-')64(crQeMoRxP[$\qhTw?-Q*Z/,`TDKu\|A%1vHT20uzibpYqnahir+,u"L)3o5g\|("sB8!v#==wtfJy,PccGa)W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49841	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:49 UTC	385	OUT	GET /appsuite/assets/preload-helper-DVsEscEQ.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:50 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 629 Date: Sat, 11 Jan 2025 23:11:50 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:50 UTC	629	IN	Data Raw: 1b 8b 04 00 e4 5a 2b fb e7 f3 42 72 d1 55 2d 99 7c c7 6a 27 7b fd 72 5f 14 b6 2b 29 07 2c 20 a7 3a 71 4d d1 17 7c d2 47 ed b0 ea 05 45 24 37 d8 06 3a aa d0 e1 6e 36 82 bf 99 4d 59 87 de 75 eb 84 80 9f ff 24 b8 60 ac 5d 4f 14 e0 8b 0f 92 1d d9 81 aa 0d 89 df 25 c6 cc 77 ec c9 ad 13 9e 3f c5 d5 f9 61 7b 32 dd 45 6e 67 ec 68 9c 71 18 f2 59 8f 06 5b 18 7b ce a2 a1 d3 18 d6 2e b1 8e 9c 42 ff c1 ca fb 02 b3 b3 63 12 af 5f 2f 60 84 31 97 a5 4f 1c 9d 10 59 59 f1 62 0d d0 f7 45 14 46 e5 f7 42 54 72 9b c9 f4 c3 57 aa be 61 d3 50 fa e0 2d 3f 49 c0 48 7e a5 5b 76 a6 c9 af 34 75 8a 92 af ad 49 a8 10 ff cc f4 fd 05 e7 dc 73 a3 8c 5e 9b 41 31 d5 a3 6b 15 d3 b7 62 6c 01 59 38 2f 3a 20 a6 b1 ea 1e f8 89 8a 45 65 cc 8b 40 ac d9 37 e9 c6 e5 4e c9 80 df 5f 02 ae 29 ac 76 1f Data Ascii: Z+BrU-\|j'{r_+), :qM\|GE$7:n6MYu$`]O%w?a{2EnghqY[{.Bc_/`1OYYbEFBTrWaP-?IH~[v4uIs^A1kblY8/: Ee@7N_)v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49842	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:50 UTC	543	OUT	GET /appsuite/bundles/boot.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:50 UTC	709	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 829488 Date: Sat, 11 Jan 2025 23:11:50 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:50 UTC	15675	IN	Data Raw: 9b 54 2c 55 29 1d 00 92 61 e3 00 00 f0 fd eb e1 4a b1 f3 1e 15 63 b0 71 00 00 d0 f7 3e fc 13 f9 87 b8 e1 7f 1a 74 1e 07 92 24 5d 77 5d 02 81 37 b3 e9 ee 66 e3 c9 00 87 ea 01 00 20 dd ef 01 50 55 55 55 55 df 3e c0 58 04 b6 c9 ce 2c 7f fb 7c 0b ff 3c ff 7c 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 3d ea 55 58 d5 a3 23 0c 7b 1a c2 ca 7a 14 ee 89 d2 d0 f1 98 7a 0d bb b7 dc a7 7e 1d e7 09 f5 e9 24 c3 be 53 08 2b eb 69 b8 2f 4a 43 c7 33 ea 37 ec fe f2 80 06 75 16 cf d6 80 ce 61 38 70 2e c2 ca 7a 1e 3c 10 a5 a1 e3 f9 1a 34 ec c1 f2 90 86 75 01 2f d4 90 2e 62 38 74 31 c2 ca 7a 09 3c 14 a5 a1 e3 a5 1a 36 ec e1 f2 88 46 75 19 2f Data Ascii: T,U)aJcq>t$]w]7f PUUUU>X,\|<\|(b(b(b(b(b(b(b(b(=UX#{zz~$S+i/JC37ua8p.z<4u/.b8t1z<6Fu/
2025-01-11 23:11:50 UTC	16384	IN	Data Raw: 82 36 cc e1 f0 ee 49 f1 dc 24 e0 54 2a 35 06 ab 44 9d 40 0c ab 5e 38 38 2d f3 bb 2f e2 73 f3 7d c5 45 a7 ef 09 a2 aa 6c 21 a6 88 66 22 c5 5a 30 45 73 ac 15 af 04 1a 39 41 19 2c 30 5a 8e 45 1d 48 55 ed e8 19 5e 48 73 41 a6 38 ab 45 e6 8d b3 ae b0 ac 78 67 86 bb 9e b2 e3 3b 07 26 1a 83 37 63 2a 3b fd 0c 4b 72 b1 69 8c 2b 76 7a 40 66 2e 2a 22 49 c0 fd e5 86 ee a7 c2 e7 43 fc 07 49 a7 db 42 4f cf 6a 7f ca 70 24 87 a4 0b b7 f6 9a f0 24 fa 40 bf a6 27 6a 2f 18 6c 7d 85 8f 6c cc ed 25 6d cf 10 a6 6d 07 56 47 60 b0 c5 85 2e 53 7e db fa 01 4f de de fa eb 97 72 52 89 04 b7 e1 05 74 0b eb 39 8d 41 60 bc f9 0c 13 d6 28 8d de 39 3d cf 95 5e b8 41 56 39 de 57 01 2c a8 36 b5 03 3e 43 ce 31 17 c4 cb e8 03 20 26 60 05 3d 9b 58 81 b8 82 72 83 98 10 5f 46 17 00 31 df 11 ad Data Ascii: 6I$T5D@^88-/s}El!f"Z0Es9A,0ZEHU^HsA8Exg;&7c;Kri+vz@f.*"ICIBOjp$$@'j/l}l%mmVG`.S~OrRt9A`(9=^AV9W,6>C1 &`=Xr_F1
2025-01-11 23:11:50 UTC	16384	IN	Data Raw: 64 b8 7f 6b f4 b4 1e 23 89 f6 df c1 d6 e8 3b ec 20 4a e4 ff 44 86 03 6d c2 eb e9 f5 d5 15 16 c3 1f dd 3a ee 3a ed a9 77 d8 d1 dd 05 29 fc 9f 3c 4d 8a 87 0b eb 27 df d8 9a 85 ef 87 a3 87 48 ba 22 72 ff 59 02 7f 75 a9 5e c3 63 f2 d8 56 0a 08 2a 77 6f 2b 01 89 6c b3 c3 84 f6 1b a7 87 30 6d 1f a5 24 72 84 6d d5 71 d3 e2 26 6f 65 62 0d 5d c3 d3 f0 93 2c b1 6f e8 85 31 00 ae 60 0a 08 07 da f6 73 64 c2 8e 54 78 3a 68 43 df 50 99 31 6c 48 a7 1a 56 61 f3 14 ad 39 3d af a2 b6 b1 00 9a df 65 5f ed 62 0d 1a 0d ad 21 e2 7b 6e 9e 18 95 05 9d 1b 48 11 fc 10 36 2b eb 55 d0 de 2a 3c fa 33 74 7c 4f 0e 35 dd 37 4c 1e 8e 04 81 3c 01 b1 b0 92 16 d2 a7 5d 6e 3d c8 41 6c 29 f7 e8 85 e1 7f e5 c3 09 79 7e 0d 6e 69 77 bd 51 f0 f4 f8 0d 0a 9a 88 a4 bd 39 7a 6a 7c df 2c 95 de 7c 4d Data Ascii: dk#; JDm::w)<M'H"rYu^cVwo+l0m$rmq&oeb],o1`sdTx:hCP1lHVa9=e_b!{nH6+U<3t\|O57L<]n=Al)y~niwQ9zj\|,\|M
2025-01-11 23:11:50 UTC	16384	IN	Data Raw: bd 66 0d 62 7a 37 c9 91 e4 17 a2 d0 b2 cb 3e 3d f6 53 0d 19 6f d5 ba cd 88 fe 9e 88 b5 8d 8b 69 3e 5d 42 2a 58 3b f6 9e 3e 08 cb e3 eb 7f 2d c0 e4 65 61 7a 0e 49 34 22 93 e1 1a 15 72 d8 48 49 0a 03 55 a7 4b 26 79 b0 81 c4 17 bb 5b d9 c3 64 92 92 e2 c7 03 0f e4 c2 29 f7 cf b9 33 27 e4 1b 73 58 d1 76 75 6b 0d 8b 40 4b 0b 86 3e 7e 49 e6 19 36 1d e1 db 4a 89 b7 22 d3 84 0f cc 5c e7 9a 9d 5e cb 07 d0 40 46 da b7 4f 0f 69 a4 5a 3e b4 02 7c a0 a6 e1 50 eb a4 14 e9 1a f5 2a d3 52 67 4e 21 40 64 13 21 b4 2c 29 81 98 06 2e bd 56 80 f9 ee b6 24 3a be 48 6f d6 75 60 c1 c4 43 9c 48 af d9 9a df 88 99 6e 4d 9b 32 e4 f7 be e4 5f 04 78 78 3f 9d 33 7e a9 c7 59 72 b5 50 df e3 c1 c3 5a 6b 61 02 e9 72 1f f6 57 35 29 9e 1e c2 23 00 3f 36 cc 24 fe 2b c5 4c 6b c1 1e 19 fb 4d 58 Data Ascii: fbz7>=Soi>]BX;>-eazI4"rHIUK&y[d)3'sXvuk@K>~I6J"\^@FOiZ>\|PRgN!@d!,).V$:Hou`CHnM2_xx?3~YrPZkarW5)#?6$+LkMX
2025-01-11 23:11:50 UTC	16384	IN	Data Raw: 70 44 29 e4 27 02 78 b2 f6 30 cf d5 52 de ca f9 81 c8 1e c7 7b 72 69 d9 60 92 f0 8e 6f 1c 96 00 b4 91 be 16 68 42 50 c3 bd 82 0e 0a 2f a2 bd cc 2c 72 9c ac f9 e0 ca 60 78 60 74 ba bc f0 4a 05 d4 2b 5f 4d dc 39 bc 1f 1d e6 15 c4 cc db 23 bd ca e3 15 7d 98 24 b3 36 40 9d 25 7f 60 47 ba 24 93 cc dc 2e a9 a7 bb 3b 04 24 66 c9 00 a3 b4 2b 41 38 d8 75 94 84 d7 44 a3 e8 c3 06 c5 35 7c 2f 64 98 a8 20 36 24 6c bc c7 81 db 6b 05 21 90 73 19 00 2e 9d 55 c0 e4 f7 01 c0 10 b0 0b 6f c9 8d 9d d6 3f 8a 38 38 2c aa 59 83 20 d3 0f dc b5 52 27 13 d3 71 47 88 bc 20 31 10 bc dd e9 64 d0 65 15 d7 83 7d 7d f0 52 f5 8b e4 fd 41 78 31 c6 42 3c e0 5d af cb 8e 5c a6 4d 1f 3d 59 df de 48 0a 63 9c 9f 34 9b 25 a4 5e 5b 1a ad 55 eb c7 ff 95 83 53 25 67 96 91 f4 ff fc cb d1 f5 fe 60 23 Data Ascii: pD)'x0R{ri`ohBP/,r`x`tJ+_M9#}$6@%`G$.;$f+A8uD5\|/d 6$lk!s.Uo?88,Y R'qG 1de}}RAx1B<]\M=YHc4%^[US%g`#
2025-01-11 23:11:50 UTC	16384	IN	Data Raw: f5 b5 21 10 df 62 b7 a3 b3 98 1f a6 c9 8b 88 33 b9 84 e0 af c6 06 0a eb c3 fd ec 6b 4b c4 20 1b 76 88 34 40 84 59 76 8f 01 55 11 24 01 f6 c8 aa 2c 12 6f d5 2f 23 45 10 df a4 51 85 db 6f b0 45 d1 cd 36 17 a9 22 27 9f e3 70 24 aa d6 a4 84 2c 99 90 4f ab 25 81 bd bf 91 47 b5 90 6c 94 ae fb c9 e1 d9 f4 bc 14 f6 70 74 bc 52 f5 fa 16 15 ff ee ca e3 48 10 bf 33 29 45 62 3a 24 ed af 1b ba 98 f1 65 67 6e bd d2 38 e6 8b 87 67 98 14 70 a4 6e 7b f5 e0 ac dc 47 ea ed c0 55 75 7a 10 23 a6 bd cf 06 7e f0 5c e7 7e db 7c 8a b5 9c b4 eb ee c4 f7 e8 55 d8 d3 68 e8 80 19 81 9d 00 a9 2d ac fa 3f d5 a0 3d 4a b5 60 34 90 da da 3a e2 ea 94 b4 5f f4 d5 fd 29 ed 93 45 73 8e 3e 3f 33 b8 db fd f8 4b ad ed f0 a1 ae e7 82 f6 f5 7f 1a 52 c7 33 7b f1 a8 4c a7 55 23 61 9a a7 d4 1e 30 9f Data Ascii: !b3kK v4@YvU$,o/#EQoE6"'p$,O%GlptRH3)Eb:$egn8gpn{GUuz#~\~\|Uh-?=J`4:_)Es>?3KR3{LU#a0
2025-01-11 23:11:50 UTC	16384	IN	Data Raw: 18 7c cc 98 e0 fd b8 6f 29 fa 63 91 92 5a ab 7c 3c 34 df 3e 0f 69 b7 7c 88 4d aa 1c 22 c3 15 4e 9f 1c 97 14 fc d5 54 0f 8d e4 28 97 98 39 e2 de a0 7f fc da 4e f2 d9 cd 17 53 fe 3e c5 9c 7e 46 23 12 ad 68 44 4a 11 75 24 c8 50 47 2a 0c 3c 05 ae d2 bb 90 10 47 5f 27 34 07 7a 6d 6f cc 6c 79 0d ac 63 44 69 b8 63 94 c3 72 92 1a 8e 92 e6 2e 46 0d 75 ca 04 ce bd 03 cc 5d 91 3c fb 03 c9 b6 f3 b0 8a 36 2a 04 f1 35 f2 92 24 89 5e b4 e8 13 ce 70 b7 76 db 0b fa 0f f6 2d 3a b6 fc ff dc 2b e6 c2 1e 16 a4 5b f5 c1 d5 50 77 2a 86 fb 59 0b e9 3e 89 88 ca 21 3e 8e 39 cf 1e 24 b8 92 69 33 64 b1 8a 2a b5 26 02 f9 53 1f b8 bc 4a eb 61 2d 5c 61 03 c8 5d 01 68 d1 23 61 fb 11 d7 04 2b 91 88 ca a3 54 81 f3 e5 da b1 36 6c 4d a9 d4 35 ea 1b c6 42 80 56 85 b5 34 78 a4 a0 06 cb 32 cc Data Ascii: \|o)cZ\|<4>i\|M"NT(9NS>~F#hDJu$PG<G_'4zmolycDicr.Fu]<65$^pv-:+[PwY>!>9$i3d&SJa-\a]h#a+T6lM5BV4x2
2025-01-11 23:11:50 UTC	16384	IN	Data Raw: 0a c9 88 25 e3 5f 99 7c 00 ac 25 56 86 15 f9 43 65 01 3b 2c 92 4f 9e 5f 0e b6 26 c0 c2 2c a6 2d 20 99 fa a6 3a 6c 15 1d 45 3b 0c 48 76 39 a3 bd 6e 93 a9 fd 56 5c c3 bd 60 40 35 20 39 1b 2a d0 8e 5b 3f a3 e3 6a 83 8b 82 d4 6c ec bb f8 00 9b 7a 64 aa 04 75 4b 4b be d3 a5 76 45 ab bd b7 3e c2 ee eb 17 05 e9 6b 75 92 8b c9 6a e5 15 37 6e 27 b7 ab 2b 43 f2 4d c6 8c 0f f0 43 04 c2 59 06 d9 c3 b2 76 d5 fc 4d e3 af fb 7a d2 4d 0f e0 73 96 3d 74 fe 4c e9 83 51 57 15 f6 ab 8d a5 a0 b4 b3 2e 1d 36 82 34 4d 66 94 6e 09 c0 34 ad 06 74 a5 02 70 98 15 11 3a bc 17 e9 8b ae 70 e1 76 02 7d be 45 9d b3 4a 4b 01 bf 5a b6 08 31 09 d5 57 c8 0e f7 b2 7a 54 2b ea 68 e5 88 55 55 82 a0 9b 66 3b d2 d5 f1 75 2a 53 4a c0 28 7b ec fb f2 24 64 b8 d9 0e 2b 44 c5 32 62 08 42 ba 08 21 10 Data Ascii: %_\|%VCe;,O_&,- :lE;Hv9nV\`@5 9[?jlzduKKvE>kuj7n'+CMCYvMzMs=tLQW.64Mfn4tp:pv}EJKZ1WzT+hUUf;uSJ({$d+D2bB!
2025-01-11 23:11:50 UTC	16384	IN	Data Raw: 7c d3 5c a6 d4 99 40 37 2f ec 80 86 00 b9 d1 47 9f 47 1a 0d 80 e7 35 af 20 e2 55 94 8a 32 ca bc c0 9d eb a6 a8 c3 b8 05 4f 79 2b 22 d0 a0 3c f3 ee 44 45 c0 b7 72 53 42 89 8f ce 4e 3d 77 cd 19 9b fd b4 6b d2 d6 7a ca d9 54 2c 09 ce 7d 0f 0d 32 08 09 19 d2 45 b6 69 b6 11 4f 82 1c a2 5d 28 04 30 fb b6 22 3c e7 27 b2 8c 52 14 f2 5f b8 62 8a 76 84 f4 82 e3 fd f3 8c 4d d5 e3 e6 49 87 16 ea ee 68 34 40 78 20 0e f2 6c b3 ac 27 33 2f 38 8f ef a3 48 e0 06 2e de 1e 98 52 fa c4 79 c3 4e e0 d6 0c 01 54 fe d7 d2 03 8c f9 7e 3a 79 cf 41 c1 58 ff ad 41 4f 4c c1 c9 19 5f 8c 66 ec ec df e9 9d 56 99 36 6b 6b 19 f1 03 96 31 60 bd f2 65 e7 14 d1 d2 8a 52 19 e3 46 29 28 5b c2 e5 88 9d 06 25 02 f7 07 26 b2 9c 03 76 b7 66 9e 8d 6e 5d 79 06 96 65 a1 cd 87 c0 da 55 62 0d 0c 6b 0a Data Ascii: \|\@7/GG5 U2Oy+"<DErSBN=wkzT,}2EiO](0"<'R_bvMIh4@x l'3/8H.RyNT~:yAXAOL_fV6kk1`eRF)([%&vfn]yeUbk
2025-01-11 23:11:50 UTC	16384	IN	Data Raw: 84 49 7b d3 b0 b3 f1 4d 18 cf 0e 62 d3 b7 8f 9e e0 68 f3 32 fe 29 e4 b6 b2 dc 3b 81 d6 ce 9b d0 b1 4c b0 1e 14 99 05 ae 5a d0 e5 20 01 e9 02 ca d1 85 fc 49 5e 26 a2 41 1b b2 fd 26 93 f7 43 a5 23 f9 0f 13 21 15 80 93 6f 0b ba 65 ad 8b 2d 4c 6d 54 b5 43 20 e9 87 57 94 67 31 09 3e e1 f0 51 26 38 d5 9d 97 a0 d7 ff 65 d5 36 26 7e a0 22 da c5 b7 1a 8c 30 a4 a7 e0 a7 c7 38 2f c6 14 5b 7b 12 53 17 ac bc 24 ac 72 21 ec d4 74 54 85 9c 8d a6 ff 39 fe 6d fb 31 07 a7 28 61 fa 09 22 e4 85 61 5d 11 f5 4a f3 d9 c4 7e 63 88 54 84 bd 64 99 28 27 b6 73 ea 04 73 41 1c 5d 2a 4d 23 b0 ef 6d 4e 46 9c 2f 87 eb b2 1f c2 7f 2e 8b 04 3e b8 2f 79 99 05 41 01 65 cd 6f f1 d6 88 15 6a 42 36 6e 6b 36 47 9e 5c c5 1e 59 be 83 4b 2b 48 bc 4d 94 ac 21 2d 55 64 f0 98 4c 3c a5 4c 6b 3c 53 ae Data Ascii: I{Mbh2);LZ I^&A&C#!oe-LmTC Wg1>Q&8e6&~"08/[{S$r!tT9m1(a"a]J~cTd('ssA]*M#mNF/.>/yAeojB6nk6G\YK+HM!-UdL<Lk<S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49843	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:50 UTC	638	OUT	GET /appsuite/themes/default/illustrations/error-generic.svg HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:50 UTC	704	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: image/svg+xml Dependencies: false Content-Encoding: br Content-Length: 1640 Date: Sat, 11 Jan 2025 23:11:50 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:50 UTC	1640	IN	Data Raw: 1b 1b 13 00 c4 0c b3 56 4e 12 a9 e6 8d 1b 44 4b 6a b9 aa 5b dc c0 45 fb 49 c0 1b 63 fc ff f6 4b 2d b0 03 76 91 59 97 18 1b a5 f0 f8 e4 7d 98 cd 84 67 83 58 82 f9 25 b8 6f ff 94 d1 f5 54 6d 15 11 2a df fd 42 16 48 57 99 d4 44 36 e3 0a ec 4d 20 10 ad 4d 6c fe c3 9f ff 7c 2b a1 3f c4 d4 9e d9 c0 e4 2f 7f de 8e 7a 9a c2 12 f9 37 9c 4d e5 4d 7b f6 e7 3f df 1e c2 fb 99 af 7f fd ef 76 40 20 f4 12 4b f7 72 fd b8 d3 6f ff 19 d8 6b e9 d3 a3 9e 3f 11 79 f8 56 fe fc eb 8f 5f 7f fc fa 76 5c b3 a4 f9 98 9a 9f ee bb a4 1d f2 cd f7 3f fd b4 01 2d cb a7 7e 8a dc 8e 2b 34 f4 ff fa d5 57 8c ac 17 ab 14 59 d7 d6 89 dc 8e c5 95 7e 7a f7 d7 d7 1f 43 f1 6b f6 29 46 7e 0c 4d 7d c2 77 f1 f7 de e0 2d 1e 1f d9 d0 28 1f 5c fa c5 c8 57 b7 e3 73 3a d5 3d 73 4e c8 dd b4 9b b4 6d 9e 90 Data Ascii: VNDKj[EIcK-vY}gX%oTm*BHWD6M Ml\|+?/z7MM{?v@ Krok?yV_v\?-~+4WY~zCk)F~M}w-(\Ws:=sNm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49846	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:50 UTC	480	OUT	GET /appsuite/service-worker.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://apps.talktalk.co.uk/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:50 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 2115 Date: Sat, 11 Jan 2025 23:11:50 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:50 UTC	2115	IN	Data Raw: 1b 1d 15 00 e4 32 73 f5 e7 f3 6a 34 94 4b 0d 8a 12 26 7b 3a a3 30 1e 08 90 aa 03 2a c7 dc 1c 8a d3 4e b4 18 29 65 c9 1c 6b eb 52 57 7e d8 cf 65 be 2c 43 6d 91 59 69 a5 89 65 f9 66 8c 4f 00 f2 a1 ee 02 88 15 41 05 84 5d 9a 9e ab 74 31 19 ce 5c 81 38 97 b4 13 7e 57 ed 1e 1f 1f c0 31 7c 5e 23 4c 83 96 3b f0 1c e1 66 4f b6 f3 7d e8 48 b8 7a 5e 5f 0b 30 d1 60 f8 64 6c e1 3e 13 f4 3a 6f 9d c8 29 21 c4 90 24 da e3 76 90 5d dd 4e 3a 7d d9 3b 00 56 c4 87 c0 bc 11 8c 07 69 6c 90 cd 4f 41 85 dd a0 a2 33 28 9f 49 60 02 68 bb e9 5e 88 b8 c6 8d 29 de 09 55 99 00 36 51 2f a0 63 24 9e ef 09 57 b3 15 64 45 41 95 83 80 c4 59 8b 38 77 08 68 0f eb ac 55 6d 60 7d 03 83 cd 4b 71 98 bb 34 70 84 2f a0 32 40 a3 06 d0 67 87 44 1b 05 b8 8a 50 25 d7 41 09 bf 82 b5 17 1c 04 23 45 2e Data Ascii: 2sj4K&{:0*N)ekRW~e,CmYiefOA]t1\8~W1\|^#L;fO}Hz^_0`dl>:o)!$v]N:};VilOA3(I`h^)U6Q/c$WdEAY8whUm`}Kq4p/2@gDP%A#E.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49844	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:50 UTC	362	OUT	GET /appsuite/precore.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:50 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1966 Date: Sat, 11 Jan 2025 23:11:50 GMT Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:50 UTC	1966	IN	Data Raw: 1b 3c 11 00 e4 7f 5f a7 ff 9f 9f af 5b 3d 1e 47 4a ae 65 3c 32 a9 d3 92 39 80 8c 49 0d 96 41 89 6d b9 92 cc 28 f8 6a 2d b3 ec c3 46 47 e8 54 ac ea 9e 9e ad 9a d9 db 23 dc 00 e2 2c 5c 10 9f 40 18 20 54 84 ea df 78 22 05 42 ca 7f 0c dd 7f 8a 0f 90 e3 2a d2 b2 a3 80 bf 0c 06 83 a9 b4 62 30 c8 e3 f2 48 94 26 a2 12 f3 28 63 24 26 11 cd 79 ba 5a 7d 3e 38 7a 23 dc cd 63 59 f0 2f 43 90 70 17 fd 21 b7 44 b5 74 ce 08 f2 a9 84 76 8e 1e cd b1 19 1d df 43 42 eb 9f 74 a8 0a e1 1c e5 87 7f 1f ed 02 46 1f 74 2e f9 65 ce aa ba 85 71 76 5b 17 e7 8f ea f4 01 96 14 07 c9 17 9e 53 91 c9 61 2e 9f 64 fc 11 91 88 dc 76 a0 93 cb 79 39 42 10 4f 8a aa 79 26 f5 93 a7 11 5a f9 03 4e 3e ad 85 88 ce fe ed 21 15 57 73 b7 31 e1 ca 07 2b 9e d4 7c 16 17 03 ea 9c d7 bc e3 b9 99 5c 14 1c 7d Data Ascii: <_[=GJe<29IAm(j-FGT#,\@ Tx"B*b0H&(c$&yZ}>8z#cY/Cp!DtvCBtFt.eqv[Sa.dvy9BOy&ZN>!Ws1+\|\}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49848	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:51 UTC	603	OUT	GET /appsuite/favicon.ico HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:51 UTC	681	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: image/x-icon Dependencies: false Content-Length: 4286 Date: Sat, 11 Jan 2025 23:11:51 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:51 UTC	2168	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a2 55 90 ff 99 46 86 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 99 46 86 ff a2 55 90 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 Data Ascii: ( @ UFJJJJJJJJJJJJJJJJJJJJJJJJJJJJFU<<<<<<<<<<<<<<<<
2025-01-11 23:11:51 UTC	2118	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff a1 54 8f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 9c 4a 88 ff 9c 4a 88 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff a1 54 8f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a1 54 8f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 9c 4a 88 ff 9c 4a 88 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff a1 54 8f ff ff Data Ascii: T<<<<<<<<<<<<JJ<<<<<<<<<<<<TT<<<<<<<<<<<<JJ<<<<<<<<<<<<T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49847	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:51 UTC	539	OUT	GET /appsuite/pwa.json HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:51 UTC	687	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/manifest+json; charset=utf-8 Content-Length: 521 Date: Sat, 11 Jan 2025 23:11:51 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:51 UTC	521	IN	Data Raw: 7b 0a 20 20 22 6e 61 6d 65 22 3a 20 22 54 61 6c 6b 54 61 6c 6b 20 4d 61 69 6c 22 2c 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 54 61 6c 6b 54 61 6c 6b 20 4d 61 69 6c 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 61 70 70 73 75 69 74 65 2f 74 68 65 6d 65 73 2f 64 65 66 61 75 6c 74 2f 6c 6f 67 6f 5f 35 31 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 35 31 32 78 35 31 32 22 2c 0a 20 20 20 20 20 20 22 70 75 72 70 6f 73 65 22 3a 20 22 61 6e 79 22 0a 20 20 20 20 7d 0a 20 20 5d 2c 0a 20 20 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 20 22 77 68 69 74 65 22 2c 0a 20 20 22 73 74 61 72 Data Ascii: { "name": "TalkTalk Mail", "short_name": "TalkTalk Mail", "icons": [ { "src": "/appsuite/themes/default/logo_512.png", "type": "image/png", "sizes": "512x512", "purpose": "any" } ], "theme_color": "white", "star

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49849	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:51 UTC	398	OUT	GET /appsuite/ HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:51 UTC	717	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: text/html; charset=utf-8 Dependencies: false Content-Encoding: gzip Content-Length: 4175 Date: Sat, 11 Jan 2025 23:11:51 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:51 UTC	4175	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 3c 4d 93 dc b8 75 77 fd 0a 98 5b aa 9e d9 1a 92 dd f3 a5 51 ab 7b 62 af 2c 3b 4a c9 e5 4d b4 da b2 e3 b5 5d 68 f2 b1 1b 1a 12 a0 01 b0 7b 7a 6d 1f 24 e5 e0 43 6e 71 72 49 e5 90 8b cb be 24 a7 e4 e4 ca 65 7f ca 54 2a 7f 23 f5 40 90 04 d9 ec 9e d6 77 b6 52 da 5a b1 f1 f1 f0 f0 be f1 f0 a0 c9 77 be ff e3 87 5f fc f4 f3 47 64 a1 b3 f4 f2 ce 04 ff 22 29 e5 f3 a9 07 dc bb bc 73 67 b2 00 1a 5f de 21 64 92 81 a6 24 5a 50 a9 40 4f bd 42 27 fe 85 d7 74 2c b4 ce 7d f8 55 c1 96 53 ef 27 fe b3 ef f9 0f 45 96 53 cd 66 29 78 24 12 5c 03 d7 53 ef f1 a3 29 c4 73 38 8a 16 52 64 30 1d 39 00 38 cd 60 ea 2d 19 ac 72 21 b5 33 87 71 a6 19 4d 7d 15 d1 14 a6 a3 60 78 44 32 c6 59 56 64 ad 26 7a dd 6d 2a 14 48 f3 9b ce 52 98 72 71 44 2a e8 7e c2 f4 Data Ascii: <Muw[Q{b,;JM]h{zm$CnqrI$eT#@wRZw_Gd")sg_!d$ZP@OB't,}US'ESf)x$\S)s8Rd098`-r!3qM}`xD2YVd&zmHRrqD*~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49850	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:52 UTC	619	OUT	GET /appsuite/themes/default/logo_512.png HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:52 UTC	679	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: image/png Dependencies: false Content-Length: 47515 Date: Sat, 11 Jan 2025 23:11:52 GMT Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:52 UTC	3568	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 96 00 00 00 01 00 00 00 96 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 00 a0 03 00 04 00 00 00 01 00 00 02 00 00 00 00 00 79 ae c3 6f 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 01 59 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c Data Ascii: PNGIHDRxsRGBeXIfMM*JR(iZyopHYsgRYiTXtXML:com.adobe.xmp<x:xmpmeta xml
2025-01-11 23:11:52 UTC	2796	IN	Data Raw: 01 70 5c 96 97 4f 82 b7 ef da 85 e9 6f cc 40 5a 6a 2a aa 26 56 29 9c 6d a0 61 71 dc 41 f9 10 a7 af 8e 20 20 42 5f e7 e5 eb aa 7d 7b f6 ed 47 9b 96 2d 70 e6 84 f1 a8 53 ab a6 39 a7 0b 7a d1 91 80 b7 04 a8 00 78 4b 8e cf 79 10 68 da a8 21 fe 75 fe 39 78 6e fa ab b8 f7 d6 9b e4 5a 6d a0 75 7d 20 37 0f 90 f5 07 8c 1e 20 15 19 15 02 0f 6c 3c 20 81 bf 13 50 9d 59 df 95 68 a9 9e f5 f7 ef 6b cc 3d 8f 3f fb 02 ce 9d 74 1a aa 57 ab 66 14 6c 0a ff bf a3 e3 99 b2 11 a0 02 50 36 5e bc fb 08 04 d4 2c 59 bf 5e 5d 4c bb e3 56 9c 38 62 28 ee 7b e2 59 cc f9 e6 7b 74 6f d3 14 d1 91 11 a2 03 1c 46 be b4 62 8c 0e 70 04 3f 78 9a 04 9c 4e 40 5e 23 44 4a 37 5a 25 d9 90 67 7f 7a 06 7e 5e f2 0b 2e bc 7a 0a ae bd fc 12 74 6c d7 d6 e0 51 6b 00 85 bf d3 4b 8a 7f d2 4f 05 c0 3f 1c 1d Data Ascii: p\Oo@Zj*&V)maqA B_}{G-pS9zxKyh!u9xnZmu} 7 l< PYhk=?tWflP6^,Y^]LV8b({Y{toFbp?xN@^#DJ7Z%gz~^.ztlQkKO?
2025-01-11 23:11:52 UTC	1398	IN	Data Raw: 3f eb 13 ac de 99 8c ef be ff d9 54 dc aa 74 f8 a2 70 78 1b 3f 3e 17 dc 04 b4 cc 68 d9 49 8c 8b 91 2d 7b 57 a2 8a 98 fe 17 7e bd 04 b7 df 70 3d ea d6 ae 6d 12 a7 f7 d8 72 e8 4b 6a ed 98 01 f5 4b 17 d9 ba f2 86 5b 30 71 fc 44 34 8e 8d 46 d7 96 8d cc c0 5a 5d 67 c0 86 e7 4b 58 7c 96 04 dc 09 50 01 70 a7 c1 df 3e 13 b0 dd 91 6a ee cf 12 45 a0 8e 54 9c 3d 47 0c c0 3d d2 7f 39 e0 f4 f3 30 7b de fc a2 05 51 b4 42 d3 8f 2f 4e 2b 4d 75 ea 4f 4c 74 b4 2c b7 7a 12 36 7e f6 2e ae b9 e0 54 a9 b8 3f 36 db 0b c7 c9 e0 2c 7b 9f 2f 61 f1 59 e7 10 88 97 cd 7b 52 64 80 dd b7 b3 17 e3 fe c7 6e c0 a7 af bd 2c 8b 53 1d 6f ca 91 2d b3 be 96 29 5b fe d5 dc 7f 28 33 13 af bf 3d 13 6d 87 9e 82 57 e6 2c 42 f7 e1 c3 cc 60 c3 5c 19 03 a0 ef 92 7d af 9c 93 03 4c e9 b1 20 40 05 e0 58 Data Ascii: ?Ttpx?>hI-{W~p=mrKjK[0qD4FZ]gKX\|Pp>jET=G=90{QB/N+MuOLt,z6~.T?6,{/aY{Rdn,So-)[(3=mW,B`\}L @X
2025-01-11 23:11:52 UTC	4194	IN	Data Raw: 26 61 c6 67 0b a5 55 36 18 d3 5f 7b 03 fb f6 4b 85 29 ce 9f d6 00 6b e6 ed d3 ab 07 9e 96 16 e0 8b af be 88 1c 54 c2 d2 cf 56 20 4a 5a 80 55 55 28 88 e0 f0 c5 f2 50 94 38 fe a8 10 02 d6 9a a3 7b 44 a8 30 5e fa f9 67 e8 52 bf 0e 66 ca ee 7d d3 6e bf c5 2c 25 ad 02 db b4 fa c5 1a e5 4b ab 5f fd d1 8f 6d f5 6f d9 b6 0d 0f 3d f9 34 06 f5 3b 1e 5b f7 ec 35 65 7a 9f 74 37 ed 4f cf 40 b4 84 45 47 02 81 40 80 25 31 10 72 81 71 d0 6e 50 63 0e d5 85 4f fe dc b3 0f 03 bb b7 43 56 87 6c 5c 72 fe 39 98 7d fe c5 b8 e9 ca cb d1 bd 6b 17 63 ca d7 9b 75 cd 74 5d 36 d5 5b a7 66 5e 5b 69 27 55 af 86 4b cf 3f d7 0c cc 7a e9 b5 ff e1 c5 c7 9f 46 ad ee 3d d1 4e 84 45 4a 46 86 2c 68 94 e7 9a 3a c8 be 01 6f 71 1f f3 e7 54 79 4b 90 7e 7e 5d d0 e7 ab 75 32 ae 64 f3 af b8 e5 ee 3b Data Ascii: &agU6_{K)kTV JZUU(P8{D0^gRf}n,%K_mo=4;[5ezt7O@EG@%1rqnPcOCVl\r9}kcut]6[f^[i'UK?zF=NEJF,h:oqTyK~~]u2d;
2025-01-11 23:11:52 UTC	4194	IN	Data Raw: a0 63 36 96 c8 92 ce 77 3c fa 14 96 ce 7a cf b4 fa 45 b3 c0 96 bd fb 11 21 ca 9b f2 d1 3c a4 23 01 12 28 99 80 f7 b5 55 c9 fe f1 2c 09 84 14 01 15 c6 da a2 8d 8a a8 64 04 8b 0a 98 11 62 0d 78 f5 b5 59 e8 d6 7b 9c d9 f4 67 6f f2 3e d3 a2 35 66 fa c2 41 6d de 42 28 6e 0d d0 56 ed 63 d2 82 9e fe da ff b0 27 33 5b d6 c8 9f 67 fa d6 ab 8a 89 bd 22 77 19 14 0c a6 d5 af 71 a8 5d b5 8a 4c f1 0b c3 a2 59 1f a0 43 ed 9a 78 7f d6 6b b8 5b 16 f4 51 e1 af fc 74 bd 7d 5f 5b fd ba 42 9f 15 fe ca f6 cf 2d 5b 65 26 c1 73 18 3a 70 80 2c ed fc 87 69 f5 a7 66 65 99 2d 98 d5 72 e3 fd a8 02 6f 73 8e cf 91 40 f0 11 a0 05 20 f8 f2 8c 31 ae 00 02 da 92 8c 29 b4 06 a4 67 ed c3 10 59 4a f8 60 7a 3a 2e 3a e7 2c 4c bc f0 32 5c 7b d9 45 e8 dd a3 bb 69 e1 16 14 e8 08 7f d7 b4 36 6f a3 Data Ascii: c6w<zE!<#(U,dbxY{go>5fAmB(nVc'3[g"wq]LYCxk[Qt}_[B-[e&s:p,ife-ros@ 1)gYJ`z:.:,L2\{Ei6o
2025-01-11 23:11:52 UTC	4194	IN	Data Raw: a9 0c 38 28 f3 99 54 12 20 01 12 28 46 80 0a 40 31 20 3c 24 01 12 20 01 12 20 01 27 10 a0 02 e0 84 5c 96 34 ea 0e 70 d5 23 23 b1 3b 2b 07 a9 69 69 26 d5 dc 0c c6 21 99 cf 64 92 00 09 90 40 09 04 a8 00 94 00 25 e4 4e c9 ce 6f ba d7 7b d5 98 28 64 27 1f c4 8e dd 7b 4c 12 75 47 38 3a 12 20 01 12 20 01 67 12 a0 02 e0 80 7c 57 31 af 0a 40 6c 54 24 b0 ed 00 76 ec d8 61 52 ad 7b c3 17 88 65 80 8e 04 48 80 04 48 c0 79 04 a8 00 38 24 cf f3 0f 17 20 5a ba 00 50 2d 0e ab d7 fd 84 f4 8c 0c 84 55 aa 84 c3 a2 18 d0 91 00 09 90 00 09 38 8f 00 15 00 a7 e4 b9 b4 f4 b5 b5 5f b3 59 1d 3c ff e5 62 fc f2 db ef 26 e5 3a 36 80 8e 04 48 80 04 48 c0 79 04 a8 00 38 24 cf b5 bf 3f 2b 37 0f 4d 92 aa 02 6b 7f c3 97 8b be 36 0a 41 64 44 04 ad 00 0e 29 03 4c 26 09 90 00 09 b8 13 a0 02 Data Ascii: 8(T (F@1 <$ '\4p##;+ii&!d@%No{(d'{LuG8: g\|W1@lT$vaR{eHHy8$ ZP-U8_Y<b&:6HHy8$?+7Mk6AdD)L&
2025-01-11 23:11:52 UTC	4194	IN	Data Raw: bd c9 ed 61 7b dd 9e 56 bf cc b3 6e 61 99 6b 85 cf eb ef bf 39 f5 af 30 12 f6 59 9b 63 d6 3f 0b da 86 67 a2 50 18 0f 39 57 f8 f4 df 7c 0e f4 13 36 e5 5a 86 c3 2b 89 d1 56 4e 14 a6 ca 44 5d 93 7b 58 ca 95 96 2f 2d 5e de a6 53 fd 3c d2 bb 62 91 fa fa ae 04 3a 6b a7 c5 8f 0a 40 19 72 dc bc 74 52 f9 a8 40 8c 90 17 51 2b 7c 7d 21 f5 a5 29 30 95 52 19 3c 0b a2 5b b3 73 f3 90 af e9 0e a2 38 db ca 2c 26 22 42 84 ee 61 a4 65 66 e1 40 56 0e f6 e7 e4 4a e5 29 57 e5 4f f3 af 46 54 14 6a c4 c5 20 36 3a 4a 2a cf 02 e4 48 5a cb a2 f0 68 be 47 4a 18 5a 1e b2 f3 72 91 9c 9e 81 03 d9 39 48 cb cb 77 d1 92 eb 71 11 e1 a8 11 13 8d aa b1 12 4e 64 24 72 f3 f3 91 27 9f b2 84 e3 4f f4 1a 67 0d 5b cb 6d 25 89 b7 2d cb 72 5a 9c f9 e7 cf e0 02 c0 af 30 c3 3c 37 af 6c 79 1b 00 11 37 Data Ascii: a{Vnak90Yc?gP9W\|6Z+VND]{X/-^S<b:k@rtR@Q+\|}!)0R<[s8,&"Baef@VJ)WOFTj 6:J*HZhGJZr9HwqNd$r'Og[m%-rZ0<7ly7
2025-01-11 23:11:52 UTC	4194	IN	Data Raw: 56 86 34 95 c2 1f 9f a7 d6 69 8b 5f f6 5e f0 47 cb 49 bb 67 74 93 22 59 e8 15 5b 64 dc 86 1d 40 56 96 56 9d 07 82 20 3c 50 93 b9 99 f5 50 d8 8d f7 cd f2 15 98 78 dd 1d e8 36 ec 44 1c 90 8d ad fc b4 dc 42 f9 92 91 72 67 94 d7 08 5d 8e dc d5 8d e3 53 80 ff f4 2e 48 99 d1 e5 7d ed b8 01 2d f2 65 75 5a be b4 ec b9 06 01 96 f5 69 de 5f 51 04 fc 50 b2 2a 2a ea fe 0f 57 0b be 6e 8f 8a 16 9d b1 7c f5 5a 4c 3c 65 9c ab 4e 96 82 ed 6f a7 da b9 d5 d0 fd e1 b7 be 80 65 ad e4 5d c9 72 a5 cd c6 47 07 b6 e9 27 79 ff 01 fc e7 f5 ff e1 e6 29 0f a1 fd c0 f6 46 11 32 fd a6 46 22 fa 23 c6 e5 e7 87 2a 2a b5 65 79 d3 f5 db 77 19 65 c6 97 90 8e 94 f3 ca cb 0c 24 13 cf f7 ee db 6f 2a bf 32 2b 8b b6 a6 b5 4c 8f 14 58 19 12 a0 5e 98 35 0b 64 eb e3 df 36 6f 81 0e 7c ab 52 b9 b2 b1 Data Ascii: V4i_^GIgt"Y[d@VV <PPx6DBrg]S.H}-euZi_QPWn\|ZL<eNoe]rG'y)F2F"#eywe$o*2+LX^5d6o\|R
2025-01-11 23:11:52 UTC	4194	IN	Data Raw: 97 1f c5 82 69 4b a9 55 a1 2d 14 62 ae f0 ce e5 8e 80 13 00 72 c7 a8 50 f8 50 73 90 7a 52 66 41 97 fd 34 0b 4f df 72 25 fa f4 38 32 58 b6 78 9c 5b f7 ab 48 b5 a8 ea ba db ee c2 f8 6f 67 18 55 a1 46 0d 45 dd 55 e1 89 87 93 bf e4 c8 ff 92 f3 f0 f0 88 db cd 6a 74 31 9b 12 ec 00 65 c8 29 3b a7 0e 54 9d a9 ec 33 94 e6 88 eb f2 8b 2e c4 05 57 9e 8e 5f 53 d7 1a 8d 42 f6 21 b3 8b f1 d0 bd 97 86 22 91 e7 68 8c 9b bb 18 ff bc f4 0a 9c 41 b5 bf 9c 18 c2 a1 56 f9 87 53 6a 61 f9 0f 62 2d 86 d4 b2 79 33 dc 73 d5 a5 d8 45 73 c7 7b 59 4f 25 f5 3e 9c 48 e2 d8 8f 65 b4 bb 39 35 b7 80 8b 4c b5 0d 33 dc 42 89 f9 a7 54 49 c0 84 c5 2b cd c8 7f f2 4b 4f 71 e7 51 3b 53 5a c5 6b a7 53 b2 2a be 04 59 69 01 ac 86 e0 d8 a3 07 e2 a5 17 47 62 da 37 9f 73 d7 45 f9 42 25 5c 65 55 fe fc Data Ascii: iKU-brPPszRfA4Or%82Xx[HogUFEUjt1e);T3.W_SB!"hAVSjab-y3sEs{YO%>He95L3BTI+KOqQ;SZkS*YiGb7sEB%\eU
2025-01-11 23:11:52 UTC	1398	IN	Data Raw: ad 55 d3 8c 76 ca f3 e0 16 ad 7e 96 cd ee 8a b4 e5 2f 17 cd c8 40 b9 28 55 ca b3 2a e8 75 30 26 aa 42 f7 27 9a 4e ce bf c0 ea a3 4f 3f c7 55 97 5e 8c 5e 1c f9 6f e3 02 c3 82 b4 e0 2f 9c ca 14 53 b1 8b 51 b5 3d b0 6d 8d 24 14 4b e1 af 58 23 43 58 46 b5 4e 5a d1 9c bd fc 0a 4f fe e7 bd 77 95 90 a4 3d e5 eb b9 9b 65 2d 17 b6 62 29 a7 a5 fe 48 05 ca 36 44 cb ae 4d d0 bf 75 3d a4 70 51 66 3d 2e d6 6b 58 b7 0e 12 b8 ef 5f 56 01 2b 55 ac 88 2a 09 09 48 ac 5a c5 cb a6 22 8d c0 89 66 e5 cc e2 cf f2 a5 cc 16 da 52 32 09 ec 35 b5 08 62 8a 7f af d1 d0 b0 4a 65 a7 56 a6 ff 32 0b 47 5f 78 35 ea 76 eb 8b b2 a5 4a 70 57 51 41 37 98 14 5f 75 e6 04 80 f8 aa 8f 43 9e 1b 75 46 32 02 23 a7 7e cc db d0 94 d9 51 6a 44 e4 7d 05 55 f8 fb b0 78 4b 06 2d a6 71 44 94 b1 14 ec 25 71 Data Ascii: Uv~/@(Uu0&B'NO?U^^o/SQ=m$KX#CXFNZOw=e-b)H6DMu=pQf=.kX_V+UHZ"fR25bJeV2G_x5vJpWQA7_uCuF2#~QjD}UxK-qD%q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49851	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:54 UTC	701	OUT	GET /appsuite/api/apps/manifests?action=config&version=8.32.1 HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:55 UTC	747	IN	HTTP/1.1 200 OK X-Robots-Tag: none Expires: Sat, 06 May 1995 12:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Type: application/json;charset=UTF-8 Content-Length: 3839 Set-Cookie: appsuite-middleware-route="d39ab719fe553e02"; Max-Age=2592000; Path=/; HttpOnly Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Sat, 11 Jan 2025 23:11:54 GMT Connection: close
2025-01-11 23:11:55 UTC	2529	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 70 72 6f 64 75 63 74 4e 61 6d 65 4d 61 69 6c 22 3a 22 54 61 6c 6b 54 61 6c 6b 20 4d 61 69 6c 22 2c 22 63 6f 70 79 72 69 67 68 74 22 3a 22 28 63 29 20 32 30 31 36 2d 24 79 65 61 72 20 4f 70 65 6e 2d 58 63 68 61 6e 67 65 20 47 6d 62 48 22 2c 22 73 65 72 76 65 72 56 65 72 73 69 6f 6e 22 3a 22 38 2e 33 32 2e 34 33 22 2c 22 74 61 6c 6b 74 61 6c 6b 5f 72 65 64 69 72 65 63 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 61 6c 6b 74 61 6c 6b 2e 63 6f 2e 75 6b 2f 73 68 6f 70 2f 3f 6d 61 69 6c 6c 6f 67 67 65 64 6f 75 74 22 2c 22 70 61 67 65 54 69 74 6c 65 22 3a 22 61 70 70 73 2e 74 61 6c 6b 74 61 6c 6b 2e 63 6f 2e 75 6b 22 2c 22 70 72 65 66 69 78 22 3a 22 2f 61 70 70 73 75 69 74 65 2f 61 70 69 22 2c 22 73 61 6d 6c 50 61 Data Ascii: {"data":{"productNameMail":"TalkTalk Mail","copyright":"(c) 2016-$year Open-Xchange GmbH","serverVersion":"8.32.43","talktalk_redirect_url":"https://www.talktalk.co.uk/shop/?mailloggedout","pageTitle":"apps.talktalk.co.uk","prefix":"/appsuite/api","samlPa
2025-01-11 23:11:55 UTC	1310	IN	Data Raw: 7d 2c 7b 22 69 64 22 3a 22 69 6f 2d 6f 78 2d 61 70 70 63 6f 6e 74 72 6f 6c 2d 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 73 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 7d 7d 2c 7b 22 69 64 22 3a 22 6f 78 61 61 73 5f 63 61 74 63 68 61 6c 6c 5f 64 6f 6d 61 69 6e 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 7d 7d 2c 7b 22 69 64 22 3a 22 67 75 61 72 64 2d 6e 6f 64 65 6c 65 74 65 6f 6e 72 65 76 6f 6b 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 7d 7d 2c 7b 22 69 64 22 3a 22 64 6f 63 75 6d 65 6e 74 5f 70 72 65 76 69 65 77 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 7d 7d 2c 7b 22 69 64 22 3a 22 66 69 6c 65 73 74 6f 72 61 67 65 5f 78 63 74 78 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 7d 7d 2c 7b 22 69 64 22 3a 22 64 61 74 61 65 78 70 6f 72 74 Data Ascii: },{"id":"io-ox-appcontrol-dropdown-links","attributes":{}},{"id":"oxaas_catchall_domain","attributes":{}},{"id":"guard-nodeleteonrevoke","attributes":{}},{"id":"document_preview","attributes":{}},{"id":"filestorage_xctx","attributes":{}},{"id":"dataexport

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49853	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:55 UTC	398	OUT	GET /appsuite/themes/default/illustrations/error-generic.svg HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:55 UTC	704	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: image/svg+xml Dependencies: false Content-Encoding: br Content-Length: 1640 Date: Sat, 11 Jan 2025 23:11:55 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:55 UTC	1640	IN	Data Raw: 1b 1b 13 00 c4 0c b3 56 4e 12 a9 e6 8d 1b 44 4b 6a b9 aa 5b dc c0 45 fb 49 c0 1b 63 fc ff f6 4b 2d b0 03 76 91 59 97 18 1b a5 f0 f8 e4 7d 98 cd 84 67 83 58 82 f9 25 b8 6f ff 94 d1 f5 54 6d 15 11 2a df fd 42 16 48 57 99 d4 44 36 e3 0a ec 4d 20 10 ad 4d 6c fe c3 9f ff 7c 2b a1 3f c4 d4 9e d9 c0 e4 2f 7f de 8e 7a 9a c2 12 f9 37 9c 4d e5 4d 7b f6 e7 3f df 1e c2 fb 99 af 7f fd ef 76 40 20 f4 12 4b f7 72 fd b8 d3 6f ff 19 d8 6b e9 d3 a3 9e 3f 11 79 f8 56 fe fc eb 8f 5f 7f fc fa 76 5c b3 a4 f9 98 9a 9f ee bb a4 1d f2 cd f7 3f fd b4 01 2d cb a7 7e 8a dc 8e 2b 34 f4 ff fa d5 57 8c ac 17 ab 14 59 d7 d6 89 dc 8e c5 95 7e 7a f7 d7 d7 1f 43 f1 6b f6 29 46 7e 0c 4d 7d c2 77 f1 f7 de e0 2d 1e 1f d9 d0 28 1f 5c fa c5 c8 57 b7 e3 73 3a d5 3d 73 4e c8 dd b4 9b b4 6d 9e 90 Data Ascii: VNDKj[EIcK-vY}gX%oTm*BHWD6M Ml\|+?/z7MM{?v@ Krok?yV_v\?-~+4WY~zCk)F~M}w-(\Ws:=sNm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49855	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:55 UTC	363	OUT	GET /appsuite/favicon.ico HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:55 UTC	681	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: image/x-icon Dependencies: false Content-Length: 4286 Date: Sat, 11 Jan 2025 23:11:55 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:55 UTC	770	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a2 55 90 ff 99 46 86 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 99 46 86 ff a2 55 90 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 Data Ascii: ( @ UFJJJJJJJJJJJJJJJJJJJJJJJJJJJJFU<<<<<<<<<<<<<<<<
2025-01-11 23:11:55 UTC	3516	IN	Data Raw: d2 ad c9 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 9c 4a 88 ff 9c 4a 88 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 9a 47 87 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 98 43 84 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 9c 4a 88 ff 9c 4a 88 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff a1 54 8f ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: <<<<<<<<<<<<<JJ<<<<<<<<<<<<GC<<<<<<<<<<<<JJ<<<<<<<<<<<<T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49856	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:55 UTC	367	OUT	GET /appsuite/bundles/boot.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:55 UTC	709	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 829488 Date: Sat, 11 Jan 2025 23:11:55 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:55 UTC	3538	IN	Data Raw: 9b 54 2c 55 29 1d 00 92 61 e3 00 00 f0 fd eb e1 4a b1 f3 1e 15 63 b0 71 00 00 d0 f7 3e fc 13 f9 87 b8 e1 7f 1a 74 1e 07 92 24 5d 77 5d 02 81 37 b3 e9 ee 66 e3 c9 00 87 ea 01 00 20 dd ef 01 50 55 55 55 55 df 3e c0 58 04 b6 c9 ce 2c 7f fb 7c 0b ff 3c ff 7c 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 a0 88 62 0b 8a 28 b6 3d ea 55 58 d5 a3 23 0c 7b 1a c2 ca 7a 14 ee 89 d2 d0 f1 98 7a 0d bb b7 dc a7 7e 1d e7 09 f5 e9 24 c3 be 53 08 2b eb 69 b8 2f 4a 43 c7 33 ea 37 ec fe f2 80 06 75 16 cf d6 80 ce 61 38 70 2e c2 ca 7a 1e 3c 10 a5 a1 e3 f9 1a 34 ec c1 f2 90 86 75 01 2f d4 90 2e 62 38 74 31 c2 ca 7a 09 3c 14 a5 a1 e3 a5 1a 36 ec e1 f2 88 46 75 19 2f Data Ascii: T,U)aJcq>t$]w]7f PUUUU>X,\|<\|(b(b(b(b(b(b(b(b(=UX#{zz~$S+i/JC37ua8p.z<4u/.b8t1z<6Fu/
2025-01-11 23:11:56 UTC	4194	IN	Data Raw: 75 5b 6c 6f c9 62 9c 73 e0 8b 1c f7 a0 9e 2c f5 a7 97 97 84 f0 82 8d 00 08 80 00 20 9a 1c ca ed 21 4b 13 0f 02 0e fe 9b 5b cb 36 87 a1 5e 09 d6 ef 93 c9 e1 0e a6 1e 33 0d fe dd 8f 5f 2c 07 d9 76 df 7e d1 60 28 16 b3 88 5d 30 98 24 5e 7e 97 32 a1 bd db 67 d3 a5 aa 11 d9 2d d7 c5 b4 18 76 92 88 0b df 6f d3 35 ad 5c d7 92 17 b1 d1 7c a2 26 81 9a 7c bc b4 58 1a 1c 1d b7 b1 37 fc 9e e5 ba 42 41 11 44 81 43 0e e9 12 58 9e 48 f3 b6 02 20 00 fe 7c 7f f6 ff fd cf cf d7 96 2e 35 ed 39 99 6c 4b 90 64 77 4f d5 d2 2d 9e 09 09 84 04 c8 53 e7 14 08 5b 36 0a b2 e4 48 32 e0 68 ea fe 5f be f3 ff f9 ef df 4e e3 0e 5c 71 c0 33 9a 18 cb e4 b7 c4 47 db d8 7c 9c 60 9b 60 03 49 8c 30 65 a9 24 15 48 55 a2 6a ca 1f 8c 4e bf 71 ce 7b 9d c6 fb ef b3 33 de eb e6 f9 4f f9 aa ff ff df Data Ascii: u[lobs, !K[6^3_,v~`(]0$^~2g-vo5\\|&\|X7BADCXH \|.59lKdwO-S[6H2h_N\q3G\|``I0e$HUjNq{3O
2025-01-11 23:11:56 UTC	5592	IN	Data Raw: e8 f3 dd 2f af a1 d2 1c 5d 51 50 94 58 63 17 87 f4 eb af fd b1 b2 5f e7 9f 47 95 4b 06 14 43 f0 41 08 1a bb 5d c6 d2 be 47 bb ed ee 04 42 78 8a 88 10 d7 02 6d ec 6d 5f 52 ad 7f ca 5e 8d 53 fe 3f 4b 43 10 2c 0d 04 ab 38 16 c7 ce 6e 43 ad 3e 5f da 96 9b 99 4d 40 08 4c a9 42 80 ed 8d ef a2 26 4e 7a e4 26 c5 60 b3 ed 81 24 f5 ec 63 cc fd 73 6a 6f ec 2f 86 ec e4 c0 da c6 d1 c7 1e e2 b4 54 76 f1 88 35 42 80 ec 6a fe 18 8e fe dc 55 2f 9c 81 58 0f f8 19 26 43 b5 d0 39 6d 62 b9 40 62 cd 53 ff 77 87 c5 70 56 b9 57 23 86 2d 1e 58 de 86 b4 7d 88 96 c6 99 e3 de 1a 0b 21 40 ca 20 69 8b 2e be fa 31 a6 7d 67 7e eb c1 a0 d0 45 da 9e b3 e5 4d 82 fb 18 2e ea 58 21 c6 0c c0 ed de 0f bc f8 fd b1 f2 7b d3 7f 1d 7b a8 08 28 10 39 13 8a dd 4d a6 fa 97 31 ad 9f f3 04 45 64 cc 24 Data Ascii: /]QPXc_GKCA]GBxmm_R^S?KC,8nC>_M@LB&Nz&`$csjo/Tv5BjU/X&C9mb@bSwpVW#-X}!@ i.1}g~EM.X!{{(9M1Ed$
2025-01-11 23:11:56 UTC	1398	IN	Data Raw: 18 85 0d ac b8 21 5f 1a 7c 71 06 1b 9e 6a 5f 3e e5 54 d3 f9 33 d8 4c 6a e0 0d f3 11 c2 09 50 f8 2e 30 23 58 20 f4 87 9b 50 de 14 ac 9d 8f 0b 9d 06 62 d9 a9 f9 7a f1 cc 7f d3 fd 20 5e fc 3e f6 2d f0 4f 23 d0 14 83 e2 49 6e 5e ad 70 aa 98 92 f2 3e f0 53 f6 98 2e 01 08 e4 24 8f ef 00 84 58 ad 00 bd 89 86 74 6f 78 16 18 93 bb f0 a1 50 82 e4 af e3 4c 9c bd 05 7f 15 24 b7 6d 7b 34 f8 4d 17 bc 68 6c 91 cd 66 f3 1a 6b 46 f7 b4 52 b4 58 d0 1f 8e 59 60 70 48 9b 8f 2d 49 5e 0f d1 4f 71 52 2f 60 fb da 96 ff 5c 94 75 b0 f7 d7 9a 81 b8 ce b3 86 b2 81 ca 5d 17 b9 93 6d 3e 42 7b c3 15 57 c1 c4 57 b4 d8 44 82 0d a8 d7 d8 77 e5 18 b8 24 29 aa de e4 c3 e7 84 a7 2f f6 ce 83 7e 36 e8 d5 13 57 39 e7 6a 63 01 f7 b6 91 81 e3 23 ea 4f 37 44 7a 68 c5 3b d7 30 e4 79 ca df 80 be b7 Data Ascii: !_\|qj_>T3LjP.0#X Pbz ^>-O#In^p>S.$XtoxPL$m{4MhlfkFRXY`pH-I^OqR/`\u]m>B{WWDw$)/~6W9jc#O7Dzh;0y
2025-01-11 23:11:56 UTC	2796	IN	Data Raw: 86 47 81 61 0e 48 60 0c 66 c0 6e c3 e9 87 08 12 3c 22 57 a5 3f bf db 45 59 3b e7 29 57 a4 75 65 f9 46 70 89 f4 94 37 1b 01 2b 1d 0f 5e b0 22 58 d5 f4 d5 d6 11 da 69 4c 3a 9b 20 3a 28 24 d1 01 a6 15 ec a8 81 3f 6d 88 c9 7c d1 ba b5 de a2 5c b1 5b 24 a6 99 0d eb 0d 1c d3 2a 52 4c 51 08 bf d5 dc ea 57 ff 9b 68 3b 44 89 a7 b3 28 63 5c 91 67 ba d6 72 b5 1f 9c 87 e1 be 06 a5 9f 20 35 c5 95 6f 33 d8 49 ae 26 02 90 16 ab 85 8e 2b 6b c0 8e b4 30 aa 43 ec 94 c0 20 c6 18 e2 c8 18 09 61 4b e1 10 a6 55 11 4c 04 9c 5f 0c 35 ea c9 fa 31 9a 05 7b 83 ce 9d dd 05 91 67 ee f5 18 cd 17 f5 02 15 0e 6f 33 95 6c 8e 98 b7 c3 ab 27 79 6b 84 48 7d bd e4 40 0a 38 ff d8 d6 4c a4 9d a8 ae 39 37 7d 4f ca ab 23 64 17 a9 73 98 79 c2 41 c2 5a da 81 f2 58 98 c3 16 62 d9 44 97 1c 7a 12 cf Data Ascii: GaH`fn<"W?EY;)WueFp7+^"XiL: :($?m\|\[$*RLQWh;D(c\gr 5o3I&+k0C aKUL_51{go3l'ykH}@8L97}O#dsyAZXbDz
2025-01-11 23:11:56 UTC	5592	IN	Data Raw: b9 f8 ba e7 34 1c f5 bd 70 21 bb 04 02 86 d0 67 f3 0b 99 a8 b6 22 d0 b1 13 98 15 a3 af 77 8a b8 75 c0 2d f6 90 a3 23 2d b4 31 c6 fb bf c7 50 ca 04 08 d7 96 3e c9 43 5a 92 4d 98 d1 0b 9d 06 4e 1a c9 6b a7 99 01 55 6e 4b 7b c2 e3 d1 9b a4 2e 4c 0a e6 d9 92 ff c8 5b d6 46 18 8a 91 0c 66 47 a8 ed 6b 03 1f 73 ba 9a 56 40 68 fd f1 f4 8b d1 f9 92 4e 00 b3 23 ce 12 09 19 04 46 60 55 20 c0 b4 85 f6 87 cb c7 38 c1 ab 1d 44 0a 17 8b 09 2c ea da 6d 09 cf 98 02 35 b1 ad 66 ed b9 57 2a f6 4b 88 ac 92 57 64 32 ac bd 26 ff 96 01 e4 77 00 f7 19 a5 73 d1 6b 39 37 52 05 33 1d 9d 25 a5 50 c4 53 6a 20 7d d9 53 cf d1 5b f2 c0 5d 19 32 1f c5 e0 d8 4a a4 06 0e ac a0 7e 3e db f3 60 a7 b7 6c 5f 59 82 bc 3e 0e d8 d3 38 96 ce 1b 2e 68 00 c2 b7 14 0a 74 e9 8e a9 3c e5 d3 06 68 74 44 Data Ascii: 4p!g"wu-#-1P>CZMNkUnK{.L[FfGksV@hN#F`U 8D,m5fW*KWd2&wsk97R3%PSj }S[]2J~>`l_Y>8.ht<htD
2025-01-11 23:11:56 UTC	2796	IN	Data Raw: 9a 36 5c 76 7c 67 a5 35 6b b1 2d 68 9f 2a 7c 37 18 4e a9 37 9b 16 a9 da 14 6e 4f 7b bf 5a 47 1a 8e 80 16 6e 42 26 86 76 5b 34 4c a2 f5 d8 8d d5 f0 34 a6 91 f7 af 85 9f a2 61 29 fb 07 b2 5b 19 5c 0b 8f 4b 0f 89 e8 93 1a 14 79 3f e2 0a c6 15 c8 7f db 08 03 df 07 c2 35 38 05 fa 45 e9 b8 5e cc 02 30 ff 64 2f 28 7c 24 a2 fe 62 67 85 5d e1 b6 d5 24 00 40 55 5e 1a 06 34 5a 5b e4 b3 7b bd 01 5d d6 a0 ee 54 fd b4 b2 c8 67 65 d7 9d 12 f2 c1 61 3f cd 8e 74 cb b0 d2 85 5a c1 ce 4a dd a3 0a d5 29 8e 9c 10 35 54 bc 0e a0 46 dc 02 63 e8 39 85 d5 4a 07 c6 03 ad 9c e7 96 da 8b ae 66 fc db 4e 10 9d 74 9f 50 9f a1 78 b6 52 43 1a 78 75 41 7e 4d 15 3a f6 15 eb 14 7d 69 2c 97 c2 56 6b f7 87 76 00 6a 64 c3 3b 18 7f f2 b0 73 82 3a 7e d7 53 53 9c 6a de 3f c6 2d ee 91 af 0c ec 8e Data Ascii: 6\v\|g5k-h*\|7N7nO{ZGnB&v[4L4a)[\Ky?58E^0d/(\|$bg]$@U^4Z[{]Tgea?tZJ)5TFc9JfNtPxRCxuA~M:}i,Vkvjd;s:~SSj?-
2025-01-11 23:11:56 UTC	4194	IN	Data Raw: 1c 7d 71 e4 e5 0b 4f f4 e6 57 c3 75 c0 54 ca f6 6a 7b fd 64 27 88 58 74 98 c7 3b a6 d0 0d 2e 4c d1 fe ea b2 82 b5 fa 22 3f 95 32 2a b0 1f 62 93 10 01 71 c5 b7 4a a5 9e 2a cb 69 fb 53 32 95 22 01 5d 28 01 1b e6 c6 84 6b 65 34 3b 16 4c 20 48 7c b0 3c e1 c7 a1 e3 7e 28 86 6c f9 6a 10 8e 9a 0c 8c f1 dc 58 d7 94 98 a2 02 0e 70 41 49 03 19 29 b7 11 85 ae b1 50 fa 05 c2 f8 0e 00 5a 34 4c 52 67 09 99 65 ac 66 8d 11 1e 0a 08 08 36 8e 51 30 90 6a 48 02 98 05 8a 4a c3 2c 63 14 16 d7 9c 61 c0 77 aa 9b 72 d9 21 5d 4b e9 b9 12 c9 5c 43 05 4e 4d 86 cd 86 ee a4 b7 bf 2d 66 83 e7 bf 77 cc bf 98 2d 9d fc be f4 69 86 da 7f 6a ee 59 8d 68 a7 49 3a 08 02 76 48 00 00 13 6e 14 37 f4 64 ab 41 4e 9b 88 d3 34 ae b7 98 fc 35 b3 13 96 e5 0d 37 b9 24 b4 a0 47 da 60 19 05 48 a1 d9 7f Data Ascii: }qOWuTj{d'Xt;.L"?2bqJiS2"](ke4;L H\|<~(ljXpAI)PZ4LRgef6Q0jHJ,cawr!]K\CNM-fw-ijYhI:vHn7dAN457$G`H
2025-01-11 23:11:56 UTC	5592	IN	Data Raw: a6 f0 94 fd 9e fa 89 1c a2 65 3d 9c 13 f8 20 6d 5b e4 a0 a1 22 85 16 65 5c f5 8d 66 49 50 b8 25 74 e2 58 8a c2 ff b2 88 e9 5e 09 46 d4 a7 13 3a f0 a9 bd 38 19 a5 f4 ff c8 01 d5 38 0e e6 29 0d 20 e2 8f 64 c4 b0 bf d8 fc 84 6f 90 ce a7 fd 5f ea dc c2 54 d2 b7 9d d4 3c a2 d4 88 b9 12 22 2c 52 95 3c 5e 46 25 a4 bd 62 91 0a 61 af 4e f4 42 5f f5 36 c5 b0 b5 7e 0e 86 1e ea 25 de 2e 10 25 67 3d b3 02 12 74 11 ac ef 28 51 9e 65 36 5f 34 c4 21 37 79 18 35 78 db ce 43 8d b8 f6 d7 71 91 e5 69 d2 0b 32 91 ce 52 1c cb 9c 89 cf 36 04 2f 8d 69 01 ab 7c 3e 2b d5 f1 1a 40 c4 e8 89 db f2 54 04 80 a4 c1 01 fe 4a 03 84 07 dd c6 50 fd 4a 2f 57 4e 9a 72 15 4e cf aa 9b 0b c2 4e 96 5b 7f 7e 97 b7 39 7d 9c f3 db d3 3e e9 ef f1 3b a1 67 5b fe 7d 10 78 3c b3 6b 75 9f 32 9e 89 45 c0 Data Ascii: e= m["e\fIP%tX^F:88) do_T<",R<^F%baNB_6~%.%g=t(Qe6_4!7y5xCqi2R6/i\|>+@TJPJ/WNrNN[~9}>;g[}x<ku2E
2025-01-11 23:11:56 UTC	1398	IN	Data Raw: b6 f4 8c ed d6 ee 67 de df 53 86 8a 87 48 dc d6 89 9a c5 55 29 75 a3 e6 59 1b 2a 51 88 9f 1f 33 84 df c7 85 86 7e f7 e9 62 9d 9f 10 78 be 25 17 48 2c b9 f3 b8 29 52 5c 72 3b c5 f1 24 5f 8f b9 79 7b 64 f6 7c fa b5 50 8f 99 e4 6b ba 21 42 11 77 b9 cd 17 aa 35 4b c7 52 a6 f3 57 3b c6 ff 26 5a 93 4e f8 63 0d e1 d3 b5 db a3 1b ff a3 0d eb d1 41 a5 07 16 fc dd 2b c6 eb 2a b5 ab 42 b8 19 7b 2d db 15 63 cb 28 b5 38 36 b0 1c 19 d0 45 e7 f3 6f 9d 6f 72 e1 d1 96 57 6c 2b 6b 7c 79 3b 34 02 be a1 85 df 6f 66 dc 9e 04 d9 11 2d 54 fb b1 dc fc e4 ff 7e 31 0f fb 94 fc ed a0 dd 38 6e 97 65 bb 48 ba af 45 e3 93 5d 8c 5e d0 83 47 2c c2 20 90 07 9c 8d 1a f6 fd 8b 1a 3b ed 3e ae 57 fc e3 1f 5a 8b ea e3 3f cf ed 3d 9f fa a5 cb 68 a1 0b 7d fb 1e b7 c5 0d fb a6 33 78 80 a2 f7 3f Data Ascii: gSHU)uYQ3~bx%H,)R\r;$_y{d\|Pk!Bw5KRW;&ZNcA+B{-c(86EoorWl+k\|y;4of-T~18neHE]^G, ;>WZ?=h}3x?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49854	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:55 UTC	379	OUT	GET /appsuite/themes/default/logo_512.png HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 23:11:55 UTC	679	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: image/png Dependencies: false Content-Length: 47515 Date: Sat, 11 Jan 2025 23:11:55 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:55 UTC	13354	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 96 00 00 00 01 00 00 00 96 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 00 a0 03 00 04 00 00 00 01 00 00 02 00 00 00 00 00 79 ae c3 6f 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 01 59 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c Data Ascii: PNGIHDRxsRGBeXIfMM*JR(iZyopHYsgRYiTXtXML:com.adobe.xmp<x:xmpmeta xml
2025-01-11 23:11:55 UTC	9786	IN	Data Raw: 63 de 07 6f 9b be fb c4 f8 38 99 29 70 f4 b1 01 da d7 9f 54 25 01 71 b2 0f c1 7c 19 e1 7f ea d0 e3 b1 7a ed 72 5c 72 de 39 1e c2 5f e3 ef 4b 5f bf b6 fa ad f0 d7 f4 7f b3 6c 05 ae ba f1 16 5c 76 e1 0d 68 20 5d 0e 7d a5 2b 45 b7 6a 4e 11 86 3a d0 cf 97 b0 7c e1 cb 67 49 20 94 09 d0 02 10 ca b9 cb b4 55 28 01 15 5c 6a 09 c8 96 41 79 bd 1b d7 c7 a1 da 35 f0 d4 63 b2 aa df fc c5 78 fa df 57 61 fc 98 d1 88 8f 8b 33 ad 69 6d c7 fb b2 b2 9f 0a 64 3b c8 50 5b d3 83 fa 1f 8f 59 6d 5a c9 94 c1 11 b8 ee aa 2b d0 50 66 0a b4 ac 57 47 76 3b 3c 28 e1 15 48 cb da 73 6d 7c 1d e8 a7 e1 d7 ab 5e 15 0b 56 49 ab 7f eb 4e bc 2e e3 0a 4e 96 31 06 89 62 09 50 67 fd f7 57 ab 5f 5b fe 7b f7 ed c3 9b ef bc 87 29 8f 3c 2f fb 32 03 dd 86 f5 30 16 81 94 43 99 46 89 f2 85 89 89 34 ff Data Ascii: co8)pT%q\|zr\r9_K_l\vh ]}+EjN:\|gI U(\jAy5cxWa3imd;P[YmZ+PfWGv;<(Hsm\|^VIN.N1bPgW_[{)</20CF4
2025-01-11 23:11:55 UTC	13980	IN	Data Raw: f4 1d 8a df 76 ee 31 03 f5 2c 5f 73 d1 cb 7f 6a 45 50 06 7b 56 2d c1 2d 97 9c 87 8e ed da 1a 9f c2 a4 72 d6 8a db a9 4e d3 7e 7c f3 c6 38 20 83 d8 b4 7b 2f 50 cb b0 e6 8f d1 cd 12 62 90 7c 20 05 19 a2 84 aa b3 65 d3 1c fc c3 3f 4d a7 96 af 1a d5 ab 63 d4 60 19 3f b0 23 05 39 a2 f8 e9 5c 7f eb f4 97 79 57 84 03 b2 f3 b1 7f bf 4c 51 15 a7 b7 94 3a 9c c2 b1 00 6d 5b b7 c2 a4 11 fd f1 f3 81 54 e3 07 ff 05 0f 01 2a 00 6e 79 a5 15 82 f6 f9 6e d8 b3 0f 67 5d 3e 1e 1d 0a 2b ce a3 f5 1f bb 79 e1 8c 9f 7f d5 23 01 97 5e ad bc 2a 69 a5 26 2e 37 27 bb 28 7e 65 ad ec 75 80 5c d7 4e 1d e4 f9 03 c6 2c ef 2e dc 35 f9 da d7 a9 65 45 34 00 ec db bf ff af 70 4a d1 4a d3 9b 6d 25 5b 4f ba 28 c6 f7 eb 85 ad cb 97 98 01 8c be 2a 00 fa bc 8e f8 5f bd 7d 37 9a f6 1b 86 3e 3d 7b Data Ascii: v1,_sjEP{V--rN~\|8 {/Pb\| e?Mc`?#9\yWLQ:m[Tnyng]>+y#^i&.7'(~eu\N,.5eE4pJJm%[O(*_}7>={
2025-01-11 23:11:55 UTC	10395	IN	Data Raw: 6e 3a b5 6f 87 77 3f fa 18 93 be f8 c8 ec 6c d1 00 c3 d6 73 04 d1 14 79 af 4e 00 28 e4 24 60 54 6d b5 aa d2 3c 6c c9 3c 95 d4 6b ac 91 49 ed 6a 90 b2 dc 55 a9 5c 19 94 a0 20 21 89 fd f5 11 b7 a0 69 23 6f 15 77 9e 32 54 18 02 fb f8 bf 29 4e 66 bf e9 3d f2 59 e7 db 6f a0 5a b5 f7 c0 0e 78 e1 b1 ff e2 f9 57 5f 33 df 84 6d b8 cc cb 42 25 d5 ab 16 61 69 de fa fa cb 2f c3 c0 53 fa e2 27 9a 85 d6 d4 8c d1 14 59 8f 71 74 d5 68 52 96 f8 e4 b4 a5 51 cf c6 89 23 47 e8 64 85 92 e3 53 c3 c8 83 f1 84 11 87 aa 65 df fe 3f 51 8b 16 34 27 7c f6 39 6e 1e 79 2f 06 0f ec 6f 42 3a a6 13 00 30 87 ea 90 10 b7 8d db 03 7b d2 06 c8 b2 1f e6 e3 de 47 9f c4 86 8d 1b cd 7a 80 48 17 05 fa e9 7e d8 71 43 71 fb 7d 0f e2 db 0f df 45 1d 5a 65 dc c3 85 a2 ae 3e c2 20 68 9f 17 27 00 f8 c0 Data Ascii: n:ow?lsyN($`Tm<l<kIjU\ !i#ow2T)Nf=YoZxW_3mB%ai/S'YqthRQ#GdSe?Q4'\|9ny/oB:0{GzH~qCq}EZe> h'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49857	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:56 UTC	482	OUT	GET /appsuite/manifests HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:56 UTC	702	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/json; charset=utf-8 Content-Encoding: br Content-Length: 12690 Date: Sat, 11 Jan 2025 23:11:56 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:56 UTC	6341	IN	Data Raw: 5b 0b 5c 13 45 b0 71 40 40 db 8c a3 08 36 0e 4c 30 f6 b7 29 8a 60 e3 00 20 0a 5f 01 e8 a1 80 1b 43 c1 51 a7 6f 71 31 31 28 2e ee ec 00 81 d5 95 af d1 ba ab 4c a6 da 3c 57 7d 4c d0 1f 32 39 63 94 fb 16 d9 a2 db 7b e9 56 55 ad 79 dd 88 d3 55 4c f4 08 16 86 70 fe dd c5 a2 d3 77 f1 94 7c 40 39 cd 33 fc 38 13 75 d8 34 03 e0 aa 53 81 27 22 3b 04 52 63 05 da 7f df 4c d7 9f ae f9 ad 3c bc a5 1f 4b ab 1e 05 6b 89 88 41 de c8 d0 e7 df 39 6c 5a b3 26 77 48 a9 8e 48 ad 22 9f c5 47 97 5a e1 ff 9f 6d c6 3a 28 61 d6 44 e3 1b e7 6e 7c ec 21 ea ef 2d cd e3 89 2d 2d b9 96 5a 25 26 72 41 88 07 5f 63 d6 7e df de fc 64 bb eb 18 a0 01 37 f2 2e b4 33 63 21 4b 3f 75 75 55 1f 6b 24 7d 07 69 1d 72 9a fd a7 ba ab 6e b7 f2 a6 90 35 4f a3 cd 00 19 92 4d 81 19 9a 91 99 3f e3 08 b0 3f Data Ascii: [\Eq@@6L0)` _CQoq11(.L<W}L29c{VUyULpw\|@938u4S'";RcL<KkA9lZ&wHH"GZm:(aDn\|!---Z%&rA_c~d7.3c!K?uuUk$}irn5OM??
2025-01-11 23:11:56 UTC	1398	IN	Data Raw: 90 4b b1 a4 ad b2 a7 24 a7 e4 a1 20 23 d0 2c b1 1e 2e b0 e0 97 b5 02 2d 8b ac d9 0d ca ca ca 6d 76 a9 12 c6 ba 9b ac c6 c7 ac 17 6e 76 f6 0b 84 ee 75 de 65 2c 54 6e 84 07 23 fb 1d 05 97 31 91 41 27 7b bc 1e 73 0e 82 20 b7 94 0e 8e 48 a5 ce c6 68 80 ad 2f 44 7f 2d 65 66 56 1f bb ef 12 02 38 47 37 cb 6f 1d 64 d9 9a d0 75 95 33 e5 88 a3 97 ae 35 10 2d cd 93 18 b4 cf c1 bc 7e 74 28 d3 25 d4 4d 52 75 14 1d 69 6e 5e 77 53 a8 bb 2b 6d f4 ce 8e fa f5 8a 92 a1 91 95 5b ea fa e9 27 cb be 5d 50 9d af 45 71 44 1c 8e bd 5c ce 3b e3 33 c8 ac 16 b1 87 f6 c7 bd 32 ae 73 72 bd 4c 63 97 59 9d 2e 9d 56 20 67 d3 fa ad 2a 97 f4 3b ab 0f ec a1 6f 50 39 6b 26 99 61 b4 6e f4 47 0e 34 ec 42 e5 d7 fe 67 1a 20 15 96 ce 3b d7 f7 41 45 ad 77 a9 70 39 39 44 38 23 8e 64 af b7 4e a9 ed Data Ascii: K$ #,.-mvnvue,Tn#1A'{s Hh/D-efV8G7odu35-~t(%MRuin^wS+m[']PEqD\;32srLcY.V g*;oP9k&anG4Bg ;AEwp99D8#dN
2025-01-11 23:11:56 UTC	4951	IN	Data Raw: 93 7f fb b8 68 0c f6 1f 8d c1 3e 43 21 33 69 3c 94 1a 90 40 13 80 c2 54 7f 26 37 19 4c 77 39 3f ed 9c 77 bf 20 a6 eb e9 ad f9 f4 51 92 23 9b 78 ec bb b9 5f 7d 17 bb 0c 89 fb f9 f2 8b be 76 2f f6 4d a4 2e 7d 14 72 ed 98 7e e0 ae 92 a4 bd b3 43 6e b5 a1 d7 86 69 35 94 23 b9 6a 9b be e4 cb 22 23 72 be d7 78 ec 66 0b 0c bb 21 ef 7a d2 f2 eb 2f b8 e4 2b 5d df 0a 56 77 24 e3 39 2e da 83 a6 ae c9 30 96 c1 b1 2f b2 fd 20 dc e5 55 21 b5 30 fe 93 89 e6 3e 1a 39 99 3f a8 be a7 95 6f a8 10 bd 73 2e b7 dc c3 1c 2d 32 d8 bc be 57 8b f6 1e ae 8b 95 a0 3e b8 4f d0 ab e5 1d 05 c3 b3 67 3c 82 2b a1 f9 dd 91 98 e4 36 18 35 23 7c fd c6 81 41 6d 72 3c 71 20 5f 42 b4 7f 94 a6 bb e2 e1 98 ac 89 a6 73 81 79 76 64 4d 18 3e 47 62 83 e6 39 b3 1b c0 c1 11 e2 9b 00 23 fc 1e c8 d0 e9 Data Ascii: h>C!3i<@T&7Lw9?w Q#x_}v/M.}r~Cni5#j"#rxf!z/+]Vw$9.0/ U!0>9?os.-2W>Og<+65#\|Amr<q _BsyvdM>Gb9#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49858	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:56 UTC	485	OUT	GET /appsuite/favicon.svg?version=1703779530 HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:56 UTC	681	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: image/x-icon Dependencies: false Content-Length: 4286 Date: Sat, 11 Jan 2025 23:11:56 GMT Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:56 UTC	2168	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a2 55 90 ff 99 46 86 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 99 46 86 ff a2 55 90 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 Data Ascii: ( @ UFJJJJJJJJJJJJJJJJJJJJJJJJJJJJFU<<<<<<<<<<<<<<<<
2025-01-11 23:11:56 UTC	2118	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff a1 54 8f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 9c 4a 88 ff 9c 4a 88 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff a1 54 8f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a1 54 8f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 9c 4a 88 ff 9c 4a 88 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff a1 54 8f ff ff Data Ascii: T<<<<<<<<<<<<JJ<<<<<<<<<<<<TT<<<<<<<<<<<<JJ<<<<<<<<<<<<T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49859	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:56 UTC	453	OUT	GET /appsuite/api/apps/manifests?action=config&version=8.32.1 HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:56 UTC	654	IN	HTTP/1.1 200 OK X-Robots-Tag: none Expires: Sat, 06 May 1995 12:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Type: application/json;charset=UTF-8 Content-Length: 3839 Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Sat, 11 Jan 2025 23:11:56 GMT Connection: close
2025-01-11 23:11:56 UTC	3839	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 70 72 6f 64 75 63 74 4e 61 6d 65 4d 61 69 6c 22 3a 22 54 61 6c 6b 54 61 6c 6b 20 4d 61 69 6c 22 2c 22 63 6f 70 79 72 69 67 68 74 22 3a 22 28 63 29 20 32 30 31 36 2d 24 79 65 61 72 20 4f 70 65 6e 2d 58 63 68 61 6e 67 65 20 47 6d 62 48 22 2c 22 73 65 72 76 65 72 56 65 72 73 69 6f 6e 22 3a 22 38 2e 33 32 2e 34 33 22 2c 22 74 61 6c 6b 74 61 6c 6b 5f 72 65 64 69 72 65 63 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 61 6c 6b 74 61 6c 6b 2e 63 6f 2e 75 6b 2f 73 68 6f 70 2f 3f 6d 61 69 6c 6c 6f 67 67 65 64 6f 75 74 22 2c 22 70 61 67 65 54 69 74 6c 65 22 3a 22 61 70 70 73 2e 74 61 6c 6b 74 61 6c 6b 2e 63 6f 2e 75 6b 22 2c 22 70 72 65 66 69 78 22 3a 22 2f 61 70 70 73 75 69 74 65 2f 61 70 69 22 2c 22 73 61 6d 6c 50 61 Data Ascii: {"data":{"productNameMail":"TalkTalk Mail","copyright":"(c) 2016-$year Open-Xchange GmbH","serverVersion":"8.32.43","talktalk_redirect_url":"https://www.talktalk.co.uk/shop/?mailloggedout","pageTitle":"apps.talktalk.co.uk","prefix":"/appsuite/api","samlPa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49861	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:57 UTC	516	OUT	GET /appsuite/io.ox/antiphishing/antiphishing-9209b04e.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:57 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1383 Date: Sat, 11 Jan 2025 23:11:57 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:57 UTC	1383	IN	Data Raw: 1b fc 0a 00 e4 7e a9 f9 2f d7 5c 4e 78 b6 c1 df 01 c9 49 97 32 29 ad 69 f5 d7 44 c2 32 2e 48 0f f0 36 99 ff 7f 3f 57 87 84 b4 90 88 50 22 91 58 ef bb f7 3f 66 62 a8 48 fb 2c 12 dd 32 a9 ee 90 16 c1 3f c6 87 f7 55 22 e2 b1 b3 fd f5 3a a2 80 20 9b 13 10 2a 07 53 ad 02 1c b6 18 73 5b 34 c6 6d c7 9c 39 67 3f be be 6f 2f 4c 2d bc 99 27 ec 68 4c b8 19 52 d7 60 44 2f c6 35 0e c5 dd 2e 22 6c 8a 88 72 c1 28 68 b8 28 65 2f 48 53 99 d1 73 5e 4a d8 e6 82 db f9 63 9f 7d bf b1 c1 28 bd 5e f3 a8 36 7a e0 8e 1e 4a 7b ce d1 c0 1d 7a 81 8e 59 c7 ba 8b 4e 65 57 b9 9a 26 f9 f3 03 81 9c 32 ae 0d bf 6c 5c 70 88 c4 f3 83 c0 05 85 47 47 55 c6 ac 53 1f 15 00 a5 1a cf 4c bc 98 f7 9e af 4d 64 0d 69 85 ae 96 d3 b2 79 48 79 d9 48 29 46 01 75 b6 a4 ab a6 1e a6 d8 da e6 62 22 72 87 87 Data Ascii: ~/\NxI2)iD2.H6?WP"X?fbH,2?U": *Ss[4m9g?o/L-'hLR`D/5."lr(h(e/HSs^Jc}(^6zJ{zYNeW&2l\pGGUSLMdiyHyH)Fub"r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49862	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:57 UTC	526	OUT	GET /appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:57 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1306 Date: Sat, 11 Jan 2025 23:11:57 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:57 UTC	1306	IN	Data Raw: 1b a0 0a 00 e4 f2 75 f9 93 df fc 7c 89 a5 9c 14 56 b2 9d 74 3b 7b a4 f1 2a a4 35 9f 5f d0 03 19 9c 01 99 91 e4 6b 46 f3 bf 36 eb 85 4c 48 44 08 6d 75 71 b1 7e b9 bf 73 44 75 2a 96 18 91 38 31 4d 95 b7 44 9f 8e a1 f8 9f a5 a0 11 02 bb ae 6b 75 44 01 3e b6 25 10 e4 8f 50 cd 02 3c 2e 31 e6 68 d0 80 5b 8f 59 73 c5 be 7c 5c b4 e7 a7 76 ce d4 11 6b ea 23 1e 76 29 6b 30 a0 13 fd 1c fb c3 e9 14 18 36 4e 44 a9 50 e4 33 5c 14 b6 27 a4 a9 cc 68 d9 2f 1e 96 b9 20 38 3f ec bd 6b 0f 8d 37 4a ef f7 3c a8 83 3e 72 4b e7 d6 ae b3 74 e4 16 9d 40 cb 1a cb ea 8b 46 45 5d da 8a 06 e9 f3 05 9e ac 32 76 e3 bf 35 61 c7 21 12 73 07 81 1d f9 d9 59 99 31 cb 54 67 39 40 31 8c 6b 06 4e d4 ad e3 7b 13 d8 9a f4 80 8e 96 59 b1 3e a7 b4 58 4b 29 7a 03 65 76 a4 cb 75 b5 1b b7 c3 e6 60 22 Data Ascii: u\|Vt;{5_kF6LHDmuq~sDu81MDkuD>%P<.1h[Ys\|\vk#v)k06NDP3\'h/ 8?k7J<>rKt@FE]2v5a!sY1Tg9@1kN{Y>XK)zevu`"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49864	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:57 UTC	499	OUT	GET /appsuite/io.ox.dumpster-f4301a77.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:57 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1553 Date: Sat, 11 Jan 2025 23:11:57 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:57 UTC	1553	IN	Data Raw: 1b 4c 0c 00 e4 ff bd 2d ff f4 b7 3f 5f 78 67 83 27 a0 b6 7b 32 77 9c cd d9 b7 34 2f f2 14 95 3e 25 1e 20 53 6d 64 6a ad d5 97 f4 f5 33 a6 25 12 89 8d 59 b9 e5 fc 45 14 55 69 26 d1 b5 92 2a 43 82 8a 3f 46 7b 7f 2c c3 43 42 e1 c1 d2 dd 1a ed 51 80 8f cc 11 08 b9 f9 50 4d 02 3e 5e 62 cc 61 b8 1e dc 6a c4 ea 3f e4 f1 ee a2 fd 7b 72 e2 f4 28 f2 11 d6 91 cf ba 14 d5 3c 70 cf ea 39 f6 87 d5 2a 20 6c 2e 22 b6 19 23 9f a6 2c 95 3d 22 85 65 46 43 bd 38 58 e6 82 8c f3 eb 6e 5c 39 33 5e 4b 35 9d d2 20 67 6a 4e 2d ee 48 7b c8 e2 98 5a ee 19 b7 c4 58 32 ba a8 95 8e 32 9b 63 a3 fd 7c 8b 43 2b b5 1d fa 67 13 26 14 22 f1 e4 c0 78 85 ae bb 95 65 cc 22 f9 56 02 90 9a f1 40 c3 b3 51 e9 e8 54 07 32 40 65 d0 f9 a2 93 0e 76 b0 9d 0e 84 60 b5 80 22 13 54 d9 20 ef c6 4e c6 e6 74 Data Ascii: L-?_xg'{2w4/>% Smdj3%YEUi&C?F{,CBQPM>^baj?{r(<p9 l."#,="eFC8Xn\93^K5 gjN-H{ZX22c\|C+g&"xe"V@QT2@ev`"T Nt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49863	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:57 UTC	506	OUT	GET /appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:57 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1310 Date: Sat, 11 Jan 2025 23:11:57 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:57 UTC	1310	IN	Data Raw: 1b 94 0a 00 e4 7e a9 f9 2f d7 5c 4e 78 bc 05 e2 01 c9 49 97 32 eb 94 d2 b5 ca 9a 2f 61 59 f9 36 e8 01 5b 65 ae 96 ce c6 c7 45 28 24 18 89 44 da dd bb 3f be a7 d4 4a 2d c5 85 48 64 ed e3 51 36 83 8a 8c 0e 71 75 f7 aa 8c 5a 0a 81 d7 c9 a0 3d 0a 08 b3 8e 40 51 1a a0 da 04 38 ac 62 cc db a3 01 b7 1b b3 e6 9c 7d ff f2 4e 5e 9e 5a 7b b3 4a b8 a2 31 e1 b6 48 53 83 11 bd 18 e7 38 12 77 bb c8 b0 19 22 ca 45 45 61 c3 45 d9 f6 8a 34 a5 19 03 fb 25 c1 6a 2e 18 ce 3f fb e4 dd b6 0f 46 e9 cd 86 47 b5 d5 03 b7 74 d4 da 7b 96 06 6e d1 0b b4 ac b7 6c 75 d5 ab 5c 55 b6 a6 49 fe fa 42 20 ab 8c 6d c3 cf 3e ae 39 78 e2 f5 41 e0 29 85 c5 61 15 31 9b d4 87 05 40 39 8c 77 26 5e ac 9c e7 1b 13 59 43 7a 40 77 cb 79 d9 1c 51 5e 36 52 8a b1 81 26 6b d2 55 53 17 13 d7 d8 dc 4c 44 f6 Data Ascii: ~/\NxI2/aY6[eE($D?J-HdQ6quZ=@Q8b}N^Z{J1HS8w"EEaE4%j.?FGt{nlu\UIB m>9xA)a1@9w&^YCz@wyQ^6R&kUSLD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49865	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:57 UTC	502	OUT	GET /appsuite/minimalapiconsent.0e902e90.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:57 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1325 Date: Sat, 11 Jan 2025 23:11:57 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:57 UTC	1325	IN	Data Raw: 1b aa 0a 00 e4 5a 66 56 fb cd e7 85 db 73 c0 ba 41 72 72 4b e9 71 8e e3 d6 68 c7 ac 8c 6d 52 32 52 01 9a 4b e6 6a e9 ec 0b 1d a1 22 c1 48 24 d2 ee df fe 65 2e a5 f7 a3 f5 ee 9e 48 64 af 16 65 33 a8 48 06 27 e2 ca ad 75 4a 48 5e b7 5d 8f 23 0a 88 b0 0d 41 41 4d 0f d5 0a c0 7e 13 63 3e 8b 06 dc 36 cc 99 0b f6 fd cb bb f4 f2 d4 d6 9b 75 c2 35 8d 09 77 55 78 83 11 bd 18 d7 38 1a f7 fb a8 b0 59 22 ca 45 43 11 c3 45 d9 f7 bc 34 85 19 dd c7 a5 81 cd 5c 50 9c df f7 c9 77 3b 1b 8c d2 6d cb a3 da e9 9e 3b 3a e9 ed 29 47 3d 77 e8 05 3a 66 1d 5b 5f 75 28 d7 95 ab 69 92 bf de 13 c8 29 e3 56 e1 a7 8d 5b 0e 96 78 76 10 38 50 58 1c 57 1e 93 ab 8f 0b 80 72 1a 4f 4c bc 58 77 9e b7 26 b2 86 f4 84 2e 97 f3 b2 39 a1 bc 6c a4 14 63 07 dc 96 74 d5 d4 d5 d4 5b 6c ce 27 22 77 74 Data Ascii: ZfVsArrKqhmR2RKj"H$e.Hde3H'uJH^]#AAM~c>6u5wUx8Y"ECE4\Pw;m;:)G=w:f[_u(i)V[xv8PXWrOLXw&.9lct[l'"wt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49860	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:57 UTC	499	OUT	GET /appsuite/uk.co.talktalk-e4375173.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:57 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1139 Date: Sat, 11 Jan 2025 23:11:57 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:57 UTC	1139	IN	Data Raw: 1b f1 08 00 e4 5a 6a 4e be f9 bc b8 75 19 88 01 c9 49 97 8e 94 d6 64 e5 4c e4 b5 8c 0b 68 00 5d d3 f1 c7 7e f3 8e a4 91 14 a0 44 6a e4 a1 2a 49 bc 89 56 1a f7 43 44 bc e9 3c f5 b5 ad 2d 6f 1d cd e6 52 43 2a b0 e4 79 72 b4 4a cc 18 4e 88 0e 64 93 98 33 41 66 fd 4e 36 4e 96 0d 25 cb ba fa e3 8a d1 1d 91 e8 e5 36 40 59 4b f6 5e 0d 60 12 76 f1 66 25 4a 96 0b 05 7c ea d0 8a df c9 f9 c8 3d e0 50 fa f7 88 0f a1 35 2b f1 b4 6f 83 f8 ee a0 00 e0 f0 f9 d3 77 f1 cc a3 fe 03 e2 b9 8e 88 5a 2a be e2 a9 09 3b 70 e5 bf 17 f9 1d 91 df 21 f3 3b c5 ed 9b 22 bf 97 e7 c0 e1 bd 0e 51 fc db fa 5b 9d 87 02 be 9b 83 8b 9b 0b f2 d2 1b 0c 68 c9 71 04 12 e4 3a ea 71 7b d0 66 3f 6a c3 f0 10 78 2d 46 17 80 f6 e4 d5 53 a1 b4 6b 9e f8 8e fa 00 05 a8 e0 0a 72 bc 5b a1 30 f3 fb 56 ac 5c Data Ascii: ZjNuIdLh]~DjIVCD<-oRCyrJNd3AfN6N%6@YK^`vf%J\|=P5+owZ*;p!;"Q[hq:q{f?jx-FSkr[0V\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49868	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:58 UTC	493	OUT	GET /appsuite/io.ox/office/main.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:58 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1150 Date: Sat, 11 Jan 2025 23:11:58 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:58 UTC	1150	IN	Data Raw: 1b a1 08 00 e4 ff bd aa 7f fa db 9f 2f 7a b3 e0 19 90 d4 6e a9 64 2b db e3 38 4a 97 e2 87 55 19 cb ca 00 1d 20 53 e5 a7 fd 5c bd 0f 1e ba 79 24 c4 d5 c8 3b f9 53 f1 86 58 5b 44 2c 8e 85 88 59 f4 4c e9 44 42 44 87 30 dd dd c0 43 da 8b 41 ba be 5a f4 d0 5b 1f 3b 5d b0 10 ab 21 85 71 a7 34 fb a5 17 45 5f 80 42 1a df 61 43 d7 b4 0b b6 ff d0 38 56 18 48 01 28 4c c6 05 3b b0 aa 91 65 ec b0 f2 0a 52 18 be cb 59 fc 99 bd 7f 8f 92 24 fd f4 6d 30 e6 58 be 2b 9b aa c7 d6 9d ae 28 56 0f e8 52 75 08 46 19 74 fe f7 c3 d7 f4 d3 17 74 3c 2c 06 f1 fb 38 46 f8 20 bf 2c 08 50 b8 a8 9c 67 3f a7 fe 2d c6 42 0a a3 bd 61 8e be e7 c3 bd d3 8b 6d a0 75 d1 a4 00 27 7c 41 5e 1b 62 85 aa ee 6f cb c7 bf d0 f7 36 f9 aa 77 8b a1 65 cf 39 e2 ef e2 f0 6d 03 85 92 8b 59 07 2b 20 05 af 9e Data Ascii: /znd+8JU S\y$;SX[D,YLDBD0CAZ[;]!q4E_BaC8VH(L;eRY$m0X+(VRuFtt<,8F ,Pg?-Bamu'\|A^bo6we9mY+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49867	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:58 UTC	505	OUT	GET /appsuite/uk.co.talktalk/preload-helper.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:58 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 514 Date: Sat, 11 Jan 2025 23:11:58 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:58 UTC	514	IN	Data Raw: 1b a7 03 00 64 35 d5 fe fd bc 64 75 91 00 a3 a6 df 18 6c f7 af fb d6 14 62 fa ac 43 2a 59 a3 d3 d6 fc 5f 13 75 a4 43 fd 51 77 47 ab 6e 6f b0 01 0f 33 c5 07 7e 6f aa 73 8f 89 f1 f2 21 b0 8e d2 a1 0f 99 d8 b1 a3 00 bf 1a 58 57 94 47 aa 56 34 75 29 c6 9c 1b ca e4 d6 28 2f 2f ea d3 c3 55 b9 3a 33 24 e9 2b 3d f1 54 e9 b9 49 76 26 47 6b 9c c6 38 e0 e6 d9 cd b0 09 66 5e a2 21 7f 06 6c b1 a7 b2 fc 9a d1 ee 97 ac d3 5c 50 9e bf bb 4b e1 d1 65 31 76 b3 01 67 1e ed 08 c2 47 68 8f 84 3b 10 5a 23 89 72 5e 3d 1d 0d ed d3 0f f9 c5 cd f2 be 52 58 8c f8 2e 7f 71 65 00 1d 89 9b 6b a4 9e cb f1 fe 8f 27 66 d6 af fd 95 d6 6d 37 1e 34 6b ec 43 82 8d 14 95 d8 76 68 ff e2 b0 4d 47 bc 6c d3 62 81 13 40 56 60 fb 23 fd 6a 26 05 6e b6 33 b3 ec ed 41 53 e6 39 18 88 49 3e 15 74 13 e5 Data Ascii: d5dulbC*Y_uCQwGno3~os!XWGV4u)(//U:3$+=TIv&Gk8f^!l\PKe1vgGh;Z#r^=RX.qek'fm74kCvhMGlb@V`#j&n3AS9I>t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49870	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:58 UTC	492	OUT	GET /appsuite/io.ox/guard/i18n.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:58 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 5093 Date: Sat, 11 Jan 2025 23:11:58 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:58 UTC	2142	IN	Data Raw: 1b 32 50 44 54 b3 7a 00 14 21 c3 dc ff 9b ad ec e5 da 97 d3 2f d5 12 3b 25 0b 48 76 d1 ae 65 a7 56 d7 96 8d 22 20 ac 8f 51 63 24 8f f4 0d b8 89 df 9b cb 75 ee d7 b9 7e e9 97 55 87 fe de 39 f2 10 12 21 b7 47 91 ab a3 6b 82 a6 6a 46 d2 a6 1f 36 c4 d0 dd 6f 34 1a cd df 75 88 72 0c f0 02 60 0e 19 9d 8d 6c 6c c2 0f da cc dc 8c 48 5e 76 04 d9 1f 43 3f d7 cc 75 28 0f dc 88 5e fd 26 7d 0c 5b ff 93 02 32 a7 0c 01 ad 0e 92 3b ce d3 10 0a 91 a4 26 f3 cb 34 0e 52 d3 a7 ff 35 55 1a d5 1c 39 c5 e9 11 82 b1 50 1f e7 9e 93 2d ee 55 73 fd b4 44 b9 d3 e5 b9 57 d5 4f b8 4c 42 1e 30 dc 5f 27 a9 8d 65 3d c4 51 4a b2 9f 67 8f 55 51 cd 17 dc 5c ef 66 80 3b 29 cb b7 ab d9 31 1e 32 26 51 c8 73 42 a7 5b 56 ff 4e 24 03 9d 64 e3 41 26 59 82 c6 c9 26 6d bf 31 29 6a e5 75 52 1b c6 59 Data Ascii: 2PDTz!/;%HveV" Qc$u~U9!GkjF6o4ur`llH^vC?u(^&}[2;&4R5U9P-UsDWOLB0_'e=QJgUQ\f;)12&QsB[VN$dA&Y&m1)juRY
2025-01-11 23:11:58 UTC	2951	IN	Data Raw: 8c 2a 0d 74 61 86 80 63 00 01 ab eb fd 53 a5 3e 9d 1b 20 42 c8 83 87 87 c4 00 8c 2a 61 37 45 db e7 d2 2d 68 a4 64 81 21 b6 6d 9a 03 32 b6 18 7b 67 ee 58 b9 a7 93 2e 8b e5 ae 24 d8 ec 9e 26 f9 a5 03 4d 0e 8e 8d bf ec dd d2 04 a6 6c ba 01 c6 21 23 1d 18 eb de 9e 0e 40 3d ad 3a c6 6c 05 64 c8 98 6b 91 62 ca e2 34 73 8f e1 19 cb 01 f5 ab 49 d6 6f dd 9a 5e b8 63 39 67 90 4d 2a 01 8a 1b 1f 99 d4 76 6d 8f e6 ad 81 2a 26 4e b2 fb c0 98 e3 b0 74 be 65 98 a4 24 58 0e b1 1e a2 5f a4 f2 88 bd eb 1e 54 20 f4 03 0f 3e cd 99 e4 8b e0 77 4e e0 f7 0d 03 7d 84 a4 3a 01 f9 64 06 3d 54 07 92 ba 10 45 64 14 78 50 c6 b7 37 26 28 57 d0 eb b6 96 e8 e5 6a 97 78 dc 29 b5 b3 98 4e 92 3d 8e c2 5c 1f 75 89 06 4c 4b e1 f8 9b 05 38 9b fd 6c 5f 6a dc ad bc ca 09 7d 80 a0 19 25 d5 19 a2 Data Ascii: tacS> Ba7E-hd!m2{gX.$&Ml!#@=:ldkb4sIo^c9gMvm&Nte$X_T >wN}:d=TEdxP7&(Wjx)N=\uLK8l_j}%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49866	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:58 UTC	503	OUT	GET /appsuite/io.ox/antiphishing.6fb231d8.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:58 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Length: 193 Date: Sat, 11 Jan 2025 23:11:58 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:58 UTC	193	IN	Data Raw: 69 6d 70 6f 72 74 7b 44 20 61 73 20 69 2c 67 20 61 73 20 6f 2c 64 20 61 73 20 72 2c 67 20 61 73 20 73 7d 66 72 6f 6d 22 2e 2f 61 6e 74 69 70 68 69 73 68 69 6e 67 2f 61 6e 74 69 70 68 69 73 68 69 6e 67 2d 39 32 30 39 62 30 34 65 2e 6a 73 22 3b 65 78 70 6f 72 74 7b 69 20 61 73 20 44 69 63 74 69 6f 6e 61 72 79 2c 6f 20 61 73 20 64 65 66 61 75 6c 74 2c 72 20 61 73 20 64 69 63 74 69 6f 6e 61 72 79 2c 73 20 61 73 20 67 74 7d 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 61 6e 74 69 70 68 69 73 68 69 6e 67 2e 36 66 62 32 33 31 64 38 2e 6a 73 2e 6d 61 70 0a Data Ascii: import{D as i,g as o,d as r,g as s}from"./antiphishing/antiphishing-9209b04e.js";export{i as Dictionary,o as default,r as dictionary,s as gt};//# sourceMappingURL=antiphishing.6fb231d8.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49869	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:58 UTC	505	OUT	GET /appsuite/io.ox.blackwhitelist.811cfd8a.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:58 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Length: 217 Date: Sat, 11 Jan 2025 23:11:58 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:58 UTC	217	IN	Data Raw: 69 6d 70 6f 72 74 7b 44 20 61 73 20 69 2c 67 20 61 73 20 6f 2c 64 20 61 73 20 72 2c 67 20 61 73 20 73 7d 66 72 6f 6d 22 2e 2f 69 6f 2e 6f 78 2e 62 6c 61 63 6b 77 68 69 74 65 6c 69 73 74 2f 69 6f 2e 6f 78 2e 62 6c 61 63 6b 77 68 69 74 65 6c 69 73 74 2d 64 66 34 66 35 33 30 38 2e 6a 73 22 3b 65 78 70 6f 72 74 7b 69 20 61 73 20 44 69 63 74 69 6f 6e 61 72 79 2c 6f 20 61 73 20 64 65 66 61 75 6c 74 2c 72 20 61 73 20 64 69 63 74 69 6f 6e 61 72 79 2c 73 20 61 73 20 67 74 7d 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 69 6f 2e 6f 78 2e 62 6c 61 63 6b 77 68 69 74 65 6c 69 73 74 2e 38 31 31 63 66 64 38 61 2e 6a 73 2e 6d 61 70 0a Data Ascii: import{D as i,g as o,d as r,g as s}from"./io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js";export{i as Dictionary,o as default,r as dictionary,s as gt};//# sourceMappingURL=io.ox.blackwhitelist.811cfd8a.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49871	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:58 UTC	490	OUT	GET /appsuite/io.ox.dumpster.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:58 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Length: 175 Date: Sat, 11 Jan 2025 23:11:58 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:58 UTC	175	IN	Data Raw: 69 6d 70 6f 72 74 7b 44 20 61 73 20 69 2c 67 20 61 73 20 6f 2c 64 20 61 73 20 72 2c 67 20 61 73 20 73 7d 66 72 6f 6d 22 2e 2f 69 6f 2e 6f 78 2e 64 75 6d 70 73 74 65 72 2d 66 34 33 30 31 61 37 37 2e 6a 73 22 3b 65 78 70 6f 72 74 7b 69 20 61 73 20 44 69 63 74 69 6f 6e 61 72 79 2c 6f 20 61 73 20 64 65 66 61 75 6c 74 2c 72 20 61 73 20 64 69 63 74 69 6f 6e 61 72 79 2c 73 20 61 73 20 67 74 7d 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 69 6f 2e 6f 78 2e 64 75 6d 70 73 74 65 72 2e 6a 73 2e 6d 61 70 0a Data Ascii: import{D as i,g as o,d as r,g as s}from"./io.ox.dumpster-f4301a77.js";export{i as Dictionary,o as default,r as dictionary,s as gt};//# sourceMappingURL=io.ox.dumpster.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49874	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:59 UTC	502	OUT	GET /appsuite/io.ox/externalcontentpopup.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:59 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1358 Date: Sat, 11 Jan 2025 23:11:59 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:59 UTC	1358	IN	Data Raw: 1b 08 0b 00 e4 7e 6f ab de fe ce cf 17 96 7d c0 5a 10 9d b9 93 ae 39 ae 2b 9d 6d d9 88 8a 07 e4 01 f6 15 b9 5a 4e fb 4a 22 c1 48 24 d2 ee ed fe d1 4a 4d 2d c5 7d 90 91 b5 8f 8f b2 4c 14 32 3e fe 31 3e bc af 12 11 8f 9d ed af df 11 05 c4 d9 9c 80 50 df 99 6a 1d e0 62 8b b1 a0 45 63 dc 4e cc 99 0b f6 e3 eb fb f6 da d4 32 98 79 c6 8e fa 8c db 21 0d 0d 26 0c a2 5f e3 44 da ef 13 c2 16 88 68 2c 18 c5 0d 17 95 ec 25 69 2a 33 fa ce 4b 0f db 5c 70 3b 7f ed 73 f0 5b 1b 8d d2 9b 0d 4f 6a ab 3b ee e8 a1 b4 d7 1c 2d b8 c3 20 d0 31 eb 58 77 d1 ad ea 6a d7 d0 60 fc fc 44 24 a7 8c 9b c5 5f 36 2d 39 44 e2 e5 41 e0 8e e2 a3 e3 3a 63 36 68 8e 4b 80 4a 8d 57 06 41 cc 7d e0 1b 93 58 4b 5a a1 9b e5 a4 6a 1f d2 b8 6a a5 14 bd 80 06 4b d2 75 db 0c d3 2d 6d 73 35 11 b9 a3 23 3e Data Ascii: ~o}Z9+mZNJ"H$JM-}L2>1>PjbEcN2y!&_Dh,%i*3K\p;s[Oj;- 1Xwj`D$_6-9DA:c6hKJWA}XKZjjKu-ms5#>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49875	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:59 UTC	495	OUT	GET /appsuite/io.ox.gdpr.db34b815.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:59 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Length: 187 Date: Sat, 11 Jan 2025 23:11:59 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:59 UTC	187	IN	Data Raw: 69 6d 70 6f 72 74 7b 44 20 61 73 20 69 2c 67 20 61 73 20 6f 2c 64 20 61 73 20 72 2c 67 20 61 73 20 73 7d 66 72 6f 6d 22 2e 2f 69 6f 2e 6f 78 2e 67 64 70 72 2f 69 6f 2e 6f 78 2e 67 64 70 72 2d 63 39 38 32 37 37 64 64 2e 6a 73 22 3b 65 78 70 6f 72 74 7b 69 20 61 73 20 44 69 63 74 69 6f 6e 61 72 79 2c 6f 20 61 73 20 64 65 66 61 75 6c 74 2c 72 20 61 73 20 64 69 63 74 69 6f 6e 61 72 79 2c 73 20 61 73 20 67 74 7d 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 69 6f 2e 6f 78 2e 67 64 70 72 2e 64 62 33 34 62 38 31 35 2e 6a 73 2e 6d 61 70 0a Data Ascii: import{D as i,g as o,d as r,g as s}from"./io.ox.gdpr/io.ox.gdpr-c98277dd.js";export{i as Dictionary,o as default,r as dictionary,s as gt};//# sourceMappingURL=io.ox.gdpr.db34b815.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49872	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:59 UTC	506	OUT	GET /appsuite/io.ox/mandatorywizard.894649b8.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:59 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1332 Date: Sat, 11 Jan 2025 23:11:59 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:59 UTC	1332	IN	Data Raw: 1b bb 0a 00 e4 f2 75 f9 93 df fc 7c 89 e5 8a 36 ac 64 a7 34 3b 0b 29 a5 fb fc 1e 3a 10 e0 8c 91 19 49 be 66 f4 ff ef e7 aa a6 b0 c8 4a 24 12 e3 93 fb 3f df 27 aa a8 48 1b 4b 1c a2 6b 25 d5 1d 12 91 8c ca 70 e8 06 1e d2 b4 57 be 77 39 a2 80 80 58 33 14 14 77 50 2d 01 da 6d 31 e6 6a c8 82 db 42 38 7b 2e 7e 7c 7d 9f 5e 98 de 78 bb 4a b4 e2 21 d1 b6 4a 75 4b 91 3c 0e 6b 1c 8c fb 7d 54 d8 24 33 e7 d8 50 c0 4a 2c fb 9e 95 e1 30 a3 f3 b8 44 d8 e6 82 c5 f9 6d 9f 7d b7 6d 82 d5 a6 6d 65 d4 5b b3 93 8e a7 bd 3d e6 78 27 1d 79 24 27 1a 27 56 17 6d ca 55 e5 6a 1e e5 cf 77 04 76 da ba 65 f8 d5 c4 8d 04 4b 3c 3d 20 f5 1c 66 c7 95 c7 ac 56 1f 17 00 e5 34 1e 19 79 5c 75 5e b6 36 8a 96 cd 84 2e 56 37 cb 76 ca 79 d9 2a 85 43 07 d5 36 6c aa b6 ae 26 6c b0 39 9b 99 dd d1 91 Data Ascii: u\|6d4;):IfJ$?'HKk%pWw9X3wP-m1jB8{.~\|}^xJ!JuK<k}T$3PJ,0Dm}mme[=x'y$''VmUjwveK<= fV4y\u^6.V7vy*C6l&l9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49873	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:59 UTC	499	OUT	GET /appsuite/io.ox/minimalapiconsent.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:59 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Length: 182 Date: Sat, 11 Jan 2025 23:11:59 GMT Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Access-Control-Allow-Credentials: true Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:59 UTC	182	IN	Data Raw: 69 6d 70 6f 72 74 7b 44 20 61 73 20 69 2c 67 20 61 73 20 6f 2c 64 20 61 73 20 72 2c 67 20 61 73 20 73 7d 66 72 6f 6d 22 2e 2e 2f 6d 69 6e 69 6d 61 6c 61 70 69 63 6f 6e 73 65 6e 74 2e 30 65 39 30 32 65 39 30 2e 6a 73 22 3b 65 78 70 6f 72 74 7b 69 20 61 73 20 44 69 63 74 69 6f 6e 61 72 79 2c 6f 20 61 73 20 64 65 66 61 75 6c 74 2c 72 20 61 73 20 64 69 63 74 69 6f 6e 61 72 79 2c 73 20 61 73 20 67 74 7d 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6d 69 6e 69 6d 61 6c 61 70 69 63 6f 6e 73 65 6e 74 2e 6a 73 2e 6d 61 70 0a Data Ascii: import{D as i,g as o,d as r,g as s}from"../minimalapiconsent.0e902e90.js";export{i as Dictionary,o as default,r as dictionary,s as gt};//# sourceMappingURL=minimalapiconsent.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49876	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:59 UTC	501	OUT	GET /appsuite/io.ox/mx-checker.e099b1ce.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:00 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1333 Date: Sat, 11 Jan 2025 23:11:59 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:00 UTC	1333	IN	Data Raw: 1b cf 0a 00 e4 7e af 66 ef 7e f3 f3 85 67 1b 9c 07 24 25 5d ca ac 53 4a d7 ea ce 44 c6 b6 5c c0 0f d0 36 99 ab a5 b3 af 64 64 62 24 12 69 f7 76 ff 48 2b 8d 5a 8a 7b e2 40 f6 a6 51 36 83 8a 44 a2 43 1c ba 75 0c 2b 04 ae fd de e3 88 02 22 6c 41 40 a8 d9 b9 6a 05 e0 6e 89 31 5f 87 c6 b9 6d 98 35 17 ec fb 97 77 e3 e5 a9 a5 37 f3 84 73 1a 12 6e 77 a9 6d 30 a2 17 c3 1c 47 e3 7e 1f 11 36 4b 44 b9 60 14 31 5c 54 b2 e7 a5 a9 cd e8 ae 97 06 96 b9 e0 7e fe d8 27 ef b6 5d 30 4a 6f 36 3c aa ad de 71 4b a7 d2 9e b3 b4 e3 16 bd 40 cb 3a cb e6 17 1d aa 79 6d 1b 1a e5 cf 0f 04 b2 ca d8 59 f8 d9 c5 25 87 4c 3c 3f 08 ec 29 4c 4e ea 8a 59 ab 39 29 01 2a 33 9e 19 79 31 77 9e 6f 4c 64 2d 69 83 ae 96 45 d5 9e 52 5e b5 52 8a 41 40 ad 25 e9 ba 6d 76 53 2f 7d 73 31 11 d9 e3 63 3e Data Ascii: ~f~g$%]SJD\6ddb$ivH+Z{@Q6DCu+"lA@jn1_m5w7snwm0G~6KD`1\T~']0Jo6<qK@:ymY%L<?)LNY9)*3y1woLd-iER^RA@%mvS/}s1c>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49877	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:11:59 UTC	502	OUT	GET /appsuite/io.ox.unsubscribe.abf79198.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:11:59 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1622 Date: Sat, 11 Jan 2025 23:11:59 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:11:59 UTC	1622	IN	Data Raw: 1b a2 0e 00 e4 ff bd aa 7f f2 db 9f 2f 72 b3 e0 19 b0 94 d9 4a bd 71 c7 d8 8a 5e 4d 24 6c 53 cb e0 03 28 4b e6 af 35 7d 1b 65 eb 5a 23 2b 2b ed db dd bb 1e 87 a9 44 9b 12 6c 52 ba 14 90 54 27 aa 53 c9 a4 50 59 50 11 b6 df a9 7c 1b 43 73 2f 83 80 08 78 fe b2 69 dc 1e 05 44 c9 1a 81 50 5e 9b 6a 16 f0 f9 12 63 7e c5 b5 71 5b 10 ab af c9 f7 2f ef ca bf 27 17 5e cf 12 5f e1 90 f8 ac 0a ad 79 e4 9e 0d 7d 5c 10 37 9b 98 61 2b 10 31 63 8c a2 9a b2 52 f6 84 0c c2 0c 56 2f 19 96 b9 e0 ed fc b4 4f de ad 4c d0 52 75 1d 8d 72 a5 d6 d4 e2 b9 b4 db 2c ce a9 e5 9e 71 4b 8c 25 ab bb 36 e5 aa b2 35 6e 67 9f 57 04 b4 52 db 36 fc 34 71 41 21 12 0f 0f 8c 37 18 26 07 d5 88 49 d5 07 05 40 d9 8c 5b b6 3d 9b 39 4f 3b 1d 49 8f a6 41 27 8b bc ec cf 31 2b 7b 21 d8 20 80 5a a0 a9 fa Data Ascii: /rJq^M$lS(K5}eZ#++DlRT'SPYP\|Cs/xiDP^jc~q[/'^_y}\7a+1cRV/OLRur,qK%65ngWR64qA!7&I@[=9O;IA'1+{! Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49878	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:00 UTC	496	OUT	GET /appsuite/switchboard-CyjQ4kEt.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:00 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1098 Date: Sat, 11 Jan 2025 23:12:00 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:00 UTC	1098	IN	Data Raw: 1b 62 08 00 e4 ff a5 ea eb b5 97 13 f9 59 50 03 b2 32 3a 44 c9 58 4b 51 91 22 63 59 19 e0 07 64 aa 4c bf 9f ab ef df 96 16 12 e2 09 4a 5c 8d cf a7 e2 cd ae 2f 22 16 c7 0f 11 b3 e8 99 d2 89 a0 c3 98 cd 5e 66 e0 81 76 76 82 dc 8d d6 b2 83 dc 46 d9 ee 80 99 d8 09 19 1c 8f b5 61 37 7c 19 f4 0b 28 b8 f1 1d 76 e8 9b 76 c0 d6 5e 1b cf 2e 2c 64 00 14 4e 8e 2f d8 ba d3 89 6c 61 1b 55 d0 90 41 f1 5d ce fa 3f d9 dc 1c 4a d3 6c f1 77 af cc 31 bd 08 76 a6 df 5a bf 01 bf 96 52 d6 ff b3 d4 cf d2 45 49 7a fe a0 f2 81 fd 50 fa b7 58 07 19 1c ad 1e 6e a2 bf 9b 87 ab bb 07 4b 40 83 60 ce 00 3b 98 8b dc 9b 62 17 ba 7a f1 a3 e5 06 fd 6d d3 df 66 c5 73 0b fb 70 08 7f 65 23 ba 04 14 e2 ab 62 e9 6a 83 0c 82 fe 08 09 7c ad 02 8d 62 1a 09 e2 41 72 64 50 cb 50 3b b6 69 6a 8b dd 52 Data Ascii: bYP2:DXKQ"cYdLJ\/"^fvvFa7\|(vv^.,dN/laUA]?Jlw1vZREIzPXnK@`;bzmfspe#bj\|bArdPP;ijR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49879	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:00 UTC	489	OUT	GET /appsuite/io.ox.godaddy.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:00 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1516 Date: Sat, 11 Jan 2025 23:12:00 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:00 UTC	1516	IN	Data Raw: 1b f7 0b 00 e4 7f d3 59 6f ae 73 39 89 9f 26 6d 64 61 76 bb 3d 3f a4 91 49 81 b4 e6 78 8d 16 0b f0 ac 23 f1 24 d1 c6 e8 6a 4d ed 67 aa 22 7c 09 8d 8c ac b4 7b 77 1f 04 2a 91 02 72 80 92 40 02 a0 53 99 aa ca da ea 10 87 6e 1b c5 0a 81 6b bf 77 3b a2 00 07 99 21 10 0a 66 ae 9a 03 7c b2 c4 98 a9 e2 ca b9 79 44 ab 25 79 ba ef 6f af 4c 4c ad 1a 07 5e 60 13 f8 e7 90 58 c5 3d 77 ac 99 63 a7 df 6c 3c c2 06 11 31 66 8c 1c 8a b2 54 f6 a4 24 b6 19 5d f5 12 c0 32 17 6c 3f 3f ef d6 9a cf ca 29 21 eb 9a 7a f1 29 67 54 e3 81 b4 bb 34 4e a8 e6 8e 71 4d 2a 4d 8a 8b a2 b4 c8 74 8e ad f8 f9 1a 8b 5a 28 5d ba 97 ca 4f 29 64 e2 d1 81 f1 1a 6d 77 2f ab 98 31 f9 5e 02 90 9a 71 47 cb b1 b1 b1 b4 56 9e 8c 50 1a 74 7a d4 49 47 07 18 a7 a3 28 62 8d 80 98 39 ca 6c 94 0f e3 cf 7d 73 Data Ascii: Yos9&mdav=?Ix#$jMg"\|{wr@Snkw;!f\|yD%yoLL^`X=wcl<1fT$]2l??)!z)gT4NqMMtZ(]O)dmw/1^qGVPtzIG(b9l}s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49882	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:00 UTC	498	OUT	GET /appsuite/io.ox.iol-smb-a7782bdb.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:00 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1078 Date: Sat, 11 Jan 2025 23:12:00 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:00 UTC	1078	IN	Data Raw: 1b 9b 08 00 e4 6f af ea f5 37 3f 5f e4 79 1c d4 80 a4 a4 53 2a 1d 6b 29 6a 8c ed 67 99 54 01 1d a0 2c 85 89 cb 69 cb 13 2d c1 14 7f cc e6 18 34 b6 8d a9 59 f7 80 8d 8d d9 22 0f b3 34 1d e2 bc 0b 75 1a 32 b1 1f 56 62 ce 78 4c 74 20 5d 0a 7c 07 c8 cc 38 e9 2e a4 71 9d 08 a7 ab ac 57 1f 5f 4c dc 11 8b 5e 9e 04 a8 94 e4 1c d4 08 88 70 8a 37 1b 51 30 1d 94 90 84 42 5c a4 66 17 ba ef 8d 41 28 62 34 00 07 5d 3c 22 3e 84 d6 6c c4 d3 a1 0d e2 bb 83 12 80 c3 e7 4f df c5 33 8f 68 08 89 e7 3a a2 d3 5a f1 15 cf 4c d8 81 b6 fd 7b 91 df 17 c5 6d 52 dc 2a f3 7c 91 17 79 0e 1c de eb 10 c5 4c ec 9f 70 1e 4a f8 e3 86 10 70 4b 9e a2 d5 ab 8d ee 3a 4d 1e 5c 1e d8 72 d5 f0 38 e3 d0 04 1d a6 87 c0 15 0c e5 03 15 e4 89 ef a8 4f a1 04 a8 1a 81 43 0d 91 a2 c2 f3 a0 84 88 17 31 33 Data Ascii: o7?_ySk)jgT,i-4Y"4u2VbxLt ]\|8.qW_L^p7Q0B\fA(b4]<">lO3h:ZL{mR\|yLpJpK:M\r8OC13

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49880	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:00 UTC	512	OUT	GET /appsuite/uk.co.talktalk/translations-369373da.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:00 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Length: 319 Date: Sat, 11 Jan 2025 23:12:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:00 UTC	319	IN	Data Raw: 69 6d 70 6f 72 74 20 74 20 66 72 6f 6d 22 2e 2e 2f 6f 78 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 63 75 73 74 6f 6d 69 7a 65 20 61 73 20 69 7d 66 72 6f 6d 22 2e 2e 2f 67 65 74 74 65 78 74 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 67 74 20 61 73 20 6f 2c 64 69 63 74 69 6f 6e 61 72 79 20 61 73 20 72 7d 66 72 6f 6d 22 2e 2e 2f 75 6b 2e 63 6f 2e 74 61 6c 6b 74 61 6c 6b 2d 65 34 33 37 35 31 37 33 2e 6a 73 22 3b 69 6d 70 6f 72 74 22 2e 2f 70 72 65 6c 6f 61 64 2d 68 65 6c 70 65 72 2e 6a 73 22 3b 74 2e 73 65 72 76 65 72 43 6f 6e 66 69 67 2e 74 61 6c 6b 74 61 6c 6b 26 26 28 6f 2e 70 67 65 74 74 65 78 74 28 22 70 6c 75 67 69 6e 73 2f 70 6f 72 74 61 6c 22 2c 22 49 6e 62 6f 78 22 29 2c 6f 2e 70 67 65 74 74 65 78 74 28 22 61 70 70 22 2c 22 4d 61 69 6c 22 29 2c 69 28 22 69 6f 2e Data Ascii: import t from"../ox.js";import{customize as i}from"../gettext.js";import{gt as o,dictionary as r}from"../uk.co.talktalk-e4375173.js";import"./preload-helper.js";t.serverConfig.talktalk&&(o.pgettext("plugins/portal","Inbox"),o.pgettext("app","Mail"),i("io.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49883	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:00 UTC	507	OUT	GET /appsuite/io.ox/guidedtours/i18n-ORsXC62r.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:01 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1126 Date: Sat, 11 Jan 2025 23:12:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:01 UTC	1126	IN	Data Raw: 1b 7d 08 00 e4 6f af ea f5 b7 3f 5f f4 65 41 0d 48 6a b7 54 b2 95 ed 71 8e 3a 15 15 a9 36 96 95 01 3e 20 53 e5 ff d6 5a 9d 7d a4 23 64 f3 48 88 57 eb 9f 99 dd 3d 15 6d 88 b5 8b d8 eb cb 86 88 88 66 4a 27 12 22 3a 84 e9 ee 06 1e d2 5e 0c d2 0d cd 44 0f bd 0d b1 d3 39 0b b1 19 52 18 af 94 66 bf f4 92 e8 33 50 48 e3 3b 6c e8 da 6e ce f6 ef 5b c7 0a 03 29 00 85 c9 b8 60 07 56 35 b2 8e 1d 36 5e 41 0a c3 77 34 8b 3f b1 77 ef 50 92 a4 1f bf 0e c6 1c cb 0b b2 a9 7a e8 dc e9 92 62 79 8f 2e d5 0a c1 28 83 ce ff be ff 92 7e fc 8c 8e 87 c5 20 7e 17 c7 08 1f e4 97 05 01 0a 17 8d f3 ec e7 d4 bf c5 58 48 61 b4 37 cc d1 b7 7c b8 77 7a b1 0d b4 2e 86 14 e0 84 2f c8 6b 63 ac 50 cd dd 6d fd f8 17 fa d6 25 5f f4 6e 31 8c ec 29 47 fc 5d 1c a1 6d a0 50 72 39 eb 60 03 a4 e0 d5 Data Ascii: }o?_eAHjTq:6> SZ}#dHW=mfJ'":^D9Rf3PH;ln[)`V56^Aw4?wPzby.(~ ~XHa7\|wz./kcPm%_n1)G]mPr9`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49881	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:00 UTC	487	OUT	GET /appsuite/ai-4qA6hrTY.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:01 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=UTF-8 Content-Encoding: br Content-Length: 832 Date: Sat, 11 Jan 2025 23:12:00 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:01 UTC	832	IN	Data Raw: 1b cd 06 00 e4 5a aa 4d be f7 79 11 d2 d8 33 20 fb 77 27 66 af b4 a6 e8 2c 46 46 25 05 3c b0 a9 84 8b b9 d5 11 b9 ce 75 22 25 ae d6 9f a3 62 4d b4 2d 22 16 61 21 62 56 1a a5 73 d8 08 36 ed 84 3e 78 dd 1a dc f5 f5 98 79 6e 7d ea ed 46 99 98 c5 6b ce 25 37 fc 85 fa 98 c6 79 a3 9e 5d 8c 49 fd 08 cf 66 7e f9 fc 43 3d 8f 2e 75 71 f5 c2 92 db 70 50 df dc e5 9c 16 db 1f 6c 22 f5 c3 e5 35 21 2e 48 07 08 22 fc 81 a8 fa e1 ec 39 1f e1 bc 58 c5 b2 dd a3 20 ac 6c 70 51 bd f4 7d c0 0f a1 3e ed ec 22 da 33 85 04 71 9a 4d 14 f3 ff 12 f8 d9 06 f3 af 97 4b a4 ba 2f 26 24 1f ce 84 95 04 f9 cc 11 73 b8 2c 0b 85 85 cb 97 ab 03 21 9a a5 7a d8 2e e0 78 1f 1e 37 4f d5 3f ab 6e db 6a 94 c2 cb 28 67 c0 47 39 1e 1e 0a 87 b3 5a 81 be ba 84 d4 b8 c5 a2 15 79 2e ed 22 5e 86 79 c3 96 Data Ascii: ZMy3 w'f,FF%<u"%bM-"a!bVs6>xyn}Fk%7y]If~C=.uqpPl"5!.H"9X lpQ}>"3qMK/&$s,!z.x7O?nj(gG9Zy."^y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49884	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:01 UTC	495	OUT	GET /appsuite/io.ox/announcements.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:01 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1052 Date: Sat, 11 Jan 2025 23:12:01 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:01 UTC	1052	IN	Data Raw: 1b 31 08 00 e4 ff a5 ea eb b5 97 13 f9 59 d0 00 b2 7b 6a 45 c9 58 4b 51 31 95 b1 ac 0c f0 03 3c 55 7e b8 77 69 83 02 6f 5b 82 a9 be e6 1c 36 a6 7d 6c 51 f4 fb 96 ae 89 dd e2 13 0f 0f f4 74 54 cb b3 97 d6 c1 43 66 2b 06 e9 fa 2a d9 42 6f 7d ec a4 cf 42 34 43 0e c2 5a 36 d3 93 b1 7f 0e 8e 37 d1 15 4c 5b eb c6 b6 02 55 76 60 e3 06 28 a4 f8 13 76 11 ea a6 cf 76 c7 75 60 f7 0e 72 00 0a d7 57 f7 6c cf 9b 26 c7 d9 be 8e e6 4d a8 ec d6 4c 9a 70 7a 7b 7f e7 fe 00 28 9c eb 10 d9 8f a2 7f c5 79 c8 e1 72 e7 e2 00 fd 39 b8 d8 39 39 df 04 9a ba 26 07 c4 70 b4 b8 af 5d cd ee 8d fe ba ca a0 8e 62 d6 96 0a c8 21 9a 59 cc 60 aa 13 68 b5 92 4a b0 36 8b 43 08 65 03 e3 d9 81 ad 1c 46 d3 21 87 5f ff 9a 18 7c da e7 d8 eb 4f 86 b8 8c 00 39 d8 d1 eb a2 41 fe 14 e8 c5 bf 4b 6c d1 Data Ascii: 1Y{jEXKQ1<U~wio[6}lQtTCf+*Bo}B4CZ67L[Uv`(vvu`rWl&MLpz{(yr999&p]b!Y`hJ6CeF!_\|O9AKl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49885	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:01 UTC	498	OUT	GET /appsuite/io.ox/contactsdumpster.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:01 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 908 Date: Sat, 11 Jan 2025 23:12:01 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:01 UTC	908	IN	Data Raw: 1b 4e 07 00 e4 5a 6a 4e be f9 bc b8 bd 06 31 20 29 e9 62 36 a5 35 9d 32 52 6c 2c eb 0a 78 60 dd 8e e3 ef e7 56 47 8b 94 b8 da 98 bc 3f 54 bc 89 b6 45 ec fa 58 24 9a 86 42 a6 74 22 21 62 83 ba 4e 2f a9 3c b5 38 93 ee 06 a6 98 20 b7 01 f5 66 a6 4c b4 42 0d c4 7a b5 e5 53 a8 3f 07 07 15 ad 50 c6 3d 8a b3 d5 c5 32 92 0d 6a 35 82 04 2f df 51 1f e2 30 ce d4 d3 d5 10 d5 77 0f 35 80 84 cf 9f be ab 67 c1 e6 39 a9 9e f7 64 1f e2 54 5f ed 7a 8c 9b ff de 2c 6f 56 aa bc a5 aa fb ec 66 59 df b9 39 29 ab b2 04 09 ef fb 48 ea e3 e9 75 3e c8 40 21 d0 d5 80 1c 8a 92 be 37 ae be db fe 42 0f c4 50 b4 d4 ee 96 3a 62 64 b7 54 40 d4 60 d8 90 4a 8e 40 6d 27 27 55 55 cd 6d 50 2f dc d4 e3 33 1b 6a b8 ff 7f 24 ab b3 ce 57 a1 3f 57 68 93 c4 b5 ce 2d ef 8b 47 bc 69 d8 cd df 91 3b b6 Data Ascii: NZjN1 )b652Rl,x`VG?TEX$Bt"!bN/<8 fLBzS?P=2j5/Q0w5g9dT_z,oVfY9)Hu>@!7BP:bdT@`J@m''UUmP/3j$W?Wh-Gi;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49886	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:01 UTC	492	OUT	GET /appsuite/io.ox/loginproxy.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:01 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1050 Date: Sat, 11 Jan 2025 23:12:01 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:01 UTC	1050	IN	Data Raw: 1b 4e 08 00 e4 ff a5 5a 6f ae 73 39 91 9f 06 63 40 d2 b4 dd 15 4b 4a 6b 8a 16 6b 65 2c 93 02 7e 40 aa 86 1f ee 67 ba a0 e0 d9 da 26 38 d5 b7 cc b0 48 fb b8 e2 a4 71 c5 35 1e 9f f8 e1 01 9e 8a 35 2d bd 88 8c b1 ac 5c 37 86 74 bd ad ec a1 b6 5e b6 3b 62 21 9a a0 04 61 0d 7b d7 93 b2 7f 0e 8e db d1 62 16 f1 b1 a9 77 ef 1f ec c5 00 85 fc be c3 0e 43 67 46 6c ed a5 0b ec c2 41 09 40 e1 e4 f8 82 ad 7b 5d e1 18 db 68 a2 7e 69 2d 3b d3 af 26 ec fe f7 7b fe bd 60 f9 0f 56 fc 8d be e7 e5 af ef 83 bc c8 73 a0 70 d0 84 c8 7e 30 fd d7 9c 87 12 ae cc 63 74 1e 9d f8 a6 9d 44 f4 ef eb 53 04 3e 6d 5b 09 9c fd ad 19 b6 25 a0 43 95 5e c2 48 ab 8d 4d bb 9c 67 97 cd 2e 74 f3 7c 94 42 65 44 ac d0 65 50 42 d4 ef 31 03 be 56 a0 f9 4f 22 e1 df 28 0e 69 94 8c b5 67 9b b6 75 a8 4f Data Ascii: NZos9c@KJkke,~@g&8Hq55-\7t^;b!a{bwCgFlA@{]h~i-;&{`Vsp~0ctDS>m[%C^HMg.t\|BeDePB1VO"(iguO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49887	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:01 UTC	489	OUT	GET /appsuite/io.ox/popkeep.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:02 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 909 Date: Sat, 11 Jan 2025 23:12:01 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:02 UTC	909	IN	Data Raw: 1b 44 07 00 e4 5a 6a 4e be f9 bc b8 bd c6 c6 80 a4 a4 8b d9 94 d6 74 4a a4 d8 58 d6 15 f0 00 6e 47 f8 fb cd 55 6c d1 12 ad cd 0f bc 8f 73 ec 36 66 23 ba ae 23 21 ba 56 28 66 4b 37 1a a2 36 a8 eb f4 92 ca 53 8b 33 e9 6e 70 4a 09 72 1b 94 af 66 d2 44 1b d4 40 6c 90 5b 3e a5 fc 73 70 50 d1 3e b9 74 4b 2f 0b e4 6a 04 01 ce bd 23 df 85 61 9c c9 c7 ab 21 c8 af 0e 6a 00 01 1f 3f 7c 95 4f bc 49 6f 4a 3e ed a3 79 88 53 7e 36 eb 31 6c fe 7b bd bc 5e c9 f2 86 ac ee b2 eb 65 7d eb fa a4 ac ca 12 04 bc ed 43 94 9f 4a af 77 5e 06 f6 5c 5f 03 60 28 4a fa de 84 fc 6a fa 0b 3d 10 3a f1 52 b7 5b ea 88 47 b3 8d 05 32 8d 9a 0d a0 14 84 cf 4e 72 52 55 cd dc 78 f9 cc 4e 1d 2c 73 a1 86 bb ff c6 68 75 ce f9 ca f7 e7 12 64 d2 b0 d6 db e5 7d 89 40 d7 35 bb f9 3b 71 cb f6 88 55 a8 Data Ascii: DZjNtJXnGUls6f##!V(fK76S3npJrfD@l[>spP>tK/j#a!j?\|OIoJ>yS~61l{^e}CJw^\_`(Jj=:R[G2NrRUxN,shud}@5;qU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49888	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:01 UTC	491	OUT	GET /appsuite/io.ox/tetpopups.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:02 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 910 Date: Sat, 11 Jan 2025 23:12:01 GMT Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:02 UTC	910	IN	Data Raw: 1b 48 07 00 e4 5a 6a 4e be f9 bc b8 bd 06 31 20 29 e9 62 36 a5 35 9d 12 29 36 96 75 05 3c b0 6e 47 f8 fb 39 b5 a9 93 35 b2 d6 f5 c3 fb 29 02 3b 40 17 59 3a 9f 46 a8 c2 80 85 99 9e f1 93 13 72 36 a8 eb f4 92 ca 53 8b 33 76 37 3e c5 04 b9 8d ab 57 33 65 a2 07 6a 20 b6 a9 2d 9f 5e fd 39 38 a8 e8 a8 22 4b 4e d5 46 b5 1a 41 82 7b df 51 ef e2 30 ce d4 e3 d5 10 d5 57 0f 35 80 84 8f 1f be aa 27 c1 26 b8 a0 9e f6 64 1f 12 55 9f ed 7a 8c 9b ff bd 5e 5e af 54 79 43 55 77 d9 f5 b2 be 75 7d 52 56 65 09 12 de f6 91 d4 e7 d2 5b 7d 90 c1 7c b7 d6 00 19 42 49 ef cd a9 af b6 bf d0 03 c1 53 2e 2d bb a5 8e 2c d9 2d 15 d8 b4 1b 36 88 d2 21 42 47 c9 b1 aa 8e b9 0d ea 99 9b 7a 60 56 42 0d 77 ff 8d 64 75 c5 f9 2a f4 e7 0a 66 ea b8 b6 ba e5 7d b9 88 d7 0d bb f9 77 e4 8e ed 21 ab Data Ascii: HZjN1 )b65)6u<nG95);@Y:Fr6S3v7>W3ej -^98"KNFA{Q0W5'&dUz^^TyCUwu}RVe[}\|BIS.-,-6!BGz`VBwdu*f}w!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49889	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:01 UTC	486	OUT	GET /appsuite/ox-metrics.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:02 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1463 Date: Sat, 11 Jan 2025 23:12:02 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:02 UTC	1463	IN	Data Raw: 1b c5 0b 00 e4 7e af 66 ef 7e f3 f3 85 67 1b 9c 07 2c 25 5d ca ac d3 8a 37 ad 29 ba 35 67 61 9b 2d e0 07 68 9b cc 7d fb b5 aa 29 10 a1 44 22 b1 ce ce ec 72 26 86 8a b4 cf 45 a2 6a 28 a4 7a 8f f4 23 11 1b a3 61 97 52 22 1e 2c dd 6f c0 11 05 84 d9 86 80 50 bd 71 d5 06 c0 f3 2d c6 bc 16 8d 73 bb 30 67 2e d9 f7 2f b3 f6 d2 d4 3a 98 65 c6 25 0d 19 af 59 1a 1b 4c 18 c5 30 c7 91 b4 dd 26 84 cd 10 51 21 04 85 0d 17 b5 ee 65 69 2a 33 fa db a5 86 6d 2e 84 9f bf f7 29 f8 73 1b 8d d2 67 67 3c a9 73 bd e1 8e 0e b5 bd e5 e8 9c 3b 8c 02 1d b3 8e 2d 2f 7a d4 cb c6 b5 34 2a 9e 9f 09 e4 94 71 5d fc 69 d3 9a c3 4a bc 3a 08 ec 29 4c 0f 9a 8c d9 a8 3d a8 00 ea 61 bc 31 8a 62 e9 03 3f 33 89 2d 48 0f e8 76 59 d6 8b 43 2a ea 85 94 62 50 d0 68 4d ba 59 b4 6c aa b5 6f ae 27 22 b7 Data Ascii: ~f~g,%]7)5ga-h})D"r&Ej(z#aR",oPq-s0g./:e%YL0&Q!ei3m.)sgg<s;-/z4q]iJ:)L=a1b?3-HvYC*bPhMYlo'"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49890	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:02 UTC	510	OUT	GET /appsuite/io.ox/core/boot/login/redeem-token.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:02 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1159 Date: Sat, 11 Jan 2025 23:12:02 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:02 UTC	1159	IN	Data Raw: 1b a5 0a 00 c4 7f 6c aa f7 5c 4e 2f 74 41 2a 44 c7 24 13 cf 8c e9 91 b1 65 f3 b1 95 82 44 25 d9 1b 8b f6 fb 85 f4 45 a1 44 4a 7d d4 c6 ec ed 97 13 dc a5 12 92 35 b3 50 b4 91 82 26 2a bd f0 1a a9 d9 53 59 2a 90 a4 1e 6f 85 10 33 21 90 af b9 c7 79 c4 79 14 b4 21 d2 4a 5d c3 df ac b7 9d cc e2 c4 61 be 9e 9f 06 be 4b 44 53 e9 1e 12 16 72 2e a1 59 ec 81 b1 73 e5 d5 42 99 96 2c 2d 03 ae 0e b5 7f e2 64 fe ee 49 56 23 07 61 51 56 a4 82 8e 01 29 e5 cb 2a ba 22 9b f3 a8 fe c8 48 30 df 6b a0 15 85 8d a2 fe ff da 2d ae b8 64 db c5 2a 6e 58 c7 dc 5c 0e 52 07 da fd b0 d6 4c 84 7e 29 98 3f e8 cd 1e 52 5e 92 b1 e1 df 2f c7 47 d7 ba dd cf cb 45 3c bc 24 cc d4 b0 8e 5c 5d 86 b5 22 25 33 bc 92 5e c2 e4 6f 53 ed 1b ec 2d d1 b8 46 c2 fd e0 7f c0 f2 43 6c 58 17 7f 4e ce ef 6f Data Ascii: l\N/tAD$eD%EDJ}5P&SYo3!yy!J]aKDSr.YsB,-dIV#aQV)"H0k-d*nX\RL~)?R^/GE<$\]"%3^oS-FClXNo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49892	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:02 UTC	509	OUT	GET /appsuite/io.ox.alt-login/register.0cd180a7.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:02 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Length: 587 Date: Sat, 11 Jan 2025 23:12:02 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:02 UTC	587	IN	Data Raw: 69 6d 70 6f 72 74 20 65 20 66 72 6f 6d 22 2e 2e 2f 6f 78 2e 6a 73 22 3b 69 6d 70 6f 72 74 20 61 20 66 72 6f 6d 22 2e 2e 2f 75 6e 64 65 72 73 63 6f 72 65 2e 6a 73 22 3b 69 6d 70 6f 72 74 20 69 20 66 72 6f 6d 22 2e 2e 2f 6a 71 75 65 72 79 2e 6a 73 22 3b 63 6f 6e 73 74 20 72 3d 65 2e 73 65 72 76 65 72 43 6f 6e 66 69 67 26 26 65 2e 73 65 72 76 65 72 43 6f 6e 66 69 67 2e 6c 6f 67 69 6e 50 61 67 65 2c 6f 3d 61 2e 65 78 74 65 6e 64 28 7b 64 65 5f 44 45 3a 22 45 2d 4d 61 69 6c 22 2c 65 6e 5f 55 53 3a 22 45 6d 61 69 6c 22 2c 65 6e 5f 47 42 3a 22 45 6d 61 69 6c 22 2c 65 73 5f 45 53 3a 22 43 6f 72 72 65 6f 20 65 6c 65 63 74 72 5c 78 46 33 6e 69 63 6f 22 2c 65 73 5f 4d 58 3a 22 43 6f 72 72 65 6f 20 65 6c 65 63 74 72 5c 78 46 33 6e 69 63 6f 22 2c 66 72 5f 43 41 3a 22 Data Ascii: import e from"../ox.js";import a from"../underscore.js";import i from"../jquery.js";const r=e.serverConfig&&e.serverConfig.loginPage,o=a.extend({de_DE:"E-Mail",en_US:"Email",en_GB:"Email",es_ES:"Correo electr\xF3nico",es_MX:"Correo electr\xF3nico",fr_CA:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49891	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:02 UTC	508	OUT	GET /appsuite/io.ox/appsuite-tet/i18n-Bz_U5kkj.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:02 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 964 Date: Sat, 11 Jan 2025 23:12:02 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:02 UTC	964	IN	Data Raw: 1b 92 07 00 e4 ff a5 ea eb b5 97 13 21 0b 6a 40 f6 2d 95 1e 19 6b 29 2a 22 32 96 95 01 7a f0 bd a2 72 b5 a6 f6 7e a2 12 1f 47 6c 64 ac dd 20 82 03 74 2f 03 25 d9 be 90 45 12 be c6 77 aa aa 11 5d be d5 01 b3 57 08 dc 8d 57 b2 c3 b9 8d f3 93 21 37 b1 06 a7 18 33 6c f8 2b fc 22 d4 cd 90 ef 4e ea c0 ef dd 5b ab af af ee f9 9e 37 a9 2b f0 7d 0d 66 47 80 df 9a 69 13 56 17 cf 75 00 fe c3 e5 ad ce af 14 0e c8 89 64 2f e4 f8 bd d1 df 7c 72 e7 35 3c 96 93 5e 05 61 1d 23 e3 f9 81 ad 5c fd c8 d5 57 7c 4d bc fe e2 95 a0 09 8b ad 98 fd bf 04 09 34 94 dd af 97 2b 86 b4 8a 59 48 de 51 24 30 a0 dd 97 01 64 64 bf 2d 8c a1 5c 7e 38 59 25 24 ef f3 bf 45 8f be ad d0 ad 7c 87 bf 6a fe 53 24 35 23 96 79 d6 50 b9 d9 f9 b5 35 62 64 c3 07 54 df 80 96 90 9b 5e af 10 79 97 5e 92 72 Data Ascii: !j@-k)*"2zr~Gld t/%Ew]WW!73l+"N[7+}fGiVud/\|r5<^a#\W\|M4+YHQ$0dd-\~8Y%$E\|jS$5#yP5bdT^y^r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49894	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:02 UTC	514	OUT	GET /appsuite/uk.co.talktalk/login/register-50911d18.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:03 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Length: 398 Date: Sat, 11 Jan 2025 23:12:03 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:03 UTC	398	IN	Data Raw: 69 6d 70 6f 72 74 20 69 20 66 72 6f 6d 22 2e 2e 2f 2e 2e 2f 75 6e 64 65 72 73 63 6f 72 65 2e 6a 73 22 3b 69 6d 70 6f 72 74 20 74 20 66 72 6f 6d 22 2e 2e 2f 2e 2e 2f 6a 71 75 65 72 79 2e 6a 73 22 3b 69 6d 70 6f 72 74 20 65 20 66 72 6f 6d 22 2e 2e 2f 2e 2e 2f 6f 78 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 61 64 64 52 65 61 64 79 4c 69 73 74 65 6e 65 72 20 61 73 20 72 7d 66 72 6f 6d 22 2e 2e 2f 2e 2e 2f 69 6f 2e 6f 78 2f 63 6f 72 65 2f 65 76 65 6e 74 73 2e 6a 73 22 3b 65 2e 73 65 72 76 65 72 43 6f 6e 66 69 67 2e 74 61 6c 6b 74 61 6c 6b 26 26 72 28 22 63 61 70 61 62 69 6c 69 74 69 65 73 3a 73 65 72 76 65 72 22 2c 63 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 69 28 7b 22 23 66 61 76 69 63 6f 6e 22 3a 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 7d 29 2e 66 6f 72 45 61 Data Ascii: import i from"../../underscore.js";import t from"../../jquery.js";import e from"../../ox.js";import{addReadyListener as r}from"../../io.ox/core/events.js";e.serverConfig.talktalk&&r("capabilities:server",c);function c(){i({"#favicon":"favicon.ico"}).forEa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49893	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:02 UTC	501	OUT	GET /appsuite/io.ox/loginproxy/register.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:03 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 823 Date: Sat, 11 Jan 2025 23:12:03 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:03 UTC	823	IN	Data Raw: 1b 74 06 00 64 ad 69 fd f7 f3 02 6f b3 25 e3 64 bf 20 93 ab bf 5a d8 86 60 d8 cc 09 66 68 a9 c0 7c fb b9 ba 79 5d 89 2b 55 d2 62 3d 99 9c 4c c5 21 89 87 c6 6f 64 a2 68 e5 37 5a d9 23 44 6c 4d 71 c9 5d 96 b6 53 44 c4 47 9e 2c 96 a6 4b 4f 14 f0 cf 82 a7 a7 bd 1d cd d3 53 93 b7 ef 4c 3b 28 5a 6e b4 61 94 4b c5 46 aa 79 7e 97 35 03 59 6d 97 19 97 ff 03 30 88 ac e6 50 6a 7b 7f 3c bd 44 3e 10 91 a6 56 9a bc 45 ab 69 99 d9 07 4a 2e 3c 16 0a da c0 48 d0 31 2e b2 c2 d7 0b 89 88 ce e9 9c 3f 36 ab f7 c0 b7 6c 55 5d 42 30 58 ef 06 41 3d 07 10 a6 82 d5 6e b4 f5 61 e8 3d 5a 01 f0 44 c8 44 8e 0a f0 b1 76 01 dd 03 fe 50 78 2d 36 70 bd e4 c6 02 67 0e c1 cf 6f 1f ae 1f 27 db de 54 0b 97 3a 2d fc a5 cb ef 6a ce b9 a1 a9 36 63 b0 d3 2f bd 6f ec 60 a4 37 83 af f7 06 63 32 9b Data Ascii: tdio%d Z`fh\|y]+Ub=L!odh7Z#DlMq]SDG,KOSL;(ZnaKFy~5Ym0Pj{<D>VEiJ.<H1.?6lU]B0XA=na=ZDDvPx-6pgo'T:-j6c/o`7c2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49895	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:03 UTC	504	OUT	GET /appsuite/io.ox.iol-smb/preload-helper.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:03 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 514 Date: Sat, 11 Jan 2025 23:12:03 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:03 UTC	514	IN	Data Raw: 1b a7 03 00 64 35 d5 fe fd bc 64 75 91 00 a3 a6 df 18 6c f7 af fb d6 14 62 fa ac 43 2a 59 a3 d3 d6 fc 5f 13 75 a4 43 fd 51 77 47 ab 6e 6f b0 01 0f 33 c5 07 7e 6f aa 73 8f 89 f1 f2 21 b0 8e d2 a1 0f 99 d8 b1 a3 00 bf 1a 58 57 94 47 aa 56 34 75 29 c6 9c 1b ca e4 d6 28 2f 2f ea d3 c3 55 b9 3a 33 24 e9 2b 3d f1 54 e9 b9 49 76 26 47 6b 9c c6 38 e0 e6 d9 cd b0 09 66 5e a2 21 7f 06 6c b1 a7 b2 fc 9a d1 ee 97 ac d3 5c 50 9e bf bb 4b e1 d1 65 31 76 b3 01 67 1e ed 08 c2 47 68 8f 84 3b 10 5a 23 89 72 5e 3d 1d 0d ed d3 0f f9 c5 cd f2 be 52 58 8c f8 2e 7f 71 65 00 1d 89 9b 6b a4 9e cb f1 fe 8f 27 66 d6 af fd 95 d6 6d 37 1e 34 6b ec 43 82 8d 14 95 d8 76 68 ff e2 b0 4d 47 bc 6c d3 62 81 13 40 56 60 fb 23 fd 6a 26 05 6e b6 33 b3 ec ed 41 53 e6 39 18 88 49 3e 15 74 13 e5 Data Ascii: d5dulbC*Y_uCQwGno3~os!XWGV4u)(//U:3$+=TIv&Gk8f^!l\PKe1vgGh;Z#r^=RX.qek'fm74kCvhMGlb@V`#j&n3AS9I>t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49896	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:03 UTC	486	OUT	GET /appsuite/underscore.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:03 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 602 Date: Sat, 11 Jan 2025 23:12:03 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:03 UTC	602	IN	Data Raw: 1b a6 04 00 c4 7f 66 d3 3d cb f4 62 ad 43 65 12 23 22 32 f5 ec 5f 4a 9a 00 05 ae 75 ff ff 4f f5 18 15 80 df ff 37 9d 73 62 4e 69 50 04 cb dd 5e 9b 56 f1 02 56 6d 0d 7d 28 77 db 5f 08 d0 a4 95 cf 56 e1 46 f4 16 18 ef 86 f1 71 f2 7c 2f bf a4 72 6c eb 0a 77 55 3a 7e 5f 10 3a f8 7f 6c 5f 81 71 53 6b 38 c6 ef 91 56 74 5e db 57 df 17 fe 7b dc ca 5f 60 bc eb 09 37 d6 e9 af 8a c0 99 70 07 53 98 70 32 b9 4f 28 3b 32 bb 2b 18 9d ee 65 72 77 6c 5d 8b 76 86 ac 3b bf b9 e8 b4 17 ba 39 6f b1 97 9f 9c e4 70 82 e7 b4 68 2b 30 c6 89 a3 f8 18 43 43 ea 7c 65 ad 7a 34 f7 51 eb 0c aa 50 c4 bd 54 a9 7e 8e 91 3a ff aa c4 7e fc a1 7d 84 84 04 8e 41 34 47 bd f3 6b 76 91 43 57 4c b6 64 ef 08 a4 03 01 06 d0 61 bf 05 6b 5b b0 f4 9f ec fd 04 e9 11 aa 84 ef 9b 2e 92 c8 f4 1b c8 2b 3d Data Ascii: f=bCe#"2_JuO7sbNiP^VVm}(w_VFq\|/rlwU:~_:l_qSk8Vt^W{_`7pSp2O(;2+erwl]v;9oph+0CC\|ez4QPT~:~}A4GkvCWLdak[.+=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49897	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:03 UTC	482	OUT	GET /appsuite/jquery.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:04 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 612 Date: Sat, 11 Jan 2025 23:12:03 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:04 UTC	612	IN	Data Raw: 1b df 04 00 c4 7f d2 cd 9d 65 7a 98 25 95 09 aa 87 88 4c fe 43 8f c8 69 c5 ec fd e9 3c c2 ca f7 7b 65 ce 29 9b 2a 70 04 a3 d0 ec f8 35 1c d2 60 73 ff ac 8f 6a ab ef 54 90 e3 40 b7 56 3c 39 10 1b 7e 53 38 18 e8 ff c1 ae 84 e3 62 a9 70 3b 9d 71 14 11 95 1b 61 5d ad ec f7 d4 b9 9a c4 c3 28 d1 84 f3 35 2e 82 7c 40 3b a4 a8 76 5a fe e0 6a 3a 14 48 d2 a6 5c b9 e9 75 57 a2 bd 1c e1 09 f8 51 22 1f 1d 03 3a 31 0c 18 59 56 97 43 fe a5 11 56 0e 68 10 13 5f 1d 61 d1 80 16 a0 35 e0 ce 22 6b d0 2c 8c 3a f8 70 ad 5b 28 c4 50 c0 6b 4d b5 19 20 b9 23 77 ca 63 2c 29 2a 6f a0 2e 47 3b 3c 76 4a a0 54 21 1e 79 e4 89 57 07 98 ca 5f 9d d8 2f 47 94 cf 22 c1 9f 6d 60 ed c9 a0 7c ef dc c4 a0 8a 71 9e 9c 15 00 37 f0 9e 06 be 34 57 e1 f2 05 68 fa 43 f7 76 02 b7 38 44 67 f7 d0 75 81 Data Ascii: ez%LCi<{e)p5`sjT@V<9~S8bp;qa](5.\|@;vZj:H\uWQ":1YVCVh_a5"k,:p[(PkM #wc,)o.G;<vJT!yW_/G"m`\|q74WhCv8Dgu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49899	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:04 UTC	488	OUT	GET /appsuite/themes/uk.co.talktalk/favicon.ico HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:04 UTC	681	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: image/x-icon Dependencies: false Content-Length: 4286 Date: Sat, 11 Jan 2025 23:12:04 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:04 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a2 55 90 ff 99 46 86 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 9c 4a 88 ff 99 46 86 ff a2 55 90 ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 3c 7f ff 94 Data Ascii: ( @ UFJJJJJJJJJJJJJJJJJJJJJJJJJJJJFU<<<<<<<<<<<<<<<<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49900	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:04 UTC	791	OUT	GET /appsuite/api/login?action=autologin&client=open-xchange-appsuite&rampup=false&version=8.32.1 HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:05 UTC	653	IN	HTTP/1.1 200 OK X-Robots-Tag: none Expires: Sat, 06 May 1995 12:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Type: application/json;charset=UTF-8 Content-Length: 255 Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Sat, 11 Jan 2025 23:12:04 GMT Connection: close
2025-01-11 23:12:05 UTC	255	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6f 70 65 72 61 74 69 6f 6e 20 69 73 20 64 69 73 61 62 6c 65 64 2e 22 2c 22 65 72 72 6f 72 5f 70 61 72 61 6d 73 22 3a 5b 22 61 75 74 6f 6c 6f 67 69 6e 22 5d 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 22 50 45 52 4d 49 53 53 49 4f 4e 5f 44 45 4e 49 45 44 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 33 2c 22 63 6f 64 65 22 3a 22 53 56 4c 2d 30 30 31 35 22 2c 22 65 72 72 6f 72 5f 69 64 22 3a 22 2d 31 30 30 35 35 30 32 36 39 31 2d 39 35 38 32 39 38 39 30 22 2c 22 65 72 72 6f 72 5f 64 65 73 63 22 3a 22 54 68 65 20 61 63 74 69 6f 6e 20 5c 22 61 75 74 6f 6c 6f 67 69 6e 5c 22 20 69 73 20 64 69 73 61 62 6c 65 64 20 64 75 65 20 74 6f 20 73 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 7d Data Ascii: {"error":"The requested operation is disabled.","error_params":["autologin"],"categories":"PERMISSION_DENIED","category":3,"code":"SVL-0015","error_id":"-1005502691-95829890","error_desc":"The action \"autologin\" is disabled due to server configuration"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49901	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:05 UTC	489	OUT	GET /appsuite/api/login?action=autologin&client=open-xchange-appsuite&rampup=false&version=8.32.1 HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:06 UTC	653	IN	HTTP/1.1 200 OK X-Robots-Tag: none Expires: Sat, 06 May 1995 12:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Type: application/json;charset=UTF-8 Content-Length: 255 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Sat, 11 Jan 2025 23:12:05 GMT Connection: close
2025-01-11 23:12:06 UTC	255	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6f 70 65 72 61 74 69 6f 6e 20 69 73 20 64 69 73 61 62 6c 65 64 2e 22 2c 22 65 72 72 6f 72 5f 70 61 72 61 6d 73 22 3a 5b 22 61 75 74 6f 6c 6f 67 69 6e 22 5d 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 22 50 45 52 4d 49 53 53 49 4f 4e 5f 44 45 4e 49 45 44 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 33 2c 22 63 6f 64 65 22 3a 22 53 56 4c 2d 30 30 31 35 22 2c 22 65 72 72 6f 72 5f 69 64 22 3a 22 2d 31 30 30 35 35 30 32 36 39 31 2d 39 35 38 32 39 39 31 30 22 2c 22 65 72 72 6f 72 5f 64 65 73 63 22 3a 22 54 68 65 20 61 63 74 69 6f 6e 20 5c 22 61 75 74 6f 6c 6f 67 69 6e 5c 22 20 69 73 20 64 69 73 61 62 6c 65 64 20 64 75 65 20 74 6f 20 73 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 7d Data Ascii: {"error":"The requested operation is disabled.","error_params":["autologin"],"categories":"PERMISSION_DENIED","category":3,"code":"SVL-0015","error_id":"-1005502691-95829910","error_desc":"The action \"autologin\" is disabled due to server configuration"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49902	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:05 UTC	492	OUT	GET /appsuite/io.ox/core.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:06 UTC	708	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 47024 Date: Sat, 11 Jan 2025 23:12:06 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:06 UTC	15676	IN	Data Raw: 5b ce 87 43 55 48 57 3b ef 3d 00 aa 02 63 77 43 ac e3 7a be af f4 2d eb 63 5c 39 56 0e 6e 29 f6 84 00 f4 6f 66 a4 a1 7e cb 06 c9 6e ae f8 13 81 6e aa 57 33 71 93 40 25 88 12 0b 95 d8 ca 2a a2 a1 4f c4 5a c6 8b 33 9f 61 9d 61 9d 65 ae ff bd ef ff 6b af e4 c9 6e 1f c9 47 3e 54 10 7b e0 82 32 36 88 7e 14 74 cf 39 c6 9c ad 63 f6 56 5d f3 20 3d 03 54 e1 3d 00 55 24 c8 ae 22 48 f6 ff 7e ce b9 d6 de 67 ef 7d ef 03 ef 7b 60 ff 02 c8 ee 16 9a 32 c6 85 ea 1f e9 67 52 a6 2c 91 32 29 53 18 9e fb be f3 36 c4 59 37 7f d1 c0 41 08 a4 c6 7c 1d 6a 29 ed df af dc 90 84 17 33 0c 63 e8 38 c5 5c 29 14 d8 3d 28 ac a4 cc e7 37 f6 3f 76 7a db b0 aa 3a 67 4e f6 ce d6 d7 17 91 92 10 18 63 cc 2b 04 ae dd 24 b5 cc ca e7 cb c7 75 26 22 01 90 7d d9 9a fe 31 dc d3 df bb f8 95 9b 35 75 Data Ascii: [CUHW;=cwCz-c\9Vn)of~nnW3q@%*OZ3aaeknG>T{26~t9cV] =T=U$"H~g}{`2gR,2)S6Y7A\|j)3c8\)=(7?vz:gNc+$u&"}15u
2025-01-11 23:12:06 UTC	16384	IN	Data Raw: d2 44 2a 38 36 ad 15 76 c5 f7 8b bf 9c ec 0d 56 5d e8 a8 05 d3 3e d9 cd 16 49 2a 2f 14 3a 05 0b f7 1f 07 cb ee ba e8 37 2e aa 91 94 81 64 a5 15 d8 b9 31 f6 8d 38 01 8b 96 13 7c c1 88 36 41 c2 db 44 52 7a 68 94 bc 1f 7a 7b 04 e5 29 7a 69 c0 64 78 6a 5c b0 78 6a 50 c0 8e 48 1e ff 25 20 c8 54 87 1b 2b 32 33 00 d0 ac 99 87 9e 35 c8 31 dc 78 9a 7e 59 1b dd 36 2a 72 aa 84 e0 56 31 ec 1b be 57 cf 9d a7 24 97 26 c3 a3 f8 05 b2 8f 82 7b c3 9a ac 84 5d 42 f1 0b f6 72 0a 61 66 87 2a 2c 2e 0e 52 91 db cd 54 12 3e 4b 4a 30 8b 1d b8 17 5a f4 74 8d 71 1f f8 d8 c1 72 d7 2a 6c d1 a8 70 6f 7e d0 45 13 99 98 c4 c0 20 27 31 30 30 bc fc f0 13 9b 8d 87 64 a2 a3 22 8c 07 56 ed da c3 1a 2b 1d 60 0d 98 46 18 bc af 03 1f 83 21 5c 1a 37 02 b1 ed f7 ea 2c 6f 61 51 45 8d 51 03 7f 92 Data Ascii: D86vV]>I/:7.d18\|6ADRzhz{)zidxj\xjPH% T+2351x~Y6rV1W$&{]Braf,.RT>KJ0Ztqr*lpo~E '100d"V+`F!\7,oaQEQ
2025-01-11 23:12:06 UTC	14964	IN	Data Raw: 85 28 9d ab 7b 59 13 7b 83 f6 f6 c2 80 c8 fe 50 1c 8b 9d 04 f0 e6 b7 a1 46 48 e1 ce c4 66 62 36 17 56 97 4c a9 77 3d 5f 84 00 01 1b 04 4a dc 53 70 53 87 92 e8 85 89 ca ac 64 f9 4a 10 15 b5 00 ba 24 9f 4a 4e f5 41 f4 3d be 4f 2a b2 e8 16 f1 a2 17 06 8f ab cc d4 60 be 62 9b ac 6e a5 cb 6a 1e 73 36 1e bf cc 37 06 d8 ad 3e 08 ba a0 3f 94 41 06 5b 35 8e 1b 65 4e 9d 1e 55 29 d6 9b 3e 41 5d 6b 02 0e 30 76 1b 0d 46 5c e2 39 33 e0 19 59 5f d3 3b 0a f0 e7 8b fc a7 2d 7d 5b 00 f9 59 a9 bf 8c 91 f9 c9 bf da 92 96 82 b1 63 2c 84 de c0 92 2e 69 89 82 9b f9 cb bc 5b b8 f1 dd ff fe f3 c1 56 92 69 2b e7 8c 45 2d bc 3e 64 3d 69 d6 45 fe d2 bb f6 cd 58 0e f9 d2 7a e2 ff cd 81 07 c1 3e 83 1c 43 9c 76 d2 79 05 3b 89 66 40 ca b3 8b fe 2f a8 94 0a b7 2c bd 85 5f 69 c4 05 0f 6d Data Ascii: ({Y{PFHfb6VLw=_JSpSdJ$JNA=O*`bnjs67>?A[5eNU)>A]k0vF\93Y_;-}[Yc,.i[Vi+E->d=iEXz>Cvy;f@/,_im

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49906	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:05 UTC	499	OUT	GET /appsuite/io.ox/office/main.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:06 UTC	708	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 22371 Date: Sat, 11 Jan 2025 23:12:06 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:06 UTC	6335	IN	Data Raw: 5b 23 07 42 11 e9 49 ab c5 03 a0 22 30 6e e2 63 9d e7 fb 7f 35 cb 7a 9d 4e 12 7d c3 47 75 cf 92 6a 55 f5 31 6d f9 a4 ae 2a d9 ba 56 a2 ba 5c 3d 9a e3 93 f8 14 e1 02 f1 61 7c 40 12 6d 4f 12 6f 92 6e 10 ef fa df fb 7e da 2b 67 48 c9 47 0a 27 49 64 7c 34 86 b2 a1 09 15 05 9c bd d7 3e e7 d7 b3 55 ed 50 d5 40 03 55 00 81 b1 1c 8e f3 7f bb 73 ee 7d f7 35 c0 46 83 f5 87 6e be b3 26 92 32 65 e1 0f 12 29 cc ee 6b 59 93 64 b2 31 d4 fa 73 27 06 11 41 0e ba cc 3f 86 62 dd dc ff 89 80 b8 90 65 5a df 1f 4b 1f da 76 d7 41 f2 13 4e 11 11 2d dd 0e 51 2d 8b a4 b3 37 67 c9 76 fe 39 0d 85 20 08 a2 0c 8a f6 94 69 25 c8 7e 5b 2e 1f 49 4c b3 31 c6 80 cb b8 10 6a ee 43 fa ee 0f d5 b7 0f f3 85 ce 59 fc 02 35 52 7c d5 5c db c6 4b a2 32 d5 86 7f 93 7c 25 27 a3 f3 71 3a 49 5e b2 1a Data Ascii: [#BI"0nc5zN}GujU1m*V\=a\|@mOon~+gHG'Id\|4>UP@Us}5Fn&2e)kYd1s'A?beZKvAN-Q-7gv9 i%~[.IL1jCY5R\|\K2\|%'q:I^
2025-01-11 23:12:06 UTC	1398	IN	Data Raw: ff 96 3a 1f df 89 58 2d 00 9a a6 67 2c 5e ca e8 59 1b 2c 22 ca e8 59 9b fb ff 9d 30 6c b4 94 42 46 cf 56 df a3 24 20 3b 5e 2a 45 a3 be 71 69 3a ba 2a 92 89 87 b2 ec 94 13 c1 97 39 c4 39 97 f0 72 3c 82 0d 9d ba 14 78 9a 7d 48 42 0f 75 c1 e5 3b a7 e2 78 bc 27 ce 54 fb 9b 80 09 9d 77 23 7b 47 53 ef 11 2c f1 be d1 45 64 8b d2 14 b6 d1 97 d4 48 5a a2 8a ec ad be ce 88 35 c7 b0 88 36 18 01 36 9a 8c c6 08 d6 63 ca 28 4d 61 f5 54 ca 6c 6a ee 63 15 86 a8 b1 8b c2 ec 8c f6 22 6a 13 cc 6a 2f a6 a2 05 c8 a7 92 bf 3d 23 f9 db 46 9f 02 59 d3 12 2e 4e e7 de 53 9c d0 f5 c9 5c bd 90 03 fc e9 6f a9 db 89 a6 a5 fd 31 91 07 cd 32 33 b1 7a 96 57 55 20 9f 13 f9 ff 9b c9 63 0a 17 a6 66 fc 15 f9 28 f4 cb f5 c9 3f 0b 39 c0 4b 45 de 8f 75 c3 cb 49 ba d9 43 b3 72 72 4e 38 2a 23 27 Data Ascii: :X-g,^Y,"Y0lBFV$ ;^Eqi:99r<x}HBu;x'Tw#{GS,EdHZ566c(MaTljc"jj/=#FY.NS\o123zWU cf(?9KEuICrrN8*#'
2025-01-11 23:12:06 UTC	4194	IN	Data Raw: ec b4 ec d2 d9 19 02 67 bc 6e 4a 75 cd 68 6c 03 b9 2c 24 f1 17 36 f1 c5 fa 29 8a a9 9e 9d 94 6e 10 99 bb d0 56 eb ad ea c6 07 c3 7e 58 7b 0e a1 cf d4 3b c9 8c b0 96 30 bd a1 ba f2 5c e4 70 27 64 70 93 13 a7 5d f1 2c 04 8a bf 55 29 ac c7 1b fe e7 c0 75 18 21 07 4f 88 8e 1c 2a a3 3d aa 69 97 f0 30 3a ee 7c f9 e6 8b ae fa 79 ee 4a 38 d9 bd ce b2 28 a2 0f 86 b9 5f 39 bd e9 b3 98 77 ba 8c 99 28 d0 9c 9b 08 d5 45 47 3f 04 a8 83 b7 91 04 32 a3 57 28 6b b5 e7 6f ff cb bf f3 28 fb 55 c3 67 ac e9 e8 b0 2c 59 62 3c a7 f7 65 e9 f2 f7 24 39 6d 38 a2 5e aa ca 95 49 b1 55 f1 d4 ba 3f 3f 77 9b 7e c2 54 24 8c 9a cb b6 e9 be 3f 87 e9 bc de b1 4a 28 87 3e f7 cd b0 47 f4 a6 04 38 cb 64 08 81 5c 4c 94 e9 4a 97 4d 4c 61 80 8e 81 55 79 d0 9f 7a e9 18 ea e1 c1 7c 3c bb 0e 3c 40 Data Ascii: gnJuhl,$6)nV~X{;0\p'dp],U)u!O*=i0:\|yJ8(_9w(EG?2W(ko(Ug,Yb<e$9m8^IU??w~T$?J(>G8d\LJMLaUyz\|<<@
2025-01-11 23:12:06 UTC	1398	IN	Data Raw: c3 d8 d3 98 b4 1d 44 ed bd f9 9b 0d e7 e5 56 5a bb a3 a3 bf 15 5a a4 c8 d1 cc 3f 08 75 8b a0 13 80 55 27 f1 52 22 2c 9b 36 b8 5b 55 f3 c3 27 b4 03 bc 97 ea ec be 82 03 fd 29 50 5e 06 26 ae 6d 6c 68 15 c6 32 f8 1a c0 eb 67 25 c3 b9 22 50 30 6f 70 96 89 d7 ed 69 01 ff 97 5b fb 94 3a a9 19 82 b2 c3 62 0d 96 c8 4f 19 55 35 15 d9 c4 ba 5e 38 df 14 dd 4d 4c 3a 5c 8c e0 cb 6c db 21 64 4a 76 bd 7d ca c1 f6 20 69 c3 71 83 7a af 45 83 0c fc 4d 7f 2d d5 81 dc 8b f4 a4 68 a9 21 ea ca 10 4a 04 54 7a e4 aa e9 81 25 0e 08 09 89 30 0a 2b 3b 7a 60 a5 17 91 39 2b 4b 74 cc d3 49 b8 44 85 ec 59 12 67 cd 4b 34 ac 8c f3 ac 6a 37 a7 61 12 2e a8 0d 97 26 d2 0f 7d 3b cd 60 09 9f d4 6f 05 1b 59 b4 4b 36 77 c8 b1 08 75 6e 86 ed 74 e3 1a 2d 28 90 f8 36 b7 9c a2 64 5a a9 d5 69 a1 d6 Data Ascii: DVZZ?uU'R",6[U')P^&mlh2g%"P0opi[:bOU5^8ML:\l!dJv} iqzEM-h!JTz%0+;z`9+KtIDYgK4j7a.&};`oYK6wunt-(6dZi
2025-01-11 23:12:06 UTC	1398	IN	Data Raw: 24 35 9b 8b 06 eb 72 be 18 75 db ba 47 04 0d 13 d9 94 38 75 f9 e9 e4 37 6a a8 79 ad 7e 60 5c 17 0e 18 c0 8b 7d 48 4d 02 af 58 ab a6 d0 80 41 ca 2a 3b 28 a6 3b a3 8b ee 6f a6 8f 70 a1 6c 56 81 fb 32 3a 72 31 6d 93 24 b1 81 a2 24 f8 14 08 0f 37 ba 72 95 23 59 a4 95 3a aa 7b ac b7 d0 84 ec 48 7d 91 8b 17 27 93 32 c3 89 46 0f a8 03 2f 49 5b ad f6 50 ab 23 f4 31 60 c8 74 fd e1 0f 16 f7 07 39 0e cb 14 5c 72 92 2a 87 9d 99 df 0b cf b7 34 a7 51 aa 23 c7 bc 3e cb e5 f2 8f 12 10 4f 83 a9 b3 23 41 ad c2 62 4b 8c 84 86 f2 d4 a8 b4 ea a8 b1 17 59 7b 9d 1d 92 1c 78 2c 76 4e 1a d3 f0 bf 96 3b 4b ef d0 40 01 3d b1 b2 54 98 39 cf 88 ed 52 19 53 5e 22 76 ca 8c 57 5a 8e 15 d3 1c d8 00 41 46 d5 2c d7 cd 28 fb 68 fb 0a 34 a3 71 ae 5d 5f 88 1b 81 7b 69 c9 f5 f3 d8 f6 f0 a8 20 Data Ascii: $5ruG8u7jy~`\}HMXA;(;oplV2:r1m$$7r#Y:{H}'2F/I[P#1`t9\r4Q#>O#AbKY{x,vN;K@=T9RS^"vWZAF,(h4q]_{i
2025-01-11 23:12:06 UTC	7648	IN	Data Raw: cd 5c aa 3d 46 25 4d 6c e1 b5 21 f5 44 78 3d 5c ca 20 19 03 94 84 50 d3 74 ba 56 d3 27 57 0c d6 06 7b 08 61 b8 cb c9 89 57 ab 18 fe a1 81 ca e6 fc 1a f6 67 38 49 f6 47 a9 fc 31 40 4d c6 45 82 62 4c d0 6d 8e 0c 16 44 ed 53 af f7 9d 46 ee 5a b9 5e 89 81 0d b8 43 28 65 45 05 02 89 8c 59 40 7d 1b a0 f9 d6 04 40 bd 6f cf 21 9e a4 b0 0d e4 c3 d9 d5 63 b2 14 a5 fb d5 4d 31 96 18 a9 9d 2e 15 5c dc 3a 0e df 2e 94 9a e7 60 80 86 fc b7 cf 1f 9e b6 f7 b3 cd 6a 30 5d ec cb e3 b0 4e 5a 57 36 b1 9f 01 05 ca f2 1d 2d 9a c4 0b ed d8 57 ca dd 61 96 69 90 59 d2 29 67 04 72 76 60 a1 92 6b a3 e2 7b df 80 f9 f9 16 e6 c5 72 ff f1 8d 7d e0 ea 9d 1a 94 95 5e ae 3f 38 da 0f d8 1a d6 7f 7e 5c ae 67 f7 e3 c5 da 53 3d c6 7f 9f 7c 7e 3f 6e 76 ab c1 fe d3 b0 fd fb e4 eb 17 39 ac c6 b3 Data Ascii: \=F%Ml!Dx=\ PtV'W{aWg8IG1@MEbLmDSFZ^C(eEY@}@o!cM1.\:.`j0]NZW6-WaiY)grv`k{r}^?8~\gS=\|~?nv9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49903	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:05 UTC	504	OUT	GET /appsuite/io.ox/guidedtours/i18n.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:06 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 4326 Date: Sat, 11 Jan 2025 23:12:06 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:06 UTC	4326	IN	Data Raw: 1b 2a 50 44 54 93 7a 00 14 21 c3 dc 7e bf d2 ec f9 ea cb e9 9b 0d da 00 ed 90 35 21 3a 65 79 43 ae 81 ea 6e 56 34 c5 a3 90 34 ed e0 7f bf b4 4f ba 29 51 94 20 df 3d e7 86 ad 0e 52 55 4b f3 e7 87 10 35 eb 90 ef 0b 92 5a 72 08 01 19 ba cc 4c bf 01 b4 99 21 59 68 43 d6 a3 4f 88 09 df 65 6c d5 05 0b 62 2c b8 57 f4 4d 86 ab ec 55 5a 08 21 45 22 03 d7 3d 54 f7 16 1f 7c 36 7d 7b cb 3d 0b ae 88 17 cc d2 08 ed 45 63 4d e9 ff 13 f7 4a 87 18 dc e9 66 50 b7 12 b3 34 c6 9a b7 6f 56 ee ac 72 ff 3d 76 e7 d4 38 eb 6f ba f7 bc 8d 7a 87 11 f9 df 77 37 6e b9 5b b7 71 eb e6 f2 ce 1d 77 e3 de 8d 1b c6 9a 97 a4 cd ed 76 fe df 95 6a 96 66 15 27 69 e3 8c c7 35 b2 72 c6 7e 4b 7c ef b8 ef ba 65 24 2e 1f 1a db 02 27 97 86 f3 bf 4f 4e 09 ca eb b7 b8 15 d3 64 96 a6 f9 fe 05 ec af 03 Data Ascii: *PDTz!~5!:eyCnV44O)Q =RUK5ZrL!YhCOelb,WMUZ!E"=T\|6}{=EcMJfP4oVr=v8ozw7n[qwvjf'i5r~K\|e$.'ONd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49907	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:05 UTC	498	OUT	GET /appsuite/io.ox/guard/i18n.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:06 UTC	707	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 8968 Date: Sat, 11 Jan 2025 23:12:06 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:06 UTC	3540	IN	Data Raw: 1b b4 ab 44 14 f5 21 40 11 32 cc ed ff ab 6a fd 99 d6 4d 75 97 3b b2 3d e7 10 54 d8 cc 89 72 1c 39 d0 54 98 14 20 e2 51 c2 8a c4 e3 e2 81 a2 b8 3f 36 ed ef db ef f7 6f 66 af 74 32 3e 49 7d 14 d0 86 b1 54 75 6f 3d aa a7 bb 71 ce cc 00 38 07 0b d0 ac a3 f1 bb 72 a6 aa de eb 9e 9e c1 ae 88 a5 5d 5a 1b c9 05 99 f1 99 94 29 4b 7e a8 90 0a b3 01 24 1f 7d bd c6 7f 5a fe fd 24 6d 67 6e 15 15 51 10 10 df 6e ee bd 68 7d 3e 6f b9 4b 32 fb d3 2c 81 2a 6a 08 81 77 a4 bb 8f e8 f9 3f a2 b1 7d a4 66 46 a1 f8 8f 46 69 c4 87 4d ab bd 51 7c 88 e2 a8 0b ff 12 75 2f 1b 6b d4 59 bb 11 b5 e2 28 8d a2 38 ca 1f 56 ea dc d3 20 7e 58 5d e8 40 59 7f ac 5a d0 de ca 9b b0 e5 0f 5e 8d 47 6a 32 c1 f8 b7 f4 a7 5f d5 e8 97 d1 28 8a a3 3b 2d 41 5d 7b fe 9f cb 3e 4a a3 95 ad 39 6c 7b 5c 79 Data Ascii: D!@2jMu;=Tr9T Q?6oft2>I}Tuo=q8r]Z)K~$}Z$mgnQnh}>oK2,*jw?}fFFiMQ\|u/kY(8V ~X]@YZ^Gj2_(;-A]{>J9l{\y
2025-01-11 23:12:06 UTC	4194	IN	Data Raw: 53 4b 1b 9b e8 8e 92 ba 31 4b dc 59 88 24 82 eb 42 ef b5 32 8d c7 a8 12 73 6d e8 0c bc aa 5e ae b0 ae 3f d1 0b 70 bb 5a 8e 54 6e db 2c 1e 10 91 12 f1 9d b5 e0 9c cd 7d 86 f5 fe 0d e5 e6 e0 8a af 4b c6 06 8f a2 5e 84 62 0e fe 68 ac c3 4b a1 05 7d 2c e8 a3 c8 1e 24 7b e9 11 24 87 70 48 79 b1 04 97 ed a5 48 ea 85 2b a6 bf 33 f8 9d fc aa 48 b4 9a cb 4d cd 05 95 ba 6a e4 05 61 7c 50 04 77 3b 3c 31 e8 dd 01 ed 11 57 b0 28 f1 cd e5 60 19 6a 9e 0c cc bf 37 da f0 bf 98 4f b5 64 d3 9c 97 7a 98 3e d8 78 ae 9b e8 38 bd 00 85 ee 81 e9 dd 5f a2 31 54 f1 36 16 a0 70 33 e3 1d c3 b0 36 ed 21 72 5b f3 c3 95 3e ca b9 8d ae d9 03 51 6c 76 5f 9b 43 ac ab 83 d8 cb 88 38 d9 36 e2 88 61 69 44 81 7a 39 0a 90 34 28 6d 48 84 cf 8c d8 1f 6d 9b 65 6e 43 29 d5 ea 44 a1 94 4d 2a 7d 1d Data Ascii: SK1KY$B2sm^?pZTn,}K^bhK},${$pHyH+3HMja\|Pw;<1W(`j7Odz>x8_1T6p36!r[>Qlv_C86aiDz94(mHmenC)DM*}
2025-01-11 23:12:06 UTC	1234	IN	Data Raw: c3 0f 41 ff 9e c9 67 52 f7 49 8e 62 fd 27 de 40 bd b8 b2 4e 71 92 23 2c 12 9d cc cd 28 0b ff 11 e4 da 7a 6b 28 85 93 10 55 63 ed 38 28 f6 ac 7e 93 56 37 0c 16 e5 91 a9 16 7f 20 1f 5a 89 7b 84 27 eb 72 7b 7a 57 5a 60 1c c5 ed 7f 43 45 c5 8a f8 e6 3e 94 51 34 b8 79 5d 19 99 3c 49 79 80 2f 00 74 db 3d 74 b1 af 25 b1 d8 e4 e7 2e 49 19 0a ec f1 83 ab fa 7d ea 72 fe 59 57 97 af 20 bf 3d 5f e2 b4 f9 6d fd 44 13 0d b2 33 27 de a4 c8 1e 24 cd 78 d2 6c be 3a 69 ca 03 ee ef 06 2e 0f 0d 15 41 82 fe 7c 3f 8e 27 07 ba 8f 27 d4 0a dd 05 1d 18 35 3f a3 b7 ec 01 13 e2 03 2a b0 c7 31 69 a4 0c de 09 fa 48 bb ef ad 22 2e 33 f8 b0 e2 da d2 27 24 b3 ce 43 79 75 c2 c4 0b 9c ed 32 93 92 26 e6 77 dc 0b aa 9f 7a 1f 7f 5a fd 7e d1 ec 69 4e 05 2c a0 2f 0c 15 a1 b7 e2 25 c7 43 1f 7c Data Ascii: AgRIb'@Nq#,(zk(Uc8(~V7 Z{'r{zWZ`CE>Q4y]<Iy/t=t%.I}rYW =_mD3'$xl:i.A\|?''5?*1iH".3'$Cyu2&wzZ~iN,/%C\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49904	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:05 UTC	500	OUT	GET /appsuite/io.ox/antiphishing.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:06 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 833 Date: Sat, 11 Jan 2025 23:12:06 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:06 UTC	833	IN	Data Raw: 1b 7c 09 00 c4 2f 9b fa 93 6b 2e a7 f7 f7 97 86 48 e9 90 d2 db 1a 16 2c 17 89 91 64 f7 6c bf 9f da a2 f5 b5 3a c9 fb 25 c4 71 3a 20 3e 8f 46 a1 05 94 66 72 93 8e 6c 48 d3 8a 4d 3c 86 1d 50 cf 1e c4 4d cb da 88 6c 9b 56 47 b9 62 31 40 09 35 76 a9 7e bf a4 e2 aa 82 f5 50 55 d5 b5 af 6b 53 b2 59 12 47 11 49 f7 11 75 e6 4b 9d ab ed 4e e9 d5 ad a5 84 28 a2 cb 8b 5b b5 e3 c4 be 15 b5 cb 41 aa ae 54 d7 d2 d5 7e 07 fe fa f5 6a 7a 41 cd cc 63 76 26 99 59 52 d3 8b d3 d3 14 d1 29 fb a0 9e 96 fe b1 d6 51 42 b7 ba 6d 43 7d 80 7d a7 c5 8b c1 6a 28 2c 6c f6 ac 6b 5a 64 88 ca ea 5c 69 c3 0f cc 88 ac 53 a4 a8 e6 84 c4 7c 1c 6c 8f 4b 6f 23 d4 ad 70 9b 12 d2 f2 03 b0 da cc 45 e9 99 65 a3 72 9b 6d 36 73 79 8c 49 7a 9d 22 b2 83 41 99 75 08 25 14 a4 1f a6 60 ee 4e 91 ed 4c 6b Data Ascii: \|/k.H,dl:%q: >FfrlHM<PMlVGb1@5v~PUkSYGIuKN([AT~jzAcv&YR)QBmC}}j(,lkZd\iS\|lKo#pEerm6syIz"Au%`NLk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49905	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:06 UTC	502	OUT	GET /appsuite/io.ox.blackwhitelist.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:06 UTC	703	IN	HTTP/1.1 404 Not Found Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: text/html; charset=utf-8 Content-Length: 10838 Date: Sat, 11 Jan 2025 23:12:06 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:06 UTC	2169	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 Data Ascii: <html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { width: 100%; height: 100%; display: grid; font-family: -apple-system, Bli
2025-01-11 23:12:06 UTC	2796	IN	Data Raw: 36 32 37 2c 36 36 2e 33 39 33 30 37 36 37 20 4c 34 33 2e 36 37 32 35 37 33 37 2c 32 36 2e 35 32 30 39 39 38 39 20 4c 34 33 2e 36 37 32 35 38 32 33 2c 32 36 2e 35 32 30 39 39 38 39 20 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 53 68 61 70 65 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 38 30 2e 37 34 34 32 38 32 2c 33 33 2e 36 37 31 32 33 32 31 20 43 38 30 2e 37 34 34 32 38 32 2c 32 33 2e 35 38 31 33 38 39 35 20 38 33 2e 35 34 34 36 36 2c 31 35 2e 34 34 36 39 36 31 20 38 39 2e 31 34 35 34 32 34 37 2c 39 2e 32 36 37 39 32 30 36 34 20 43 39 34 2e 37 34 36 31 38 30 38 2c 33 2e 30 39 30 31 34 32 38 20 31 30 32 2e 36 33 35 37 32 36 Data Ascii: 627,66.3930767 L43.6725737,26.5209989 L43.6725823,26.5209989 Z" id="Shape"></path> <path d="M80.744282,33.6712321 C80.744282,23.5813895 83.54466,15.446961 89.1454247,9.26792064 C94.7461808,3.0901428 102.635726
2025-01-11 23:12:06 UTC	2796	IN	Data Raw: 35 38 31 32 2c 35 38 2e 35 38 38 33 31 31 39 20 36 39 2e 33 37 32 33 32 32 2c 36 36 2e 34 39 31 36 32 34 33 20 36 30 2e 34 32 38 35 31 38 38 2c 37 32 2e 34 33 39 35 33 39 39 20 43 35 36 2e 35 32 33 34 39 36 33 2c 37 35 2e 30 33 36 34 36 34 32 20 34 34 2e 34 38 31 31 33 33 39 2c 38 33 2e 37 35 39 33 36 32 36 20 34 30 2e 36 33 39 33 33 37 35 2c 37 39 2e 31 38 39 39 35 39 35 20 43 33 39 2e 34 35 35 37 35 30 37 2c 37 37 2e 37 38 32 32 31 32 39 20 33 39 2e 35 38 31 34 39 2c 37 35 2e 34 39 31 34 33 39 35 20 34 30 2e 31 30 38 31 34 32 32 2c 37 33 2e 35 31 31 31 32 38 34 20 43 34 31 2e 32 36 35 35 36 39 35 2c 36 39 2e 31 35 39 30 35 37 35 20 34 33 2e 39 35 37 37 39 36 37 2c 36 35 2e 33 36 31 34 32 31 35 20 34 36 2e 35 38 33 31 39 39 35 2c 36 31 2e 37 30 32 32 32 Data Ascii: 5812,58.5883119 69.372322,66.4916243 60.4285188,72.4395399 C56.5234963,75.0364642 44.4811339,83.7593626 40.6393375,79.1899595 C39.4557507,77.7822129 39.58149,75.4914395 40.1081422,73.5111284 C41.2655695,69.1590575 43.9577967,65.3614215 46.5831995,61.70222
2025-01-11 23:12:06 UTC	2796	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 6f 6c 79 67 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 50 61 74 68 22 20 66 69 6c 6c 3d 22 23 42 46 44 33 46 42 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 73 3d 22 34 35 38 2e 39 37 39 34 30 37 20 31 39 30 2e 34 35 38 34 31 20 34 34 39 2e 37 38 39 30 36 33 20 31 38 35 2e 37 39 33 36 32 37 20 34 39 34 2e 34 38 38 36 32 37 20 39 37 2e 37 32 39 36 39 33 31 20 34 33 36 2e 35 35 35 34 30 32 20 31 34 2e 35 37 33 37 35 39 33 20 34 34 35 2e 30 31 31 30 35 34 20 38 2e 36 38 32 38 30 39 30 34 20 35 30 36 2e 34 36 38 34 35 31 20 39 36 2e 38 39 36 38 37 32 38 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </polygon> <polygon id="Path" fill="#BFD3FB" fill-rule="nonzero" points="458.979407 190.45841 449.789063 185.793627 494.488627 97.7296931 436.555402 14.5737593 445.011054 8.68280904 506.468451 96.8968728">
2025-01-11 23:12:06 UTC	281	IN	Data Raw: 57 68 6f 6f 70 73 2e 2e 2e 27 29 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 23 64 65 74 61 69 6c 73 27 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 73 74 61 74 69 63 47 74 28 27 54 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 2e 27 29 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 75 70 64 61 74 65 4d 65 73 73 61 67 65 73 28 29 0a 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 61 6e 67 75 61 67 65 43 68 61 6e 67 65 27 2c 20 75 70 64 61 74 65 4d 65 73 73 61 67 65 73 29 3b 0a 20 20 20 20 7d 29 28 29 0a 20 20 3c Data Ascii: Whoops...') document.querySelector('#details').innerHTML = staticGt('The page you are looking for could not be found.') } updateMessages() document.documentElement.addEventListener('languageChange', updateMessages); })() <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49908	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:06 UTC	496	OUT	GET /appsuite/io.ox.dumpster.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:07 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 466 Date: Sat, 11 Jan 2025 23:12:07 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:07 UTC	466	IN	Data Raw: 1b 68 03 00 e4 de 77 f3 f1 cb cf d7 ed 26 96 4b 65 9e 52 26 aa 59 73 40 8a a4 98 0d 9c 13 58 57 45 51 f1 a8 c0 14 3a 5d e0 54 74 2c e3 df 6e 3a 57 48 88 9b 53 5f a1 bd c6 09 11 68 ba 01 c7 63 cc 6d 40 e7 86 86 a8 a2 42 65 9e 06 76 1e e9 2c 83 f5 59 32 dd 7a d6 ee 70 0b 05 4e eb 19 ba 6e 97 ad a1 83 6e b9 4d 4f 0e 15 a2 c0 bb db 27 3a 6c 71 62 8b 74 a4 3b 2c 3a 49 0f dc b3 ed 0e 95 e9 ff c9 df a2 30 84 60 53 85 c1 aa 1f fa 3e 0a bc d2 ed 0e 7d 8f fe 8e 6b a1 c2 8e ad bb 4e 65 08 05 22 dd eb bb 56 35 05 3d 94 54 74 66 1b 7a 25 86 59 44 11 99 5a 85 dc f8 3d 3d f0 87 70 07 e8 89 75 1d 15 86 f5 01 28 54 0d 93 0d b6 1b 64 5c b2 57 35 bc a8 24 28 a2 c0 c0 53 94 47 e8 e9 1e 0f 3a 1e ae 85 08 5e 6f 4c 8c ee 71 75 68 b8 5d 25 6e d1 71 23 71 a0 ae 46 85 db ff b6 33 Data Ascii: hw&KeR&Ys@XWEQ:]Tt,n:WHS_hcm@Bev,Y2zpNnnMO':lqbt;,:I0`S>}kNe"V5=Ttfz%YDZ==pu(Td\W5$(SG:^oLquh]%nq#qF3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49911	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:06 UTC	508	OUT	GET /appsuite/io.ox/externalcontentpopup.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:07 UTC	706	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 403 Date: Sat, 11 Jan 2025 23:12:07 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:07 UTC	403	IN	Data Raw: 1b a0 02 00 c4 ef d5 e9 eb 9a 65 52 7f 81 74 a6 b2 1c 15 90 55 fb 12 96 1c a2 81 d3 01 fb de bd bd 87 19 46 12 9d 8b 52 96 4e 5d 62 b8 7c 01 9c 40 bb 78 6d 8b 40 b9 31 eb 11 b0 8d e9 3c a5 14 0d 28 04 4b d4 7f 2e 24 93 65 b4 66 68 80 23 da 0d 9e a4 f2 2c 48 14 f9 09 5d b7 8a e5 94 0e 3a c5 16 3d 39 28 40 e2 ee f6 89 0e 9b 0c 73 43 47 a6 cd ae 93 f4 c0 dd 72 4b 80 49 fb 7f 0a 36 29 8a 44 b8 a1 a2 70 25 88 82 00 12 57 a6 d5 a6 dd e9 cf b8 26 14 da e5 ba 6b 97 06 22 af 14 7b 3d d7 ac 02 b2 46 49 c9 64 65 6b d6 65 38 3b 90 7d 1a 2b b0 fd 3d 3d 18 0f b2 6e d1 13 9b 3a 14 9a 7c 81 c8 57 53 a6 72 b8 65 29 75 c9 5e 35 e5 25 26 f1 0e 24 60 20 08 55 e0 ed 21 f7 db 3e cb e5 58 7c ec 28 cd f5 c3 70 20 dd 95 02 37 e9 d8 26 8e e2 43 28 6c fd 97 db 95 0f 6a 9d a6 a9 11 Data Ascii: eRtUFRN]b\|@xm@1<(K.$efh#,H]:=9(@sCGrKI6)Dp%W&k"{=FIdeke8;}+==n:\|WSre)u^5%&$` U!>X\|(p 7&C(lj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49912	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:06 UTC	492	OUT	GET /appsuite/io.ox.gdpr.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:07 UTC	703	IN	HTTP/1.1 404 Not Found Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: text/html; charset=utf-8 Content-Length: 10838 Date: Sat, 11 Jan 2025 23:12:07 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:07 UTC	10838	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 Data Ascii: <html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { width: 100%; height: 100%; display: grid; font-family: -apple-system, Bli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49909	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:07 UTC	503	OUT	GET /appsuite/io.ox/mandatorywizard.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:07 UTC	703	IN	HTTP/1.1 404 Not Found Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: text/html; charset=utf-8 Content-Length: 10838 Date: Sat, 11 Jan 2025 23:12:07 GMT Referrer-Policy: origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:07 UTC	4965	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 Data Ascii: <html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { width: 100%; height: 100%; display: grid; font-family: -apple-system, Bli
2025-01-11 23:12:07 UTC	1398	IN	Data Raw: 35 38 31 32 2c 35 38 2e 35 38 38 33 31 31 39 20 36 39 2e 33 37 32 33 32 32 2c 36 36 2e 34 39 31 36 32 34 33 20 36 30 2e 34 32 38 35 31 38 38 2c 37 32 2e 34 33 39 35 33 39 39 20 43 35 36 2e 35 32 33 34 39 36 33 2c 37 35 2e 30 33 36 34 36 34 32 20 34 34 2e 34 38 31 31 33 33 39 2c 38 33 2e 37 35 39 33 36 32 36 20 34 30 2e 36 33 39 33 33 37 35 2c 37 39 2e 31 38 39 39 35 39 35 20 43 33 39 2e 34 35 35 37 35 30 37 2c 37 37 2e 37 38 32 32 31 32 39 20 33 39 2e 35 38 31 34 39 2c 37 35 2e 34 39 31 34 33 39 35 20 34 30 2e 31 30 38 31 34 32 32 2c 37 33 2e 35 31 31 31 32 38 34 20 43 34 31 2e 32 36 35 35 36 39 35 2c 36 39 2e 31 35 39 30 35 37 35 20 34 33 2e 39 35 37 37 39 36 37 2c 36 35 2e 33 36 31 34 32 31 35 20 34 36 2e 35 38 33 31 39 39 35 2c 36 31 2e 37 30 32 32 32 Data Ascii: 5812,58.5883119 69.372322,66.4916243 60.4285188,72.4395399 C56.5234963,75.0364642 44.4811339,83.7593626 40.6393375,79.1899595 C39.4557507,77.7822129 39.58149,75.4914395 40.1081422,73.5111284 C41.2655695,69.1590575 43.9577967,65.3614215 46.5831995,61.70222
2025-01-11 23:12:07 UTC	2796	IN	Data Raw: 30 38 37 37 35 32 20 34 35 2e 30 34 36 35 39 36 2c 36 38 2e 30 38 37 30 33 39 35 20 34 33 2e 36 36 31 39 30 38 36 2c 36 34 2e 31 36 33 38 34 34 35 20 43 34 32 2e 31 37 34 36 35 32 38 2c 35 39 2e 39 35 30 30 36 30 33 20 34 30 2e 34 36 33 31 32 35 35 2c 35 35 2e 38 34 30 32 37 30 32 20 33 38 2e 34 33 36 32 34 39 33 2c 35 31 2e 38 35 34 30 31 32 32 20 43 33 34 2e 38 34 30 33 38 33 37 2c 34 34 2e 37 38 32 30 30 38 36 20 33 30 2e 34 30 31 30 33 31 33 2c 33 38 2e 31 33 38 32 32 38 33 20 32 35 2e 32 33 34 38 34 35 2c 33 32 2e 31 31 36 37 38 30 38 20 4c 32 35 2e 32 33 34 38 33 36 35 2c 33 32 2e 31 31 36 37 36 33 36 20 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 41 31 44 34 43 39 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 Data Ascii: 087752 45.046596,68.0870395 43.6619086,64.1638445 C42.1746528,59.9500603 40.4631255,55.8402702 38.4362493,51.8540122 C34.8403837,44.7820086 30.4010313,38.1382283 25.234845,32.1167808 L25.2348365,32.1167636 Z" fill="#A1D4C9"></path>
2025-01-11 23:12:07 UTC	1679	IN	Data Raw: 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 68 31 20 69 64 3d 22 77 68 6f 6f 70 73 22 3e 3c 2f 68 31 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 65 74 61 69 6c 73 22 20 2f 3e 0a 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 3e 0a 20 20 20 20 28 61 73 79 6e 63 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 27 54 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 2e 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 64 65 3a 20 27 44 69 65 20 53 65 69 74 65 Data Ascii: /g> </g> </g> </svg> <h1 id="whoops"></h1> <div id="details" /> </div> <script type="module"> (async () => { const messages = { 'The page you are looking for could not be found.': { de: 'Die Seite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49914	153.92.124.237	443	4944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 23:12:07 UTC	505	OUT	GET /appsuite/io.ox/minimalapiconsent.en_GB.js HTTP/1.1 Host: apps.talktalk.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 version: 1703779530 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.talktalk.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: appsuite-middleware-route="d39ab719fe553e02"
2025-01-11 23:12:07 UTC	703	IN	HTTP/1.1 404 Not Found Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Version: 1703779530 Latest-Version: 1703779530 Content-Type: text/html; charset=utf-8 Content-Length: 10838 Date: Sat, 11 Jan 2025 23:12:07 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.talktalk.co.uk Referrer-Policy: origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2025-01-11 23:12:07 UTC	10838	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 Data Ascii: <html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { width: 100%; height: 100%; display: grid; font-family: -apple-system, Bli

Target ID:	0
Start time:	18:11:06
Start date:	11/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:11:10
Start date:	11/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2000,i,17465243282939486776,3817739708234424106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:11:17
Start date:	11/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://talktalk770.weebly.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://talktalk770.weebly.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1024

Chrome Cache Entry: 1030

Chrome Cache Entry: 1031

Chrome Cache Entry: 1033

Chrome Cache Entry: 1034

Chrome Cache Entry: 1035

Chrome Cache Entry: 1036

Windows Analysis Report
https://talktalk770.weebly.com/